last executing test programs: 1m36.978013524s ago: executing program 2 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) (async) close(0x3) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x40, 0x26, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xd, 0x4}, {0xd, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) (async) unshare(0x42000000) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x68, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x8, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "e5984cde5618b7"}, @timestamp={0x8, 0xa, 0x7, 0xf59}, @md5sig={0x13, 0x12, "79e6f44d530dc1a2bbb526931e89c384"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) (async) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'bridge0\x00'}}]}}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0x2020) pwritev2(r2, &(0x7f0000002280), 0x0, 0xffffffff, 0x800, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0x0, 0xfff8}, {0xffef, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x10000000) 1m36.524155301s ago: executing program 2 (id=129): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x0, 0xfbfd, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0xfff, 0x0, @private0}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x4c, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) 1m36.450025784s ago: executing program 2 (id=130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x9, '\x00', @st={0x4, [{0x2, @svalue=0x5}, {0x1, @uvalue=0x8}, {0x2, @svalue=0x4}, {0xfffffffffffffffe, @uvalue=0x9}]}, 0x3}]}) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000016000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m36.447969786s ago: executing program 2 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0/../file0\x00', 0x0, 0x100800, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) (async) r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b182a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000400)={{0xb09c, 0x101}, 0x100, './file0/../file0\x00'}) (async) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m36.320358219s ago: executing program 2 (id=135): write$nci(0xffffffffffffffff, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x93, @f={0x7, 0x0, 0x4, 0x2, 0xd, 0x0, 0x80, {0x0, 0xf3, "be8125d703f02a7d9e9b80c250bccece815cdc106163096a33c56849d3b271920c9ee7dc4fdcd3bd777feabd740e9a865792f601c01f3d62197882f63cf2e862baa0e129c97bffc5028651debb5116aa23a7b6dde3c66869900fde481ea6df3c4e1c465042424bdaa69025ef55e91a12c5812edcddc9c3a6350888233716748e369971fbe633e3e2109de79345b0a1754d84e476c9150b84ab8c08562319cbae7ec0861af70b641471f22ec148db6e858ce6116b82c79ed4562ee1add37ceb31caf2212488657826fecb4f5a9f56e61980ceea6d53e1e85311443e9f5e4809e15b842b98cfbbb0ca39c202166dd76870cd85ab"}, 0xf, 0xe, 0x1, 0x5, 0xa9, "cbaaf4efb4714a287d7fd311c61305a2fbb68615ef469208578dea86c0d92a0357fa60e877379d7284474298341cf31655b79d81e899fa74a97de6908b43501f400cc225c06d7b7410ce8c6085a8cd68e7d9e0c625a01bc63eaea5aae148a275cc0ca801da91725ef3e7ea5a78edcdd45bbd0095ad9a55276998655e55b2a7789f46d65615eb1e359a668db9e3725616fe13ce4fc6c57f3f08ecdfcb4005c34cb422f0e7669019dae5"}}, 0x1ad) r0 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x7, 0x9c1002) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x2}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)) 1m36.029631906s ago: executing program 2 (id=142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) recvfrom(r0, 0x0, 0xfffffec3, 0x10000, 0x0, 0xfffffffffffffecc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) io_setup(0x2, &(0x7f0000002380)) 1m36.00178766s ago: executing program 32 (id=142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) recvfrom(r0, 0x0, 0xfffffec3, 0x10000, 0x0, 0xfffffffffffffecc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) io_setup(0x2, &(0x7f0000002380)) 1m29.879935155s ago: executing program 4 (id=246): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x13, 0x13, "845b230f97e27aa958f526467d3fe25ff48972"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) (async) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x13, 0x13, "845b230f97e27aa958f526467d3fe25ff48972"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf}, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1m27.866514664s ago: executing program 4 (id=289): ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c3"], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 1m27.864993945s ago: executing program 4 (id=292): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 1m27.75919234s ago: executing program 4 (id=293): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x400, 0x80000, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x9) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x121021) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x35fd, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x9, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523f60fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) mount$nfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[]) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bc2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f26c, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1fab8e90, 0x7}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8091}, 0x40) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r8, 0x4008ae52, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x18, r9}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xa0028000}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x200) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xffed, 0xfff2}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) 1m27.669688906s ago: executing program 4 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0xb881, 0x49583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008002}, 0x4048844) sendto$packet(r6, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x11, 0x0, @opaque="043363e8167e675a7b"}}}}}, 0x0) unshare(0x40400) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000080801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0xffffffffffffff61, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x5) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2001) write(r2, &(0x7f0000000040)='0\x00', 0x2) write(r2, &(0x7f0000000040)='1\x00', 0x2) 1m27.558658557s ago: executing program 4 (id=300): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = getpid() openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 1m27.387839383s ago: executing program 0 (id=302): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x174c56b28484f9e2, 0x1d8) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file2\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0xd8, 0x7, 0x10, "01986bade525aab91757d9c5135d6c9e", "196ed6eb148a30ff0538dd7eeed22efef2afd10a120d6fe29e3682d231bce6f39853f456be0d2a5c1c1510e4c96914b1708e65a171a172b4ee1fb4054b1b71e8be0994dbfde69d3d0f9d4ea937164017154878c9dee9bb93daa3ac80de54ba1d9d12fe9644259c692c8c3db39b6922b7c173bd861627475fc0a662f4512266cf404330283ee797cae0d64a9ae1184954e4dde600b7123a489fa678b0a2558cda6de41c1b69dce05e514d29609d3dde408af02db989c45d3dd087d821a8876203940a75"}, 0xd8, 0x0) (async) unlink(&(0x7f00000000c0)='./file0/file2\x00') 1m27.298031548s ago: executing program 0 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r1, 0x2, 0x235, &(0x7f00000002c0)=""/120, &(0x7f0000000340)=0x78) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) syz_emit_ethernet(0x52, &(0x7f0000002100)=ANY=[@ANYRES8=r1, @ANYBLOB="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", @ANYRESOCT=r3], 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x100000, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRES64=r4, @ANYBLOB='\x00\x00']) syz_fuse_handle_req(r6, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000840)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x8000, 0x48200110, 0xdcf, 0x3, 0x8, 0x2, 0x0, 0x0, 0x2, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xa, {0xb, 0x0, 0x0, {0x3, 0x101, 0x1000, 0x90000005, 0x40000000000003, 0x20000000000fe, 0x9ec, 0x35743061, 0x4, 0xa593e9c1ca988eda, 0xfffffffd, 0x0, 0x0, 0x3d, 0xdc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x7, 0x1, ')\'\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000080)={0x10, 0x0, r9}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x450702) 1m27.109490139s ago: executing program 0 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x4b564d00, 0xfee00d00}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000500)=@lsasf={0x8, 0x0, 0x1}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), 0x18493a, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0/../file0'}}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, r0}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000340)={r6, 0x0, 0x204000, 0x0, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x200}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x2022004, &(0x7f00000003c0)={[{@uuid_null, 0x3a}, {@nfs_export_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x54, 0x62, 0x66, 0x33, 0x61, 0x65, 0x35, 0x65], 0x2d, [0x61, 0x0, 0x63, 0x36], 0x2d, [0x64, 0x35, 0x62, 0x32], 0x2d, [0x65, 0x35, 0x63, 0x66], 0x2d, [0x38, 0x33, 0x62, 0x38, 0x31, 0x37, 0x38, 0x38]}}}, {@fowner_eq={'fowner', 0x3d, r0}}], 0x3a}) 1m26.869486576s ago: executing program 0 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7d, 0x3, "dcfe4844a8b3aaf1179fbb55805cb583756e17469f7bfaf5b5f00d4102b9dbc13f7b2216551bee09f6a8df310ae79edeb1d07dba6c0857a7a7dfef993f83f287fc2c04f3a6db7d196de8dd44e588674475d423ca9e30f528b8c885338730864f66db247ce6849d326c9daba5f44c2d300b397e9c295f90acae"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x4008080) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x1, 0x6dc19f80, {0x0}, {0xee01}, 0x9, 0x8001}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000280)={0x2, 0x0, 0x3, 0x2, 0x80000000, 0xa1, 0xfffffff9, 0xcf0a, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000280)={0x2, 0x0, 0x3, 0x2, 0x80000000, 0xa1, 0xfffffff9, 0xcf0a, 0x7}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) ftruncate(0xffffffffffffffff, 0xb36) (async) ftruncate(0xffffffffffffffff, 0xb36) userfaultfd(0x0) (async) r5 = userfaultfd(0x0) ioctl$FICLONE(r5, 0x40049409, r4) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000440)=[@nested_amd_vmsave={0x183, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c01, 0x1, 0x8ba, 0x6}}, @rdmsr={0x66, 0x18, {0x8ac}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xfa, 0x5, 0x3, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x22}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x3}}, @rdmsr={0x66, 0x18, {0x2cb}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xd0, {0x1, 0x0, [@wr_drn={0x68, 0x20, {0x2, 0x9}}, @out_dx={0x6a, 0x28, {0x1382, 0x3, 0xffffffff}}, @nested_amd_invlpga={0x17d, 0x20, {0x40000, 0x3461}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xf3, 0x4, 0x4}}]}}, @wr_crn={0x67, 0x20, {0x2, 0xff}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @in_dx={0x69, 0x20, {0xc8fc, 0x4}}, @wrmsr={0x65, 0x20, {0xbd4, 0x3}}, @uexit={0x0, 0x18, 0x800}, @nested_load_syzos={0x136, 0xf8, {0x3, 0x1, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x465, 0x6, 0x8000000000000000, 0x7fffffffffffffff}}, @nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18, 0x9}, @out_dx={0x6a, 0x28, {0xa6, 0x0, 0x40}}, @in_dx={0x69, 0x20, {0x8a59, 0x4}}, @nested_amd_clgi={0x17f, 0x10}]}}, @out_dx={0x6a, 0x28, {0x9f38, 0x4, 0xdc}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x2a, 0x0, 0x0, 0x2}}, @rdmsr={0x66, 0x18, {0xac6}}], 0x3f8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000880)={0x100, 0x8000}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000880)={0x100, 0x8000}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000008c0), 0x2) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_TDX_FINALIZE_VM(r7, 0xc008aeba, &(0x7f0000000900)) (async) ioctl$KVM_TDX_FINALIZE_VM(r7, 0xc008aeba, &(0x7f0000000900)) recvmsg(r0, &(0x7f0000001c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/8, 0x8}], 0x4, &(0x7f0000001c00)=""/26, 0x1a}, 0x40000103) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001c80)={'pcm3724\x00', [0x2, 0x445a, 0x6, 0x7, 0x5, 0x0, 0x3, 0x3, 0x6, 0x2, 0x8b4f, 0x7, 0x7, 0x4, 0x2, 0x7, 0x365, 0x0, 0x6, 0xb990, 0x1000, 0x4, 0x6, 0x3, 0x5, 0x2819, 0x80, 0x5, 0x1000, 0x8, 0x5, 0x4]}) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001d40), 0x2a00, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001d80)={0x3b, 0x5, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @pad1]}, 0x38) socket$pppoe(0x18, 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e00)=@o_path={&(0x7f0000001dc0)='./file0\x00', r8, 0x4000, r0}, 0x18) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f0000001e40)={0x2, 0x80000, r6}) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000001e80), 0x4) 1m26.789995044s ago: executing program 0 (id=307): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0xb) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x3, 0x4}) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x4, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x3014, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f00000001c0)) 1m26.649770203s ago: executing program 0 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) syz_usb_connect(0x7, 0x104d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x74, 0xe3, 0x2a, 0x8, 0xe7ac, 0xfeee, 0xbf67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103b, 0x4, 0x8, 0x9, 0x20, 0xd1, "", [{{0x9, 0x4, 0xda, 0x9, 0xe, 0x2, 0xd, 0x0, 0x9, [], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x5, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x2, 0xff}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x0, 0xfa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}, @generic={0xd, 0x22, "4c52148aad07b1a19a2832"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x10, 0x0, 0x7}}, {{0x9, 0x5, 0x1a, 0x0, 0x200, 0x9, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x2, 0x6, [@generic={0xfb, 0x31, "b27b3211964ca2e2dec42ef90a78c7bebaf0b2e8ba219ba9b7d82e550e819deaf860d2f62d0649f879728955b6aa668920b3ff87f303a0c1807e9dc230ddc81e9138417e80919b60ee25504a5cfe86fa4b78f55d795a9ad754a7d3b4e7532ab01db423ef6ffc2e7104094c53eb6e25418252c5dd32bd3a782c3861fbaa92cc9f3ab677a3e06d1a0040c6495dc5b2ab8b5151d314f4cf01cd79488e11299aa78e25bc07939ae02de2860025fb818f1936c7078e0d381d82947fed247a79145affc38d9efd1386cea85eaee0210d610483321b1f46b9b818e93ade5f7b1ce628226ce470a9c3a2e7691433ea8b4bf50f968fee32403290643342"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x40, 0x2, 0x2, [@generic={0x2b, 0x5, "7b93fbe58868f34193be454fbed742e750b371cdea23cde50cbb392829fa982e7ac274cd5daaa0d851"}, @generic={0xf4, 0x30, "323957e89be7d90d3813df4657bf5154466364011df38f7b3a6a5fa719ba26d0ad6cdf8f031138a526bee100db15a2a2cb1d35e54d2f6b750ba40db30d89c25286f8a805774eaf4247723464ec4b363e6e1cee7f9cad0020651a3ddab107ebc926e3e8271b0cc25e0522ffbd4e7ba4c03e765a07d2854f6535e7727ad22707c2c11fb1e501395a432907f3e0e2bda2a285d08530aaf4c06ab9846310b6dfaaae465c7d1039e80eb999df22d413c1fa62d2d84a84c05890f9ccddcd2fb18e5c22fdb3579b7bfb24816a594c01e23e936c50d078c1efe47aa865dc54f749d4ed3bbc0e9f6ea46887f795e379d1e1603ab76c7e"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x2, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}, @generic={0xff, 0x24, "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"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x40, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x5, 0xa, 0x7, [@generic={0xdc, 0x6, "841a3ba7d50e5e16222411b3193e133e1894eee82e4089728243d4b407ace7d6de08c66a0aeacfbd60f2450f4a674b5f6c0378768967a606cb6ca02055f7e7b7799fa57c0fa375b19bcdb8553d9cdbd2d64ae2563f47259a5ba921dcc47b251aad1cbd2b7f1e6e781b133f575399f96319a785e239dd0c43100beb34d46eb088aa7a9770538e0a45f3d4d4f91c2ab1e6c8e6249c9ab33b11b6e84655f2afbedd436c26b1b8314001e9cf2e9ce1c6173942aa91df7153b47910eebc41eedcfd9927e206945a7394a92adced8ea3852ab6cda8cd9342a53244ea08"}, @generic={0x7e, 0x10, "ab6364e8c8f66731f853b2d1315557893c89e741814e2c718287d50fc155a447274ebf18d09b75a5c3e9639ed499243285a326be981a011f66ea04e8c6234d4fab3ba46ecfc2a595dc886aa204f89fec479b26144500ddf93a7cc6d0e37623eb203550da37d3fc56af70034149c89b38d9cb02188d86e3088f371627"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x1, 0xb, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x14, 0xd, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x220, 0x70, 0x8, 0x6}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x8, 0x57, 0xfe, [@generic={0xf6, 0x30, "1dc6a8a8f495ac38b9022f00fd718940039cb23b37ad6785923e3eafd0284c39f0049d259fbfe6d8533c02660a80ae1cadedf686465bc244c379274d920be633e12f420f2a7ca3401d4027664d7f088d0f7b36e4a93fc82a5c6a24bc7d4bacd12116b4c7e792027df88a4d21befd8ef0cee2d7e0afd9612eafaaf4bba975296686a04ba58a6fd9a81141e31d9fc0859f8cc9c7f32d7f9254b9952139cefa4b6ea7e31f216d25c2d06840769fa95041f0dbf72a9e218eab747d32813862c27a83692abdf6c905e7af05731794bf37b45ee4136f715055cb4b624581db27e6ebe8bbf0e9fe4bc7a9923fe4ddffc5729b3d6fd41622"}, @generic={0x9e, 0x21, "31864ecd91287ad7344049fb587f6e843631f0843f89ec5a6125d6ad228931cce2c488c383ae2d92ac8a62e09681fb7f9ead25e561d20b328012549002302a910a8fab65ea55bb89c8ec8e062fcb2b44c49218043a0bdaa673124599a74f397b191eb15de599b8c0ccebc01757cdedab928d0d0175693e0387ff629df29e4e36855cd2271501687a076e717c30cf10dfc0923c4cb4d64b874af93f9b"}]}}]}}, {{0x9, 0x4, 0xa1, 0x4, 0x4, 0x44, 0xd1, 0x40, 0x63, [@hid_hid={0x9, 0x21, 0x9, 0xf8, 0x1, {0x22, 0x690}}, @generic={0xe, 0x5, "391c325785c1b84f893086e0"}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x7, 0x7}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xe, 0x9, 0xa}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x19, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x5, 0x8, 0x9f, [@generic={0x78, 0x10, "8f252e5e0fad766a8e35cae3b4ce3c1f4bfe9bd74f36eca35fb5f997d4ef6d33715355957dbdd4dec6fd05138fddc26ed8b6daf50558b734787f150b87afd6c9b235f5571ca3eaa6c51d7bf7e57604ed395cdc750d6bec90cfd4fa755dbaa2e26c21fd56704ee9ac70ffd8465beae674c555201ae0ad"}, @generic={0xd6, 0x7, "cf0268ccdc4c416b2e78f0b7262ccc105b1fa8a527a38baaebb828703e28616484c63c680448c6970e27a5c8aeae8842ccdee6ccbedf5ce2879befb0eaed2f079104bf49e5ee4dbd455566835865277b3d7ff8ee8608a53960c7d94dfaa6f8aa79837fcf4d70818564a95022c20f9e0cdfd88ef720b06037710590e3537b368e51c57f80ec7782770c7dc0e91435fb2387e1aee7a49ce246df66efcebeb63d16f312cd6d87cca432fa7566e263272a817ad01307d451151b6bfac428cf11450fef16fedae7048710e8629962d5d095509c64d0e1"}]}}]}}, {{0x9, 0x4, 0x14, 0xf, 0xf, 0x5e, 0x96, 0x60, 0x1, [@hid_hid={0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xf26}}], [{{0x9, 0x5, 0xc, 0x6, 0x3ff, 0x5, 0x5, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x6, 0x1, [@generic={0x83, 0x31, "bae2d041ad3617cfa7a69c4776db47aade526e7bd265b85c9133d8c2443c3abb31ab2c9227f1a75c16835dbc8574df8996b6b9224356f7b559e7ba3646f852743a7e8fd91d78ec9547fa5d5a25ab681ac66e946c71f59ff81ec6f5c0484d255518daf54a601abc14e54a629960478d81233f597d320be66847507f6ede79293bd6"}, @generic={0xdf, 0x1, "8ab502404f5487c4182d032b89ff3f10ce134bc43874e3de24d978d44723b8fc4bdecae853e64c43a3a35d16b54f586ca7d6e0a2f4b2f8f8f30b50c200ecadf9c8089a83366ffbf204b4c5a17674f0b79015a7c288409b73e8b80443f7976c5ab0fca4bb8431dc460a2e5d116b56c58b23cf72a5ebc17db79ce96f4f7f94cc6b5cab31a88a91dfb93bb2d3a97913631012d515372d027476efae8e24788c5be83b1e91eab47b621c9530f3cf90f5ef22ae9284624e228e12d88297081014d6113c6e5525f6e23fa4420f9398665ddae2043fb2c1a903ce4242ac13655f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x800}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x0, 0xf, 0xc, [@generic={0x1b, 0x10, "1d73701e8aa06e8713d1a5cac4c43e08e2224f9de7f03409b0"}, @generic={0xaa, 0x3, "19958277958d98c61952c3b29639cc71018c24a4ac5e813a9a916ff3e41270af9157d45a40c88effc61f8b55d7c7998632810773041dd166628a98f4e6bdb42af3524215018f120f40dadbbb74288df849491bc4d16bfb27cec7519dcbee983a7a4d3eabcbd6e8e37e6d9aaad4900d62ab0bbb9bc29c110990fba1bb9d227483bccaaf3605807f4bb68e0853e120b1bd7e781dbc0ddb77196bf9d45179777a557c6a718c7fb0f327"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x23, 0xe4, 0x0, [@generic={0xf6, 0x23, "541103520b4c621717f5c760e81006164078070257b33bbfc8a69bbd4cda4dd042507f5786d1f0eef5f14acf069a3cfaf421ef67be157aea0cf1b9896ed058be46cba395c28863a0e48a51c7a791ba13444649afdda0f73d4b23ee78bb3688b6cdc647a62dc6e89f6ea1bbd2844ecad3ea49336db56dcc256bea99f994e7eb7279cb6ac633cc92a5bad2c81b772f5de0923c40e0881e82679fe353f92ee4d51cf54ce5a30437eea55b896a2e1861707a7cb22ba087061e4842b21a8c8174d8d5482d36de134617569483e4907ccad0ce3fe1f60579a449fa08042075376e0fa86e250c6061af2d42788a82a3571d78d6715a739d"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x5, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x22, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0xe3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xd}, @generic={0x8d, 0x11, "3acf3d917ceea58632fca5293ee4d1469b4efb70146b7f96c256adf639e71a5ee9767d909fd1a53a252a8b8b0f4ee15cc06558be0c957bb1b0fbcfe21e60e58ce6a0bd02315247de415585ad4c2140e4ccc5ed6c7a15bf05dffbf7adfeb99ea5a5d885aacc4b0e733f2903c89a704be0a25926966f5fa004a458c91888fdbbd7e4a070c9d055be40250649"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x81, 0x8, 0x5, [@generic={0xbe, 0x2, "507f41cab9c31a392a24a3d82d8cd621bef4ce86dc89a4b129d7f97c35efdfe0461e4b7b3544ae465cce8b525b326cd205bcf145e820987a3eed76b935a88062bacdfcfa61480c070d0ad14be91d93fcf607e280055af9dfc64b068ce0cbdbf998e42c393b80d3023ff5a9956ba3378a44edbbe3721ad3bd4bcee5a1a52fd9d4826e4a283f7593e471572fa51069bf614ae210d33d0c6cc340152bce3e868423ebe1f1a90e7d66f7224bf4f34e07cd6c348e274c990dd0b2e540e06c"}, @generic={0x86, 0x7, "dff65fb1a3ce3261a318724713f95f8ad6cf6285ea05586885da594c40531cc984a21542fc96085f67ef19ddf29b2a143c8ee762a88ead1e9d157fbe447e9760fd2fd68897fc263f9aca74094bd463d2478394e9780c1ba851d1d5d029c21443bd4b984d1f4ee359dde41c2158d0a0eed353bd85b8b641292b4cf559abe0bc51d5c26acb"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x3, 0xff, 0x4, [@generic={0xee, 0x0, "76bbcde9c5c44a0ed095a88a3f058d715583baf3ebfd38a0d357eb1ada3aabaf8e9707eaeaf2518a673c302d8cb16a3500d6f548d07b69ff59c606923fc3ca9f436e7856c2b467cf962f407a0b206130c63aea55c9dd48faa7e35c637da81f27fbcb5882ee5be441e8000420eb3db21d14bd637ecb051f8eda3c86ca316709663ef46c7a174f71a663a7c5f79af049b8494434b507496db0ea191c89df0fa6474cc342ed056911c9a6d43c59d951326c721f3c239ba0ba3303d7ecdb5d010009d67f36714699f918d284e351e270dbb29c85157c2ee23ef5cd65bb7e990736cb5089a24fc1d77f5d774f8912"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb7, 0x1000}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x87e2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xc1, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xfe, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3b, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x8, 0x6, 0x6, [@generic={0x14, 0x7, "09d23971c6635a698eb1d983b19ab6c39c75"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x0, 0xf, 0x2, [@generic={0x88, 0xe, "a86ed22c2a8d7035f89bebf17ef07ab2ecde4124e2ebba159f0ca70fc22a0f82bb070083fd9997d3c9a89d4fba0b187d4a38da6341534c5fbc777002805051e4618120ebcc40d664fb6a0213d2fbb3df86c2e66a50963fe214552a8040124cf80f3738b5b136b4a242484772207b575d5c72d3576c8358dd90545afb1c58d4158f1f57e80d49"}]}}]}}, {{0x9, 0x4, 0x77, 0x35, 0x1, 0x3a, 0x40, 0xbe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x5f, 0xe, 0x3, [@generic={0x80, 0xf, "0fdb246a15b796d8aebd1e2bafc59851740a5d895623d981909d6bd9d0c9995dfa2cf0d222411a6b626d35159831c27f4f40a53bdc79f66c4ee42c2ecd6f0119ab530ecaa50a15b49600ff62dba255d073ac3c4829053002794c93fa9cf4c8fe26ebf986d85af766ce0cf80fe859ab473f8cb09e45f5516355166cd0de69"}, @uac_iso={0x7, 0x25, 0x1, 0x879435ae0246f08c, 0x2, 0x63c3}]}}]}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x201, 0x7, 0x0, 0x6, 0x8, 0x9}, 0x26, &(0x7f00000017c0)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x2, 0x200}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x3, 0xff0f, 0x4, [0xf, 0xffffff]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x424}}, {0xf7, &(0x7f0000001840)=@string={0xf7, 0x3, "fad4381292f02a3cac96c3ee551c534c1ee125594eba8483777db3b2e884fca7e66fb2e163f7e3d0476e0f033beb12f65505837ad7aa9d933c9bf76c00f45a7188237437e631fc7aaa9727acb0743c948534d2044d0efc7e90989283b6ee07ce5b9944494d97e3b55704f449a348952fc3bf9236620346a0bb430094e28739e15080a2bb28690229764499909a434b279f94335825b61d3268a3a42cbf3036a75a840f3238d0c0db33d9e4aa218e54c9caf0ad4b691ed7ea90efb3f0068f0dfdf5173fb3dea0c64197d8a5879190825c8ec8ee0b7345d913eb84e157b7e41465af22a7e82c125c38691d6cea808c324bd9043517db"}}, {0x5b, &(0x7f0000001940)=@string={0x5b, 0x3, "04c13a14e77d9943ef8b7812cf60b1eb88ec5793fc0433a54b2ab86e6f5ccdc5336949bd94e29309bf343573249a3a0d56616f07b0ac6d7ec026ebc0813af421f09fa0a7c4e2c0ee637ea6c87cc0d5560759d93509f2a34aa2"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0xfb11e6d9d29faba}}, {0x5d, &(0x7f0000001a00)=@string={0x5d, 0x3, "dda20a03874d7e575bd9a189a54c2984b550e370b16ab7f68adf0cbb88076e95364331248bbdb9225c891ffab2a9cfa0db96213bfcc8e248d907471ec7a7eea607142a903fd8e1c063d7d56a4434818a58a81fb41b31fea61bfb9a"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x81d}}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'rose0\x00', 0x1000}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 1m11.879811501s ago: executing program 33 (id=300): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = getpid() openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 1m11.663951959s ago: executing program 34 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) syz_usb_connect(0x7, 0x104d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x74, 0xe3, 0x2a, 0x8, 0xe7ac, 0xfeee, 0xbf67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103b, 0x4, 0x8, 0x9, 0x20, 0xd1, "", [{{0x9, 0x4, 0xda, 0x9, 0xe, 0x2, 0xd, 0x0, 0x9, [], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x5, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x2, 0xff}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x0, 0xfa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}, @generic={0xd, 0x22, "4c52148aad07b1a19a2832"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x10, 0x0, 0x7}}, {{0x9, 0x5, 0x1a, 0x0, 0x200, 0x9, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x2, 0x6, [@generic={0xfb, 0x31, "b27b3211964ca2e2dec42ef90a78c7bebaf0b2e8ba219ba9b7d82e550e819deaf860d2f62d0649f879728955b6aa668920b3ff87f303a0c1807e9dc230ddc81e9138417e80919b60ee25504a5cfe86fa4b78f55d795a9ad754a7d3b4e7532ab01db423ef6ffc2e7104094c53eb6e25418252c5dd32bd3a782c3861fbaa92cc9f3ab677a3e06d1a0040c6495dc5b2ab8b5151d314f4cf01cd79488e11299aa78e25bc07939ae02de2860025fb818f1936c7078e0d381d82947fed247a79145affc38d9efd1386cea85eaee0210d610483321b1f46b9b818e93ade5f7b1ce628226ce470a9c3a2e7691433ea8b4bf50f968fee32403290643342"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x40, 0x2, 0x2, [@generic={0x2b, 0x5, "7b93fbe58868f34193be454fbed742e750b371cdea23cde50cbb392829fa982e7ac274cd5daaa0d851"}, @generic={0xf4, 0x30, "323957e89be7d90d3813df4657bf5154466364011df38f7b3a6a5fa719ba26d0ad6cdf8f031138a526bee100db15a2a2cb1d35e54d2f6b750ba40db30d89c25286f8a805774eaf4247723464ec4b363e6e1cee7f9cad0020651a3ddab107ebc926e3e8271b0cc25e0522ffbd4e7ba4c03e765a07d2854f6535e7727ad22707c2c11fb1e501395a432907f3e0e2bda2a285d08530aaf4c06ab9846310b6dfaaae465c7d1039e80eb999df22d413c1fa62d2d84a84c05890f9ccddcd2fb18e5c22fdb3579b7bfb24816a594c01e23e936c50d078c1efe47aa865dc54f749d4ed3bbc0e9f6ea46887f795e379d1e1603ab76c7e"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x2, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}, @generic={0xff, 0x24, "164dbc3f8f39331399b4b59a5711c90d3ed5bc095b301f994837b6867b2bc37e1cbcd950d02df68a42d0e3eb52e0e4be39268509ea10316dc27ec1ead23089e6114cf9f648d8750deef2c105319be6db06d897173a34630e6f52a9bca1e642913c383a90bfc7926d486d2564f3a6fc779754c56e535a83f05051a594682ef4d6a399247af58ee302127439518738d4036411ab1a15f1409a041e55a3db312ada6758bddddb2478ba0147a9c6e95be58a5254af02c9cce019396d0e4343169f6cf0bf7aa7fc63e3443bcf142ffc0fa8a17e48324750f00cc8ce051dd66fd1475ab1fa247f4411ef123d4da176292eaff9de777027bf83a18dc146974a7d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x40, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x5, 0xa, 0x7, [@generic={0xdc, 0x6, "841a3ba7d50e5e16222411b3193e133e1894eee82e4089728243d4b407ace7d6de08c66a0aeacfbd60f2450f4a674b5f6c0378768967a606cb6ca02055f7e7b7799fa57c0fa375b19bcdb8553d9cdbd2d64ae2563f47259a5ba921dcc47b251aad1cbd2b7f1e6e781b133f575399f96319a785e239dd0c43100beb34d46eb088aa7a9770538e0a45f3d4d4f91c2ab1e6c8e6249c9ab33b11b6e84655f2afbedd436c26b1b8314001e9cf2e9ce1c6173942aa91df7153b47910eebc41eedcfd9927e206945a7394a92adced8ea3852ab6cda8cd9342a53244ea08"}, @generic={0x7e, 0x10, "ab6364e8c8f66731f853b2d1315557893c89e741814e2c718287d50fc155a447274ebf18d09b75a5c3e9639ed499243285a326be981a011f66ea04e8c6234d4fab3ba46ecfc2a595dc886aa204f89fec479b26144500ddf93a7cc6d0e37623eb203550da37d3fc56af70034149c89b38d9cb02188d86e3088f371627"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x1, 0xb, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x14, 0xd, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x220, 0x70, 0x8, 0x6}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x8, 0x57, 0xfe, [@generic={0xf6, 0x30, "1dc6a8a8f495ac38b9022f00fd718940039cb23b37ad6785923e3eafd0284c39f0049d259fbfe6d8533c02660a80ae1cadedf686465bc244c379274d920be633e12f420f2a7ca3401d4027664d7f088d0f7b36e4a93fc82a5c6a24bc7d4bacd12116b4c7e792027df88a4d21befd8ef0cee2d7e0afd9612eafaaf4bba975296686a04ba58a6fd9a81141e31d9fc0859f8cc9c7f32d7f9254b9952139cefa4b6ea7e31f216d25c2d06840769fa95041f0dbf72a9e218eab747d32813862c27a83692abdf6c905e7af05731794bf37b45ee4136f715055cb4b624581db27e6ebe8bbf0e9fe4bc7a9923fe4ddffc5729b3d6fd41622"}, @generic={0x9e, 0x21, "31864ecd91287ad7344049fb587f6e843631f0843f89ec5a6125d6ad228931cce2c488c383ae2d92ac8a62e09681fb7f9ead25e561d20b328012549002302a910a8fab65ea55bb89c8ec8e062fcb2b44c49218043a0bdaa673124599a74f397b191eb15de599b8c0ccebc01757cdedab928d0d0175693e0387ff629df29e4e36855cd2271501687a076e717c30cf10dfc0923c4cb4d64b874af93f9b"}]}}]}}, {{0x9, 0x4, 0xa1, 0x4, 0x4, 0x44, 0xd1, 0x40, 0x63, [@hid_hid={0x9, 0x21, 0x9, 0xf8, 0x1, {0x22, 0x690}}, @generic={0xe, 0x5, "391c325785c1b84f893086e0"}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x7, 0x7}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xe, 0x9, 0xa}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x19, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x5, 0x8, 0x9f, [@generic={0x78, 0x10, "8f252e5e0fad766a8e35cae3b4ce3c1f4bfe9bd74f36eca35fb5f997d4ef6d33715355957dbdd4dec6fd05138fddc26ed8b6daf50558b734787f150b87afd6c9b235f5571ca3eaa6c51d7bf7e57604ed395cdc750d6bec90cfd4fa755dbaa2e26c21fd56704ee9ac70ffd8465beae674c555201ae0ad"}, @generic={0xd6, 0x7, "cf0268ccdc4c416b2e78f0b7262ccc105b1fa8a527a38baaebb828703e28616484c63c680448c6970e27a5c8aeae8842ccdee6ccbedf5ce2879befb0eaed2f079104bf49e5ee4dbd455566835865277b3d7ff8ee8608a53960c7d94dfaa6f8aa79837fcf4d70818564a95022c20f9e0cdfd88ef720b06037710590e3537b368e51c57f80ec7782770c7dc0e91435fb2387e1aee7a49ce246df66efcebeb63d16f312cd6d87cca432fa7566e263272a817ad01307d451151b6bfac428cf11450fef16fedae7048710e8629962d5d095509c64d0e1"}]}}]}}, {{0x9, 0x4, 0x14, 0xf, 0xf, 0x5e, 0x96, 0x60, 0x1, [@hid_hid={0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xf26}}], [{{0x9, 0x5, 0xc, 0x6, 0x3ff, 0x5, 0x5, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x6, 0x1, [@generic={0x83, 0x31, "bae2d041ad3617cfa7a69c4776db47aade526e7bd265b85c9133d8c2443c3abb31ab2c9227f1a75c16835dbc8574df8996b6b9224356f7b559e7ba3646f852743a7e8fd91d78ec9547fa5d5a25ab681ac66e946c71f59ff81ec6f5c0484d255518daf54a601abc14e54a629960478d81233f597d320be66847507f6ede79293bd6"}, @generic={0xdf, 0x1, "8ab502404f5487c4182d032b89ff3f10ce134bc43874e3de24d978d44723b8fc4bdecae853e64c43a3a35d16b54f586ca7d6e0a2f4b2f8f8f30b50c200ecadf9c8089a83366ffbf204b4c5a17674f0b79015a7c288409b73e8b80443f7976c5ab0fca4bb8431dc460a2e5d116b56c58b23cf72a5ebc17db79ce96f4f7f94cc6b5cab31a88a91dfb93bb2d3a97913631012d515372d027476efae8e24788c5be83b1e91eab47b621c9530f3cf90f5ef22ae9284624e228e12d88297081014d6113c6e5525f6e23fa4420f9398665ddae2043fb2c1a903ce4242ac13655f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x800}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x0, 0xf, 0xc, [@generic={0x1b, 0x10, "1d73701e8aa06e8713d1a5cac4c43e08e2224f9de7f03409b0"}, @generic={0xaa, 0x3, "19958277958d98c61952c3b29639cc71018c24a4ac5e813a9a916ff3e41270af9157d45a40c88effc61f8b55d7c7998632810773041dd166628a98f4e6bdb42af3524215018f120f40dadbbb74288df849491bc4d16bfb27cec7519dcbee983a7a4d3eabcbd6e8e37e6d9aaad4900d62ab0bbb9bc29c110990fba1bb9d227483bccaaf3605807f4bb68e0853e120b1bd7e781dbc0ddb77196bf9d45179777a557c6a718c7fb0f327"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x23, 0xe4, 0x0, [@generic={0xf6, 0x23, "541103520b4c621717f5c760e81006164078070257b33bbfc8a69bbd4cda4dd042507f5786d1f0eef5f14acf069a3cfaf421ef67be157aea0cf1b9896ed058be46cba395c28863a0e48a51c7a791ba13444649afdda0f73d4b23ee78bb3688b6cdc647a62dc6e89f6ea1bbd2844ecad3ea49336db56dcc256bea99f994e7eb7279cb6ac633cc92a5bad2c81b772f5de0923c40e0881e82679fe353f92ee4d51cf54ce5a30437eea55b896a2e1861707a7cb22ba087061e4842b21a8c8174d8d5482d36de134617569483e4907ccad0ce3fe1f60579a449fa08042075376e0fa86e250c6061af2d42788a82a3571d78d6715a739d"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x5, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x22, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0xe3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xd}, @generic={0x8d, 0x11, "3acf3d917ceea58632fca5293ee4d1469b4efb70146b7f96c256adf639e71a5ee9767d909fd1a53a252a8b8b0f4ee15cc06558be0c957bb1b0fbcfe21e60e58ce6a0bd02315247de415585ad4c2140e4ccc5ed6c7a15bf05dffbf7adfeb99ea5a5d885aacc4b0e733f2903c89a704be0a25926966f5fa004a458c91888fdbbd7e4a070c9d055be40250649"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x81, 0x8, 0x5, [@generic={0xbe, 0x2, "507f41cab9c31a392a24a3d82d8cd621bef4ce86dc89a4b129d7f97c35efdfe0461e4b7b3544ae465cce8b525b326cd205bcf145e820987a3eed76b935a88062bacdfcfa61480c070d0ad14be91d93fcf607e280055af9dfc64b068ce0cbdbf998e42c393b80d3023ff5a9956ba3378a44edbbe3721ad3bd4bcee5a1a52fd9d4826e4a283f7593e471572fa51069bf614ae210d33d0c6cc340152bce3e868423ebe1f1a90e7d66f7224bf4f34e07cd6c348e274c990dd0b2e540e06c"}, @generic={0x86, 0x7, "dff65fb1a3ce3261a318724713f95f8ad6cf6285ea05586885da594c40531cc984a21542fc96085f67ef19ddf29b2a143c8ee762a88ead1e9d157fbe447e9760fd2fd68897fc263f9aca74094bd463d2478394e9780c1ba851d1d5d029c21443bd4b984d1f4ee359dde41c2158d0a0eed353bd85b8b641292b4cf559abe0bc51d5c26acb"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x3, 0xff, 0x4, [@generic={0xee, 0x0, "76bbcde9c5c44a0ed095a88a3f058d715583baf3ebfd38a0d357eb1ada3aabaf8e9707eaeaf2518a673c302d8cb16a3500d6f548d07b69ff59c606923fc3ca9f436e7856c2b467cf962f407a0b206130c63aea55c9dd48faa7e35c637da81f27fbcb5882ee5be441e8000420eb3db21d14bd637ecb051f8eda3c86ca316709663ef46c7a174f71a663a7c5f79af049b8494434b507496db0ea191c89df0fa6474cc342ed056911c9a6d43c59d951326c721f3c239ba0ba3303d7ecdb5d010009d67f36714699f918d284e351e270dbb29c85157c2ee23ef5cd65bb7e990736cb5089a24fc1d77f5d774f8912"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb7, 0x1000}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x87e2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xc1, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xfe, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3b, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x8, 0x6, 0x6, [@generic={0x14, 0x7, "09d23971c6635a698eb1d983b19ab6c39c75"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x0, 0xf, 0x2, [@generic={0x88, 0xe, "a86ed22c2a8d7035f89bebf17ef07ab2ecde4124e2ebba159f0ca70fc22a0f82bb070083fd9997d3c9a89d4fba0b187d4a38da6341534c5fbc777002805051e4618120ebcc40d664fb6a0213d2fbb3df86c2e66a50963fe214552a8040124cf80f3738b5b136b4a242484772207b575d5c72d3576c8358dd90545afb1c58d4158f1f57e80d49"}]}}]}}, {{0x9, 0x4, 0x77, 0x35, 0x1, 0x3a, 0x40, 0xbe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x5f, 0xe, 0x3, [@generic={0x80, 0xf, "0fdb246a15b796d8aebd1e2bafc59851740a5d895623d981909d6bd9d0c9995dfa2cf0d222411a6b626d35159831c27f4f40a53bdc79f66c4ee42c2ecd6f0119ab530ecaa50a15b49600ff62dba255d073ac3c4829053002794c93fa9cf4c8fe26ebf986d85af766ce0cf80fe859ab473f8cb09e45f5516355166cd0de69"}, @uac_iso={0x7, 0x25, 0x1, 0x879435ae0246f08c, 0x2, 0x63c3}]}}]}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x201, 0x7, 0x0, 0x6, 0x8, 0x9}, 0x26, &(0x7f00000017c0)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x2, 0x200}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x3, 0xff0f, 0x4, [0xf, 0xffffff]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x424}}, {0xf7, &(0x7f0000001840)=@string={0xf7, 0x3, "fad4381292f02a3cac96c3ee551c534c1ee125594eba8483777db3b2e884fca7e66fb2e163f7e3d0476e0f033beb12f65505837ad7aa9d933c9bf76c00f45a7188237437e631fc7aaa9727acb0743c948534d2044d0efc7e90989283b6ee07ce5b9944494d97e3b55704f449a348952fc3bf9236620346a0bb430094e28739e15080a2bb28690229764499909a434b279f94335825b61d3268a3a42cbf3036a75a840f3238d0c0db33d9e4aa218e54c9caf0ad4b691ed7ea90efb3f0068f0dfdf5173fb3dea0c64197d8a5879190825c8ec8ee0b7345d913eb84e157b7e41465af22a7e82c125c38691d6cea808c324bd9043517db"}}, {0x5b, &(0x7f0000001940)=@string={0x5b, 0x3, "04c13a14e77d9943ef8b7812cf60b1eb88ec5793fc0433a54b2ab86e6f5ccdc5336949bd94e29309bf343573249a3a0d56616f07b0ac6d7ec026ebc0813af421f09fa0a7c4e2c0ee637ea6c87cc0d5560759d93509f2a34aa2"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0xfb11e6d9d29faba}}, {0x5d, &(0x7f0000001a00)=@string={0x5d, 0x3, "dda20a03874d7e575bd9a189a54c2984b550e370b16ab7f68adf0cbb88076e95364331248bbdb9225c891ffab2a9cfa0db96213bfcc8e248d907471ec7a7eea607142a903fd8e1c063d7d56a4434818a58a81fb41b31fea61bfb9a"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x81d}}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'rose0\x00', 0x1000}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 43.889994048s ago: executing program 6 (id=898): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xffffff4c}]) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000040)={0x6, 0x280b}, 0x0) 42.93930864s ago: executing program 6 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4000000000f, 0xdfdf, 0x10013, 0x80, 0x9, 0x3, 0xcf, 0xfffffffffffffffd, 0x1, 0x7ffffffffffffffc, 0x1, 0x9, 0x9, 0x4, 0xfffffffffffffffd, 0xffffff7ffffffffe], 0x0, 0x1119c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x10003) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x104002, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x6, 0x110, 0x66, 0x0, 0xfc, 0x21, 0x0, @local, @loopback, {[@end, @noop]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x3, 0x7, "59b74f", 0x2, "a071bc"}, "9f9a3e7a57d474a2c009749443d429284bbd697ecb8f680b616d737380f54e6f3f501e4ad6d16fa0d0b1a0b3c271f1fe5da9e7d30442475743ddac762fb6248310e59a5430c85376a77b926d6a3b08eb3723d5b00a467d6038983e9243ae702050fd98ec83a4b6b6e8540a1b05629288bb70b15edaafa0d986ff6876c9fdfd05c65719a54ef5e99f70a8e5846b300ff73ae143afbaea8da6a54dacb3e97ce2f90b5358bd7d68f7df310d2d269a92fa34e64d0d9e4d75c7ecd9683e1e8fa949ab3580fb859062e5c189519cd8e91b07813a6e6edbb4d140c30c1acdc5006a778c6a6e051eca3c5dad"}}}}}, 0x0) 42.557699533s ago: executing program 6 (id=946): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000), 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) vmsplice(r0, &(0x7f0000000080), 0x1059, 0x2) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 42.469154072s ago: executing program 6 (id=948): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xd8, 0x9a, &(0x7f0000000040)="7aa5ec72b6926c1c31262fd87de57cc2c5491dc030795580b95d3ee4186b42fda1cda197623bad8353488a56cb4f74d8bf15706afd090cac2b14d616a49d4678235ea7d75412afa859ef2c6df9def61b92890eac2505bf0f49c77d56773c5bf43bbbe06d5c881ec93e9699f66496814a0ded2a11d42ed75f846be051ea32dd0db3e0e339ef2c1682af3d4705f3bdea63e25290d44a5cf3325a2190b5f11ad796613d99d15b8b6a30c8f8ffdc5bfb8548918f8226dfb6f70c9a1426b6ddf12e24e978bb7bf48adf170b169ef778487a8fd1b3d752d3252323", &(0x7f0000000140)=""/154, 0xfffffff2, 0x0, 0xb, 0xfd, &(0x7f0000000200)="16fc05cfc5bde2be01d249", &(0x7f0000000240)="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", 0x6, 0x0, 0x4}, 0x50) 42.329275668s ago: executing program 6 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x80, 0x90, 0x1, 0x5, {{0x33, 0x4, 0x3, 0x3c, 0xcc, 0x68, 0x0, 0x80, 0x29, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x24, 0xc0, 0x0, 0x0, [0x8, 0x10001, 0x10000, 0x1, 0x9, 0xa071, 0x2, 0x100]}, @ra={0x94, 0x4}, @generic={0x44, 0x11, "b2e69dde2c9aad59c7532543a7b944"}, @timestamp_prespec={0x44, 0x2c, 0x16, 0x3, 0x8, [{@multicast2, 0x4}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@remote, 0x2}, {@broadcast, 0x6}]}, @timestamp={0x44, 0x8, 0x2f, 0x0, 0x8, [0x2]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x8, [0x0, 0x4, 0x81, 0x3, 0xc, 0xffffffff, 0x4]}, @rr={0x7, 0x2b, 0x2a, [@rand_addr=0x64010102, @private=0xa010102, @loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @rand_addr=0x64010102, @loopback, @remote]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r7, 0x4068aea3, &(0x7f0000000240)={0xce, 0x0, r7}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r8, 0x20, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) ioctl$int_in(r2, 0x5452, &(0x7f0000000340)=0x9) 41.999990635s ago: executing program 6 (id=960): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f3f000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x5051}}, 0x18) 41.917621878s ago: executing program 35 (id=960): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f3f000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x5051}}, 0x18) 2.209649414s ago: executing program 7 (id=1661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0x10}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) listen(r0, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r2, 0xd) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.209151296s ago: executing program 7 (id=1662): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.099475661s ago: executing program 7 (id=1663): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000380)={r3, 0x1, 0x2000, 0x10000}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/175, 0xaf}, {0x0}], 0x2, 0xffff, 0x2) 2.084835559s ago: executing program 1 (id=1665): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x140f, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x102}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x140f, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x102}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280)=0x6) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280)=0x6) r1 = creat(&(0x7f0000000580)='./file0\x00', 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) accept4(r3, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x4000000000000) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) file_getattr(r1, 0x0, &(0x7f0000000040), 0x18, 0x1000) lseek(r0, 0x1, 0x0) 2.026400145s ago: executing program 7 (id=1667): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x24804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.947355484s ago: executing program 1 (id=1668): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0x1205, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1.944714431s ago: executing program 7 (id=1670): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0f0000202500100028bd7000fbdbdf2502000000"], 0x14}}, 0x24000050) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250300000008000500ac1414bb08000100", @ANYRES32=0x0, @ANYBLOB="00000000e2b6360f507b6f4c9f106635640d9e3b2121de58d77bd5c2589e49535435e0e70f2462d395f1e4faa402295181a9f1af5199cf2b33eb6fffd4ce925ceeec7c364e57484e5d51a6c6787ff2438f04e2ea03fda0bd1300b7bbfca9398e2596", @ANYRES32, @ANYBLOB="08000200010000000800040064010102"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.943978405s ago: executing program 7 (id=1672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000001700)="b0cdcb35d43574693501b1d0fb1c134ab6bcb79a06deeb2ebdeb270af542d4450f2186e806a1bac1280ece2ac3c07dc246d9455d64d08cc65ff500dc6c0bb2ac61de58cb92e4939562c58aa06c4c", 0x4e, 0x448d1, &(0x7f0000001680)={0xa, 0x4e23, 0x1ff, @empty, 0x4}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837", 0x4c}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c1", 0x27}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001640)={0x0, 0x3, 0x6, 0xbf}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x7d07, 0x0, 0x3, 0xeb}) 1.829699797s ago: executing program 5 (id=1673): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x102) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) file_getattr(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, 0x100) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x541e, &(0x7f0000000040)) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1.759720268s ago: executing program 5 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xfffffffd}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x5ebc1a019df56e10}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0xc8d1}, 0x24000840) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0xfffffffffffffffc, 0x10000) close(r4) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) accept4(r5, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9", @ANYRES8], 0x16) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) (async) gettid() (async) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xfffffffd}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x5ebc1a019df56e10}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0xc8d1}, 0x24000840) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0xfffffffffffffffc, 0x10000) (async) close(r4) (async) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r5, 0x90004) (async) accept4(r5, 0x0, 0x0, 0x800) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9", @ANYRES8], 0x16) (async) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) (async) 1.649773845s ago: executing program 5 (id=1675): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.644185211s ago: executing program 5 (id=1676): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_b, @random="8d87125b429d", {0x9, 0x6}}, @void, @val={0x1, 0x3, [{0x2}, {0x36}, {0x18}]}, @val={0x3, 0x1, 0x12}, @void, @void, [{0xdd, 0x21, "ac2fc05f4254542c2a35439e12fd5cb5443638415f51a2675d3150c8681a235405"}, {0xdd, 0x87, "42cfad4f61ba4f7262ba6603e2874d307d91ecf325c6eb3898100e8825141d5cd1ef1ee7ba4bc255550b9adb220b9a903c8061849c0de993e46162452dbbb9722190469c1b847e2dde7d3f62feedf8ee4c51c8fd4211cd0d3e91c4a8b506327ca4ee8771ecc6ff627b0c303cb113ea0501e0ac0baa104bac4bd895e3863689b0434ec5372dfb74"}]}, 0xcc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @broadcast, @random="a4f9aace5629", {0x7, 0x6}}, 0x0, 0x0, 0x18, @void, [{0xdd, 0x8e, "2761826e36f4241a183d910ea2b1a2917125c2827d0b34ff48b0ed560f6fed9bcfbded52918e0df537ce23a3d71dad4832892b5b539fefaa7f67743fd7ee72027a9d2c256d4a0ca53f2a490224dc6c7d8c0fa02d6ef9b8b7e3468a5a3d757580324b078c07280d09d0b03817d29b0aa7d0996be77fe3d6bbc7adaf411b23c65c2d2242e7527405bdc11f82f62b04"}, {0xdd, 0x60, "ea9fdcbd7b1c4f958953e87f026d1423a6bdb1f3aec15b3f3e8d81ae7b855c775a83eeed2e84d94389ac11be1202b5ca8f66c1cdec66608a91344cdb8131a4ba5381f2142022f84c3029a4c6180c194c7ca57f83a835a357d575571d623ecfac"}, {0xdd, 0xb5, "173aa0ebc493055c4680e6e7b72f9881de4e38e52ccc9b5351df3159f80bdcf348d07fdf00cdcb98bc90d7f72b5b9aa6fa47a9e23f161a5ca2f431d5c6fc9a977d5c5bbf0a77c26002279386c661c7d292f8b2bc338cfbcf69809aa2c3d9df80799a7442e9dd3d475fd920a2b5cd6ff2cfd656ea07abaea47d917a5c7f698dd73a5789c7584312f27ed67e92f40016fdd373099ca60046bf4fa348da7989f43106392e507f16758d9006277e80a4271f3d42172a38"}, {0xdd, 0x6e, "4bc43029ce95c74df78fc946d96d1c0bc11079725565a6d5b7ea7195a750c73dd667c808e7473455493ed82c60ed0d407d1833448fc055629e1fca3244f97c0139a99f42a3fdbff344bad631172b8c9069df74c453d87e11dd815cf36176b26045d3d6cc12bdf013ec8e2742eae0"}, {0xdd, 0xe, "fd40169400c4ff9ccce49857d093"}]}, 0x247) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffeffff, 0x50}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "66484cc1967ce6e9102b1fb01c205b699cc31d89031b3f1e"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9619f6f9fb70c283ab29c0456274d522ce7605999af61184"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2d41f2dbf7ba2a2fb6a16f2d81fbfc531c880755a346353"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed621e4a33a8e616b5b551a5b24640f346b404397cc20857"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1217}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc5b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008081) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) mount(&(0x7f00000007c0)=@md0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='erofs\x00', 0x2000010, &(0x7f0000000880)='#\x00') sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x894}, 0x40040) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) getgroups(0x1, &(0x7f0000000bc0)=[0xee01]) lchown(&(0x7f0000000b40)='./file0\x00', r6, r8) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x128, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xc64f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2c19}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc4}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x101}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) r10 = openat(0xffffffffffffffff, &(0x7f0000000f40)='./file0\x00', 0x40, 0xb4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r11, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe2c8, 0x7b}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x45}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x4048841) statx(r10, &(0x7f00000010c0)='./file0\x00', 0x4000, 0x20, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000001200)=[r7, r12, r7]) syz_80211_inject_frame(&(0x7f0000001240)=@broadcast, &(0x7f0000001280)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @random="27f3df3e5db7", {0x8}, "", @value={0x4, 0x1, 0x0, 0x1, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x8a, "49657415a729dba38e6c20c3d78fc1d15af0b92f63073963941e9503c77639301f883f808e058091f6aa5b8e8fe51227da3c3130aa06f729e2dd97855844d41af13b753f5209130944d49504bcb5421074caaacb359d9732dfa6a51030b2df761ad005abfeb2eab2c6d3004deebf7e34ceb4b4c03e634ff37430cd50911c098ea3d984860a7bd903ed28"}, {@broadcast, @broadcast, 0x8f, "2bd418360548c856b1f83e6c7ea21fc63f4d112d8ce5ca99da0a0ebb6dda19275ff3428b95aa267a623fe2c85a82d03d98ab5373c864375ffced74205d89c14e27d1cb61f2b17925f8c51e65de6e0d62bfcbe4d2113511dc203d0f488d5c930424681beadf3831e7cf7fe551ce3d6197df4bd87631b8ebb0fcd14e75c2b4a9c177f18e03e8c3867d95d891f2ef8711"}, {@device_a, @device_b, 0x59, "e0ed3623587d7ee41ec489227d395184d26a1870e95edb7fd44c281ef5532f87a02e611eafbec7a16e67502897894b1ff4f2ee94d3a2e048eeb9323a5a81bbb95f7353ccdda68c8e126fec5d5fecca42ec72034ed0dd0c1555"}, {@broadcast, @broadcast, 0xc9, "9d1de2ba7a34ceafda0d6bcb435ca42297a0f0afb64d6a9fc5aac8e6ce23f3ebb237049abfbd286ce623e8e5bf50cf37ec6a408e5c062354ebbb1f95de6b95115bffb6105171fbacc6bd544f74903210f54a2594083cd61f67b62e7ad8e6ca678a3c9a92ed4ed7c14d68739a5779073f25a25178004612ee70e9a78d6c9808a92efacd1c51f16a64207a3083b062df0654959554ebe20bba0d25421137d832375afe1a2424476d9197ee8ac325da8771bd2c08412a3bcded63f3425481ef4318e5fc41a1d697dc3e19"}, {@device_b, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x26, "2c436174dc7b31df256616cb8e29d4f237c8bf81405d409ac5779f4d3e8e50519389e7acf847"}, {@device_b, @device_b, 0xfa, "a99ec83cf076ea6b88ad62f6cd11867434dbb0b95c97723a781a1d67af041769e8418bf927201fddffa76f72d18a88a76364f2c11bd500e31c908ddb3e58f6e2b167ce7e30db4cde4fd8b93d5704a219577ff93dc147e5a26c9ebaf1858fab3d3ad81cb57de77b7f590df34d706347f6ae636313458427c1abb1a1f86ffcc434a58fc02522609a8068f9531d777efe34149269dbd90c947a8184b7edd4e9caa3fd05ab4367581d59192e6160d024fe1359a548e131b203f88f634990028c0020ac7033b35b9542a8851b5e76f3ecec8c469a7f96756aa340654f907742bccdb05310a68234efece049b0c94a6cf993c32781753aff256d01a952"}, {@device_b, @device_a, 0x90, "e0c03e6ad4a73a1ac79466c92123daac1aa2a951fb37eca70cf8483291a214e37e647ef1c7b13b47c1537759abbcaff51217b6b4a58b4fff9ee5f35fec7d724c863748784dbffc2deb23cef15fa60e5bd7672bcdc0ca706fd934baff00efb3213aaad3c5270075311ebd4140670c9183d1162050d95e752b04825c81d970210d9ab35858ca7094cd6411aaca176a3c6a"}]}, 0x1482) read(r0, &(0x7f0000002740)=""/185, 0xb9) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000002a80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a40)={&(0x7f0000002840)={0x1d8, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffff90d, 0x70}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x12, 0x5b, "350291d53c6360892a6ee9aa32c3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}, @NL80211_ATTR_FRAME_MATCH={0x5f, 0x5b, "29e245dd797e87c85d6633bd2c1838c4258486079d1090b6d3cfc739cdbc2e558006f40ab0415bda61e11cf5cd013a966f86837f8497e76c96d75fa71611a8ecb957ab4a007f95080429cbf4abfaa9b4fd174a19e54694b181a237"}, @NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "de1a2eac3009f3f57fccf2e894a6f1f5d9e0a4309abd979125993a36784e5bc209c51e497e2ea55ac5b7f789ff765eff37450da5e83c570655b49329e77df822065282ee1fe3e2854a"}, @NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "a1691251e78cc62cb50d0222d072c395e959259b056eadc22ed72be696700a96a31a4b1c6ac805a7c778d6881061d7a95a715459cdbd9b40585f221f8354ee1daa118dcc78fc787dc9af1aa2b1a578e216ebbb639396c348d4d3919e42d62f9783aa587fdc9feb8972b0724d39bdf8f9038f592e42b7d7241c9cf0ea137ad6d1fed1012bf757"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x3b, 0x5b, "9a001d7afc64164966f780e0fd766509161231b77f7202deb4b0999a79169fe59f1c093dadf57fbba60acf50c4ba01e01962b87ad8d28c"}]}, 0x1d8}}, 0x40000) fchmodat(r10, &(0x7f0000002ac0)='./file0\x00', 0x5) sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x5c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000c091) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000002c40)={0xa, 0x2, 0xf, 0x6, 0x5, 0xb, 0x35, 0xa, 0x7, 0x40, 0x98, 0x5, 0x6}, 0xe) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000002f40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d00)={0x1e0, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_REG_RULES={0x1b0, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3b10}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5233}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x47}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x580}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf691}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20040805}, 0x4080) 1.07612862s ago: executing program 1 (id=1678): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'das16m1\x00', [0x100, 0x9, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x2, 0x8, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x10005, 0x10006, 0x8, 0xa, 0x9, 0xbfbffff9, 0x1000, 0x7f, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0x7, 0x8]}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x5c, 0x0, 0x2, 0x2}) 1.073995093s ago: executing program 1 (id=1680): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}, @TCA_CAKE_MPU={0x8, 0xe, 0x3a}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0xfffffffd}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x6}]}}]}, 0x64}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r4) exit(0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000400), 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) 268.204426ms ago: executing program 3 (id=1691): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0xf, 0x7, 0x9, 0x9764, 0x7fffffff, {0x0, @in={{0x2, 0x4e24, @local}}, 0x8000, 0xb05, 0x0, 0x7, 0x10}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r1, 0xc}, &(0x7f0000000200)=0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x400541, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0x3, 0x9, 0x5, 0x8, 0x0, 0x4, 0x2, 0x2, r2}, &(0x7f00000002c0)=0x20) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000300)={0xcea49ee3a1ed598e, 0x1000}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x1, 0x5, 0x3, 0x2, 0x91, 0x912f, 0x9}, 0x9c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r5, 0x4000, r7}, 0x18) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f00000005c0)=0x1, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x80c, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2c}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x810}, 0x4080) write$binfmt_script(r6, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}, {0x20, 'sh\x00'}, {0x20, 'IPVS\x00'}, {0x20, 'l)'}, {0x20, '!^[$^#*]-&&'}, {0x20, '[5,/1$:@#-.\xb3\xdf%_%['}, {0x20, '}'}, {}, {0x20, '/dev/sr0\x00'}], 0xa, "710169ef08aab464a96695055d8add20952808eee4ec1e3db2ac5e431e41758ae849af0f71a476b1954480bcfa870d0811868dcfc03e9b1ea16443e2a2db0be0bed35257309d442687733b1aadf451409486e27fe26ea392a28341ed5382ab"}, 0xac) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r4, 0xc0106440, &(0x7f0000000a00)={0x0, 0x9, &(0x7f0000000980)}) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000a40), 0x4) write(r4, &(0x7f0000000a80)="c1b411b8fcb744fd617adb180a74aa466f8fa498007f9e713ab1b30705f68f434c1e376113d96299cd222731d6df106da696b257694b28fb9488b3f3a50327ba90c3789f98c2f4a12ba8a76df479b6b0226ae969aa01fc3da0b4c373f21285b58d0144d1b40830591ca2258b91c0225561e5f51e79430febd618c990733963604a2eedc32d", 0x85) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece) write(r0, &(0x7f0000000b40)="cbcfdab992142a7f03ae1b49a64589325e2a8402343bff622eaa46a0468659234b0567acb04fb23a18c71482605eb590c336a88d6c71840489c739a4263674339770a5262ba29ea1ffaf14dd117b92fb076b942556e611672a846ff77ab5f2dd62c2e9da9933971f1c891fa4a872eb00901df6be48daca548c58022e304cd95fca153ac3fdf3dc2db9e8ea8bfaee6fe90d9eda0bc21105516c7113d65e4f7c59147255d8390a4c8d5517fb40891f94d3996c18921e22b6140e26aa470ddb51908518d716a65b81c4f7754813f2367db0bc19a11626dbec9053ff977e9c6e27d722f624e9a5facfa15295", 0xea) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r12, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000044) socket$inet_tcp(0x2, 0x1, 0x0) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000d80), 0x84101, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008030}, 0x4000) 267.721614ms ago: executing program 5 (id=1692): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000140)='\x00', 0x240, &(0x7f0000000180)={@_ha_fsid={[0x9, 0xd1]}, {0x9b61, 0xf, 0x656, 0x4}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc0000001a00010029bd7000fcdbdf251c302006fd00ff08000400000800010000000c"], 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 265.259028ms ago: executing program 3 (id=1693): setreuid(0xee01, 0xffffffffffffffff) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 199.885185ms ago: executing program 5 (id=1694): r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000002c00)=""/4082, 0xff2, 0x7fffffff) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_dump={0x40, 0x10001, 0x400, 0x4a, "5561f833d3672f1351a61beab68beda7f1bf81bf91c3b408d54fd896700f588a4cbc3dccf908b9d84ddb57cf3537029ea246f76cfb381d7beeea5fe3f4c6581b884174666c9f0432bf3a"}}) (rerun: 64) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 197.471415ms ago: executing program 3 (id=1695): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x3000000000000) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000700000800000000fcdbdf2500000019", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800120003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 195.476832ms ago: executing program 1 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x2, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c854}, 0x40) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x30, 0x0, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89, 0x0, '\x00', [@pad1]}, @dstopts={0x84, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x65, 0x1ff, [0x1]}}]}]}}}}}, 0x0) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r7, r8, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@sg0, r7, &(0x7f0000000080)={0x81, 0xfffffffffffffe00, 0x1, 0x9}) read(r0, &(0x7f0000000400), 0x100) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/usb/usbmon/1s\x00', 0x0, 0x0) read(r9, &(0x7f0000000600), 0x100) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r10, 0x5608) 3.044713ms ago: executing program 1 (id=1697): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x1000040, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', 0x80000) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1.462786ms ago: executing program 3 (id=1698): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="120980ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) 616.749µs ago: executing program 3 (id=1699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x71, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0xa37f0f0492d077cf, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) 0s ago: executing program 3 (id=1700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000300)={&(0x7f0000001000)='\x00'/4096, 0x1000, 0x9, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {0x0, 0x200000, 0x400}}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x30000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000280)={"71a97eb01c70f5df95593a5f04c0785c1f74298a575efb83c0ba13e1e4db7a72", 0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000e19000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x2248f000) (async) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x40000003, 0x1}}], 0x18}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005200)={0x2020}, 0x2020) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000400)={0x1c, 0x40, 0x0, 'queue0\x00', 0xffbffffc}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000180)={0x0, 0x8, 0x6, {0x7e, 0x7}, 0x10000, 0xe}) (async) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000dda000/0x4000)=nil, 0x4000}, 0x2}) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1c, 0x2) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028018000800060000000800030000000000080006000001000005000d000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x7}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x2c, 0x9, 0x2, 0x39, 0x200, 0x8001, 0x7, 0x5, 0x3, 0x1, 0x8000, 0x2, 0x4, 0xf24, 0xff85, 0x2], 0x8080000, 0x100510}) (async) mmap$xdp(&(0x7f0000ddb000/0x3000)=nil, 0x3000, 0x8, 0x50, 0xffffffffffffffff, 0x180000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 00][ T42] audit: type=1400 audit(1786008603.264:7334): avc: denied { write } for pid=10113 comm="syz.3.1148" name="work" dev="jffs2" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.210488][ T42] audit: type=1400 audit(1786008603.264:7335): avc: denied { write } for pid=10113 comm="syz.3.1148" name="file2" dev="jffs2" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.234329][T10127] jffs2: notice: (10127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 46 of xdatum (0 unchecked, 45 orphan) and 98 of xref (9 dead, 88 orphan) found. [ 127.243939][T10132] FAULT_INJECTION: forcing a failure. [ 127.243939][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 127.247848][T10132] CPU: 3 UID: 0 PID: 10132 Comm: syz.1.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.247865][T10132] Tainted: [L]=SOFTLOCKUP [ 127.247869][T10132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.247875][T10132] Call Trace: [ 127.247880][T10132] [ 127.247884][T10132] dump_stack_lvl+0x100/0x190 [ 127.247907][T10132] should_fail_ex.cold+0x5/0xa [ 127.247922][T10132] should_failslab+0xc2/0x120 [ 127.247938][T10132] __kmalloc_noprof+0xfc/0x820 [ 127.247950][T10132] ? rcu_is_watching+0x12/0xc0 [ 127.247967][T10132] ? tomoyo_realpath_from_path+0xb6/0x690 [ 127.247982][T10132] tomoyo_realpath_from_path+0xb6/0x690 [ 127.247997][T10132] tomoyo_mount_acl+0x1b6/0x8b0 [ 127.248013][T10132] ? is_bpf_text_address+0x8a/0x1a0 [ 127.248028][T10132] ? bpf_ksym_find+0x128/0x1c0 [ 127.248044][T10132] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 127.248058][T10132] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 127.248074][T10132] ? kernel_text_address+0x8d/0x100 [ 127.248087][T10132] ? unwind_get_return_address+0x59/0xa0 [ 127.248112][T10132] ? tomoyo_domain+0xb2/0x150 [ 127.248123][T10132] ? tomoyo_profile+0x47/0x60 [ 127.248137][T10132] tomoyo_mount_permission+0x214/0x460 [ 127.248154][T10132] ? tomoyo_mount_permission+0x1f6/0x460 [ 127.248171][T10132] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 127.248196][T10132] security_sb_mount+0xdd/0x270 [ 127.248213][T10132] path_mount+0x158/0x23d0 [ 127.248230][T10132] ? __pfx_path_mount+0x10/0x10 [ 127.248242][T10132] ? lockdep_hardirqs_on+0x78/0x100 [ 127.248258][T10132] ? putname+0xb1/0x110 [ 127.248270][T10132] ? kmem_cache_free+0x127/0x6b0 [ 127.248285][T10132] ? __x64_sys_mount+0x293/0x310 [ 127.248298][T10132] __x64_sys_mount+0x293/0x310 [ 127.248311][T10132] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.248329][T10132] do_syscall_64+0x115/0x870 [ 127.248342][T10132] ? clear_bhb_loop+0x40/0x90 [ 127.248356][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.248367][T10132] RIP: 0033:0x7f1235f9e0d9 [ 127.248377][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.248387][T10132] RSP: 002b:00007f1236dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.248399][T10132] RAX: ffffffffffffffda RBX: 00007f1236225fa0 RCX: 00007f1235f9e0d9 [ 127.248405][T10132] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 127.248411][T10132] RBP: 00007f1236dd7090 R08: 0000200000000380 R09: 0000000000000000 [ 127.248417][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.248424][T10132] R13: 00007f1236226038 R14: 00007f1236225fa0 R15: 00007ffcd390ec58 [ 127.248437][T10132] [ 127.248441][T10132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.519916][T10159] jffs2: notice: (10159) jffs2_build_xattr_subsystem: complete building xattr subsystem, 46 of xdatum (0 unchecked, 45 orphan) and 99 of xref (9 dead, 88 orphan) found. [ 127.682561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.846464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.164786][ T5737] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.164804][ T5095] Bluetooth: hci5: command 0x1003 tx timeout [ 128.171794][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.256417][T10169] jffs2: notice: (10169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 46 of xdatum (0 unchecked, 45 orphan) and 99 of xref (9 dead, 88 orphan) found. [ 128.275592][T10169] overlayfs: upper fs does not support tmpfile. [ 128.278456][T10169] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.304318][T10180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10180 comm=syz.1.1165 [ 128.324621][T10185] FAULT_INJECTION: forcing a failure. [ 128.324621][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 128.328829][T10185] CPU: 0 UID: 0 PID: 10185 Comm: syz.3.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.328848][T10185] Tainted: [L]=SOFTLOCKUP [ 128.328851][T10185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.328858][T10185] Call Trace: [ 128.328862][T10185] [ 128.328866][T10185] dump_stack_lvl+0x100/0x190 [ 128.328886][T10185] should_fail_ex.cold+0x5/0xa [ 128.328901][T10185] should_failslab+0xc2/0x120 [ 128.328916][T10185] __kmalloc_noprof+0xfc/0x820 [ 128.328929][T10185] ? tomoyo_encode2+0xfb/0x3c0 [ 128.328944][T10185] tomoyo_encode2+0xfb/0x3c0 [ 128.328962][T10185] tomoyo_encode+0x29/0x50 [ 128.328972][T10185] tomoyo_realpath_from_path+0x18c/0x690 [ 128.328986][T10185] tomoyo_mount_acl+0x1b6/0x8b0 [ 128.329002][T10185] ? is_bpf_text_address+0x8a/0x1a0 [ 128.329017][T10185] ? bpf_ksym_find+0x128/0x1c0 [ 128.329033][T10185] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.329047][T10185] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 128.329063][T10185] ? kernel_text_address+0x8d/0x100 [ 128.329077][T10185] ? unwind_get_return_address+0x59/0xa0 [ 128.329100][T10185] ? tomoyo_domain+0xb2/0x150 [ 128.329112][T10185] ? tomoyo_profile+0x47/0x60 [ 128.329126][T10185] tomoyo_mount_permission+0x214/0x460 [ 128.329142][T10185] ? tomoyo_mount_permission+0x1f6/0x460 [ 128.329159][T10185] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 128.329184][T10185] security_sb_mount+0xdd/0x270 [ 128.329200][T10185] path_mount+0x158/0x23d0 [ 128.329217][T10185] ? __pfx_path_mount+0x10/0x10 [ 128.329229][T10185] ? lockdep_hardirqs_on+0x78/0x100 [ 128.329245][T10185] ? putname+0xb1/0x110 [ 128.329256][T10185] ? kmem_cache_free+0x127/0x6b0 [ 128.329271][T10185] ? __x64_sys_mount+0x293/0x310 [ 128.329283][T10185] __x64_sys_mount+0x293/0x310 [ 128.329297][T10185] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.329315][T10185] do_syscall_64+0x115/0x870 [ 128.329328][T10185] ? clear_bhb_loop+0x40/0x90 [ 128.329341][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.329352][T10185] RIP: 0033:0x7f92a019e0d9 [ 128.329362][T10185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.329372][T10185] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.329384][T10185] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 128.329399][T10185] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 128.329406][T10185] RBP: 00007f92a10d6090 R08: 0000200000000380 R09: 0000000000000000 [ 128.329412][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.329418][T10185] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 128.329432][T10185] [ 128.329442][T10185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.455028][T10194] syz.7.1169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.476758][T10194] netlink: 'syz.7.1169': attribute type 10 has an invalid length. [ 128.480188][T10195] netlink: 'syz.7.1169': attribute type 10 has an invalid length. [ 128.481710][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.486744][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.498425][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.501623][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.504746][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.507648][T10194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.516525][T10194] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.520230][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.523336][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.642094][T10208] netlink: 'syz.5.1174': attribute type 2 has an invalid length. [ 128.643316][T10210] fuse: Unknown parameter './file0' [ 128.649839][T10208] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1174'. [ 128.659206][T10213] program syz.1.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.718593][ T1136] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 128.723081][T10222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'. [ 128.724458][ T1136] ata1.00: irq_stat 0x40000000 [ 128.735139][ T1136] ata1.00: failed command: ZAC MANAGEMENT OUT [ 128.739558][T10220] jffs2: notice: (10220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 50 of xdatum (1 unchecked, 49 orphan) and 110 of xref (10 dead, 98 orphan) found. [ 128.745882][ T1136] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 13 [ 128.745882][ T1136] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 128.757322][ T1136] ata1.00: status: { DRDY ERR } [ 128.759162][ T1136] ata1.00: error: { ABRT } [ 128.763205][ T1136] ata1.00: device reported invalid CHS sector 0 [ 128.770152][T10220] overlayfs: upper fs does not support tmpfile. [ 128.774317][T10228] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.775487][T10220] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.839559][T10230] jffs2: notice: (10230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 54 of xdatum (0 unchecked, 54 orphan) and 119 of xref (11 dead, 108 orphan) found. [ 128.855585][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'. [ 128.860944][T10236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.865247][T10230] FAULT_INJECTION: forcing a failure. [ 128.865247][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 128.865323][T10213] nbd: device at index 64 is going down [ 128.884608][T10230] CPU: 2 UID: 0 PID: 10230 Comm: syz.5.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.884630][T10230] Tainted: [L]=SOFTLOCKUP [ 128.884654][T10230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.884662][T10230] Call Trace: [ 128.884667][T10230] [ 128.884672][T10230] dump_stack_lvl+0x100/0x190 [ 128.884692][T10230] should_fail_ex.cold+0x5/0xa [ 128.884707][T10230] should_failslab+0xc2/0x120 [ 128.884723][T10230] __kmalloc_noprof+0xfc/0x820 [ 128.884736][T10230] ? tomoyo_encode2+0xfb/0x3c0 [ 128.884750][T10230] tomoyo_encode2+0xfb/0x3c0 [ 128.884762][T10230] tomoyo_encode+0x29/0x50 [ 128.884772][T10230] tomoyo_realpath_from_path+0x18c/0x690 [ 128.884786][T10230] tomoyo_mount_acl+0x1b6/0x8b0 [ 128.884803][T10230] ? is_bpf_text_address+0x8a/0x1a0 [ 128.884818][T10230] ? bpf_ksym_find+0x128/0x1c0 [ 128.884834][T10230] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.884849][T10230] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 128.884864][T10230] ? kernel_text_address+0x8d/0x100 [ 128.884895][T10230] ? unwind_get_return_address+0x59/0xa0 [ 128.884919][T10230] ? tomoyo_domain+0xb2/0x150 [ 128.884932][T10230] ? tomoyo_profile+0x47/0x60 [ 128.884945][T10230] tomoyo_mount_permission+0x214/0x460 [ 128.884962][T10230] ? tomoyo_mount_permission+0x1f6/0x460 [ 128.884979][T10230] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 128.885004][T10230] security_sb_mount+0xdd/0x270 [ 128.885021][T10230] path_mount+0x158/0x23d0 [ 128.885038][T10230] ? __pfx_path_mount+0x10/0x10 [ 128.885050][T10230] ? lockdep_hardirqs_on+0x78/0x100 [ 128.885089][T10230] ? putname+0xb1/0x110 [ 128.885106][T10230] ? kmem_cache_free+0x127/0x6b0 [ 128.885121][T10230] ? __x64_sys_mount+0x293/0x310 [ 128.885134][T10230] __x64_sys_mount+0x293/0x310 [ 128.885148][T10230] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.885166][T10230] do_syscall_64+0x115/0x870 [ 128.885179][T10230] ? clear_bhb_loop+0x40/0x90 [ 128.885193][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.885203][T10230] RIP: 0033:0x7f3b7039e0d9 [ 128.885214][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.885224][T10230] RSP: 002b:00007f3b711c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.885235][T10230] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e0d9 [ 128.885242][T10230] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 128.885248][T10230] RBP: 00007f3b711c9090 R08: 0000200000000380 R09: 0000000000000000 [ 128.885254][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.885260][T10230] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007fffc7d874b8 [ 128.885274][T10230] [ 128.885318][T10230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.886433][T10233] netlink: 'syz.7.1182': attribute type 13 has an invalid length. [ 128.971661][ T6988] udevd[6988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 128.977501][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.983308][ T8917] udevd[8917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.020732][T10244] netlink: 'syz.7.1185': attribute type 4 has an invalid length. [ 129.023215][T10244] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1185'. [ 129.039324][T10244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10244 comm=syz.7.1185 [ 129.063191][T10244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=10244 comm=syz.7.1185 [ 129.071170][T10249] comedi: No check for data length of config insn id 8 is implemented [ 129.075382][T10249] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 129.079332][T10249] comedi: Assuming n=15 is correct [ 129.111850][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1187'. [ 129.129895][T10255] jffs2: notice: (10255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 55 of xdatum (0 unchecked, 54 orphan) and 121 of xref (11 dead, 108 orphan) found. [ 129.170074][T10255] overlayfs: upper fs does not support tmpfile. [ 129.172363][T10259] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 129.191805][T10255] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.243444][T10264] jffs2: notice: (10264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 60 of xdatum (0 unchecked, 60 orphan) and 130 of xref (12 dead, 118 orphan) found. [ 129.256357][T10264] FAULT_INJECTION: forcing a failure. [ 129.256357][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 129.268741][T10264] CPU: 2 UID: 0 PID: 10264 Comm: syz.5.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.268767][T10264] Tainted: [L]=SOFTLOCKUP [ 129.268772][T10264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.268782][T10264] Call Trace: [ 129.268788][T10264] [ 129.268794][T10264] dump_stack_lvl+0x100/0x190 [ 129.268821][T10264] should_fail_ex.cold+0x5/0xa [ 129.268841][T10264] should_failslab+0xc2/0x120 [ 129.268862][T10264] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.268884][T10264] ? find_held_lock+0x2b/0x80 [ 129.268897][T10264] ? alloc_fs_context+0x57/0xf40 [ 129.268921][T10264] alloc_fs_context+0x57/0xf40 [ 129.268941][T10264] ? __get_fs_type+0xe3/0x200 [ 129.268972][T10264] path_mount+0xdbd/0x23d0 [ 129.268996][T10264] ? __pfx_path_mount+0x10/0x10 [ 129.269015][T10264] ? lockdep_hardirqs_on+0x78/0x100 [ 129.269038][T10264] ? putname+0xb1/0x110 [ 129.269055][T10264] ? kmem_cache_free+0x127/0x6b0 [ 129.269078][T10264] ? __x64_sys_mount+0x293/0x310 [ 129.269097][T10264] __x64_sys_mount+0x293/0x310 [ 129.269118][T10264] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.269146][T10264] do_syscall_64+0x115/0x870 [ 129.269166][T10264] ? clear_bhb_loop+0x40/0x90 [ 129.269186][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.269202][T10264] RIP: 0033:0x7f3b7039e0d9 [ 129.269218][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.269235][T10264] RSP: 002b:00007f3b711c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.269254][T10264] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e0d9 [ 129.269267][T10264] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 129.269277][T10264] RBP: 00007f3b711c9090 R08: 0000200000000380 R09: 0000000000000000 [ 129.269288][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.269298][T10264] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007fffc7d874b8 [ 129.269322][T10264] [ 129.403148][T10272] fuse: Bad value for 'rootmode' [ 129.426871][ T50] IPVS: starting estimator thread 0... [ 129.457288][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.461029][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.478630][T10290] jffs2: notice: (10290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 61 of xdatum (0 unchecked, 60 orphan) and 132 of xref (12 dead, 118 orphan) found. [ 129.482957][T10292] xt_hashlimit: size too large, truncated to 1048576 [ 129.497249][T10290] overlayfs: upper fs does not support tmpfile. [ 129.502920][T10290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.523111][T10280] IPVS: using max 45 ests per chain, 108000 per kthread [ 129.547971][T10296] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 129.594080][T10300] jffs2: notice: (10300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 66 of xdatum (0 unchecked, 66 orphan) and 141 of xref (13 dead, 128 orphan) found. [ 129.603962][T10302] FAULT_INJECTION: forcing a failure. [ 129.603962][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 129.608676][T10302] CPU: 3 UID: 0 PID: 10302 Comm: syz.5.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.608695][T10302] Tainted: [L]=SOFTLOCKUP [ 129.608703][T10302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.608710][T10302] Call Trace: [ 129.608715][T10302] [ 129.608720][T10302] dump_stack_lvl+0x100/0x190 [ 129.608740][T10302] should_fail_ex.cold+0x5/0xa [ 129.608761][T10302] should_failslab+0xc2/0x120 [ 129.608783][T10302] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.608810][T10302] ? kasan_save_track+0x14/0x30 [ 129.608828][T10302] ? ovl_init_fs_context+0x52/0x630 [ 129.608865][T10302] ovl_init_fs_context+0x52/0x630 [ 129.608885][T10302] alloc_fs_context+0x60c/0xf40 [ 129.608911][T10302] path_mount+0xdbd/0x23d0 [ 129.608929][T10302] ? __pfx_path_mount+0x10/0x10 [ 129.608947][T10302] ? lockdep_hardirqs_on+0x78/0x100 [ 129.608971][T10302] ? putname+0xb1/0x110 [ 129.608989][T10302] ? kmem_cache_free+0x127/0x6b0 [ 129.609009][T10302] ? __x64_sys_mount+0x293/0x310 [ 129.609032][T10302] __x64_sys_mount+0x293/0x310 [ 129.609054][T10302] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.609082][T10302] do_syscall_64+0x115/0x870 [ 129.609101][T10302] ? clear_bhb_loop+0x40/0x90 [ 129.609122][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.609139][T10302] RIP: 0033:0x7f3b7039e0d9 [ 129.609152][T10302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.609165][T10302] RSP: 002b:00007f3b711c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.609182][T10302] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e0d9 [ 129.609192][T10302] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 129.609202][T10302] RBP: 00007f3b711c9090 R08: 0000200000000380 R09: 0000000000000000 [ 129.609212][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.609222][T10302] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007fffc7d874b8 [ 129.609245][T10302] [ 129.736984][T10308] netlink: 'syz.3.1203': attribute type 2 has an invalid length. [ 129.737000][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 129.825609][T10331] xt_hashlimit: size too large, truncated to 1048576 [ 129.862777][T10335] jffs2: notice: (10335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 67 of xdatum (0 unchecked, 66 orphan) and 145 of xref (13 dead, 128 orphan) found. [ 129.871115][T10337] FAULT_INJECTION: forcing a failure. [ 129.871115][T10337] name failslab, interval 1, probability 0, space 0, times 0 [ 129.876806][T10337] CPU: 0 UID: 0 PID: 10337 Comm: syz.1.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.876825][T10337] Tainted: [L]=SOFTLOCKUP [ 129.876829][T10337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.876837][T10337] Call Trace: [ 129.876841][T10337] [ 129.876846][T10337] dump_stack_lvl+0x100/0x190 [ 129.876867][T10337] should_fail_ex.cold+0x5/0xa [ 129.876882][T10337] should_failslab+0xc2/0x120 [ 129.876898][T10337] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.876917][T10337] ? kasan_save_track+0x14/0x30 [ 129.876931][T10337] ? ovl_init_fs_context+0x96/0x630 [ 129.876946][T10337] ovl_init_fs_context+0x96/0x630 [ 129.876964][T10337] alloc_fs_context+0x60c/0xf40 [ 129.876983][T10337] path_mount+0xdbd/0x23d0 [ 129.877000][T10337] ? __pfx_path_mount+0x10/0x10 [ 129.877014][T10337] ? lockdep_hardirqs_on+0x78/0x100 [ 129.877030][T10337] ? putname+0xb1/0x110 [ 129.877042][T10337] ? kmem_cache_free+0x127/0x6b0 [ 129.877058][T10337] ? __x64_sys_mount+0x293/0x310 [ 129.877071][T10337] __x64_sys_mount+0x293/0x310 [ 129.877086][T10337] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.877105][T10337] do_syscall_64+0x115/0x870 [ 129.877119][T10337] ? clear_bhb_loop+0x40/0x90 [ 129.877133][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.877148][T10337] RIP: 0033:0x7f1235f9e0d9 [ 129.877178][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.877195][T10337] RSP: 002b:00007f1236dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.877216][T10337] RAX: ffffffffffffffda RBX: 00007f1236225fa0 RCX: 00007f1235f9e0d9 [ 129.877228][T10337] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 129.877239][T10337] RBP: 00007f1236dd7090 R08: 0000200000000380 R09: 0000000000000000 [ 129.877252][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.877263][T10337] R13: 00007f1236226038 R14: 00007f1236225fa0 R15: 00007ffcd390ec58 [ 129.877288][T10337] [ 129.985343][T10347] netlink: 'syz.1.1215': attribute type 4 has an invalid length. [ 129.987786][T10347] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1215'. [ 129.992150][T10347] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1215'. [ 130.049474][T10355] jffs2: notice: (10355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 67 of xdatum (0 unchecked, 66 orphan) and 145 of xref (13 dead, 128 orphan) found. [ 130.056355][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1216'. [ 130.063447][T10355] overlayfs: upper fs does not support tmpfile. [ 130.066164][T10355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.080698][T10360] program syz.1.1219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.126601][T10368] batadv_slave_0: entered promiscuous mode [ 130.128947][T10368] batadv_slave_0: entered allmulticast mode [ 130.142238][T10370] jffs2: notice: (10370) jffs2_build_xattr_subsystem: complete building xattr subsystem, 71 of xdatum (0 unchecked, 71 orphan) and 152 of xref (14 dead, 138 orphan) found. [ 130.188839][T10374] netlink: 'syz.1.1223': attribute type 1 has an invalid length. [ 130.209000][T10374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.230331][T10374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.234039][T10374] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 130.237966][T10374] bond3: (slave gre2): Error -95 calling set_mac_address [ 130.244212][ T5816] net_ratelimit: 5 callbacks suppressed [ 130.244233][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.277567][T10381] gretap2: entered promiscuous mode [ 130.282366][T10381] bond3: (slave gretap2): making interface the new active one [ 130.285159][T10381] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 130.295088][T10381] macvlan2: entered promiscuous mode [ 130.296803][T10381] macvlan2: entered allmulticast mode [ 130.299093][T10381] bond3: entered promiscuous mode [ 130.304216][T10381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.308958][T10381] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 130.319461][T10381] bond3: left promiscuous mode [ 130.425233][T10384] jffs2: notice: (10384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 71 of xdatum (0 unchecked, 71 orphan) and 152 of xref (14 dead, 138 orphan) found. [ 130.435348][T10384] FAULT_INJECTION: forcing a failure. [ 130.435348][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 130.440153][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.1.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.440181][T10384] Tainted: [L]=SOFTLOCKUP [ 130.440187][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.440199][T10384] Call Trace: [ 130.440208][T10384] [ 130.440217][T10384] dump_stack_lvl+0x100/0x190 [ 130.440248][T10384] should_fail_ex.cold+0x5/0xa [ 130.440272][T10384] should_failslab+0xc2/0x120 [ 130.440297][T10384] __kmalloc_cache_noprof+0x91/0x6c0 [ 130.440326][T10384] ? kasan_save_track+0x14/0x30 [ 130.440347][T10384] ? ovl_init_fs_context+0x11f/0x630 [ 130.440371][T10384] ovl_init_fs_context+0x11f/0x630 [ 130.440394][T10384] alloc_fs_context+0x60c/0xf40 [ 130.440423][T10384] path_mount+0xdbd/0x23d0 [ 130.440451][T10384] ? __pfx_path_mount+0x10/0x10 [ 130.440473][T10384] ? lockdep_hardirqs_on+0x78/0x100 [ 130.440499][T10384] ? putname+0xb1/0x110 [ 130.440519][T10384] ? kmem_cache_free+0x127/0x6b0 [ 130.440545][T10384] ? __x64_sys_mount+0x293/0x310 [ 130.440567][T10384] __x64_sys_mount+0x293/0x310 [ 130.440591][T10384] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.440620][T10384] do_syscall_64+0x115/0x870 [ 130.440670][T10384] ? clear_bhb_loop+0x40/0x90 [ 130.440692][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.440710][T10384] RIP: 0033:0x7f1235f9e0d9 [ 130.440726][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.440741][T10384] RSP: 002b:00007f1236dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.440761][T10384] RAX: ffffffffffffffda RBX: 00007f1236225fa0 RCX: 00007f1235f9e0d9 [ 130.440772][T10384] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 130.440782][T10384] RBP: 00007f1236dd7090 R08: 0000200000000380 R09: 0000000000000000 [ 130.440793][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.440803][T10384] R13: 00007f1236226038 R14: 00007f1236225fa0 R15: 00007ffcd390ec58 [ 130.440828][T10384] [ 130.441546][ T5846] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 130.465102][T10352] genirq: Flags mismatch irq 4. 00200000 (comedi_parport) vs. 00200080 (ttyS0) [ 130.664905][ T5846] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.669222][ T5846] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.674217][ T5846] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.677759][ T5846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.686362][T10379] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.694078][ T5846] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.772232][T10404] jffs2: notice: (10404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 130.858925][T10411] jffs2: notice: (10411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 131.000250][T10437] jffs2: notice: (10437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 131.013398][T10437] FAULT_INJECTION: forcing a failure. [ 131.013398][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 131.018578][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.1.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.018606][T10437] Tainted: [L]=SOFTLOCKUP [ 131.018612][T10437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.018623][T10437] Call Trace: [ 131.018630][T10437] [ 131.018636][T10437] dump_stack_lvl+0x100/0x190 [ 131.018667][T10437] should_fail_ex.cold+0x5/0xa [ 131.018690][T10437] should_failslab+0xc2/0x120 [ 131.018713][T10437] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 131.018737][T10437] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 131.018765][T10437] kmemdup_nul+0x49/0xd0 [ 131.018786][T10437] vfs_parse_fs_qstr+0x112/0x1c0 [ 131.018810][T10437] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 131.018834][T10437] ? ovl_next_opt+0x143/0x1c0 [ 131.018861][T10437] ? __pfx_ovl_next_opt+0x10/0x10 [ 131.018884][T10437] vfs_parse_monolithic_sep+0x195/0x210 [ 131.018910][T10437] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 131.018934][T10437] ? alloc_fs_context+0x65a/0xf40 [ 131.018955][T10437] path_mount+0x77f/0x23d0 [ 131.018977][T10437] ? __pfx_path_mount+0x10/0x10 [ 131.018993][T10437] ? lockdep_hardirqs_on+0x78/0x100 [ 131.019014][T10437] ? putname+0xb1/0x110 [ 131.019029][T10437] ? kmem_cache_free+0x127/0x6b0 [ 131.019050][T10437] ? __x64_sys_mount+0x293/0x310 [ 131.019067][T10437] __x64_sys_mount+0x293/0x310 [ 131.019085][T10437] ? __pfx___x64_sys_mount+0x10/0x10 [ 131.019109][T10437] do_syscall_64+0x115/0x870 [ 131.019126][T10437] ? clear_bhb_loop+0x40/0x90 [ 131.019144][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.019160][T10437] RIP: 0033:0x7f1235f9e0d9 [ 131.019174][T10437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.019189][T10437] RSP: 002b:00007f1236dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.019206][T10437] RAX: ffffffffffffffda RBX: 00007f1236225fa0 RCX: 00007f1235f9e0d9 [ 131.019215][T10437] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 131.019224][T10437] RBP: 00007f1236dd7090 R08: 0000200000000380 R09: 0000000000000000 [ 131.019232][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.019241][T10437] R13: 00007f1236226038 R14: 00007f1236225fa0 R15: 00007ffcd390ec58 [ 131.019262][T10437] [ 131.146650][ T56] usb 10-1: USB disconnect, device number 4 [ 131.231882][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 131.231901][ T42] audit: type=1400 audit(1786008607.354:7435): avc: denied { write } for pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.291795][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.303947][ T42] audit: type=1400 audit(1786008607.424:7436): avc: denied { write } for pid=10472 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.417188][ T42] audit: type=1400 audit(1786008607.534:7437): avc: denied { write } for pid=10483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.499948][ T42] audit: type=1400 audit(1786008607.614:7438): avc: denied { write } for pid=10498 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.723096][ T1136] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 131.725481][ T1136] ata1: failed to read log page 10h (errno=-5) [ 131.727607][ T1136] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 131.730017][ T1136] ata1.00: irq_stat 0x40000000 [ 131.732222][ T1136] ata1.00: failed command: WRITE FPDMA QUEUED [ 131.734400][ T1136] ata1.00: cmd 61/18:70:f6:08:10/00:00:00:00:00/40 tag 14 ncq dma 12288 out [ 131.734400][ T1136] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 131.740066][ T1136] ata1.00: status: { DRDY } [ 131.749746][ T1136] ata1.00: configured for UDMA/100 [ 131.752581][ T1136] ata1: EH complete [ 131.874291][T10514] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.918380][T10517] jffs2: notice: (10517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 131.956121][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1240'. [ 132.001924][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.014034][T10523] jffs2: notice: (10523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 132.056136][T10526] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1242'. [ 132.110177][T10535] binder_alloc: 10534: binder_alloc_buf size 8 failed, no address space [ 132.114247][T10535] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 132.158029][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 132.209475][T10545] jffs2: notice: (10545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 71 orphan) and 154 of xref (14 dead, 138 orphan) found. [ 132.229189][ T42] audit: type=1400 audit(1786008608.344:7439): avc: denied { write } for pid=10546 comm="syz.7.1246" name="file0" dev="jffs2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.229653][T10548] overlayfs: upper fs does not support tmpfile. [ 132.243566][T10548] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.253805][ T42] audit: type=1400 audit(1786008608.344:7440): avc: denied { write } for pid=10546 comm="syz.7.1246" name="work" dev="jffs2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.276503][ T42] audit: type=1400 audit(1786008608.364:7441): avc: denied { write } for pid=10546 comm="syz.7.1246" name="work" dev="jffs2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.296968][ T42] audit: type=1400 audit(1786008608.364:7442): avc: denied { write } for pid=10546 comm="syz.7.1246" name="work" dev="jffs2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.317467][ T42] audit: type=1400 audit(1786008608.364:7443): avc: denied { write } for pid=10546 comm="syz.7.1246" name="work" dev="jffs2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.323717][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.333327][ T42] audit: type=1400 audit(1786008608.364:7444): avc: denied { write } for pid=10546 comm="syz.7.1246" name="work" dev="jffs2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.359376][T10555] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.368017][T10555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1249'. [ 132.376494][T10555] netlink: 'syz.1.1249': attribute type 11 has an invalid length. [ 132.382749][T10567] jffs2: notice: (10567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 77 of xdatum (0 unchecked, 77 orphan) and 163 of xref (15 dead, 148 orphan) found. [ 132.391191][T10567] overlayfs: failed to resolve './file2': -2 [ 132.681256][T10600] jffs2: notice: (10600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 77 of xdatum (0 unchecked, 77 orphan) and 163 of xref (15 dead, 148 orphan) found. [ 132.700892][T10603] FAULT_INJECTION: forcing a failure. [ 132.700892][T10603] name failslab, interval 1, probability 0, space 0, times 0 [ 132.702914][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 132.704853][T10603] CPU: 1 UID: 0 PID: 10603 Comm: syz.5.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.704871][T10603] Tainted: [L]=SOFTLOCKUP [ 132.704875][T10603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.704881][T10603] Call Trace: [ 132.704886][T10603] [ 132.704890][T10603] dump_stack_lvl+0x100/0x190 [ 132.704909][T10603] should_fail_ex.cold+0x5/0xa [ 132.704923][T10603] should_failslab+0xc2/0x120 [ 132.704938][T10603] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 132.704954][T10603] ? ovl_do_parse_layer+0x30/0x12b0 [ 132.704973][T10603] kstrdup+0x51/0xe0 [ 132.704985][T10603] ovl_do_parse_layer+0x30/0x12b0 [ 132.704999][T10603] ovl_parse_param+0x11d6/0x1600 [ 132.705010][T10603] ? selinux_fs_context_parse_param+0xd8/0x130 [ 132.705030][T10603] ? __pfx_ovl_parse_param+0x10/0x10 [ 132.705043][T10603] ? static_key_count+0x5a/0x70 [ 132.705057][T10603] ? __pfx_ovl_parse_param+0x10/0x10 [ 132.705066][T10603] vfs_parse_fs_param+0x200/0x3b0 [ 132.705095][T10603] vfs_parse_fs_qstr+0x138/0x1c0 [ 132.705112][T10603] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 132.705130][T10603] ? ovl_next_opt+0x143/0x1c0 [ 132.705147][T10603] ? __pfx_ovl_next_opt+0x10/0x10 [ 132.705163][T10603] vfs_parse_monolithic_sep+0x195/0x210 [ 132.705179][T10603] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 132.705194][T10603] ? alloc_fs_context+0x65a/0xf40 [ 132.705211][T10603] path_mount+0x77f/0x23d0 [ 132.705227][T10603] ? __pfx_path_mount+0x10/0x10 [ 132.705239][T10603] ? lockdep_hardirqs_on+0x78/0x100 [ 132.705256][T10603] ? putname+0xb1/0x110 [ 132.705267][T10603] ? kmem_cache_free+0x127/0x6b0 [ 132.705283][T10603] ? __x64_sys_mount+0x293/0x310 [ 132.705296][T10603] __x64_sys_mount+0x293/0x310 [ 132.705309][T10603] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.705327][T10603] do_syscall_64+0x115/0x870 [ 132.705340][T10603] ? clear_bhb_loop+0x40/0x90 [ 132.705354][T10603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.705365][T10603] RIP: 0033:0x7f3b7039e0d9 [ 132.705374][T10603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.705385][T10603] RSP: 002b:00007f3b711c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.705397][T10603] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e0d9 [ 132.705403][T10603] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 132.705410][T10603] RBP: 00007f3b711c9090 R08: 0000200000000380 R09: 0000000000000000 [ 132.705416][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.705422][T10603] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007fffc7d874b8 [ 132.705436][T10603] [ 132.755230][T10604] overlayfs: failed to resolve './file0': -2 [ 132.806424][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808310][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974746][T10611] jffs2: notice: (10611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 78 of xdatum (0 unchecked, 77 orphan) and 165 of xref (15 dead, 148 orphan) found. [ 132.982833][T10611] overlayfs: failed to resolve './file2': -2 [ 133.063397][T10621] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 133.068917][T10619] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 133.072783][T10619] bond1: entered allmulticast mode [ 133.168844][T10629] jffs2: notice: (10629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 78 of xdatum (0 unchecked, 77 orphan) and 165 of xref (15 dead, 148 orphan) found. [ 133.184557][T10629] overlayfs: upper fs does not support tmpfile. [ 133.188264][T10629] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.271717][T10585] ceph: No mds server is up or the cluster is laggy [ 133.276023][T10575] ceph: No mds server is up or the cluster is laggy [ 133.373797][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.459501][T10648] netlink: 'syz.5.1273': attribute type 10 has an invalid length. [ 133.471679][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.485312][T10648] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.500267][T10648] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 133.515845][T10648] bond0 (unregistering): Released all slaves [ 133.518095][T10649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 133.630649][T10660] netlink: 'syz.1.1276': attribute type 2 has an invalid length. [ 133.633838][T10660] netlink: 'syz.1.1276': attribute type 2 has an invalid length. [ 133.785783][T10682] Bluetooth: MGMT ver 1.23 [ 133.911659][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 133.940346][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10702 comm=syz.3.1289 [ 133.947151][T10702] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 133.979278][T10702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.989051][T10708] jffs2: notice: (10708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 83 of xdatum (0 unchecked, 83 orphan) and 174 of xref (16 dead, 158 orphan) found. [ 133.996882][T10702] bond4: (slave dummy0): making interface the new active one [ 134.001662][T10702] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 134.002870][T10708] FAULT_INJECTION: forcing a failure. [ 134.002870][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 134.007609][T10702] netlink: 'syz.3.1289': attribute type 10 has an invalid length. [ 134.016681][T10708] CPU: 2 UID: 0 PID: 10708 Comm: syz.1.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.016702][T10708] Tainted: [L]=SOFTLOCKUP [ 134.016706][T10708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.016713][T10708] Call Trace: [ 134.016717][T10708] [ 134.016722][T10708] dump_stack_lvl+0x100/0x190 [ 134.016742][T10708] should_fail_ex.cold+0x5/0xa [ 134.016757][T10708] should_failslab+0xc2/0x120 [ 134.016772][T10708] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 134.016788][T10708] ? ovl_parse_param+0x5c7/0x1600 [ 134.016802][T10708] kstrdup+0x51/0xe0 [ 134.016820][T10708] ovl_parse_param+0x5c7/0x1600 [ 134.016832][T10708] ? selinux_fs_context_parse_param+0xd8/0x130 [ 134.016853][T10708] ? __pfx_ovl_parse_param+0x10/0x10 [ 134.016866][T10708] ? static_key_count+0x5a/0x70 [ 134.016880][T10708] ? __pfx_ovl_parse_param+0x10/0x10 [ 134.016889][T10708] vfs_parse_fs_param+0x200/0x3b0 [ 134.016905][T10708] vfs_parse_fs_qstr+0x138/0x1c0 [ 134.016920][T10708] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 134.016939][T10708] ? ovl_next_opt+0x143/0x1c0 [ 134.016955][T10708] ? __pfx_ovl_next_opt+0x10/0x10 [ 134.016972][T10708] vfs_parse_monolithic_sep+0x195/0x210 [ 134.016988][T10708] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 134.017004][T10708] ? alloc_fs_context+0x65a/0xf40 [ 134.017020][T10708] path_mount+0x77f/0x23d0 [ 134.017037][T10708] ? __pfx_path_mount+0x10/0x10 [ 134.017050][T10708] ? lockdep_hardirqs_on+0x78/0x100 [ 134.017065][T10708] ? putname+0xb1/0x110 [ 134.017077][T10708] ? kmem_cache_free+0x127/0x6b0 [ 134.017092][T10708] ? __x64_sys_mount+0x293/0x310 [ 134.017105][T10708] __x64_sys_mount+0x293/0x310 [ 134.017119][T10708] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.017137][T10708] do_syscall_64+0x115/0x870 [ 134.017150][T10708] ? clear_bhb_loop+0x40/0x90 [ 134.017163][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.017175][T10708] RIP: 0033:0x7f1235f9e0d9 [ 134.017185][T10708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.017196][T10708] RSP: 002b:00007f1236dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.017208][T10708] RAX: ffffffffffffffda RBX: 00007f1236225fa0 RCX: 00007f1235f9e0d9 [ 134.017215][T10708] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 134.017221][T10708] RBP: 00007f1236dd7090 R08: 0000200000000380 R09: 0000000000000000 [ 134.017227][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.017233][T10708] R13: 00007f1236226038 R14: 00007f1236225fa0 R15: 00007ffcd390ec58 [ 134.017246][T10708] [ 134.017429][T10702] dummy0: entered promiscuous mode [ 134.028437][T10711] trusted_key: encrypted_key: keyword 'u' not recognized [ 134.061616][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 134.083343][T10702] bond4: (slave dummy0): Releasing active interface [ 134.094305][ T29] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 134.116588][ T5886] IPVS: starting estimator thread 0... [ 134.118238][ T29] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 134.125718][ T29] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 134.128744][ T29] usb 10-1: config 250 has no interface number 0 [ 134.130775][ T29] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 134.137728][ T29] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 134.144598][ T29] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.158728][ T29] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.169069][ T29] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 134.176760][ T29] usb 10-1: config 250 interface 228 has no altsetting 0 [ 134.183822][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 134.186746][ T29] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 134.191118][ T29] usb 10-1: Product: syz [ 134.192727][ T29] usb 10-1: SerialNumber: syz [ 134.199641][ T29] hub 10-1:250.228: bad descriptor, ignoring hub [ 134.204046][ T29] hub 10-1:250.228: probe with driver hub failed with error -5 [ 134.213191][T10715] IPVS: using max 45 ests per chain, 108000 per kthread [ 134.278867][T10724] __nla_validate_parse: 3 callbacks suppressed [ 134.278886][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'. [ 134.288646][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'. [ 134.412343][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.415896][ T29] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 134.531624][T10736] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.602874][T10738] md: loop0 has zero or unknown size, marking faulty! [ 134.714783][ T29] usb 10-1: USB disconnect, device number 5 [ 134.724958][ T29] usblp0: removed [ 134.889863][ T34] IPVS: starting estimator thread 0... [ 134.908480][T10773] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 135.003786][T10771] IPVS: using max 45 ests per chain, 108000 per kthread [ 135.051592][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.124296][T10796] jffs2: notice: (10796) jffs2_build_xattr_subsystem: complete building xattr subsystem, 84 of xdatum (0 unchecked, 83 orphan) and 176 of xref (16 dead, 158 orphan) found. [ 135.134147][T10796] FAULT_INJECTION: forcing a failure. [ 135.134147][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 135.138126][T10796] CPU: 2 UID: 0 PID: 10796 Comm: syz.7.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.138144][T10796] Tainted: [L]=SOFTLOCKUP [ 135.138148][T10796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.138155][T10796] Call Trace: [ 135.138160][T10796] [ 135.138164][T10796] dump_stack_lvl+0x100/0x190 [ 135.138184][T10796] should_fail_ex.cold+0x5/0xa [ 135.138199][T10796] should_failslab+0xc2/0x120 [ 135.138215][T10796] kmem_cache_alloc_noprof+0x91/0x6a0 [ 135.138229][T10796] ? do_getname_kernel+0x5d/0x250 [ 135.138245][T10796] do_getname_kernel+0x5d/0x250 [ 135.138260][T10796] kern_path+0x1f/0x50 [ 135.138271][T10796] ovl_mount_dir+0x142/0x1c0 [ 135.138285][T10796] ovl_parse_param+0xde0/0x1600 [ 135.138298][T10796] ? __pfx_ovl_parse_param+0x10/0x10 [ 135.138311][T10796] ? static_key_count+0x5a/0x70 [ 135.138325][T10796] ? __pfx_ovl_parse_param+0x10/0x10 [ 135.138335][T10796] vfs_parse_fs_param+0x200/0x3b0 [ 135.138351][T10796] vfs_parse_fs_qstr+0x138/0x1c0 [ 135.138369][T10796] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 135.138387][T10796] ? ovl_next_opt+0x143/0x1c0 [ 135.138404][T10796] ? __pfx_ovl_next_opt+0x10/0x10 [ 135.138420][T10796] vfs_parse_monolithic_sep+0x195/0x210 [ 135.138436][T10796] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 135.138452][T10796] ? alloc_fs_context+0x65a/0xf40 [ 135.138468][T10796] path_mount+0x77f/0x23d0 [ 135.138485][T10796] ? __pfx_path_mount+0x10/0x10 [ 135.138497][T10796] ? lockdep_hardirqs_on+0x78/0x100 [ 135.138513][T10796] ? putname+0xb1/0x110 [ 135.138524][T10796] ? kmem_cache_free+0x127/0x6b0 [ 135.138539][T10796] ? __x64_sys_mount+0x293/0x310 [ 135.138552][T10796] __x64_sys_mount+0x293/0x310 [ 135.138566][T10796] ? __pfx___x64_sys_mount+0x10/0x10 [ 135.138584][T10796] do_syscall_64+0x115/0x870 [ 135.138597][T10796] ? clear_bhb_loop+0x40/0x90 [ 135.138610][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.138621][T10796] RIP: 0033:0x7f26aa99e0d9 [ 135.138631][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.138642][T10796] RSP: 002b:00007f26a8bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.138653][T10796] RAX: ffffffffffffffda RBX: 00007f26aac25fa0 RCX: 00007f26aa99e0d9 [ 135.138659][T10796] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 135.138665][T10796] RBP: 00007f26a8bf6090 R08: 0000200000000380 R09: 0000000000000000 [ 135.138672][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.138678][T10796] R13: 00007f26aac26038 R14: 00007f26aac25fa0 R15: 00007ffd6fa355a8 [ 135.138691][T10796] [ 135.138696][T10796] overlayfs: failed to resolve './file0': -12 [ 135.331099][T10806] kAFS: No cell specified [ 135.442387][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.460548][T10817] jffs2: notice: (10817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 84 of xdatum (0 unchecked, 83 orphan) and 176 of xref (16 dead, 158 orphan) found. [ 135.514553][T10817] smpboot: CPU 1 is now offline [ 135.589019][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 135.593242][T10817] overlayfs: failed to resolve './file0': -2 [ 135.753242][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 135.756433][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 135.759391][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 135.762659][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 135.765809][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 135.768840][ T29] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 135.773641][ T29] usb 12-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 135.777704][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.780468][ T29] usb 12-1: Product: syz [ 135.782049][ T29] usb 12-1: Manufacturer: syz [ 135.786509][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.791714][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.795549][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.797913][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.801209][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.805251][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.806066][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.807594][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.807686][T10806] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 135.809930][ T29] usb 12-1: USB2VGA dongle found at address 2 [ 135.814318][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.818385][ T29] usb 12-1: Allocated 8 output buffers [ 135.820376][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.828002][ T29] usb 12-1: Failed to early initialize device [ 135.828076][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.829079][T10828] No such timeout policy "syz1" [ 135.840280][T10825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.868253][T10833] jffs2: notice: (10833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 85 of xdatum (0 unchecked, 85 orphan) and 177 of xref (16 dead, 161 orphan) found. [ 135.881827][T10833] FAULT_INJECTION: forcing a failure. [ 135.881827][T10833] name failslab, interval 1, probability 0, space 0, times 0 [ 135.887972][T10833] CPU: 2 UID: 0 PID: 10833 Comm: syz.3.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.887991][T10833] Tainted: [L]=SOFTLOCKUP [ 135.887995][T10833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.888002][T10833] Call Trace: [ 135.888007][T10833] [ 135.888013][T10833] dump_stack_lvl+0x100/0x190 [ 135.888032][T10833] should_fail_ex.cold+0x5/0xa [ 135.888047][T10833] should_failslab+0xc2/0x120 [ 135.888063][T10833] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 135.888078][T10833] ? __d_alloc+0x35/0xa50 [ 135.888097][T10833] __d_alloc+0x35/0xa50 [ 135.888111][T10833] d_alloc_parallel+0x105/0x14b0 [ 135.888132][T10833] ? __pfx_d_alloc_parallel+0x10/0x10 [ 135.888150][T10833] ? __pfx___might_resched+0x10/0x10 [ 135.888164][T10833] ? try_to_unlazy+0x296/0x910 [ 135.888181][T10833] ? down_read+0x13b/0x4c0 [ 135.888198][T10833] ? __pfx_down_read+0x10/0x10 [ 135.888214][T10833] __lookup_slow+0x98/0x320 [ 135.888230][T10833] lookup_slow+0x50/0x70 [ 135.888244][T10833] path_lookupat+0x5e8/0xc40 [ 135.888263][T10833] filename_lookup+0x202/0x590 [ 135.888276][T10833] ? __pfx_filename_lookup+0x10/0x10 [ 135.888295][T10833] ? do_getname_kernel+0x5d/0x250 [ 135.888309][T10833] ? __asan_memcpy+0x3c/0x60 [ 135.888322][T10833] kern_path+0x37/0x50 [ 135.888332][T10833] ovl_mount_dir+0x142/0x1c0 [ 135.888345][T10833] ovl_parse_param+0xde0/0x1600 [ 135.888358][T10833] ? __pfx_ovl_parse_param+0x10/0x10 [ 135.888371][T10833] ? static_key_count+0x5a/0x70 [ 135.888385][T10833] ? __pfx_ovl_parse_param+0x10/0x10 [ 135.888394][T10833] vfs_parse_fs_param+0x200/0x3b0 [ 135.888410][T10833] vfs_parse_fs_qstr+0x138/0x1c0 [ 135.888424][T10833] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 135.888443][T10833] ? ovl_next_opt+0x143/0x1c0 [ 135.888460][T10833] ? __pfx_ovl_next_opt+0x10/0x10 [ 135.888476][T10833] vfs_parse_monolithic_sep+0x195/0x210 [ 135.888492][T10833] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 135.888508][T10833] ? alloc_fs_context+0x65a/0xf40 [ 135.888525][T10833] path_mount+0x77f/0x23d0 [ 135.888542][T10833] ? __pfx_path_mount+0x10/0x10 [ 135.888555][T10833] ? lockdep_hardirqs_on+0x78/0x100 [ 135.888570][T10833] ? putname+0xb1/0x110 [ 135.888581][T10833] ? kmem_cache_free+0x127/0x6b0 [ 135.888596][T10833] ? __x64_sys_mount+0x293/0x310 [ 135.888636][T10833] __x64_sys_mount+0x293/0x310 [ 135.888657][T10833] ? __pfx___x64_sys_mount+0x10/0x10 [ 135.888683][T10833] do_syscall_64+0x115/0x870 [ 135.888701][T10833] ? clear_bhb_loop+0x40/0x90 [ 135.888715][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.888726][T10833] RIP: 0033:0x7f92a019e0d9 [ 135.888736][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.888747][T10833] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.888759][T10833] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 135.888766][T10833] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 135.888772][T10833] RBP: 00007f92a10d6090 R08: 0000200000000380 R09: 0000000000000000 [ 135.888778][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.888784][T10833] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 135.888798][T10833] [ 135.888815][T10833] overlayfs: failed to resolve './file0': -12 [ 135.891658][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.922102][T10836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 135.985264][T10837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10837 comm=syz.1.1326 [ 136.024933][T10839] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 136.029725][T10806] usb 12-1: Failed to initialize device [ 136.074324][ T5886] usb 12-1: USB disconnect, device number 2 [ 136.207232][T10851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1333'. [ 136.227830][T10851] zonefs (nullb0) ERROR: Not a zoned block device [ 136.515210][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 136.521596][T10875] jffs2: notice: (10875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 136.533293][T10875] overlayfs: failed to resolve './file0': -2 [ 136.624467][T10885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1344'. [ 136.638145][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 136.638164][ T42] audit: type=1400 audit(1786008612.754:7491): avc: denied { write } for pid=10884 comm="syz.1.1344" name="nullb" dev="configfs" ino=5154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.639604][T10885] zonefs (nullb0) ERROR: Not a zoned block device [ 136.725734][T10893] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.738443][ T42] audit: type=1400 audit(1786008612.854:7492): avc: denied { write } for pid=10892 comm="syz.3.1348" name="c.1" dev="configfs" ino=20073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.752001][ T42] audit: type=1400 audit(1786008612.854:7493): avc: denied { write } for pid=10892 comm="syz.3.1348" name="c.1" dev="configfs" ino=20073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.919213][T10905] jffs2: notice: (10905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 136.926248][ T42] audit: type=1400 audit(1786008613.044:7494): avc: denied { ioctl } for pid=10906 comm="syz.1.1354" path="socket:[39415]" dev="sockfs" ino=39415 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.939053][ T42] audit: type=1400 audit(1786008613.044:7495): avc: denied { write } for pid=10904 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.968263][T10905] syzkaller0: entered promiscuous mode [ 136.971688][T10905] syzkaller0: entered allmulticast mode [ 136.993293][ T42] audit: type=1400 audit(1786008613.114:7496): avc: denied { getopt } for pid=10906 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.003216][ T42] audit: type=1326 audit(1786008613.124:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.7.1355" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26aa99e0d9 code=0x0 [ 137.105663][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1355'. [ 137.522290][ T5737] Bluetooth: hci4: command tx timeout [ 137.868190][T10915] No source specified [ 138.760750][T10925] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1360'. [ 138.777939][ T42] audit: type=1400 audit(1786008614.894:7498): avc: denied { write } for pid=10923 comm="syz.7.1360" name="nullb" dev="configfs" ino=5154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.790551][T10925] zonefs (nullb0) ERROR: Not a zoned block device [ 138.836763][T10932] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 138.849672][ T5737] Bluetooth: hci2: SCO packet for unknown connection handle 1754 [ 138.923611][T10940] No source specified [ 139.029855][T10946] binder: 10945:10946 ioctl c00c620f 200000000500 returned -22 [ 139.096166][T10951] No source specified [ 139.103602][T10951] overlayfs: failed to resolve './file2': -2 [ 139.149040][T10954] jffs2: notice: (10954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 139.266129][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1373'. [ 139.268824][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1373'. [ 139.307421][T10968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=122 sclass=netlink_tcpdiag_socket pid=10968 comm=syz.3.1374 [ 139.548393][ T42] audit: type=1400 audit(1786008615.664:7499): avc: denied { write } for pid=10990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.632738][T11004] overlayfs: failed to resolve './file2': -2 [ 139.634888][ T42] audit: type=1400 audit(1786008615.744:7500): avc: denied { write } for pid=10997 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.650421][T10999] syzkaller0: entered promiscuous mode [ 139.652858][T10999] syzkaller0: entered allmulticast mode [ 139.943564][T11024] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 140.146946][T11045] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 140.150606][T11047] overlayfs: failed to resolve './file2': -2 [ 140.152897][T11045] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1393'. [ 140.279680][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1395'. [ 140.291223][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1395'. [ 140.513900][T11082] jffs2: notice: (11082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 140.559869][T11087] overlayfs: failed to resolve './file2': -2 [ 140.641813][ T34] net_ratelimit: 23 callbacks suppressed [ 140.641826][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.667354][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1407'. [ 140.773852][T11108] nft_compat: unsupported protocol 0 [ 140.779240][T11108] input: syz0 as /devices/virtual/input/input18 [ 140.835495][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.886537][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1412'. [ 140.910531][T11118] overlayfs: failed to resolve './file2': -2 [ 140.968468][T11123] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 141.124782][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.311461][T11098] overlayfs: statfs failed on './file0' [ 141.417392][ T6916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.417642][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.505655][T11160] overlayfs: failed to resolve './file2': -2 [ 141.573346][T11166] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.589614][T11168] jffs2: notice: (11168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 141.652569][T11173] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 141.655330][T11173] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1430'. [ 141.682334][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.685808][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1431'. [ 141.692001][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 141.692024][ T42] audit: type=1400 audit(1786008617.814:7508): avc: denied { create } for pid=11174 comm="syz.5.1431" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.785759][ T42] audit: type=1400 audit(1786008617.904:7509): avc: denied { mounton } for pid=11174 comm="syz.5.1431" path="/261/file0" dev="tmpfs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.827257][T11182] openvswitch: netlink: Message has 4 unknown bytes. [ 141.829709][T11182] openvswitch: netlink: Actions may not be safe on all matching packets [ 141.834706][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 141.888837][ T42] audit: type=1400 audit(1786008618.004:7510): avc: denied { unlink } for pid=7592 comm="syz-executor" name="file0" dev="tmpfs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.939376][T11184] jffs2: notice: (11184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 141.949861][T11184] overlayfs: failed to resolve './file2': -2 [ 141.954328][T11186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11186 comm=syz.5.1436 [ 142.017522][T11195] netlink: 'syz.5.1436': attribute type 2 has an invalid length. [ 142.027598][T11186] netlink: 'syz.5.1436': attribute type 2 has an invalid length. [ 142.030771][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1436'. [ 142.050874][T11186] : entered promiscuous mode [ 142.064312][T11197] jffs2: notice: (11197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 142.071855][T11198] program syz.3.1438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.113449][ T42] audit: type=1400 audit(1786008618.234:7511): avc: denied { append } for pid=11202 comm="syz.5.1440" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.148242][ T42] audit: type=1400 audit(1786008618.264:7512): avc: denied { write } for pid=11201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.174496][T11207] x_tables: duplicate underflow at hook 2 [ 142.175981][T11209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.218478][ T42] audit: type=1400 audit(1786008618.334:7513): avc: denied { write } for pid=11210 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.298577][ T42] audit: type=1400 audit(1786008618.414:7514): avc: denied { write } for pid=11219 comm="syz.1.1445" name="core" dev="configfs" ino=5276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.314953][ T42] audit: type=1400 audit(1786008618.414:7515): avc: denied { write } for pid=11219 comm="syz.1.1445" name="rd_mcp_0" dev="configfs" ino=39869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.319056][T11220] Unable to extract alua_access_type [ 142.322370][ T42] audit: type=1800 audit(1786008618.434:7516): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1445" name="alua_access_type" dev="configfs" ino=39883 res=0 errno=0 [ 142.334333][T11221] Unable to extract alua_access_type [ 142.342570][T11225] jffs2: notice: (11225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 142.350608][T11225] overlayfs: failed to resolve './file2': -2 [ 142.365627][ T42] audit: type=1400 audit(1786008618.484:7517): avc: denied { write } for pid=11224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.401884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.486540][ T5448] openvswitch: cpu_id mismatch with handler threads [ 142.498896][T11237] netlink: 'syz.5.1449': attribute type 12 has an invalid length. [ 142.541743][ T29] openvswitch: cpu_id mismatch with handler threads [ 142.644616][T11245] jffs2: notice: (11245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 142.666649][T11245] overlayfs: failed to resolve './file0': -2 [ 142.756165][T11249] openvswitch: cpu_id mismatch with handler threads [ 142.826684][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 142.851548][ T9451] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.854508][ T9451] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.857403][ T9451] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.865718][ T9451] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.043426][T11271] fuse: Bad value for 'fd' [ 143.081740][ T29] openvswitch: cpu_id mismatch with handler threads [ 143.151840][ T13] openvswitch: cpu_id mismatch with handler threads [ 143.711864][T11264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.720547][T11264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.743206][T11264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.745827][T11264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.761277][T11264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.777506][T11264] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.780135][T11264] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.789996][T11264] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.795549][T11264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.799493][T11264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.809313][T11264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.885838][T11282] jffs2: notice: (11282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 179 of xref (16 dead, 161 orphan) found. [ 144.081753][ T5816] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 144.171232][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.173719][T11306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.176333][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.178791][T11306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.208223][T11306] erspan1: left promiscuous mode [ 144.212823][ T9451] openvswitch: cpu_id mismatch with handler threads [ 144.213799][ T29] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 144.230501][T11306] loop5: detected capacity change from 0 to 7 [ 144.239821][T11306] Dev loop5: unable to read RDB block 7 [ 144.242155][T11306] loop5: unable to read partition table [ 144.244534][T11306] loop5: partition table beyond EOD, truncated [ 144.246570][T11306] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.251621][ T5816] usb 8-1: Using ep0 maxpacket: 8 [ 144.254904][ T6590] openvswitch: cpu_id mismatch with handler threads [ 144.260003][ T5816] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.271729][ T5816] usb 8-1: config 0 has no interface number 0 [ 144.281534][ T5816] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.285766][ T5816] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.290437][ T5816] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.300460][ T5816] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.305643][ T5816] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.308365][T11317] FAULT_INJECTION: forcing a failure. [ 144.308365][T11317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.309219][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.317177][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.7.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.317208][T11317] Tainted: [L]=SOFTLOCKUP [ 144.317214][T11317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.317234][T11317] Call Trace: [ 144.317250][T11317] [ 144.317258][T11317] dump_stack_lvl+0x100/0x190 [ 144.317345][T11317] should_fail_ex.cold+0x5/0xa [ 144.317381][T11317] _copy_from_user+0x2e/0xd0 [ 144.317432][T11317] copy_msghdr_from_user+0x9f/0x4c0 [ 144.317463][T11317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.317494][T11317] ___sys_sendmsg+0x106/0x1e0 [ 144.317515][T11317] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.317530][T11317] ? __lock_acquire+0x49f/0x1a40 [ 144.317574][T11317] ? get_pid_task+0x106/0x250 [ 144.317620][T11317] __sys_sendmsg+0x160/0x210 [ 144.317645][T11317] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.317681][T11317] do_syscall_64+0x115/0x870 [ 144.317710][T11317] ? clear_bhb_loop+0x40/0x90 [ 144.317733][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.317752][T11317] RIP: 0033:0x7f26aa99e0d9 [ 144.317767][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.317784][T11317] RSP: 002b:00007f26a8bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.317804][T11317] RAX: ffffffffffffffda RBX: 00007f26aac25fa0 RCX: 00007f26aa99e0d9 [ 144.317816][T11317] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 144.317827][T11317] RBP: 00007f26a8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.317838][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.317849][T11317] R13: 00007f26aac26038 R14: 00007f26aac25fa0 R15: 00007ffd6fa355a8 [ 144.317873][T11317] [ 144.381541][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 144.384508][ T5816] usb 8-1: config 0 descriptor?? [ 144.394289][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 144.395488][ T5816] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.404009][ T29] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.411807][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.420824][ T29] usb 10-1: Product: syz [ 144.422899][ T29] usb 10-1: Manufacturer: syz [ 144.423031][ T13] openvswitch: cpu_id mismatch with handler threads [ 144.424937][ T29] usb 10-1: SerialNumber: syz [ 144.432224][ T29] usb 10-1: config 0 descriptor?? [ 144.441537][T11327] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 144.441847][ T29] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.447945][ T29] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 144.481065][T11325] overlay: filesystem on ./file0 is read-only [ 144.725543][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.730423][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.739086][T11340] FAULT_INJECTION: forcing a failure. [ 144.739086][T11340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.744234][ T34] usb 8-1: USB disconnect, device number 13 [ 144.744245][T11340] CPU: 1 UID: 0 PID: 11340 Comm: syz.7.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.744287][T11340] Tainted: [L]=SOFTLOCKUP [ 144.744294][T11340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.744304][T11340] Call Trace: [ 144.744311][T11340] [ 144.744318][T11340] dump_stack_lvl+0x100/0x190 [ 144.744347][T11340] should_fail_ex.cold+0x5/0xa [ 144.744370][T11340] _copy_from_user+0x2e/0xd0 [ 144.744400][T11340] move_addr_to_kernel+0x65/0x170 [ 144.744418][T11340] copy_msghdr_from_user+0x3f0/0x4c0 [ 144.744435][T11340] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.744463][T11340] ___sys_sendmsg+0x106/0x1e0 [ 144.744482][T11340] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.744497][T11340] ? __lock_acquire+0x49f/0x1a40 [ 144.744519][T11340] ? get_pid_task+0x106/0x250 [ 144.744554][T11340] __sys_sendmsg+0x160/0x210 [ 144.744599][T11340] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.744626][T11340] do_syscall_64+0x115/0x870 [ 144.744641][T11340] ? clear_bhb_loop+0x40/0x90 [ 144.744654][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.744665][T11340] RIP: 0033:0x7f26aa99e0d9 [ 144.744676][T11340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.744686][T11340] RSP: 002b:00007f26a8bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.744698][T11340] RAX: ffffffffffffffda RBX: 00007f26aac25fa0 RCX: 00007f26aa99e0d9 [ 144.744705][T11340] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 144.744711][T11340] RBP: 00007f26a8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.744717][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.744723][T11340] R13: 00007f26aac26038 R14: 00007f26aac25fa0 R15: 00007ffd6fa355a8 [ 144.744738][T11340] [ 144.744791][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 144.808424][ T6590] openvswitch: cpu_id mismatch with handler threads [ 144.812546][ T34] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 144.813001][T11266] ldusb: No device or device unplugged -19 [ 144.869530][ T5448] openvswitch: cpu_id mismatch with handler threads [ 144.962797][ T5737] Bluetooth: hci2: command 0x0406 tx timeout [ 145.041057][ T29] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 145.269045][T11358] infiniband syz1: set active [ 145.273454][T11358] infiniband syz1: added veth1 [ 145.296511][T11358] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 145.302268][T11358] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 145.307680][T11358] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 145.351664][T11358] RDS/IB: syz1: added [ 145.354458][T11358] smc: adding ib device syz1 with port count 1 [ 145.357066][T11358] smc: ib device syz1 port 1 has no pnetid [ 145.459958][ T29] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.463475][ T29] em28xx 10-1:0.0: board has no eeprom [ 145.761632][ T5737] Bluetooth: hci3: command 0x0405 tx timeout [ 145.811543][ T29] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.814203][ T29] em28xx 10-1:0.0: dvb set to bulk mode. [ 145.816825][ T6590] em28xx 10-1:0.0: Binding DVB extension [ 145.841660][ T1369] net_ratelimit: 9 callbacks suppressed [ 145.841682][ T1369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.841748][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.841782][ T5095] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.052620][T11366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.123532][T11380] FAULT_INJECTION: forcing a failure. [ 146.123532][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.127770][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.3.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.127789][T11380] Tainted: [L]=SOFTLOCKUP [ 146.127793][T11380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.127800][T11380] Call Trace: [ 146.127805][T11380] [ 146.127826][T11380] dump_stack_lvl+0x100/0x190 [ 146.127847][T11380] should_fail_ex.cold+0x5/0xa [ 146.127862][T11380] _copy_from_user+0x2e/0xd0 [ 146.127879][T11380] ____sys_sendmsg+0x1d1/0xbe0 [ 146.127900][T11380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.127924][T11380] ___sys_sendmsg+0x190/0x1e0 [ 146.127936][T11380] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.127946][T11380] ? __lock_acquire+0x49f/0x1a40 [ 146.127961][T11380] ? get_pid_task+0x106/0x250 [ 146.127989][T11380] __sys_sendmsg+0x160/0x210 [ 146.128004][T11380] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.128027][T11380] do_syscall_64+0x115/0x870 [ 146.128040][T11380] ? clear_bhb_loop+0x40/0x90 [ 146.128054][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.128066][T11380] RIP: 0033:0x7f92a019e0d9 [ 146.128076][T11380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.128090][T11380] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.128106][T11380] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 146.128116][T11380] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 146.128125][T11380] RBP: 00007f92a10d6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.128136][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.128145][T11380] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 146.128169][T11380] [ 146.264382][T11389] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 146.308371][T11393] FAULT_INJECTION: forcing a failure. [ 146.308371][T11393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.313474][T11393] CPU: 1 UID: 0 PID: 11393 Comm: syz.7.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.313493][T11393] Tainted: [L]=SOFTLOCKUP [ 146.313497][T11393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.313504][T11393] Call Trace: [ 146.313508][T11393] [ 146.313513][T11393] dump_stack_lvl+0x100/0x190 [ 146.313532][T11393] should_fail_ex.cold+0x5/0xa [ 146.313546][T11393] strncpy_from_user+0x3b/0x2d0 [ 146.313577][T11393] do_getname+0x78/0x390 [ 146.313604][T11393] path_listxattrat+0x2db/0x370 [ 146.313617][T11393] ? ksys_write+0x1ac/0x250 [ 146.313628][T11393] ? __pfx_path_listxattrat+0x10/0x10 [ 146.313644][T11393] do_syscall_64+0x115/0x870 [ 146.313659][T11393] ? clear_bhb_loop+0x40/0x90 [ 146.313672][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.313684][T11393] RIP: 0033:0x7f26aa99e0d9 [ 146.313694][T11393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.313705][T11393] RSP: 002b:00007f26a8bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 146.313717][T11393] RAX: ffffffffffffffda RBX: 00007f26aac25fa0 RCX: 00007f26aa99e0d9 [ 146.313725][T11393] RDX: 00000000fffffdf3 RSI: 0000000000000000 RDI: 0000200000002300 [ 146.313732][T11393] RBP: 00007f26a8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.313738][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.313745][T11393] R13: 00007f26aac26038 R14: 00007f26aac25fa0 R15: 00007ffd6fa355a8 [ 146.313759][T11393] [ 146.315801][T11389] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.381061][T11389] bond6 (unregistering): Released all slaves [ 146.430516][T11394] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.444806][T11394] bond6 (unregistering): Released all slaves [ 146.471507][ T56] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.615706][T11413] __nla_validate_parse: 6 callbacks suppressed [ 146.615719][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 146.633133][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.638129][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.645336][T11416] FAULT_INJECTION: forcing a failure. [ 146.645336][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 146.646129][ T56] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 146.649504][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.7.1507 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.649522][T11416] Tainted: [L]=SOFTLOCKUP [ 146.649526][T11416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.649533][T11416] Call Trace: [ 146.649537][T11416] [ 146.649542][T11416] dump_stack_lvl+0x100/0x190 [ 146.649561][T11416] should_fail_ex.cold+0x5/0xa [ 146.649574][T11416] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 146.649601][T11416] should_failslab+0xc2/0x120 [ 146.649617][T11416] kmem_cache_alloc_noprof+0x91/0x6a0 [ 146.649631][T11416] ? dst_alloc+0x99/0x1a0 [ 146.649647][T11416] dst_alloc+0x99/0x1a0 [ 146.649661][T11416] rt_dst_alloc+0x35/0x3a0 [ 146.649682][T11416] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 146.649703][T11416] ip_route_output_key_hash+0x118/0x2b0 [ 146.649720][T11416] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 146.649736][T11416] ? ns_capable+0xd2/0xf0 [ 146.649753][T11416] ? find_held_lock+0x2b/0x80 [ 146.649765][T11416] ip_route_output_flow+0x27/0x150 [ 146.649782][T11416] udp_sendmsg+0x198a/0x2720 [ 146.649805][T11416] ? __pfx_udp_sendmsg+0x10/0x10 [ 146.649817][T11416] ? vsnprintf+0x4c5/0x1300 [ 146.649832][T11416] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 146.649852][T11416] ? snprintf+0xc7/0x100 [ 146.649872][T11416] udpv6_sendmsg+0x1420/0x2c20 [ 146.649902][T11416] ? find_held_lock+0x2b/0x80 [ 146.649916][T11416] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.649926][T11416] ? do_raw_spin_lock+0x128/0x260 [ 146.649959][T11416] ? __local_bh_enable_ip+0x9e/0x120 [ 146.649975][T11416] ? lockdep_hardirqs_on+0x78/0x100 [ 146.649993][T11416] ? inet_autobind+0x145/0x1a0 [ 146.650005][T11416] ? __local_bh_enable_ip+0x9e/0x120 [ 146.650019][T11416] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.650030][T11416] ? inet6_sendmsg+0x105/0x140 [ 146.650049][T11416] inet6_sendmsg+0x105/0x140 [ 146.650060][T11416] ____sys_sendmsg+0x704/0xbe0 [ 146.650080][T11416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.650103][T11416] ___sys_sendmsg+0x190/0x1e0 [ 146.650115][T11416] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.650124][T11416] ? __lock_acquire+0x49f/0x1a40 [ 146.650138][T11416] ? get_pid_task+0x106/0x250 [ 146.650163][T11416] __sys_sendmsg+0x160/0x210 [ 146.650178][T11416] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.650199][T11416] do_syscall_64+0x115/0x870 [ 146.650212][T11416] ? clear_bhb_loop+0x40/0x90 [ 146.650226][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.650237][T11416] RIP: 0033:0x7f26aa99e0d9 [ 146.650247][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.650257][T11416] RSP: 002b:00007f26a8bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.650269][T11416] RAX: ffffffffffffffda RBX: 00007f26aac25fa0 RCX: 00007f26aa99e0d9 [ 146.650276][T11416] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 146.650282][T11416] RBP: 00007f26a8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.650289][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.650295][T11416] R13: 00007f26aac26038 R14: 00007f26aac25fa0 R15: 00007ffd6fa355a8 [ 146.650308][T11416] [ 146.779311][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.781988][ T56] usb 6-1: Product: syz [ 146.783704][ T56] usb 6-1: Manufacturer: syz [ 146.785558][ T56] usb 6-1: SerialNumber: syz [ 146.807640][T11290] em28xx 10-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 146.814646][T11427] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.817460][T11427] netlink: 'syz.3.1510': attribute type 2 has an invalid length. [ 146.820684][T11427] netlink: 'syz.3.1510': attribute type 10 has an invalid length. [ 146.825213][T11427] ipvlan0: entered allmulticast mode [ 146.827085][T11427] veth0_vlan: entered allmulticast mode [ 146.830665][T11427] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 146.862988][ T6590] em28xx 10-1:0.0: Registering input extension [ 146.886664][ T1369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.954219][T11438] FAULT_INJECTION: forcing a failure. [ 146.954219][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 146.955340][T11439] futex_wake_op: syz.7.1514 tries to shift op by -1; fix this program [ 146.959197][T11438] CPU: 3 UID: 0 PID: 11438 Comm: syz.3.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.959215][T11438] Tainted: [L]=SOFTLOCKUP [ 146.959219][T11438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.959226][T11438] Call Trace: [ 146.959231][T11438] [ 146.959236][T11438] dump_stack_lvl+0x100/0x190 [ 146.959256][T11438] should_fail_ex.cold+0x5/0xa [ 146.959271][T11438] should_failslab+0xc2/0x120 [ 146.959286][T11438] kmem_cache_alloc_noprof+0x91/0x6a0 [ 146.959301][T11438] ? do_getname+0x35/0x390 [ 146.959318][T11438] do_getname+0x35/0x390 [ 146.959333][T11438] path_listxattrat+0x2db/0x370 [ 146.959345][T11438] ? ksys_write+0x1ac/0x250 [ 146.959356][T11438] ? __pfx_path_listxattrat+0x10/0x10 [ 146.959371][T11438] do_syscall_64+0x115/0x870 [ 146.959385][T11438] ? clear_bhb_loop+0x40/0x90 [ 146.959398][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.959410][T11438] RIP: 0033:0x7f92a019e0d9 [ 146.959420][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.959431][T11438] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 146.959444][T11438] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 146.959451][T11438] RDX: 00000000fffffdf3 RSI: 0000000000000000 RDI: 0000200000002300 [ 146.959457][T11438] RBP: 00007f92a10d6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.959463][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.959469][T11438] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 146.959483][T11438] [ 147.041580][ T5737] Bluetooth: hci2: command 0x0406 tx timeout [ 147.062558][ T984] usb 6-1: USB disconnect, device number 4 [ 147.202108][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.321585][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 147.391620][ T56] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 147.471772][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 147.476973][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.480427][ T9] usb 8-1: config 0 has no interface number 0 [ 147.483109][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.487459][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 147.492210][ T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.496579][ T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 147.500470][ T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.505795][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.509386][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.518973][ T9] usb 8-1: config 0 descriptor?? [ 147.522063][ C3] ovs_dp_get_upcall_portid: 5 callbacks suppressed [ 147.522088][ C3] openvswitch: cpu_id mismatch with handler threads [ 147.532879][ T9] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.553610][ T56] usb 12-1: config 0 has no interfaces? [ 147.556165][ T56] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.560081][ T56] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.571203][ T56] usb 12-1: config 0 descriptor?? [ 147.739546][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 147.739573][ T42] audit: type=1400 audit(1786008623.854:7533): avc: denied { ioctl } for pid=11442 comm="syz.3.1516" path="socket:[41568]" dev="sockfs" ino=41568 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.741703][T11443] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 147.759310][ T1369] usb 8-1: USB disconnect, device number 14 [ 147.769463][T11447] openvswitch: cpu_id mismatch with handler threads [ 147.777166][ T5095] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 147.779388][ T5095] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 147.793016][ T6590] usb 12-1: USB disconnect, device number 3 [ 147.795878][ T1369] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 147.802282][T11449] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 147.841619][ T5095] Bluetooth: hci3: command 0x0405 tx timeout [ 147.849270][ T9] usb 10-1: USB disconnect, device number 6 [ 147.853307][ T9] em28xx 10-1:0.0: Disconnecting em28xx [ 147.859053][ T9] em28xx 10-1:0.0: Closing input extension [ 147.922055][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.922077][ T5748] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.923858][T11455] netlink: 'syz.5.1520': attribute type 4 has an invalid length. [ 147.929173][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.982148][ T9] em28xx 10-1:0.0: Freeing device [ 148.037998][ T42] audit: type=1400 audit(1786008624.154:7534): avc: denied { write } for pid=11466 comm="syz.5.1525" name="/" dev="9p" ino=78395277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.046813][ T42] audit: type=1400 audit(1786008624.154:7535): avc: denied { remove_name } for pid=11466 comm="syz.5.1525" name="file2" dev="9p" ino=78395397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.055432][ T42] audit: type=1400 audit(1786008624.154:7536): avc: denied { rmdir } for pid=11466 comm="syz.5.1525" name="file2" dev="9p" ino=78395397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.115833][T11473] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.153768][ T1369] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.162095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.323189][ T1369] usb 6-1: Using ep0 maxpacket: 32 [ 148.327810][ T1369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.339694][ T1369] usb 6-1: string descriptor 0 read error: -22 [ 148.346189][ T1369] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 148.355991][ T42] audit: type=1400 audit(1786008624.474:7537): avc: denied { setattr } for pid=11474 comm="syz.3.1527" name="/" dev="9p" ino=78395277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.356052][ T1369] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 148.367722][T11479] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.375134][T11479] netlink: 'syz.5.1526': attribute type 2 has an invalid length. [ 148.378862][T11479] netlink: 'syz.5.1526': attribute type 10 has an invalid length. [ 148.381380][ T42] audit: type=1400 audit(1786008624.494:7538): avc: denied { setopt } for pid=11474 comm="syz.3.1527" lport=41852 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.381767][ T42] audit: type=1400 audit(1786008624.494:7539): avc: denied { read } for pid=11474 comm="syz.3.1527" lport=41852 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.381810][ T42] audit: type=1400 audit(1786008624.494:7540): avc: denied { write } for pid=11474 comm="syz.3.1527" lport=41852 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.390996][ T1369] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 148.404379][T11479] ipvlan0: entered allmulticast mode [ 148.413215][ T1369] dw2102: su3000_power_ctrl: 1, initialized 0 [ 148.415228][T11479] veth0_vlan: entered allmulticast mode [ 148.423097][ T1369] dvb-usb: bulk message failed: -22 (2/0) [ 148.425071][T11479] team0: Device ipvlan0 failed to register rx_handler [ 148.458901][ T1369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.465751][ T1369] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 148.488601][ T1369] usb 6-1: media controller created [ 148.492953][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.497018][ T1369] dw2102: i2c transfer failed. [ 148.500849][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.504025][ T1369] dw2102: i2c transfer failed. [ 148.507617][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.510026][ T1369] dw2102: i2c transfer failed. [ 148.512886][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.515377][ T1369] dw2102: i2c transfer failed. [ 148.517411][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.519804][ T1369] dw2102: i2c transfer failed. [ 148.522594][ T1369] dvb-usb: bulk message failed: -22 (6/0) [ 148.525078][ T1369] dw2102: i2c transfer failed. [ 148.527073][ T1369] dvb-usb: MAC address: 02:02:02:02:02:02 [ 148.546210][ T1369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.593106][T11458] dw2102: i2c wr: len=67 is too big! [ 148.593106][T11458] [ 148.641253][ T1369] dvb-usb: bulk message failed: -22 (3/0) [ 148.660086][ T1369] dw2102: command 0x0e transfer failed. [ 148.669758][T11491] jffs2: notice: (11491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 85 orphan) and 180 of xref (16 dead, 161 orphan) found. [ 148.670824][ T1369] dvb-usb: bulk message failed: -22 (3/0) [ 148.688728][ T1369] dw2102: command 0x0e transfer failed. [ 148.700239][T11491] input: syz1 as /devices/virtual/input/input20 [ 148.718058][ T42] audit: type=1400 audit(1786008624.834:7541): avc: denied { write } for pid=11488 comm="syz.3.1529" name="bus" dev="jffs2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 148.721157][T11491] overlayfs: upper fs does not support tmpfile. [ 148.732155][T11491] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.732730][ T42] audit: type=1400 audit(1786008624.834:7542): avc: denied { write } for pid=11488 comm="syz.3.1529" name="work" dev="jffs2" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 148.796698][T11494] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 148.820112][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.823786][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 148.824702][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1533'. [ 148.827769][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.842437][T11494] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 148.847416][T11494] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 148.863349][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.869985][ T5448] openvswitch: cpu_id mismatch with handler threads [ 148.962366][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.993257][ T1369] dvb-usb: bulk message failed: -22 (3/0) [ 148.995163][T11501] tipc: Enabled bearer , priority 10 [ 148.999541][T11501] netlink: 'syz.3.1535': attribute type 2 has an invalid length. [ 149.002717][ T1369] dw2102: command 0x0e transfer failed. [ 149.007615][T11500] tipc: Resetting bearer [ 149.012961][ T1369] dvb-usb: bulk message failed: -22 (3/0) [ 149.028169][ T1369] dw2102: command 0x0e transfer failed. [ 149.029969][ T1369] dvb-usb: bulk message failed: -22 (1/0) [ 149.031775][ T1369] dw2102: command 0x51 transfer failed. [ 149.035309][T11500] tipc: Disabling bearer [ 149.060107][ T1369] DVB: Unable to find symbol ds3000_attach() [ 149.062147][ T1369] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 149.104865][T11517] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1539'. [ 149.121465][ T1369] rc_core: IR keymap rc-su3000 not found [ 149.123329][ T1369] Registered IR keymap rc-empty [ 149.134562][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 149.157174][T11520] GUP no longer grows the stack in syz.3.1540 (11520): 200000007000-20000000a000 (200000004000) [ 149.164169][T11447] openvswitch: cpu_id mismatch with handler threads [ 149.164289][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.3.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.164311][T11520] Tainted: [L]=SOFTLOCKUP [ 149.164316][T11520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.164332][T11520] Call Trace: [ 149.164344][T11520] [ 149.164350][T11520] dump_stack_lvl+0x100/0x190 [ 149.164420][T11520] gup_vma_lookup.cold+0x83/0x96 [ 149.164446][T11520] __get_user_pages+0x241/0x32a0 [ 149.164479][T11520] ? down_read_killable+0x35e/0x520 [ 149.164504][T11520] ? __pfx___get_user_pages+0x10/0x10 [ 149.164520][T11520] ? rcu_is_watching+0x12/0xc0 [ 149.164581][T11520] __gup_longterm_locked+0x87d/0x16f0 [ 149.164603][T11520] ? __pfx___gup_longterm_locked+0x10/0x10 [ 149.164622][T11520] ? lock_acquire+0x1b9/0x370 [ 149.164645][T11520] gup_fast_fallback+0x16dc/0x2790 [ 149.164673][T11520] ? __pfx_gup_fast_fallback+0x10/0x10 [ 149.164694][T11520] ? __lock_acquire+0x49f/0x1a40 [ 149.164722][T11520] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 149.164743][T11520] get_user_pages_fast+0xa7/0xf0 [ 149.164758][T11520] ? __pfx_get_user_pages_fast+0x10/0x10 [ 149.164777][T11520] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 149.164815][T11520] ? __mutex_lock+0x26d/0x1bd0 [ 149.164833][T11520] ? pipe_lock+0x69/0x80 [ 149.164852][T11520] ? __pfx___schedule+0x10/0x10 [ 149.164867][T11520] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 149.164886][T11520] ? __pfx___mutex_lock+0x10/0x10 [ 149.164903][T11520] ? import_ubuf+0x1b6/0x220 [ 149.164922][T11520] iov_iter_get_pages2+0xa3/0x100 [ 149.164941][T11520] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 149.164959][T11520] ? wait_for_space+0x2ca/0x3b0 [ 149.164977][T11520] __do_sys_vmsplice+0x7dd/0x13c0 [ 149.164994][T11520] ? plist_del+0x308/0x510 [ 149.165014][T11520] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 149.165027][T11520] ? futex_private_hash_put+0x115/0x1c0 [ 149.165044][T11520] ? futex_wake+0x220/0x5e0 [ 149.165058][T11520] ? __pfx_futex_wake+0x10/0x10 [ 149.165091][T11520] ? do_syscall_64+0x115/0x870 [ 149.165105][T11520] do_syscall_64+0x115/0x870 [ 149.165119][T11520] ? clear_bhb_loop+0x40/0x90 [ 149.165136][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.165149][T11520] RIP: 0033:0x7f92a019e0d9 [ 149.165160][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.165171][T11520] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 149.165184][T11520] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 149.165191][T11520] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000005 [ 149.165198][T11520] RBP: 00007f92a0235024 R08: 0000000000000000 R09: 0000000000000000 [ 149.165204][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.165210][T11520] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 149.165224][T11520] [ 149.169720][T11523] SELinux: security_context_str_to_sid (data_t:s0) failed with errno=-22 [ 149.177504][ T1369] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 149.287348][T11527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.311320][ T1369] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input21 [ 149.328643][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 149.331741][ T1369] dvb-usb: schedule remote query interval to 150 msecs. [ 149.332514][T11532] jffs2: notice: (11532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 90 of xdatum (0 unchecked, 90 orphan) and 187 of xref (17 dead, 170 orphan) found. [ 149.348514][ T1369] dw2102: su3000_power_ctrl: 0, initialized 1 [ 149.350763][ T1369] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 149.359236][ T1369] usb 6-1: USB disconnect, device number 5 [ 149.394877][T11534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.411850][ T1369] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 149.421575][T11527] bond6: (slave geneve2): making interface the new active one [ 149.433694][T11527] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 149.510365][T11535] kvm: pic: non byte read [ 149.510428][T11539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.515855][T11535] kvm: pic: non byte read [ 149.520496][T11535] kvm: pic: non byte read [ 149.528627][T11539] bond4: (slave bond5): Enslaving as an active interface with an up link [ 149.532515][T11535] kvm: pic: non byte read [ 149.533438][T11535] kvm: pic: non byte read [ 149.587829][T11534] bond4 (unregistering): (slave bond5): Releasing backup interface [ 149.608814][T11534] bond4 (unregistering): Released all slaves [ 149.700761][T11547] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 149.756500][T11549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.838630][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 149.852051][ C2] openvswitch: cpu_id mismatch with handler threads [ 149.932016][ T5737] Bluetooth: hci3: command 0x0405 tx timeout [ 149.994090][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 150.002103][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.002410][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.059635][T11563] dlm: no locking on control device [ 150.247455][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1528'. [ 150.424165][T11588] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1557'. [ 150.657822][T11604] netdevsim netdevsim7 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 150.884363][T11614] jffs2: notice: (11614) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 150.982084][T11447] openvswitch: cpu_id mismatch with handler threads [ 151.042270][ T1369] net_ratelimit: 82 callbacks suppressed [ 151.042285][ T1369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.128478][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 151.206868][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 151.531626][T11661] db_root: cannot be changed because it's in use [ 151.571822][ T5886] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 151.668457][T11664] veth3: entered allmulticast mode [ 151.723553][ T5886] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.741504][ T5886] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.745215][ T5886] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 151.749181][ T5886] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.754977][ T5886] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.762657][T11651] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 151.792610][ T5886] hub 12-1:1.0: bad descriptor, ignoring hub [ 151.794570][ T5886] hub 12-1:1.0: probe with driver hub failed with error -5 [ 151.797149][ T5886] cdc_wdm 12-1:1.0: skipping garbage [ 151.798816][ T5886] cdc_wdm 12-1:1.0: skipping garbage [ 151.822587][ T5886] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 151.824593][ T5886] cdc_wdm 12-1:1.0: Unknown control protocol [ 151.865100][T11671] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 151.970298][T11651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1576'. [ 151.998707][T11682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.002212][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 152.082060][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.097870][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1587'. [ 152.325551][T11689] tmpfs: Bad value for 'mpol' [ 152.453593][T11696] program syz.5.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.571616][ C3] openvswitch: cpu_id mismatch with handler threads [ 152.642224][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.647060][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.649915][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.774728][T11704] validate_nla: 1 callbacks suppressed [ 152.774744][T11704] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 152.779403][T11704] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 152.870833][ T5448] openvswitch: cpu_id mismatch with handler threads [ 152.939361][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.982125][T11447] openvswitch: cpu_id mismatch with handler threads [ 152.994797][ T29] usb 12-1: USB disconnect, device number 4 [ 153.002577][T11651] cdc_wdm 12-1:1.0: Error autopm - -16 [ 153.018936][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 153.018955][ T42] audit: type=1400 audit(1786008629.134:7562): avc: denied { write } for pid=11711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.073672][ T42] audit: type=1400 audit(1786008629.194:7563): avc: denied { write } for pid=11715 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.121787][ T1369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.308106][T11723] macvlan0: entered promiscuous mode [ 153.354320][ T42] audit: type=1400 audit(1786008629.474:7564): avc: denied { ioctl } for pid=11724 comm="syz.1.1597" path="socket:[41891]" dev="sockfs" ino=41891 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.399597][T11736] jffs2: notice: (11736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 153.441550][T11740] netlink: 'syz.5.1600': attribute type 10 has an invalid length. [ 153.454019][T11738] tipc: Resetting bearer [ 153.503046][T11745] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 153.555310][T11751] netlink: 'syz.5.1600': attribute type 10 has an invalid length. [ 153.564609][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1602'. [ 153.650456][T11743] bridge0: port 1(syz_tun) entered blocking state [ 153.657388][T11743] bridge0: port 1(syz_tun) entered disabled state [ 153.661800][T11743] syz_tun: entered allmulticast mode [ 153.675931][T11743] syz_tun: entered promiscuous mode [ 153.687488][T11751] syz_tun: left allmulticast mode [ 153.691863][T11751] bridge0: port 1(syz_tun) entered disabled state [ 153.712558][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.721370][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.730758][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.734469][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 153.736519][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.741150][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.744168][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.747309][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.750359][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.755772][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1609'. [ 153.773800][ T42] audit: type=1400 audit(1786008629.894:7565): avc: denied { bind } for pid=11772 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.788799][ T42] audit: type=1400 audit(1786008629.904:7566): avc: denied { bind } for pid=11770 comm="syz.7.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.839534][T11777] nvme_fcloop: unknown parameter or missing value 'wwn' [ 153.890558][T11779] netlink: 'syz.5.1612': attribute type 18 has an invalid length. [ 153.893554][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1612'. [ 153.896789][T11779] netlink: 'syz.5.1612': attribute type 18 has an invalid length. [ 153.899239][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1612'. [ 154.227947][T11803] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1621'. [ 154.326038][T11249] openvswitch: cpu_id mismatch with handler threads [ 154.357760][T11813] jffs2: notice: (11813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 154.378295][T11813] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 154.384100][T11813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.468420][T11759] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 154.476887][ T42] audit: type=1400 audit(1786008630.594:7567): avc: denied { remount } for pid=11819 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 154.485498][T11821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.488695][T11821] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 154.490562][ T42] audit: type=1400 audit(1786008630.604:7568): avc: denied { mounton } for pid=11815 comm="syz.5.1626" path="/myproc" dev="bpf" ino=42737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 154.492928][T11821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.579594][T11830] jffs2: notice: (11830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 154.624446][ T42] audit: type=1400 audit(1786008630.744:7569): avc: denied { write } for pid=11837 comm="syz.3.1633" name="functions" dev="configfs" ino=15334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.633899][ T42] audit: type=1400 audit(1786008630.744:7570): avc: denied { write } for pid=11837 comm="syz.3.1633" name="interface.ncm" dev="configfs" ino=44870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.643356][ T42] audit: type=1400 audit(1786008630.744:7571): avc: denied { write } for pid=11837 comm="syz.3.1633" name="functions" dev="configfs" ino=15334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.656149][T11840] jffs2: notice: (11840) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 154.667919][T11840] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 154.671491][T11840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.982989][T11447] openvswitch: cpu_id mismatch with handler threads [ 155.014801][T11855] openvswitch: netlink: Missing key (keys=40, expected=100) [ 155.153723][T11869] netlink: 'syz.5.1644': attribute type 4 has an invalid length. [ 155.156236][T11869] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1644'. [ 155.200595][T11876] jffs2: notice: (11876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 155.212253][T11876] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 155.218980][T11876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.401280][T11888] jffs2: notice: (11888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 155.522327][T11895] libceph: Failed to parse secret: -22 [ 155.527856][T11897] netlink: 'syz.5.1650': attribute type 3 has an invalid length. [ 155.531128][T11897] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1650'. [ 155.584579][T11903] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 155.587248][T11903] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.591065][T11903] vhci_hcd vhci_hcd.0: Device attached [ 155.597707][T11904] vhci_hcd: connection closed [ 155.603635][ T9451] vhci_hcd vhci_hcd.5: stop threads [ 155.607494][ T9451] vhci_hcd vhci_hcd.5: release socket [ 155.609445][ T9451] vhci_hcd vhci_hcd.5: disconnect device [ 155.620471][T11907] jffs2: notice: (11907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 155.629388][T11907] overlayfs: failed to resolve './file2': -2 [ 155.727074][T11917] Sensor A: ================= START STATUS ================= [ 155.729916][T11917] Sensor A: Test Pattern: 75% Colorbar [ 155.733598][T11917] Sensor A: Show Information: All [ 155.736586][T11917] Sensor A: Vertical Flip: false [ 155.738407][T11917] Sensor A: Horizontal Flip: false [ 155.744932][T11917] Sensor A: Brightness: 3 [ 155.746479][T11917] Sensor A: Contrast: 128 [ 155.747886][T11917] Sensor A: Hue: 0 [ 155.749110][T11917] Sensor A: Saturation: 128 [ 155.750900][T11917] Sensor A: Pixel Rate: 160000000 [ 155.753790][T11917] Sensor A: Horizontal Blanking: 800 [ 155.756177][T11917] Sensor A: Vertical Blanking: 4 [ 155.758015][T11917] Sensor A: ================== END STATUS ================== [ 155.889886][T11917] jffs2: notice: (11917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 155.917157][T11928] loop2: detected capacity change from 0 to 7 [ 155.924410][T11928] Dev loop2: unable to read RDB block 7 [ 155.926784][T11928] loop2: AHDI p1 p2 p3 [ 155.928557][T11928] loop2: partition table partially beyond EOD, truncated [ 155.932587][T11928] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.935914][T11928] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.075305][ T848] kernel read not supported for file /binder/state (pid: 848 comm: kworker/2:2) [ 156.136687][T11947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11947 comm=syz.5.1669 [ 156.209283][T11954] jffs2: notice: (11954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 156.220011][T11954] overlayfs: failed to resolve './file2': -2 [ 156.280120][T11958] jffs2: notice: (11958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 156.393636][ T5748] Bluetooth: hci4: Invalid handle: 0xffc9 > 0x0eff [ 156.487018][T11970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.495861][T11970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.872136][ T5448] openvswitch: cpu_id mismatch with handler threads [ 156.969116][T11974] ./file0: Can't lookup blockdev [ 157.500780][T12011] jffs2: notice: (12011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 157.566682][T12015] __nla_validate_parse: 2 callbacks suppressed [ 157.566694][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 157.576576][T12015] batadv0: entered promiscuous mode [ 157.585869][T12015] macsec2: entered promiscuous mode [ 157.587781][T12015] macsec2: entered allmulticast mode [ 157.589607][T12015] batadv0: entered allmulticast mode [ 157.592246][T12015] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 157.595434][T12015] batadv0: left allmulticast mode [ 157.597264][T12015] batadv0: left promiscuous mode [ 157.601596][ C3] openvswitch: cpu_id mismatch with handler threads [ 157.695372][ T5748] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 157.701809][ T5748] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 157.855066][T12025] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1692'. [ 157.921126][T12037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=12037 comm=syz.3.1695 [ 158.101259][T12052] jffs2: notice: (12052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 90 orphan) and 188 of xref (17 dead, 170 orphan) found. [ 158.130338][T12060] ------------[ cut here ]------------ [ 158.132447][T12060] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 158.136104][T12060] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#0: syz.3.1700/12060 [ 158.139902][T12060] Modules linked in: [ 158.141998][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.3.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.147031][T12060] Tainted: [L]=SOFTLOCKUP [ 158.148471][T12060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.152307][T12060] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 158.154407][T12060] Code: 89 c5 89 c6 e8 f7 ef 68 f8 45 85 ed 0f 85 be fb ff ff e8 79 f5 68 f8 48 8d 3d 22 04 90 07 ba 48 00 00 00 48 c7 c6 e0 88 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 f5 68 f8 48 8d bd 00 08 00 00 [ 158.160843][T12060] RSP: 0018:ffffc9000bbc7a80 EFLAGS: 00010293 [ 158.163465][T12060] RAX: 0000000000000000 RBX: ffff88802cf48000 RCX: ffffffff89a16f59 [ 158.166125][T12060] RDX: 0000000000000048 RSI: ffffffff8d1888e0 RDI: ffffffff91317390 [ 158.168732][T12060] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 158.171234][T12060] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 158.174036][T12060] R13: 0000000000000000 R14: ffff8880290c0568 R15: ffffc9000bbc7be0 [ 158.176683][T12060] FS: 00007f92a10d66c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 158.179619][T12060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.182060][T12060] CR2: 0000200000002000 CR3: 0000000038289000 CR4: 0000000000352ef0 [ 158.185380][T12060] DR0: 0000000000000004 DR1: 0000000000000003 DR2: 000000007fffdfff [ 158.188023][T12060] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 158.190791][T12060] Call Trace: [ 158.192190][T12060] [ 158.193268][T12060] io_register_zcrx+0xe94/0x1d30 [ 158.195216][T12060] ? __pfx_io_register_zcrx+0x10/0x10 [ 158.197000][T12060] ? __pfx___futex_wait+0x10/0x10 [ 158.198662][T12060] ? lock_acquire+0x1b9/0x370 [ 158.200283][T12060] ? rcu_is_watching+0x12/0xc0 [ 158.202199][T12060] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 158.204174][T12060] ? __fget_files+0x215/0x3d0 [ 158.205653][T12060] ? __fget_files+0x215/0x3d0 [ 158.207169][T12060] __do_sys_io_uring_register+0x1193/0x1bc0 [ 158.209114][T12060] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 158.211053][T12060] ? __x64_sys_futex+0x34f/0x4d0 [ 158.212854][T12060] ? __x64_sys_futex+0x358/0x4d0 [ 158.214546][T12060] ? xfd_validate_state+0x129/0x190 [ 158.216220][T12060] do_syscall_64+0x115/0x870 [ 158.217704][T12060] ? clear_bhb_loop+0x40/0x90 [ 158.219209][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.221048][T12060] RIP: 0033:0x7f92a019e0d9 [ 158.222699][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.229322][T12060] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 158.232410][T12060] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 158.235030][T12060] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000004 [ 158.237512][T12060] RBP: 00007f92a0235024 R08: 0000000000000000 R09: 0000000000000000 [ 158.240052][T12060] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 158.243021][T12060] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 158.245652][T12060] [ 158.246674][T12060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.248986][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.3.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.252567][T12060] Tainted: [L]=SOFTLOCKUP [ 158.254011][T12060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.257196][T12060] Call Trace: [ 158.258329][T12060] [ 158.259341][T12060] dump_stack_lvl+0x100/0x190 [ 158.260917][T12060] vpanic+0x552/0x970 [ 158.262256][T12060] ? __pfx_vpanic+0x10/0x10 [ 158.263724][T12060] panic+0xd1/0xe0 [ 158.264964][T12060] ? __pfx_panic+0x10/0x10 [ 158.266447][T12060] ? check_panic_on_warn+0x1f/0x90 [ 158.268068][T12060] check_panic_on_warn.cold+0x19/0x34 [ 158.269853][T12060] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 158.271775][T12060] __warn.cold+0x191/0x318 [ 158.273278][T12060] __report_bug+0x30f/0x440 [ 158.274799][T12060] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 158.276630][T12060] ? __pfx___report_bug+0x10/0x10 [ 158.278265][T12060] ? netdev_queue_get_dma_dev+0x519/0x660 [ 158.280230][T12060] ? find_held_lock+0x2b/0x80 [ 158.281730][T12060] ? mark_held_locks+0x40/0x70 [ 158.283327][T12060] report_bug_entry+0xe1/0x290 [ 158.284874][T12060] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 158.286764][T12060] handle_bug+0x1cd/0x2a0 [ 158.288216][T12060] exc_invalid_op+0x17/0x50 [ 158.289733][T12060] asm_exc_invalid_op+0x1a/0x20 [ 158.291273][T12060] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 158.293339][T12060] Code: 89 c5 89 c6 e8 f7 ef 68 f8 45 85 ed 0f 85 be fb ff ff e8 79 f5 68 f8 48 8d 3d 22 04 90 07 ba 48 00 00 00 48 c7 c6 e0 88 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 f5 68 f8 48 8d bd 00 08 00 00 [ 158.299699][T12060] RSP: 0018:ffffc9000bbc7a80 EFLAGS: 00010293 [ 158.301714][T12060] RAX: 0000000000000000 RBX: ffff88802cf48000 RCX: ffffffff89a16f59 [ 158.304365][T12060] RDX: 0000000000000048 RSI: ffffffff8d1888e0 RDI: ffffffff91317390 [ 158.306979][T12060] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 158.309659][T12060] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 158.312263][T12060] R13: 0000000000000000 R14: ffff8880290c0568 R15: ffffc9000bbc7be0 [ 158.314883][T12060] ? netdev_queue_get_dma_dev+0x519/0x660 [ 158.316649][T12060] io_register_zcrx+0xe94/0x1d30 [ 158.318266][T12060] ? __pfx_io_register_zcrx+0x10/0x10 [ 158.320131][T12060] ? __pfx___futex_wait+0x10/0x10 [ 158.321798][T12060] ? lock_acquire+0x1b9/0x370 [ 158.323374][T12060] ? rcu_is_watching+0x12/0xc0 [ 158.324962][T12060] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 158.326926][T12060] ? __fget_files+0x215/0x3d0 [ 158.328558][T12060] ? __fget_files+0x215/0x3d0 [ 158.330148][T12060] __do_sys_io_uring_register+0x1193/0x1bc0 [ 158.332079][T12060] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 158.334191][T12060] ? __x64_sys_futex+0x34f/0x4d0 [ 158.335832][T12060] ? __x64_sys_futex+0x358/0x4d0 [ 158.337487][T12060] ? xfd_validate_state+0x129/0x190 [ 158.339280][T12060] do_syscall_64+0x115/0x870 [ 158.340838][T12060] ? clear_bhb_loop+0x40/0x90 [ 158.342481][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.344427][T12060] RIP: 0033:0x7f92a019e0d9 [ 158.345769][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.352067][T12060] RSP: 002b:00007f92a10d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 158.354837][T12060] RAX: ffffffffffffffda RBX: 00007f92a0425fa0 RCX: 00007f92a019e0d9 [ 158.357488][T12060] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000004 [ 158.360129][T12060] RBP: 00007f92a0235024 R08: 0000000000000000 R09: 0000000000000000 [ 158.362750][T12060] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 158.365365][T12060] R13: 00007f92a0426038 R14: 00007f92a0425fa0 R15: 00007fff4f50c758 [ 158.367839][T12060] [ 158.369622][T12060] Kernel Offset: disabled [ 158.371020][T12060] Rebooting in 86400 seconds..