last executing test programs: 42.768408235s ago: executing program 2 (id=756): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x20000, 0x0, 'queue1\x00', 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000020c0)=ANY=[@ANYBLOB="bbbbbb9cbbbbcaf6e222e6aa86dd60430093004c3a00fe800000000000000000000000000000ff020000000000000000000000000001050090780000000000000000000000000007a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373242b02fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34"], 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x48800) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84000200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x33}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x8000) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000080)=0x1) 42.592761547s ago: executing program 2 (id=757): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7, 0x400082) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x1f, &(0x7f0000000040)=[{0x3b, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x1, @uvalue=0x4}, {0x1, @uvalue=0x6}, {0x1, @uvalue=0x6}]}, 0x8}, {0x18, '\x00', @data=0xebe, 0x6}, {0x3a, '\x00', @buffer={"83e088a4977c9f00cf60eafdbf2164901a811440e2873d9b912c7827c9e49316", 0x20}}, {0x38, '\x00', @st={0x4, [{0x0, @uvalue=0x6}, {0x0, @svalue=0x5}, {0x3, @uvalue=0xfb}, {0x3, @svalue=0x7f}]}, 0xf}, {0x1d, '\x00', @data=0x9, 0x1}]}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7, 0x400082) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x1f, &(0x7f0000000040)=[{0x3b, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x1, @uvalue=0x4}, {0x1, @uvalue=0x6}, {0x1, @uvalue=0x6}]}, 0x8}, {0x18, '\x00', @data=0xebe, 0x6}, {0x3a, '\x00', @buffer={"83e088a4977c9f00cf60eafdbf2164901a811440e2873d9b912c7827c9e49316", 0x20}}, {0x38, '\x00', @st={0x4, [{0x0, @uvalue=0x6}, {0x0, @svalue=0x5}, {0x3, @uvalue=0xfb}, {0x3, @svalue=0x7f}]}, 0xf}, {0x1d, '\x00', @data=0x9, 0x1}]}) (async) 42.591747812s ago: executing program 2 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000020000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 42.394089034s ago: executing program 2 (id=760): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x1, 0x0, 0xffffffffffffffff}) ioctl$KDDELIO(r0, 0x4b35, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x102000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000100)={0x20, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 42.39126964s ago: executing program 2 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460007003400768aae00080026006c0900002c0051"], 0x5c}, 0x1, 0x0, 0x4000000, 0x80}, 0x4804) 42.223964328s ago: executing program 2 (id=765): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad1", 0x42}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f56", 0xe5}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c1", 0xcd}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de", 0x53}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df532", 0x66}, {0x0}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.144835208s ago: executing program 32 (id=765): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad1", 0x42}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f56", 0xe5}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c1", 0xcd}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de", 0x53}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df532", 0x66}, {0x0}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 37.483204173s ago: executing program 1 (id=845): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 37.482683413s ago: executing program 1 (id=847): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, r1}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x85) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8004, 0x56, @value=0x4}) (async) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799", 0x6, 0xfffffffffffffffe) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) getpid() (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) (async) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$TCFLSH(r8, 0x400455c8, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) (async) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x180000004000080, 0x8000001, 0x8, 0x1ff, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xdb) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 37.427752899s ago: executing program 1 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 37.353068587s ago: executing program 1 (id=852): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x2a201, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0xff}, &(0x7f0000000340)=0x8) 37.224367861s ago: executing program 1 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000003e80000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 37.16392709s ago: executing program 1 (id=855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) (async) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000004000000000000800600000007000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000000075cf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f00000001c0)="79e9c1fdc2504e9903a854e7b6182197f2fc3929454d5e4c940e55e2df0280dc02697a2185fbc171e88e4403d26bc9c5bae138ecd653d4cba992a556ba4fac0879bc481f36c85b1cc728e79f68a39f0294a83a4fc371384ea9c0a7e01fd91483c261ec4a6ead044d8b3c2892b7cfca9210b15e1491109ab28778f6654efd7d397da44775dbfb8de2760b1cab93aed97d635e028fc1edbd710ccf3825b95eca04f5716fafa4e75b84d6e9de948b8e51182fd7261f5b67eb351dee29a09d43b530ea731a34b6f1ab3310bbec799e51f3f8a013654a1c15793a64", &(0x7f00000003c0)}, 0x20) read$FUSE(r1, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x100, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x100, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xe9) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) (async) r7 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRESHEX=r12], 0x15) (async) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRESHEX=r12], 0x15) dup3(r9, r8, 0x0) (async) dup3(r9, r8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 24.853612765s ago: executing program 0 (id=1092): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x420201) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x401, 0x2f}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="420f01c90f013fd35a00460f00921ea100000f09400f01df66b892000f00d8ffe66736260f74dc6466460f0b", 0x2c}], 0x1, 0x70, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x438000, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f0000000140)={0x2, &(0x7f0000000080)="f16d2c6a015355f247c73d45be51e6c64b7ab34487f3716989fb2ebfa6cbe8c05599958953d7363c96c94b932a010338de9275fdba2ec5d2dbd907d4d411106d9c51ceccb57ad46a3a2ceffc26d24c091ae1d1f8c9bac8a26c9b2742782a4a7d341aaa0bc82634faa596699f973d938e67f7c59d5eab0f2491c0a195b4b31b347184061fe4da3bfc072953255bf3f3ef4ebe7d182b0acfd46fc47b4b81cb2d23990133edf40baf"}) 24.6215257s ago: executing program 0 (id=1096): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2b, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2a008000}, 0x40000) 24.62096148s ago: executing program 0 (id=1098): io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000340)={&(0x7f0000000040)={&(0x7f0000000b40)="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", 0x1000, 0x0, 0x1, 0x97}, 0x1}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaabb00"], 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 24.544408201s ago: executing program 0 (id=1100): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = memfd_secret(0x0) close_range(r3, 0xffffffffffffffff, 0x0) tgkill(r2, r2, 0x21) ptrace$peeksig(0x4209, r2, &(0x7f0000000040)={0x1, 0xbdde372900d0a746, 0x5}, &(0x7f0000000240)=[{}, {}, {}, {}, {}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0xb, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0xfffffffd, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0xfffffffd, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x33, @mcast1, 0x2}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) ioprio_set$pid(0x1, r2, 0x2007) 24.404169981s ago: executing program 0 (id=1102): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_emit_vhci(0x0, 0x7) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x4e27, 0x5, 0x3, 0xffff, 0xe7, 0x1, 0x0, 0xa82, 0xd4b1, 0x100, 0xcf3, 0x9, 0x1d8, 0x2, 0x6, 0x101, 0x4, 0x1008b, 0x3, 0x0, 0x4, 0x80000001, 0x8, 0x2000007, 0xb, 0x5, 0x3c, 0x5, 0x7fffffff, 0xffff, 0xfffffff8]}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_io_uring_setup(0x5c3, &(0x7f00000002c0)={0x0, 0x4009839, 0x0, 0x2, 0x7b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) socket$packet(0x11, 0x2, 0x300) r7 = syz_clone(0x41008c00, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x4004550d, 0x0) process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) fcntl$setown(r0, 0x8, r7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0x10, 0x3, 0x0) 24.244514314s ago: executing program 0 (id=1103): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRES32=0x0, @ANYRES64], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 24.208896617s ago: executing program 33 (id=1103): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRES32=0x0, @ANYRES64], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 22.143167896s ago: executing program 34 (id=855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) (async) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000004000000000000800600000007000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000000075cf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f00000001c0)="79e9c1fdc2504e9903a854e7b6182197f2fc3929454d5e4c940e55e2df0280dc02697a2185fbc171e88e4403d26bc9c5bae138ecd653d4cba992a556ba4fac0879bc481f36c85b1cc728e79f68a39f0294a83a4fc371384ea9c0a7e01fd91483c261ec4a6ead044d8b3c2892b7cfca9210b15e1491109ab28778f6654efd7d397da44775dbfb8de2760b1cab93aed97d635e028fc1edbd710ccf3825b95eca04f5716fafa4e75b84d6e9de948b8e51182fd7261f5b67eb351dee29a09d43b530ea731a34b6f1ab3310bbec799e51f3f8a013654a1c15793a64", &(0x7f00000003c0)}, 0x20) read$FUSE(r1, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x100, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x100, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xe9) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) (async) r7 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRESHEX=r12], 0x15) (async) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRESHEX=r12], 0x15) dup3(r9, r8, 0x0) (async) dup3(r9, r8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 15.103213819s ago: executing program 5 (id=1249): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000c90c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = fsmount(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x4, 0x3, 0x3}}) fchdir(r3) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x1, 0x401, 0x2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x81, 0x200, 0xa4, 0x6, 0x0, 0x4f05, 0x3, r6}, 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8949, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f0000000000)=0xe1df) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 1.115327871s ago: executing program 5 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4807}, 0xf3a3024b6e83e104) (async) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r7, 0x4050}], 0x1, 0xffffffb3) close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0xe}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.115028055s ago: executing program 6 (id=1261): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x1000]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000}, 0x24001884) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.113783726s ago: executing program 4 (id=1262): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000039c0)=@newtfilter={0x48, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x0, 0xffff}, {0xffff, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = epoll_create1(0x80000) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r7, 0x1009}], 0x1, 0x8000007) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.112446362s ago: executing program 3 (id=1263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='efs\x00', 0xc080, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a00, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 1.013819238s ago: executing program 3 (id=1264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002680)=@newtaction={0x1d48, 0x30, 0x25, 0x0, 0x0, {}, [{0x1d34, 0x1, [@m_pedit={0x1d30, 0x1, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xfffffff8, 0x7fff, 0x0, 0x8, 0x1}, 0xa, 0x7, [{0x10, 0x1, 0x2, 0x2, 0x8, 0x400}, {0x62d82862, 0x1, 0x10, 0x7, 0x6, 0x4}, {0x4, 0xe0, 0x0, 0x9, 0x6, 0x2}, {0x0, 0x8, 0x50ab, 0x81, 0x9, 0x4}, {0x7, 0x1, 0x7, 0x7f, 0x8001, 0x6}, {0x5, 0x2, 0x7, 0x10, 0xf6c6, 0x3ff}, {0x5, 0x9, 0x8, 0x5, 0x2, 0x2}, {0x10001, 0x3, 0x2, 0x7fffffff, 0xfec5, 0x38}]}, [{0x91, 0x5, 0x0, 0xfffff982, 0x9, 0x3}, {0x0, 0x4, 0x8, 0x1, 0x7e, 0x4}, {0x7f, 0x9, 0xd, 0x5, 0xffff, 0x40}, {0x1, 0x7fffffff, 0x6, 0x30000000, 0x8, 0x6}, {0x879, 0x3ff, 0x6, 0x381725c7, 0x7, 0x13d}, {0x5, 0x3, 0xfffff060, 0x7ff, 0x97, 0xfffffffa}, {0x2c, 0x2, 0x29f, 0x8, 0x9, 0x6}, {0x81, 0xfffffff7, 0x3, 0x0, 0xfffffffc, 0x40}, {0x40, 0x10001, 0x0, 0x7f, 0x0, 0x6}, {0x3, 0x3, 0x0, 0x100, 0xc5, 0x5}, {0x0, 0x6, 0x7ae4, 0x8, 0x27, 0x336b12ef}, {0x1, 0xf, 0x3, 0xdd51, 0x0, 0xa}, {0x0, 0x6, 0x2, 0x9ce, 0x4, 0x8}, {0xfffffffe, 0x2, 0x4, 0xffff, 0xfffffffc, 0x3}, {0x5, 0x5b8, 0x7ff, 0x8, 0xfffffffe, 0x7}, {0x72, 0x7ff, 0x7, 0x8, 0x403, 0x80000001}, {0xd, 0x5bf9, 0x4, 0xd8, 0x4, 0x5}, {0x9, 0xb44, 0x4, 0x0, 0x0, 0x1}, {0xffffff81, 0xffffffff, 0x1, 0x2, 0x200, 0xcf9}, {0x9, 0xfffffff9, 0x66f, 0xffffffff, 0x4, 0xfffffffe}, {0x3, 0x0, 0x6, 0x400, 0x8000, 0x1000}, {0x6, 0x55d, 0x8000, 0x4, 0x10000, 0x5}, {0x6, 0x401, 0x3, 0x2, 0x3ff, 0x40}, {0x9, 0xfffffffc, 0x8, 0xfffffff7, 0xff, 0x100}, {0x696, 0x6, 0x0, 0x7ff, 0x6, 0x356}, {0x10, 0x4, 0x4, 0x1, 0x8000, 0x5}, {0xc8, 0x6, 0x8, 0x6, 0xe2e, 0x5}, {0x3, 0x0, 0xfffffff1, 0xa, 0x10, 0x1ff0000}, {0x5, 0xf9e7, 0x2, 0x3, 0x101, 0x9}, {0x80, 0xffffffff, 0x6, 0x7, 0x51eb, 0x6}, {0x7ff, 0x800, 0xaf, 0x0, 0xc55, 0x8000}, {0x4, 0x7fffffff, 0x3ff, 0x7fffffff, 0x2, 0x5}, {0xfff, 0x3ff, 0x8, 0x2, 0x5, 0x3}, {0x8, 0x4, 0x3, 0xf0, 0xa314, 0x9537}, {0x2d5effd3, 0xfc6, 0x25, 0xb, 0x8, 0x7}, {0x3, 0x0, 0x4, 0x101, 0x3ff, 0x9}, {0x9, 0x5, 0x7ff, 0x9, 0x10, 0x658b}, {0x8, 0x6, 0x4, 0x8, 0x1089, 0x80}, {0xed9, 0x2, 0x0, 0xb4, 0xb, 0x6}, {0x5, 0x81, 0xb, 0xdd, 0xfffffffb, 0x2}, {0x387, 0x1fd, 0x3, 0x5, 0x8, 0xffff}, {0x9, 0x1, 0xffffffff, 0xa, 0xc0, 0x3}, {0xfff, 0x8, 0x8, 0x0, 0x6, 0xfc}, {0x5, 0x0, 0x101, 0x8, 0x80, 0x2}, {0x7, 0xffffff7f, 0x6ef1, 0x7fff, 0x40000000, 0x9}, {0x6, 0x800, 0xd5, 0xca, 0x4014a739, 0x22a7}, {0x1, 0x7, 0x9, 0x7abd3be2, 0x8, 0xb2}, {0x8, 0x4, 0x2, 0xfffffffe, 0x4, 0x6}, {0x1, 0x9, 0x2cc, 0x9, 0x3ff, 0x3}, {0x4, 0x9, 0x0, 0x3e, 0x8, 0x3}, {0x1, 0x3, 0x2, 0x6, 0x9}, {0x7f, 0xde, 0x3, 0x2, 0x7ff, 0x19}, {0xffffffff, 0x4, 0x2, 0xffffffff, 0x4, 0x5}, {0x5, 0x1d, 0x4, 0x9, 0x5, 0x6}, {0xa, 0x3, 0x8, 0x1, 0xd}, {0xa, 0x3b93a6, 0xffff, 0x0, 0xb22f}, {0x9, 0x6, 0x40, 0x9a76, 0x2, 0x1}, {0x7, 0x4, 0x10001, 0x4, 0x1, 0x12e}, {0x100, 0x9, 0x4f0, 0x300, 0x10000, 0x5}, {0x1000, 0xb, 0xfffffffd, 0xfffffff8, 0xfffffffa, 0xfff}, {0x2, 0x4, 0x6, 0x5, 0x3, 0x4}, {0x9, 0x5, 0x0, 0x101, 0x1, 0x80}, {0x1000, 0x8001, 0x3, 0x6, 0x39eb7fa9, 0x9}, {0x3, 0x2, 0x4, 0x3, 0x3, 0x9}, {0x9, 0x0, 0x4, 0x2, 0x4, 0xb}, {0x8, 0x80000001, 0x4, 0x3, 0x0, 0x10001}, {0x1, 0x10, 0x0, 0xfffffff4, 0x2}, {0x4, 0x1, 0xffffffff, 0x9, 0x5, 0x2}, {0x5, 0x1, 0x32e, 0xc, 0xe}, {0x80000000, 0x2, 0x6, 0xfff, 0xffff0000, 0x7}, {0x59, 0x6, 0x7, 0xb5d6, 0x9, 0x1}, {0x2, 0xfffffff9, 0x0, 0x9, 0xff, 0x8000}, {0x8, 0x9, 0xf, 0x7, 0x4, 0x7b}, {0x3, 0x2, 0xfffffffc, 0x4, 0xfaf7, 0xf}, {0x1, 0x6, 0x6, 0x46, 0x9, 0x4}, {0xc4ed, 0x0, 0xffffffcd, 0x5, 0x7ff, 0xe6}, {0x6, 0x9, 0x10001, 0xfffffffc, 0x44, 0x2}, {0x5, 0x3, 0x10001, 0x7ff, 0x3}, {0xb807, 0x1, 0x6, 0x1, 0xc, 0x7fffffff}, {0x7f, 0x9, 0x401, 0x8, 0x401, 0x40}, {0x8, 0x6, 0x2000, 0x6, 0xfffffff1, 0x400}, {0x9, 0x2, 0x2, 0xf, 0xad, 0xff}, {0x6, 0x81, 0x1a0, 0xce, 0x6, 0x3}, {0x3, 0x40, 0x0, 0x5, 0x7, 0x563}, {0xffffa9a7, 0x0, 0x0, 0x9, 0x3, 0xa}, {0x9, 0xffff, 0x3, 0x8, 0x1, 0xc0af}, {0xffff, 0x9, 0x6, 0x6, 0x0, 0x6a4}, {0x8000, 0x7, 0x8, 0x6, 0x401, 0x8da}, {0xdb, 0x5, 0x1, 0x6, 0x6, 0x3}, {0x3, 0x7, 0x9a42, 0x7, 0xb, 0xbe70}, {0xa9, 0x80, 0x5f, 0xa, 0xffff, 0x400}, {0x3, 0x9, 0x7, 0x8, 0x10}, {0x7ff, 0x1ff, 0x5, 0x3a8, 0x6, 0x80}, {0xffff0001, 0x40, 0x7, 0x7f, 0x7, 0x401}, {0x100, 0x8, 0x2, 0x10000, 0x37f, 0x10000}, {0x9, 0x3, 0x80, 0xfbe, 0x7b6, 0x3}, {0x4, 0x1, 0x0, 0x0, 0xffffffff, 0x466}, {0x0, 0x8000, 0x8, 0xa, 0x361, 0x4}, {0xe, 0xa19, 0x3, 0x5, 0x66f, 0x6}, {0x8, 0x4, 0xe, 0xb9c2, 0x7fff, 0xbd43}, {0x0, 0x1c0, 0xffffff7f, 0x401, 0x7, 0x1}, {0x1, 0x0, 0xa6, 0x8, 0x5, 0xffffffff}, {0x0, 0xc990, 0x4, 0x9, 0xb, 0x1000}, {0x6, 0x6, 0x8000, 0x10001, 0x3ff, 0x7ff}, {0xf7, 0x9, 0x9, 0x7, 0x8, 0xffff}, {0x80, 0x2, 0xaa7, 0x8e, 0x7, 0x9}, {0x7f, 0xffffffff, 0xfffffff8, 0x4c73, 0x3, 0x6}, {0x13, 0x5, 0x6, 0x8001, 0x4, 0xf3}, {0x2, 0x728, 0x9, 0xffff, 0x101}, {0x5, 0x2, 0x0, 0x0, 0x4, 0xfffffffb}, {0x1, 0xd, 0xb, 0x6, 0x7fff}, {0x6, 0x6d5, 0x5, 0x400, 0xb, 0x2}, {0x7, 0x7f2e, 0x5, 0xfffffe01, 0xd62, 0x18d08c10}, {0x8, 0x100, 0x2, 0x10000, 0x8bf, 0x1}, {0xfffff076, 0x0, 0xa9, 0x8bfb, 0x4263, 0xfffffff4}, {0x8000, 0x4, 0x6, 0x401, 0x9, 0xda2}, {0x612, 0x1e, 0x0, 0x4, 0x4, 0x5d}, {0x3, 0x9, 0x45f4ddb7, 0x2, 0x6, 0x7}, {0x0, 0x8, 0x10000, 0x9, 0x2, 0x9}, {0x6, 0xfffffbff, 0x10, 0x0, 0x5a2a, 0x4}, {0xa, 0xa, 0x80000000, 0x2, 0x1, 0x6}, {0x3488, 0x5, 0x10001, 0x3, 0xb, 0x401}, {0x3, 0x0, 0xcc2d, 0x8, 0xb, 0x47}, {0x8, 0x80000000, 0xfffffffc, 0x0, 0x5, 0x400}, {0x9, 0x6, 0x7fffffff, 0x9, 0x100, 0xd}, {0x100, 0xfff, 0x5, 0x0, 0x3, 0x3}, {0x2, 0x4, 0x0, 0x7, 0x5, 0xdd}, {0x9, 0x7, 0x4, 0xff, 0x4, 0x4}], [{0x4}, {}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x9136ade24005676c}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x7, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0xf, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4, 0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xf0b2f0dfc92b6253}, {0x3}, {0x3}, {0x6}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xa0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1d48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7ffffffd, 0x2) (async) getdents64(r1, 0x0, 0x0) (async) write$qrtrtun(r1, &(0x7f00000005c0)="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", 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}, 0x2}}, 0x2e) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r4, 0xc0285628, &(0x7f0000000040)=0x3) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) (async) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create(0x0, 0x2) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x6c, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x6c}}, 0x4004800) (async) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000380)) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="a7bc1da905") r10 = socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.013495341s ago: executing program 5 (id=1265): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x7, @mcast2, 0x3}}, 0x0, 0x0, 0x4c, 0x0, "737d95483c40c9a2165b7349b033e3eb9332c093ec28f17e618c388f6007f0cc075d427c6f26b11d18f23b250d721390e22d2b556c7476bff07a08f7576ee0db1506d4e07d2fa4a44561f8d9e2b6028e"}, 0xd8) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) (async) sendmmsg(r4, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 917.673722ms ago: executing program 6 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x1010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x19, 0x2, 0x50, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7800, 0x9, 0x1b700000}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000500)={@rand_addr, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x8, 0x709, 0x4, 0xff, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, {[@end, @timestamp={0x44, 0xc, 0x18, 0x0, 0x5, [0x800, 0x0]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x56, 0x1, 0x7, [{@local, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x7, 0x9, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x10, 0x6, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @private}, &(0x7f00000007c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x4, 0xc5e5, {{0x2f, 0x4, 0x2, 0x9, 0xbc, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@ssrr={0x89, 0x1b, 0xe3, [@multicast1, @loopback, @local, @rand_addr=0x64010101, @private=0xa010102, @remote]}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x5, [0x100, 0x2, 0x7, 0x6, 0x2d03]}, @lsrr={0x83, 0x17, 0x6f, [@remote, @broadcast, @empty, @remote, @remote]}, @generic={0x7, 0xd, "5660aa0b1f5996fd678f6e"}, @timestamp_addr={0x44, 0x3c, 0x73, 0x1, 0x6, [{@empty, 0xfffffffd}, {@multicast2, 0x7}, {@local, 0xa}, {@multicast2, 0x80000000}, {@remote, 0x2dc}, {@remote, 0x2}, {@multicast2, 0xffff}]}, @lsrr={0x83, 0x13, 0x3e, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xad, 0x6, 0x0, @loopback, @mcast2, 0x7800, 0x10, 0x7, 0xffffffff}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x1b8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x299ce83dadf11c36}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r13 = io_uring_setup(0x29a9, &(0x7f0000000cc0)={0x0, 0xceaf, 0x1, 0x1, 0x37d}) io_uring_register$IORING_REGISTER_BUFFERS(r13, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/98, 0x62}], 0x1) r14 = accept$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000e80)={r5, 0x1, 0x6, @broadcast}, 0x10) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r15, 0x0, 0x487, &(0x7f0000000ec0)={{0x87, @local, 0x4e21, 0x4, 'none\x00', 0x2, 0x8000, 0x1a}, {@empty, 0x4e23, 0x0, 0x32e, 0x4, 0x2}}, 0x44) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r16, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r17, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x8) ioctl$sock_FIOSETOWN(r14, 0x8901, &(0x7f0000001140)) 853.201231ms ago: executing program 4 (id=1267): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x440b0) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x440b0) (async) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) (async) 744.317758ms ago: executing program 4 (id=1268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x7214, 0x38ff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x101, 0x1}, @flat=@handle={0x66642a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 671.281991ms ago: executing program 4 (id=1269): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x14, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x3b9ac9ff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000070000000900000000000000035a4bcd2d6c56dde933de083c7fd1d2c45cf055dc43cd7b21285e8f1cd98cc2d168678b122947d54548b29a90207fbfe92141794665e6dedfb6f17089a5d54c9d8722ff6c82b7a0a17a1b206627fbac8d1a2a2dde4f1e059d7a73254d4a79a70fc038440c49d9ffbcc69a6cd0377c8bcd8f57241ced6b248663da77e0c43871eb72dbffbbc9fceb0e096d8dcaa6dd0678e5", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async) close(r1) (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000005c0)={r1, &(0x7f00000003c0)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x20000, &(0x7f0000000340)={@align=0x2, {0x4, 0x0, 0x2, 0x3aaa4355}}, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x5}) (async, rerun: 32) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001140)={{r1, &(0x7f0000000ac0)='@^}\'/$\x90\x00', 0x228000, &(0x7f0000000b00)={@align=0x1, {0x101, 0x6, 0x5, 0x7fff}}, 0x80000001, &(0x7f0000000b40), &(0x7f0000000b80)=0x9}, 0x3, &(0x7f00000010c0)=[{0x2, 0xca, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="5e80a5ddad896389a2765ecae3716f2f8c7412c8c892102884434374ba205e1a75ddf8bbb2dbb12c6a0954c80ee1864dc352ef", 0x33, 0x2}, {0x1, 0x0, &(0x7f0000000c40)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', &(0x7f0000000dc0)="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", 0xfd, 0x2}, {0x3, 0x2bd, &(0x7f0000000ec0)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', &(0x7f0000001040)="acb393e1ecea5560e2c452a5f5a399f6da1306f6c1b81ae3b220914ad99adfdeec0a38cc4a91cdcf74debde31ccdfd73dafe01bce0afe86caf84ede0be02664d26416da9b3fbd99f0c69fe9b4f73ac1946f0a95abb11f8259bf217", 0x5b, 0x3a}]}) write$tun(r5, &(0x7f00000011c0)={@val={0x0, 0xa01}, @val={0x0, 0x4, 0x0, 0x8, 0x1, 0x7f}, @arp=@generic={0xfffe, 0x6005, 0x6, 0x4, 0x8, @local, "62fefba3", @local, "d813caeb9449cef6e0"}}, 0x2f) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000a40)="6dda48e45b1e0113d0f13a873f145d7444b6b9cbecdeefd0c472d1a62c29d15bd296cfcd352fb10f4e1db50779bde19a864d090000000e00126befc6fbd4c71c42e0a3ec0745fd27c0b88118c075cd2e7b88ce4b46c8d303517723b322e65e0a078bc090584b5f"}, 0xffffffffffffffe5) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000600)="1032088e64791203df9af3a647d9f9a79ca70e3899349936eb57dd2dde76db64952379534e0e6e5c6f13df502fe3a3f1479337dc01a5437e3dedde24966c22ae389123680570b2adecc094f459597a09c17d2e287cfe93d0db06c3372826d8282c2674aa6c5c8317f9c83abe25e74e57e4a72d956760b27808feede7fb9d83e1b6ed3a0164c27f5aa385799d0bf942ce472c7ee697ad6ae8120e74406d683c74f7059e9745abf1d3cd691a14833ea9fa0d2c21ee0df54c20f38bccafe55c457ad96ba07d277aa2673c6b5b2da4add02c", &(0x7f0000000700)=""/209, &(0x7f0000000900)="552caf773d631c5b4b18c2ba9a4980b04283c4bb1a1813a845e5d9bd8fcf4a84df4c3363a703e0e736ed0c7cfe813c76ddb9f90239dd86eefa3d26b7ed9424eb9c3adde05387aa9c788533520ceec1388165a9130c5687a88bf5f85201896cf9efbf6d372c2e4223995561b14879afd4d3d2ec175b27101a53fbbc3a3c1e3ea7ccc2368d6d7a", &(0x7f00000009c0)="9a23f50a9f490c4fcf533ea893749632e937bec898973b9ddb746c8946c6df057ae3a8f4285e978ab6d253cc1a54527b6d1595f67681369544b793da55e1d97464f6a5bb9bbf246f3c517a9a8669b43e81bcaa9f2eb8c46bdbf40ee2607a69", 0xffff, r3, 0x4}, 0x38) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 612.620989ms ago: executing program 4 (id=1270): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b140140bf44e8a050bf0250798c49f30305106dbd03e7cec40da4b691bf6500e2c8cded43f869525b660cb799b35e8582caac89597e40669ef66c3472655d05b4ed35572f7ed61c25cc1f5c5a7e265a427cd7824035e9d5bbb457313d6a430cd7f2b92f56519c1af8de60d36569ac01a9bd21b2d91b9206c7df6ef5c9502981995c2e14c088a618e91f9a03995f64d4b55efb20af8ef38083ad5e3bbf215311f135e8383c964584cc66ee9db5717ef76dc494c06a12d2a2bde1d82ed9bf6b03b5e903d54d576783b75c995512d481596dec9c201bf4e222c0c4f9c4aafb99589eaf3736ff546c7de8d084de51f", 0xed) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000804) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x4, r4, 0x0, 0x1, 0x4}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101002, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x1}}, 0x10) r6 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r7, 0x0) ppoll(&(0x7f0000000c80)=[{r7, 0xc0a0}], 0x1, &(0x7f0000000cc0), 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r9, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r9, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, &(0x7f0000000ac0)="f7", &(0x7f0000000080)=""/71}, 0x20) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 611.66921ms ago: executing program 5 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1001}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x895a}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0xffffffe4, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000001280)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x4, 0x5, {{0x35, 0x4, 0x0, 0x5, 0xd4, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010101, {[@rr={0x7, 0x17, 0x2d, [@multicast2, @broadcast, @rand_addr=0x64010102, @multicast2, @local]}, @timestamp_addr={0x44, 0x3c, 0x30, 0x1, 0x3, [{@private=0xa010101, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xb}, {@private=0xa010100, 0x68e2}, {@private=0xa010101, 0x650e}, {@empty, 0x8}, {@remote}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0xc, 0x82, 0x0, 0xd, [0x4, 0x3fffc0]}, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x0, [{@local, 0x5}, {@loopback, 0x6715558f}]}, @lsrr={0x83, 0x27, 0xd4, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @broadcast, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0xa}]}, @rr={0x7, 0xb, 0xfb, [@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x6c, [@broadcast, @broadcast, @local]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @initdev, @loopback}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000001380)={0xb8, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x11}, 0x4004004) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x39}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8880) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a5d185ad6000000000000000000081400000011000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 494.454425ms ago: executing program 4 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0xffff1000, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x41000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x8, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0x30000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0x200000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0x200000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x13, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0xfd, 0x18, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x7000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x4, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffdf1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x1}, {0xffff1000, 0x60000, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0xeeef0000, 0x9, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0xa6, 0x0, 0x1, 0xfffffffffffffffe]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 493.466345ms ago: executing program 3 (id=1273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0xfffffffffffffffd, {{0x41}, 0x1}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r4, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000040), &(0x7f0000000000)=0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x49, 0x100, 0xffffffff, 0x401, 0x0, 0x1, 0x0, 0x0, 0xd, 0xff, 0x0, 0x8000001f, 0x2, 0x47}}) mount$binder(0x0, 0x0, 0x0, 0x28, &(0x7f0000000400)=ANY=[@ANYBLOB]) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty}}, 0x0, 0x800, 0x0, 0xfffffffd, 0x8a}, 0x9c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="944da9e139b7748083e079531d684cc4f0b716dca931099b8878eb943099d521e265d06d12e1b9dd7ffefd9634dca908b8cf6c0111c2e113ce932cba7258396db2bb8402840781c629e2c4f50f1ffc76ce3ebc106c7645076800a986a1440d2b633a1fcd5b432c53e1156a0303b01bcf910e399da61a7f8b050c80ae87df106c01781e7ef23212e87c4a5b00f98885afe549e680c2de36b416c37139ac61ab00a2"}, {&(0x7f00000003c0)="041bd740566efda036eb7f08b1dcab5fb3617376fb8502cc7c78b22752f658a97cc6806e8cc3f7a7c715a6cb50bff79cffde5e338d324e01fb02efd894ddadbc425c074c0c4fea689fe68f952dbd6e754bd9a9f6dd0ec00ec2ff77c02612eb259a"}], 0x0, &(0x7f0000000040), 0xfffffffffffffc73, 0x800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 492.98748ms ago: executing program 6 (id=1274): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="fda50ed73e173808f4a8ece799f3273d9f953fca58f16a8aff7c66f7f6eb436504cbb8f52e929d253a32a600924f51541c833d9b350055f84bac81d6496e9b38d769abeb2a28ee67d91d68f0a47240afcaecac34781f1b76e41047ea3674fb5813fffbc2c29127264d148506b51aece66eb99698c02d6b3e02b8f70f699e152326729ac924c65f870c1aa7339c6d876b02b7ff1bbc442c01c43888d4a05689efbdabfd81a1fa8d744c2c66e7651c", @ANYRES16=r1, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xa, 0x0, 0x0, 0x1}]}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x80, 0x4) 429.830024ms ago: executing program 6 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a4000000f5ffffff027d01ff0200000000000000000000000000010000883e"], 0xfdef) 429.358443ms ago: executing program 5 (id=1276): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000e4030000000400af00a447b85204000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, r4}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x5, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 124.037073ms ago: executing program 3 (id=1277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xf0ff, 0x38ff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x101, 0x1}, @flat=@handle={0x66642a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 120.460226ms ago: executing program 3 (id=1278): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000840)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="da14", 0x2, 0x51, &(0x7f0000000040)={0xa, 0x4e22, 0x185, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x4f) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000500)={0x1, 0x0, @pic={0x80, 0x7, 0x9, 0x1, 0x6, 0xf, 0xff, 0x1, 0x8, 0x77, 0xb, 0xf, 0x8, 0x5d, 0x6, 0x7}}) listen(r1, 0x100101) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x102, 0x1) getdents64(r3, 0xfffffffffffffffe, 0x4a) r4 = accept4(r1, 0x0, 0x0, 0x80800) accept4$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x6b, 0x30}, &(0x7f00000003c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505e8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}]}, 0x3c}}, 0x0) 885.913µs ago: executing program 6 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xa}, {0xa, 0xfff2}, {0xffe0, 0x7}}}, 0x24}}, 0x4000010) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r3, 0x4b36) 561.27µs ago: executing program 3 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0xff}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file1\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2b0400, &(0x7f00000004c0)={[{@favordynmods}, {@favordynmods}, {@xattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x38, 0x34, 0x38, 0x38, 0x66, 0x65], 0x2d, [0x39, 0x36, 0x62, 0x31], 0x2d, [0x31, 0x80736288240c04db, 0x38, 0x31], 0x2d, [0x62, 0x386522262d6d35ec, 0x3d, 0x30], 0x2d, [0x32, 0x32, 0x61, 0x32, 0x37, 0x38, 0x35, 0x63]}}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_eq={'euid', 0x3d, r3}}, {@appraise_type}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f0000000340)=""/73, 0x49, 0x0, &(0x7f00000005c0)={r6, r7+10000000}) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r8, 0x80140912, 0x200000000005) 464.343µs ago: executing program 6 (id=1281): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4040090) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 5 (id=1282): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): [ 81.244535][ T7449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.376596][ T7465] SELinux: truncated policydb string identifier [ 81.378944][ T7465] SELinux: failed to load policy [ 81.443925][ T7468] netlink: 14 bytes leftover after parsing attributes in process `syz.1.474'. [ 81.453936][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.464942][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.473779][ T7468] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 81.482096][ T7468] bond0 (unregistering): Released all slaves [ 81.491928][ T7472] overlayfs: missing 'workdir' [ 81.555013][ T7477] FAULT_INJECTION: forcing a failure. [ 81.555013][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.555035][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.3.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.555050][ T7477] Tainted: [L]=SOFTLOCKUP [ 81.555054][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.555060][ T7477] Call Trace: [ 81.555064][ T7477] [ 81.555068][ T7477] dump_stack_lvl+0x100/0x190 [ 81.555090][ T7477] should_fail_ex.cold+0x5/0xa [ 81.555106][ T7477] _copy_from_user+0x2e/0xd0 [ 81.555119][ T7477] binder_ioctl+0x4f5/0x7610 [ 81.555141][ T7477] ? tomoyo_path_number_perm+0x188/0x580 [ 81.555160][ T7477] ? __pfx_binder_ioctl+0x10/0x10 [ 81.555179][ T7477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.555196][ T7477] ? do_vfs_ioctl+0x226/0x13e0 [ 81.555213][ T7477] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.555230][ T7477] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.555251][ T7477] ? hook_file_ioctl_common+0x146/0x410 [ 81.555266][ T7477] ? selinux_file_ioctl+0x139/0x290 [ 81.555281][ T7477] ? selinux_file_ioctl+0xb4/0x290 [ 81.555297][ T7477] ? __pfx_binder_ioctl+0x10/0x10 [ 81.555315][ T7477] __x64_sys_ioctl+0x18e/0x210 [ 81.555333][ T7477] do_syscall_64+0x106/0xf80 [ 81.555349][ T7477] ? clear_bhb_loop+0x40/0x90 [ 81.555363][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.555374][ T7477] RIP: 0033:0x7f823359c799 [ 81.555383][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.555394][ T7477] RSP: 002b:00007f823452a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.555404][ T7477] RAX: ffffffffffffffda RBX: 00007f8233815fa0 RCX: 00007f823359c799 [ 81.555416][ T7477] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 81.555422][ T7477] RBP: 00007f823452a090 R08: 0000000000000000 R09: 0000000000000000 [ 81.555428][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.555434][ T7477] R13: 00007f8233816038 R14: 00007f8233815fa0 R15: 00007ffefdc1c488 [ 81.555447][ T7477] [ 81.555451][ T7477] binder: 7476:7477 ioctl c0306201 2000000001c0 returned -14 [ 81.584563][ T7470] binder: BINDER_SET_CONTEXT_MGR already set [ 81.635921][ T7484] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:03e8:0000:0002:7d01 with DS=0x1 [ 81.683087][ T7470] binder: 7469:7470 ioctl 4018620d 200000004a80 returned -16 [ 81.683184][ T7475] binder: 7469:7475 ioctl c0306201 2000000004c0 returned -22 [ 81.721918][ T7486] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.732062][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 82.083033][ T7507] FAULT_INJECTION: forcing a failure. [ 82.083033][ T7507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.087375][ T7507] CPU: 2 UID: 0 PID: 7507 Comm: syz.2.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.087395][ T7507] Tainted: [L]=SOFTLOCKUP [ 82.087399][ T7507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.087406][ T7507] Call Trace: [ 82.087410][ T7507] [ 82.087414][ T7507] dump_stack_lvl+0x100/0x190 [ 82.087444][ T7507] should_fail_ex.cold+0x5/0xa [ 82.087460][ T7507] _copy_from_user+0x2e/0xd0 [ 82.087473][ T7507] binder_thread_write+0x12cb/0x4dd0 [ 82.087499][ T7507] ? __x64_sys_ioctl+0xb7/0x210 [ 82.087528][ T7507] ? __lock_acquire+0x4a5/0x2630 [ 82.087547][ T7507] ? __pfx_binder_thread_write+0x10/0x10 [ 82.087578][ T7507] ? find_held_lock+0x2b/0x80 [ 82.087602][ T7507] ? binder_debug+0xe0/0x190 [ 82.087624][ T7507] ? __pfx_binder_debug+0x10/0x10 [ 82.087641][ T7507] ? binder_debug+0xe0/0x190 [ 82.087656][ T7507] ? __pfx_binder_debug+0x10/0x10 [ 82.087681][ T7507] binder_ioctl+0x2941/0x7610 [ 82.087704][ T7507] ? tomoyo_path_number_perm+0x188/0x580 [ 82.087724][ T7507] ? __pfx_binder_ioctl+0x10/0x10 [ 82.087744][ T7507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.087762][ T7507] ? do_vfs_ioctl+0x226/0x13e0 [ 82.087779][ T7507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 82.087797][ T7507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.087820][ T7507] ? hook_file_ioctl_common+0x146/0x410 [ 82.087836][ T7507] ? selinux_file_ioctl+0x139/0x290 [ 82.087852][ T7507] ? selinux_file_ioctl+0xb4/0x290 [ 82.087870][ T7507] ? __pfx_binder_ioctl+0x10/0x10 [ 82.087888][ T7507] __x64_sys_ioctl+0x18e/0x210 [ 82.087907][ T7507] do_syscall_64+0x106/0xf80 [ 82.087924][ T7507] ? clear_bhb_loop+0x40/0x90 [ 82.087938][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.087950][ T7507] RIP: 0033:0x7f513ff9c799 [ 82.087960][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.087971][ T7507] RSP: 002b:00007f5140ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.087982][ T7507] RAX: ffffffffffffffda RBX: 00007f5140215fa0 RCX: 00007f513ff9c799 [ 82.087989][ T7507] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 82.087996][ T7507] RBP: 00007f5140ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 82.088002][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.088008][ T7507] R13: 00007f5140216038 R14: 00007f5140215fa0 R15: 00007ffd9a9947b8 [ 82.088023][ T7507] [ 82.088028][ T7507] binder: 7506:7507 ioctl c0306201 2000000001c0 returned -14 [ 82.204113][ T7515] netlink: 52 bytes leftover after parsing attributes in process `syz.2.493'. [ 82.340370][ T7525] ip6_tunnel: non-ECT from fe88:a43d:e1a4:ffff:fff5:0000:0002:7d01 with DS=0x1 [ 82.548855][ T7542] FAULT_INJECTION: forcing a failure. [ 82.548855][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.554979][ T7542] CPU: 2 UID: 0 PID: 7542 Comm: syz.3.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.555005][ T7542] Tainted: [L]=SOFTLOCKUP [ 82.555010][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.555021][ T7542] Call Trace: [ 82.555027][ T7542] [ 82.555033][ T7542] dump_stack_lvl+0x100/0x190 [ 82.555064][ T7542] should_fail_ex.cold+0x5/0xa [ 82.555088][ T7542] _copy_from_user+0x2e/0xd0 [ 82.555106][ T7542] binder_thread_write+0x12cb/0x4dd0 [ 82.555135][ T7542] ? __x64_sys_ioctl+0xb7/0x210 [ 82.555171][ T7542] ? __lock_acquire+0x4a5/0x2630 [ 82.555189][ T7542] ? __pfx_binder_thread_write+0x10/0x10 [ 82.555215][ T7542] ? find_held_lock+0x2b/0x80 [ 82.555234][ T7542] ? binder_debug+0xe0/0x190 [ 82.555262][ T7542] ? __pfx_binder_debug+0x10/0x10 [ 82.555286][ T7542] ? binder_debug+0xe0/0x190 [ 82.555308][ T7542] ? __pfx_binder_debug+0x10/0x10 [ 82.555343][ T7542] binder_ioctl+0x2941/0x7610 [ 82.555376][ T7542] ? tomoyo_path_number_perm+0x188/0x580 [ 82.555405][ T7542] ? __pfx_binder_ioctl+0x10/0x10 [ 82.555432][ T7542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.555458][ T7542] ? do_vfs_ioctl+0x226/0x13e0 [ 82.555483][ T7542] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 82.555508][ T7542] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.555540][ T7542] ? hook_file_ioctl_common+0x146/0x410 [ 82.555563][ T7542] ? selinux_file_ioctl+0x139/0x290 [ 82.555586][ T7542] ? selinux_file_ioctl+0xb4/0x290 [ 82.555611][ T7542] ? __pfx_binder_ioctl+0x10/0x10 [ 82.555638][ T7542] __x64_sys_ioctl+0x18e/0x210 [ 82.555678][ T7542] do_syscall_64+0x106/0xf80 [ 82.555703][ T7542] ? clear_bhb_loop+0x40/0x90 [ 82.555724][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.555742][ T7542] RIP: 0033:0x7f823359c799 [ 82.555769][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.555783][ T7542] RSP: 002b:00007f823452a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.555801][ T7542] RAX: ffffffffffffffda RBX: 00007f8233815fa0 RCX: 00007f823359c799 [ 82.555811][ T7542] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 82.555820][ T7542] RBP: 00007f823452a090 R08: 0000000000000000 R09: 0000000000000000 [ 82.555831][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.555840][ T7542] R13: 00007f8233816038 R14: 00007f8233815fa0 R15: 00007ffefdc1c488 [ 82.555863][ T7542] [ 82.556059][ T7542] binder: 7540:7542 ioctl c0306201 2000000001c0 returned -14 [ 82.944032][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 83.020222][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'. [ 83.103899][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 83.106983][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.107174][ T7567] overlayfs: conflicting options: nfs_export=on,index=off [ 83.112406][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.119262][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.122159][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.127388][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.133018][ T24] usb 8-1: config 0 descriptor?? [ 83.157802][ T7571] FAULT_INJECTION: forcing a failure. [ 83.157802][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 83.161857][ T7571] CPU: 3 UID: 0 PID: 7571 Comm: syz.2.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.161874][ T7571] Tainted: [L]=SOFTLOCKUP [ 83.161878][ T7571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.161884][ T7571] Call Trace: [ 83.161888][ T7571] [ 83.161892][ T7571] dump_stack_lvl+0x100/0x190 [ 83.161914][ T7571] should_fail_ex.cold+0x5/0xa [ 83.161929][ T7571] should_failslab+0xc2/0x120 [ 83.161941][ T7571] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.161956][ T7571] ? binder_transaction+0x1c15/0x9ee0 [ 83.161976][ T7571] binder_transaction+0x1c15/0x9ee0 [ 83.162003][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162016][ T7571] ? __pfx_binder_transaction+0x10/0x10 [ 83.162037][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162050][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162066][ T7571] ? find_held_lock+0x2b/0x80 [ 83.162086][ T7571] ? is_bpf_text_address+0x8a/0x1a0 [ 83.162102][ T7571] ? is_bpf_text_address+0x8a/0x1a0 [ 83.162120][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162131][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162141][ T7571] ? __kernel_text_address+0xd/0x30 [ 83.162153][ T7571] ? unwind_get_return_address+0x59/0xa0 [ 83.162172][ T7571] ? find_held_lock+0x2b/0x80 [ 83.162185][ T7571] ? __might_fault+0xc5/0x140 [ 83.162200][ T7571] ? __might_fault+0xc5/0x140 [ 83.162220][ T7571] binder_thread_write+0x131f/0x4dd0 [ 83.162239][ T7571] ? __x64_sys_ioctl+0xb7/0x210 [ 83.162258][ T7571] ? __lock_acquire+0x4a5/0x2630 [ 83.162268][ T7571] ? __pfx_binder_thread_write+0x10/0x10 [ 83.162286][ T7571] ? find_held_lock+0x2b/0x80 [ 83.162299][ T7571] ? binder_debug+0xe0/0x190 [ 83.162314][ T7571] ? __pfx_binder_debug+0x10/0x10 [ 83.162329][ T7571] ? binder_debug+0xe0/0x190 [ 83.162343][ T7571] ? __pfx_binder_debug+0x10/0x10 [ 83.162365][ T7571] binder_ioctl+0x2941/0x7610 [ 83.162386][ T7571] ? tomoyo_path_number_perm+0x188/0x580 [ 83.162405][ T7571] ? __pfx_binder_ioctl+0x10/0x10 [ 83.162424][ T7571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.162441][ T7571] ? do_vfs_ioctl+0x226/0x13e0 [ 83.162457][ T7571] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.162474][ T7571] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.162495][ T7571] ? hook_file_ioctl_common+0x146/0x410 [ 83.162509][ T7571] ? selinux_file_ioctl+0x139/0x290 [ 83.162525][ T7571] ? selinux_file_ioctl+0xb4/0x290 [ 83.162541][ T7571] ? __pfx_binder_ioctl+0x10/0x10 [ 83.162559][ T7571] __x64_sys_ioctl+0x18e/0x210 [ 83.162576][ T7571] do_syscall_64+0x106/0xf80 [ 83.162592][ T7571] ? clear_bhb_loop+0x40/0x90 [ 83.162606][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.162617][ T7571] RIP: 0033:0x7f513ff9c799 [ 83.162626][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.162637][ T7571] RSP: 002b:00007f5140ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.162648][ T7571] RAX: ffffffffffffffda RBX: 00007f5140215fa0 RCX: 00007f513ff9c799 [ 83.162654][ T7571] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 83.162660][ T7571] RBP: 00007f5140ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 83.162666][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.162673][ T7571] R13: 00007f5140216038 R14: 00007f5140215fa0 R15: 00007ffd9a9947b8 [ 83.162686][ T7571] [ 83.313998][ T7578] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 83.318344][ T7578] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 83.549537][ T24] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 83.727669][ T7600] FAULT_INJECTION: forcing a failure. [ 83.727669][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 83.732720][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.0.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.732745][ T7600] Tainted: [L]=SOFTLOCKUP [ 83.732751][ T7600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.732759][ T7600] Call Trace: [ 83.732765][ T7600] [ 83.732771][ T7600] dump_stack_lvl+0x100/0x190 [ 83.732803][ T7600] should_fail_ex.cold+0x5/0xa [ 83.732824][ T7600] should_failslab+0xc2/0x120 [ 83.732842][ T7600] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.732863][ T7600] ? binder_alloc_new_buf+0x1bb/0x3100 [ 83.732884][ T7600] binder_alloc_new_buf+0x1bb/0x3100 [ 83.732925][ T7600] ? binder_debug+0xe0/0x190 [ 83.732946][ T7600] ? __pfx_binder_debug+0x10/0x10 [ 83.732973][ T7600] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 83.732995][ T7600] binder_transaction+0x1f70/0x9ee0 [ 83.733036][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733056][ T7600] ? __pfx_binder_transaction+0x10/0x10 [ 83.733084][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733104][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733129][ T7600] ? find_held_lock+0x2b/0x80 [ 83.733150][ T7600] ? is_bpf_text_address+0x8a/0x1a0 [ 83.733171][ T7600] ? is_bpf_text_address+0x8a/0x1a0 [ 83.733196][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733212][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733226][ T7600] ? __kernel_text_address+0xd/0x30 [ 83.733244][ T7600] ? unwind_get_return_address+0x59/0xa0 [ 83.733271][ T7600] ? find_held_lock+0x2b/0x80 [ 83.733289][ T7600] ? __might_fault+0xc5/0x140 [ 83.733310][ T7600] ? __might_fault+0xc5/0x140 [ 83.733337][ T7600] binder_thread_write+0x131f/0x4dd0 [ 83.733363][ T7600] ? __x64_sys_ioctl+0xb7/0x210 [ 83.733395][ T7600] ? __lock_acquire+0x4a5/0x2630 [ 83.733410][ T7600] ? __pfx_binder_thread_write+0x10/0x10 [ 83.733434][ T7600] ? find_held_lock+0x2b/0x80 [ 83.733453][ T7600] ? binder_debug+0xe0/0x190 [ 83.733472][ T7600] ? __pfx_binder_debug+0x10/0x10 [ 83.733492][ T7600] ? binder_debug+0xe0/0x190 [ 83.733512][ T7600] ? __pfx_binder_debug+0x10/0x10 [ 83.733545][ T7600] binder_ioctl+0x2941/0x7610 [ 83.733575][ T7600] ? tomoyo_path_number_perm+0x188/0x580 [ 83.733602][ T7600] ? __pfx_binder_ioctl+0x10/0x10 [ 83.733628][ T7600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.733651][ T7600] ? do_vfs_ioctl+0x226/0x13e0 [ 83.733674][ T7600] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.733697][ T7600] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.733726][ T7600] ? hook_file_ioctl_common+0x146/0x410 [ 83.733748][ T7600] ? selinux_file_ioctl+0x139/0x290 [ 83.733769][ T7600] ? selinux_file_ioctl+0xb4/0x290 [ 83.733791][ T7600] ? __pfx_binder_ioctl+0x10/0x10 [ 83.733832][ T7600] __x64_sys_ioctl+0x18e/0x210 [ 83.733858][ T7600] do_syscall_64+0x106/0xf80 [ 83.733880][ T7600] ? clear_bhb_loop+0x40/0x90 [ 83.733900][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.733916][ T7600] RIP: 0033:0x7fafeab9c799 [ 83.733929][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.733943][ T7600] RSP: 002b:00007fafeb9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.733959][ T7600] RAX: ffffffffffffffda RBX: 00007fafeae15fa0 RCX: 00007fafeab9c799 [ 83.733969][ T7600] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 83.733978][ T7600] RBP: 00007fafeb9c4090 R08: 0000000000000000 R09: 0000000000000000 [ 83.733987][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.733996][ T7600] R13: 00007fafeae16038 R14: 00007fafeae15fa0 R15: 00007ffe544ca208 [ 83.734016][ T7600] [ 83.774461][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 83.882557][ T10] usb 8-1: USB disconnect, device number 6 [ 84.164492][ T7621] FAULT_INJECTION: forcing a failure. [ 84.164492][ T7621] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.168455][ T7621] CPU: 3 UID: 0 PID: 7621 Comm: syz.2.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.168472][ T7621] Tainted: [L]=SOFTLOCKUP [ 84.168475][ T7621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.168482][ T7621] Call Trace: [ 84.168486][ T7621] [ 84.168491][ T7621] dump_stack_lvl+0x100/0x190 [ 84.168521][ T7621] should_fail_ex.cold+0x5/0xa [ 84.168534][ T7621] ? prepare_alloc_pages+0x16d/0x5f0 [ 84.168549][ T7621] should_fail_alloc_page+0xeb/0x140 [ 84.168562][ T7621] prepare_alloc_pages+0x1f0/0x5f0 [ 84.168574][ T7621] ? arch_stack_walk+0xa6/0xf0 [ 84.168588][ T7621] ? look_up_lock_class+0x55/0x120 [ 84.168614][ T7621] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 84.168634][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.168646][ T7621] ? stack_depot_save_flags+0x27/0x9d0 [ 84.168664][ T7621] ? is_bpf_text_address+0x94/0x1a0 [ 84.168681][ T7621] ? kernel_text_address+0x8d/0x100 [ 84.168695][ T7621] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.168712][ T7621] ? lock_acquire+0x1cf/0x380 [ 84.168727][ T7621] ? __mutex_lock+0x26a/0x1b90 [ 84.168744][ T7621] ? find_held_lock+0x2b/0x80 [ 84.168758][ T7621] ? binder_alloc_new_buf+0x16ff/0x3100 [ 84.168769][ T7621] ? binder_alloc_new_buf+0x16ff/0x3100 [ 84.168779][ T7621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.168797][ T7621] ? policy_nodemask+0xed/0x4f0 [ 84.168809][ T7621] alloc_pages_mpol+0x1fb/0x550 [ 84.168820][ T7621] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.168832][ T7621] ? binder_alloc_new_buf+0x15d4/0x3100 [ 84.168843][ T7621] ? rcu_is_watching+0x12/0xc0 [ 84.168858][ T7621] alloc_pages_noprof+0x131/0x390 [ 84.168870][ T7621] binder_alloc_new_buf+0x194b/0x3100 [ 84.168887][ T7621] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 84.168925][ T7621] binder_transaction+0x1f70/0x9ee0 [ 84.168951][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.168964][ T7621] ? __pfx_binder_transaction+0x10/0x10 [ 84.168984][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.168997][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.169014][ T7621] ? find_held_lock+0x2b/0x80 [ 84.169028][ T7621] ? is_bpf_text_address+0x8a/0x1a0 [ 84.169044][ T7621] ? is_bpf_text_address+0x8a/0x1a0 [ 84.169062][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.169072][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.169082][ T7621] ? __kernel_text_address+0xd/0x30 [ 84.169095][ T7621] ? unwind_get_return_address+0x59/0xa0 [ 84.169113][ T7621] ? find_held_lock+0x2b/0x80 [ 84.169127][ T7621] ? __might_fault+0xc5/0x140 [ 84.169142][ T7621] ? __might_fault+0xc5/0x140 [ 84.169162][ T7621] binder_thread_write+0x131f/0x4dd0 [ 84.169182][ T7621] ? __x64_sys_ioctl+0xb7/0x210 [ 84.169202][ T7621] ? __lock_acquire+0x4a5/0x2630 [ 84.169212][ T7621] ? __pfx_binder_thread_write+0x10/0x10 [ 84.169230][ T7621] ? find_held_lock+0x2b/0x80 [ 84.169244][ T7621] ? binder_debug+0xe0/0x190 [ 84.169259][ T7621] ? __pfx_binder_debug+0x10/0x10 [ 84.169276][ T7621] ? binder_debug+0xe0/0x190 [ 84.169296][ T7621] ? __pfx_binder_debug+0x10/0x10 [ 84.169331][ T7621] binder_ioctl+0x2941/0x7610 [ 84.169363][ T7621] ? tomoyo_path_number_perm+0x188/0x580 [ 84.169392][ T7621] ? __pfx_binder_ioctl+0x10/0x10 [ 84.169420][ T7621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.169445][ T7621] ? do_vfs_ioctl+0x226/0x13e0 [ 84.169462][ T7621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.169479][ T7621] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.169500][ T7621] ? hook_file_ioctl_common+0x146/0x410 [ 84.169517][ T7621] ? selinux_file_ioctl+0x139/0x290 [ 84.169532][ T7621] ? selinux_file_ioctl+0xb4/0x290 [ 84.169549][ T7621] ? __pfx_binder_ioctl+0x10/0x10 [ 84.169566][ T7621] __x64_sys_ioctl+0x18e/0x210 [ 84.169584][ T7621] do_syscall_64+0x106/0xf80 [ 84.169600][ T7621] ? clear_bhb_loop+0x40/0x90 [ 84.169613][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.169625][ T7621] RIP: 0033:0x7f513ff9c799 [ 84.169634][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.169645][ T7621] RSP: 002b:00007f5140ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.169656][ T7621] RAX: ffffffffffffffda RBX: 00007f5140215fa0 RCX: 00007f513ff9c799 [ 84.169663][ T7621] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 84.169670][ T7621] RBP: 00007f5140ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 84.169676][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.169682][ T7621] R13: 00007f5140216038 R14: 00007f5140215fa0 R15: 00007ffd9a9947b8 [ 84.169695][ T7621] [ 84.239237][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 84.298692][ T7626] xt_CT: No such helper "pptp" [ 84.332665][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 84.332682][ T40] audit: type=1400 audit(1774660324.023:449): avc: denied { setopt } for pid=7625 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.351339][ T7623] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 84.451201][ T40] audit: type=1400 audit(1774660324.143:450): avc: denied { ioctl } for pid=7632 comm="syz.3.538" path="socket:[18961]" dev="sockfs" ino=18961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.486811][ T7633] Invalid ELF header type: 0 != 1 [ 84.486821][ T40] audit: type=1400 audit(1774660324.183:451): avc: denied { module_load } for pid=7632 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 84.632815][ T7646] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 84.714376][ T7654] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0008:7d01 with DS=0x1 [ 84.735105][ T40] audit: type=1400 audit(1774660324.433:452): avc: denied { ioctl } for pid=7655 comm="syz.1.545" path="socket:[21716]" dev="sockfs" ino=21716 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.835271][ T7660] FAULT_INJECTION: forcing a failure. [ 84.835271][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 84.840171][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.840197][ T7660] Tainted: [L]=SOFTLOCKUP [ 84.840202][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.840211][ T7660] Call Trace: [ 84.840217][ T7660] [ 84.840224][ T7660] dump_stack_lvl+0x100/0x190 [ 84.840255][ T7660] should_fail_ex.cold+0x5/0xa [ 84.840276][ T7660] should_failslab+0xc2/0x120 [ 84.840293][ T7660] __kmalloc_cache_noprof+0x7a/0x6f0 [ 84.840314][ T7660] ? binder_alloc_new_buf+0x1988/0x3100 [ 84.840335][ T7660] binder_alloc_new_buf+0x1988/0x3100 [ 84.840360][ T7660] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 84.840383][ T7660] binder_transaction+0x1f70/0x9ee0 [ 84.840423][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840449][ T7660] ? __pfx_binder_transaction+0x10/0x10 [ 84.840477][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840497][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840522][ T7660] ? find_held_lock+0x2b/0x80 [ 84.840542][ T7660] ? is_bpf_text_address+0x8a/0x1a0 [ 84.840564][ T7660] ? is_bpf_text_address+0x8a/0x1a0 [ 84.840590][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840606][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840620][ T7660] ? __kernel_text_address+0xd/0x30 [ 84.840638][ T7660] ? unwind_get_return_address+0x59/0xa0 [ 84.840664][ T7660] ? find_held_lock+0x2b/0x80 [ 84.840683][ T7660] ? __might_fault+0xc5/0x140 [ 84.840704][ T7660] ? __might_fault+0xc5/0x140 [ 84.840732][ T7660] binder_thread_write+0x131f/0x4dd0 [ 84.840759][ T7660] ? __x64_sys_ioctl+0xb7/0x210 [ 84.840786][ T7660] ? __lock_acquire+0x4a5/0x2630 [ 84.840801][ T7660] ? __pfx_binder_thread_write+0x10/0x10 [ 84.840826][ T7660] ? find_held_lock+0x2b/0x80 [ 84.840844][ T7660] ? binder_debug+0xe0/0x190 [ 84.840865][ T7660] ? __pfx_binder_debug+0x10/0x10 [ 84.840887][ T7660] ? binder_debug+0xe0/0x190 [ 84.840931][ T7660] ? __pfx_binder_debug+0x10/0x10 [ 84.840965][ T7660] binder_ioctl+0x2941/0x7610 [ 84.840995][ T7660] ? tomoyo_path_number_perm+0x188/0x580 [ 84.841022][ T7660] ? __pfx_binder_ioctl+0x10/0x10 [ 84.841048][ T7660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.841073][ T7660] ? do_vfs_ioctl+0x226/0x13e0 [ 84.841096][ T7660] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.841119][ T7660] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.841149][ T7660] ? hook_file_ioctl_common+0x146/0x410 [ 84.841184][ T7660] ? selinux_file_ioctl+0x139/0x290 [ 84.841207][ T7660] ? selinux_file_ioctl+0xb4/0x290 [ 84.841230][ T7660] ? __pfx_binder_ioctl+0x10/0x10 [ 84.841270][ T7660] __x64_sys_ioctl+0x18e/0x210 [ 84.841294][ T7660] do_syscall_64+0x106/0xf80 [ 84.841316][ T7660] ? clear_bhb_loop+0x40/0x90 [ 84.841335][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.841350][ T7660] RIP: 0033:0x7fd4bbb9c799 [ 84.841364][ T7660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.841379][ T7660] RSP: 002b:00007fd4bcabc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.841394][ T7660] RAX: ffffffffffffffda RBX: 00007fd4bbe15fa0 RCX: 00007fd4bbb9c799 [ 84.841404][ T7660] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 84.841414][ T7660] RBP: 00007fd4bcabc090 R08: 0000000000000000 R09: 0000000000000000 [ 84.841423][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.841437][ T7660] R13: 00007fd4bbe16038 R14: 00007fd4bbe15fa0 R15: 00007fffa986c0c8 [ 84.841458][ T7660] [ 85.129087][ T40] audit: type=1400 audit(1774660324.823:453): avc: denied { getopt } for pid=7675 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.129805][ T7677] netlink: 620 bytes leftover after parsing attributes in process `syz.1.551'. [ 85.541024][ T7698] FAULT_INJECTION: forcing a failure. [ 85.541024][ T7698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.553910][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.1.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.553940][ T7698] Tainted: [L]=SOFTLOCKUP [ 85.553947][ T7698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.553957][ T7698] Call Trace: [ 85.553962][ T7698] [ 85.553969][ T7698] dump_stack_lvl+0x100/0x190 [ 85.554006][ T7698] should_fail_ex.cold+0x5/0xa [ 85.554026][ T7698] ? prepare_alloc_pages+0x16d/0x5f0 [ 85.554047][ T7698] should_fail_alloc_page+0xeb/0x140 [ 85.554068][ T7698] prepare_alloc_pages+0x1f0/0x5f0 [ 85.554091][ T7698] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 85.554128][ T7698] ? find_held_lock+0x2b/0x80 [ 85.554157][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 85.554183][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 85.554206][ T7698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.554236][ T7698] ? is_bpf_text_address+0x94/0x1a0 [ 85.554260][ T7698] ? kernel_text_address+0x8d/0x100 [ 85.554279][ T7698] ? __kernel_text_address+0xd/0x30 [ 85.554302][ T7698] ? register_lock_class+0x40/0x560 [ 85.554323][ T7698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.554351][ T7698] ? policy_nodemask+0xed/0x4f0 [ 85.554372][ T7698] alloc_pages_mpol+0x1fb/0x550 [ 85.554391][ T7698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.554416][ T7698] alloc_pages_noprof+0x131/0x390 [ 85.554433][ T7698] pte_alloc_one+0x1c/0x3d0 [ 85.554457][ T7698] __pte_alloc+0x6d/0x3e0 [ 85.554473][ T7698] ? __pfx___pte_alloc+0x10/0x10 [ 85.554492][ T7698] ? walk_to_pmd+0x302/0x4c0 [ 85.554513][ T7698] get_locked_pte+0xa1/0xc0 [ 85.554534][ T7698] insert_page+0xcc/0x220 [ 85.554553][ T7698] ? __pfx_insert_page+0x10/0x10 [ 85.554582][ T7698] vm_insert_page+0x2c0/0x400 [ 85.554603][ T7698] binder_alloc_new_buf+0x2231/0x3100 [ 85.554633][ T7698] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 85.554659][ T7698] binder_transaction+0x1f70/0x9ee0 [ 85.554705][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.554727][ T7698] ? __pfx_binder_transaction+0x10/0x10 [ 85.554759][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.554782][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.554812][ T7698] ? find_held_lock+0x2b/0x80 [ 85.554834][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 85.554858][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 85.554890][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.554907][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.554924][ T7698] ? __kernel_text_address+0xd/0x30 [ 85.554942][ T7698] ? unwind_get_return_address+0x59/0xa0 [ 85.554974][ T7698] ? find_held_lock+0x2b/0x80 [ 85.554995][ T7698] ? __might_fault+0xc5/0x140 [ 85.555018][ T7698] ? __might_fault+0xc5/0x140 [ 85.555052][ T7698] binder_thread_write+0x131f/0x4dd0 [ 85.555082][ T7698] ? __x64_sys_ioctl+0xb7/0x210 [ 85.555112][ T7698] ? __lock_acquire+0x4a5/0x2630 [ 85.555129][ T7698] ? __pfx_binder_thread_write+0x10/0x10 [ 85.555161][ T7698] ? find_held_lock+0x2b/0x80 [ 85.555182][ T7698] ? binder_debug+0xe0/0x190 [ 85.555205][ T7698] ? __pfx_binder_debug+0x10/0x10 [ 85.555229][ T7698] ? binder_debug+0xe0/0x190 [ 85.555251][ T7698] ? __pfx_binder_debug+0x10/0x10 [ 85.555290][ T7698] binder_ioctl+0x2941/0x7610 [ 85.555326][ T7698] ? tomoyo_path_number_perm+0x188/0x580 [ 85.555357][ T7698] ? __pfx_binder_ioctl+0x10/0x10 [ 85.555386][ T7698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.555412][ T7698] ? do_vfs_ioctl+0x226/0x13e0 [ 85.555438][ T7698] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.555463][ T7698] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.555497][ T7698] ? hook_file_ioctl_common+0x146/0x410 [ 85.555521][ T7698] ? selinux_file_ioctl+0x139/0x290 [ 85.555546][ T7698] ? selinux_file_ioctl+0xb4/0x290 [ 85.555572][ T7698] ? __pfx_binder_ioctl+0x10/0x10 [ 85.555598][ T7698] __x64_sys_ioctl+0x18e/0x210 [ 85.555627][ T7698] do_syscall_64+0x106/0xf80 [ 85.555652][ T7698] ? clear_bhb_loop+0x40/0x90 [ 85.555673][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.555690][ T7698] RIP: 0033:0x7fd4bbb9c799 [ 85.555706][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.555721][ T7698] RSP: 002b:00007fd4bcabc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.555738][ T7698] RAX: ffffffffffffffda RBX: 00007fd4bbe15fa0 RCX: 00007fd4bbb9c799 [ 85.555749][ T7698] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 85.555759][ T7698] RBP: 00007fd4bcabc090 R08: 0000000000000000 R09: 0000000000000000 [ 85.555769][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.555779][ T7698] R13: 00007fd4bbe16038 R14: 00007fd4bbe15fa0 R15: 00007fffa986c0c8 [ 85.555803][ T7698] [ 85.555836][ T7698] binder_alloc: 7697: binder_install_single_page failed to insert page at offset 0 with -12 [ 85.616312][ T7702] binder: 7701:7702 ioctl c020f509 200000000200 returned -22 [ 85.677833][ T40] audit: type=1400 audit(1774660325.373:454): avc: denied { ioctl } for pid=7701 comm="syz.3.562" path="socket:[20130]" dev="sockfs" ino=20130 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.694443][ T7702] binder: 7701:7702 ioctl c0306201 2000000004c0 returned -14 [ 85.755776][ T7705] binder: 7701:7705 ioctl c0306201 2000000001c0 returned -14 [ 85.946332][ T7730] FAULT_INJECTION: forcing a failure. [ 85.946332][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 85.951822][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.0.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.951853][ T7730] Tainted: [L]=SOFTLOCKUP [ 85.951859][ T7730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.951869][ T7730] Call Trace: [ 85.951877][ T7730] [ 85.951884][ T7730] dump_stack_lvl+0x100/0x190 [ 85.951918][ T7730] should_fail_ex.cold+0x5/0xa [ 85.951942][ T7730] should_failslab+0xc2/0x120 [ 85.951961][ T7730] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 85.951986][ T7730] ? ptlock_alloc+0x1f/0x70 [ 85.952014][ T7730] ptlock_alloc+0x1f/0x70 [ 85.952036][ T7730] pte_alloc_one+0x82/0x3d0 [ 85.952060][ T7730] __pte_alloc+0x6d/0x3e0 [ 85.952077][ T7730] ? __pfx___pte_alloc+0x10/0x10 [ 85.952095][ T7730] ? walk_to_pmd+0x302/0x4c0 [ 85.952117][ T7730] get_locked_pte+0xa1/0xc0 [ 85.952138][ T7730] insert_page+0xcc/0x220 [ 85.952159][ T7730] ? __pfx_insert_page+0x10/0x10 [ 85.952185][ T7730] vm_insert_page+0x2c0/0x400 [ 85.952208][ T7730] binder_alloc_new_buf+0x2231/0x3100 [ 85.952239][ T7730] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 85.952264][ T7730] binder_transaction+0x1f70/0x9ee0 [ 85.952315][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952337][ T7730] ? __pfx_binder_transaction+0x10/0x10 [ 85.952369][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952392][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952422][ T7730] ? find_held_lock+0x2b/0x80 [ 85.952444][ T7730] ? is_bpf_text_address+0x8a/0x1a0 [ 85.952469][ T7730] ? is_bpf_text_address+0x8a/0x1a0 [ 85.952498][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952516][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952533][ T7730] ? __kernel_text_address+0xd/0x30 [ 85.952553][ T7730] ? unwind_get_return_address+0x59/0xa0 [ 85.952583][ T7730] ? find_held_lock+0x2b/0x80 [ 85.952605][ T7730] ? __might_fault+0xc5/0x140 [ 85.952628][ T7730] ? __might_fault+0xc5/0x140 [ 85.952660][ T7730] binder_thread_write+0x131f/0x4dd0 [ 85.952690][ T7730] ? __x64_sys_ioctl+0xb7/0x210 [ 85.952721][ T7730] ? __lock_acquire+0x4a5/0x2630 [ 85.952738][ T7730] ? __pfx_binder_thread_write+0x10/0x10 [ 85.952766][ T7730] ? find_held_lock+0x2b/0x80 [ 85.952786][ T7730] ? binder_debug+0xe0/0x190 [ 85.952810][ T7730] ? __pfx_binder_debug+0x10/0x10 [ 85.952833][ T7730] ? binder_debug+0xe0/0x190 [ 85.952855][ T7730] ? __pfx_binder_debug+0x10/0x10 [ 85.952914][ T7730] binder_ioctl+0x2941/0x7610 [ 85.952951][ T7730] ? tomoyo_path_number_perm+0x188/0x580 [ 85.952982][ T7730] ? __pfx_binder_ioctl+0x10/0x10 [ 85.953012][ T7730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.953039][ T7730] ? do_vfs_ioctl+0x226/0x13e0 [ 85.953064][ T7730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.953089][ T7730] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.953124][ T7730] ? hook_file_ioctl_common+0x146/0x410 [ 85.953149][ T7730] ? selinux_file_ioctl+0x139/0x290 [ 85.953172][ T7730] ? selinux_file_ioctl+0xb4/0x290 [ 85.953198][ T7730] ? __pfx_binder_ioctl+0x10/0x10 [ 85.953226][ T7730] __x64_sys_ioctl+0x18e/0x210 [ 85.953254][ T7730] do_syscall_64+0x106/0xf80 [ 85.953279][ T7730] ? clear_bhb_loop+0x40/0x90 [ 85.953301][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.953327][ T7730] RIP: 0033:0x7fafeab9c799 [ 85.953343][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.953359][ T7730] RSP: 002b:00007fafeb9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.953376][ T7730] RAX: ffffffffffffffda RBX: 00007fafeae15fa0 RCX: 00007fafeab9c799 [ 85.953389][ T7730] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 85.953399][ T7730] RBP: 00007fafeb9c4090 R08: 0000000000000000 R09: 0000000000000000 [ 85.953409][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.953419][ T7730] R13: 00007fafeae16038 R14: 00007fafeae15fa0 R15: 00007ffe544ca208 [ 85.953444][ T7730] [ 85.953498][ T7730] binder_alloc: 7729: binder_install_single_page failed to insert page at offset 0 with -12 [ 86.023290][ T7736] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0028:0000:0000:0002:7d01 with DS=0x1 [ 86.099520][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 86.126833][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.576'. [ 86.178034][ T7744] binder: BINDER_SET_CONTEXT_MGR already set [ 86.180444][ T7744] binder: 7743:7744 ioctl 4018620d 200000000200 returned -16 [ 86.249567][ T40] audit: type=1400 audit(1774660325.943:455): avc: denied { setopt } for pid=7747 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.438005][ T7757] binder: BINDER_SET_CONTEXT_MGR already set [ 86.440962][ T7757] binder: 7756:7757 ioctl 4018620d 200000004a80 returned -16 [ 86.546658][ T50] cfg80211: failed to load regulatory.db [ 86.586411][ T7779] mmap: syz.3.591 (7779) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.789972][ T40] audit: type=1400 audit(1774660326.483:456): avc: denied { write } for pid=7791 comm="syz.0.598" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.798538][ T40] audit: type=1400 audit(1774660326.483:457): avc: denied { mount } for pid=7791 comm="syz.0.598" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.806996][ T40] audit: type=1400 audit(1774660326.483:458): avc: denied { unmount } for pid=7791 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.853365][ T7794] binder: BINDER_SET_CONTEXT_MGR already set [ 86.855955][ T7794] binder: 7793:7794 ioctl 4018620d 200000004a80 returned -16 [ 86.969363][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 86.972958][ T7808] netlink: 51 bytes leftover after parsing attributes in process `syz.0.601'. [ 87.043975][ T7812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.055441][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.058374][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.133190][ T5940] block nbd1: Receive control failed (result -107) [ 87.176236][ T7811] block nbd1: shutting down sockets [ 87.228860][ T7820] ip6_tunnel: non-ECT from fe88:a43d:e1a4:00f5:0000:0000:0002:7d01 with DS=0x1 [ 87.620624][ T7840] netlink: 'syz.2.615': attribute type 3 has an invalid length. [ 87.623454][ T7840] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 87.626730][ T7840] netlink: 224 bytes leftover after parsing attributes in process `syz.2.615'. [ 87.629920][ T7840] NCSI netlink: No device for ifindex 33022 [ 87.885222][ T7855] overlayfs: missing 'lowerdir' [ 87.925648][ T7858] fuse: Unknown parameter '0x000000000000000700000000000000000000007' [ 88.044243][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 88.203957][ T50] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 88.212706][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 88.296319][ T7898] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 88.303903][ T7898] netlink: 228 bytes leftover after parsing attributes in process `syz.2.637'. [ 88.307635][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 88.318045][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 88.348761][ T50] usb 8-1: device descriptor read/64, error -71 [ 88.594029][ T50] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 88.724805][ T50] usb 8-1: device descriptor read/64, error -71 [ 88.837096][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 88.844117][ T50] usb usb8-port1: attempt power cycle [ 89.204039][ T50] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 89.227763][ T50] usb 8-1: device descriptor read/8, error -71 [ 89.249798][ T7958] can: request_module (can-proto-0) failed. [ 89.282281][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'. [ 89.464016][ T50] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 89.496342][ T50] usb 8-1: device descriptor read/8, error -71 [ 89.602320][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 89.617612][ T50] usb usb8-port1: unable to enumerate USB device [ 89.739535][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 89.739550][ T40] audit: type=1400 audit(1774660329.433:467): avc: denied { bind } for pid=7999 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.879762][ T8002] binder: 8001:8002 ioctl c0306201 200000000080 returned -14 [ 90.406097][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 90.444082][ T8020] veth0_to_bond: entered allmulticast mode [ 90.871023][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 90.989066][ T40] audit: type=1107 audit(1774660330.683:468): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='hxIŴ4͢0J`e?)Kб$ Cz|khGYZ)' [ 91.114296][ T8065] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 91.118506][ T40] audit: type=1400 audit(1774660330.813:469): avc: denied { ioctl } for pid=8064 comm="syz.0.699" path="socket:[22330]" dev="sockfs" ino=22330 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.118551][ T8065] syzkaller0: entered promiscuous mode [ 91.131272][ T8065] syzkaller0: entered allmulticast mode [ 91.163273][ T8069] capability: warning: `syz.3.701' uses deprecated v2 capabilities in a way that may be insecure [ 91.584541][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 91.609167][ T8099] bond0: (slave vlan0): Enslaving as a backup interface with an up link [ 91.734570][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 91.741929][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 91.750937][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.767231][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.771395][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.782356][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.789007][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.793440][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.013500][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 92.016414][ T9] usbtmc 8-1:16.0: can't read capabilities [ 92.277491][ T8155] loop7: detected capacity change from 0 to 7 [ 92.318673][ T7159] Dev loop7: unable to read RDB block 7 [ 92.320918][ T7159] loop7: unable to read partition table [ 92.322922][ T7159] loop7: partition table beyond EOD, truncated [ 92.365505][ T8155] Dev loop7: unable to read RDB block 7 [ 92.367471][ T8155] loop7: unable to read partition table [ 92.369428][ T8155] loop7: partition table beyond EOD, truncated [ 92.374063][ T8155] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 92.380328][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 92.383907][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 92.387895][ C3] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 92.391683][ C3] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 92.433483][ T8159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.484905][ T40] audit: type=1400 audit(1774660332.183:470): avc: denied { accept } for pid=8160 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.522452][ T8161] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.539285][ T8166] usb 2-1: USB disconnect, device number 2 [ 92.625382][ T40] audit: type=1326 audit(1774660332.323:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.740" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f513ff9c799 code=0xffff0000 [ 93.082874][ T8180] __nla_validate_parse: 3 callbacks suppressed [ 93.082893][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 93.193048][ T8188] No source specified [ 93.199507][ T8188] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 93.212479][ T8190] overlayfs: failed to clone upperpath [ 93.476455][ T8202] binder: 8201:8202 unknown command 0 [ 93.479047][ T8202] binder: 8201:8202 ioctl c0306201 2000000001c0 returned -22 [ 93.525699][ T8207] overlayfs: regular lower layers cannot follow data lower layers [ 93.587617][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 93.590559][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 93.593806][ T8207] netlink: 'syz.1.753': attribute type 19 has an invalid length. [ 93.697091][ T8221] netlink: 'syz.0.758': attribute type 39 has an invalid length. [ 93.967541][ T5939] syz_tun (unregistering): left allmulticast mode [ 93.970417][ T5939] syz_tun (unregistering): left promiscuous mode [ 93.973207][ T5939] bridge0: port 3(syz_tun) entered disabled state [ 94.174440][ T40] audit: type=1400 audit(1774660333.873:472): avc: denied { execute } for pid=8236 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.185503][ T40] audit: type=1400 audit(1774660333.873:473): avc: denied { execute_no_trans } for pid=8236 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.243447][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.248961][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.254081][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.260655][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.264406][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.358153][ T50] usb 8-1: USB disconnect, device number 11 [ 94.440669][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 94.503911][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.506835][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.509821][ T8237] bridge_slave_0: entered allmulticast mode [ 94.512724][ T8237] bridge_slave_0: entered promiscuous mode [ 94.520994][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.524155][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.527271][ T8237] bridge_slave_1: entered allmulticast mode [ 94.531132][ T8237] bridge_slave_1: entered promiscuous mode [ 94.552189][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.563474][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.607898][ T8237] team0: Port device team_slave_0 added [ 94.612694][ T8237] team0: Port device team_slave_1 added [ 94.627851][ T40] audit: type=1400 audit(1774660334.323:474): avc: denied { getopt } for pid=8268 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.630584][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.637407][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.647519][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.656999][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.660384][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.671783][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.695365][ T8275] xt_hashlimit: size too large, truncated to 1048576 [ 94.716185][ T8237] hsr_slave_0: entered promiscuous mode [ 94.719837][ T8237] hsr_slave_1: entered promiscuous mode [ 94.723037][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 94.726148][ T8237] Cannot create hsr debugfs directory [ 94.763573][ T40] audit: type=1400 audit(1774660334.453:475): avc: denied { write } for pid=8280 comm="syz.3.777" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.893795][ T8237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.911831][ T8237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.916204][ T40] audit: type=1400 audit(1774660334.613:476): avc: denied { bind } for pid=8296 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.933089][ T40] audit: type=1400 audit(1774660334.623:477): avc: denied { write } for pid=8296 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.935995][ T8237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.951025][ T8237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.996542][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.999247][ T8237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.002271][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.005940][ T8237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.024404][ T8313] IPv6: syztnl0: Disabled Multicast RS [ 95.071445][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.083812][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.088107][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.099691][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.110514][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.112889][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.119299][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.121778][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.269368][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.353484][ T8340] wireguard0: entered allmulticast mode [ 95.449416][ T8237] veth0_vlan: entered promiscuous mode [ 95.456242][ T8237] veth1_vlan: entered promiscuous mode [ 95.469986][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 95.472312][ T8237] veth0_macvtap: entered promiscuous mode [ 95.488397][ T8237] veth1_macvtap: entered promiscuous mode [ 95.497294][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.510636][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.520206][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.535098][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539554][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.546170][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.612333][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.618221][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.647902][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.651137][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.671444][ T40] audit: type=1400 audit(1774660335.363:478): avc: denied { mounton } for pid=8237 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 95.720319][ T8362] trusted_key: encrypted_key: master key parameter '' is invalid [ 95.937759][ T8379] netlink: 'syz.1.806': attribute type 4 has an invalid length. [ 95.954491][ T40] audit: type=1400 audit(1774660335.643:479): avc: denied { ioctl } for pid=8376 comm="syz.3.804" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.971616][ T8382] overlayfs: conflicting options: userxattr,metacopy=on [ 95.991359][ T40] audit: type=1400 audit(1774660335.683:480): avc: denied { ioctl } for pid=8376 comm="syz.3.804" path="socket:[25842]" dev="sockfs" ino=25842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.010659][ T40] audit: type=1400 audit(1774660335.703:481): avc: denied { bind } for pid=8376 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.021425][ T40] audit: type=1400 audit(1774660335.713:482): avc: denied { listen } for pid=8376 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.053290][ T8390] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.057680][ T8390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.063629][ T8390] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.068917][ T8391] fuse: Bad value for 'fd' [ 96.069866][ T8390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 96.079424][ T40] audit: type=1400 audit(1774660335.773:483): avc: denied { append } for pid=8389 comm="syz.4.810" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.092978][ T8390] trusted_key: syz.4.810 sent an empty control message without MSG_MORE. [ 96.099164][ T8391] fuse: Bad value for 'fd' [ 96.300576][ T8398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8398 comm=syz.0.812 [ 96.313056][ T8398] netlink: 31 bytes leftover after parsing attributes in process `syz.0.812'. [ 96.313933][ T5940] Bluetooth: hci2: command tx timeout [ 96.923070][ T40] audit: type=1400 audit(1774660336.613:484): avc: denied { ioctl } for pid=8431 comm="syz.0.824" path="socket:[27919]" dev="sockfs" ino=27919 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.098608][ T8441] Invalid ELF header type: 228 != 1 [ 97.184231][ T6007] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 97.283991][ T6018] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.333932][ T6007] usb 8-1: Using ep0 maxpacket: 32 [ 97.341969][ T6007] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 97.347719][ T6007] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 97.357226][ T6007] usb 8-1: string descriptor 0 read error: -22 [ 97.361214][ T6007] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 97.365729][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.375510][ T8434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.387202][ T6007] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.390674][ T6007] usb 8-1: MIDIStreaming interface descriptor not found [ 97.447328][ T6018] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 97.453216][ T6018] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.464004][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.467348][ T6018] usb 5-1: Product: syz [ 97.469102][ T6018] usb 5-1: Manufacturer: syz [ 97.471204][ T6018] usb 5-1: SerialNumber: syz [ 97.588266][ T8434] netlink: 64 bytes leftover after parsing attributes in process `syz.3.825'. [ 97.617878][ T6018] usb 8-1: USB disconnect, device number 12 [ 97.995622][ T8441] Invalid ELF header type: 3 != 1 [ 98.175819][ T8455] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:4000:0002:7d01 with DS=0x1 [ 98.304433][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 98.307847][ T8458] netlink: 31 bytes leftover after parsing attributes in process `syz.1.822'. [ 98.310758][ T8458] netlink: 'syz.1.822': attribute type 3 has an invalid length. [ 98.313148][ T8458] netlink: 'syz.1.822': attribute type 2 has an invalid length. [ 98.316636][ T8458] netlink: 31 bytes leftover after parsing attributes in process `syz.1.822'. [ 98.384383][ T5941] Bluetooth: hci2: command tx timeout [ 98.509196][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 98.696343][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 98.696526][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 98.809384][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 98.822377][ T8501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 99.016985][ T8520] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.851'. [ 99.020394][ T8523] sctp: [Deprecated]: syz.1.852 (pid 8523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.020394][ T8523] Use struct sctp_sack_info instead [ 99.029221][ T8518] sctp: [Deprecated]: syz.1.852 (pid 8518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.029221][ T8518] Use struct sctp_sack_info instead [ 99.296918][ T8540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8540 comm=syz.4.858 [ 99.348288][ T8542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8542 comm=syz.4.859 [ 99.353936][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 99.365620][ T46] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.369522][ T46] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.373796][ T46] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.379959][ T46] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.654216][ T8548] nftables ruleset with unbound set [ 99.659553][ T8548] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.671831][ T8548] CIFS mount error: No usable UNC path provided in device string! [ 99.671831][ T8548] [ 99.676477][ T8548] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 99.768879][ T8554] ip6_tunnel: non-ECT from fe88:a43d:e1a4:00ff:ffff:f500:0002:7d01 with DS=0x1 [ 100.001080][ T24] usb 5-1: USB disconnect, device number 7 [ 100.121868][ T8558] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 100.394028][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 100.394097][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.434506][ T8574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.454040][ T8574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.474433][ T5940] Bluetooth: hci2: command tx timeout [ 100.755706][ T8589] netlink: 'syz.0.878': attribute type 21 has an invalid length. [ 100.756525][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 100.756539][ T40] audit: type=1400 audit(1774660340.443:488): avc: denied { mount } for pid=8588 comm="syz.0.878" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.759263][ T8589] netlink: 'syz.0.878': attribute type 21 has an invalid length. [ 100.904726][ T8605] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:2800:0000:0002:7d01 with DS=0x1 [ 101.020212][ T8618] macsec1: entered promiscuous mode [ 101.216445][ T8630] befs: Unknown parameter 'debugSݒ-HZ+;y5ܮeto[N [ 101.216445][ T8630] !V`a [ 101.216445][ T8630] <S/iaϞTC7h·(Pn)uzD")_-j>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 103.607579][ T8746] openvswitch: netlink: IP tunnel dst address not specified [ 103.609513][ T8745] ufs: ufstype=old is supported read-only [ 103.616559][ T8745] ufs: ufs_fill_super(): bad magic number [ 103.661149][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 103.673581][ T8750] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:e803:0000:0002:7d01 with DS=0x1 [ 103.928074][ T8766] dlm: no locking on control device [ 104.042263][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 104.047300][ T8774] binder: 8772:8774 ioctl c0306201 0 returned -14 [ 104.194215][ T8783] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0005:0000:0002:7d01 with DS=0x1 [ 104.326774][ T40] audit: type=1400 audit(1774660344.023:497): avc: denied { connect } for pid=8790 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.548407][ T8804] xt_connbytes: Forcing CT accounting to be enabled [ 104.550748][ T8804] set match dimension is over the limit! [ 104.624118][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 104.635940][ T8811] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 104.639045][ T8811] overlayfs: overlapping lowerdir path [ 104.660980][ C1] hrtimer: interrupt took 92002 ns [ 104.683304][ T8811] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 104.686069][ T8811] overlayfs: overlapping lowerdir path [ 104.771654][ T8817] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0007:0000:0002:7d01 with DS=0x1 [ 104.930898][ T8821] input: syz1 as /devices/virtual/input/input9 [ 104.982269][ T8827] netlink: 'syz.3.959': attribute type 2 has an invalid length. [ 104.983709][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 105.039344][ T8833] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 105.048326][ T8835] SELinux: policydb string does not match my string SE Linux [ 105.051521][ T8835] SELinux: failed to load policy [ 105.145423][ T8846] SELinux: policydb version 70928500 does not match my version range 15-35 [ 105.148231][ T8846] SELinux: failed to load policy [ 105.171883][ T8848] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0028:0000:0002:7d01 with DS=0x1 [ 105.236201][ T8853] netlink: 'syz.3.969': attribute type 11 has an invalid length. [ 105.239514][ T8853] netlink: 244 bytes leftover after parsing attributes in process `syz.3.969'. [ 105.344712][ T8864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.359318][ T8864] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.367042][ T8867] gfs2: error -5 reading superblock [ 105.391931][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 105.395729][ T8867] netlink: 'syz.3.973': attribute type 30 has an invalid length. [ 105.398903][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 105.422737][ T8872] netlink: 164 bytes leftover after parsing attributes in process `syz.0.975'. [ 105.427283][ T5940] Bluetooth: unknown link type 238 [ 105.429577][ T5940] Bluetooth: hci3: connection err: -111 [ 105.599031][ T8887] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0040:0000:0002:7d01 with DS=0x1 [ 105.691441][ T8889] overlayfs: upper fs does not support tmpfile. [ 105.749946][ T8896] netlink: 'syz.4.984': attribute type 8 has an invalid length. [ 105.752488][ T8896] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 105.876544][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 105.876561][ T40] audit: type=1400 audit(1774660345.573:506): avc: denied { firmware_load } for pid=8905 comm="syz.4.987" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 105.893069][ T8906] syz.4.987 (8906) used greatest stack depth: 19104 bytes left [ 105.938899][ T40] audit: type=1400 audit(1774660345.633:507): avc: denied { read } for pid=8912 comm="syz.4.989" path="socket:[30833]" dev="sockfs" ino=30833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.007297][ T40] audit: type=1400 audit(1774660345.703:508): avc: denied { getopt } for pid=8912 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.070287][ T8919] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0060:0000:0002:7d01 with DS=0x1 [ 106.211768][ T40] audit: type=1400 audit(1774660345.903:509): avc: denied { append } for pid=8922 comm="syz.3.993" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.263911][ T9] delete_channel: no stack [ 106.376801][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.473984][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 106.649769][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.652692][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.656387][ T9] usb 8-1: Product: syz [ 106.657873][ T9] usb 8-1: Manufacturer: syz [ 106.659386][ T9] usb 8-1: SerialNumber: syz [ 106.666814][ T9] usb 8-1: config 0 descriptor?? [ 106.704709][ T8936] erspan1: entered promiscuous mode [ 106.847288][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1001'. [ 106.850199][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1001'. [ 107.054718][ T8949] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 107.067080][ T8949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.180977][ T40] audit: type=1400 audit(1774660346.873:510): avc: denied { map } for pid=8957 comm="syz.4.1008" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 107.185808][ T8958] binder: 8957:8958 ioctl c0306201 200000000640 returned -22 [ 107.189193][ T40] audit: type=1400 audit(1774660346.883:511): avc: denied { connect } for pid=8957 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.230464][ T8961] loop6: detected capacity change from 0 to 524287999 [ 107.235168][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.247104][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.249865][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.252423][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.256419][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.259063][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.261589][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.267759][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.270923][ T8961] ldm_validate_partition_table(): Disk read failed. [ 107.273552][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.276743][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.280063][ T8961] Dev loop6: unable to read RDB block 0 [ 107.282869][ T8961] loop6: unable to read partition table [ 107.285397][ T8961] loop_reread_partitions: partition scan of loop6 (3 x) failed (rc=-5) [ 107.597399][ T40] audit: type=1400 audit(1774660347.293:512): avc: granted { setsecparam } for pid=8983 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 107.665223][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 107.668653][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 107.671906][ T5940] Bluetooth: hci1: hardware error 0x00 [ 107.766722][ T40] audit: type=1400 audit(1774660347.463:513): avc: denied { lock } for pid=8996 comm="syz.4.1023" path="socket:[30147]" dev="sockfs" ino=30147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.774430][ T40] audit: type=1400 audit(1774660347.463:514): avc: denied { create } for pid=8996 comm="syz.4.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 108.207489][ T40] audit: type=1400 audit(1774660347.903:515): avc: denied { bind } for pid=9029 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.215247][ T9032] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 108.254458][ T9037] program syz.4.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.282223][ T9039] netlink: 'syz.0.1036': attribute type 13 has an invalid length. [ 108.290893][ T9039] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 108.462871][ T9057] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 108.471014][ T9057] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 108.475556][ T9057] exFAT-fs (nullb0): invalid boot record signature [ 108.478206][ T9057] exFAT-fs (nullb0): failed to read boot sector [ 108.480291][ T9057] exFAT-fs (nullb0): failed to recognize exfat type [ 108.585085][ T9060] dvmrp0: entered allmulticast mode [ 108.619734][ T9057] syz.4.1041 (9057): drop_caches: 2 [ 108.978191][ T9089] net_ratelimit: 2 callbacks suppressed [ 108.978203][ T9089] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0003:0002:7d01 with DS=0x1 [ 109.260855][ T9] usb 8-1: USB disconnect, device number 14 [ 109.280956][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.328080][ T9105] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 109.333123][ T9105] overlayfs: overlapping lowerdir path [ 109.744029][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 110.341229][ T9137] No source specified [ 110.384880][ T9141] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 110.403318][ T9141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.428053][ T9141] bond1: (slave gretap1): making interface the new active one [ 110.431273][ T9141] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.673957][ T9150] input: syz1 as /devices/virtual/input/input10 [ 110.734733][ T9150] __nla_validate_parse: 5 callbacks suppressed [ 110.734746][ T9150] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1072'. [ 110.838038][ T9155] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0005:0002:7d01 with DS=0x1 [ 111.026884][ T9159] bridge0: port 3(syz_tun) entered disabled state [ 111.031297][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.034310][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.082565][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.089271][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 111.090492][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.158835][ T1146] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.161689][ T1146] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.167945][ T1146] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.170903][ T1146] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.195279][ T9170] No source specified [ 111.228828][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 111.228844][ T40] audit: type=1400 audit(1774660350.923:523): avc: denied { unmount } for pid=9171 comm="syz.3.1081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 111.267323][ T40] audit: type=1400 audit(1774660350.963:524): avc: denied { mounton } for pid=9171 comm="syz.3.1081" path="/226/file0" dev="ramfs" ino=31250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 111.291527][ T9182] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0007:0002:7d01 with DS=0x1 [ 111.326037][ T9186] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.328472][ T9186] overlayfs: failed to set xattr on upper [ 111.330297][ T9186] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.332516][ T9186] overlayfs: ...falling back to index=off. [ 111.334651][ T9186] overlayfs: ...falling back to uuid=null. [ 111.336529][ T9186] overlayfs: ...falling back to xino=off. [ 111.338356][ T9186] overlayfs: conflicting lowerdir path [ 111.414902][ T40] audit: type=1400 audit(1774660351.113:525): avc: denied { create } for pid=9195 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 111.424072][ T40] audit: type=1400 audit(1774660351.113:526): avc: denied { sys_admin } for pid=9195 comm="syz.4.1089" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 111.430855][ T40] audit: type=1400 audit(1774660351.123:527): avc: denied { mounton } for pid=9171 comm="syz.3.1081" path="/226/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 111.470170][ T40] audit: type=1400 audit(1774660351.163:528): avc: denied { nlmsg_read } for pid=9205 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.470187][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 111.483705][ T9207] usb usb9: usbfs: process 9207 (syz.4.1091) did not claim interface 0 before use [ 111.594689][ T40] audit: type=1400 audit(1774660351.293:529): avc: denied { setopt } for pid=9215 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.657721][ T9223] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0028:0002:7d01 with DS=0x1 [ 111.676168][ T9225] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 111.693609][ T9225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.723209][ T9225] bond3: (slave gretap1): making interface the new active one [ 111.726847][ T9225] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 111.797152][ T40] audit: type=1400 audit(1774660351.493:530): avc: denied { connect } for pid=9231 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.820330][ T40] audit: type=1400 audit(1774660351.513:531): avc: denied { connect } for pid=9229 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.820562][ T9230] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 111.833969][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.834008][ T9232] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 111.840254][ T9232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.854610][ T9233] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 111.861889][ T9233] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 111.867676][ T9233] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 111.887046][ T9233] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 111.891989][ T9233] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 111.922779][ T9233] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 111.939618][ T9233] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 111.946469][ T9233] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 111.961435][ T9233] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 111.965796][ T9233] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 112.188009][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.191256][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.194902][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.198167][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.201211][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.226343][ T9249] NILFS (loop4): device size too small [ 112.264800][ T9253] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 112.287496][ T9253] bond2: entered promiscuous mode [ 112.289158][ T9253] bond2: entered allmulticast mode [ 112.291009][ T9253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.361499][ T87] bond0: (slave netdevsim0): Releasing backup interface [ 112.374749][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 112.436130][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.438461][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.440802][ T9243] bridge_slave_0: entered allmulticast mode [ 112.443453][ T9243] bridge_slave_0: entered promiscuous mode [ 112.446897][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.449165][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.451695][ T9243] bridge_slave_1: entered allmulticast mode [ 112.455377][ T9243] bridge_slave_1: entered promiscuous mode [ 112.473514][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.478222][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.494630][ T9243] team0: Port device team_slave_0 added [ 112.497762][ T9243] team0: Port device team_slave_1 added [ 112.512425][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.514874][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.522884][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.528883][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.531145][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.539381][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.614569][ T9243] hsr_slave_0: entered promiscuous mode [ 112.616883][ T9243] hsr_slave_1: entered promiscuous mode [ 112.618960][ T9243] debugfs: 'hsr0' already exists in 'hsr' [ 112.620770][ T9243] Cannot create hsr debugfs directory [ 112.663980][ T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 112.709227][ T87] bond3 (unregistering): (slave gretap1): Releasing active interface [ 112.721383][ T87] dvmrp0 (unregistering): left allmulticast mode [ 112.780344][ T87] bond0 (unregistering): Released all slaves [ 112.787951][ T87] bond1 (unregistering): Released all slaves [ 112.799521][ T87] bond2 (unregistering): Released all slaves [ 112.814373][ T87] bond3 (unregistering): Released all slaves [ 112.843593][ T50] usb 9-1: Using ep0 maxpacket: 32 [ 112.855163][ T50] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.858551][ T50] usb 9-1: config 0 has no interface number 0 [ 112.861130][ T50] usb 9-1: config 0 interface 184 has no altsetting 0 [ 112.879462][ T50] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.882793][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.886022][ T50] usb 9-1: Product: syz [ 112.887713][ T50] usb 9-1: Manufacturer: syz [ 112.889516][ T50] usb 9-1: SerialNumber: syz [ 112.894995][ T50] usb 9-1: config 0 descriptor?? [ 112.975201][ T87] IPVS: stopping backup sync thread 6156 ... [ 113.002229][ T9243] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.009110][ T9243] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.016529][ T9243] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.025266][ T9243] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.073587][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.094786][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.100887][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.103183][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.121128][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.123451][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.148757][ T40] audit: type=1400 audit(1774660352.843:532): avc: denied { module_request } for pid=9243 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 113.216881][ T87] hsr_slave_0: left promiscuous mode [ 113.219254][ T87] hsr_slave_1: left promiscuous mode [ 113.221556][ T87] batman_adv: batadv0: Removing interface: dummy0 [ 113.326715][ T50] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 113.330142][ T50] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 113.334543][ T50] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 113.338016][ T50] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 113.343411][ T50] usb 9-1: USB disconnect, device number 2 [ 113.441937][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.509421][ T9309] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.511961][ T9309] overlayfs: failed to set xattr on upper [ 113.514003][ T9309] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.516213][ T9309] overlayfs: ...falling back to index=off. [ 113.518229][ T9309] overlayfs: ...falling back to uuid=null. [ 113.521503][ T9309] overlayfs: maximum fs stacking depth exceeded [ 113.596258][ T9243] veth0_vlan: entered promiscuous mode [ 113.602029][ T9243] veth1_vlan: entered promiscuous mode [ 113.619225][ T9243] veth0_macvtap: entered promiscuous mode [ 113.623307][ T9243] veth1_macvtap: entered promiscuous mode [ 113.632483][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.641142][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.646795][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.649583][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.657710][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.671268][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.717351][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.719925][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.734087][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.736574][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.863894][ T9338] CUSE: unknown device info "" [ 113.865688][ T9338] CUSE: zero length info key specified [ 114.224149][ T5941] Bluetooth: hci3: command tx timeout [ 114.246797][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.250501][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.252899][ T9362] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0060:0002:7d01 with DS=0x1 [ 114.256442][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.259578][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.262529][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.373668][ T9359] chnl_net:caif_netlink_parms(): no params data found [ 114.443473][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.445951][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.448272][ T9359] bridge_slave_0: entered allmulticast mode [ 114.451050][ T9359] bridge_slave_0: entered promiscuous mode [ 114.454203][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.456484][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.458754][ T9359] bridge_slave_1: entered allmulticast mode [ 114.461513][ T9359] bridge_slave_1: entered promiscuous mode [ 114.477738][ T9359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.482458][ T9359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.505425][ T9359] team0: Port device team_slave_0 added [ 114.509061][ T9359] team0: Port device team_slave_1 added [ 114.526941][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.529907][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.543883][ T9359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.548471][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.550708][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.559080][ T9359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.581329][ T9359] hsr_slave_0: entered promiscuous mode [ 114.583606][ T9359] hsr_slave_1: entered promiscuous mode [ 114.585832][ T9359] debugfs: 'hsr0' already exists in 'hsr' [ 114.587635][ T9359] Cannot create hsr debugfs directory [ 114.692907][ T9359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.697292][ T9359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.702229][ T9359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.708888][ T9359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.711955][ T9375] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 114.727975][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.730294][ T9359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.732661][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.735009][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.778422][ T9359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.787160][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.790470][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.810996][ T9359] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.819516][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.821862][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.834232][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.836614][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.861549][ T9359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.871754][ T9359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.887013][ T9404] netlink: 'syz.4.1133': attribute type 13 has an invalid length. [ 114.959292][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 115.071331][ T9359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.295312][ T9359] veth0_vlan: entered promiscuous mode [ 115.307197][ T9359] veth1_vlan: entered promiscuous mode [ 115.327626][ T9359] veth0_macvtap: entered promiscuous mode [ 115.331593][ T9359] veth1_macvtap: entered promiscuous mode [ 115.340574][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.349324][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.356337][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.359464][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.362768][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.367233][ T1146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.412667][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.412688][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.436670][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.436684][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.532290][ T9462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9462 comm=syz.3.1145 [ 115.660170][ T9471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1147'. [ 115.695421][ T9475] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1148'. [ 115.756073][ T9477] binder: 9476:9477 ioctl 4008ae89 200000000980 returned -22 [ 115.832085][ T9489] loop5: detected capacity change from 0 to 7 [ 115.837523][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.840572][ C2] buffer_io_error: 7 callbacks suppressed [ 115.840580][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.845554][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.848913][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.851651][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.854776][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.858125][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.861206][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.864172][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.867219][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.869911][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.873155][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.875877][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.879028][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.881550][ T9489] ldm_validate_partition_table(): Disk read failed. [ 115.882247][ T9487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9487 comm=syz.5.1152 [ 115.889051][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.892087][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.894851][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.898843][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.902342][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.906626][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.910411][ T9489] Dev loop5: unable to read RDB block 0 [ 115.914925][ T9489] loop5: unable to read partition table [ 115.917492][ T9489] loop5: partition table beyond EOD, truncated [ 115.920153][ T9489] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 115.982382][ T9494] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 115.986869][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 116.035790][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 116.202946][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.207183][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.211088][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.221060][ T46] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.221109][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.228164][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.230109][ T46] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.231250][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.247393][ T46] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.260689][ T46] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.301859][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 116.301876][ T40] audit: type=1400 audit(1774660355.993:552): avc: denied { write } for pid=9521 comm="syz.3.1164" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 116.314185][ T5941] Bluetooth: hci4: command tx timeout [ 116.314192][ T5940] Bluetooth: hci3: command tx timeout [ 116.316397][ T40] audit: type=1400 audit(1774660356.013:553): avc: denied { ioctl } for pid=9521 comm="syz.3.1164" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 116.394465][ T9525] ucma_write: process 18 (syz.6.1165) changed security contexts after opening file descriptor, this is not allowed. [ 116.399113][ T40] audit: type=1400 audit(1774660356.093:554): avc: denied { setopt } for pid=9524 comm="syz.6.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.521133][ T9529] netlink: 'syz.4.1167': attribute type 5 has an invalid length. [ 116.528423][ T9529] ip6erspan0: entered promiscuous mode [ 116.533955][ T9529] netlink: 'syz.4.1167': attribute type 13 has an invalid length. [ 116.542875][ T9529] SELinux: policydb string length 6 does not match expected length 8 [ 116.547911][ T9529] SELinux: failed to load policy [ 116.659956][ T40] audit: type=1400 audit(1774660356.353:555): avc: denied { read append } for pid=9532 comm="syz.4.1169" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.671223][ T40] audit: type=1400 audit(1774660356.353:556): avc: denied { open } for pid=9532 comm="syz.4.1169" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.673994][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 116.682665][ T40] audit: type=1400 audit(1774660356.363:557): avc: denied { ioctl } for pid=9532 comm="syz.4.1169" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.787180][ T9542] SELinux: policydb string length 5 does not match expected length 8 [ 116.789913][ T9542] SELinux: failed to load policy [ 116.835051][ T10] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.843922][ T10] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 116.847348][ T10] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.853969][ T10] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.857662][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.871382][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.876507][ T10] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.879819][ T10] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.882477][ T10] usb 11-1: Product: syz [ 116.884406][ T10] usb 11-1: Manufacturer: syz [ 116.888473][ T9527] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 116.891902][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 116.893732][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 116.898178][ T10] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 116.900112][ T10] cdc_wdm 11-1:1.0: Unknown control protocol [ 117.103400][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1166'. [ 117.158149][ T40] audit: type=1400 audit(1774660356.853:558): avc: denied { read write } for pid=9526 comm="syz.6.1166" name="cdc-wdm0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 117.160357][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.167852][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.170685][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.173268][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.173956][ T40] audit: type=1400 audit(1774660356.853:559): avc: denied { open } for pid=9526 comm="syz.6.1166" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 117.175451][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.184725][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.186957][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.189297][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.191787][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.193976][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.196378][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.198863][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.201557][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.204200][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.206430][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.208525][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.210715][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.212962][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.215221][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 117.217365][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 117.243951][ T40] audit: type=1400 audit(1774660356.933:560): avc: denied { ioctl } for pid=9554 comm="syz.3.1175" path="socket:[36262]" dev="sockfs" ino=36262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.279653][ T39] usb 11-1: USB disconnect, device number 2 [ 117.369124][ T40] audit: type=1326 audit(1774660357.063:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.5.1178" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43959c799 code=0x0 [ 117.439889][ T9565] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.833513][ T9575] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1183'. [ 118.003257][ T9577] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 118.384428][ T5941] Bluetooth: hci4: command tx timeout [ 118.384681][ T5940] Bluetooth: hci3: command tx timeout [ 118.522160][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.528809][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.534630][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.538684][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.541373][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.544916][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.547926][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.550582][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.553041][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.555821][ T39] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 118.572893][ T39] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz0] on syz0 [ 118.863636][ T9623] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.912570][ T9629] tipc: Started in network mode [ 118.915712][ T9629] tipc: Node identity , cluster identity 4711 [ 118.919197][ T9629] tipc: Failed to set node id, please configure manually [ 118.921482][ T9629] tipc: Enabling of bearer rejected, failed to enable media [ 118.926988][ T9629] trusted_key: encrypted_key: hex blob is missing [ 119.235999][ T9649] netlink: 'syz.4.1204': attribute type 7 has an invalid length. [ 119.238850][ T9649] netlink: 'syz.4.1204': attribute type 8 has an invalid length. [ 119.246364][ T9649] erspan0: entered promiscuous mode [ 119.249880][ T9649] gretap0: entered promiscuous mode [ 119.256893][ T9649] erspan0: left promiscuous mode [ 119.259923][ T9649] gretap0: left promiscuous mode [ 119.263741][ T9653] IPVS: set_ctl: invalid protocol: 47 172.20.20.63:0 [ 119.392750][ T9663] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:00f5:0000:0002:7d01 with DS=0x1 [ 119.473451][ T9670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.543905][ T2118] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 119.583447][ T9676] can: request_module (can-proto-0) failed. [ 119.693921][ T2118] usb 8-1: Using ep0 maxpacket: 8 [ 119.696771][ T2118] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.699990][ T2118] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.703135][ T2118] usb 8-1: config 0 interface 0 has no altsetting 0 [ 119.705240][ T2118] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.707921][ T2118] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.714413][ T2118] usb 8-1: config 0 descriptor?? [ 119.813978][ T5993] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 119.975740][ T5993] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.979198][ T5993] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.982441][ T5993] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.986044][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.995013][ T9678] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.999052][ T5993] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.122809][ T2118] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 120.191335][ T9697] overlayfs: workdir and upperdir must reside under the same mount [ 120.239238][ T5993] usb 9-1: USB disconnect, device number 3 [ 120.322402][ T5812] usb 8-1: USB disconnect, device number 15 [ 120.415432][ T9705] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0300:0002:7d01 with DS=0x1 [ 120.464111][ T5941] Bluetooth: hci3: command tx timeout [ 120.466118][ T5940] Bluetooth: hci4: command tx timeout [ 120.520712][ T9707] geneve2: entered promiscuous mode [ 120.758890][ T9723] netlink: 'syz.5.1229': attribute type 1 has an invalid length. [ 120.778975][ T9723] bond1: entered promiscuous mode [ 120.780842][ T9723] bond1: entered allmulticast mode [ 120.783476][ T9723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.787099][ T9726] netlink: 'syz.4.1230': attribute type 13 has an invalid length. [ 120.793211][ T9723] erspan1: entered allmulticast mode [ 120.850677][ T9728] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:00e8:0300:0002:7d01 with DS=0x1 [ 120.959839][ T9744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.963071][ T9752] binder: BINDER_SET_CONTEXT_MGR already set [ 120.966559][ T9752] binder: 9750:9752 ioctl 4018620d 200000004a80 returned -16 [ 121.058922][ T9763] netlink: 'syz.4.1244': attribute type 9 has an invalid length. [ 121.062021][ T9763] netlink: 'syz.4.1244': attribute type 11 has an invalid length. [ 121.065186][ T9763] netlink: 'syz.4.1244': attribute type 12 has an invalid length. [ 121.068217][ T9763] __nla_validate_parse: 9 callbacks suppressed [ 121.068225][ T9763] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1244'. [ 121.068277][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 121.153774][ T9778] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0500:0002:7d01 with DS=0x1 [ 121.434467][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 121.465316][ T9822] xt_hashlimit: size too large, truncated to 1048576 [ 121.557993][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 121.558006][ T40] audit: type=1400 audit(1774660361.253:579): avc: denied { write } for pid=9820 comm="syz.4.1254" path="socket:[36613]" dev="sockfs" ino=36613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.614253][ T40] audit: type=1400 audit(1774660361.303:580): avc: denied { map } for pid=9820 comm="syz.4.1254" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.766245][ T9853] binder: 9852:9853 ioctl c0306201 200000000040 returned -11 [ 121.843729][ T9862] netlink: 'syz.3.1258': attribute type 11 has an invalid length. [ 122.544113][ T5940] Bluetooth: hci4: command tx timeout [ 123.665321][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 135.223195][ T9910] netlink: 'syz.6.1261': attribute type 13 has an invalid length. [ 135.224711][ T40] audit: type=1400 audit(1774660374.913:581): avc: denied { create } for pid=9913 comm="syz.3.1263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.238858][ T9915] efs: cannot read volume header [ 135.247827][ T40] audit: type=1400 audit(1774660374.933:582): avc: denied { mounton } for pid=9913 comm="syz.3.1263" path="/271/file0" dev="tmpfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.256228][ T40] audit: type=1400 audit(1774660374.933:583): avc: denied { write } for pid=9913 comm="syz.3.1263" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 135.260932][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1261'. [ 135.274966][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1261'. [ 135.278900][ T1146] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.282589][ T1146] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.287128][ T1146] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.291210][ T1146] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.318328][ T40] audit: type=1400 audit(1774660375.013:584): avc: denied { block_suspend } for pid=9912 comm="syz.4.1262" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.364454][ T40] audit: type=1400 audit(1774660375.053:585): avc: denied { read } for pid=9923 comm="syz.5.1265" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.442859][ T9934] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 135.458845][ T9934] bond4: entered promiscuous mode [ 135.461051][ T9934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.475144][ T9934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.478654][ T9934] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 135.482666][ T9934] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 135.488925][ T9934] bond4: (slave xfrm1): making interface the new active one [ 135.491914][ T9934] xfrm1: entered promiscuous mode [ 135.497154][ T9934] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 135.510537][ T9925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.513272][ T9925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.533180][ T9925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.547741][ T9925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.549847][ T9925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.550894][ T9942] binder: BINDER_SET_CONTEXT_MGR already set [ 135.557233][ T9942] binder: 9941:9942 ioctl 4018620d 200000004a80 returned -16 [ 135.563298][ T9925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.569319][ T9925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.571819][ T9925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.581075][ T9925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.589142][ T9925] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.591638][ T9925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.595394][ T9925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.756248][ T9918] nbd0: detected capacity change from 0 to 63 [ 135.774851][ T5936] block nbd0: Receive control failed (result -104) [ 135.777365][ T5947] block nbd0: Receive control failed (result -32) [ 135.777827][ T5941] block nbd0: Receive control failed (result -32) [ 135.783257][ T5940] block nbd0: Receive control failed (result -32) [ 135.786537][ T63] block nbd0: Receive control failed (result -32) [ 135.848375][ T9963] syz.3.1273: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.861364][ T9963] CPU: 0 UID: 0 PID: 9963 Comm: syz.3.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.861386][ T9963] Tainted: [L]=SOFTLOCKUP [ 135.861390][ T9963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.861398][ T9963] Call Trace: [ 135.861402][ T9963] [ 135.861407][ T9963] dump_stack_lvl+0x100/0x190 [ 135.861444][ T9963] warn_alloc.cold+0x95/0x1c1 [ 135.861466][ T9963] ? __pfx_warn_alloc+0x10/0x10 [ 135.861489][ T9963] ? kasan_save_stack+0x3f/0x50 [ 135.861507][ T9963] ? kasan_save_stack+0x30/0x50 [ 135.861523][ T9963] ? kasan_save_track+0x14/0x30 [ 135.861541][ T9963] ? xskq_create+0xfb/0x1d0 [ 135.861565][ T9963] __vmalloc_node_range_noprof+0x1252/0x1530 [ 135.861585][ T9963] ? xskq_create+0xfb/0x1d0 [ 135.861603][ T9963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.861625][ T9963] ? xskq_create+0xfb/0x1d0 [ 135.861639][ T9963] vmalloc_user_noprof+0x9e/0xe0 [ 135.861719][ T9963] ? xskq_create+0xfb/0x1d0 [ 135.861738][ T9963] xskq_create+0xfb/0x1d0 [ 135.861754][ T9963] xsk_setsockopt+0x743/0xab0 [ 135.861771][ T9963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.861786][ T9963] ? find_held_lock+0x2b/0x80 [ 135.861807][ T9963] ? __fget_files+0x215/0x3d0 [ 135.861824][ T9963] ? selinux_socket_setsockopt+0x6a/0x80 [ 135.861858][ T9963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.861873][ T9963] do_sock_setsockopt+0xf3/0x1d0 [ 135.861900][ T9963] __sys_setsockopt+0x195/0x220 [ 135.861922][ T9963] __x64_sys_setsockopt+0xbd/0x160 [ 135.861937][ T9963] ? do_syscall_64+0x95/0xf80 [ 135.861954][ T9963] ? lockdep_hardirqs_on+0x78/0x100 [ 135.861973][ T9963] do_syscall_64+0x106/0xf80 [ 135.861991][ T9963] ? clear_bhb_loop+0x40/0x90 [ 135.862009][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.862022][ T9963] RIP: 0033:0x7f823359c799 [ 135.862034][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.862045][ T9963] RSP: 002b:00007f823452a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.862056][ T9963] RAX: ffffffffffffffda RBX: 00007f8233815fa0 RCX: 00007f823359c799 [ 135.862063][ T9963] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 135.862070][ T9963] RBP: 00007f8233632c99 R08: 0000000000000004 R09: 0000000000000000 [ 135.862078][ T9963] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.862086][ T9963] R13: 00007f8233816038 R14: 00007f8233815fa0 R15: 00007ffefdc1c488 [ 135.862102][ T9963] [ 135.862108][ T9963] Mem-Info: [ 135.899957][ T9969] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:00f5:ffff:ff02:7d01 with DS=0x1 [ 135.903946][ T9963] active_anon:2779 inactive_anon:4358 isolated_anon:0 [ 135.903946][ T9963] active_file:9057 inactive_file:11021 isolated_file:0 [ 135.903946][ T9963] unevictable:1768 dirty:35 writeback:0 [ 135.903946][ T9963] slab_reclaimable:8222 slab_unreclaimable:77922 [ 135.903946][ T9963] mapped:28167 shmem:2392 pagetables:3661 [ 135.903946][ T9963] sec_pagetables:304 bounce:0 [ 135.903946][ T9963] kernel_misc_reclaimable:0 [ 135.903946][ T9963] free:471500 free_pcp:14408 free_cma:0 [ 135.908412][ T9968] netlink: 'syz.5.1276': attribute type 4 has an invalid length. [ 135.913185][ T9963] Node 0 active_anon:10384kB inactive_anon:17432kB active_file:19956kB inactive_file:43668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:140kB writeback:0kB shmem:6032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:12920kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 135.924786][ T9970] nfs4: Unknown parameter 'ond0' [ 135.927037][ T9963] Node 1 active_anon:732kB inactive_anon:0kB active_file:16272kB inactive_file:416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33680kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:1724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.020485][ T9963] Node 0 DMA free:12024kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:3044kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:36kB free_cma:0kB [ 136.034499][ T9963] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 136.036843][ T9963] Node 0 DMA32 free:326724kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10384kB inactive_anon:17432kB active_file:19956kB inactive_file:40624kB unevictable:3536kB writepending:140kB zspages:0kB present:2080628kB managed:1260816kB mlocked:0kB bounce:0kB free_pcp:33700kB local_pcp:8580kB free_cma:0kB [ 136.051488][ T9963] lowmem_reserve[]: 0 0 0 0 0 [ 136.053679][ T9963] Node 1 Normal free:1547252kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:732kB inactive_anon:0kB active_file:16272kB inactive_file:416kB unevictable:3536kB writepending:0kB zspages:2096kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:23904kB local_pcp:11724kB free_cma:0kB [ 136.067704][ T9963] lowmem_reserve[]: 0 0 0 0 0 [ 136.069734][ T9963] Node 0 DMA: 10*4kB (U) 8*8kB (UM) 11*16kB (UM) 11*32kB (U) 12*64kB (U) 9*128kB (U) 7*256kB (U) 5*512kB (U) 1*1024kB (M) 2*2048kB (UM) 0*4096kB = 12024kB [ 136.076180][ T9963] Node 0 DMA32: 3987*4kB (UME) 1881*8kB (UME) 1273*16kB (UME) 147*32kB (UME) 251*64kB (UME) 291*128kB (UME) 207*256kB (UM) 117*512kB (UM) 84*1024kB (UM) 7*2048kB (UM) 1*4096kB (M) = 326724kB [ 136.082053][ T9968] bond2: invalid ARP target 0.0.0.0 specified for addition [ 136.084013][ T9963] Node 1 Normal: 89*4kB (UM) 166*8kB (UM) 216*16kB (UME) 221*32kB (UME) 181*64kB (UM) 186*128kB (UME) 156*256kB (UME) 149*512kB (UME) 125*1024kB (UME) 5*2048kB (UME) 304*4096kB (UM) = 1547252kB [ 136.087212][ T9968] bond2: option arp_ip_target: invalid value (0) [ 136.094765][ T9963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.100744][ T9963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.102589][ T9968] bond2 (unregistering): Released all slaves [ 136.104666][ T9963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.110491][ T9963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.114368][ T9963] 22512 total pagecache pages [ 136.116310][ T9963] 46 pages in swap cache [ 136.118132][ T9963] Free swap = 121068kB [ 136.119874][ T9963] Total swap = 124996kB [ 136.121635][ T9963] 1048443 pages RAM [ 136.123207][ T9963] 0 pages HighMem/MovableOnly [ 136.125337][ T9963] 283928 pages reserved [ 136.127059][ T9963] 0 pages cma reserved [ 136.208294][ T40] audit: type=1400 audit(1774660375.903:586): avc: denied { ioctl } for pid=9975 comm="syz.3.1278" path="socket:[37717]" dev="sockfs" ino=37717 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.218768][ T40] audit: type=1400 audit(1774660375.913:587): avc: denied { accept } for pid=9975 comm="syz.3.1278" lport=41792 faddr=fc00::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 136.228313][ T40] audit: type=1400 audit(1774660375.913:588): avc: denied { getopt } for pid=9975 comm="syz.3.1278" lport=41792 faddr=fc00::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 136.323766][ T40] audit: type=1326 audit(1774660376.013:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.6.1281" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75dc19c799 code=0x0 [ 136.342100][ T9988] xt_hashlimit: size too large, truncated to 1048576 [ 136.342836][ T9987] [ 136.345860][ T9987] ====================================================== [ 136.348746][ T9987] WARNING: possible circular locking dependency detected [ 136.351156][ T40] audit: type=1400 audit(1774660376.033:590): avc: denied { read } for pid=9980 comm="syz.3.1280" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 136.351660][ T9987] syzkaller #0 Tainted: G L [ 136.351673][ T9987] ------------------------------------------------------ [ 136.365455][ T9987] syz.3.1280/9987 is trying to acquire lock: [ 136.367897][ T9987] ffffffff8e9ab860 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 136.372121][ T9987] [ 136.372121][ T9987] but task is already holding lock: [ 136.375135][ T9987] ffffffff8e979428 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 136.379012][ T9987] [ 136.379012][ T9987] which lock already depends on the new lock. [ 136.379012][ T9987] [ 136.383200][ T9987] [ 136.383200][ T9987] the existing dependency chain (in reverse order) is: [ 136.386850][ T9987] [ 136.386850][ T9987] -> #8 (slab_mutex){+.+.}-{4:4}: [ 136.389823][ T9987] __mutex_lock+0x1a2/0x1b90 [ 136.391990][ T9987] kmem_cache_destroy+0x59/0x180 [ 136.394234][ T9987] p9_client_destroy+0x20c/0x3a0 [ 136.396438][ T9987] v9fs_session_close+0x49/0x2d0 [ 136.398697][ T9987] v9fs_kill_super+0x4d/0xa0 [ 136.400817][ T9987] deactivate_locked_super+0xc1/0x1b0 [ 136.403242][ T9987] v9fs_get_tree+0x68c/0xb50 [ 136.405319][ T9987] vfs_get_tree+0x92/0x320 [ 136.407348][ T9987] path_mount+0x7d0/0x23d0 [ 136.409431][ T9987] __x64_sys_mount+0x293/0x310 [ 136.411625][ T9987] do_syscall_64+0x106/0xf80 [ 136.413749][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.416364][ T9987] [ 136.416364][ T9987] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 136.419551][ T9987] cpus_read_lock+0x42/0x170 [ 136.421711][ T9987] static_key_disable+0x12/0x20 [ 136.423941][ T9987] __inet_hash_connect+0x1378/0x1e40 [ 136.426338][ T9987] tcp_v4_connect+0xeb0/0x1b40 [ 136.428472][ T9987] __inet_stream_connect+0x208/0xfa0 [ 136.430932][ T9987] inet_stream_connect+0x57/0xa0 [ 136.433206][ T9987] __sys_connect_file+0x141/0x1a0 [ 136.435519][ T9987] __sys_connect+0x141/0x170 [ 136.437652][ T9987] __x64_sys_connect+0x72/0xb0 [ 136.439848][ T9987] do_syscall_64+0x106/0xf80 [ 136.442039][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.444673][ T9987] [ 136.444673][ T9987] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 136.447904][ T9987] lock_sock_nested+0x41/0xf0 [ 136.450059][ T9987] inet_shutdown+0x67/0x410 [ 136.452167][ T9987] nbd_mark_nsock_dead+0xae/0x5c0 [ 136.454452][ T9987] recv_work+0x5fb/0x8c0 [ 136.456434][ T9987] process_one_work+0xa23/0x19a0 [ 136.458712][ T9987] worker_thread+0x5ef/0xe50 [ 136.460866][ T9987] kthread+0x370/0x450 [ 136.462712][ T9987] ret_from_fork+0x754/0xd80 [ 136.464822][ T9987] ret_from_fork_asm+0x1a/0x30 [ 136.467002][ T9987] [ 136.467002][ T9987] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 136.470277][ T9987] __mutex_lock+0x1a2/0x1b90 [ 136.472407][ T9987] nbd_queue_rq+0x428/0x1080 [ 136.474553][ T9987] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 136.477075][ T9987] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 136.480048][ T9987] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 136.482728][ T9987] blk_mq_run_hw_queue+0x23c/0x670 [ 136.485096][ T9987] blk_mq_dispatch_list+0x51d/0x1360 [ 136.487479][ T9987] blk_mq_flush_plug_list+0x130/0x600 [ 136.490062][ T9987] __blk_flush_plug+0x2c4/0x4b0 [ 136.492308][ T9987] __submit_bio+0x584/0x6c0 [ 136.494396][ T9987] submit_bio_noacct_nocheck+0x562/0xc10 [ 136.496912][ T9987] submit_bio_noacct+0xd17/0x2010 [ 136.499204][ T9987] submit_bh_wbc+0x59c/0x770 [ 136.501590][ T9987] block_read_full_folio+0x264/0x8e0 [ 136.504057][ T9987] filemap_read_folio+0xfc/0x3b0 [ 136.506315][ T9987] do_read_cache_folio+0x2d7/0x6b0 [ 136.508646][ T9987] read_part_sector+0xd1/0x370 [ 136.510882][ T9987] adfspart_check_ICS+0x93/0x910 [ 136.513248][ T9987] bdev_disk_changed+0x7f8/0xc80 [ 136.515691][ T9987] blkdev_get_whole+0x187/0x290 [ 136.518057][ T9987] bdev_open+0x2c7/0xe40 [ 136.520098][ T9987] blkdev_open+0x34e/0x4f0 [ 136.522481][ T9987] do_dentry_open+0x6d8/0x1660 [ 136.524637][ T9987] vfs_open+0x82/0x3f0 [ 136.526567][ T9987] path_openat+0x208c/0x31a0 [ 136.528673][ T9987] do_file_open+0x20e/0x430 [ 136.530787][ T9987] do_sys_openat2+0x10d/0x1e0 [ 136.533115][ T9987] __x64_sys_openat+0x12d/0x210 [ 136.535541][ T9987] do_syscall_64+0x106/0xf80 [ 136.537766][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.540449][ T9987] [ 136.540449][ T9987] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 136.543454][ T9987] __mutex_lock+0x1a2/0x1b90 [ 136.545688][ T9987] nbd_queue_rq+0xba/0x1080 [ 136.547874][ T9987] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 136.550650][ T9987] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 136.553484][ T9987] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 136.556190][ T9987] blk_mq_run_hw_queue+0x23c/0x670 [ 136.558532][ T9987] blk_mq_dispatch_list+0x51d/0x1360 [ 136.561114][ T9987] blk_mq_flush_plug_list+0x130/0x600 [ 136.563696][ T9987] __blk_flush_plug+0x2c4/0x4b0 [ 136.566167][ T9987] __submit_bio+0x584/0x6c0 [ 136.568226][ T9987] submit_bio_noacct_nocheck+0x562/0xc10 [ 136.570808][ T9987] submit_bio_noacct+0xd17/0x2010 [ 136.573151][ T9987] submit_bh_wbc+0x59c/0x770 [ 136.575292][ T9987] block_read_full_folio+0x264/0x8e0 [ 136.577712][ T9987] filemap_read_folio+0xfc/0x3b0 [ 136.580025][ T9987] do_read_cache_folio+0x2d7/0x6b0 [ 136.582438][ T9987] read_part_sector+0xd1/0x370 [ 136.584820][ T9987] adfspart_check_ICS+0x93/0x910 [ 136.587380][ T9987] bdev_disk_changed+0x7f8/0xc80 [ 136.589828][ T9987] blkdev_get_whole+0x187/0x290 [ 136.592105][ T9987] bdev_open+0x2c7/0xe40 [ 136.594106][ T9987] blkdev_open+0x34e/0x4f0 [ 136.596192][ T9987] do_dentry_open+0x6d8/0x1660 [ 136.598398][ T9987] vfs_open+0x82/0x3f0 [ 136.600366][ T9987] path_openat+0x208c/0x31a0 [ 136.602672][ T9987] do_file_open+0x20e/0x430 [ 136.605128][ T9987] do_sys_openat2+0x10d/0x1e0 [ 136.607417][ T9987] __x64_sys_openat+0x12d/0x210 [ 136.609609][ T9987] do_syscall_64+0x106/0xf80 [ 136.611760][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.614257][ T9987] [ 136.614257][ T9987] -> #3 (set->srcu){.+.+}-{0:0}: [ 136.617126][ T9987] __synchronize_srcu+0xa2/0x300 [ 136.619528][ T9987] blk_mq_quiesce_queue+0x149/0x1c0 [ 136.622192][ T9987] elevator_switch+0x17b/0x7e0 [ 136.624412][ T9987] elevator_change+0x352/0x530 [ 136.626552][ T9987] elevator_set_default+0x29e/0x360 [ 136.628839][ T9987] blk_register_queue+0x412/0x590 [ 136.631095][ T9987] __add_disk+0x73f/0xe40 [ 136.633074][ T9987] add_disk_fwnode+0x118/0x5c0 [ 136.635221][ T9987] nbd_dev_add+0x77a/0xb10 [ 136.637441][ T9987] nbd_init+0x291/0x2b0 [ 136.639616][ T9987] do_one_initcall+0x11d/0x760 [ 136.641898][ T9987] kernel_init_freeable+0x6e5/0x7a0 [ 136.644205][ T9987] kernel_init+0x1f/0x1e0 [ 136.646184][ T9987] ret_from_fork+0x754/0xd80 [ 136.648281][ T9987] ret_from_fork_asm+0x1a/0x30 [ 136.650407][ T9987] [ 136.650407][ T9987] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 136.653506][ T9987] __mutex_lock+0x1a2/0x1b90 [ 136.655540][ T9987] elevator_change+0x1bc/0x530 [ 136.657731][ T9987] elevator_set_none+0x92/0xf0 [ 136.660022][ T9987] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 136.662887][ T9987] nbd_start_device+0x1a6/0xbd0 [ 136.665237][ T9987] nbd_genl_connect+0xff2/0x1a40 [ 136.667457][ T9987] genl_family_rcv_msg_doit+0x214/0x300 [ 136.670020][ T9987] genl_rcv_msg+0x560/0x800 [ 136.672176][ T9987] netlink_rcv_skb+0x159/0x420 [ 136.674405][ T9987] genl_rcv+0x28/0x40 [ 136.676334][ T9987] netlink_unicast+0x5aa/0x870 [ 136.678527][ T9987] netlink_sendmsg+0x8b0/0xda0 [ 136.680741][ T9987] ____sys_sendmsg+0x9e1/0xb70 [ 136.682911][ T9987] ___sys_sendmsg+0x190/0x1e0 [ 136.685168][ T9987] __sys_sendmsg+0x170/0x220 [ 136.687430][ T9987] do_syscall_64+0x106/0xf80 [ 136.689583][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.692262][ T9987] [ 136.692262][ T9987] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 136.695833][ T9987] blk_alloc_queue+0x610/0x790 [ 136.698039][ T9987] blk_mq_alloc_queue+0x174/0x290 [ 136.700390][ T9987] __blk_mq_alloc_disk+0x29/0x120 [ 136.702639][ T9987] nbd_dev_add+0x492/0xb10 [ 136.704625][ T9987] nbd_init+0x291/0x2b0 [ 136.706606][ T9987] do_one_initcall+0x11d/0x760 [ 136.708769][ T9987] kernel_init_freeable+0x6e5/0x7a0 [ 136.711088][ T9987] kernel_init+0x1f/0x1e0 [ 136.713132][ T9987] ret_from_fork+0x754/0xd80 [ 136.715158][ T9987] ret_from_fork_asm+0x1a/0x30 [ 136.717311][ T9987] [ 136.717311][ T9987] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 136.720426][ T9987] __lock_acquire+0x14b8/0x2630 [ 136.722748][ T9987] lock_acquire+0x1cf/0x380 [ 136.724763][ T9987] fs_reclaim_acquire+0xc4/0x100 [ 136.726945][ T9987] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 136.729811][ T9987] kstrdup+0x51/0xe0 [ 136.731756][ T9987] kstrdup_const+0x63/0x80 [ 136.733943][ T9987] __kmem_cache_create_args+0x118/0x420 [ 136.736591][ T9987] bioset_init+0x5ee/0x8a0 [ 136.738627][ T9987] mddev_init+0x17c/0x820 [ 136.740720][ T9987] md_alloc+0xc7/0x10a0 [ 136.742633][ T9987] md_probe+0x73/0xf0 [ 136.744626][ T9987] blk_probe_dev+0x149/0x1e0 [ 136.746698][ T9987] blk_request_module+0x16/0xc0 [ 136.748948][ T9987] blkdev_get_no_open+0x9b/0xf0 [ 136.751465][ T9987] blkdev_open+0x141/0x4f0 [ 136.753762][ T9987] do_dentry_open+0x6d8/0x1660 [ 136.756093][ T9987] vfs_open+0x82/0x3f0 [ 136.758034][ T9987] path_openat+0x208c/0x31a0 [ 136.760194][ T9987] do_file_open+0x20e/0x430 [ 136.762225][ T9987] do_sys_openat2+0x10d/0x1e0 [ 136.764389][ T9987] __x64_sys_openat+0x12d/0x210 [ 136.766588][ T9987] do_syscall_64+0x106/0xf80 [ 136.768654][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.771345][ T9987] [ 136.771345][ T9987] other info that might help us debug this: [ 136.771345][ T9987] [ 136.775683][ T9987] Chain exists of: [ 136.775683][ T9987] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 136.775683][ T9987] [ 136.781062][ T9987] Possible unsafe locking scenario: [ 136.781062][ T9987] [ 136.784088][ T9987] CPU0 CPU1 [ 136.786281][ T9987] ---- ---- [ 136.788457][ T9987] lock(slab_mutex); [ 136.790138][ T9987] lock(cpu_hotplug_lock); [ 136.793000][ T9987] lock(slab_mutex); [ 136.795674][ T9987] lock(fs_reclaim); [ 136.797365][ T9987] [ 136.797365][ T9987] *** DEADLOCK *** [ 136.797365][ T9987] [ 136.800681][ T9987] 4 locks held by syz.3.1280/9987: [ 136.802782][ T9987] #0: ffffffff8f2fea88 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 136.806614][ T9987] #1: ffffffff90146ac8 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 136.810210][ T9987] #2: ffffffff8f2e3c68 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 136.813879][ T9987] #3: ffffffff8e979428 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 136.818012][ T9987] [ 136.818012][ T9987] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.820559][ T9987] CPU: 2 UID: 0 PID: 9987 Comm: syz.3.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.820606][ T9987] Tainted: [L]=SOFTLOCKUP [ 136.820613][ T9987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.820624][ T9987] Call Trace: [ 136.820633][ T9987] [ 136.820641][ T9987] dump_stack_lvl+0x100/0x190 [ 136.820673][ T9987] print_circular_bug.cold+0x178/0x1c7 [ 136.820703][ T9987] check_noncircular+0x146/0x160 [ 136.820734][ T9987] __lock_acquire+0x14b8/0x2630 [ 136.820756][ T9987] lock_acquire+0x1cf/0x380 [ 136.820772][ T9987] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 136.820802][ T9987] ? __pfx___mutex_lock+0x10/0x10 [ 136.820831][ T9987] fs_reclaim_acquire+0xc4/0x100 [ 136.820851][ T9987] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 136.820879][ T9987] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 136.820906][ T9987] ? kstrdup_const+0x63/0x80 [ 136.820934][ T9987] ? __pfx_snprintf+0x10/0x10 [ 136.820959][ T9987] kstrdup+0x51/0xe0 [ 136.820986][ T9987] kstrdup_const+0x63/0x80 [ 136.821011][ T9987] __kmem_cache_create_args+0x118/0x420 [ 136.821039][ T9987] bioset_init+0x5ee/0x8a0 [ 136.821056][ T9987] ? __pfx_bioset_init+0x10/0x10 [ 136.821078][ T9987] ? kasan_save_track+0x14/0x30 [ 136.821104][ T9987] ? __kasan_kmalloc+0xaa/0xb0 [ 136.821130][ T9987] ? percpu_ref_init+0x244/0x3f0 [ 136.821156][ T9987] mddev_init+0x17c/0x820 [ 136.821177][ T9987] md_alloc+0xc7/0x10a0 [ 136.821202][ T9987] md_probe+0x73/0xf0 [ 136.821224][ T9987] ? __pfx_md_probe+0x10/0x10 [ 136.821247][ T9987] blk_probe_dev+0x149/0x1e0 [ 136.821271][ T9987] blk_request_module+0x16/0xc0 [ 136.821298][ T9987] blkdev_get_no_open+0x9b/0xf0 [ 136.821321][ T9987] blkdev_open+0x141/0x4f0 [ 136.821345][ T9987] do_dentry_open+0x6d8/0x1660 [ 136.821362][ T9987] ? __pfx_blkdev_open+0x10/0x10 [ 136.821387][ T9987] vfs_open+0x82/0x3f0 [ 136.821410][ T9987] path_openat+0x208c/0x31a0 [ 136.821433][ T9987] ? __pfx_path_openat+0x10/0x10 [ 136.821456][ T9987] do_file_open+0x20e/0x430 [ 136.821476][ T9987] ? __pfx_do_file_open+0x10/0x10 [ 136.821503][ T9987] ? alloc_fd+0x476/0x790 [ 136.821523][ T9987] ? do_getname+0x191/0x390 [ 136.821548][ T9987] do_sys_openat2+0x10d/0x1e0 [ 136.821570][ T9987] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.821596][ T9987] __x64_sys_openat+0x12d/0x210 [ 136.821619][ T9987] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.821642][ T9987] ? ksys_write+0x1ac/0x250 [ 136.821658][ T9987] ? kcov_ioctl+0x16a/0x720 [ 136.821686][ T9987] do_syscall_64+0x106/0xf80 [ 136.821712][ T9987] ? clear_bhb_loop+0x40/0x90 [ 136.821733][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.821752][ T9987] RIP: 0033:0x7f823359c799 [ 136.821767][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.821784][ T9987] RSP: 002b:00007f8234509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.821801][ T9987] RAX: ffffffffffffffda RBX: 00007f8233816090 RCX: 00007f823359c799 [ 136.821813][ T9987] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 136.821824][ T9987] RBP: 00007f8233632c99 R08: 0000000000000000 R09: 0000000000000000 [ 136.821835][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.821846][ T9987] R13: 00007f8233816128 R14: 00007f8233816090 R15: 00007ffefdc1c488 [ 136.821863][ T9987] [ 136.976395][ T9987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.980043][ T9987] block device autoloading is deprecated and will be removed. [ 137.133583][ T9987] syz_tun (unregistering): left allmulticast mode [ 137.136979][ T9987] syz_tun (unregistering): left promiscuous mode [ 137.139619][ T9987] bridge0: port 3(syz_tun) entered disabled state [ 137.149706][ T1179] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.154901][ T1179] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.327057][ T1179] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.330332][ T1179] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.423947][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.448292][ T1179] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.452609][ T1179] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.528184][ T1179] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.532418][ T1179] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.614220][ T1179] bridge_slave_1: left allmulticast mode [ 137.616059][ T1179] bridge_slave_1: left promiscuous mode [ 137.617817][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.620742][ T1179] bridge_slave_0: left allmulticast mode [ 137.622477][ T1179] bridge_slave_0: left promiscuous mode [ 137.624454][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.746866][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.749164][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.796533][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.801573][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.805974][ T1179] bond0 (unregistering): Released all slaves [ 138.110862][ T1179] hsr_slave_0: left promiscuous mode [ 138.113228][ T1179] hsr_slave_1: left promiscuous mode [ 138.115382][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.117671][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.120402][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.122798][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.129571][ T1179] veth1_macvtap: left promiscuous mode [ 138.131339][ T1179] veth0_macvtap: left promiscuous mode [ 138.133069][ T1179] veth1_vlan: left promiscuous mode [ 138.135997][ T1179] veth0_vlan: left promiscuous mode [ 138.219014][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 138.226251][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 138.699246][ T1179] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.818250][ T1179] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.877831][ T1179] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.918765][ T1179] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.983409][ T1179] bridge_slave_1: left allmulticast mode [ 138.986113][ T1179] bridge_slave_1: left promiscuous mode [ 138.988780][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.993122][ T1179] bridge_slave_0: left allmulticast mode [ 138.995851][ T1179] bridge_slave_0: left promiscuous mode [ 138.998363][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.098531][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.102152][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.105926][ T1179] bond0 (unregistering): Released all slaves [ 139.109126][ T1179] bond1 (unregistering): Released all slaves [ 139.336883][ T1179] hsr_slave_0: left promiscuous mode [ 139.339586][ T1179] hsr_slave_1: left promiscuous mode [ 139.342182][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.347603][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.351187][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.354499][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.359526][ T1179] veth1_macvtap: left promiscuous mode [ 139.361613][ T1179] veth0_macvtap: left promiscuous mode [ 139.363373][ T1179] veth1_vlan: left promiscuous mode [ 139.366540][ T1179] veth0_vlan: left promiscuous mode [ 139.430343][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 139.438403][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 139.513922][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.584029][ T63] Bluetooth: hci0: command 0x0c1a tx timeout