last executing test programs: 6m44.071743868s ago: executing program 32 (id=382): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) 6m27.174456988s ago: executing program 3 (id=691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 6m27.171094697s ago: executing program 3 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000000)=""/67, &(0x7f0000000080)=0x43) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m27.104321162s ago: executing program 3 (id=696): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x340, 0x270, 0x430, 0x430, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x7000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private0, @empty, @mcast2, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 6m27.103500864s ago: executing program 3 (id=698): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0xd, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0x3, 0x5, 0x86}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc4, 0x5, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x2, 0x10, 0x20, 0x2}, 0x25, &(0x7f0000000080)={0x5, 0xf, 0x25, 0x4, [@wireless={0x3c, 0x10, 0x1, 0x8, 0x80, 0x55, 0xf8, 0x2, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xb, 0xc0}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xb, 0x10, 0x2, 0x3}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x33, &(0x7f0000000100)=ANY=[@ANYBLOB="33034ca174ec5ae49b641cd2ee1d7142730ebdc1a8e27424ed000000ab7f652f968576a38eed9ee1f6bb1e538a48ae7726c5c0"]}, {0xe7, &(0x7f0000000140)=@string={0xe7, 0x3, "d0453fa91a98cd1037488edd5ceb64cf4cd881b158cd6eed8df49085d6fcd25d150e7930764b9d02afb3acc90249521969e8ef880150d2d3b3db97911a9d97b2c50facb6f0d7cad09cb32943da446a75786fdf018ff06d4a4c5040aae38571280e38904a6e184e5538e2e05edc99a79eb0bad8410d112bfa158aa3cfc0fac99b5d260b2c0681d51a72082ab8a6c32682a4f96221093ff9a94d31a5c5cbef8838a038c57fa24e547a9df9fe6274ab477c40af0b97f3b735c5a00f9aa4552f8cb612ad53ddf4281f58f3e3d92e196ee7e04f204a66307d7d12bac39478c16a94e3c48868977e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x8d, &(0x7f0000000680)=@string={0x8d, 0x3, "1e001f20b3da0b834c715595352310182d6650900fbe31de485fc7e27100cc82ebc871ad1844157723a4435f2ef10ade8fe402a5caf1c09bf88b68992bf9f207e8e6939a7cad45ecd90800c759455da6359e60dc0d03be16f22871287dce215377c5c68e2fb90ce9de0eccef98d4dcf7ea59d17ce79b2e36209c264f93fe26ce309b0506884c8a0adf4b2f"}}, {0x64, &(0x7f0000000340)=@string={0x64, 0x3, "1b3c796dccaf97a69603355c824ea4e4e991468798e14da969b947676106dbd913d88cbaf3db49c8f01afcf9caefa5b76603156a1c245b3ee96931d957a5cc4c2873d9b01dec049bf01a0191cf10cd096930cc0537f20dfb7aebbdd3f321b3ac333b"}}]}) (async) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0xd, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0x3, 0x5, 0x86}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc4, 0x5, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x2, 0x10, 0x20, 0x2}, 0x25, &(0x7f0000000080)={0x5, 0xf, 0x25, 0x4, [@wireless={0x3c, 0x10, 0x1, 0x8, 0x80, 0x55, 0xf8, 0x2, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xb, 0xc0}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xb, 0x10, 0x2, 0x3}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x33, &(0x7f0000000100)=ANY=[@ANYBLOB="33034ca174ec5ae49b641cd2ee1d7142730ebdc1a8e27424ed000000ab7f652f968576a38eed9ee1f6bb1e538a48ae7726c5c0"]}, {0xe7, &(0x7f0000000140)=@string={0xe7, 0x3, "d0453fa91a98cd1037488edd5ceb64cf4cd881b158cd6eed8df49085d6fcd25d150e7930764b9d02afb3acc90249521969e8ef880150d2d3b3db97911a9d97b2c50facb6f0d7cad09cb32943da446a75786fdf018ff06d4a4c5040aae38571280e38904a6e184e5538e2e05edc99a79eb0bad8410d112bfa158aa3cfc0fac99b5d260b2c0681d51a72082ab8a6c32682a4f96221093ff9a94d31a5c5cbef8838a038c57fa24e547a9df9fe6274ab477c40af0b97f3b735c5a00f9aa4552f8cb612ad53ddf4281f58f3e3d92e196ee7e04f204a66307d7d12bac39478c16a94e3c48868977e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x8d, &(0x7f0000000680)=@string={0x8d, 0x3, "1e001f20b3da0b834c715595352310182d6650900fbe31de485fc7e27100cc82ebc871ad1844157723a4435f2ef10ade8fe402a5caf1c09bf88b68992bf9f207e8e6939a7cad45ecd90800c759455da6359e60dc0d03be16f22871287dce215377c5c68e2fb90ce9de0eccef98d4dcf7ea59d17ce79b2e36209c264f93fe26ce309b0506884c8a0adf4b2f"}}, {0x64, &(0x7f0000000340)=@string={0x64, 0x3, "1b3c796dccaf97a69603355c824ea4e4e991468798e14da969b947676106dbd913d88cbaf3db49c8f01afcf9caefa5b76603156a1c245b3ee96931d957a5cc4c2873d9b01dec049bf01a0191cf10cd096930cc0537f20dfb7aebbdd3f321b3ac333b"}}]}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0xfffffffe, 0x1}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r4, r4, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) accept(r3, 0x0, 0x0) (async) r6 = accept(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_ep_write(r1, 0xc, 0xd1, &(0x7f0000000440)="d0015195cb50f01cdbd4212e7d287df6c9339f151760bdf581a28c013a2d5ef531fe0851b043f2d499440d3f7ac1807ea8380463a0ca2ee5a0484d31f4bc660a85923eab537b3fe6412e0e928a15fdab0c3ab7b4afca5ab7835417bf97586d305ddebb0135233d41d2c92212a13ad7e84f428e64919aee96d46e622682ab1e033826b238e24f291e55684d86048f89b3442384fdca02f81a14017d00567d4dde23f5d0f2658e93d7b59f20a8e6d609105ee635fe8629f94da88d039a41831804152f1eb45842013263bb4a57e18747461a") (async) syz_usb_ep_write(r1, 0xc, 0xd1, &(0x7f0000000440)="d0015195cb50f01cdbd4212e7d287df6c9339f151760bdf581a28c013a2d5ef531fe0851b043f2d499440d3f7ac1807ea8380463a0ca2ee5a0484d31f4bc660a85923eab537b3fe6412e0e928a15fdab0c3ab7b4afca5ab7835417bf97586d305ddebb0135233d41d2c92212a13ad7e84f428e64919aee96d46e622682ab1e033826b238e24f291e55684d86048f89b3442384fdca02f81a14017d00567d4dde23f5d0f2658e93d7b59f20a8e6d609105ee635fe8629f94da88d039a41831804152f1eb45842013263bb4a57e18747461a") syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6m24.053046309s ago: executing program 3 (id=727): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000ac0)='environ\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a500000000000010902"], 0x0) pread64(r3, 0x0, 0x0, 0x40000000007) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x25, 0x101, 0x70bd25, 0xfffffffc, {0x70}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(r2, &(0x7f0000000ac0)='environ\x00') (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a500000000000010902"], 0x0) (async) pread64(r3, 0x0, 0x0, 0x40000000007) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x25, 0x101, 0x70bd25, 0xfffffffc, {0x70}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) (async) 6m23.782968556s ago: executing program 3 (id=735): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0xffffffffffffff62}, 0x94) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m23.678969621s ago: executing program 33 (id=735): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0xffffffffffffff62}, 0x94) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m52.003546733s ago: executing program 0 (id=1326): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_clone3(&(0x7f00000007c0)={0x40100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m51.898287764s ago: executing program 0 (id=1327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @meta={0x50314b52, 0x209d640d, 0xfc7, 0x24e3, 0x407106cd}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021280011800b0001006f626a726566000018000280080003"], 0xac}}, 0x0) 5m51.891174017s ago: executing program 0 (id=1329): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r1 = syz_usb_connect$uac3(0x0, 0xf3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x7, 0x30, 0x4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x22, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x23, 0x9}, [@processing_unit={0x19, 0x24, 0x9, 0x1, 0x6, [0x0, 0x2, 0x1, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x8c, 0x9, 0xffff, 0x4, 0x20, 0x4f, 0x8, 0x7}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x8, 0xa, 'p\r'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0xd, 0x9, "aa285c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x40, 0x7, 0x6, {0xa, 0x25, 0x25, 0x8, 0x10, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5e, 0x3, 0x8, 0x7, "eaff", "d853"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x6, 0x4, 0x3}, @as_header={0x17, 0x24, 0x1, 0x81, 0x0, 0x5, 0x1002, 0x8, 0x8, 0xd, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x460, 0x2, 0xf, 0x97, {0xa, 0x25, 0x25, 0x1bf, 0x3e, 0x401}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0x8, 0x0, 0x20, 0x9}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "5e4213773022f814d1dd9b7251fe9d60"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xfe4344841644708e, 0x7, 0x3, 0x5de, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xff00, 0x64, [0xff3f00, 0xff00c0, 0xde, 0xcf, 0xffc0e8, 0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xe, 0x4, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x0, 0xd}]}, 0xa, [{0x6a, &(0x7f0000000280)=@string={0x6a, 0x3, "a2f76f1b6aeb3b59bdfd656ed2d5816fc0c72759b5d2fb323c3a8d1edd0d9b6ccd2d0cf8ae2de439f5890f701add364836e701d446444195940663009dd61ba9ee9b6fcd83e9a58daf221957de5e984238fcffb8d1f260b4742954c28878338889861c5b612350f8"}}, {0x11, &(0x7f0000000180)=@string={0x11, 0x3, "18708919a5f5a87d3da7a53caa90eb"}}, {0x92, &(0x7f0000000300)=@string={0x92, 0x3, "8a29060712267a666badb5eec83e11a37a6d85cbbbeb0c58c41f0e4879102d2378700a513dfebd1bf732503b484435298a60615c89ac71417368270949a90f4e83e0b0e0303d1bb31df0c772abd8839049ec4bf17c4487bd53f6825936c98a23d974d4bc5e315c22c4abebfbfa9647131d0edd5b0939ca3cb6fdbb0b2f7c9eb8ceb204f5fd41e35f9a136a5c69a5effd"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44b}}, {0xf7, &(0x7f0000000500)=ANY=[@ANYBLOB="f703bcce0f57288e4a3db6d8c77f8b684978f82d23c2e48c0698b160eb35d3a48296a0152e1a34dc42817dc23901878b659b0742870cbda9ac5866d27a27daf845f0f415f4e7fc67911d0b48f069556d521c041846f7b653e7915c1291a80fef2d13c0104a829ffae3a285787904cc959b86c329de27c2cbdc087a206f4daf2b3b3077f0d0ff8f0ba7e12756b8688a6bbd4fe3a606761a4dd4eff44786ab21b15fa59406521a7296d880269bfade94a005449e15b60b82bcc1b8fa00825cf04836aec9d4efcef8c180c280076ba7ff8f7d71b0481b69345859b96faebb2d7ce431cccb2ca0799f64210cfc40dd3e0b"]}, {0x15, &(0x7f0000000600)=@string={0x15, 0x3, "3066a1043bb0cf12f793af1a4abb12228be77f"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, &(0x7f0000000000)={0x20, 0x21, 0x16, {0x16, 0xe, "48c43300861f8926292ae99f04571744c765412f"}}, &(0x7f0000000740)={0x0, 0x3, 0x25, @string={0x25, 0x3, "b2991fa9f7acc549bcaeacb95022e38930359a935babf333c9fc26dedf94bd3dbdee49"}}, &(0x7f0000000780)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x1000, 0xf, 0x79, [0x1bfc0, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0x3, 0xc}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "dd94538212d36febb6c19bcce1e67a0f"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x98, 0x8, 0x4, 0x9, "7a8d7a93", "d6335643"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd3, 0x2, 0x7f, 0x0, 0x2, 0xfffd, 0x7}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x12, 0xd7, "9593f2cc609975267317d48b28146ac6dc02f2682a6ca18f3df48903f281443463f49ecef24d7a43655eebc9e0962fbf686d52b509309d2c70f602fdae6a442fc58045fb076dbc900a41332751e6a0e2230dce267712da378f75c966a16972b48f93db290106c335bb5018a22f76041d2e777490d23c2f0a2c6d346853ef6e55f3ce339f74cda56a3937acecdc6c802c25d53904890ab48abb67ad50edca09df13716121ed74401e8c6b90e5daa8552c83788e3217b2d9b389cc78a74e9ea8320a7435cb8d6e1fa904d92bc1e42de92ef88383dce7c750"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf00]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "751f"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x6c}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "bf55"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x76}}) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x9, 0x42382) (async) syz_usb_disconnect(r0) 5m50.444846541s ago: executing program 0 (id=1359): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x4, 0x3, 0x5f, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) 5m50.353559158s ago: executing program 0 (id=1363): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) 5m49.803303102s ago: executing program 0 (id=1367): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x12, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3fffffffffffff7c, &(0x7f00000001c0), &(0x7f00000001c0)=[0x9, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x7}) 5m49.684055187s ago: executing program 34 (id=1367): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x12, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3fffffffffffff7c, &(0x7f00000001c0), &(0x7f00000001c0)=[0x9, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x7}) 4m33.583260087s ago: executing program 2 (id=2077): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xc0c8, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) 4m33.578489492s ago: executing program 2 (id=2078): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xc0c8, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) (fail_nth: 1) 4m33.434106057s ago: executing program 2 (id=2080): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xc0c8, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000d, 0x80010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000000)=0x8, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 4m33.433629765s ago: executing program 2 (id=2082): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) r0 = socket(0x8000000010, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) write(r0, &(0x7f0000000300)="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", 0xfc) (async) write(r0, &(0x7f0000000300)="fc0000001c000720ab5b2509b86803000aab08620000000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d7d8f5490c5e2e189c10f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e170000000000000005fc510bb73cc755cdc8362defe04f000000006239ec2a0f111bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5526791cf1902a38204ea45e609ded815b2cc53950d10cc71e0ad73bd6433802e0784f20137d1090058a10000c880ac801fe4af00004900d400000000000000000000000075d6b772894a6e223d", 0xfc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 4m33.184236277s ago: executing program 2 (id=2083): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x1ff]}, 0x8, 0x80800) syz_clone3(&(0x7f0000000480)={0x4108200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3e}, &(0x7f0000000140)=""/131, 0x83, &(0x7f0000000280)=""/216, &(0x7f0000000400)=[0x0, r0, r1, r2], 0x4, {r3}}, 0x58) 4m32.893662721s ago: executing program 2 (id=2088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1a14040, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) (async) splice(r2, 0x0, r5, 0x0, 0x81, 0x2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x14}, 0x18) 4m32.780244362s ago: executing program 35 (id=2088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1a14040, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) (async) splice(r2, 0x0, r5, 0x0, 0x81, 0x2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x14}, 0x18) 1m27.282978582s ago: executing program 4 (id=3203): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x25, 0x101, 0x70bd25, 0xfffffffc, {0x70}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000080), 0x45ffff7, 0x162800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000700000000040014001a80100005800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x10, 0x4) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000787bfb43055960800"}) 1m27.282447585s ago: executing program 4 (id=3205): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x101000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r6) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000200)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r4, r5, 0x13, 0x0, @void}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x16, 0x0, &(0x7f00007d0000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000cbf79fcce9f3776172ed713d5487a483049ea95c0d2cff5e0042b5d262bac1d101a87849fd831fd45dd1c3098f497abb489f5fd2bad69f4fd7103696743842433058d31f5cf8b5899aa3f52e12c70fdad94a0133e1b759007b70deb5f877e7000bca2dd67cfdedb94d699d8330da7c6e57e66f30438fe04407fc", @ANYRES32=r3, @ANYBLOB="019800000000000020001280090001006970697000000000100002800400130005000a0001000000"], 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000cbf79fcce9f3776172ed713d5487a483049ea95c0d2cff5e0042b5d262bac1d101a87849fd831fd45dd1c3098f497abb489f5fd2bad69f4fd7103696743842433058d31f5cf8b5899aa3f52e12c70fdad94a0133e1b759007b70deb5f877e7000bca2dd67cfdedb94d699d8330da7c6e57e66f30438fe04407fc", @ANYRES32=r3, @ANYBLOB="019800000000000020001280090001006970697000000000100002800400130005000a0001000000"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r11, {0xffffffff}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x37, 0x1, 0xfffffffa, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) r14 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140), &(0x7f00000001c0)) (async) r15 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r16, r17, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r14, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) (async) syz_io_uring_submit(r16, r17, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r14, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r15, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r11, r12, 0x23, 0x4, r11, @void, @value=r11, @void, @void, r13}, 0x20) 1m27.12281706s ago: executing program 4 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x20008801) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1m27.120109898s ago: executing program 4 (id=3209): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000fe06100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m26.932734017s ago: executing program 4 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r6}, './file0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 1m26.832983478s ago: executing program 4 (id=3214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0x2}, 0x8, 0x20400000, 0x6, 0x0, 0x2, 0x20000, 0x0}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffff7, 0x162800) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) r9 = dup(r7) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000787bfb43055960800", r9}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 1m11.825125712s ago: executing program 36 (id=3214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0x2}, 0x8, 0x20400000, 0x6, 0x0, 0x2, 0x20000, 0x0}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffff7, 0x162800) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) r9 = dup(r7) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000787bfb43055960800", r9}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 31.97226083s ago: executing program 8 (id=3847): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) fchdir(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000380)={0x1, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x1, r4}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x0, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 31.910576743s ago: executing program 8 (id=3851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b4185b}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 31.84766032s ago: executing program 8 (id=3852): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 31.846972863s ago: executing program 8 (id=3854): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1400001000001, 0x2) pipe2(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x9) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) 31.676521345s ago: executing program 8 (id=3860): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1e0, 0x0, 0x110, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x0, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xdb}}}, {{@ip={@rand_addr=0x64010102, @remote, 0x0, 0xffffff00, 'veth0_to_bridge\x00', 'pim6reg0\x00', {}, {}, 0x2e, 0x3, 0x64}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "03f3", 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x4}, {0xffffffffffffffff, 0x0, 0x3}, {0x4, 0x5}, 0x3ff, 0xe}}}, {{@ip={@empty, @local, 0xff000000, 0x0, 'pim6reg0\x00', 'pim6reg1\x00', {0xff}, {}, 0x1, 0xf21d36bd35513115, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x8, 0x3, 0x1, 0x4]}, {0x4, [0x0, 0x5, 0x1, 0x3, 0x5, 0x1], 0x4, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 31.621385445s ago: executing program 8 (id=3865): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x188}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 16.585858673s ago: executing program 37 (id=3865): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x188}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 12.452603944s ago: executing program 9 (id=4191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000080)=0x6c) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000) (async) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x20, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x20}}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000004) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 12.392315352s ago: executing program 9 (id=4194): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x4008094) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.331915042s ago: executing program 9 (id=4195): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) mlock(&(0x7f00002ad000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x2000, 0x0) (async) lseek(r4, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000000004000000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="050006005a000000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000000004000000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="050006005a000000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 12.271880784s ago: executing program 9 (id=4196): syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000900)={0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468306c746f5f626f6e6400000004000380"], 0x30}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r4, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x44}}, 0x0) 12.189217223s ago: executing program 9 (id=4199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000001000007144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000004000001fe000000000200009201000000000010a39b00000000000003000000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x20000011}, 0x844) 11.372123736s ago: executing program 9 (id=4218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000001000007144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050afeff203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000004000001fe000000000200009201000000000010a39b00000000000003000000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x20000011}, 0x844) 11.289065298s ago: executing program 38 (id=4218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000001000007144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050afeff203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000004000001fe000000000200009201000000000010a39b00000000000003000000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x20000011}, 0x844) 3.343527159s ago: executing program 1 (id=4346): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x63, 0xffffffffffff0000, 0x2, [@default, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x86) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000200)={0xf93, 0x858, 0x8, 0xe, 0x43, 0x5b1e}) close(0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x86) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x20010, r1, 0xb8ddb000) fchdir(r5) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r7 = dup(r6) read$eventfd(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000280)='ro\x00', &(0x7f00000002c0)='./file0/file0\x00', r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socket$inet_mptcp(0x2, 0x1, 0x106) 3.293227404s ago: executing program 1 (id=4348): clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3172, 0x2, 0x2}, 0x18, 0x1) landlock_restrict_self(r2, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r4, 0x0) (async) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r7}, 0x10) (async) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x100) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 64) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) (rerun: 64) recvmmsg(r3, &(0x7f00000004c0)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/212, 0xd4}, {&(0x7f0000000880)=""/222, 0xde}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000980)=""/127, 0x7f}], 0x8, &(0x7f0000000440)=""/16, 0x10}, 0x6}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, r6, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) ioctl$NILFS_IOCTL_GET_BDESCS(r8, 0xc0186e87, &(0x7f0000000080)={&(0x7f0000000040)=[{0xfff, 0x4d, 0x4000000a3, 0x7, 0x6}], 0x1, 0x28, 0x7, 0x8}) (async) fcntl$addseals(r8, 0x409, 0x9) (async) sendto$packet(r8, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 3.238606421s ago: executing program 1 (id=4350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001200)={{0x4fffd, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0xd2, 0x14, 0x4, 0x45, 0x0, 0x1}, {0x8000000, 0x2000, 0x1e, 0x0, 0x6, 0x4, 0x2, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0xa, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xe, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x9}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x100000, 0x3, 0x4000, 0xeeee0c00, [0x100000000000001, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x80000000]}, 0x8, 0x80800) read$FUSE(r6, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup(0xffffffffffffffff) syz_io_uring_setup(0x200239, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001180)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="451c2310c733ce23338b68cae238f11247828dd7cd3eb4046c38d29a24b968ff77d1854a41aed6d4fa673ec8477c85adba76d87e02c256e485e10ebe17712e8b6e8f4b730559bc5e5213c4dd2bfc6b6f2f99b004a9bf925c", 0x58}, {&(0x7f0000000b40)="b17729d1da961eb319f4f17cb5187fb37d46ff72fdff23377a3d420b3ea71062747089260f5a4a31f262c13f4757bdc1057b93952bc20539afd5157fcb5555bcabfe59947f517ecbdce5fb9409d3b19b41e79aea", 0x54}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000017010000040000000200000000000000c0000000000000001701000002000000aa00000027a6a048ce5b960cba1c4efaea516e16a87cc628c430692e66cb43ace5da6aa90e8ed00c21bd40821a1e7934fe5d5536175c9461b3d43ea4d85b1ddf0d8beb670bd3ce3b791e2b7b4aaab68d9d2bfa5d112aaf864bbcec476eb830a47e583f6b5fd9d0cb23e1a22ac7cb3acde5ff5dfcd501594c2bd23d7992903e3b74c7a81b0a64d6804cc8d74eabe48883e81d4bc257bfd01dbb1f4aeb6612420a8157d22bb2efacd4177d8f405baa00001800000000000000170100000300"/240], 0xf0, 0x10}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000cc0)="079c8fad72e66ba9db32852b4f6bd8516aac4ebb2ce0812444db8c38c4780fa4c634d962b45688412f7b2bc88480c103b2afe71e7ab0b4bc187f6cf6dea027b7e83d239184e41080e31d2a6a2c7528b473afb5fd843d2bf01ccf0abe9207f68b365bb37b3c94c7bac141ed3ca29e610621c3fe92302fcb9f007beb374b2bd4d94e42426493970396", 0x88}, {&(0x7f0000000d80)="d35c043b546279a2bbf324d42adf7d97c1d580975a8587fd1d284e7d2bdaf5d0e216c18c2898d76c6c74c3b08dbe07a19ed95066765051063a06e7405a5781438a6f83ec216549a6879030df772cfa040c7a07c67b141263bb1a2f87f5295ce8a775013c6dfb2e46102eb4e23bf695289de75f001d1728e981286885f27e954ee412a8c4acd3494b65816c4daa7222ae0ad909e1b0cf6d6ea4a0b2c190e25c4dbbc333075a18cc8e95c006694c1e5b789737b41972085b6e7a7a963c086d90a93ed174bfdbd0dc2e9f469c63c4fd291c9d682c985f2fb1f1c03b2c4e8e658d5931cded52277d991cf3c2935288c03dd5826864a39a", 0xf5}, {&(0x7f0000000e80)="7e5d8685874afed580b69caaa0b5333dd66d67489ed884c1dfb9ec22e8ae135b1e80e1cefbd180c5661c6c8c5177d381e86f966426a8a11d94127ff0f2f4dc83526fdf6cbf1b8e14c35b19d28094c98504985c1e57b6ebe3f65fad27c57c8328b3137b97eb4afb357d2aa1831126cb9f01e6158c9920d8e233646248aa262cd3c4696d1f4214c6604b7f8989c8e852f5ce8086655bf4d8e279b64f21573c1184bf2d2a87580f48a3fbd3b0578c9458f057c1ec74184fb37908db0d1e6e6d5bd70fed93321c3ccb2f9015c7f5751cd57f6bc79a7aad9de8a2", 0xd8}, {&(0x7f0000000f80)="fdc6776089a185b2463ff783546b08407e030b7d6c1da0bd509269f2c51eaadd92185c57fbd1494bd48204ec055a022968564a9d15532e12429d07b7f5b320de5393ded9c4c1bb7ee72bbc02eeee55e1a095976310df5cacd2ebcadc3e576e12f7c3ad2b4ebd7c3651256795ddc032748611b5f36fb4823b7e6c3a06c55fee2ff220c3d62e189c9bf2ba7eacbf3ffb9a02893e1f3e1bd7e7a67769e2bc0bfdc1fc099824e9c84f6440678ff0baf9f5f08be182939847871afbdd49b564399be5ffda19ef8dfcb6c0e1bcdd376251fca27087a0e29914ef0da1b45213541e02992c6c9ff8140b8649e29d75375bef0a177a1a9cb36c05c3", 0xf7}, {&(0x7f00000001c0)="b1646817ef15e40d9e0556a8d44d8cf942ebccb583f5a3d00fc2c60b0dd35db862a58e2d75e9f14d", 0x28}], 0x5, &(0x7f0000001100)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x60, 0x1}], 0x2, 0x4080) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x4, 0xfffffffe, 0x7ffffffd, 0xdf0b, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0x85, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x4, '\x00', 0xf}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x6}, {0x2, 0x80, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xb9}, {0x6, 0x6, 0xc}, {0xff, 0x5, 0x2, '\x00', 0xda}, {0x1, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0x0, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x4, 0xff, 0x13, '\x00', 0x6}, {0x7, 0xa9, 0x2, '\x00', 0xa}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000006000000080000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000102c60e6527a446a000000220015000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 2.931776738s ago: executing program 1 (id=4354): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x6, 0x8, 0x2, 0x40, r2, 0x10, '\x00', r5, r6, 0x2, 0x4, 0x4}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 2.623365779s ago: executing program 1 (id=4356): r0 = socket(0x10, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002800)={0x1, 0x58, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004780)={0xffffffffffffffff, 0xe0, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000044c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000004500)=[0x0, 0x0], &(0x7f0000004540)=[0x0], 0x0, 0xe3, &(0x7f0000004580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000045c0), &(0x7f0000004600), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000004640)}}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000004a80)={@rand_addr, 0x0}, &(0x7f0000004ac0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004b80)={'syztnl0\x00', &(0x7f0000004b00)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0xbb70, 0x28, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8000, 0x6, 0x40}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x4000040, &(0x7f00000001c0)={0x11, 0x17, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000006700)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000006740)={@remote, @local, 0x0}, &(0x7f0000006780)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000006840)={'syztnl2\x00', &(0x7f00000067c0)={'erspan0\x00', 0x0, 0x80, 0x700, 0x7, 0x7, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x34, 0x47, 0x1, 0x1, [{@rand_addr=0x64010101, 0x8000}, {@multicast2}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x401}, {@broadcast, 0x6}, {@multicast1, 0x5}]}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000140)="19058b4f7f9163556a1d320305cc2b4abc28212bfaabc496b70977ad4513f9c981c0b10b9e9ced20702a130e28ef134fa44b47d9bc8491c8ec98aa9d03351a903f3f29811e26f3d7fe516fe8a809dab86923438b2824c01de988475633bc8a7c66c95166bdededf2ccacbbec1c0409a5669da3b293db3e5028dd72e2769281f59afe33d994386c1a2e24", 0x8a}, {&(0x7f0000000200)="2cec19942f51368ad42ffb8cf51b6db3d84332c25f6c929d0c33d1601bbe152c4a5e31dec0e80bd93081d9ea046a31c51d25fbeecfb947a36c4027b77ee4838ff1cc0ff263467e2c157f9c12203fd8ee61d7fca7415090f1373f3d6b7a6de890750ec24d160b6ea2ad8cace4019ee1c8a4db2736190d6f1508aace6befe54dae0902365f4a303c6195ba50eeed2850048b1283bba8addee88c74957bfb17d37c67ae75ca74fb9e07b4117a0075774f2ecf30fd6067a435b69b396e13dd1dbf29cd19770570c73d0329503e394bc747ae22cada711e05c66f19866de748212a2f71cc528230117631", 0xe8}, {&(0x7f0000000300)="266368ac86a91e8f5e9ebf58415f37265bbfc9f881989a085a4ff917164eb80b65731e547eac62b4748e567a6c51a53353bc3bda9a7291b08e333b5b4f021fdea1363c987f926e9fc94ac096c6403eca7d4310bdc4848a851b84df7efbc8ccb61fb4e12e3fcce7143ab89ca190c65ff7", 0x70}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="cb5dc3309f6789e25103450938270fdfb737be0201a09cc824e9325ec355c751588da0cf3f585f4fc9e42b439229733e262a7b57128a1aa0e24e7246d5b104bff366fb745a19cff857463d856dc5fbf9a3d9623a9123492262f48f08286e39b46d5ed22d7d5a119224231fde03ce77b597ee4c3a0d463a95a01b0e55dbe7b44e25efc71351f66fcd74483240dcbf45671fe1baa31777ded9a5f9ec649dd63b55eac311fa02ebdd53158609b52e432d342be6d3b94baee17d71417fb2ca1dedf6c97b68e1abb06a2b524c25eed0170a63d01cb4f03c3022ca2a34d2885137e7fbd62ef80acb038a9dcbbd2ce10aa4dce539fc43f7db4a12b03878cdb2fc9da41f63cfcb3b1bc33d44b876543f2351212f49d7c2b3aaeb514a0c2cc0eb6388cff2b5fa58832bb69382f41f903b778d741cfcdd8eff81983cd86fb59b380333aaf95d2df46ceb925ed0c9f162bca1eb810ec3d288bb7035415f3b5cefa2d51d6f64725d7f247bf2b12cd1e916bc30505f7cfd7204ff810a568843b666be2947f2b98b60b05e2d047e61be284fe558243020353b2aeeb48bc9539c0e371e6ec2dd1a0e81700fffae430be302e78f65167c78e7a0081608b58c27e82636fbd0601d76fcf08b60c9532c60ddbc09c4872fb2e5d9d2d759f1ed5605032c918d2eb28184aff8d4f8b94396ce428c623267a331c5468b5207515f7ed9c3396959ef6e83fbbb8987021cf0d9a59561b2e20d0600e18a762fa58c599ecb31a657421ae614e5d2df0fe077137bd85f9b41c62ff2b170c56c13309b155494dc4c46ede1035d83491a69336fb1ee36eb221678b798d38b1bc9aaaba39d440eea1a2cc4ef70074d6c86022823fa189262806627cae5fc269b305f80c417bbd5160348d911f7a1b7099d424358e159206d6ef9f9e79c8519e407b8c3e948a460af316e25975de4248731b0840883832199da93a5e46abc80f370bb013248d0a600730b0ffe9fcbead7b9ce85711a48b04a080439c94716b464492b99a603e9cd7ceb12e5ab3c7dd7d5a0e6284f60bbcb4e366c6e4c731aa0656a9bec6f981d3bc82ef10009a3f81c88578655f22eb3935fcdee979d1da2aee18e43d3b0fe6e4ae714137dfffafdca5df358da55f684f11857942859254ae40286d04c1099dda50c322493fd17ed889ebd77de3325b21f52082e5092bee996808d11447d816126aeb9d412155bb8365ae705c66fe1e2fc843e594f1511a051242e3aad13754525bf236bcab099d7b121f4b38b37579ab0f5a63fbf6786149e95989dc4db94b9c8d508a7fd2c9295e346d873a35647186e5212ed0f10196ba7f610ec21ba4ae2be7d887c68c253ce2ede739536f4e475a28f162f3b5f5d1bc85cdbb95090c7a28b67b0c62e81bc01a11515a8599d2464a7f5cbd16b09dc5db313ff8f9ab319b458d98655db312a8e2821d5799b9ab3a3013eafbe5717861cdfbd916e8e0b7f569bba95c8bff8ba939f9f6def0d27dd5f4c07f1d99aacb2e0d69c344c49c8acfc881da9e5c2dbdba9f9ddd77e8990a76820326f658c362fdc3314f1c5c83eb1fe7659bb621dbf15b9a420078f2e355627f787619be119163d43ac898c911f0ead14a3db8174362af77230340fb1c08e4da4c001e99bbd61099c1e34244fa08bec76fc3b9321c3c50a5eb8fecb0d75cacaa4eaec815f96001db1adf18416419a5602887fd6dd801766d82df938101bd3dd453ee4b0464dbf7a6a5f3ef4594eb0ba8ba5d8f04033011525669e1f1131e9e70ffa61aaaecb07d5e5a9cdd892a2428514d964f068c8ed01e4e4c484981e373a4d326c2b3946edab8299ddd7abe36b59a47449bebcf6e271f3998b17dfa9532fa0a3bfcf92060e6ff7e8cb07961110aadb3819d685d7298ab577835d9ca984774abf8a183236f57b0f6379c3ee22ade3304f236f6e2f2e4b658b9a46b8f7f1455e444853ff3b61c49b3364da402da4a10e0b9bde9adc17e09a360464e288a4ffc56b3704da9a810efaf90080204b9e3459d6e594e7b2aaeaa8599512577553ab3e7f2a8b26dfac5c8aecca43488fd6f0795ebfff96ba4e377898b2b7f4f82497da41e2ceecee21688a0668a64c8560f89c69aaae60df24719b5e13c92bb1e960af31e59758c748a0aabd0462fba6ebb2bd18a25ed64161ea1cbe1c712ed9bab1d826c67401813395f8f5d1e53fe201f5b8d5aed5ed8d141c8af62e14cb90580de9baa3841e1a11abcdce52dba7a74bdf97516aed504e08b0850d9025a5ba76b8a0a60a85e06234dd9db5061d10b55ddc51d01466495dc51d9de5dd145da2c5ae21e00d7b86f54c0e08f7fa2951374d8dfff30c074cbacf0063082271011e8cf0a8ffe5368a4dbdee7ccf824e2c8f842d1c6f51fadfb5447becd1778a11c7b4bf67c83c71ca168fdeff991f5d510974c904fae1484a3b99507c927bf9789fb6ce78dbf9a119acf791e4012544d702a5383ab6c2560516e69499be161a67dbd205b99d53456cc2e9c18fcf826269b79d605ceac5065b1dd1a659a98811d8c571909daa9901f4d75f12970d4333b2c930bd3957fca3f519e80bc3f12de10113bf46349c85f522ad087e7bc8ea88637b4ae4b3c1abe4b7202f36116ced630d918f5bdaf8fb19b85724ee5952e522c7e7408a910597724dcd6318c1613a9e3c48efab0fbdfc4eac370947b77bbc89f8c9fb69236a9fca7169663fa7940edad2a567ee31bfc29f0e5a2ac6e92f0fb88312c86829c2d66b0db4d77265002c1ef8b106ceeda6878330d43153de659466acbfaae50e8a38aaa1f962f46a9adfd755434ed20e4d4ee184acff3584e16dbc261c40c5d913b9947d308c92c8e96508cc7c016ba472ba9df18624e08d9a3f366506102cdc9e313af816ac911b25e2dad8bc63dcdf8776ebe607795c9223ecd1a0afb6eaee5ca92fbb430ed7ab4ac4372cd7600afe1c26e891168272122b987a67610c5bb0de4be5d5471ea3dd8f9116394cdbf916985903ab00c0d9f415cfe809f9434d737c57d25a1a4240ac76c413fc829818b1577999f481635c0e92477a813d3da781be93e9dcc053933ee68f871950d6e524c6eebde58314340efa70b6821e84fe409bac13ed160bafd37a54b573f9ca690f3347b6cd419174286c1d3dd4568d589f010cd1e0f6f2ce38bc7af208726ecbc51c05bfa0ed076aeb64c3310fa3d04ec61b549a9c53ad633da6536fdab30de9c4bf4a44e13a1e09614a37929750a91edbf56c9952350111b1052550fd19c677f5180ffc5187f5ac2b3a8233e34c8668d6c1d0c1278058f6ee0e1c6471577d2ec6e8fec2dcb3d4f2d9d08e9c39d10f9bc0c0732bff78aa1c31294500553a67c5f90324b7a8be08ad735ff1faced7ad38e3db9fb4207da719837d26a7ae7b89e0f70c7e4caaba2cda4ef0a977dc2c40d26fadfa6eb2dd8d264e3b74488d4083724406b3b696e43fcf5b286ef303633589a6cfaaa6de14b925a1fc5e7e4711795ff73cb5656a12046402b99c1c9cb4835b6ea6a69584315a53d6620b5a85c4019c169b50b908e93da949f44572bb04dc913564e77728072caffffa3f96d77691010d89ba62f5c61a96924d5fd681a31b37ab9a2a57f9b9ad84098e692f439e1f96c563799d6d8488e076466cd10fa8fed4022dc3b0f5b37c5f460b12d876311f94b524a2556d27b5dcd75ccb4381b11c5642807d7bf369469ddb3ed85a183b3db40d7b5d64b2235838b6715fab07656644642a3e1dce545023d2553ac9b731b38cc059c786bc99d93a3d6f4ec7566466773da13c3a8fb891d7241327d64e3d373eef95968c85354fa051e7b5dbaa999c345190ec88fdb5871c5eec3fa840de5c4b2200d256a69feeae3b70e568778a5feddb4e0e107fac53b1dbc6cd999e35cc34b2e7409b17e78d68e51edd8c97c36c825aa9852c795b7c7c8fd97c5ec292e900572422ccfa3c3b3baa6fb0c1b55c75d19dba9ca8790076ee10e702d3cf4b0c2a6af350f7998b2dd6f027cc3e85d1f6bf98d23459935f53c19cf03974447d73c4f107ed649efd1e67c40a3c217b4780e5b009be3ea81b8bf3832acba6f68f9be0168cc45fb61273a8e812d170abc15918a97914b099b4350a3ddbc15dc5cddc5b5c73268fa5c4017c5e55891d163e99894d911aef06148fc8485ad4bf1ed3932c603b6418ed64ab6aa8b3af61a75dd8f8ff62c195042f5181c997e70b15115f9537754895470662fb7c4fe70d7fed173f26c1b5f3d34eb8712b621893e3006b57f9599ab8caac86a1a2853da9c6de083ce2ac56f278a40ddca459666acd1b35b0890e5f1c11b92bd8a5fdcc7fc1f71c90cf02cb00e0b462dc3708edf7d32ebb6c0e521f07ba7e6578a7ad039f8753a67bd11089d429f3de0439fb815102876e0c5be98b3d43d1099cb6e262f578200ea928d87f166bcaad1d6203a114980c488d6f6a6cb405c3b11d41e2004c4912c6477b40e4be1864967d365142150eca581e7b231782352294ac51a9add105c4a1de8920241c4321234787712e004f35d34faef0e68816bbf16724149d56713a2ad6acddb75881330186a9810ec79ce511e5735dc674b95c6807f22842ee707c56c3bf769317ea982a3550b6199f3f3279d799ee47718cad88f6e17a296ff84978a8f8359329715c84abb4ca5b8be7fd1df7d27839db27c7445fc35a341004694f864176965cd299d689c4e4a60c5e1e433e90a258729fcf629d4d1c706482321b97ba1c629fb40d2f403f7447a2d55488596211aba0bbb75cc322168819156e09c9b5e1160599c04d987632402587622066ce4ba47952a705578d12c556700ddee5480c12e5b47bb1c20543b5d098563c303bcc387d49463a87a50290c7e70589f1f1b07daae188e3319c8a1ef24f798892e67784c2196189e852c392a947cf1a83586d2e8fa3a1ae7491f0ba94e50d1b4163713c6e6af5dce9997bf1b989f6fdbb5f870e6028ee67a6e3b48607bc4dd8b337e60538dbeb14888bdad42fddd9bcc768b4dd4e861c76d150b53a47438b75d8e45d4e818e1cc62c5e632b02e9c0f51c59940e3d0b79490ef6ab654a2263fe87fc890bde63349452d8acf225fa755e6a0046952cc058418dff66b05465ed8a15f155d52d4b3aafd2c57d1e0d80dd916a06b9042344c993011d898055344a1f93d714fd27bec498f29643b2021da4f2f068994b852db5843d607a0999842b79ec376713cd6319f4586f08e33d233ed10e41c4a06271274b73832754924e5511e5da7cedc07beb259913ff8097125e22b16b668df08dc67febebf3d82bb68f5d8aedc521335255bfef57923d04a6ab549682472f55d20072123bdb900083e11579de76094382bc9ab85091858bcb5d2c61d35c024959fe339bf9b9da2364b1286ab84f3df30977839be5ed0bac826e6122b69bb5d0b58fa370ad6c2bc8e7fba6687a2008c79a73813b373899d6c67827befd8fa1f5768d6ae509f24b3257744df75848b722d9484e220729d6a89ddd96824b857f4789cfe5639c2009060b9dd464e33f942ceb8928565b529984bf83d160096e71cfc0944d5dd73c50112060e38393c00ceb559053d159d0df8bcca0c334099a07c7db935934cdb6aab891ab98341fed645c19ceeb6d890b406901581ec7c6f0828680c9849bcc542508f933c4f0fc10dfe097931e0cfdb14948389575a59600aad5af0317c4330d63d55ae3dc8f62bac5789b0d881715cba378050dd206295c21ebcb65ee37426e84d40453f013d9581f1caae2e7855f8c6221f37f3581d7e6dee195b8ec158b", 0x1000}, {&(0x7f0000002380)="b99eafc493f3091fc591783ceb9f25b4bee5b605f0888030b6011a64f0bd4055249e2b5ea503c87ce18a16f6bfdd22290b143bb6ac35973d3f50199fd741711a3313b67adf99060d644ffc44c7c723f2c601ba2df8f17da0a535981e02c19cbce8be0acdea154cd50454e72609c9624a867ecae3c928eccc43961e53380924447956b5b489dfc752028a651eb1ecc42b9522169eed2411a926accf08f60a6174b420ebf6dcc417404a19bc1adf7f5743acec242d8a47960d951bd07e86074ace74b281ad0da9cd0eefa35c87cc174a87142cf11d53031d379fe6800b3e6a5ef2cd17f3ad83161c9dd6f1ff0237c20696", 0xf0}, {&(0x7f0000002480)="5c796648ac", 0x5}, {&(0x7f00000024c0)="d37937b819b151092346f81a303654a843a8c8a4289c0e34310cc348dc2037a4b4187c9fa996d45e957cf9cc03ed51ba6af675490bb35000ffbba84c217b142510af9a0187da347ef305e929a0b4c2ebff8ce3edf38895356c15956abc9c07c0aab1f3900bed6c6a354e01b917142670cf579b9763340f7d085d8b0bc2636f39f11854fcbabed376232c814bc61592b8257c0fb1c2220fd9013908265022e8ee013fbaf2cfc96a86f9dd8250fc334e032b5b908f21f88681f5644e94d8d5977693572f9078a48f70b7ed9633eb9e", 0xce}, {&(0x7f00000025c0)="4f6692166e37e78b471570a8a149d7293d77d0dc32ac61110bb86036058b540a177ed45f4aecdeb99d", 0x29}, {&(0x7f0000002600)="665b8ccc575dcb00caf718016c5947df3f0135cb84c27ff1ae27f69f23f1ceca344e19db500c9eff0c789d97ecd23be3e9a84fba80bbf4a5b769db87f19de59869dc88fdd97a4a4d5fa464d958dac5f604629a859d12bcf5060fb655dae4cabf59a1d8779f0fd4a791385ac95f1fb42f4e1544ab49d6a74ff0a4715abdcf3170192e8b608d97f1bc01606e220b2607ec4d7965f9cf3a7e07cefa8a2259", 0x9d}], 0xa, &(0x7f0000002840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@noop, @noop, @cipso={0x86, 0x15, 0x3, [{0x7, 0x3, "f6"}, {0x5, 0x3, 'w'}, {0x5, 0x9, "982cbdbd7f5dba"}]}, @generic={0x83, 0x9, "627782bc3c2533"}, @end, @end, @cipso={0x86, 0x52, 0x2, [{0x1, 0x10, "1601a266ff494a4f351c6186e3d5"}, {0x0, 0xa, "36e3ba7db546e7b6"}, {0x0, 0x4, "a077"}, {0x2, 0x3, "dd"}, {0x0, 0x10, "f3a32fd40449f1ffbd6e90d5e5f3"}, {0x6, 0x8, "9b0909dbca6a"}, {0x6, 0x6, "aa165e9e"}, {0x5, 0xd, "c0df117c756400dd40a086"}]}, @timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0x2, [{@multicast1, 0xffff}, {@broadcast, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x7}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @broadcast}}}], 0x128}}, {{&(0x7f0000002980)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000003ec0)=[{&(0x7f00000029c0)="5b81875d0bb1f71674860866aed6d4597437eb6d929fbb2ba178093ae1b934e536ce1b4526247991608a5a2109a74408d16bd0854228d1861995d5e700efdba49aeb0f012c4708118e1b7e2cb6cd9bdc2645065ca612387cee05c6e73acf2265e5ff2a8abb1c19b99aa10645ba125dc377c65f8d0ea2a9fc400f661e74cb0cf83df8af9a", 0x84}, {&(0x7f0000002a80)="3aaba1171635361d8bdfdc748d656d368780c6aa569eb9d63c46d9943db056ee1cbf4a4e2cdd358dde4444e9525e5638c88be57db6ac4a171d8e38a6fed62c8c39223bfb4ad072fd2024024a71dbb804904e4ce59bf828284fc5c869f2a2c974d642be14", 0x64}, {&(0x7f0000002b00)="cd48fc73ead4d5a5bf02344bc9d60d13b450a85d40969577b5b2158b65a803285a93405de2f68016d7ff03c1006e5f7d11526143327590ec6379b6b7a73bcb49a65eca0ca7a4fec1658f1c01a987d7d209f1c1a2ef68052e82f47c4b6042edede8281b79ef636c37f92caabad93cac138814f31eb4799687ec9bf370c1030d6d43ce71522416fb262b812ccda86ecfd114ff29760faadc44be0b8224e4fb698944ff81bd2e9255e16aaa2162c48d8281e4be02cccb9830ae709d647ad72a1271886730ea096941f948edd92eda24", 0xce}, {&(0x7f0000002c00)="219170418044f96042a355503144d128c5df4ae3bd5d743ac7f6aca4da0a90520f9d99664a4e1b598b396f1f1aafb57e53bd0bd99ceff0be8ad756bff9a7b91305b9b13a543b614dbbd79c3e933235fd358eccac7a85e90188d1d65ffe2adafffd394d5f421f4b6d1f8204358a83f24dd3ab9d8f20059c6fc8ed03bad5fa409e880f4418ec444cc66243ae627364802b778de5dca84f85d3f42b99eefc058f7143a9a3d6fa14644e6db2b2218712806dfc4cde8b471951b38e14fdaba2bc42527a9c8c984a3b75b88c0c87eeb11513d9", 0xd0}, {&(0x7f0000002d00)="fc52d2aecad8a0580be5ea452edeeb90be5ada5ef2f8c6a08f7b5b1d5d0b04082971aa692b5ea22a6211fa35d76e675a75c5855bb3e28fdf739536709448e7f1fe5022eef6a1510a74c5fd50c966bd8fe54771c2afe6690dc2d910281b32eb1127ccb885a3d951e3c5bed386f1c42d524889f2de0c7ed426839d2e35975749a30498aa742ad8a05553eadd4a528b6d35cb83a6112324c3cc20307128fa23ff83bf3bfb23dcbc6c67a02db3ab42139c149032e97973b186022933a4c7899bfbf919ed91034ffbad0c846f8619d1d4d4cd7c71200437e8809141f2246022b2a18c995610ec63512fb221800424d3ce3f7e531c337dcb6946bb39", 0xf9}, {&(0x7f0000002e00)="a01d864331970ba005d48db60fc6841f059a875b62028054a24623019af8d2d26d4957daf32b91d38a9cb3a0dd3b8ee3315029b982bff897051ece632d707f3e0348c18c7170ebb1dde0b0374e43664b70bdbff69bda94e1f978c53505de4e41504b24", 0x63}, {&(0x7f0000002e80)="28db6dd1492e9b445af5e71efeb6a9577b28230754290ed8305ced21af37bb8a823bcce6acaf4a966dff5729c78b2449920bb6cd2ef18797bb06", 0x3a}, {&(0x7f0000002ec0)="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", 0x1000}], 0x8}}, {{&(0x7f0000003f40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004080)=[{&(0x7f0000003f80)="ff57e6e2b98e979d93b5cfa816410dce5fa4ecf47372ee7bc5a37993150d536f78551738e1d6c4784c30e1faf1ce5ce5c184d543cd3fa3cb29795aa2206c0b66454a37b5d628007401a07af40ed769bedc6ff40a40e342407f242978eea07a84ef09c94e8fa77a961fc756e5b80aa5e4c6a88155d0845a7800c6075e9ebd785c86979e3f24bb33ff2e945cae1dd948bb1e4b09aa7754d912cb25adf0920a3929680d7a335f5a1d76a0783fd3a3ce2d2ce6c445e2d4ba8469ddf577fc75922ac31d12527a38c61a1b8d016dd402ad04f5ec6a310fee800419533d0b866515216f173ed995b9b29f13674ac6c86b289c300751b558c21e045c9a22dadfd4107e", 0xff}], 0x1, &(0x7f00000040c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x10, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}, @noop]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x7, [{@empty, 0x7}, {@broadcast, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x1c}}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x13, 0x64, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0x3, 0x85}, @timestamp={0x44, 0x20, 0xcb, 0x0, 0x0, [0x8, 0x6, 0x7f, 0xd7c0, 0x10001, 0x1, 0x6]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0xc0}}, {{&(0x7f0000004180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000004480)=[{&(0x7f00000041c0)="0f9a8782291dfb2d0447af105bf8bc495773529cbd2fc770b7ca8e60f90232d9d888c31d7eac9bee1df7394e726adb8073b3936a882bc41fc565dd0f665dc5041bec8b3123ae8cc68e63ad63d97524ad31c2b33c8aa045a40e9a256fc24a185fe255de7b7ce7973b8353486b8137df5d1d729638d01a3d709a63c4d46e4dcedf18dedecd913fc01460b14013d06c3494202c1051ff7c26e4ce4fcae6e11922753f163c5a15c7a3bc743a8e725cfa18e1dc2ce0cd7c5b54c169121e09f3530020b8a4f1ae7d700024789757e28a4f5e35fc7bb5a7d5be5e997232e9ef302d38916e0817ec233a4427818f7a80f276f794ed6e", 0xf2}, {&(0x7f00000042c0)="997a97b134010e332a5659fa71825f34bd526cc449994a5600615316cace87b1be7aaa4ade906a2fa70266c1ab4d6468e3dcb802c203b7c8077d663933a639bef7eb6e91ec25653437", 0x49}, {&(0x7f0000004340)="2e38fd487ea2c0955790a12d79b03f3de107a7bf241c61c93c67a35044a7349bb1c7cc90c8abcc0a24bc95860123ae1895f4f1e3c6ae60a7acf07873d3ec37203b77f3d2f2f51c45aae191187982b74df1ab37aebd", 0x55}, {&(0x7f00000043c0)="d8ffe87304e51ac0053ae799380976d70be96697ccfc61f9b7fe3d2ee6bb8611c4a4b85e833151bf73a2e52c17f9c76b8b4b16ae7e0752c16244621daf4c082b8c686d303db6fcafb1e87cfe11766c568ab45f26b1f9dcdf4d583b154c99716285731e829b714db0419e28621111be59d466d1380f15bba7ddc57905b6157db8408f9e70d626b409499eec6b5622d42a7c324dafb6d5283c6d4e63801676cbb8fec571e50e6544ea935e785d6fef15", 0xaf}], 0x4, &(0x7f00000047c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x1a, [@loopback, @multicast1, @loopback, @local, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0xf, "12ba8122ba48efdd7e9ea4d923"}, {0x1, 0xc, "3cd95d98b117dd7441c5"}, {0x6, 0x7, "acb0b02cde"}, {0x2, 0xf, "2f25ef3de14ec456ab73ff6987"}, {0x2, 0xa, "5d2031a030d5a1de"}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xa4, 0x3, 0x7, [{@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x80000000}, {@multicast2, 0x4212}, {@remote}, {@multicast2, 0x6}, {@multicast1, 0xb}]}, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x9, [{@loopback, 0x7}, {@rand_addr=0x64010102, 0x90000}, {@broadcast, 0x6}, {@private=0xa010101, 0x2}]}, @cipso={0x86, 0x3c, 0x0, [{0x5, 0xa, "0f679c96ed9ac267"}, {0x2, 0x4, "828a"}, {0x2, 0x6, "ff39e27c"}, {0x5, 0xb, "b568d90f3b259a514e"}, {0x0, 0x6, "726989ed"}, {0x7, 0x11, "0ca88e23b2ee7dc157a81111c3e7c2"}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x140}}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004900)="41d28d33abe73ccd9101add45e4574acc91541d326c9ebcad2a3f9dc7502893c497e65f486cd3e0cc17833e634ab12dcd7de920a1f7384ba53133dbf7e93dc63a79c21029bcd50a586076275aa20f0f158d555be3f19d250a8565349ec3bc01c763b327c7e3e071c8e8cd82c8bf130a4faa9f1350e051a7c7d5356a4ccbbd4183bef842136461fbb73921374c42690898f6fbe3836a07ece500053592a53945210e6b923", 0xa4}, {&(0x7f00000049c0)="af9e029be74e3a39d5e1a24d03177aa8081a3e551f799ecc2894b86d11148f193186913240c7aebcf959d2ccdfa5c739ea0b365c23590aa78e5572e1599eb80111238268fb32f1e5f053fa4421f0392b390a27292d5ff880e5dc459e452245c481ce9d98ab03743b16293d29c6964280c18329bb88", 0x75}], 0x2, &(0x7f0000004bc0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x88, 0x6, "b5f14c3c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0xa0}}, {{&(0x7f0000004c80)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000004cc0)="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", 0x1000}], 0x1, &(0x7f0000005d00)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x50, [@rand_addr=0x64010100, @loopback, @empty]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x40, [@rand_addr=0x64010101, @multicast1, @broadcast, @multicast1, @broadcast, @remote, @broadcast]}, @lsrr={0x83, 0x17, 0x5, [@rand_addr=0x64010100, @local, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x4, [{@remote}]}, @timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x0, [{@multicast1, 0x8}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xd0, [@broadcast, @multicast1, @local, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x7, "5d5b969637"}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x1, 0x7, "bc4697eaf4"}]}, @timestamp={0x44, 0x18, 0xf, 0x0, 0x5, [0x6, 0x8, 0x5, 0x6, 0xf80]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x150}}, {{&(0x7f0000005e80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000064c0)=[{&(0x7f0000005ec0)="ba02962da05f450fddd5796d344cfe9b3a9ec8f5199a576da4ce728372543a355feb1bd07e7fd818fd1f56c53d9faee9b913ac93dc33d82e27b1eabf6ab811143a9dce4a9c631bb7a823e6383f0f8940bd5e883a34fde36a82cc8add4e36a671f776e73ad191ecafd71abd266b33dee5905edef97f830aab407491c1d44f5da1a18414bc", 0x84}, {&(0x7f0000005f80)="b4894189aca3fe97bdacc767cc6d96441f0bbd6b3e683bae34d772a51b46772d9e095b3b8bd220479658976530539ff29ba4760f", 0x34}, {&(0x7f0000005fc0)="22df02a006e55cea1d333586874875de15757db361451a4c11e3a0ca7c1dcbc2aedacba3b5a7eee85c04348923a8cfb860e2704ee96e966e8851c240d0f7740f1c870cb52edd928fe6d8ab84ac04eb244074cc6169414fd1d5c0f4301036c1bbc50c8b5bf28afb7c1630a0e77bbdf1c4ee7e1dd3ddf8f0e2e94736239b46cc95c8855436", 0x84}, {&(0x7f0000006080)="5003c3c52a5a2d6beb33d943860009d2a3c2e9dd083356aafbea52a4955be5df838bc3b1f2918eb3cf6022753e745e03cb5d3a132cf7801a865ad799d16a60975999e41b2a51ceeeb66a3c32d9cd002ff629ec36c7e74a0d2702d509fbeff1f19309e61d7ed2f325eb6eb5a13e8219f825323d0e80be8ea0d2c6c79036a0637ce9e911692ffb83", 0x87}, {&(0x7f0000006140)="052ae02dab9a1872e1ef4802d3da3d334eb8a70c07403e225bc673860f4a82700074eaa999db862057d6b14595b0", 0x2e}, {&(0x7f0000006180)="98995b73b8719bbf92bf4bcb21d16bb21d432ed2c2316e765a64e18f501db2fcbb634b5e07a19e97f494752fd270afcd92657bb3a7d5e723dd047dcb8b9b7423096a3eb6497fac6b9d42263b8cbf78904f356031b234671e747f5c623f1b70eddbdab3a06917b3a0be577568a3a99624f16d8a747f36f13091247503e2ed04c00e900ef2dedbe35a5969f13420c87014ea456546937087c09506eabb8600caa5d9002369634badd2101c00265a9668c0", 0xb0}, {&(0x7f0000006240)="24efd5fd8bb3a75b212acb5d652b887953aae4d50a57cca629c27fb857256f301fe686942a86faf1cfd3d8bfcf893f9c2bbccfccfb22", 0x36}, {&(0x7f0000006280)="d172fadf161f73799d845d2e1932b1ee4bf8b647731a06ef10092429b3123d18b5f7a5ee47fdcaaf13aa0d3f35a26df15043b06e5324298bbddf65a4fde1ad576e66932fb01ca966aa19843f6171b240f2804b7a71480c699c03da1cad00ad4c84eb7de472f2d9d424d2d16fac6e399a4aa94684467d13f3c0990d12a221844887808f3c4e451c03713ed8a8d0ce8d362369b5227fe3f785f1966791170de267c8d16c2193", 0xa5}, {&(0x7f0000006340)="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", 0xfe}, {&(0x7f0000006440)="d8b9449594d86d023cf5758cd2a3d27d8132c05ca4303c7d417a9cfaab613021fdb5a8cd4752737117a7b5e9df7b730ec0c6f2e150ab1754b969da79e003f64c98aa2ad4f34818fcf44afc63b292c5570263785228836d89203142", 0x5b}], 0xa}}, {{&(0x7f0000006580)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000066c0)=[{&(0x7f00000065c0)="eff2ccc1a217cfb7cb20c3311f9935957b95122a003b0a321f22080d50a2371fd9e1fe48dee2ea4d9e00509b635ea4d3e3a5540747cd2e2842716000f9c1ce4dd21bebac8b92702be4cee2a586f98f81cb6b4a36c16e02fb8e7d64d6cbf57aa9f5da6b0af2f114e60ec30b0b4b550007e313487d793b53ffc7069ce9899e1d24af88f1010db58ad30d4924db1e3bf9692c6748004e3d2950373def87f0e0f34da890946433a135f5664443e05d598020676865a7c8a54ef0df2e963f7be5c4c6c11a0d9e22c92e0f58c9518fdaf30153f5fa05e2edb1e66896c16f86cf800adbe9be71", 0xe3}], 0x1, &(0x7f0000006880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xeaf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xd8}}], 0x8, 0x4040) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000080)=""/51, &(0x7f00000000c0)=0x33) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x8, 0x1], 0x2) 2.48704547s ago: executing program 1 (id=4357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) 1.833755628s ago: executing program 6 (id=4369): socket$alg(0x26, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.83333775s ago: executing program 6 (id=4370): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000600)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.731428388s ago: executing program 6 (id=4372): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@null, @null, @default, 0x8, 0x1a, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) 1.631204072s ago: executing program 6 (id=4374): set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000004000000200000000200000000000000000000003928c1cf0210ee9db1a083a366e00aef5ab6f11821cd96f31fec12a8ad7cebff0ad58a1398f1322dae763dbaac37f2fd61d16ac7b1891ba29bab1f1866428c3991246b6aae6a3d6f698f4a63c8faa8d05dba9fa83c336a445f818e6b7709452c89a99fa1a454521e29bc6a2201e509d26ad57253ba73c40603e45c4d89bb163c31777fbcec7ff446"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@empty, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r3, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000300)='%-),-\x00', 0x2, &(0x7f0000000340)={@align=0x3, {0x2, 0x4, 0x2, 0xf}}, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x5}, 0x3, &(0x7f0000000640)=[{0x2, 0x8, &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)="55bb94198c8e51d57799e988d9a77d3c3192d553d20f0bc671574be07186a004cf0498c35d99934fd984ad715b7bf1313425c2f2ae4f4e9c93af1af5e4a90745f47fb8bd2048950bafb077f33dc06af94ba5965b9dc94f0cae4a42300abc1a9b267f6dd135bf56fd8c9b167f7f034be10337ba7074dfc3510cfde1e91645f5add75f666ec814287ae1a840eba405ca262de1158cf901a29f017b723ef37bba3e8ca9559fc25f0264d5d55ebe4332648d50397a82db38e7d752582900fe02efa889d33e3950cf3c4e25598ee1863dd171648a7e2935", 0xd5, 0x30}, {0x2, 0xf, &(0x7f0000000540)='&!\x00', &(0x7f0000000580)="d05a5900c3b052a5e7e070d4a717bb74c3241b0a3124938eb7893cb7239bc9f6ec17be7a1cf4a9ea", 0x28, 0x2}, {0x1, 0x57, &(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)="fd4557af33f829f609db350d2eecd4bb58b1d8a0d264c29d29b344166983ca9fa3e093952053750543e05f61105df0543edae5321b4c42", 0x37, 0x28}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f00000000c0)=0x2) write$binfmt_elf64(r5, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x80, 0x0, 0x3c9, 0x3, 0x3e, 0x4, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x5, 0x3}, [{0x3, 0x5, 0x8, 0x10, 0x1, 0x31, 0x6, 0x146}]}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x91}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x92, &(0x7f00000001c0)=""/146, 0x40f00, 0x4, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x6, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r5], &(0x7f0000000800)=[{0x1, 0x2, 0x6, 0x1}, {0x5, 0x5, 0x6, 0x2}], 0x10, 0x1304308b}, 0x94) 1.630351624s ago: executing program 5 (id=4375): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbf9, {0x0, 0x0, 0x0, r2, 0x280d3, 0x20032}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x8}}}}]}, 0x40}}, 0x8080) gettid() (async) r3 = gettid() prctl$PR_SCHED_CORE(0x53564d41, 0x0, r3, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x8) read$char_usb(r4, &(0x7f0000000040)=""/169, 0xa9) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, &(0x7f0000000000)=0x2) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 1.573886405s ago: executing program 5 (id=4376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_args={0x24, 0x114, 0x1, {{0x800, 0x3}, {0x0}, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1, 0x0, 0x9}}], 0x48, 0x8000}, 0x4000000) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) 1.573545098s ago: executing program 5 (id=4377): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.520679s ago: executing program 5 (id=4378): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x1002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448d4, &(0x7f0000000040)={0x1fff, 0x9, '\x00\f\x00', 0x0, 0x7e}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564dff, 0x0, 0x7}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r11 = gettid() process_vm_readv(r11, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000140)}], 0x2, &(0x7f0000001880)=[{&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f0000000240)}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/197, 0xc5}, {&(0x7f0000000500)=""/29, 0x1d}], 0xa, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="f40000001100010000000000ffdbdf25e393b60bb494e3d697029d6f84f8f1179d66c5b195875743d6598ce7a6429d4241c36744b0511cae3a0e66b2c035cb75b454c0086aa7a466b90a37836f5b9777d5d0ac54f197986a5f5adc5691bc602bd18d902bffcd9742dff8b1006cea37c7aebfa54b6dfd7650ca1c5952cecb55d418b53cdf358a0330346d2cad4dd5859fb0d5b072581c8cb2685e0a9ed811179f96f2d78c7e6cd5e6a56374459c2745257a69cbfeec7f7c48301dcca19fed8944be52fd33e6201c0494186bd5ec15b8139664cc5455a8a8cdb06873c58dff3b2318c0b7cad427c63f5a9cb3e1e4f0d872dab40000"], 0xf4}], 0x1, 0x0, 0x0, 0x400c89d}, 0x20040080) 1.21237788s ago: executing program 5 (id=4379): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f00007d0000)) syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x1, 0x7800, 0x83, 0x8, {{0x28, 0x4, 0x0, 0x2a, 0xa0, 0x67, 0x0, 0xcf, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0x13, 0x8b, [@loopback, @local, @remote, @local]}, @rr={0x7, 0xf, 0xcf, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x3}, @rr={0x7, 0x2b, 0x7d, [@empty, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @remote, @broadcast, @local, @loopback]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0x8f, [@empty]}, @timestamp={0x44, 0x24, 0x21, 0x0, 0x0, [0x40000000, 0xfffffff7, 0xffff8000, 0x3, 0xe1, 0x3, 0x1, 0x3]}, @timestamp={0x44, 0x8, 0x8e, 0x0, 0x4, [0xa9]}]}}}}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61, 0x0, 0x30, 0x5f]}}, &(0x7f00000002c0)=""/44, 0x42, 0x2c, 0x1, 0xffffffff}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', r9, r10, 0x4, 0x3, 0x4}, 0x50) link(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 743.609304ms ago: executing program 6 (id=4383): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/92, 0x5c}], 0x4, &(0x7f0000000440)=""/90, 0x5a}, 0x5}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/39, 0x27}], 0x1, &(0x7f0000001640)=""/179, 0xb3}, 0x9}], 0x2, 0x10000, &(0x7f0000000540)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 523.69132ms ago: executing program 6 (id=4385): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) (async) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) (async) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 342.964687ms ago: executing program 5 (id=4387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d0000000800", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000200000006000300a7aa0000080001"], 0x5c}}, 0x0) 340.435861ms ago: executing program 7 (id=4388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 252.621897ms ago: executing program 7 (id=4389): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="13a3", 0xfffffef9}, {0x0}], 0x2}}], 0x1, 0x20008000) shutdown(r0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="13a3", 0xfffffef9}, {0x0}], 0x2}}], 0x1, 0x20008000) (async) shutdown(r0, 0x1) (async) 173.791754ms ago: executing program 7 (id=4390): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 172.147295ms ago: executing program 7 (id=4391): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1, 0x0, ';\"'}]}}}}}}, 0x0) 256.603µs ago: executing program 7 (id=4392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) 0s ago: executing program 7 (id=4393): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f0000000500), 0x12) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4c27, @private=0xa010102}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 114784][T18220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.114803][T18220] vfs_read+0x1e4/0xb30 [ 438.114827][T18220] ? __pfx_vfs_read+0x10/0x10 [ 438.114847][T18220] ? __fget_files+0x215/0x3d0 [ 438.114867][T18220] ? __fget_files+0x21f/0x3d0 [ 438.114886][T18220] ksys_read+0x12a/0x250 [ 438.114911][T18220] ? __pfx_ksys_read+0x10/0x10 [ 438.114938][T18220] do_syscall_64+0x106/0xf80 [ 438.114969][T18220] ? clear_bhb_loop+0x40/0x90 [ 438.114987][T18220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.115001][T18220] RIP: 0033:0x7f721ff5cfce [ 438.115013][T18220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.115027][T18220] RSP: 002b:00007f7220dfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.115042][T18220] RAX: ffffffffffffffda RBX: 00007f7220dfb6c0 RCX: 00007f721ff5cfce [ 438.115051][T18220] RDX: 000000000000000f RSI: 00007f7220dfb0a0 RDI: 0000000000000003 [ 438.115060][T18220] RBP: 00007f7220dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 438.115068][T18220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.115077][T18220] R13: 00007f7220216038 R14: 00007f7220215fa0 R15: 00007ffd9865d578 [ 438.115096][T18220] [ 438.123474][ T7179] hub 13-1:0.0: bad descriptor, ignoring hub [ 438.150990][ T40] audit: type=1400 audit(1773965413.184:1154): avc: denied { search } for pid=18219 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.153759][ T7179] hub 13-1:0.0: probe with driver hub failed with error -5 [ 438.154494][ T40] audit: type=1400 audit(1773965413.184:1155): avc: denied { read write } for pid=18219 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 438.157511][ T7179] usb 13-1: selecting invalid altsetting 0 [ 438.240940][T18231] QAT: Stopping all acceleration devices. syzkaller syzkaller login: [ 438.535609][T18259] netlink: 'syz.6.3732': attribute type 1 has an invalid length. [ 438.540345][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 438.548996][T18259] bond2: entered promiscuous mode [ 438.551497][T18259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.560585][T18259] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 438.564802][T18259] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 438.568184][T18259] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 438.682047][T18276] FAULT_INJECTION: forcing a failure. [ 438.682047][T18276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.687146][T18276] CPU: 0 UID: 0 PID: 18276 Comm: syz.5.3735 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.687169][T18276] Tainted: [L]=SOFTLOCKUP [ 438.687174][T18276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 438.687182][T18276] Call Trace: [ 438.687188][T18276] [ 438.687194][T18276] dump_stack_lvl+0x100/0x190 [ 438.687221][T18276] should_fail_ex.cold+0x5/0xa [ 438.687241][T18276] _copy_from_user+0x2e/0xd0 [ 438.687255][T18276] ip_mcast_join_leave+0x1e6/0x240 [ 438.687279][T18276] ? __pfx_ip_mcast_join_leave+0x10/0x10 [ 438.687300][T18276] ? find_held_lock+0x2b/0x80 [ 438.687330][T18276] ? __local_bh_enable_ip+0x9e/0x120 [ 438.687348][T18276] ? lockdep_hardirqs_on+0x78/0x100 [ 438.687369][T18276] do_ip_setsockopt+0x16d4/0x3310 [ 438.687393][T18276] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 438.687415][T18276] ? __pfx_sock_has_perm+0x10/0x10 [ 438.687432][T18276] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 438.687452][T18276] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 438.687478][T18276] ip_setsockopt+0x5a/0xf0 [ 438.687493][T18276] tcp_setsockopt+0xa7/0x100 [ 438.687509][T18276] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 438.687531][T18276] do_sock_setsockopt+0xf3/0x1d0 [ 438.687553][T18276] __sys_setsockopt+0x195/0x220 [ 438.687574][T18276] __x64_sys_setsockopt+0xbd/0x160 [ 438.687590][T18276] ? do_syscall_64+0x95/0xf80 [ 438.687606][T18276] ? lockdep_hardirqs_on+0x78/0x100 [ 438.687624][T18276] do_syscall_64+0x106/0xf80 [ 438.687640][T18276] ? clear_bhb_loop+0x40/0x90 [ 438.687658][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.687672][T18276] RIP: 0033:0x7f0cced9c799 [ 438.687683][T18276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.687697][T18276] RSP: 002b:00007f0ccfb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.687711][T18276] RAX: ffffffffffffffda RBX: 00007f0ccf015fa0 RCX: 00007f0cced9c799 [ 438.687720][T18276] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000003 [ 438.687735][T18276] RBP: 00007f0ccfb81090 R08: 0000000000000108 R09: 0000000000000000 [ 438.687743][T18276] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 438.687752][T18276] R13: 00007f0ccf016038 R14: 00007f0ccf015fa0 R15: 00007ffd08545898 [ 438.687771][T18276] [ 439.469976][ T54] usb 13-1: USB disconnect, device number 4 [ 444.915655][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.774493][T18309] __nla_validate_parse: 4 callbacks suppressed [ 448.774511][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3738'. [ 448.954093][T18335] openvswitch: netlink: IP tunnel dst address not specified [ 449.605993][T18308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.612100][T18307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3741'. [ 449.683617][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3749'. [ 449.713847][T18343] openvswitch: netlink: IP tunnel dst address not specified [ 449.737072][T18345] FAULT_INJECTION: forcing a failure. [ 449.737072][T18345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.743840][T18345] CPU: 0 UID: 0 PID: 18345 Comm: syz.5.3751 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.743867][T18345] Tainted: [L]=SOFTLOCKUP [ 449.743872][T18345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.743881][T18345] Call Trace: [ 449.743886][T18345] [ 449.743891][T18345] dump_stack_lvl+0x100/0x190 [ 449.743934][T18345] should_fail_ex.cold+0x5/0xa [ 449.743956][T18345] _copy_to_user+0x32/0xd0 [ 449.743982][T18345] simple_read_from_buffer+0xcb/0x170 [ 449.744011][T18345] proc_fail_nth_read+0x1af/0x230 [ 449.744035][T18345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.744060][T18345] ? rw_verify_area+0xce/0x6d0 [ 449.744083][T18345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.744105][T18345] vfs_read+0x1e4/0xb30 [ 449.744133][T18345] ? __pfx_vfs_read+0x10/0x10 [ 449.744157][T18345] ? __fget_files+0x215/0x3d0 [ 449.744180][T18345] ? __fget_files+0x21f/0x3d0 [ 449.744203][T18345] ksys_read+0x12a/0x250 [ 449.744227][T18345] ? __pfx_ksys_read+0x10/0x10 [ 449.744259][T18345] do_syscall_64+0x106/0xf80 [ 449.744285][T18345] ? clear_bhb_loop+0x40/0x90 [ 449.744306][T18345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.744324][T18345] RIP: 0033:0x7f0cced5cfce [ 449.744337][T18345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 449.744352][T18345] RSP: 002b:00007f0ccfb80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.744369][T18345] RAX: ffffffffffffffda RBX: 00007f0ccfb816c0 RCX: 00007f0cced5cfce [ 449.744381][T18345] RDX: 000000000000000f RSI: 00007f0ccfb810a0 RDI: 0000000000000004 [ 449.744391][T18345] RBP: 00007f0ccfb81090 R08: 0000000000000000 R09: 0000000000000000 [ 449.744401][T18345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.744411][T18345] R13: 00007f0ccf016038 R14: 00007f0ccf015fa0 R15: 00007ffd08545898 [ 449.744434][T18345] [ 449.846192][T18353] openvswitch: netlink: EtherType 50a is less than min 600 [ 449.864778][T18357] rdma_rxe: rxe_newlink: failed to add lo [ 449.880731][T18355] overlayfs: failed to resolve './file1': -2 [ 449.924100][T18364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18364 comm=syz.8.3759 [ 449.928600][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3758'. [ 449.969481][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3760'. [ 449.993987][T18367] bond15: entered promiscuous mode [ 449.996803][T18367] 8021q: adding VLAN 0 to HW filter on device bond15 [ 450.005577][T18367] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3760'. [ 450.063757][T18382] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.116177][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3765'. [ 450.180423][ T6016] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 450.215491][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 450.215510][ T40] audit: type=1400 audit(1773965425.244:1160): avc: denied { create } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 450.242050][ T40] audit: type=1400 audit(1773965425.274:1161): avc: denied { create } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 450.251808][ T40] audit: type=1400 audit(1773965425.284:1162): avc: denied { write } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 450.262658][ T40] audit: type=1400 audit(1773965425.294:1163): avc: denied { create } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 450.269915][ T40] audit: type=1400 audit(1773965425.294:1164): avc: denied { write } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 450.269941][ T40] audit: type=1400 audit(1773965425.294:1165): avc: denied { read } for pid=18387 comm="syz.7.3766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 450.277508][ T40] audit: type=1400 audit(1773965425.304:1166): avc: denied { ioctl } for pid=18387 comm="syz.7.3766" path="socket:[94288]" dev="sockfs" ino=94288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 451.172214][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3774'. [ 451.180264][ T40] audit: type=1400 audit(1773965426.204:1167): avc: denied { write } for pid=18406 comm="syz.7.3773" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 451.185846][T18402] bond1: entered promiscuous mode [ 451.192058][T18402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.199041][T18402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3774'. [ 451.207686][T18404] netlink: 880 bytes leftover after parsing attributes in process `syz.6.3771'. [ 451.210613][T18412] openvswitch: netlink: IP tunnel dst address not specified [ 451.270617][T18416] openvswitch: netlink: IP tunnel dst address not specified [ 451.285546][T18419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18419 comm=syz.6.3778 [ 451.323251][T18428] kAFS: unable to lookup cell '(' [ 451.330583][T18428] kAFS: unable to lookup cell '(,c¾ûL' [ 451.382766][T18421] syz.5.3779 (18421): drop_caches: 2 [ 451.386399][T18433] openvswitch: netlink: IP tunnel dst address not specified [ 451.455595][T18441] openvswitch: netlink: IP tunnel dst address not specified [ 451.479073][T18444] ip6t_rpfilter: unknown options [ 451.480489][T18446] dlm: no locking on control device [ 451.682387][ T40] audit: type=1400 audit(1773965426.714:1168): avc: denied { bind } for pid=18472 comm="syz.7.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 451.687916][T18475] openvswitch: netlink: IP tunnel dst address not specified [ 451.785006][T18484] ntfs3(sr0): Primary boot signature is not NTFS. [ 451.788737][T18484] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 451.879968][ T40] audit: type=1400 audit(1773965426.904:1169): avc: denied { getopt } for pid=18478 comm="syz.7.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 452.327659][T18508] 9p: Bad value for 'wfdno' [ 452.390606][T18514] openvswitch: netlink: IP tunnel dst address not specified [ 452.515683][T18525] openvswitch: netlink: IP tunnel dst address not specified [ 452.572954][ T6015] Process accounting resumed [ 452.598965][T18532] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 452.671349][T18532] could not allocate digest TFM handle cryptd(blake2b-160) [ 452.723622][T18543] bond2: entered promiscuous mode [ 452.725654][T18543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.761862][T18548] xt_socket: unknown flags 0xc [ 452.940930][T18574] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 453.168095][T18597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=237 sclass=netlink_route_socket pid=18597 comm=syz.7.3850 [ 453.174313][T18597] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 453.222389][T18595] /dev/sr0: Can't open blockdev [ 453.252670][T18606] bond0: (slave bond_slave_1): Releasing backup interface [ 453.328746][T18612] bond16: entered promiscuous mode [ 453.332035][T18612] 8021q: adding VLAN 0 to HW filter on device bond16 [ 453.488750][T18633] netlink: 'syz.6.3864': attribute type 21 has an invalid length. [ 453.491496][T18633] netlink: 'syz.6.3864': attribute type 4 has an invalid length. [ 453.494050][T18633] netlink: 'syz.6.3864': attribute type 5 has an invalid length. [ 453.580992][T18643] bond2: entered promiscuous mode [ 453.583577][T18643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.802699][T18665] __nla_validate_parse: 20 callbacks suppressed [ 453.802710][T18665] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3876'. [ 453.832595][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3877'. [ 453.844106][T18667] bond3: entered promiscuous mode [ 453.846116][T18667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.846168][T18658] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.852799][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3877'. [ 453.853851][T18658] netlink: 'syz.5.3873': attribute type 7 has an invalid length. [ 453.878433][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3878'. [ 453.886434][T18671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2573 sclass=netlink_tcpdiag_socket pid=18671 comm=syz.6.3878 [ 454.140853][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3880'. [ 454.268758][T18685] net_ratelimit: 8 callbacks suppressed [ 454.268774][T18685] openvswitch: netlink: IP tunnel dst address not specified [ 454.384265][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3887'. [ 454.403182][T18691] bond4: entered promiscuous mode [ 454.405852][T18691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.413087][T18691] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3887'. [ 454.470145][T18694] netlink: 'syz.6.3888': attribute type 3 has an invalid length. [ 454.501102][ T6015] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 454.522046][T18697] openvswitch: netlink: IP tunnel dst address not specified [ 454.656925][T18708] openvswitch: netlink: IP tunnel dst address not specified [ 454.660320][ T6015] usb 12-1: Using ep0 maxpacket: 8 [ 454.661929][ T6015] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 454.666252][ T6015] usb 12-1: config 0 has no interface number 0 [ 454.668949][ T6015] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.673812][ T6015] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 454.676474][T18710] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3895'. [ 454.676960][T18708] netlink: 'syz.6.3894': attribute type 25 has an invalid length. [ 454.678792][ T6015] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.687150][T18710] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3895'. [ 454.691228][ T6015] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.699391][ T6015] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 454.705246][ T6015] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.713830][ T6015] usb 12-1: config 0 descriptor?? [ 454.718530][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3896'. [ 454.723690][ T6015] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 454.734418][T18712] bond3: entered promiscuous mode [ 454.736716][T18712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.928547][ T6015] usb 12-1: USB disconnect, device number 13 [ 454.931672][ C0] ldusb 12-1:0.55: usb_submit_urb failed (-19) [ 454.937911][ T6015] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 454.971518][T18742] openvswitch: netlink: IP tunnel dst address not specified [ 454.977719][T18742] netlink: 'syz.6.3905': attribute type 25 has an invalid length. [ 455.024095][T18744] bond5: entered promiscuous mode [ 455.026315][T18744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.141126][T18684] ldusb: No device or device unplugged -19 [ 455.147953][T18684] overlay: ./bus is not a directory [ 455.384692][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 455.384707][ T40] audit: type=1400 audit(1773965430.414:1179): avc: denied { read } for pid=18757 comm="syz.6.3911" laddr=::1 lport=23948 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.534202][T18769] openvswitch: netlink: IP tunnel dst address not specified [ 455.551009][T18769] netlink: 'syz.6.3915': attribute type 25 has an invalid length. [ 455.634343][T18773] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 455.831026][T18783] program syz.5.3921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.932911][T18794] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 456.094510][T18810] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 456.099990][T18812] openvswitch: netlink: IP tunnel dst address not specified [ 456.170343][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 456.173486][T18820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=18820 comm=syz.7.3936 [ 456.319973][ T9] usb 10-1: device descriptor read/64, error -71 [ 456.464644][T18834] openvswitch: netlink: Flow key attr not present in new flow. [ 456.544048][T18839] openvswitch: netlink: IP tunnel dst address not specified [ 456.580338][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 456.626436][T18843] bond8: option mode: unable to set because the bond device has slaves [ 456.633827][T18843] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 8e:8d:07:83:31:e5 [ 456.639445][T18843] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 8e:8d:07:83:31:e5 [ 456.648353][T18843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.652157][T18843] bond8: (slave bond0): Enslaving as a backup interface with an up link [ 456.657200][T18843] netlink: 'syz.7.3945': attribute type 4 has an invalid length. [ 456.659856][T15218] wlan1: Trigger new scan to find an IBSS to join [ 456.710033][ T9] usb 10-1: device descriptor read/64, error -71 [ 456.830464][ T9] usb usb10-port1: attempt power cycle [ 457.170024][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 457.201551][ T9] usb 10-1: device descriptor read/8, error -71 [ 457.460125][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 457.480527][ T9] usb 10-1: device descriptor read/8, error -71 [ 457.599866][ T9] usb usb10-port1: unable to enumerate USB device [ 457.660594][T18858] bond8: option mode: unable to set because the bond device has slaves [ 457.667674][T18858] netlink: 'syz.7.3951': attribute type 4 has an invalid length. [ 458.157958][ T50] libceph: connect (1)[c::]:6789 error -101 [ 458.161626][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 458.261442][ T29] libceph: connect (1)[b::]:6789 error -101 [ 458.264274][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 458.423136][ T50] libceph: connect (1)[c::]:6789 error -101 [ 458.425999][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 458.539999][ T29] libceph: connect (1)[b::]:6789 error -101 [ 458.542121][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 458.580312][ T5962] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 458.749810][ T5962] usb 12-1: Using ep0 maxpacket: 8 [ 458.753807][ T5962] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 458.757696][ T5962] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.761569][ T5962] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.764794][ T5962] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.768096][ T5962] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.773785][ T5962] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.777120][ T5962] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.930487][ T50] libceph: connect (1)[c::]:6789 error -101 [ 458.933267][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 458.976952][T18892] ceph: No mds server is up or the cluster is laggy [ 458.976974][T18884] ceph: No mds server is up or the cluster is laggy [ 459.300948][ T6017] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 459.451399][ T6017] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 459.454966][ T6017] usb 11-1: config 0 has no interface number 0 [ 459.457681][ T6017] usb 11-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 459.462952][ T6017] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x84 has an invalid bInterval 161, changing to 7 [ 459.467846][ T6017] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x84 has invalid maxpacket 58288, setting to 1024 [ 459.474150][ T6017] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 459.478126][ T6017] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.483868][ T6017] usb 11-1: config 0 descriptor?? [ 459.496851][ T6017] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input29 [ 459.536501][T18915] usbtmc 12-1:16.0: simple control status returned 3d [ 459.541486][T18915] __nla_validate_parse: 15 callbacks suppressed [ 459.541501][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3966'. [ 459.599815][ T54] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 459.689533][ T40] audit: type=1400 audit(1773965434.714:1180): avc: denied { create } for pid=18904 comm="syz.6.3969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 459.712464][ T7179] usb 11-1: USB disconnect, device number 19 [ 459.738986][ T5962] usb 12-1: USB disconnect, device number 14 [ 459.752416][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 459.771406][ T54] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 459.775386][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.778946][ T54] usb 10-1: Product: syz [ 459.781531][ T54] usb 10-1: Manufacturer: syz [ 459.783615][ T54] usb 10-1: SerialNumber: syz [ 459.788009][ T54] usb 10-1: config 0 descriptor?? [ 459.796672][ T54] hub 10-1:0.0: bad descriptor, ignoring hub [ 459.799341][ T54] hub 10-1:0.0: probe with driver hub failed with error -5 [ 459.807297][ T54] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input30 [ 460.279563][T18920] veth1_to_batadv: entered promiscuous mode [ 460.284928][T18922] netdevsim netdevsim7: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 460.388947][T18927] FAULT_INJECTION: forcing a failure. [ 460.388947][T18927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.396547][T18927] CPU: 1 UID: 0 PID: 18927 Comm: syz.6.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.396577][T18927] Tainted: [L]=SOFTLOCKUP [ 460.396583][T18927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 460.396594][T18927] Call Trace: [ 460.396601][T18927] [ 460.396608][T18927] dump_stack_lvl+0x100/0x190 [ 460.396643][T18927] should_fail_ex.cold+0x5/0xa [ 460.396666][T18927] _copy_from_user+0x2e/0xd0 [ 460.396686][T18927] move_addr_to_kernel+0x65/0x170 [ 460.396716][T18927] __sys_connect+0xb5/0x170 [ 460.396736][T18927] ? __pfx___sys_connect+0x10/0x10 [ 460.396754][T18927] ? __fget_files+0x21f/0x3d0 [ 460.396782][T18927] ? __pfx_ksys_write+0x10/0x10 [ 460.396815][T18927] __x64_sys_connect+0x72/0xb0 [ 460.396834][T18927] ? lockdep_hardirqs_on+0x78/0x100 [ 460.396857][T18927] do_syscall_64+0x106/0xf80 [ 460.396880][T18927] ? clear_bhb_loop+0x40/0x90 [ 460.396901][T18927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.396919][T18927] RIP: 0033:0x7f721ff9c799 [ 460.396934][T18927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.396950][T18927] RSP: 002b:00007f7220dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 460.396967][T18927] RAX: ffffffffffffffda RBX: 00007f7220215fa0 RCX: 00007f721ff9c799 [ 460.396978][T18927] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 460.396989][T18927] RBP: 00007f7220dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 460.396999][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.397010][T18927] R13: 00007f7220216038 R14: 00007f7220215fa0 R15: 00007ffd9865d578 [ 460.397036][T18927] [ 460.506032][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3978'. [ 460.538732][T18931] lo speed is unknown, defaulting to 1000 [ 460.544495][T18933] net_ratelimit: 3 callbacks suppressed [ 460.544508][T18933] openvswitch: netlink: IP tunnel dst address not specified [ 460.555235][T18933] netlink: 'syz.6.3980': attribute type 25 has an invalid length. [ 460.828982][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3989'. [ 460.882321][T18967] openvswitch: netlink: IP tunnel dst address not specified [ 460.887731][T18967] netlink: 'syz.5.3991': attribute type 25 has an invalid length. [ 460.920611][ T7179] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 460.949602][T18973] openvswitch: netlink: IP tunnel dst address not specified [ 460.956486][T18973] netlink: 'syz.5.3993': attribute type 25 has an invalid length. [ 461.069912][ T7179] usb 11-1: device descriptor read/64, error -71 [ 461.139851][ T5962] usb 12-1: new full-speed USB device number 15 using dummy_hcd [ 461.191790][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3995'. [ 461.213017][T18979] bond4: entered promiscuous mode [ 461.215726][T18979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.223038][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3995'. [ 461.262619][T18982] loop5: detected capacity change from 0 to 7 [ 461.292802][ T5962] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 461.301836][ T5962] usb 12-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 461.304815][ T5962] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.307464][ T5962] usb 12-1: Product: syz [ 461.308863][ T5962] usb 12-1: Manufacturer: syz [ 461.310014][ T7179] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 461.316208][ T5962] usb 12-1: SerialNumber: syz [ 461.320282][ T5962] usb 12-1: config 0 descriptor?? [ 461.325280][ T5962] hub 12-1:0.0: bad descriptor, ignoring hub [ 461.327257][ T5962] hub 12-1:0.0: probe with driver hub failed with error -5 [ 461.340096][ T5962] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input31 [ 461.403224][T18798] Dev loop5: unable to read RDB block 7 [ 461.405075][T18798] loop5: unable to read partition table [ 461.407036][T18798] loop5: partition table beyond EOD, truncated [ 461.440095][ T7179] usb 11-1: device descriptor read/64, error -71 [ 461.538861][T18982] Dev loop5: unable to read RDB block 7 [ 461.541146][T18982] loop5: unable to read partition table [ 461.541560][T15218] wlan1: Trigger new scan to find an IBSS to join [ 461.543144][T18982] loop5: partition table beyond EOD, truncated [ 461.547963][T18982] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 461.561715][ T7179] usb usb11-port1: attempt power cycle [ 461.641416][ T6015] usb 12-1: USB disconnect, device number 15 [ 461.919824][ T7179] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 461.940769][ T7179] usb 11-1: device descriptor read/8, error -71 [ 462.180766][ T7179] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 462.200434][ T7179] usb 11-1: device descriptor read/8, error -71 [ 462.289881][ T6015] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 462.310463][ T7179] usb usb11-port1: unable to enumerate USB device [ 462.443137][ T6015] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 462.447565][ T6015] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.452692][ T60] wlan1: Creating new IBSS network, BSSID 4a:6d:53:4d:df:fc [ 462.453951][ T6015] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 462.460095][ T6015] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 462.463661][ T6015] usb 12-1: Manufacturer: syz [ 462.480320][ T6015] usb 12-1: config 0 descriptor?? [ 462.503658][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 462.530298][ T6015] rc_core: IR keymap rc-hauppauge not found [ 462.532255][ T6015] Registered IR keymap rc-empty [ 462.535419][ T6015] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 462.543793][ T6015] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input32 [ 462.592208][T19001] openvswitch: netlink: IP tunnel dst address not specified [ 462.602296][T19001] netlink: 'syz.5.4002': attribute type 25 has an invalid length. [ 462.651161][T19003] openvswitch: netlink: IP tunnel dst address not specified [ 462.659191][T19003] netlink: 'syz.5.4003': attribute type 24 has an invalid length. [ 462.692307][ T5962] usb 12-1: USB disconnect, device number 16 [ 462.703494][T19005] FAULT_INJECTION: forcing a failure. [ 462.703494][T19005] name failslab, interval 1, probability 0, space 0, times 0 [ 462.710321][T19005] CPU: 1 UID: 0 PID: 19005 Comm: syz.5.4004 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.710349][T19005] Tainted: [L]=SOFTLOCKUP [ 462.710356][T19005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.710365][T19005] Call Trace: [ 462.710372][T19005] [ 462.710381][T19005] dump_stack_lvl+0x100/0x190 [ 462.710415][T19005] should_fail_ex.cold+0x5/0xa [ 462.710440][T19005] should_failslab+0xc2/0x120 [ 462.710461][T19005] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 462.710484][T19005] ? dst_alloc+0x99/0x1a0 [ 462.710510][T19005] dst_alloc+0x99/0x1a0 [ 462.710533][T19005] rt_dst_alloc+0x35/0x3a0 [ 462.710560][T19005] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 462.710590][T19005] ip_route_output_key_hash+0x118/0x2b0 [ 462.710610][T19005] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 462.710634][T19005] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 462.710655][T19005] ? lockdep_hardirqs_on+0x78/0x100 [ 462.710684][T19005] ip_route_output_flow+0x27/0x150 [ 462.710706][T19005] tcp_v4_connect+0x8e8/0x1b40 [ 462.710742][T19005] ? __pfx_tcp_v4_connect+0x10/0x10 [ 462.710772][T19005] ? __lock_acquire+0x4a5/0x2630 [ 462.710790][T19005] ? __lock_acquire+0x4a5/0x2630 [ 462.710809][T19005] __inet_stream_connect+0x208/0xfa0 [ 462.710844][T19005] ? __pfx___inet_stream_connect+0x10/0x10 [ 462.710873][T19005] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 462.710899][T19005] ? __local_bh_enable_ip+0x9e/0x120 [ 462.710928][T19005] inet_stream_connect+0x57/0xa0 [ 462.710959][T19005] kernel_connect+0x107/0x160 [ 462.710985][T19005] ? __pfx_kernel_connect+0x10/0x10 [ 462.711021][T19005] ? __local_bh_enable_ip+0x9e/0x120 [ 462.711048][T19005] smc_connect+0x394/0x750 [ 462.711070][T19005] ? __pfx_smc_connect+0x10/0x10 [ 462.711090][T19005] __sys_connect_file+0x141/0x1a0 [ 462.711113][T19005] __sys_connect+0x141/0x170 [ 462.711131][T19005] ? __pfx___sys_connect+0x10/0x10 [ 462.711151][T19005] ? __fget_files+0x21f/0x3d0 [ 462.711190][T19005] ? __pfx_ksys_write+0x10/0x10 [ 462.711223][T19005] __x64_sys_connect+0x72/0xb0 [ 462.711242][T19005] ? lockdep_hardirqs_on+0x78/0x100 [ 462.711265][T19005] do_syscall_64+0x106/0xf80 [ 462.711286][T19005] ? clear_bhb_loop+0x40/0x90 [ 462.711310][T19005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.711329][T19005] RIP: 0033:0x7f0cced9c799 [ 462.711347][T19005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.711363][T19005] RSP: 002b:00007f0ccfb81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 462.711382][T19005] RAX: ffffffffffffffda RBX: 00007f0ccf015fa0 RCX: 00007f0cced9c799 [ 462.711393][T19005] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 462.711404][T19005] RBP: 00007f0ccfb81090 R08: 0000000000000000 R09: 0000000000000000 [ 462.711414][T19005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.711425][T19005] R13: 00007f0ccf016038 R14: 00007f0ccf015fa0 R15: 00007ffd08545898 [ 462.711450][T19005] [ 462.928239][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4006'. [ 462.954359][T19010] bond5: entered promiscuous mode [ 462.956940][T19010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.037948][ T40] audit: type=1400 audit(1773965438.064:1181): avc: denied { mounton } for pid=19015 comm="syz.5.4008" path="/file0" dev="ramfs" ino=96836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 463.048689][T19016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19016 comm=syz.5.4008 [ 463.207603][T19024] openvswitch: netlink: IP tunnel dst address not specified [ 463.214661][T19024] netlink: 'syz.5.4011': attribute type 25 has an invalid length. [ 463.220436][T19026] openvswitch: netlink: IP tunnel dst address not specified [ 463.225649][T19026] netlink: 'syz.7.4012': attribute type 24 has an invalid length. [ 463.283511][ T40] audit: type=1400 audit(1773965438.314:1182): avc: denied { setattr } for pid=19032 comm="syz.5.4015" name="vbi0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 463.312916][T19035] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 463.341759][ T54] usb 10-1: USB disconnect, device number 21 [ 463.390216][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 463.433096][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4018'. [ 463.447979][T19039] bond17: entered promiscuous mode [ 463.450602][T19039] 8021q: adding VLAN 0 to HW filter on device bond17 [ 464.396395][T19049] sit0: entered promiscuous mode [ 464.398305][T19050] openvswitch: netlink: IP tunnel dst address not specified [ 464.400028][T19049] netlink: 'syz.7.4022': attribute type 1 has an invalid length. [ 464.403902][T19050] netlink: 'syz.5.4023': attribute type 24 has an invalid length. [ 464.404144][T19049] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4022'. [ 464.413760][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4021'. [ 464.560905][T19069] bond6: entered promiscuous mode [ 464.563455][T19069] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.665194][T19076] netlink: 'syz.5.4032': attribute type 7 has an invalid length. [ 464.677918][T19073] netem: change failed [ 464.690188][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 464.690758][T19078] openvswitch: netlink: IP tunnel dst address not specified [ 464.754195][T19086] FAULT_INJECTION: forcing a failure. [ 464.754195][T19086] name failslab, interval 1, probability 0, space 0, times 0 [ 464.769880][T19086] CPU: 3 UID: 0 PID: 19086 Comm: syz.6.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.769908][T19086] Tainted: [L]=SOFTLOCKUP [ 464.769915][T19086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.769926][T19086] Call Trace: [ 464.769932][T19086] [ 464.769939][T19086] dump_stack_lvl+0x100/0x190 [ 464.769974][T19086] should_fail_ex.cold+0x5/0xa [ 464.769998][T19086] should_failslab+0xc2/0x120 [ 464.770017][T19086] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 464.770042][T19086] ? dst_alloc+0x99/0x1a0 [ 464.770067][T19086] dst_alloc+0x99/0x1a0 [ 464.770087][T19086] rt_dst_alloc+0x35/0x3a0 [ 464.770113][T19086] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 464.770142][T19086] ip_route_output_key_hash+0x118/0x2b0 [ 464.770160][T19086] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 464.770186][T19086] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 464.770204][T19086] ? lockdep_hardirqs_on+0x78/0x100 [ 464.770233][T19086] ip_route_output_flow+0x27/0x150 [ 464.770253][T19086] tcp_v4_connect+0x14b9/0x1b40 [ 464.770321][T19086] ? __pfx_tcp_v4_connect+0x10/0x10 [ 464.770349][T19086] ? __lock_acquire+0x4a5/0x2630 [ 464.770368][T19086] ? __lock_acquire+0x4a5/0x2630 [ 464.770387][T19086] __inet_stream_connect+0x208/0xfa0 [ 464.770422][T19086] ? __pfx___inet_stream_connect+0x10/0x10 [ 464.770450][T19086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 464.770475][T19086] ? __local_bh_enable_ip+0x9e/0x120 [ 464.770503][T19086] inet_stream_connect+0x57/0xa0 [ 464.770532][T19086] kernel_connect+0x107/0x160 [ 464.770557][T19086] ? __pfx_kernel_connect+0x10/0x10 [ 464.770595][T19086] ? __local_bh_enable_ip+0x9e/0x120 [ 464.770621][T19086] smc_connect+0x394/0x750 [ 464.770642][T19086] ? __pfx_smc_connect+0x10/0x10 [ 464.770661][T19086] __sys_connect_file+0x141/0x1a0 [ 464.770690][T19086] __sys_connect+0x141/0x170 [ 464.770710][T19086] ? __pfx___sys_connect+0x10/0x10 [ 464.770725][T19086] ? __fget_files+0x21f/0x3d0 [ 464.770755][T19086] ? __pfx_ksys_write+0x10/0x10 [ 464.770787][T19086] __x64_sys_connect+0x72/0xb0 [ 464.770805][T19086] ? lockdep_hardirqs_on+0x78/0x100 [ 464.770827][T19086] do_syscall_64+0x106/0xf80 [ 464.770848][T19086] ? clear_bhb_loop+0x40/0x90 [ 464.770871][T19086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.770888][T19086] RIP: 0033:0x7f721ff9c799 [ 464.770904][T19086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.770921][T19086] RSP: 002b:00007f7220dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 464.770938][T19086] RAX: ffffffffffffffda RBX: 00007f7220215fa0 RCX: 00007f721ff9c799 [ 464.770951][T19086] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 464.770962][T19086] RBP: 00007f7220dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 464.770973][T19086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.770983][T19086] R13: 00007f7220216038 R14: 00007f7220215fa0 R15: 00007ffd9865d578 [ 464.771009][T19086] [ 464.782321][T19089] __nla_validate_parse: 1 callbacks suppressed [ 464.782332][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4039'. [ 465.382839][ C2] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 8e:8d:07:83:31:e5 [ 465.695641][T19093] IPv6: sit1: Disabled Multicast RS [ 465.698468][T19093] sit1: entered allmulticast mode [ 465.703121][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4042'. [ 465.719252][T19097] bond7: entered promiscuous mode [ 465.721437][T19097] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.723046][ T40] audit: type=1400 audit(1773965440.754:1183): avc: denied { map } for pid=19101 comm="syz.6.4043" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 465.737783][T19104] openvswitch: netlink: IP tunnel dst address not specified [ 465.746100][T19104] validate_nla: 1 callbacks suppressed [ 465.746115][T19104] netlink: 'syz.7.4044': attribute type 25 has an invalid length. [ 465.850072][ T40] audit: type=1400 audit(1773965440.874:1184): avc: denied { mount } for pid=19115 comm="syz.7.4050" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 465.868216][ T40] audit: type=1400 audit(1773965440.894:1185): avc: denied { mounton } for pid=19115 comm="syz.7.4050" path="/533/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 465.905615][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4053'. [ 465.927713][T19116] overlayfs: statfs failed on './file0' [ 465.953440][T19124] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 465.955695][T19129] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4054'. [ 465.967628][ T40] audit: type=1400 audit(1773965440.994:1186): avc: denied { unmount } for pid=12777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 465.987942][T19131] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 466.166020][T19148] openvswitch: netlink: IP tunnel dst address not specified [ 466.204398][T19150] QAT: failed to copy from user cfg_data. [ 466.241514][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 466.402599][T19162] FAULT_INJECTION: forcing a failure. [ 466.402599][T19162] name failslab, interval 1, probability 0, space 0, times 0 [ 466.408284][T19162] CPU: 1 UID: 0 PID: 19162 Comm: syz.5.4068 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.408301][T19162] Tainted: [L]=SOFTLOCKUP [ 466.408305][T19162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.408312][T19162] Call Trace: [ 466.408316][T19162] [ 466.408321][T19162] dump_stack_lvl+0x100/0x190 [ 466.408343][T19162] should_fail_ex.cold+0x5/0xa [ 466.408358][T19162] ? tomoyo_realpath_from_path+0xb6/0x690 [ 466.408375][T19162] should_failslab+0xc2/0x120 [ 466.408387][T19162] __kmalloc_noprof+0xe0/0x850 [ 466.408406][T19162] tomoyo_realpath_from_path+0xb6/0x690 [ 466.408425][T19162] tomoyo_path_number_perm+0x23c/0x580 [ 466.408439][T19162] ? tomoyo_path_number_perm+0x22e/0x580 [ 466.408454][T19162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 466.408482][T19162] ? find_held_lock+0x2b/0x80 [ 466.408497][T19162] ? __fget_files+0x215/0x3d0 [ 466.408508][T19162] ? hook_file_ioctl_common+0x146/0x410 [ 466.408529][T19162] ? __fget_files+0x21f/0x3d0 [ 466.408543][T19162] security_file_ioctl+0xd3/0x230 [ 466.408559][T19162] __x64_sys_ioctl+0xb7/0x210 [ 466.408577][T19162] do_syscall_64+0x106/0xf80 [ 466.408592][T19162] ? clear_bhb_loop+0x40/0x90 [ 466.408606][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.408617][T19162] RIP: 0033:0x7f0cced9c799 [ 466.408627][T19162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.408638][T19162] RSP: 002b:00007f0ccfb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.408650][T19162] RAX: ffffffffffffffda RBX: 00007f0ccf015fa0 RCX: 00007f0cced9c799 [ 466.408657][T19162] RDX: 0000200000000080 RSI: 00000000000089e8 RDI: 0000000000000004 [ 466.408664][T19162] RBP: 00007f0ccfb81090 R08: 0000000000000000 R09: 0000000000000000 [ 466.408670][T19162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.408677][T19162] R13: 00007f0ccf016038 R14: 00007f0ccf015fa0 R15: 00007ffd08545898 [ 466.408771][T19162] [ 466.408777][T19162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.635148][T19166] syz.5.4070 (19166): drop_caches: 2 [ 466.684866][T19169] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4071'. [ 466.727981][T19171] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 466.759302][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4073'. [ 466.779119][T19174] bond8: entered promiscuous mode [ 466.782468][T19174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 466.841505][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4074'. [ 467.051749][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4080'. [ 467.064500][T19192] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4080'. [ 467.170519][ T40] audit: type=1800 audit(1773965442.204:1187): pid=19199 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4082" name="file0" dev="9p" ino=71827739 res=0 errno=0 [ 467.177925][ T40] audit: type=1400 audit(1773965442.204:1188): avc: denied { map } for pid=19198 comm="syz.5.4082" path="/235/file0/file0" dev="9p" ino=71827739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.384526][T19208] bond9: entered promiscuous mode [ 467.387029][T19208] 8021q: adding VLAN 0 to HW filter on device bond9 [ 467.973812][ T40] audit: type=1400 audit(1773965443.004:1189): avc: denied { audit_read } for pid=19233 comm="syz.5.4094" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 468.245451][T19246] bond10: entered promiscuous mode [ 468.247640][T19246] 8021q: adding VLAN 0 to HW filter on device bond10 [ 468.546602][T19263] openvswitch: netlink: IP tunnel dst address not specified [ 468.553603][T19263] netlink: 'syz.7.4107': attribute type 25 has an invalid length. [ 468.569794][ T6015] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 468.577323][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.586778][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.592907][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.598393][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.598796][T19267] FAULT_INJECTION: forcing a failure. [ 468.598796][T19267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.603710][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.606609][T19267] CPU: 1 UID: 0 PID: 19267 Comm: syz.7.4108 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.606634][T19267] Tainted: [L]=SOFTLOCKUP [ 468.606640][T19267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.606649][T19267] Call Trace: [ 468.606655][T19267] [ 468.606664][T19267] dump_stack_lvl+0x100/0x190 [ 468.606696][T19267] should_fail_ex.cold+0x5/0xa [ 468.606718][T19267] _copy_to_user+0x32/0xd0 [ 468.606738][T19267] simple_read_from_buffer+0xcb/0x170 [ 468.606768][T19267] proc_fail_nth_read+0x1af/0x230 [ 468.606792][T19267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.606817][T19267] ? rw_verify_area+0xce/0x6d0 [ 468.606840][T19267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.606863][T19267] vfs_read+0x1e4/0xb30 [ 468.606891][T19267] ? __pfx_vfs_read+0x10/0x10 [ 468.606916][T19267] ? __fget_files+0x215/0x3d0 [ 468.606939][T19267] ? __fget_files+0x21f/0x3d0 [ 468.606964][T19267] ksys_read+0x12a/0x250 [ 468.606989][T19267] ? __pfx_ksys_read+0x10/0x10 [ 468.607021][T19267] do_syscall_64+0x106/0xf80 [ 468.607049][T19267] ? clear_bhb_loop+0x40/0x90 [ 468.607071][T19267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.607089][T19267] RIP: 0033:0x7f4bd175cfce [ 468.607104][T19267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.607119][T19267] RSP: 002b:00007f4bd270afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.607136][T19267] RAX: ffffffffffffffda RBX: 00007f4bd270b6c0 RCX: 00007f4bd175cfce [ 468.607147][T19267] RDX: 000000000000000f RSI: 00007f4bd270b0a0 RDI: 0000000000000003 [ 468.607156][T19267] RBP: 00007f4bd270b090 R08: 0000000000000000 R09: 0000000000000000 [ 468.607166][T19267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.607177][T19267] R13: 00007f4bd1a16038 R14: 00007f4bd1a15fa0 R15: 00007fff2dba9218 [ 468.607201][T19267] [ 468.732424][ T6015] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 468.735896][ T6015] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.740201][ T6015] usb 10-1: config 0 interface 0 has no altsetting 0 [ 468.746414][ T6015] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.750337][ T6015] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 468.753840][ T6015] usb 10-1: Product: syz [ 468.755677][ T6015] usb 10-1: Manufacturer: syz [ 468.757694][ T6015] usb 10-1: SerialNumber: syz [ 468.763371][ T6015] usb 10-1: config 0 descriptor?? [ 468.777421][ T6015] hub 10-1:0.0: bad descriptor, ignoring hub [ 468.780542][ T6015] hub 10-1:0.0: probe with driver hub failed with error -5 [ 468.782826][T19274] bond19: entered promiscuous mode [ 468.785200][ T6015] usb 10-1: selecting invalid altsetting 0 [ 468.785626][T19274] 8021q: adding VLAN 0 to HW filter on device bond19 [ 468.800860][T19264] lo speed is unknown, defaulting to 1000 [ 468.836623][ T40] audit: type=1400 audit(1773965443.864:1190): avc: denied { connect } for pid=19278 comm="syz.7.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 469.053905][T17466] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.058666][T17466] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.138885][T17466] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.142535][T17466] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.151416][T19293] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 469.162022][T19264] chnl_net:caif_netlink_parms(): no params data found [ 469.218286][T17466] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.222434][T17466] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.237285][T19264] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.239630][T19264] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.242352][T19264] bridge_slave_0: entered allmulticast mode [ 469.245181][T19264] bridge_slave_0: entered promiscuous mode [ 469.248442][T19264] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.251396][T19264] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.253750][T19264] bridge_slave_1: entered allmulticast mode [ 469.256751][T19264] bridge_slave_1: entered promiscuous mode [ 469.274467][T19264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.279387][T19264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.300991][T19264] team0: Port device team_slave_0 added [ 469.306009][T19264] team0: Port device team_slave_1 added [ 469.330224][T19264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.333460][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.344773][T19264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.371845][T17466] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.376294][T17466] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.392437][T19264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.394716][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.403316][T19264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.427880][T19264] hsr_slave_0: entered promiscuous mode [ 469.430462][T19264] hsr_slave_1: entered promiscuous mode [ 469.432687][T19264] debugfs: 'hsr0' already exists in 'hsr' [ 469.434702][T19264] Cannot create hsr debugfs directory [ 469.484638][T19307] block nbd6: NBD_DISCONNECT [ 469.558018][T17466] bridge_slave_1: left allmulticast mode [ 469.561656][T17466] bridge_slave_1: left promiscuous mode [ 469.564345][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.569276][T17466] bridge_slave_0: left allmulticast mode [ 469.571769][T17466] bridge_slave_0: left promiscuous mode [ 469.573732][T17466] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.709844][T19255] usb 10-1: reset high-speed USB device number 22 using dummy_hcd [ 469.764720][T17466] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 469.768874][T17466] bridge1 (unregistering): left promiscuous mode [ 469.871960][T19255] usb 10-1: device firmware changed [ 469.876529][ T7179] usb 10-1: USB disconnect, device number 22 [ 469.880151][T17466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.885283][T17466] bond0 (unregistering): Released all slaves [ 469.904857][T17466] bond1 (unregistering): Released all slaves [ 469.915283][T17466] bond2 (unregistering): Released all slaves [ 469.934350][T19317] __nla_validate_parse: 13 callbacks suppressed [ 469.934362][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4122'. [ 470.016166][T19264] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.027343][T19264] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 470.045222][T19264] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.066304][T19264] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 470.074165][ T7179] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 470.100113][T19328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.202641][T19264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.222116][T19264] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.231168][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.234336][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.245623][T15229] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.246503][ T7179] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 470.248397][T15229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.253357][ T7179] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.262712][ T7179] usb 10-1: config 0 interface 0 has no altsetting 0 [ 470.284011][ T7179] usb 10-1: string descriptor 0 read error: -22 [ 470.287117][ T7179] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.292313][ T7179] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.300228][ T7179] usb 10-1: config 0 descriptor?? [ 470.310736][ T7179] hub 10-1:0.0: bad descriptor, ignoring hub [ 470.321535][ T7179] hub 10-1:0.0: probe with driver hub failed with error -5 [ 470.332487][ T7179] usb 10-1: selecting invalid altsetting 0 [ 470.404944][ T40] audit: type=1804 audit(1773965445.434:1191): pid=19360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.4128" name="/newroot/165/file1" dev="tmpfs" ino=865 res=1 errno=0 [ 470.530721][T19264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.551890][T17466] hsr_slave_0: left promiscuous mode [ 470.555968][T17466] hsr_slave_1: left promiscuous mode [ 470.558846][T17466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.564365][T17466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.567294][T17466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.570114][T17466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.570525][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4131'. [ 470.580321][T17466] veth1_macvtap: left promiscuous mode [ 470.582375][T17466] veth0_macvtap: left promiscuous mode [ 470.584223][T17466] veth1_vlan: left promiscuous mode [ 470.585934][T17466] veth0_vlan: left promiscuous mode [ 470.621692][T19381] input: syz0 as /devices/virtual/input/input34 [ 470.623794][ T29] usb 10-1: USB disconnect, device number 23 [ 470.724192][T19384] openvswitch: netlink: IP tunnel dst address not specified [ 470.736060][T19384] netlink: 'syz.6.4134': attribute type 24 has an invalid length. [ 470.739924][ T5936] Bluetooth: hci1: command tx timeout [ 470.777360][T19390] sctp: [Deprecated]: syz.6.4136 (pid 19390) Use of int in maxseg socket option. [ 470.777360][T19390] Use struct sctp_assoc_value instead [ 470.787983][T17466] team0 (unregistering): Port device team_slave_1 removed [ 470.795998][T17466] team0 (unregistering): Port device team_slave_0 removed [ 470.854377][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4135'. [ 470.973776][ T5936] Bluetooth: hci4: unexpected subevent 0x19 length: 24 < 28 [ 471.008098][T19264] veth0_vlan: entered promiscuous mode [ 471.016907][T19264] veth1_vlan: entered promiscuous mode [ 471.052800][T19264] veth0_macvtap: entered promiscuous mode [ 471.058659][T19264] veth1_macvtap: entered promiscuous mode [ 471.077494][T19264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.087822][T19264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.093379][T19416] openvswitch: netlink: IP tunnel dst address not specified [ 471.097953][T15218] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.102773][T15229] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.106450][T15229] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.110857][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.112615][T19416] netlink: 'syz.5.4143': attribute type 24 has an invalid length. [ 471.201271][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.203985][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.225281][T19426] xt_TCPMSS: Only works on TCP SYN packets [ 471.231568][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.235047][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.278723][T19428] can: request_module (can-proto-3) failed. [ 471.306530][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'. [ 471.323812][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4149'. [ 471.341671][T19440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19440 comm=syz.5.4144 [ 471.374740][T19445] openvswitch: netlink: IP tunnel dst address not specified [ 471.450240][T19451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19451 comm=syz.9.4154 [ 471.646071][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 471.836736][ T40] audit: type=1800 audit(1773965446.864:1192): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.9.4161" name="/newroot/8/file0" dev="tmpfs" ino=58 res=0 errno=0 [ 471.877606][T19481] openvswitch: netlink: IP tunnel dst address not specified [ 471.887199][T19481] netlink: 'syz.9.4162': attribute type 25 has an invalid length. [ 471.963231][T19488] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 472.099079][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4167'. [ 472.144576][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4169'. [ 472.156504][T19503] openvswitch: netlink: IP tunnel dst address not specified [ 472.165230][T19503] netlink: 'syz.5.4171': attribute type 25 has an invalid length. [ 472.281539][ T40] audit: type=1400 audit(1773965447.304:1193): avc: denied { getopt } for pid=19514 comm="syz.6.4177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 472.285186][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4178'. [ 472.335214][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4180'. [ 472.432213][T19530] openvswitch: netlink: IP tunnel dst address not specified [ 472.446013][T19530] netlink: 'syz.9.4183': attribute type 25 has an invalid length. [ 472.601646][T19553] netlink: del zone limit has 4 unknown bytes [ 472.656695][T19560] Cannot find set identified by id 65534 to match [ 472.665032][T19562] openvswitch: netlink: IP tunnel dst address not specified [ 472.675474][T19562] netlink: 'syz.9.4194': attribute type 25 has an invalid length. [ 472.775811][T19569] bond6: entered promiscuous mode [ 472.777792][T19569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.808537][T19572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19572 comm=syz.9.4196 [ 472.820174][ T5936] Bluetooth: hci1: command tx timeout [ 472.937290][T19581] netlink: 'syz.6.4201': attribute type 25 has an invalid length. [ 473.013096][T19587] openvswitch: netlink: IP tunnel dst address not specified [ 473.019130][T19587] netlink: 'syz.7.4203': attribute type 25 has an invalid length. [ 473.072661][ T40] audit: type=1400 audit(1773965448.104:1194): avc: denied { lock } for pid=19591 comm="syz.7.4204" path="socket:[103494]" dev="sockfs" ino=103494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 473.126293][ T40] audit: type=1400 audit(1773965448.154:1195): avc: denied { ioctl } for pid=19596 comm="syz.7.4206" path="socket:[100935]" dev="sockfs" ino=100935 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 473.135200][ T40] audit: type=1400 audit(1773965448.154:1196): avc: denied { ioctl } for pid=19596 comm="syz.7.4206" path="socket:[100929]" dev="sockfs" ino=100929 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 473.173439][T19602] binder: 19600:19602 ioctl 400c620e 200000000cc0 returned -22 [ 473.179261][T19602] befs: (nbd7): unable to read superblock [ 473.269984][T19611] bond7: entered promiscuous mode [ 473.271848][T19611] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.333362][T19617] openvswitch: netlink: IP tunnel dst address not specified [ 473.338498][T19617] netlink: 'syz.5.4213': attribute type 25 has an invalid length. [ 473.360172][ T40] audit: type=1400 audit(1773965448.394:1197): avc: denied { listen } for pid=19606 comm="syz.7.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 473.392317][T19622] ntfs3(loop5): try to read out of volume at offset 0x0 [ 473.444760][T19626] 8021q: VLANs not supported on caif0 [ 473.448781][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.455892][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.460236][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.504676][T19627] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 473.566391][T19626] infiniband syz2: set active [ 473.568027][T17531] wg1 speed is unknown, defaulting to 1000 [ 473.569558][T19626] infiniband syz2: added wg1 [ 473.573215][T19626] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 473.578714][T19626] infiniband syz2: Couldn't open port 1 [ 473.600567][T19626] RDS/IB: syz2: added [ 473.601915][T19626] smc: adding ib device syz2 with port count 1 [ 473.603992][T19626] smc: ib device syz2 port 1 has no pnetid [ 473.607844][T10569] wg1 speed is unknown, defaulting to 1000 [ 473.611324][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.712315][ T1192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.725303][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.815684][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.858328][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.867020][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.871324][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.875112][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.878516][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.911899][ T1192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.920853][T19626] wg1 speed is unknown, defaulting to 1000 [ 473.931795][T19633] lo speed is unknown, defaulting to 1000 [ 474.012169][ T1192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.022342][T19626] wg1 speed is unknown, defaulting to 1000 [ 474.077962][ T1192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.106267][T19626] wg1 speed is unknown, defaulting to 1000 [ 474.169677][T19640] bond20: entered promiscuous mode [ 474.173113][T19640] 8021q: adding VLAN 0 to HW filter on device bond20 [ 474.267226][ T1192] bridge_slave_1: left allmulticast mode [ 474.269291][ T1192] bridge_slave_1: left promiscuous mode [ 474.271256][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.277851][ T1192] bridge_slave_0: left allmulticast mode [ 474.284925][ T1192] bridge_slave_0: left promiscuous mode [ 474.286783][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.311334][T13335] IPVS: starting estimator thread 0... [ 474.379190][T19659] FAULT_INJECTION: forcing a failure. [ 474.379190][T19659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.383805][T19659] CPU: 2 UID: 0 PID: 19659 Comm: syz.7.4227 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.383823][T19659] Tainted: [L]=SOFTLOCKUP [ 474.383827][T19659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.383834][T19659] Call Trace: [ 474.383839][T19659] [ 474.383843][T19659] dump_stack_lvl+0x100/0x190 [ 474.383865][T19659] should_fail_ex.cold+0x5/0xa [ 474.383879][T19659] strncpy_from_user+0x3b/0x2d0 [ 474.383897][T19659] ? get_pid_task+0x106/0x250 [ 474.383916][T19659] path_setxattrat+0x127/0x3b0 [ 474.383931][T19659] ? __pfx_path_setxattrat+0x10/0x10 [ 474.383944][T19659] ? find_held_lock+0x2b/0x80 [ 474.383959][T19659] ? ksys_write+0x190/0x250 [ 474.383987][T19659] ? fput+0x79/0x100 [ 474.384000][T19659] ? ksys_write+0x1ac/0x250 [ 474.384017][T19659] ? __pfx_ksys_write+0x10/0x10 [ 474.384036][T19659] __x64_sys_setxattr+0xc6/0x140 [ 474.384048][T19659] ? do_syscall_64+0x95/0xf80 [ 474.384063][T19659] ? lockdep_hardirqs_on+0x78/0x100 [ 474.384077][T19659] do_syscall_64+0x106/0xf80 [ 474.384091][T19659] ? clear_bhb_loop+0x40/0x90 [ 474.384105][T19659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.384116][T19659] RIP: 0033:0x7f4bd179c799 [ 474.384126][T19659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.384137][T19659] RSP: 002b:00007f4bd26ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 474.384148][T19659] RAX: ffffffffffffffda RBX: 00007f4bd1a16090 RCX: 00007f4bd179c799 [ 474.384155][T19659] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 474.384162][T19659] RBP: 00007f4bd26ea090 R08: 0000000000000001 R09: 0000000000000000 [ 474.384169][T19659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.384175][T19659] R13: 00007f4bd1a16128 R14: 00007f4bd1a16090 R15: 00007fff2dba9218 [ 474.384190][T19659] [ 474.452705][T19654] IPVS: using max 43 ests per chain, 103200 per kthread [ 474.513670][ T1192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.521628][ T1192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.526898][ T1192] bond0 (unregistering): Released all slaves [ 474.533160][T19633] wg1 speed is unknown, defaulting to 1000 [ 474.552212][T19666] pimreg: entered allmulticast mode [ 474.563144][T19666] bridge14: entered promiscuous mode [ 474.565122][T19666] bridge14: entered allmulticast mode [ 474.569196][T19666] team0: Port device bridge14 added [ 474.653958][T19626] wg1 speed is unknown, defaulting to 1000 [ 474.717127][T19678] bond21: entered promiscuous mode [ 474.725395][T19678] 8021q: adding VLAN 0 to HW filter on device bond21 [ 474.843267][T19626] wg1 speed is unknown, defaulting to 1000 [ 474.873383][T19633] chnl_net:caif_netlink_parms(): no params data found [ 474.969662][T19712] FAULT_INJECTION: forcing a failure. [ 474.969662][T19712] name failslab, interval 1, probability 0, space 0, times 0 [ 474.973722][T19712] CPU: 1 UID: 0 PID: 19712 Comm: syz.5.4238 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.973740][T19712] Tainted: [L]=SOFTLOCKUP [ 474.973744][T19712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.973751][T19712] Call Trace: [ 474.973755][T19712] [ 474.973760][T19712] dump_stack_lvl+0x100/0x190 [ 474.973782][T19712] should_fail_ex.cold+0x5/0xa [ 474.973797][T19712] should_failslab+0xc2/0x120 [ 474.973808][T19712] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 474.973824][T19712] ? do_getname+0x35/0x390 [ 474.973841][T19712] do_getname+0x35/0x390 [ 474.973857][T19712] path_setxattrat+0x360/0x3b0 [ 474.973871][T19712] ? __pfx_path_setxattrat+0x10/0x10 [ 474.973884][T19712] ? find_held_lock+0x2b/0x80 [ 474.973900][T19712] ? ksys_write+0x190/0x250 [ 474.973927][T19712] ? fput+0x79/0x100 [ 474.973940][T19712] ? ksys_write+0x1ac/0x250 [ 474.973957][T19712] ? __pfx_ksys_write+0x10/0x10 [ 474.973976][T19712] __x64_sys_setxattr+0xc6/0x140 [ 474.973989][T19712] ? do_syscall_64+0x95/0xf80 [ 474.974004][T19712] ? lockdep_hardirqs_on+0x78/0x100 [ 474.974018][T19712] do_syscall_64+0x106/0xf80 [ 474.974032][T19712] ? clear_bhb_loop+0x40/0x90 [ 474.974046][T19712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.974057][T19712] RIP: 0033:0x7f0cced9c799 [ 474.974067][T19712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.974078][T19712] RSP: 002b:00007f0cccff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 474.974088][T19712] RAX: ffffffffffffffda RBX: 00007f0ccf016090 RCX: 00007f0cced9c799 [ 474.974095][T19712] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 474.974102][T19712] RBP: 00007f0cccff6090 R08: 0000000000000001 R09: 0000000000000000 [ 474.974108][T19712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.974115][T19712] R13: 00007f0ccf016128 R14: 00007f0ccf016090 R15: 00007ffd08545898 [ 474.974129][T19712] [ 475.077763][T19633] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.082268][T19633] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.085968][T19633] bridge_slave_0: entered allmulticast mode [ 475.097752][T19714] __nla_validate_parse: 12 callbacks suppressed [ 475.097769][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4239'. [ 475.124571][T19633] bridge_slave_0: entered promiscuous mode [ 475.135240][T19633] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.137476][T19633] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.141206][T19633] bridge_slave_1: entered allmulticast mode [ 475.144882][T19633] bridge_slave_1: entered promiscuous mode [ 475.184145][T19720] IPVS: length: 120 != 24 [ 475.196944][T19633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.215442][T19633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.246269][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4244'. [ 475.250167][T19633] team0: Port device team_slave_0 added [ 475.251816][T19633] team0: Port device team_slave_1 added [ 475.286692][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4245'. [ 475.305087][ T1192] hsr_slave_0: left promiscuous mode [ 475.307507][ T1192] hsr_slave_1: left promiscuous mode [ 475.312745][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.315356][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.317870][ T40] audit: type=1400 audit(1773965450.344:1198): avc: denied { getopt } for pid=19729 comm="syz.7.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 475.318325][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.325746][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.346077][ T1192] veth1_macvtap: left promiscuous mode [ 475.348537][ T1192] veth0_macvtap: left promiscuous mode [ 475.351859][ T1192] veth1_vlan: left promiscuous mode [ 475.354328][ T1192] veth0_vlan: left promiscuous mode [ 475.361595][T19738] FAULT_INJECTION: forcing a failure. [ 475.361595][T19738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.365947][T19738] CPU: 1 UID: 0 PID: 19738 Comm: syz.7.4249 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.365974][T19738] Tainted: [L]=SOFTLOCKUP [ 475.365980][T19738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.365991][T19738] Call Trace: [ 475.365997][T19738] [ 475.366005][T19738] dump_stack_lvl+0x100/0x190 [ 475.366036][T19738] should_fail_ex.cold+0x5/0xa [ 475.366059][T19738] _copy_from_user+0x2e/0xd0 [ 475.366078][T19738] kstrtouint_from_user+0xd6/0x1d0 [ 475.366101][T19738] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 475.366122][T19738] ? __lock_acquire+0x4a5/0x2630 [ 475.366142][T19738] ? lock_acquire+0x1cf/0x380 [ 475.366165][T19738] proc_fail_nth_write+0x83/0x220 [ 475.366190][T19738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 475.366243][T19738] vfs_write+0x2aa/0x1070 [ 475.366271][T19738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 475.366297][T19738] ? __pfx_vfs_write+0x10/0x10 [ 475.366322][T19738] ? __fget_files+0x215/0x3d0 [ 475.366347][T19738] ? __fget_files+0x21f/0x3d0 [ 475.366372][T19738] ksys_write+0x12a/0x250 [ 475.366398][T19738] ? __pfx_ksys_write+0x10/0x10 [ 475.366431][T19738] do_syscall_64+0x106/0xf80 [ 475.366454][T19738] ? clear_bhb_loop+0x40/0x90 [ 475.366476][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.366493][T19738] RIP: 0033:0x7f4bd175cfce [ 475.366509][T19738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 475.366529][T19738] RSP: 002b:00007f4bd270afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.366546][T19738] RAX: ffffffffffffffda RBX: 00007f4bd270b6c0 RCX: 00007f4bd175cfce [ 475.366557][T19738] RDX: 0000000000000001 RSI: 00007f4bd270b0a0 RDI: 0000000000000004 [ 475.366567][T19738] RBP: 00007f4bd270b090 R08: 0000000000000000 R09: 0000000000000000 [ 475.366578][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.366588][T19738] R13: 00007f4bd1a16038 R14: 00007f4bd1a15fa0 R15: 00007fff2dba9218 [ 475.366613][T19738] [ 475.460776][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4251'. [ 475.558360][T19751] FAULT_INJECTION: forcing a failure. [ 475.558360][T19751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.564650][T19751] CPU: 0 UID: 0 PID: 19751 Comm: syz.7.4252 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.564679][T19751] Tainted: [L]=SOFTLOCKUP [ 475.564685][T19751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.564695][T19751] Call Trace: [ 475.564702][T19751] [ 475.564709][T19751] dump_stack_lvl+0x100/0x190 [ 475.564741][T19751] should_fail_ex.cold+0x5/0xa [ 475.564765][T19751] strncpy_from_user+0x3b/0x2d0 [ 475.564796][T19751] do_getname+0x78/0x390 [ 475.564823][T19751] path_setxattrat+0x360/0x3b0 [ 475.564845][T19751] ? __pfx_path_setxattrat+0x10/0x10 [ 475.564866][T19751] ? find_held_lock+0x2b/0x80 [ 475.564889][T19751] ? ksys_write+0x190/0x250 [ 475.564936][T19751] ? fput+0x79/0x100 [ 475.564957][T19751] ? ksys_write+0x1ac/0x250 [ 475.564983][T19751] ? __pfx_ksys_write+0x10/0x10 [ 475.565012][T19751] __x64_sys_setxattr+0xc6/0x140 [ 475.565031][T19751] ? do_syscall_64+0x95/0xf80 [ 475.565055][T19751] ? lockdep_hardirqs_on+0x78/0x100 [ 475.565076][T19751] do_syscall_64+0x106/0xf80 [ 475.565097][T19751] ? clear_bhb_loop+0x40/0x90 [ 475.565118][T19751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.565137][T19751] RIP: 0033:0x7f4bd179c799 [ 475.565152][T19751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.565168][T19751] RSP: 002b:00007f4bd26ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 475.565185][ T1192] team0 (unregistering): Port device team_slave_1 removed [ 475.565185][T19751] RAX: ffffffffffffffda RBX: 00007f4bd1a16090 RCX: 00007f4bd179c799 [ 475.565203][T19751] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 475.565214][T19751] RBP: 00007f4bd26ea090 R08: 0000000000000001 R09: 0000000000000000 [ 475.565224][T19751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.565234][T19751] R13: 00007f4bd1a16128 R14: 00007f4bd1a16090 R15: 00007fff2dba9218 [ 475.565259][T19751] [ 475.638944][ T1192] team0 (unregistering): Port device team_slave_0 removed [ 475.694744][T19633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.697414][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.708204][T19633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.765758][T19633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.768437][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.779431][T19633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.818030][T19633] hsr_slave_0: entered promiscuous mode [ 475.821186][T19633] hsr_slave_1: entered promiscuous mode [ 475.823849][T19633] debugfs: 'hsr0' already exists in 'hsr' [ 475.825996][T19633] Cannot create hsr debugfs directory [ 475.941554][ T5942] Bluetooth: hci1: command tx timeout [ 475.955785][ T29] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 476.133512][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 476.139021][ T29] usb 12-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 476.142716][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.142936][T19777] netlink: 'syz.5.4258': attribute type 3 has an invalid length. [ 476.146032][ T29] usb 12-1: Product: syz [ 476.148958][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4258'. [ 476.150986][ T29] usb 12-1: Manufacturer: syz [ 476.156069][ T29] usb 12-1: SerialNumber: syz [ 476.161372][ T29] usb 12-1: config 0 descriptor?? [ 476.164840][ T29] hub 12-1:0.0: bad descriptor, ignoring hub [ 476.168816][ T29] hub 12-1:0.0: probe with driver hub failed with error -5 [ 476.173429][ T29] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input36 [ 476.232773][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4260'. [ 476.262956][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4261'. [ 476.303772][T19792] netlink: 'syz.5.4262': attribute type 24 has an invalid length. [ 476.339384][ T5942] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 476.344068][ T5942] Bluetooth: hci4: Injecting HCI hardware error event [ 476.351015][ T5936] Bluetooth: hci4: hardware error 0x00 [ 476.406004][T19800] netlink: 'syz.5.4264': attribute type 25 has an invalid length. [ 476.536399][T19633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.540795][T19814] FAULT_INJECTION: forcing a failure. [ 476.540795][T19814] name failslab, interval 1, probability 0, space 0, times 0 [ 476.544828][T19633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.545071][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.6.4266 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.545089][T19814] Tainted: [L]=SOFTLOCKUP [ 476.545093][T19814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.545099][T19814] Call Trace: [ 476.545104][T19814] [ 476.545109][T19814] dump_stack_lvl+0x100/0x190 [ 476.545131][T19814] should_fail_ex.cold+0x5/0xa [ 476.545146][T19814] should_failslab+0xc2/0x120 [ 476.545157][T19814] __kmalloc_cache_noprof+0x7a/0x6f0 [ 476.545172][T19814] ? autofs_new_ino+0x45/0x240 [ 476.545186][T19814] ? autofs_lookup+0x475/0xc40 [ 476.545201][T19814] ? autofs_lookup+0x475/0xc40 [ 476.545219][T19814] autofs_new_ino+0x45/0x240 [ 476.545234][T19814] autofs_lookup+0x5c3/0xc40 [ 476.545253][T19814] __lookup_slow+0x251/0x460 [ 476.545269][T19814] ? __pfx___lookup_slow+0x10/0x10 [ 476.545296][T19814] lookup_slow+0x50/0x70 [ 476.545311][T19814] path_lookupat+0x5e8/0xc40 [ 476.545328][T19814] ? path_setxattrat+0x360/0x3b0 [ 476.545340][T19814] ? __x64_sys_setxattr+0xc6/0x140 [ 476.545354][T19814] filename_lookup+0x202/0x590 [ 476.545367][T19814] ? __pfx_filename_lookup+0x10/0x10 [ 476.545388][T19814] ? find_held_lock+0x2b/0x80 [ 476.545403][T19814] ? __might_fault+0xc5/0x140 [ 476.545417][T19814] ? __might_fault+0xc5/0x140 [ 476.545435][T19814] filename_setxattr+0xa1/0x1d0 [ 476.545449][T19814] ? __pfx_filename_setxattr+0x10/0x10 [ 476.545468][T19814] ? do_getname+0x191/0x390 [ 476.545483][T19814] path_setxattrat+0x1ff/0x3b0 [ 476.545497][T19814] ? __pfx_path_setxattrat+0x10/0x10 [ 476.545512][T19814] ? ksys_write+0x190/0x250 [ 476.545540][T19814] ? fput+0x79/0x100 [ 476.545553][T19814] ? ksys_write+0x1ac/0x250 [ 476.545570][T19814] ? __pfx_ksys_write+0x10/0x10 [ 476.545589][T19814] __x64_sys_setxattr+0xc6/0x140 [ 476.545602][T19814] ? do_syscall_64+0x95/0xf80 [ 476.545616][T19814] ? lockdep_hardirqs_on+0x78/0x100 [ 476.545631][T19814] do_syscall_64+0x106/0xf80 [ 476.545648][T19814] ? clear_bhb_loop+0x40/0x90 [ 476.545662][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.545674][T19814] RIP: 0033:0x7f721ff9c799 [ 476.545684][T19814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.545695][T19814] RSP: 002b:00007f7220dda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 476.545707][T19814] RAX: ffffffffffffffda RBX: 00007f7220216090 RCX: 00007f721ff9c799 [ 476.545714][T19814] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 476.545721][T19814] RBP: 00007f7220dda090 R08: 0000000000000001 R09: 0000000000000000 [ 476.545727][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.545734][T19814] R13: 00007f7220216128 R14: 00007f7220216090 R15: 00007ffd9865d578 [ 476.545748][T19814] [ 476.643430][T19633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.649391][T19633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.690545][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4268'. [ 476.706687][T19633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.727018][T19633] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.728329][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4269'. [ 476.734970][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.738131][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.751062][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.753402][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.774011][T19833] netlink: 'syz.6.4270': attribute type 24 has an invalid length. [ 476.785944][T19633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.919850][T19841] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 476.953279][T19841] 8021q: adding VLAN 0 to HW filter on device bond11 [ 476.971420][T19841] bond11: (slave geneve2): making interface the new active one [ 476.975491][T19841] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 476.979264][T15218] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.984822][T15218] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.991432][T15218] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.998297][T15218] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 477.014511][T19866] bond22: Removing last ns target with arp_interval on [ 477.018950][T19633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.058537][T19633] veth0_vlan: entered promiscuous mode [ 477.066710][T19633] veth1_vlan: entered promiscuous mode [ 477.084138][T19633] veth0_macvtap: entered promiscuous mode [ 477.095826][T19633] veth1_macvtap: entered promiscuous mode [ 477.106140][T19633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.122074][T19633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.133400][T15229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.138504][T15229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.152242][T15218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.161235][T19875] netlink: 'syz.5.4276': attribute type 25 has an invalid length. [ 477.171299][T17531] usb 12-1: USB disconnect, device number 17 [ 477.184301][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4277'. [ 477.205804][T15218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.214665][T19881] netlink: 'syz.5.4278': attribute type 24 has an invalid length. [ 477.275710][T17466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.278887][T17466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.312195][T15229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.315432][T15229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.320724][T19890] FAULT_INJECTION: forcing a failure. [ 477.320724][T19890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.326160][T19890] CPU: 0 UID: 0 PID: 19890 Comm: syz.5.4281 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.326203][T19890] Tainted: [L]=SOFTLOCKUP [ 477.326210][T19890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.326222][T19890] Call Trace: [ 477.326229][T19890] [ 477.326236][T19890] dump_stack_lvl+0x100/0x190 [ 477.326279][T19890] should_fail_ex.cold+0x5/0xa [ 477.326302][T19890] _copy_from_user+0x2e/0xd0 [ 477.326336][T19890] move_addr_to_kernel+0x65/0x170 [ 477.326373][T19890] __sys_connect+0xb5/0x170 [ 477.326392][T19890] ? __pfx___sys_connect+0x10/0x10 [ 477.326411][T19890] ? __fget_files+0x21f/0x3d0 [ 477.326438][T19890] ? __pfx_ksys_write+0x10/0x10 [ 477.326471][T19890] __x64_sys_connect+0x72/0xb0 [ 477.326489][T19890] ? lockdep_hardirqs_on+0x78/0x100 [ 477.326514][T19890] do_syscall_64+0x106/0xf80 [ 477.326537][T19890] ? clear_bhb_loop+0x40/0x90 [ 477.326559][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.326577][T19890] RIP: 0033:0x7f0cced9c799 [ 477.326593][T19890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.326610][T19890] RSP: 002b:00007f0ccfb81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 477.326627][T19890] RAX: ffffffffffffffda RBX: 00007f0ccf015fa0 RCX: 00007f0cced9c799 [ 477.326639][T19890] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 477.326649][T19890] RBP: 00007f0ccfb81090 R08: 0000000000000000 R09: 0000000000000000 [ 477.326660][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.326670][T19890] R13: 00007f0ccf016038 R14: 00007f0ccf015fa0 R15: 00007ffd08545898 [ 477.326721][T19890] [ 477.614389][ T40] audit: type=1400 audit(1773965452.645:1199): avc: denied { watch_sb } for pid=19910 comm="syz.7.4286" path="/597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 477.639879][T19919] bond8: entered promiscuous mode [ 477.641742][T19919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.647771][T19910] [U]  [ 477.689793][ T5997] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 477.775225][T19940] loop6: detected capacity change from 0 to 524287999 [ 477.780984][T18987] buffer_io_error: 138 callbacks suppressed [ 477.780998][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.787024][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.792823][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.801625][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.805764][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.810357][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.811353][T19946] FAULT_INJECTION: forcing a failure. [ 477.811353][T19946] name failslab, interval 1, probability 0, space 0, times 0 [ 477.813334][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.819833][T19946] CPU: 3 UID: 0 PID: 19946 Comm: syz.6.4290 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.819851][T19946] Tainted: [L]=SOFTLOCKUP [ 477.819855][T19946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.819862][T19946] Call Trace: [ 477.819866][T19946] [ 477.819870][T19946] dump_stack_lvl+0x100/0x190 [ 477.819892][T19946] should_fail_ex.cold+0x5/0xa [ 477.819908][T19946] should_failslab+0xc2/0x120 [ 477.819919][T19946] __kmalloc_cache_noprof+0x7a/0x6f0 [ 477.819933][T19946] ? autofs_wait+0xc30/0x1b50 [ 477.819950][T19946] ? autofs_find_wait.isra.0+0x105/0x160 [ 477.819969][T19946] autofs_wait+0xc30/0x1b50 [ 477.819988][T19946] ? __pfx_autofs_wait+0x10/0x10 [ 477.820006][T19946] ? find_held_lock+0x2b/0x80 [ 477.820021][T19946] ? path_has_submounts+0xcf/0x120 [ 477.820039][T19946] ? do_raw_spin_unlock+0x145/0x1e0 [ 477.820053][T19946] ? find_held_lock+0x2b/0x80 [ 477.820068][T19946] autofs_mount_wait+0x132/0x3b0 [ 477.820086][T19946] autofs_d_automount+0x490/0x950 [ 477.820104][T19946] __traverse_mounts+0x1b9/0x8a0 [ 477.820123][T19946] step_into_slowpath+0xb7e/0xf90 [ 477.820143][T19946] ? __pfx_step_into_slowpath+0x10/0x10 [ 477.820159][T19946] ? lookup_slow+0x5b/0x70 [ 477.820173][T19946] ? lookup_slow+0x5b/0x70 [ 477.820192][T19946] path_lookupat+0x58b/0xc40 [ 477.820209][T19946] ? path_setxattrat+0x360/0x3b0 [ 477.820221][T19946] ? __x64_sys_setxattr+0xc6/0x140 [ 477.820234][T19946] filename_lookup+0x202/0x590 [ 477.820264][T19946] ? __pfx_filename_lookup+0x10/0x10 [ 477.820312][T19946] ? find_held_lock+0x2b/0x80 [ 477.820334][T19946] ? __might_fault+0xc5/0x140 [ 477.820353][T19946] ? __might_fault+0xc5/0x140 [ 477.820371][T19946] filename_setxattr+0xa1/0x1d0 [ 477.820385][T19946] ? __pfx_filename_setxattr+0x10/0x10 [ 477.820399][T19946] ? do_getname+0x191/0x390 [ 477.820415][T19946] path_setxattrat+0x1ff/0x3b0 [ 477.820428][T19946] ? __pfx_path_setxattrat+0x10/0x10 [ 477.820443][T19946] ? ksys_write+0x190/0x250 [ 477.820486][T19946] ? fput+0x79/0x100 [ 477.820504][T19946] ? ksys_write+0x1ac/0x250 [ 477.820527][T19946] ? __pfx_ksys_write+0x10/0x10 [ 477.820554][T19946] __x64_sys_setxattr+0xc6/0x140 [ 477.820572][T19946] ? do_syscall_64+0x95/0xf80 [ 477.820593][T19946] ? lockdep_hardirqs_on+0x78/0x100 [ 477.820619][T19946] do_syscall_64+0x106/0xf80 [ 477.820638][T19946] ? clear_bhb_loop+0x40/0x90 [ 477.820659][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.820676][T19946] RIP: 0033:0x7f721ff9c799 [ 477.820690][T19946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.820704][T19946] RSP: 002b:00007f7220dda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 477.820715][T19946] RAX: ffffffffffffffda RBX: 00007f7220216090 RCX: 00007f721ff9c799 [ 477.820722][T19946] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 477.820729][T19946] RBP: 00007f7220dda090 R08: 0000000000000001 R09: 0000000000000000 [ 477.820735][T19946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.820742][T19946] R13: 00007f7220216128 R14: 00007f7220216090 R15: 00007ffd9865d578 [ 477.820757][T19946] [ 477.827525][T19945] netlink: 'syz.1.4293': attribute type 25 has an invalid length. [ 477.831858][T19948] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 477.832444][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.832456][T18987] ldm_validate_partition_table(): Disk read failed. [ 477.832470][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.832485][T18987] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.832507][T18987] Dev loop6: unable to read RDB block 0 [ 477.832590][T18987] loop6: unable to read partition table [ 477.870529][ T5997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 477.880691][ T5997] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 477.882211][T19948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.884293][ T5997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.904016][T19952] netlink: 'syz.1.4294': attribute type 25 has an invalid length. [ 477.905476][T19940] ldm_validate_partition_table(): Disk read failed. [ 477.980376][T19955] netlink: 'syz.7.4291': attribute type 4 has an invalid length. [ 477.982851][T19940] Dev loop6: unable to read RDB block 0 [ 477.988332][ T5997] usb 10-1: Product: syz [ 477.997245][ T5997] usb 10-1: Manufacturer: syz [ 477.999392][ T5997] usb 10-1: SerialNumber: syz [ 478.010090][ T5997] usb 10-1: config 0 descriptor?? [ 478.013369][ T5997] hub 10-1:0.0: bad descriptor, ignoring hub [ 478.015880][ T5997] hub 10-1:0.0: probe with driver hub failed with error -5 [ 478.020747][ T5997] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input37 [ 478.030210][ T5942] Bluetooth: hci1: command tx timeout [ 478.048264][T19940] loop6: unable to read partition table [ 478.062014][T19940] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 478.069599][T18987] ldm_validate_partition_table(): Disk read failed. [ 478.071944][T18987] Dev loop6: unable to read RDB block 0 [ 478.074172][T18987] loop6: unable to read partition table [ 478.090509][T19948] loop6: unable to read partition table [ 478.103291][T19948] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 478.292715][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.297958][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.302485][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.310377][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.313087][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.343354][T19982] efs: cannot read volume header [ 478.357764][T19978] lo speed is unknown, defaulting to 1000 [ 478.374379][T19986] Bluetooth: hci0: unsupported parameter 255 [ 478.376446][T19986] Bluetooth: hci0: unsupported parameter 255 [ 478.414383][ T40] audit: type=1400 audit(1773965453.445:1200): avc: denied { create } for pid=19987 comm="syz.1.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 478.437324][ T5936] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 478.617434][T19978] wg1 speed is unknown, defaulting to 1000 [ 478.824573][T20009] FAULT_INJECTION: forcing a failure. [ 478.824573][T20009] name failslab, interval 1, probability 0, space 0, times 0 [ 478.828789][T20009] CPU: 2 UID: 0 PID: 20009 Comm: syz.1.4310 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.828819][T20009] Tainted: [L]=SOFTLOCKUP [ 478.828824][T20009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.828831][T20009] Call Trace: [ 478.828844][T20009] [ 478.828849][T20009] dump_stack_lvl+0x100/0x190 [ 478.828876][T20009] should_fail_ex.cold+0x5/0xa [ 478.828891][T20009] should_failslab+0xc2/0x120 [ 478.828903][T20009] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 478.828919][T20009] ? dst_alloc+0x99/0x1a0 [ 478.828937][T20009] dst_alloc+0x99/0x1a0 [ 478.828950][T20009] rt_dst_alloc+0x35/0x3a0 [ 478.828969][T20009] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 478.828989][T20009] ip_route_output_key_hash+0x118/0x2b0 [ 478.829001][T20009] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 478.829016][T20009] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 478.829028][T20009] ? lockdep_hardirqs_on+0x78/0x100 [ 478.829046][T20009] ip_route_output_flow+0x27/0x150 [ 478.829059][T20009] tcp_v4_connect+0x8e8/0x1b40 [ 478.829082][T20009] ? __pfx_tcp_v4_connect+0x10/0x10 [ 478.829100][T20009] ? __lock_acquire+0x4a5/0x2630 [ 478.829111][T20009] ? __lock_acquire+0x4a5/0x2630 [ 478.829123][T20009] __inet_stream_connect+0x208/0xfa0 [ 478.829145][T20009] ? __pfx___inet_stream_connect+0x10/0x10 [ 478.829164][T20009] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 478.829180][T20009] ? __local_bh_enable_ip+0x9e/0x120 [ 478.829196][T20009] inet_stream_connect+0x57/0xa0 [ 478.829216][T20009] kernel_connect+0x107/0x160 [ 478.829232][T20009] ? __pfx_kernel_connect+0x10/0x10 [ 478.829254][T20009] ? __local_bh_enable_ip+0x9e/0x120 [ 478.829270][T20009] smc_connect+0x394/0x750 [ 478.829284][T20009] ? __pfx_smc_connect+0x10/0x10 [ 478.829295][T20009] __sys_connect_file+0x141/0x1a0 [ 478.829309][T20009] __sys_connect+0x141/0x170 [ 478.829321][T20009] ? __pfx___sys_connect+0x10/0x10 [ 478.829332][T20009] ? __fget_files+0x21f/0x3d0 [ 478.829349][T20009] ? __pfx_ksys_write+0x10/0x10 [ 478.829370][T20009] __x64_sys_connect+0x72/0xb0 [ 478.829381][T20009] ? lockdep_hardirqs_on+0x78/0x100 [ 478.829395][T20009] do_syscall_64+0x106/0xf80 [ 478.829409][T20009] ? clear_bhb_loop+0x40/0x90 [ 478.829426][T20009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.829438][T20009] RIP: 0033:0x7f28a3f9c799 [ 478.829447][T20009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.829458][T20009] RSP: 002b:00007f28a4f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 478.829468][T20009] RAX: ffffffffffffffda RBX: 00007f28a4215fa0 RCX: 00007f28a3f9c799 [ 478.829475][T20009] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 478.829482][T20009] RBP: 00007f28a4f06090 R08: 0000000000000000 R09: 0000000000000000 [ 478.829488][T20009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.829494][T20009] R13: 00007f28a4216038 R14: 00007f28a4215fa0 R15: 00007ffeb245db18 [ 478.829509][T20009] [ 478.854033][T19978] chnl_net:caif_netlink_parms(): no params data found [ 478.991182][T19978] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.994382][T19978] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.996848][T19978] bridge_slave_0: entered allmulticast mode [ 479.000165][T19978] bridge_slave_0: entered promiscuous mode [ 479.020285][T19978] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.022792][T19978] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.025355][T19978] bridge_slave_1: entered allmulticast mode [ 479.028783][T19978] bridge_slave_1: entered promiscuous mode [ 479.127424][T17468] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.144892][T19978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.145011][T20029] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 479.154775][T19978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.155313][ T40] audit: type=1400 audit(1773965454.185:1201): avc: denied { relabelto } for pid=20028 comm="syz.1.4316" name="cpu.stat" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 479.170281][ T40] audit: type=1400 audit(1773965454.185:1202): avc: denied { associate } for pid=20028 comm="syz.1.4316" name="cpu.stat" dev="tmpfs" ino=103 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 479.179804][ T40] audit: type=1400 audit(1773965454.205:1203): avc: denied { append } for pid=20028 comm="syz.1.4316" path="/17/cpu.stat" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 479.191043][ T40] audit: type=1400 audit(1773965454.205:1204): avc: denied { execute } for pid=20028 comm="syz.1.4316" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 479.194820][T20035] program syz.6.4318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.196008][T20031] bond12: (slave geneve3): making interface the new active one [ 479.196720][T20031] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 479.204320][T19978] team0: Port device team_slave_0 added [ 479.220437][ T40] audit: type=1400 audit(1773965454.255:1205): avc: denied { unlink } for pid=19633 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 479.233944][T20031] bond12 (unregistering): (slave geneve3): Releasing active interface [ 479.240094][T20031] bond12 (unregistering): Released all slaves [ 479.269518][T19978] team0: Port device team_slave_1 added [ 479.291436][T17468] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.353757][T19978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.356795][T19978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.367615][T19978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.385340][T17468] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.393382][T19978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.399147][T19978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.414720][T19978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.446810][T19978] hsr_slave_0: entered promiscuous mode [ 479.449468][T19978] hsr_slave_1: entered promiscuous mode [ 479.451761][T19978] debugfs: 'hsr0' already exists in 'hsr' [ 479.454118][T19978] Cannot create hsr debugfs directory [ 479.488405][T17468] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.617907][T20060] ip6erspan0: entered promiscuous mode [ 479.790052][T17468] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface [ 479.792783][T17468] bond8 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 8e:8d:07:83:31:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 479.797617][T20072] IPv6: addrconf: prefix option has invalid lifetime [ 479.868331][T17468] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 479.871620][T17468] bridge1 (unregistering): left promiscuous mode [ 479.919602][T17468] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 479.923645][T17468] bridge2 (unregistering): left promiscuous mode [ 479.973264][T17468] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 479.976700][T17468] bridge3 (unregistering): left promiscuous mode [ 480.033232][T17468] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 480.036314][T17468] bridge4 (unregistering): left promiscuous mode [ 480.092537][T17468] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 480.096283][T17468] bridge5 (unregistering): left promiscuous mode [ 480.099075][ T5936] Bluetooth: hci1: command tx timeout [ 480.161972][T17468] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 480.165039][T17468] bridge6 (unregistering): left promiscuous mode [ 480.211537][T17468] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 480.215161][T17468] bridge7 (unregistering): left promiscuous mode [ 480.262086][T17468] bond11 (unregistering): (slave bridge8): Releasing backup interface [ 480.265234][T17468] bridge8 (unregistering): left promiscuous mode [ 480.303761][T17468] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 480.308161][T17468] bridge9 (unregistering): left promiscuous mode [ 480.338844][ T5936] Bluetooth: hci2: command tx timeout [ 480.363420][T17468] bond14 (unregistering): (slave bridge10): Releasing backup interface [ 480.367810][T17468] bridge10 (unregistering): left promiscuous mode [ 480.661729][T17468] team0: Port device bridge14 removed [ 480.676179][T20085] __nla_validate_parse: 10 callbacks suppressed [ 480.676192][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 480.682251][ T40] audit: type=1400 audit(1773965455.715:1206): avc: denied { listen } for pid=20082 comm="syz.1.4332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 480.690353][ T40] audit: type=1400 audit(1773965455.715:1207): avc: denied { shutdown } for pid=20082 comm="syz.1.4332" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.721925][T17468] bond8 (unregistering): (slave bond0): Releasing backup interface [ 480.725278][T17468] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 480.730937][T17468] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 480.740937][T17468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.748053][T17468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.753989][T17468] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 480.761179][T17468] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 480.767462][T17468] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 480.774495][T17468] bond0 (unregistering): Released all slaves [ 480.782234][T17468] bond1 (unregistering): Released all slaves [ 480.793467][T17468] bond2 (unregistering): Released all slaves [ 480.805333][T17468] bond3 (unregistering): Released all slaves [ 480.817317][T17468] bond4 (unregistering): Released all slaves [ 480.829879][T17468] bond5 (unregistering): Released all slaves [ 480.845891][T17468] bond6 (unregistering): Released all slaves [ 480.857388][T17468] bond7 (unregistering): Released all slaves [ 480.869666][T17468] bond8 (unregistering): Released all slaves [ 480.881830][T17468] bond9 (unregistering): Released all slaves [ 480.893660][T17468] bond10 (unregistering): Released all slaves [ 480.914107][T17468] bond11 (unregistering): Released all slaves [ 480.927469][T17468] bond12 (unregistering): Released all slaves [ 480.942344][T17468] bond13 (unregistering): Released all slaves [ 480.953215][T17468] bond14 (unregistering): Released all slaves [ 480.966417][T17468] bond15 (unregistering): Released all slaves [ 480.979948][T17468] bond16 (unregistering): Released all slaves [ 480.990665][T17468] bond17 (unregistering): Released all slaves [ 481.009880][T17468] bond18 (unregistering): Released all slaves [ 481.020421][T17468] bond19 (unregistering): Released all slaves [ 481.027239][T17468] bond20 (unregistering): Released all slaves [ 481.035195][T17468] bond21 (unregistering): Released all slaves [ 481.042945][T17468] bond22 (unregistering): Released all slaves [ 481.086382][ T40] audit: type=1400 audit(1773965456.115:1208): avc: denied { unmount } for pid=17608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 481.121938][T20089] FAULT_INJECTION: forcing a failure. [ 481.121938][T20089] name failslab, interval 1, probability 0, space 0, times 0 [ 481.132000][T20089] CPU: 1 UID: 0 PID: 20089 Comm: syz.6.4334 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.132037][T20089] Tainted: [L]=SOFTLOCKUP [ 481.132043][T20089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.132054][T20089] Call Trace: [ 481.132061][T20089] [ 481.132069][T20089] dump_stack_lvl+0x100/0x190 [ 481.132102][T20089] should_fail_ex.cold+0x5/0xa [ 481.132126][T20089] should_failslab+0xc2/0x120 [ 481.132144][T20089] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 481.132168][T20089] ? __inet_hash_connect+0x686/0x1e40 [ 481.132187][T20089] ? __inet_hash_connect+0x5ae/0x1e40 [ 481.132212][T20089] __inet_hash_connect+0x686/0x1e40 [ 481.132241][T20089] ? __pfx___inet_check_established+0x10/0x10 [ 481.132263][T20089] ? __pfx___inet_hash_connect+0x10/0x10 [ 481.132288][T20089] ? inet_hash_connect+0x125/0x260 [ 481.132310][T20089] tcp_v4_connect+0xeb0/0x1b40 [ 481.132346][T20089] ? __pfx_tcp_v4_connect+0x10/0x10 [ 481.132373][T20089] ? __lock_acquire+0x4a5/0x2630 [ 481.132390][T20089] ? __lock_acquire+0x4a5/0x2630 [ 481.132410][T20089] __inet_stream_connect+0x208/0xfa0 [ 481.132444][T20089] ? __pfx___inet_stream_connect+0x10/0x10 [ 481.132471][T20089] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.132497][T20089] ? __local_bh_enable_ip+0x9e/0x120 [ 481.132524][T20089] inet_stream_connect+0x57/0xa0 [ 481.132552][T20089] kernel_connect+0x107/0x160 [ 481.132578][T20089] ? __pfx_kernel_connect+0x10/0x10 [ 481.132614][T20089] ? __local_bh_enable_ip+0x9e/0x120 [ 481.132639][T20089] smc_connect+0x394/0x750 [ 481.132664][T20089] ? __pfx_smc_connect+0x10/0x10 [ 481.132683][T20089] __sys_connect_file+0x141/0x1a0 [ 481.132706][T20089] __sys_connect+0x141/0x170 [ 481.132726][T20089] ? __pfx___sys_connect+0x10/0x10 [ 481.132744][T20089] ? __fget_files+0x21f/0x3d0 [ 481.132772][T20089] ? __pfx_ksys_write+0x10/0x10 [ 481.132804][T20089] __x64_sys_connect+0x72/0xb0 [ 481.132822][T20089] ? lockdep_hardirqs_on+0x78/0x100 [ 481.132844][T20089] do_syscall_64+0x106/0xf80 [ 481.132865][T20089] ? clear_bhb_loop+0x40/0x90 [ 481.132887][T20089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.132906][T20089] RIP: 0033:0x7f721ff9c799 [ 481.132921][T20089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.132938][T20089] RSP: 002b:00007f7220dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 481.132955][T20089] RAX: ffffffffffffffda RBX: 00007f7220215fa0 RCX: 00007f721ff9c799 [ 481.132967][T20089] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 481.132977][T20089] RBP: 00007f7220dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 481.132988][T20089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.132998][T20089] R13: 00007f7220216038 R14: 00007f7220215fa0 R15: 00007ffd9865d578 [ 481.133028][T20089] [ 481.135927][ T24] infiniband syz1: ib_query_port failed (-19) [ 481.202294][T20092] validate_nla: 5 callbacks suppressed [ 481.202305][T20092] netlink: 'syz.5.4335': attribute type 25 has an invalid length. [ 481.297479][T17468] tipc: Left network mode [ 481.465429][T20112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 481.467627][T20112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 481.471098][T20112] vhci_hcd vhci_hcd.0: Device attached [ 481.509163][T20117] vhci_hcd: connection closed [ 481.510884][T15232] vhci_hcd vhci_hcd.1: stop threads [ 481.514823][T15232] vhci_hcd vhci_hcd.1: release socket [ 481.516521][T15232] vhci_hcd vhci_hcd.1: disconnect device [ 481.589968][T20128] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 481.618046][ T29] usb 10-1: USB disconnect, device number 24 [ 481.644199][T20133] netlink: 'syz.1.4345': attribute type 25 has an invalid length. [ 481.663539][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4344'. [ 481.666471][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4344'. [ 481.672705][T20131] netlink: 'syz.5.4344': attribute type 4 has an invalid length. [ 481.675726][T20131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4344'. [ 481.682688][T19978] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 481.701612][T19978] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 481.705894][T19978] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 481.708122][ T5936] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 481.708171][ T5936] Bluetooth: hci1: Dropping invalid advertising data [ 481.715137][ T5936] Bluetooth: hci1: Malformed LE Event: 0x02 [ 481.728198][T19978] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 481.781971][T19978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.797416][T19978] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.811845][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.814290][T15232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.839478][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.842670][T15218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.964111][T17468] hsr_slave_0: left promiscuous mode [ 481.967026][T17468] hsr_slave_1: left promiscuous mode [ 481.970570][T17468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.973747][T17468] batadv0: mtu less than device minimum [ 481.977149][T17468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.983233][T17468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.002749][T17468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.006572][T17468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.025199][T17468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.029067][T17468] batman_adv: batadv0: Interface deactivated: dummy0 [ 482.031960][T17468] batman_adv: batadv0: Removing interface: dummy0 [ 482.038963][T17468] veth1_macvtap: left promiscuous mode [ 482.041369][T17468] veth0_macvtap: left promiscuous mode [ 482.043782][T17468] veth1_vlan: left promiscuous mode [ 482.100372][T17468] pimreg (unregistering): left allmulticast mode [ 482.171787][T20168] netlink: 'syz.6.4353': attribute type 25 has an invalid length. [ 482.178656][ T5936] Bluetooth: hci1: command tx timeout [ 482.231436][T17468] team_slave_1 (unregistering): left allmulticast mode [ 482.234177][T17468] team0 (unregistering): Port device team_slave_1 removed [ 482.241367][T17468] team_slave_0 (unregistering): left allmulticast mode [ 482.244027][T17468] team0 (unregistering): Port device team_slave_0 removed [ 482.319152][T17464] smc: removing ib device syz0 [ 482.334652][ T830] lo speed is unknown, defaulting to 1000 [ 482.337091][ T830] syz0: Port: 1 Link DOWN [ 482.423657][ T5936] Bluetooth: hci2: command tx timeout [ 482.464491][T19978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.674189][T19978] veth0_vlan: entered promiscuous mode [ 482.682794][T19978] veth1_vlan: entered promiscuous mode [ 482.707167][T19978] veth0_macvtap: entered promiscuous mode [ 482.715129][T19978] veth1_macvtap: entered promiscuous mode [ 482.729895][T19978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.740925][T19978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.750801][ T1192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.753713][ T1192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.757546][ T1192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.761497][ T1192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.828866][ T6016] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 482.846769][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.853481][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.873502][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.877893][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.940651][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4298'. [ 482.958839][ T6016] usb 6-1: device descriptor read/64, error -71 [ 483.072644][T20209] netlink: 'syz.7.4362': attribute type 24 has an invalid length. [ 483.084311][T20211] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4363'. [ 483.124180][T20213] netlink: 'syz.7.4364': attribute type 25 has an invalid length. [ 483.177518][T20221] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4368'. [ 483.209074][ T6016] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 483.225121][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 483.267531][T20231] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4370'. [ 483.351398][ T6016] usb 6-1: device descriptor read/64, error -71 [ 483.375198][T20236] netlink: 'syz.5.4373': attribute type 24 has an invalid length. [ 483.426515][T17468] IPVS: stop unused estimator thread 0... [ 483.468454][T20250] Bluetooth: MGMT ver 1.23 [ 483.470588][ T6016] usb usb6-port1: attempt power cycle [ 483.520965][T20256] netlink: 'syz.5.4377': attribute type 25 has an invalid length. [ 483.594855][T20261] netlink: 'syz.5.4378': attribute type 1 has an invalid length. [ 483.598373][T20261] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4378'. [ 483.838836][ T6016] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 483.869919][ T6016] usb 6-1: device descriptor read/8, error -71 [ 483.966385][T20288] netlink: 'syz.7.4381': attribute type 20 has an invalid length. [ 483.977654][ T1192] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.981780][ T1192] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.986183][ T1192] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.991993][ T1192] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.995868][T20288] vivid-000: ================= START STATUS ================= [ 483.999997][T20288] vivid-000: ================== END STATUS ================== [ 484.076358][T20290] wg1 speed is unknown, defaulting to 1000 [ 484.128618][ T6016] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 484.149243][ T6016] usb 6-1: device descriptor read/8, error -71 [ 484.272764][ T6016] usb usb6-port1: unable to enumerate USB device [ 484.504165][ T5936] Bluetooth: hci2: command tx timeout [ 484.664407][T20276] overlayfs: statfs failed on './file0' [ 485.069418][ T6016] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 485.408799][ T5990] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 485.569048][ T5990] usb 12-1: Using ep0 maxpacket: 16 [ 485.575283][ T5990] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.582178][ T5990] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.585439][ T5990] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.589662][ T5990] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 485.592695][ T5990] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.597108][ T5990] usb 12-1: config 0 descriptor?? [ 486.001571][T20354] ubi: mtd0 is already attached to ubi0 [ 486.010282][ T5990] hid_parser_main: 7 callbacks suppressed [ 486.010295][ T5990] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 486.015849][ T5990] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 486.018216][ T5990] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 486.021138][ T5990] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 486.023476][ T5990] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 486.029965][ T5990] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 486.061873][ T5990] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 486.064971][ T5990] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 486.205187][ T40] audit: type=1400 audit(2000000004.860:1209): avc: denied { append } for pid=20353 comm="syz.7.4398" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 486.205252][T20354] random: crng reseeded on system resumption [ 486.440945][T17531] usb 12-1: USB disconnect, device number 18 [ 486.440981][ T34] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 486.446817][ T34] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 486.451148][ T34] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 486.451155][T17531] ------------[ cut here ]------------ [ 486.457015][T17531] workqueue: work disable count underflowed [ 486.459629][T17531] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#0: kworker/0:6/17531 [ 486.463794][T17531] Modules linked in: [ 486.466169][T17531] CPU: 0 UID: 0 PID: 17531 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.470688][T17531] Tainted: [L]=SOFTLOCKUP [ 486.472484][T17531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.476568][T17531] Workqueue: usb_hub_wq hub_event [ 486.478703][T17531] RIP: 0010:enable_work+0x2d1/0x320 [ 486.480939][T17531] Code: ff e8 23 ad 38 00 e8 1e f7 bf 09 e9 61 ff ff ff e8 14 ad 38 00 90 0f 0b 90 e9 17 fe ff ff e8 06 ad 38 00 48 8d 3d 0f 76 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 1a 3a a5 00 e9 [ 486.489048][T17531] RSP: 0018:ffffc90005bdf3b0 EFLAGS: 00010093 [ 486.491579][T17531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d02130 [ 486.494836][T17531] RDX: ffff888028e68000 RSI: ffffffff81d022fa RDI: ffffffff90dc9910 [ 486.497764][T17531] RBP: ffff888062c9e738 R08: 0000000000000007 R09: 0000000000000000 [ 486.500933][T17531] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.504192][T17531] R13: 1ffff92000b7be77 R14: ffff888062c9e698 R15: 000000007fffffff [ 486.507465][T17531] FS: 0000000000000000(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000 [ 486.510890][T17531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.513652][T17531] CR2: 00007ffc3b1825b0 CR3: 000000002e4e5000 CR4: 0000000000352ef0 [ 486.517122][T17531] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 486.520458][T17531] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 486.523921][T17531] Call Trace: [ 486.525416][T17531] [ 486.526694][T17531] ? __pfx_enable_work+0x10/0x10 [ 486.528832][T17531] ? __pfx___might_resched+0x10/0x10 [ 486.531064][T17531] cancel_delayed_work_sync+0x96/0xf0 [ 486.533282][T17531] thermal_zone_device_unregister+0x28e/0x4e0 [ 486.535848][T17531] ? __pfx_shield_remove+0x10/0x10 [ 486.538108][T17531] power_supply_unregister+0x10a/0x150 [ 486.540242][T17531] shield_remove+0x75/0x130 [ 486.542214][T17531] ? __pfx_shield_remove+0x10/0x10 [ 486.544419][T17531] hid_device_remove+0xd1/0x270 [ 486.546591][T17531] ? __pfx_hid_device_remove+0x10/0x10 [ 486.548918][T17531] device_remove+0xcb/0x180 [ 486.550775][T17531] device_release_driver_internal+0x42e/0x600 [ 486.553002][T17531] bus_remove_device+0x22f/0x440 [ 486.554851][T17531] device_del+0x376/0x9b0 [ 486.556435][T17531] ? __pfx_device_del+0x10/0x10 [ 486.558026][T17531] ? do_raw_spin_lock+0x128/0x260 [ 486.559649][T17531] ? find_held_lock+0x2b/0x80 [ 486.561196][T17531] hid_destroy_device+0x19c/0x240 [ 486.562928][T17531] usbhid_disconnect+0xa0/0xe0 [ 486.564735][T17531] usb_unbind_interface+0x1dd/0x9e0 [ 486.566431][T17531] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 486.568138][T17531] ? __pfx_usb_unbind_interface+0x10/0x10 [ 486.569918][T17531] device_remove+0x12a/0x180 [ 486.571380][T17531] device_release_driver_internal+0x42e/0x600 [ 486.573282][T17531] bus_remove_device+0x22f/0x440 [ 486.574864][T17531] device_del+0x376/0x9b0 [ 486.576250][T17531] ? __pfx_device_del+0x10/0x10 [ 486.577802][T17531] ? kobject_put+0xb9/0x640 [ 486.578840][ T5936] Bluetooth: hci2: command tx timeout [ 486.579264][T17531] usb_disable_device+0x367/0x810 [ 486.582907][T17531] usb_disconnect+0x2e2/0x9a0 [ 486.584441][T17531] hub_event+0x1d0c/0x4af0 [ 486.585882][T17531] ? __lock_acquire+0x4a5/0x2630 [ 486.587512][T17531] ? do_raw_spin_unlock+0x145/0x1e0 [ 486.589138][T17531] ? __pfx_hub_event+0x10/0x10 [ 486.590548][T17531] ? debug_object_deactivate+0x2e4/0x3b0 [ 486.592172][T17531] ? ttwu_queue_wakelist+0x70/0x430 [ 486.593854][T17531] ? rcu_is_watching+0x12/0xc0 [ 486.595622][T17531] process_one_work+0xa23/0x19a0 [ 486.597224][T17531] ? __pfx_process_one_work+0x10/0x10 [ 486.598996][T17531] ? __pfx_hub_event+0x10/0x10 [ 486.600584][T17531] worker_thread+0x5ef/0xe50 [ 486.602058][T17531] ? __pfx_worker_thread+0x10/0x10 [ 486.603699][T17531] ? kthread+0x13a/0x450 [ 486.605100][T17531] ? __pfx_worker_thread+0x10/0x10 [ 486.606786][T17531] kthread+0x370/0x450 [ 486.608131][T17531] ? __pfx_kthread+0x10/0x10 [ 486.609651][T17531] ret_from_fork+0x754/0xd80 [ 486.611176][T17531] ? __pfx_ret_from_fork+0x10/0x10 [ 486.612840][T17531] ? __switch_to+0x7b4/0x1120 [ 486.614389][T17531] ? __pfx_kthread+0x10/0x10 [ 486.615920][T17531] ret_from_fork_asm+0x1a/0x30 [ 486.617497][T17531] [ 486.618554][T17531] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.620926][T17531] CPU: 0 UID: 0 PID: 17531 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.624440][T17531] Tainted: [L]=SOFTLOCKUP [ 486.625889][T17531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.629070][T17531] Workqueue: usb_hub_wq hub_event [ 486.630710][T17531] Call Trace: [ 486.631773][T17531] [ 486.632724][T17531] dump_stack_lvl+0x100/0x190 [ 486.634252][T17531] vpanic+0x552/0x970 [ 486.635571][T17531] ? __pfx_vpanic+0x10/0x10 [ 486.637021][T17531] panic+0xd1/0xe0 [ 486.638245][T17531] ? __pfx_panic+0x10/0x10 [ 486.639722][T17531] ? check_panic_on_warn+0x1f/0x90 [ 486.641400][T17531] check_panic_on_warn.cold+0x19/0x34 [ 486.643149][T17531] ? enable_work+0x2d1/0x320 [ 486.644626][T17531] __warn.cold+0x191/0x348 [ 486.646074][T17531] __report_bug+0x296/0x3d0 [ 486.647548][T17531] ? enable_work+0x2d1/0x320 [ 486.649042][T17531] ? __pfx___report_bug+0x10/0x10 [ 486.650699][T17531] ? __pfx_debug_object_free+0x10/0x10 [ 486.652457][T17531] ? enable_work+0x2ca/0x320 [ 486.653948][T17531] ? enable_work+0x100/0x320 [ 486.655455][T17531] ? find_held_lock+0x2b/0x80 [ 486.656991][T17531] ? __flush_work+0x928/0xcb0 [ 486.658456][T17531] ? __flush_work+0x928/0xcb0 [ 486.659936][T17531] report_bug_entry+0xe1/0x290 [ 486.661453][T17531] ? enable_work+0x2d1/0x320 [ 486.662953][T17531] handle_bug+0x1cd/0x2a0 [ 486.664307][T17531] exc_invalid_op+0x17/0x50 [ 486.665834][T17531] asm_exc_invalid_op+0x1a/0x20 [ 486.667422][T17531] RIP: 0010:enable_work+0x2d1/0x320 [ 486.669096][T17531] Code: ff e8 23 ad 38 00 e8 1e f7 bf 09 e9 61 ff ff ff e8 14 ad 38 00 90 0f 0b 90 e9 17 fe ff ff e8 06 ad 38 00 48 8d 3d 0f 76 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 1a 3a a5 00 e9 [ 486.675214][T17531] RSP: 0018:ffffc90005bdf3b0 EFLAGS: 00010093 [ 486.677101][T17531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d02130 [ 486.679552][T17531] RDX: ffff888028e68000 RSI: ffffffff81d022fa RDI: ffffffff90dc9910 [ 486.682017][T17531] RBP: ffff888062c9e738 R08: 0000000000000007 R09: 0000000000000000 [ 486.684438][T17531] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.686888][T17531] R13: 1ffff92000b7be77 R14: ffff888062c9e698 R15: 000000007fffffff [ 486.689362][T17531] ? enable_work+0x100/0x320 [ 486.690868][T17531] ? enable_work+0x2ca/0x320 [ 486.692374][T17531] ? __pfx_enable_work+0x10/0x10 [ 486.693972][T17531] ? __pfx___might_resched+0x10/0x10 [ 486.695684][T17531] cancel_delayed_work_sync+0x96/0xf0 [ 486.697406][T17531] thermal_zone_device_unregister+0x28e/0x4e0 [ 486.699384][T17531] ? __pfx_shield_remove+0x10/0x10 [ 486.701063][T17531] power_supply_unregister+0x10a/0x150 [ 486.702815][T17531] shield_remove+0x75/0x130 [ 486.704297][T17531] ? __pfx_shield_remove+0x10/0x10 [ 486.705937][T17531] hid_device_remove+0xd1/0x270 [ 486.707507][T17531] ? __pfx_hid_device_remove+0x10/0x10 [ 486.709282][T17531] device_remove+0xcb/0x180 [ 486.710784][T17531] device_release_driver_internal+0x42e/0x600 [ 486.712765][T17531] bus_remove_device+0x22f/0x440 [ 486.714396][T17531] device_del+0x376/0x9b0 [ 486.715835][T17531] ? __pfx_device_del+0x10/0x10 [ 486.717434][T17531] ? do_raw_spin_lock+0x128/0x260 [ 486.719082][T17531] ? find_held_lock+0x2b/0x80 [ 486.720639][T17531] hid_destroy_device+0x19c/0x240 [ 486.722290][T17531] usbhid_disconnect+0xa0/0xe0 [ 486.723857][T17531] usb_unbind_interface+0x1dd/0x9e0 [ 486.725577][T17531] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 486.727386][T17531] ? __pfx_usb_unbind_interface+0x10/0x10 [ 486.729213][T17531] device_remove+0x12a/0x180 [ 486.730693][T17531] device_release_driver_internal+0x42e/0x600 [ 486.732590][T17531] bus_remove_device+0x22f/0x440 [ 486.734149][T17531] device_del+0x376/0x9b0 [ 486.735542][T17531] ? __pfx_device_del+0x10/0x10 [ 486.737062][T17531] ? kobject_put+0xb9/0x640 [ 486.738571][T17531] usb_disable_device+0x367/0x810 [ 486.740237][T17531] usb_disconnect+0x2e2/0x9a0 [ 486.741787][T17531] hub_event+0x1d0c/0x4af0 [ 486.743278][T17531] ? __lock_acquire+0x4a5/0x2630 [ 486.744844][T17531] ? do_raw_spin_unlock+0x145/0x1e0 [ 486.746493][T17531] ? __pfx_hub_event+0x10/0x10 [ 486.748057][T17531] ? debug_object_deactivate+0x2e4/0x3b0 [ 486.749859][T17531] ? ttwu_queue_wakelist+0x70/0x430 [ 486.751557][T17531] ? rcu_is_watching+0x12/0xc0 [ 486.753121][T17531] process_one_work+0xa23/0x19a0 [ 486.754746][T17531] ? __pfx_process_one_work+0x10/0x10 [ 486.756504][T17531] ? __pfx_hub_event+0x10/0x10 [ 486.758060][T17531] worker_thread+0x5ef/0xe50 [ 486.759567][T17531] ? __pfx_worker_thread+0x10/0x10 [ 486.761260][T17531] ? kthread+0x13a/0x450 [ 486.762662][T17531] ? __pfx_worker_thread+0x10/0x10 [ 486.764321][T17531] kthread+0x370/0x450 [ 486.765663][T17531] ? __pfx_kthread+0x10/0x10 [ 486.767172][T17531] ret_from_fork+0x754/0xd80 [ 486.768683][T17531] ? __pfx_ret_from_fork+0x10/0x10 [ 486.770321][T17531] ? __switch_to+0x7b4/0x1120 [ 486.771829][T17531] ? __pfx_kthread+0x10/0x10 [ 486.773300][T17531] ret_from_fork_asm+0x1a/0x30 [ 486.774816][T17531] [ 486.776456][T17531] Kernel Offset: disabled [ 486.777829][T17531] Rebooting in 86400 seconds..