last executing test programs: 1m29.26036811s ago: executing program 1 (id=201): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_pts(r0, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x42}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000011, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) 1m29.130165948s ago: executing program 1 (id=203): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xc2eb4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x7}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './config\x00'}) mmap$snddsp(&(0x7f0000b23000/0x3000)=nil, 0x3000, 0x6, 0x80010, r2, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m28.861149517s ago: executing program 1 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x4, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x2, 0xeecfff1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@dead_binder_done], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0x5}]}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r5 = dup(r1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240488f1}, 0x4890) r9 = dup(r6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40280, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000000240)={r10, 0x0, 0x2201, 0x0, 0xfffffff9, 0x0, &(0x7f0000000200)=0x9}) ioctl(r12, 0x4048aecb, &(0x7f0000000200)) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x30) 1m27.391450653s ago: executing program 1 (id=210): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000005c0)={0x7ff, 0x2, "45cf2922520ee0b00b522a4002d44e045f0b04d1b9541d34c78fdd2466fcc740194156768415ea5d3b10e108fd86c91a4df9204a5e560a67e8376d0798073b256207be8050185b4442c14d6e3fcde097f4fc22ded2153f079026b1f5bedc82830ee90ea5fd811a513ad5aeb43122078c330356e9588dd65d1fdfcbd8753ae4cca7dd0d965715dac814611a2996d6e8241623fb3976eeadf9e87a6e80c76d873e5741c8dad4c040f13d25cdb7d8a8e473876c7fb254efc6130bf5e7a1f3d25c015d712ee77047fa5d75db1737467b0a345e97d7395a5b8fbd7d32a91160ba2af158e50343dea0b5f5774e4086fc3ee900d635eae02248d1347cacd4e1ea47ca10"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x856, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, {0xa, 0x4e21, 0xfff, @loopback, 0xe0000000}, r4, 0xfffffff9}}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100"/17], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1m27.338876829s ago: executing program 1 (id=212): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='ra', 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x40}}, 0x805) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020001000000080003000100000008000400", @ANYRES32=r3], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000003c001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000001000/0x1000)=nil) syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.08116946s ago: executing program 1 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) close(0x3) 1m24.968420418s ago: executing program 32 (id=100): syz_io_uring_setup(0x47ea, &(0x7f0000000400)={0x0, 0xba32, 0x1, 0x2, 0xb3}, 0x0, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x3, 0x5, 0x1000000003, 0x40000000008}) 1m22.326795667s ago: executing program 0 (id=229): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000080)=0x1) (async) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x10}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@random="91a3a8e68191", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @parameter_prob={0xc, 0x0, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x4, 0x8, 0x68, 0x400, 0xb4, 0xff, 0x8, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380), 0x100002e0, 0x0, 0x0, 0x10008882}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 1m22.127549175s ago: executing program 0 (id=230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0806000186dd06100002aaaaaaaaaaaafe8000000000000000000000000000210180c2530002fc000000000000000000000000000001"], 0x42) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9950, 0x2}, &(0x7f00000000c0)=0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r2 = semget$private(0x0, 0x6, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="fe2a4dd52ee3"], 0xa) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xfffb, 0x0, 0x9, 0x8, r1}, &(0x7f0000000140)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001880)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0x58, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 1m21.770799458s ago: executing program 0 (id=231): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="030302000800ffff04000313884c060b00020180c2000003184ca739cdc964b4abfc2eaaaaaaaaaaaa43b9ceb928a50a8e"], 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m21.459633126s ago: executing program 0 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x1f, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1e00000001000000", @ANYRES32=r0, @ANYBLOB="875b0c96c52de007b3061f4fa3a26c81522a1db8e1f34ce66a8866e6261006b01a0a767f2cdf92c17f72a3d0b261448e69b54aab54dc96864b9673086896ff128844766a8b940b36b67059760985236e8784e522c46e0c5315476206318d4b6a77afd9bc471ed4d3c8aa17042280514f5c8a404e936e81c970ee83812d5103123bcbf56842c54600"/150, @ANYRES32=r2, @ANYBLOB, @ANYRES64=r1], 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000000"], 0x44}}, 0x0) 1m21.157373602s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) fsopen(&(0x7f0000000440)='befs\x00', 0x1) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) (async) unshare(0x40000000) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="f4cc15e6fdc1", 'vxcan1\x00'}}, 0x1e) 1m20.521126181s ago: executing program 0 (id=236): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) (async) 1m20.425510137s ago: executing program 33 (id=236): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) (async) 1m11.851571144s ago: executing program 34 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) close(0x3) 1m7.581345605s ago: executing program 5 (id=292): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000300)=0x2a0) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 1m7.409095939s ago: executing program 5 (id=293): r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r4 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0x2000c800) 1m7.297020742s ago: executing program 5 (id=295): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1e, 0x80000001, @local, 0x5}}}, 0x30) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) accept$alg(r0, 0x0, 0x0) (async) dup3(r1, r0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1e, 0x80000001, @local, 0x5}}}, 0x30) (async) 1m7.168903361s ago: executing program 5 (id=296): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb9, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb9, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x18014045}, 0x800) socket$inet(0x2, 0x6000000000000001, 0x0) (async) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) (async) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000080)={0x0}) r7 = fcntl$getown(r1, 0x9) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000100)={r6, 0xffff, 0x0, 0x0, r7}) socket$can_bcm(0x1d, 0x2, 0x2) 1m6.910714076s ago: executing program 5 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x4eb, 0x7, {{0x29, 0x4, 0x2, 0x8, 0xa4, 0x67, 0x0, 0xe3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0x64, 0x0, 0x6, [0x9]}, @timestamp_prespec={0x44, 0x1c, 0x89, 0x3, 0x1, [{@multicast2, 0x8855}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbb9b}]}, @end, @timestamp_addr={0x44, 0x2c, 0x33, 0x1, 0x3, [{@empty, 0x9}, {@local, 0x3}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @rr={0x7, 0x13, 0x87, [@broadcast, @private=0xa010102, @broadcast, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xd4, 0x3, 0x1, [{@broadcast, 0x4}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x8}]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}}, 0x4048141) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write$cgroup_int(r5, &(0x7f00000007c0)=0xff, 0x12) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) epoll_create(0x7) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x60, 0x0, 0x2, 0x0, 0x4, 0x2}, 0x30, 0x0) 1m6.691337235s ago: executing program 5 (id=300): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x642, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x54, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @fda={0x66646185, 0xa, 0x1, 0x24}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}], 0xe6, 0x0, &(0x7f00000004c0)="9824477f57f42e7b53b49eeb2407ccef38810500c23818885254e46b735e2b90d39501e0ee550c6f70693de094d0731f26d0fb8b60265522ece2ebcdba7b88a441d3a1a5ce4014f21e0a969421abfc474a70a6887690edd35f0e744e4d1ee9271c1ef7fc32b24d3fa48264aeeb2dfe07490ebc4599d819ab10040a0f2d8aa92a93a5dbfa3e5de586f9cb915c19beee17f0843a7fd1991ce6b2bdb9dd581490c4a5c3e0f0c7ce0661d8096f0196cac874aa507dfc53eae416fe1c3e6b860911e52936079a01d151e7e37cb4d19c479679fb4833a5ac8f99086ca347ce3b10e2bf95430f35b056"}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) keyctl$session_to_parent(0x12) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="391a25bd7000fddbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0a0018000303030303030000140023800600120009000000080014"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x8000) 1m4.699242617s ago: executing program 4 (id=319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00001a7000/0x4000)=nil, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.470545507s ago: executing program 4 (id=321): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x1, 0x400001) (async) fcntl$addseals(r0, 0x409, 0x8) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r2, 0x303, 0x0, 0x25dfdbfd, {0x13}}, 0x14}}, 0x0) 1m4.22844796s ago: executing program 4 (id=324): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="030302000800ffff04000313884c060b00020180c2000003184ca739cdc964b4abfc2eaaaaaaaaaaaa43b9ceb928a50a8e"], 0x31) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m3.960205705s ago: executing program 4 (id=326): socket$inet_icmp(0x2, 0x2, 0x1) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) getdents64(r1, &(0x7f0000000140)=""/62, 0x3e) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000440)=0x80e, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000440)=0x80e, 0x4) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f0000000640), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x859}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @adapter={0xf, 0x4, 0x1, 0xff, 0x7}}]}) r6 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) write$eventfd(r6, &(0x7f0000000080)=0x430f, 0x8) (async) write$eventfd(r6, &(0x7f0000000080)=0x430f, 0x8) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40840) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x2, &(0x7f00000002c0)=""/178, 0xb2}, 0x3}, {{&(0x7f0000000380)=@ethernet, 0x80, &(0x7f0000001940)=[{&(0x7f0000000480)=""/233, 0xe9}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/185, 0xb9}, {&(0x7f0000001780)=""/183, 0xb7}, {&(0x7f0000001840)=""/225, 0xe1}], 0x5, &(0x7f00000019c0)=""/172, 0xac}, 0x3}], 0x2, 0x12040, &(0x7f0000001b00)={0x77359400}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'broute\x00', 0x0, 0x0, 0x0, [0x8000, 0x8, 0x0, 0x5, 0x7f, 0x200]}, &(0x7f0000000600)=0x78) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/27, 0x1b}], 0x1) (async) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/27, 0x1b}], 0x1) 1m2.9191143s ago: executing program 4 (id=332): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x51, &(0x7f00000001c0)={0x0, 0x9164, 0x1000, 0x1, 0x359, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000080)) close_range(r3, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x51, &(0x7f00000001c0)={0x0, 0x9164, 0x1000, 0x1, 0x359, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000080)) (async) close_range(r3, r4, 0x0) (async) 1m2.270471377s ago: executing program 4 (id=334): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="030302000800ffff04000313884c060b00020180c2000003184ca739cdc964b4abfc2eaaaaaaaaaaaa43b9ceb928a50a8e"], 0x31) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m2.170146002s ago: executing program 35 (id=334): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="030302000800ffff04000313884c060b00020180c2000003184ca739cdc964b4abfc2eaaaaaaaaaaaa43b9ceb928a50a8e"], 0x31) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 52.790170982s ago: executing program 2 (id=387): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file1\x00', r1}, 0x18) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000300)) (async) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="f8fffbff09000000"], 0x24}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xfffffffd, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x1004, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) (async, rerun: 64) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 52.654505462s ago: executing program 2 (id=389): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1f95, &(0x7f0000000740)={0x0, 0x7f97, 0x1, 0x3, 0x121}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x0, 0x12, r1, 0xffffffff80000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff15, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000002c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newsa={0x184, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010103, @in=@multicast1, 0x0, 0x4000, 0x4e21, 0x8001, 0x0, 0x20}, {@in=@remote, 0x0, 0x32}, @in=@remote, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x4, 0x8}, {0xa58, 0x0, 0x200000000}, {0x0, 0x0, 0xfff}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}, 0x0, 0x100}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080d4) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0, 0x0, 0x2) 52.529005435s ago: executing program 2 (id=391): setns(0xc9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000186dd6012000800183a00fe82000000000000000000000000000d0000000000000000000100000000000183009078000b36c0fe8000000000000000000000000000bb"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)={0x8040, 0x102, 0x3}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40806685, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "407974d9d224f02f624a7889c20d6f965b92c37523fb04292d1744e7e7a65be3", "643af9b5d866eadf2e71304421584edba91391f98778fd62376de4d74f328d89", "592d49bdfaab1c1993f7317157dbef1534dbbb0a8d4e0dcb216b5d1d30713679", "7872065a8cab0e3cb327641730cb6c566c9d7617397dc00db29d1aefa1b232f4", "900cfdd3f5e9686c6239db1c677fccbc18c78b0056305e83d36a6973b1d82480", "fba673a8e4608540e495f488", 0xbe5c, 0x8001, 0x1, 0x6, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 51.681413447s ago: executing program 36 (id=300): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x642, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x54, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @fda={0x66646185, 0xa, 0x1, 0x24}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}], 0xe6, 0x0, &(0x7f00000004c0)="9824477f57f42e7b53b49eeb2407ccef38810500c23818885254e46b735e2b90d39501e0ee550c6f70693de094d0731f26d0fb8b60265522ece2ebcdba7b88a441d3a1a5ce4014f21e0a969421abfc474a70a6887690edd35f0e744e4d1ee9271c1ef7fc32b24d3fa48264aeeb2dfe07490ebc4599d819ab10040a0f2d8aa92a93a5dbfa3e5de586f9cb915c19beee17f0843a7fd1991ce6b2bdb9dd581490c4a5c3e0f0c7ce0661d8096f0196cac874aa507dfc53eae416fe1c3e6b860911e52936079a01d151e7e37cb4d19c479679fb4833a5ac8f99086ca347ce3b10e2bf95430f35b056"}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) keyctl$session_to_parent(0x12) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="391a25bd7000fddbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0a0018000303030303030000140023800600120009000000080014"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x8000) 49.321153909s ago: executing program 2 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./dev\x00', &(0x7f0000000140), 0x80800, &(0x7f0000000940)={'trans=virtio,', {[{@privport}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_appraise}]}}) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) io_uring_setup(0x6a72, &(0x7f0000000180)={0x0, 0x30b6, 0x100, 0x3, 0x135, 0x0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aaaa000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000005c0)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000600)=0x0) preadv(r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/201, 0xc9}], 0x1, 0x0, 0x64f8) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000640)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r8 = getpid() syz_pidfd_open(r8, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x111100) r10 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0xa, 0x2, 0xac1, 0xfffffffd, '\x00', 0xffffffff}, 0x4, 0x200, 0x9, r10, 0x2, 0x6, 'syz0\x00', &(0x7f0000000300)=['\x00', 'net/wireless\x00'], 0xe}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000006c0)=0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)=0x0) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000000140)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000b00)=0x0) syz_clone3(&(0x7f00000007c0)={0x800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x41}, &(0x7f0000000400)=""/233, 0xe9, &(0x7f0000000500)=""/176, &(0x7f0000000780)=[r4, r5, r6, r7, r8, r10, r11, r12, r13, r14], 0xa, {r1}}, 0x58) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r15, 0xffffffffffffffff, 0x0) read$nci(r3, &(0x7f0000000840)=""/81, 0x51) 49.11911963s ago: executing program 2 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x4088) 48.630625469s ago: executing program 2 (id=416): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000000)=0xa}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000000)=0xa}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400018}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x75, 0xc, "a594fec61f401742600c5382c93854b965e4d6a40d050f3f9824316a35f7d26ba10cad23e0ddfaf05e878b04a092cc2ce8536d1adb9b3142e62863346e04fa6737037dd4d75c32d45422739b7c008b138711651f0af3d11f5c1004dac1aeb9caaff6bd93654c80f3b9a1d282fb6d188f1e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x144}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000105a7bfc646cc2c136f0f26a41f05ede8d8061c8eaadf48bce", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) r4 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000001c0)="cd0d587cc000e35814ab718ad83608cd1970fa111d57af611964f41962c7f5d1dc2128ee0dbde35ec51e9d60db058094417ae10f66d86ba584a8ebe8932997630464", 0x42, 0x32, 0x0, 0x1}, &(0x7f00000002c0)) (async) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000001c0)="cd0d587cc000e35814ab718ad83608cd1970fa111d57af611964f41962c7f5d1dc2128ee0dbde35ec51e9d60db058094417ae10f66d86ba584a8ebe8932997630464", 0x42, 0x32, 0x0, 0x1}, &(0x7f00000002c0)) 48.566138241s ago: executing program 37 (id=416): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000000)=0xa}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000000)=0xa}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400018}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x75, 0xc, "a594fec61f401742600c5382c93854b965e4d6a40d050f3f9824316a35f7d26ba10cad23e0ddfaf05e878b04a092cc2ce8536d1adb9b3142e62863346e04fa6737037dd4d75c32d45422739b7c008b138711651f0af3d11f5c1004dac1aeb9caaff6bd93654c80f3b9a1d282fb6d188f1e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x144}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000105a7bfc646cc2c136f0f26a41f05ede8d8061c8eaadf48bce", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) r4 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000001c0)="cd0d587cc000e35814ab718ad83608cd1970fa111d57af611964f41962c7f5d1dc2128ee0dbde35ec51e9d60db058094417ae10f66d86ba584a8ebe8932997630464", 0x42, 0x32, 0x0, 0x1}, &(0x7f00000002c0)) (async) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000001c0)="cd0d587cc000e35814ab718ad83608cd1970fa111d57af611964f41962c7f5d1dc2128ee0dbde35ec51e9d60db058094417ae10f66d86ba584a8ebe8932997630464", 0x42, 0x32, 0x0, 0x1}, &(0x7f00000002c0)) 27.860051862s ago: executing program 6 (id=563): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x3, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009400200000008000c00a80a000008000b000000000006000100230000000c0016000600000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 27.768753649s ago: executing program 6 (id=564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x18) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = dup(r2) read(r3, &(0x7f0000000040), 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='file0', 0x5) 27.617043189s ago: executing program 6 (id=566): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x2004}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 27.220882913s ago: executing program 6 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00004c0000/0x1000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ab, 0xc000, 0x1000001, 0x230}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) socket$rds(0x15, 0x5, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 27.068590457s ago: executing program 6 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 26.370049916s ago: executing program 6 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00002e3000/0x3000)=nil, 0x3000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x3}, {0xe, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x7, 0x2, 0x7, 0x5, [{0x5, 0x1, 0x8, 0xd8}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xf, 0xe}, {0x10, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x5, 0xa73, 0x0, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4c3, 0x2, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x6]}}]}]}, 0x7c}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000000c00038004000380040005001800018014000200766c616e30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) readv(r5, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/221, 0xdd}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 26.32280375s ago: executing program 38 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00002e3000/0x3000)=nil, 0x3000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x3}, {0xe, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x7, 0x2, 0x7, 0x5, [{0x5, 0x1, 0x8, 0xd8}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xf, 0xe}, {0x10, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x5, 0xa73, 0x0, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4c3, 0x2, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x6]}}]}]}, 0x7c}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000000c00038004000380040005001800018014000200766c616e30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) readv(r5, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/221, 0xdd}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 8.530806491s ago: executing program 7 (id=745): syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaa88aaaaaabbbbbbbbbbbb2c004500001c006400004801907864010102ac1414bb0000907812340001"], 0x0) 8.42751899s ago: executing program 7 (id=747): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000540)=0x13) sendmsg$nl_route(r0, 0x0, 0x44004) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2180, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5a}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000040)={0x2c, 0x4, r3, 0xe, r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dddbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r9], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000240)={@multicast1, @empty}, 0x8) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x67}, 0x1, 0x0, 0x0, 0x240488d5}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xc, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 8.189679016s ago: executing program 7 (id=750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x633, 0x70bd2c, 0x25dfdbfd, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80, 0x80}, {@in=@rand_addr=0x64010101, 0x4d2, 0x32}, @in=@loopback, {0x31f, 0x80007ffd, 0x0, 0xc0, 0x5, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x2}, {0x0, 0x0, 0x2}, 0x70bd29, 0x3503, 0xa, 0x5}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008014) munlockall() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3', 0x1) (async) syz_emit_ethernet(0x36, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @loopback}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) 8.00308327s ago: executing program 7 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x64}}, 0x4008080) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)="03", 0x1}], 0x1) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0xd, 0x4}) (async) r3 = io_uring_setup(0x7272, &(0x7f0000000080)={0x0, 0x8270, 0x40, 0x1, 0x116}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) (async) sendto$l2tp(r2, &(0x7f0000000100)="003f5a8396467151a3b127d6ead328d4f0895491935ff6ba1cf4fb3ffeb9f2b52f1779ba523d21c834abf553c3e1185eb4eaa8a912de5fb224914c539d40f1fc00630607c31af4761efdaa99d4d5a4f864c61af0d73447b2cac96a3fcb457e536a89bf35b9dde3399a48654ea86eb41d6c60a6c81fd86102dfdca1fcfc457f6d47bf5d7b6372d7cabbb4b7bba705e8a0a7ff354cc43576ff5507d7916400b3c6c3c40eb3dea4850e4db915e4521b2c9f8e9beb248450cf17c82f79c802a15023a826c611e7d425ea86ad3394035fef", 0xcf, 0x800, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) (async) execveat(r2, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000380)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='{+[/{^^-,(\x00', &(0x7f0000000340)='!\x00']}, &(0x7f0000000400)={[&(0x7f00000003c0)='*-\\&\x00']}, 0x1000) 7.72997778s ago: executing program 7 (id=754): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="5a1f54f1042fec24f5a9dbb400a396a633a65e78d7066408a0e2071560609e4896807c068c609f55430b386a6ef2696e5b919c1abdb1081dc899cb17e5ea2adcf7fcf417604b1f01734d6c126a43740cce4f211ed75236d22a0865fd6a16d77119fe9c2a577fb0aaa2e46bacf1961b99b14f008cb853e11429eec9d910b4aaa16e14b602fd48b515689c10e2fe7f6f", 0x8f, 0xfffffffffffffff8) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)="47f769", 0x3) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001500)={0x2020}, 0xfffffe23) 7.600397268s ago: executing program 7 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a24000000090a010400000000000000000a0000010800084000000000080008400000000144000000020a0103000000000000000000000003090001"], 0xc5c}}, 0x800) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(r0, 0x400c4d06, 0x0) r1 = fanotify_init(0x1a, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0xa8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000285000/0x2000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)={0x3, 0x0, [{0x6, 0xb24a, 0x5, 0xf6, 0x0, 0x9, 0x10}, {0x80000001, 0x8, 0x7, 0x4, 0x0, 0x773, 0x3}, {0x80000007, 0x5d, 0x0, 0x8, 0x6, 0x2, 0x401}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0) fanotify_mark(r1, 0x1, 0x20, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x481, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0xe0b2, 0x0, 0x6, 0xfffffffffffffff9, 0x40, 0x100, 0x3, 0x10001, 0x1, 0x3, 0x8, 0x3, 0x3ff, 0x925, 0x7f, 0x7fffffff], 0x8000000, 0x200}) sendmmsg$unix(r8, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0xc00c815}}], 0x1, 0x20040804) 6.790532606s ago: executing program 9 (id=762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="a7affe", 0x3}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000780)={0x8, 0xbf, {0xffffffffffffffff}, {0xee00}, 0xf, 0x54bb}) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x14}, &(0x7f00000003c0)=""/75, 0x4b, &(0x7f00000007c0)=""/27, &(0x7f00000004c0)=[0xffffffffffffffff, r3, r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmsg$nl_netfilter(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x150, 0x12, 0x98139f3db4e89258, 0x5, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x7}, [@typed={0x8, 0xcf, 0x0, 0x0, @str='z\x96(\x00'}, @typed={0x8, 0xf0, 0x0, 0x0, @pid=r4}, @generic="bd9c8ac66d9104e456cf60fa3d14c36d9dc7ef423a161c43c17d271eaaf08cbf1debfb2f78ced8a10db24aabf86cfbd022e2ad496b255e3594f68fe1a9c436f33f860885e7b84c4350345b69d84b1fd05e88ab9af72764e98556c68ba06ea4e728823ae8f59a827f579c25df49d92f71178bcf498f54e8a2", @nested={0xb4, 0x110, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x12d}, @generic="cca2afc1e3625b509d6c7032ba467af644480deb78d299e930cf889e4ecee699d082fd2e0194cc1c3feba50050ed72475a2c1ccfc090f763f4b37d17837fcc14450ec97f84ee5eb144230dcdcbe5c521bd4d9f4efd1dfdc505d97c96cfd0e51fc2a443b44157471cfe9f9c7bd15289a15d117b98703b98049f9ec2344f7610dfe6cdfe2734c04bb7d90fce98c3afe79a7788fcbdd3af1e52d531f89e"]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8810}, 0x40) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0xa0, 0x80000001, 0x6, 0x4f424752, [0x200000, 0x5], [0x92], 0x13a}}) 6.448611329s ago: executing program 9 (id=765): lsetxattr$security_evm(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "1d10b82b6ff34e680bf5335a1458e1b540533ef1"}, 0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') unshare(0x8000280) r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x5, 0x4040) mmap$snddsp_status(&(0x7f0000b2c000/0x3000)=nil, 0x1000, 0x2, 0x11, r0, 0x82000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7830, 0x0, 0x3) 6.13840698s ago: executing program 9 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6fc5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ce62d4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4f}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x39}, @CTA_LABELS_MASK={0x18, 0x17, [0x5, 0x1, 0x5, 0x69c1c314, 0x1]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x40001) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x5411, &(0x7f0000000040)={0x7, 0xe, 0x2c, 0x33, 0x3, 0x2, 0x13, "94127196968eaaa684ef5ce643c10d9e7ac555ea", "dd58c900573e7005da2e149e50e7360dae976cb6"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0x10f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0x1, [0xc83, 0x6ba, 0xc6f, 0x2f5]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfffa, r3}, 0x38) close(0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0xfffffffd) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000f50000008500000083000000bf090000000000005509010000000000950000000000000017090000f6ffffffbf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3}, 0x94) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x48}, "24bb673a8d45e1e48dca9ae2f49f3dce5e3ee97883722d3588acf6e711eb5432fc6d86ec7f00bb0764b12e997d5e4e4ee960913e6a8574e40154a5a7327606ae5b359c2249a29b80"}, 0x4c) r6 = socket(0x15, 0x800, 0x100000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblcr\x00', 0x8, 0x42, 0x6f}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x33, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.279489319s ago: executing program 9 (id=775): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x60a, 0x0, [{0x803, 0x2, 0x0, 0x0, @irqchip={0x4, 0xa}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xef, 0xb}}}}}}, 0x0) (async) r3 = dup2(r2, 0x4) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) (async) r5 = socket(0x2, 0x1, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff0c10000007000000080009000200000008000b"], 0x2c}}, 0x890) (async) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) bind$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) openat(r3, &(0x7f0000000240)='./file0\x00', 0x4100, 0x102) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000300)="50000000018cb8f706515165cf2c9e1800011a010000000000000002180000fe0400010000000008001500060000001c0016000a000100080001000400000009000200746573740000000012efb6cfa6d0bad60b815bc908fa47676bb265e4f6ff13a01a52be8a2e42f0889d3a9daa8387f7f5ff5cae32a037a45b1d835e", 0x7e) 4.977986836s ago: executing program 9 (id=778): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 4.809245152s ago: executing program 9 (id=780): mkdir(&(0x7f0000000040)='./file0\x00', 0x21) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) listxattr(0x0, 0x0, 0x0) 2.35044737s ago: executing program 3 (id=792): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async, rerun: 32) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x1b26) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000002240)={0x0, @in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0xea, 0x10000, 0xfdc7, 0x7, 0x101}, &(0x7f0000002300)=0x98) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000100)={0x3, 0x1, [0x2, 0x80000000, 0x400, 0xfffff801, 0x4, 0x100, 0x6, 0x807]}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x2040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002340)={0x1, 0xfc4d, 0x2, 0x4, 0x1, 0x3, 0x4, 0xc, r3}, &(0x7f0000002380)=0x20) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000021c0)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2d, 0x200, 0x0, 0x3, 0x8, 0xa5, 0xb, 0x0, 0x0, 0x1, 0x2}}, 0x50) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$inet(0x2, 0xa, 0x80000001) (async, rerun: 64) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.440265307s ago: executing program 8 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x800) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000200)={0x29, &(0x7f00000000c0)=[{0x3d, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffffffe}, {0x2, @uvalue=0x2}, {0x2, @uvalue=0x401}, {0x0, @uvalue=0x1}]}, 0xa31}]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.300810887s ago: executing program 8 (id=796): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/114, 0x72}], 0x1, 0x2f, 0x100000c0, 0x6) pselect6(0x40, &(0x7f0000000080)={0xaed, 0x4, 0x1, 0x1000, 0x56e4, 0x9, 0x4, 0x5f82}, &(0x7f00000000c0)={0x200, 0xc, 0x2, 0x37, 0x2, 0xcfb, 0x5f02b120, 0x39}, &(0x7f0000000100)={0xbc7, 0x5, 0x2, 0xfffffffffffffff8, 0x1, 0xf, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) 1.220890265s ago: executing program 3 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x2000, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) (async) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000000040110000ac141414e000000104d204d200080000"}}}}}}}, 0x0) 1.128347146s ago: executing program 3 (id=798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="150000ddf64937765a8691746c6dbd199ca65426580101c5ba03ca6a375960a159f8e4c94de9d638bdd4f56b34b4cc5db0513ccd0f7c54bf931ed566428d045374dd35562d672d0d4b2bceb85369222c3689d5983ebc3545e6a5456a63eca833e097", @ANYRES16=r1, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) 1.050784619s ago: executing program 3 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x4040058) 950.496703ms ago: executing program 3 (id=800): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='nf ::7.0.0.102\\000000\\0 l\\calhost\n', 0x24) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "758597dc4ab8811e113d213ed929cc80"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}]}, 0x44}}, 0x8000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2804}, 0x11) 830.43661ms ago: executing program 3 (id=801): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@local, 0x4e23, 0x100, 0x4e21, 0x800, 0x2, 0x80, 0x80, 0x3b}, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) pwrite64(r1, &(0x7f0000001034)='\x00', 0x1, 0x2034) fsync(r1) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffffffffe, 0x4, 0x0, 0x7, 0x80000000, 0x122, 0x6000, 0x10000, r6, r7, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) (rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r8, 0x4004092b, 0x200000000004) (async, rerun: 64) splice(r0, 0x0, r3, 0x0, 0x8000f28, 0x5) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) r9 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) writev(r9, 0x0, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) creat(0x0, 0x34) dup3(0xffffffffffffffff, r9, 0x6700000000000000) 370.147444ms ago: executing program 8 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) syz_emit_ethernet(0x9a, &(0x7f00000005c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "0b1b357d754f78f131f66e5508401126d3f653b6b3073a988a2f6e8da07f0517", "14b3398f88adbb61b86f41fb59ccb661", {"4a0291d69c1cc4f9f2fb3a6730b50053", "04dd8f4a1ba86a7d4d3a0447ac8ca407"}}}}}}}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r3, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 269.981354ms ago: executing program 8 (id=803): mq_open(&(0x7f0000000040)='@+\xf2\\^\x00', 0x1, 0x20, &(0x7f0000000080)={0x4, 0x8, 0x2, 0x1}) syz_io_uring_setup(0x3b05, &(0x7f0000000380)={0x0, 0xfffffffe, 0x1357d, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) fanotify_init(0x1a, 0x800) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mq_open(&(0x7f0000000040)='@+\xf2\\^\x00', 0x1, 0x20, &(0x7f0000000080)={0x4, 0x8, 0x2, 0x1}) (async) syz_io_uring_setup(0x3b05, &(0x7f0000000380)={0x0, 0xfffffffe, 0x1357d, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) (async) fanotify_init(0x1a, 0x800) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) 160.814229ms ago: executing program 8 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x2022, &(0x7f0000000100)='syz1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX, @ANYRESHEX]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0xf, 0x80, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000440)=0x5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0xb3f1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8044) 0s ago: executing program 8 (id=805): select(0xe63d75345373e5df, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x62, 0x101000) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './cgroup\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), 0xa1, 0x0, &(0x7f0000000240)="330328d6de00101d305dbc2be86f9f29ac71fea30ad43175607738d26af8d36c0eccb8f71c191eefde609ca6036e10140b7e6bc649a21bb5c5d56424b4ad2d3e025d142194a1ebc97a54c099cd597a490912ef69b20a480e47504bc15c6d80d188faf4848821a281221c45ce083c9f20854a9544d469c6fe3d0185ddcb99405b4a902cad732e0479ea1f3a011276502a9c55a4dfab12d71123690ded7be05273f1"}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000440)={0x0, 0xb3f3, 0x4000, 0x0, 0x7e}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r6, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r8, r0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): ing preconfigured BSSID 50:50:50:50:50:50 [ 98.447621][ T1720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.510661][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.510674][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.521147][ T5745] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 98.750264][ T5745] Bluetooth: hci0: command tx timeout [ 98.831130][ T7581] program syz.7.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.140654][ T5829] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 99.314369][ T5829] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.318454][ T5829] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 99.318479][ T5829] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.318491][ T5829] usb 11-1: config 0 interface 0 has no altsetting 0 [ 99.333358][ T5829] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.333374][ T5829] usb 11-1: Product: syz [ 99.333381][ T5829] usb 11-1: Manufacturer: syz [ 99.333389][ T5829] usb 11-1: SerialNumber: syz [ 99.336992][ T5829] usb 11-1: config 0 descriptor?? [ 99.363931][ T5829] hub 11-1:0.0: bad descriptor, ignoring hub [ 99.363947][ T5829] hub 11-1:0.0: probe with driver hub failed with error -5 [ 99.371445][ T5829] usb 11-1: selecting invalid altsetting 0 [ 99.630657][ T6847] hsr0: entered promiscuous mode [ 99.633643][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 99.802859][ T5445] 8021q: adding VLAN 0 to HW filter on device eth1 [ 100.012466][ T7583] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 100.067618][ T7612] syzkaller1: entered promiscuous mode [ 100.067633][ T7612] syzkaller1: entered allmulticast mode [ 100.097322][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.363'. [ 100.097340][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.363'. [ 100.097364][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 100.213793][ T7583] usb 11-1: device firmware changed [ 100.215144][ T6759] usb 11-1: USB disconnect, device number 2 [ 100.400381][ T30] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 100.400497][ T6759] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 100.450304][ T7619] netlink: zone id is out of range [ 100.450315][ T7619] netlink: zone id is out of range [ 100.450319][ T7619] netlink: zone id is out of range [ 100.450323][ T7619] netlink: zone id is out of range [ 100.450327][ T7619] netlink: zone id is out of range [ 100.450331][ T7619] netlink: zone id is out of range [ 100.450335][ T7619] netlink: zone id is out of range [ 100.450339][ T7619] netlink: zone id is out of range [ 100.450343][ T7619] netlink: zone id is out of range [ 100.488421][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 100.541252][ T30] usb 12-1: device descriptor read/64, error -71 [ 100.563761][ T6759] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.573771][ T6759] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 100.573813][ T6759] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.573834][ T6759] usb 11-1: config 0 interface 0 has no altsetting 0 [ 100.596268][ T6759] usb 11-1: string descriptor 0 read error: -22 [ 100.596326][ T6759] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.599952][ T6759] usb 11-1: config 0 descriptor?? [ 100.609441][ T6759] hub 11-1:0.0: bad descriptor, ignoring hub [ 100.609456][ T6759] hub 11-1:0.0: probe with driver hub failed with error -5 [ 100.611004][ T6759] usb 11-1: selecting invalid altsetting 0 [ 100.800863][ T30] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 100.830229][ T5745] Bluetooth: hci0: command tx timeout [ 100.920461][ T6759] usb 11-1: USB disconnect, device number 3 [ 100.941208][ T30] usb 12-1: device descriptor read/64, error -71 [ 101.027780][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 101.060474][ T30] usb usb12-port1: attempt power cycle [ 101.123222][ T7629] netlink: 300 bytes leftover after parsing attributes in process `syz.2.366'. [ 101.187766][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 101.187784][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 101.189183][ T7632] netlink: 'syz.2.367': attribute type 2 has an invalid length. [ 101.195076][ T7633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.367'. [ 101.212381][ T7633] tc_dump_action: action bad kind [ 101.422116][ T30] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 101.451775][ T30] usb 12-1: device descriptor read/8, error -71 [ 101.471821][ T7648] xt_hashlimit: size too large, truncated to 1048576 [ 101.511224][ T7651] ublk_ctrl_add_dev: invalid recovery flags 210 [ 101.650414][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 101.710695][ T30] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 101.744029][ T30] usb 12-1: device descriptor read/8, error -71 [ 101.791334][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 101.851185][ T30] usb usb12-port1: unable to enumerate USB device [ 102.067534][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 102.570770][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 102.736225][ T7656] ceph: No mds server is up or the cluster is laggy [ 102.892294][ T7687] hfsplus: unable to find HFS+ superblock [ 102.921164][ T5745] Bluetooth: hci0: command tx timeout [ 102.954961][ T43] kauditd_printk_skb: 2971 callbacks suppressed [ 102.954974][ T43] audit: type=1400 audit(2000000039.589:17870): avc: denied { perfmon } for pid=7682 comm="syz.2.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.960306][ T43] audit: type=1400 audit(2000000039.589:17871): avc: denied { perfmon } for pid=7682 comm="syz.2.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.960335][ T43] audit: type=1400 audit(2000000039.589:17872): avc: denied { bpf } for pid=7682 comm="syz.2.376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.960356][ T43] audit: type=1400 audit(2000000039.589:17873): avc: denied { prog_load } for pid=7682 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.968283][ T43] audit: type=1400 audit(2000000039.599:17874): avc: denied { bpf } for pid=7682 comm="syz.2.376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.973352][ T43] audit: type=1400 audit(2000000039.599:17875): avc: denied { prog_run } for pid=7682 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.977473][ T43] audit: type=1400 audit(2000000039.619:17876): avc: denied { prog_load } for pid=7682 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.978359][ T43] audit: type=1400 audit(2000000039.619:17877): avc: denied { bpf } for pid=7682 comm="syz.2.376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.982864][ T43] audit: type=1400 audit(2000000039.619:17878): avc: denied { perfmon } for pid=7682 comm="syz.2.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.986171][ T43] audit: type=1400 audit(2000000039.629:17879): avc: denied { perfmon } for pid=7682 comm="syz.2.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.122050][ T7691] bond0: (slave bond_slave_0): Releasing backup interface [ 103.546235][ T7704] ref_ctr_offset mismatch. inode: 0x2d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 103.573478][ T7704] Bluetooth: MGMT ver 1.23 [ 103.581963][ T7710] block nbd2: shutting down sockets [ 103.600098][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.6.384'. [ 104.195534][ T7746] FAULT_INJECTION: forcing a failure. [ 104.195534][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 104.195557][ T7746] CPU: 3 UID: 0 PID: 7746 Comm: syz.6.393 Not tainted syzkaller #0 PREEMPT(full) [ 104.195572][ T7746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.195578][ T7746] Call Trace: [ 104.195583][ T7746] [ 104.195593][ T7746] dump_stack_lvl+0x100/0x190 [ 104.195615][ T7746] should_fail_ex.cold+0x5/0xa [ 104.195631][ T7746] should_failslab+0xc2/0x120 [ 104.195657][ T7746] __kmalloc_cache_node_noprof+0x94/0x720 [ 104.195673][ T7746] ? __get_vm_area_node+0x124/0x350 [ 104.195690][ T7746] __get_vm_area_node+0x124/0x350 [ 104.195707][ T7746] __vmalloc_node_range_noprof+0x268/0x1420 [ 104.195723][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.195734][ T7746] ? lock_acquire+0x1d1/0x380 [ 104.195746][ T7746] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 104.195759][ T7746] ? find_held_lock+0x2b/0x80 [ 104.195775][ T7746] ? rcu_read_unlock+0x17/0x60 [ 104.195786][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.195797][ T7746] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 104.195817][ T7746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.195834][ T7746] ? rcu_is_watching+0x13/0xc0 [ 104.195850][ T7746] ? trace_kmem_cache_alloc+0xdd/0x100 [ 104.195869][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.195879][ T7746] __vmalloc_node_noprof+0xad/0xf0 [ 104.195895][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.195907][ T7746] copy_process+0x803/0x8370 [ 104.195928][ T7746] ? __pfx_copy_process+0x10/0x10 [ 104.195941][ T7746] ? kasan_save_track+0x14/0x30 [ 104.195954][ T7746] ? __kasan_kmalloc+0xaa/0xb0 [ 104.195967][ T7746] ? lockdep_init_map_type+0x5c/0x250 [ 104.195981][ T7746] ? lockdep_init_map_type+0x5c/0x250 [ 104.195995][ T7746] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 104.196013][ T7746] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 104.196029][ T7746] vhost_task_create+0x1db/0x370 [ 104.196040][ T7746] ? __pfx_vhost_task_create+0x10/0x10 [ 104.196055][ T7746] ? __pfx_vhost_task_fn+0x10/0x10 [ 104.196067][ T7746] ? register_lock_class+0x3f/0x7b0 [ 104.196079][ T7746] ? rcu_is_watching+0x13/0xc0 [ 104.196097][ T7746] ? trace_contention_end+0x126/0x160 [ 104.196113][ T7746] kvm_mmu_post_init_vm+0x1b3/0x360 [ 104.196128][ T7746] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 104.196143][ T7746] ? __pfx___mutex_lock+0x10/0x10 [ 104.196159][ T7746] ? kasan_quarantine_put+0x104/0x240 [ 104.196174][ T7746] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 104.196189][ T7746] ? lock_acquire+0x1d1/0x380 [ 104.196201][ T7746] ? do_raw_write_lock+0x11e/0x260 [ 104.196216][ T7746] ? find_held_lock+0x2b/0x80 [ 104.196232][ T7746] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 104.196248][ T7746] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 104.196268][ T7746] kvm_vcpu_ioctl+0x730/0x1700 [ 104.196287][ T7746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.196303][ T7746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.196318][ T7746] ? do_vfs_ioctl+0x226/0x13e0 [ 104.196330][ T7746] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.196341][ T7746] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 104.196358][ T7746] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.196376][ T7746] ? __fget_files+0x34/0x3d0 [ 104.196397][ T7746] ? selinux_file_ioctl+0x13b/0x290 [ 104.196410][ T7746] ? selinux_file_ioctl+0xb6/0x290 [ 104.196450][ T7746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.196469][ T7746] __x64_sys_ioctl+0x18e/0x210 [ 104.196483][ T7746] do_syscall_64+0x123/0x790 [ 104.196496][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.196509][ T7746] RIP: 0033:0x7f7fd839e159 [ 104.196520][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.196531][ T7746] RSP: 002b:00007f7fd9252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.196542][ T7746] RAX: ffffffffffffffda RBX: 00007f7fd8625fa0 RCX: 00007f7fd839e159 [ 104.196550][ T7746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 104.196557][ T7746] RBP: 00007f7fd843506b R08: 0000000000000000 R09: 0000000000000000 [ 104.196565][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.196573][ T7746] R13: 00007f7fd8626038 R14: 00007f7fd8625fa0 R15: 00007ffcd03d12b8 [ 104.196595][ T7746] [ 104.196728][ T7746] syz.6.393: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.196817][ T7746] CPU: 3 UID: 0 PID: 7746 Comm: syz.6.393 Not tainted syzkaller #0 PREEMPT(full) [ 104.196830][ T7746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.196837][ T7746] Call Trace: [ 104.196841][ T7746] [ 104.196846][ T7746] dump_stack_lvl+0x100/0x190 [ 104.196865][ T7746] warn_alloc.cold+0x9e/0xb2 [ 104.196879][ T7746] ? __pfx_warn_alloc+0x10/0x10 [ 104.196889][ T7746] ? __kasan_kmalloc+0x8a/0xb0 [ 104.196910][ T7746] ? __get_vm_area_node+0x22b/0x350 [ 104.196929][ T7746] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 104.196947][ T7746] ? lock_acquire+0x1d1/0x380 [ 104.196959][ T7746] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 104.196971][ T7746] ? find_held_lock+0x2b/0x80 [ 104.196988][ T7746] ? rcu_read_unlock+0x17/0x60 [ 104.196999][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.197011][ T7746] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 104.197031][ T7746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.197049][ T7746] ? rcu_is_watching+0x13/0xc0 [ 104.197064][ T7746] ? trace_kmem_cache_alloc+0xdd/0x100 [ 104.197081][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.197091][ T7746] __vmalloc_node_noprof+0xad/0xf0 [ 104.197106][ T7746] ? vhost_task_create+0x1db/0x370 [ 104.197118][ T7746] copy_process+0x803/0x8370 [ 104.197139][ T7746] ? __pfx_copy_process+0x10/0x10 [ 104.197152][ T7746] ? kasan_save_track+0x14/0x30 [ 104.197165][ T7746] ? __kasan_kmalloc+0xaa/0xb0 [ 104.197179][ T7746] ? lockdep_init_map_type+0x5c/0x250 [ 104.197193][ T7746] ? lockdep_init_map_type+0x5c/0x250 [ 104.197208][ T7746] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 104.197227][ T7746] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 104.197243][ T7746] vhost_task_create+0x1db/0x370 [ 104.197254][ T7746] ? __pfx_vhost_task_create+0x10/0x10 [ 104.197269][ T7746] ? __pfx_vhost_task_fn+0x10/0x10 [ 104.197281][ T7746] ? register_lock_class+0x3f/0x7b0 [ 104.197293][ T7746] ? rcu_is_watching+0x13/0xc0 [ 104.197329][ T7746] ? trace_contention_end+0x126/0x160 [ 104.197348][ T7746] kvm_mmu_post_init_vm+0x1b3/0x360 [ 104.197365][ T7746] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 104.197380][ T7746] ? __pfx___mutex_lock+0x10/0x10 [ 104.197390][ T7746] ? kasan_quarantine_put+0x104/0x240 [ 104.197405][ T7746] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 104.197419][ T7746] ? lock_acquire+0x1d1/0x380 [ 104.197431][ T7746] ? do_raw_write_lock+0x11e/0x260 [ 104.197445][ T7746] ? find_held_lock+0x2b/0x80 [ 104.197461][ T7746] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 104.197476][ T7746] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 104.197495][ T7746] kvm_vcpu_ioctl+0x730/0x1700 [ 104.197512][ T7746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.197529][ T7746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.197544][ T7746] ? do_vfs_ioctl+0x226/0x13e0 [ 104.197556][ T7746] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.197568][ T7746] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 104.197584][ T7746] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.197606][ T7746] ? __fget_files+0x34/0x3d0 [ 104.197629][ T7746] ? selinux_file_ioctl+0x13b/0x290 [ 104.197644][ T7746] ? selinux_file_ioctl+0xb6/0x290 [ 104.197660][ T7746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.197677][ T7746] __x64_sys_ioctl+0x18e/0x210 [ 104.197691][ T7746] do_syscall_64+0x123/0x790 [ 104.197704][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.197718][ T7746] RIP: 0033:0x7f7fd839e159 [ 104.197727][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.197738][ T7746] RSP: 002b:00007f7fd9252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.197749][ T7746] RAX: ffffffffffffffda RBX: 00007f7fd8625fa0 RCX: 00007f7fd839e159 [ 104.197757][ T7746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 104.197763][ T7746] RBP: 00007f7fd843506b R08: 0000000000000000 R09: 0000000000000000 [ 104.197770][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.197777][ T7746] R13: 00007f7fd8626038 R14: 00007f7fd8625fa0 R15: 00007ffcd03d12b8 [ 104.197792][ T7746] [ 104.198309][ T7746] Mem-Info: [ 104.198316][ T7746] active_anon:12629 inactive_anon:0 isolated_anon:0 [ 104.198316][ T7746] active_file:33 inactive_file:9612 isolated_file:0 [ 104.198316][ T7746] unevictable:1000 dirty:152 writeback:0 [ 104.198316][ T7746] slab_reclaimable:12073 slab_unreclaimable:69278 [ 104.198316][ T7746] mapped:24852 shmem:1569 pagetables:1530 [ 104.198316][ T7746] sec_pagetables:298 bounce:0 [ 104.198316][ T7746] kernel_misc_reclaimable:0 [ 104.198316][ T7746] free:502018 free_pcp:10872 free_cma:0 [ 104.198346][ T7746] Node 0 active_anon:50516kB inactive_anon:0kB active_file:132kB inactive_file:38312kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:95312kB dirty:604kB writeback:0kB shmem:4276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:5924kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.198379][ T7746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.198409][ T7746] Node 0 DMA free:11052kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 104.198440][ T7746] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 104.198460][ T7746] Node 0 DMA32 free:361760kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50516kB inactive_anon:0kB active_file:132kB inactive_file:38312kB unevictable:2000kB writepending:604kB zspages:0kB present:2080628kB managed:1253172kB mlocked:0kB bounce:0kB free_pcp:32768kB local_pcp:8508kB free_cma:0kB [ 104.198491][ T7746] lowmem_reserve[]: 0 0 0 0 0 [ 104.198509][ T7746] Node 1 Normal free:1635260kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:10612kB local_pcp:6484kB free_cma:0kB [ 104.198539][ T7746] lowmem_reserve[]: 0 0 0 0 0 [ 104.198594][ T7746] Node 0 DMA: 23*4kB (UM) 2*8kB (UM) 2*16kB (UM) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11052kB [ 104.198964][ T7746] Node 0 DMA32: 1813*4kB (UME) 903*8kB (UM) 651*16kB (UM) 489*32kB (UM) 326*64kB (UME) 191*128kB (UME) 148*256kB (M) 81*512kB (UM) 36*1024kB (UME) 20*2048kB (UME) 29*4096kB (UM) = 361820kB [ 104.199062][ T7746] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 7*16kB (UME) 7*32kB (UME) 7*64kB (UM) 5*128kB (UM) 4*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 396*4096kB (M) = 1635260kB [ 104.199155][ T7746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.199164][ T7746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.199173][ T7746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.199181][ T7746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.199190][ T7746] 11210 total pagecache pages [ 104.199195][ T7746] 0 pages in swap cache [ 104.199198][ T7746] Free swap = 124996kB [ 104.199202][ T7746] Total swap = 124996kB [ 104.199207][ T7746] 1048443 pages RAM [ 104.199210][ T7746] 0 pages HighMem/MovableOnly [ 104.199214][ T7746] 285840 pages reserved [ 104.199218][ T7746] 0 pages cma reserved [ 104.455274][ T7748] net_ratelimit: 1714 callbacks suppressed [ 104.455291][ T7748] netlink: zone id is out of range [ 104.585579][ T7749] FAULT_INJECTION: forcing a failure. [ 104.585579][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 104.585600][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.6.394 Not tainted syzkaller #0 PREEMPT(full) [ 104.585613][ T7749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.585621][ T7749] Call Trace: [ 104.585625][ T7749] [ 104.585630][ T7749] dump_stack_lvl+0x100/0x190 [ 104.585650][ T7749] should_fail_ex.cold+0x5/0xa [ 104.585666][ T7749] should_failslab+0xc2/0x120 [ 104.585682][ T7749] __kmalloc_noprof+0xfc/0x840 [ 104.585694][ T7749] ? sk_prot_alloc+0x10b/0x2a0 [ 104.585716][ T7749] sk_prot_alloc+0x10b/0x2a0 [ 104.585734][ T7749] sk_alloc+0x36/0xe80 [ 104.585748][ T7749] packet_create+0x127/0x8e0 [ 104.585764][ T7749] __sock_create+0x339/0x860 [ 104.585777][ T7749] __sys_socket+0x14d/0x260 [ 104.585789][ T7749] ? __pfx___sys_socket+0x10/0x10 [ 104.585806][ T7749] __x64_sys_socket+0x72/0xb0 [ 104.585818][ T7749] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.585836][ T7749] do_syscall_64+0x123/0x790 [ 104.585848][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.585859][ T7749] RIP: 0033:0x7f7fd839e159 [ 104.585870][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.585881][ T7749] RSP: 002b:00007f7fd9231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 104.585893][ T7749] RAX: ffffffffffffffda RBX: 00007f7fd8626090 RCX: 00007f7fd839e159 [ 104.585900][ T7749] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 104.585907][ T7749] RBP: 00007f7fd843506b R08: 0000000000000000 R09: 0000000000000000 [ 104.585913][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.585920][ T7749] R13: 00007f7fd8626128 R14: 00007f7fd8626090 R15: 00007ffcd03d12b8 [ 104.585934][ T7749] [ 104.635983][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.395'. [ 104.648221][ T7751] netlink: 'syz.7.395': attribute type 2 has an invalid length. [ 104.648239][ T7751] netlink: 48 bytes leftover after parsing attributes in process `syz.7.395'. [ 104.659638][ T7751] : entered promiscuous mode [ 104.756476][ T7755] tipc: Started in network mode [ 104.756496][ T7755] tipc: Node identity 2000004, cluster identity 4711 [ 104.756505][ T7755] tipc: Node number set to 33554436 [ 104.943208][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.7.398'. [ 104.969909][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.977877][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.981485][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.988453][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.989788][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.332911][ T5809] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.409653][ T5809] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.501548][ T5809] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.576945][ T5809] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.841323][ T5809] bridge_slave_1: left allmulticast mode [ 105.841348][ T5809] bridge_slave_1: left promiscuous mode [ 105.841524][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.847949][ T5809] bridge_slave_0: left allmulticast mode [ 105.847973][ T5809] bridge_slave_0: left promiscuous mode [ 105.848140][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.962691][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.965666][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.966630][ T5809] bond0 (unregistering): Released all slaves [ 106.247711][ T5809] hsr_slave_0: left promiscuous mode [ 106.248178][ T5809] hsr_slave_1: left promiscuous mode [ 106.248551][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.248562][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.249821][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.249831][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.284218][ T5809] veth1_macvtap: left promiscuous mode [ 106.284242][ T5809] veth0_macvtap: left promiscuous mode [ 106.284286][ T5809] veth1_vlan: left promiscuous mode [ 106.284316][ T5809] veth0_vlan: left promiscuous mode [ 106.436268][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 106.473120][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 106.628860][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.628905][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.628969][ T7760] bridge_slave_0: entered allmulticast mode [ 106.629723][ T7760] bridge_slave_0: entered promiscuous mode [ 106.644996][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.647319][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.647399][ T7760] bridge_slave_1: entered allmulticast mode [ 106.648191][ T7760] bridge_slave_1: entered promiscuous mode [ 106.659863][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 106.684191][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.686631][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.725089][ T7760] team0: Port device team_slave_0 added [ 106.731628][ T7760] team0: Port device team_slave_1 added [ 106.787836][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.787849][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.787863][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.792097][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.792110][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.792127][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.830724][ T7760] hsr_slave_0: entered promiscuous mode [ 106.831525][ T7760] hsr_slave_1: entered promiscuous mode [ 106.977939][ T7760] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 106.983252][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.987217][ T7760] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 106.993607][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.997017][ T7760] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.001973][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.005858][ T7760] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.011261][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.071338][ T5089] Bluetooth: hci4: command tx timeout [ 107.156805][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.175471][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.186619][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.186701][ T522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.195140][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.195227][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.347414][ T7844] openvswitch: netlink: Message has 4 unknown bytes. [ 107.498740][ T7845] tipc: Resetting bearer [ 107.542820][ T7845] tipc: Disabling bearer [ 107.545948][ T7845] syz_tun (unregistering): left promiscuous mode [ 107.559305][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 107.702557][ T7856] CIFS: Attempting to mount //127.0.0.1/share [ 107.720956][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802cf0b000: rx timeout, send abort [ 107.723011][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cf0b000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.738635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e2d400: rx timeout, send abort [ 107.738816][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e2d400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.961133][ T43] kauditd_printk_skb: 2238 callbacks suppressed [ 107.961146][ T43] audit: type=1400 audit(2000000044.599:20118): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.961169][ T43] audit: type=1400 audit(2000000044.599:20119): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.961189][ T43] audit: type=1400 audit(2000000044.599:20120): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.961209][ T43] audit: type=1400 audit(2000000044.599:20121): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.962909][ T43] audit: type=1400 audit(2000000044.599:20122): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.963030][ T43] audit: type=1400 audit(2000000044.599:20123): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.963157][ T43] audit: type=1400 audit(2000000044.599:20124): avc: denied { search } for pid=7866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.963308][ T43] audit: type=1400 audit(2000000044.599:20125): avc: denied { read } for pid=7866 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.964358][ T43] audit: type=1400 audit(2000000044.599:20126): avc: denied { read open } for pid=7866 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.965471][ T43] audit: type=1400 audit(2000000044.599:20127): avc: denied { getattr } for pid=7866 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.201599][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.209238][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.213351][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.220646][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.227978][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.463826][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.526785][ T7856] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 108.530318][ T7856] CIFS: VFS: cifs_mount failed w/return code = -11 [ 108.587421][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 108.870898][ T7904] binder: 7903:7904 ioctl c0306201 2000000003c0 returned -14 [ 109.151122][ T5089] Bluetooth: hci4: command tx timeout [ 109.346478][ T7760] veth0_vlan: entered promiscuous mode [ 109.378327][ T7760] veth1_vlan: entered promiscuous mode [ 109.412540][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.412649][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.412751][ T7874] bridge_slave_0: entered allmulticast mode [ 109.414568][ T7874] bridge_slave_0: entered promiscuous mode [ 109.417383][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.417458][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.417526][ T7874] bridge_slave_1: entered allmulticast mode [ 109.420806][ T7874] bridge_slave_1: entered promiscuous mode [ 109.462698][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.468256][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.481910][ T7928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.513626][ T7874] team0: Port device team_slave_0 added [ 109.518657][ T7874] team0: Port device team_slave_1 added [ 109.545081][ T7760] veth0_macvtap: entered promiscuous mode [ 109.547223][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.547233][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.547246][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.548719][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20 [ 109.549175][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.549184][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.549197][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.582723][ T7760] veth1_macvtap: entered promiscuous mode [ 109.651704][ T7874] hsr_slave_0: entered promiscuous mode [ 109.652166][ T7874] hsr_slave_1: entered promiscuous mode [ 109.652475][ T7874] debugfs: 'hsr0' already exists in 'hsr' [ 109.652486][ T7874] Cannot create hsr debugfs directory [ 109.658344][ T7934] Could not find key with description: [syz] [ 109.658354][ T7934] process_request_key_err: No key [ 109.658359][ T7934] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 109.658364][ T7934] One or more global auth toks could not properly register; rc = [-2] [ 109.658380][ T7934] Error validating options; rc = [-2] [ 109.702842][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.727647][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.841069][ T5809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.841096][ T5809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.841115][ T5809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.841132][ T5809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.949016][ T7874] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 109.952356][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.955968][ T1720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.955985][ T1720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.956905][ T7874] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 109.969416][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.981084][ T7874] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 109.985719][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.010483][ T7874] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 110.014165][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.062385][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.062400][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.135998][ T7958] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.136017][ T7958] CIFS: Attempting to mount //127.0.0.1/share [ 110.187432][ T7958] CIFS: VFS: cifs_mount failed w/return code = -112 [ 110.214749][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.246134][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.256432][ T5089] Bluetooth: hci0: unexpected subevent 0x18 length: 30 > 19 [ 110.256450][ T5089] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 110.258361][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.258405][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.271079][ T5089] Bluetooth: hci1: command tx timeout [ 110.281174][ T7964] netlink: 'syz.7.427': attribute type 101 has an invalid length. [ 110.284846][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.284892][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.306149][ T7965] LUN: removable file: (no medium) [ 110.692042][ T7984] input: syz1 as /devices/virtual/input/input7 [ 110.775948][ T7982] netlink: 'syz.8.431': attribute type 3 has an invalid length. [ 110.775977][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.431'. [ 110.948748][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.7.432'. [ 111.188534][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.218239][ T8011] netlink: 5 bytes leftover after parsing attributes in process `syz.8.436'. [ 111.218797][ T8011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.222812][ T8011] netlink: 5 bytes leftover after parsing attributes in process `syz.8.436'. [ 111.223037][ T8011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.230882][ T5089] Bluetooth: hci4: command tx timeout [ 111.350362][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 111.510275][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 111.514930][ T9] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.530491][ T9] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.539729][ T9] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.539746][ T9] usb 11-1: Product: syz [ 111.539754][ T9] usb 11-1: Manufacturer: syz [ 111.539761][ T9] usb 11-1: SerialNumber: syz [ 111.559535][ T9] usb 11-1: config 0 descriptor?? [ 111.572065][ T8005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 111.573882][ T9] hub 11-1:0.0: bad descriptor, ignoring hub [ 111.573896][ T9] hub 11-1:0.0: probe with driver hub failed with error -5 [ 111.732341][ T7874] veth0_vlan: entered promiscuous mode [ 111.778812][ T7874] veth1_vlan: entered promiscuous mode [ 111.799545][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.807222][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.835856][ T8037] cgroup: fork rejected by pids controller in /syz7 [ 111.895942][ T7874] veth0_macvtap: entered promiscuous mode [ 111.907757][ T7874] veth1_macvtap: entered promiscuous mode [ 111.921135][ T5082] usb 11-1: USB disconnect, device number 4 [ 111.948211][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.979329][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.002001][ T5809] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.002162][ T5809] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.002193][ T5809] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.011598][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.116310][ T1720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.116326][ T1720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.140051][ T1720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.140065][ T1720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.260277][ T7339] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 112.350331][ T5089] Bluetooth: hci1: command tx timeout [ 112.416444][ T7339] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.434477][ T7339] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 112.453712][ T7339] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.453735][ T7339] usb 11-1: Product: syz [ 112.453746][ T7339] usb 11-1: Manufacturer: syz [ 112.453757][ T7339] usb 11-1: SerialNumber: syz [ 112.458500][ T7339] usb 11-1: config 0 descriptor?? [ 112.470710][ T8005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 112.473658][ T7339] hub 11-1:0.0: bad descriptor, ignoring hub [ 112.473677][ T7339] hub 11-1:0.0: probe with driver hub failed with error -5 [ 112.711410][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 112.711527][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 112.711538][ T8125] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 112.711546][ T8125] UDF-fs: Scanning with blocksize 512 failed [ 112.712209][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 112.712496][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 112.712510][ T8125] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 112.712517][ T8125] UDF-fs: Scanning with blocksize 1024 failed [ 112.712792][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 112.712841][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 112.712852][ T8125] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 112.712859][ T8125] UDF-fs: Scanning with blocksize 2048 failed [ 112.713069][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 112.714470][ T8125] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 112.714482][ T8125] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 112.714489][ T8125] UDF-fs: Scanning with blocksize 4096 failed [ 112.714494][ T8125] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 112.786445][ T8129] overlay: filesystem on ./file0 not supported as upperdir [ 112.800574][ T7995] usb 11-1: USB disconnect, device number 5 [ 112.853655][ T8133] xt_hashlimit: invalid interval [ 112.862776][ T8133] bridge1: entered promiscuous mode [ 112.862790][ T8133] bridge1: entered allmulticast mode [ 112.976137][ T43] kauditd_printk_skb: 2290 callbacks suppressed [ 112.976151][ T43] audit: type=1400 audit(2000000049.609:22418): avc: denied { read write } for pid=7874 comm="syz-executor" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.977219][ T43] audit: type=1400 audit(2000000049.609:22419): avc: denied { read write open } for pid=7874 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.978301][ T43] audit: type=1400 audit(2000000049.609:22420): avc: denied { ioctl } for pid=7874 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.994172][ T43] audit: type=1400 audit(2000000049.629:22421): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 113.007696][ T43] audit: type=1400 audit(2000000049.639:22422): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.007806][ T43] audit: type=1400 audit(2000000049.639:22423): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.007902][ T43] audit: type=1400 audit(2000000049.639:22424): avc: denied { search } for pid=5445 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.008441][ T43] audit: type=1400 audit(2000000049.639:22425): avc: denied { read } for pid=5445 comm="dhcpcd" name="n55" dev="tmpfs" ino=4038 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.009013][ T43] audit: type=1400 audit(2000000049.639:22426): avc: denied { read open } for pid=5445 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=4038 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.009557][ T43] audit: type=1400 audit(2000000049.639:22427): avc: denied { getattr } for pid=5445 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=4038 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.153654][ T8150] SELinux: policydb magic number 0x72608c34 does not match expected magic number 0xf97cff8c [ 113.154322][ T8150] SELinux: failed to load policy [ 113.320279][ T5089] Bluetooth: hci4: command tx timeout [ 113.455453][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.455'. [ 113.715598][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.458'. [ 113.715768][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.458'. [ 113.853988][ T8178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.854121][ T8178] batadv_slave_0: entered promiscuous mode [ 113.854139][ T8178] batadv_slave_0: entered allmulticast mode [ 113.960291][ T7995] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 114.043765][ T8182] CUSE: unknown device info "" [ 114.043781][ T8182] CUSE: unknown device info "" [ 114.043786][ T8182] CUSE: unknown device info "" [ 114.043793][ T8182] CUSE: unknown device info "" [ 114.043800][ T8182] CUSE: zero length info key specified [ 114.090405][ T7995] usb 14-1: device descriptor read/64, error -71 [ 114.253101][ T8188] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 114.334758][ T7995] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 114.440406][ T5089] Bluetooth: hci1: command tx timeout [ 114.460250][ T7995] usb 14-1: device descriptor read/64, error -71 [ 114.570954][ T7995] usb usb14-port1: attempt power cycle [ 114.911254][ T7995] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 114.936271][ T7995] usb 14-1: device descriptor read/8, error -71 [ 115.170264][ T7995] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 115.194347][ T7995] usb 14-1: device descriptor read/8, error -71 [ 115.300500][ T7995] usb usb14-port1: unable to enumerate USB device [ 115.678662][ T8231] team0: Device ipip0 is of different type [ 116.468300][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.8.478'. [ 116.475314][ T8272] CIFS mount error: No usable UNC path provided in device string! [ 116.475314][ T8272] [ 116.475519][ T8272] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 116.510459][ T5089] Bluetooth: hci1: command tx timeout [ 116.934899][ T8283] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.414036][ T8304] lo: entered allmulticast mode [ 117.414451][ T8304] bond0: entered allmulticast mode [ 117.414926][ T8304] dummy0: entered allmulticast mode [ 117.415227][ T8304] eql: entered allmulticast mode [ 117.415378][ T8304] ifb0: entered allmulticast mode [ 117.415631][ T8304] ifb1: entered allmulticast mode [ 117.419187][ T8304] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 117.423064][ T8304] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 117.423397][ T8304] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 117.423999][ T8304] hwsim0: entered allmulticast mode [ 117.424118][ T8304] ieee802154 phy0 wpan0: entered allmulticast mode [ 117.424278][ T8304] ieee802154 phy1 wpan1: entered allmulticast mode [ 117.424461][ T8304] teql0: entered allmulticast mode [ 117.424561][ T8304] tunl0: entered allmulticast mode [ 117.424663][ T8304] gre0: entered allmulticast mode [ 117.424841][ T8304] gretap0: entered allmulticast mode [ 117.424918][ T8304] erspan0: entered allmulticast mode [ 117.424990][ T8304] ip_vti0: entered allmulticast mode [ 117.425096][ T8304] ip6_vti0: entered allmulticast mode [ 117.425173][ T8304] sit0: entered allmulticast mode [ 117.425249][ T8304] ip6tnl0: entered allmulticast mode [ 117.425321][ T8304] ip6gre0: entered allmulticast mode [ 117.425399][ T8304] lapb0: entered allmulticast mode [ 117.425551][ T8304] lapb1: entered allmulticast mode [ 117.425693][ T8304] lapb2: entered allmulticast mode [ 117.425919][ T8304] lapb3: entered allmulticast mode [ 117.426071][ T8304] lapb5: entered allmulticast mode [ 117.426243][ T8304] lapb6: entered allmulticast mode [ 117.426627][ T8304] lowpan0: entered allmulticast mode [ 117.427326][ T8304] lapb7: entered allmulticast mode [ 117.427510][ T8304] netdevsim netdevsim3 eth2: entered allmulticast mode [ 117.427913][ T8304] netdevsim netdevsim3 eth3: entered allmulticast mode [ 117.428510][ T8304] netdevsim netdevsim3 eth4: entered allmulticast mode [ 117.428966][ T8304] netdevsim netdevsim3 eth5: entered allmulticast mode [ 117.429505][ T8304] netdevsim netdevsim0 eth6: entered allmulticast mode [ 117.429989][ T8304] netdevsim netdevsim0 eth7: entered allmulticast mode [ 117.431910][ T8304] netdevsim netdevsim0 eth8: entered allmulticast mode [ 117.432431][ T8304] netdevsim netdevsim0 eth9: entered allmulticast mode [ 117.433059][ T8304] netdevsim netdevsim1 eth10: entered allmulticast mode [ 117.433561][ T8304] netdevsim netdevsim1 eth11: entered allmulticast mode [ 117.434159][ T8304] netdevsim netdevsim1 eth12: entered allmulticast mode [ 117.434639][ T8304] netdevsim netdevsim1 eth13: entered allmulticast mode [ 117.435248][ T8304] netdevsim netdevsim4 eth1: entered allmulticast mode [ 117.435733][ T8304] netdevsim netdevsim4 eth14: entered allmulticast mode [ 117.436314][ T8304] netdevsim netdevsim4 eth15: entered allmulticast mode [ 117.436846][ T8304] netdevsim netdevsim4 eth16: entered allmulticast mode [ 117.437557][ T8304] netdevsim netdevsim5 eth17: entered allmulticast mode [ 117.438036][ T8304] netdevsim netdevsim5 eth18: entered allmulticast mode [ 117.438618][ T8304] netdevsim netdevsim5 eth19: entered allmulticast mode [ 117.439102][ T8304] netdevsim netdevsim5 eth20: entered allmulticast mode [ 117.440059][ T8304] lapb4: entered allmulticast mode [ 117.746373][ T8325] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 117.980347][ T43] kauditd_printk_skb: 3931 callbacks suppressed [ 117.980382][ T43] audit: type=1400 audit(2000000054.619:26359): avc: denied { prog_load } for pid=8329 comm="syz.8.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.980551][ T43] audit: type=1400 audit(2000000054.619:26360): avc: denied { search } for pid=8334 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.981251][ T43] audit: type=1400 audit(2000000054.619:26361): avc: denied { bpf } for pid=8329 comm="syz.8.491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.981276][ T43] audit: type=1400 audit(2000000054.619:26362): avc: denied { read } for pid=8334 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.981932][ T43] audit: type=1400 audit(2000000054.619:26363): avc: denied { read open } for pid=8334 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.982585][ T43] audit: type=1400 audit(2000000054.619:26364): avc: denied { prog_load } for pid=8329 comm="syz.8.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.983252][ T43] audit: type=1400 audit(2000000054.619:26365): avc: denied { bpf } for pid=8329 comm="syz.8.491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.983316][ T43] audit: type=1400 audit(2000000054.619:26366): avc: denied { search } for pid=8334 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.983448][ T43] audit: type=1400 audit(2000000054.619:26367): avc: denied { search } for pid=8334 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.983562][ T43] audit: type=1400 audit(2000000054.619:26368): avc: denied { search } for pid=8334 comm="cmp" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.140266][ T61] usb 12-1: new low-speed USB device number 6 using dummy_hcd [ 118.303083][ T61] usb 12-1: unable to get BOS descriptor or descriptor too short [ 118.303128][ T61] usb 12-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=cf.4e [ 118.305166][ T61] usb 12-1: config 8 has no interfaces? [ 118.879932][ T8363] bond1: entered allmulticast mode [ 118.883396][ T8363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.942658][ T8367] netlink: 88 bytes leftover after parsing attributes in process `syz.9.499'. [ 119.133710][ T522] IPVS: starting estimator thread 0... [ 119.177574][ T8380] netlink: 'syz.8.503': attribute type 4 has an invalid length. [ 119.177589][ T8380] netlink: 152 bytes leftover after parsing attributes in process `syz.8.503'. [ 119.184516][ T8380] .`: renamed from bond0 (while UP) [ 119.203538][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.204639][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.205457][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.206141][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.206939][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.208001][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.209256][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.230041][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.236213][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.237094][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.237937][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.238599][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.239280][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.239914][ T8380] ip6tnl1: entered allmulticast mode [ 119.240818][ T8378] IPVS: using max 43 ests per chain, 103200 per kthread [ 119.252134][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.252799][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.253872][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.254766][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.255394][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.256047][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.256621][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.257200][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.257933][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.258580][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.259378][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.261448][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.262160][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.262954][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.263878][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.264487][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.265267][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.265973][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.266547][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.267148][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.267793][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.268408][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.269065][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.269675][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.272949][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.273554][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.274521][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.275680][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.277089][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.278171][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.279123][ T8374] IPVS: set_ctl: invalid protocol: 2048 0.0.6.0:16 [ 119.402360][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.402528][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.431788][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.470862][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.549989][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.8.504'. [ 119.834782][ T8399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.835981][ T8400] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.875016][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.506'. [ 119.910498][ T7529] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.277715][ T8417] zram0: detected capacity change from 0 to 8 [ 120.913105][ T61] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.918451][ T61] usb 12-1: can't set config #8, error -71 [ 120.924696][ T61] usb 12-1: USB disconnect, device number 6 [ 122.109094][ T8473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8473 comm=syz.7.516 [ 123.134887][ T8407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.151596][ T43] kauditd_printk_skb: 1565 callbacks suppressed [ 123.151613][ T43] audit: type=1400 audit(2000000059.779:27934): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.151651][ T43] audit: type=1400 audit(2000000059.779:27935): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.151681][ T43] audit: type=1400 audit(2000000059.779:27936): avc: denied { search } for pid=5445 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.151712][ T43] audit: type=1400 audit(2000000059.779:27937): avc: denied { read } for pid=5445 comm="dhcpcd" name="n51" dev="tmpfs" ino=3832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.152740][ T43] audit: type=1400 audit(2000000059.789:27938): avc: denied { read open } for pid=5445 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=3832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.153314][ T43] audit: type=1400 audit(2000000059.789:27939): avc: denied { getattr } for pid=5445 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=3832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.190957][ T43] audit: type=1400 audit(2000000059.819:27940): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.193243][ T43] audit: type=1400 audit(2000000059.819:27941): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.193281][ T43] audit: type=1400 audit(2000000059.829:27942): avc: denied { search } for pid=5445 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.193312][ T43] audit: type=1400 audit(2000000059.829:27943): avc: denied { read } for pid=5445 comm="dhcpcd" name="n52" dev="tmpfs" ino=3833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.454515][ T8484] bridge_slave_0: left allmulticast mode [ 123.454542][ T8484] bridge_slave_0: left promiscuous mode [ 123.454734][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.493227][ T8484] bridge_slave_1: left allmulticast mode [ 123.493254][ T8484] bridge_slave_1: left promiscuous mode [ 123.493457][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.710290][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.889194][ T8504] syzkaller1: entered promiscuous mode [ 123.889208][ T8504] syzkaller1: entered allmulticast mode [ 124.269966][ T8523] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 124.303771][ T8523] binder: 8521:8523 ioctl c018620c 2000000001c0 returned -1 [ 124.307826][ T8522] fuse: Bad value for 'user_id' [ 124.307840][ T8522] fuse: Bad value for 'user_id' [ 124.454259][ T5089] Bluetooth: min 23399 > max 3 [ 124.456057][ T8530] CUSE: unknown device info "" [ 124.456071][ T8530] CUSE: unknown device info "" [ 124.456077][ T8530] CUSE: unknown device info "" [ 124.456084][ T8530] CUSE: unknown device info "" [ 124.456098][ T8530] CUSE: zero length info key specified [ 124.473882][ T8530] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 124.900439][ T42] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 125.070310][ T42] usb 11-1: Using ep0 maxpacket: 8 [ 125.073117][ T42] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.075839][ T42] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 125.075883][ T42] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 125.075906][ T42] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.075927][ T42] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 125.075949][ T42] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 125.075968][ T42] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.076002][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.117170][ T8554] loop6: detected capacity change from 0 to 6 [ 125.127878][ T8554] netlink: 164 bytes leftover after parsing attributes in process `syz.9.540'. [ 125.190232][ T6852] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 125.301416][ T42] usb 11-1: GET_CAPABILITIES returned 0 [ 125.301441][ T42] usbtmc 11-1:16.0: can't read capabilities [ 125.347746][ T6852] usb 13-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 125.357092][ T6852] usb 13-1: config 1 has an invalid interface number: 7 but max is 0 [ 125.357108][ T6852] usb 13-1: config 1 has no interface number 0 [ 125.357126][ T6852] usb 13-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 125.357139][ T6852] usb 13-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 125.376247][ T6852] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.376263][ T6852] usb 13-1: Product: syz [ 125.376270][ T6852] usb 13-1: Manufacturer: syz [ 125.376277][ T6852] usb 13-1: SerialNumber: syz [ 125.394098][ T8550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 125.512569][ T5829] usb 11-1: USB disconnect, device number 6 [ 125.531389][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1128 sclass=netlink_route_socket pid=8563 comm=syz.9.543 [ 125.612845][ T8550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 126.510486][ T5089] Bluetooth: hci1: command tx timeout [ 127.054052][ T8599] can0: slcan on ttyS3. [ 127.061978][ T42] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 127.122097][ T8599] can0 (unregistered): slcan off ttyS3. [ 127.220196][ T42] usb 14-1: Using ep0 maxpacket: 8 [ 127.229571][ T42] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.244813][ T42] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 127.244857][ T42] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.244876][ T42] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.244896][ T42] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.244914][ T42] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.244946][ T42] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.477263][ T42] usb 14-1: usb_control_msg returned -32 [ 127.477290][ T42] usbtmc 14-1:16.0: can't read capabilities [ 127.552036][ T8610] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 127.842820][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.843091][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.849611][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.849810][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.984903][ T6852] usb 13-1: Incompatible driver and firmware versions [ 128.009562][ T6852] usb 13-1: USB disconnect, device number 2 [ 128.160892][ T43] kauditd_printk_skb: 2611 callbacks suppressed [ 128.160911][ T43] audit: type=1400 audit(2000000064.799:30555): avc: denied { create } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.163166][ T43] audit: type=1400 audit(2000000064.799:30556): avc: denied { create } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.164285][ T43] audit: type=1400 audit(2000000064.799:30557): avc: denied { write } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.165196][ T43] audit: type=1400 audit(2000000064.799:30558): avc: denied { read } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.166078][ T43] audit: type=1400 audit(2000000064.799:30559): avc: denied { read } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.167706][ T43] audit: type=1400 audit(2000000064.799:30560): avc: denied { ioctl } for pid=8630 comm="syz.8.558" path="socket:[27840]" dev="sockfs" ino=27840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.174902][ T43] audit: type=1400 audit(2000000064.809:30561): avc: denied { write } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.178884][ T43] audit: type=1400 audit(2000000064.809:30562): avc: denied { write } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.183035][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.8.558'. [ 128.210310][ T43] audit: type=1400 audit(2000000064.819:30563): avc: denied { create } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.211498][ T43] audit: type=1400 audit(2000000064.849:30564): avc: denied { write } for pid=8630 comm="syz.8.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.500385][ T8643] syzkaller1: entered allmulticast mode [ 128.800107][ T8653] FAULT_INJECTION: forcing a failure. [ 128.800107][ T8653] name failslab, interval 1, probability 0, space 0, times 0 [ 128.800204][ T8653] CPU: 1 UID: 0 PID: 8653 Comm: syz.6.564 Not tainted syzkaller #0 PREEMPT(full) [ 128.800220][ T8653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.800228][ T8653] Call Trace: [ 128.800232][ T8653] [ 128.800237][ T8653] dump_stack_lvl+0x100/0x190 [ 128.800281][ T8653] should_fail_ex.cold+0x5/0xa [ 128.800298][ T8653] should_failslab+0xc2/0x120 [ 128.800337][ T8653] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 128.800351][ T8653] ? sidtab_sid2str_get+0x84/0x670 [ 128.800368][ T8653] ? sidtab_sid2str_get+0x17a/0x670 [ 128.800387][ T8653] kmemdup_noprof+0x29/0x60 [ 128.800399][ T8653] sidtab_sid2str_get+0x17a/0x670 [ 128.800418][ T8653] security_sid_to_context_core+0x373/0x700 [ 128.800443][ T8653] avc_audit_post_callback+0x1aa/0x910 [ 128.800468][ T8653] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 128.800488][ T8653] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 128.800509][ T8653] ? skb_put+0x138/0x180 [ 128.800546][ T8653] ? audit_log_n_string+0x2a3/0x5a0 [ 128.800578][ T8653] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 128.800602][ T8653] common_lsm_audit+0x23f/0x2b0 [ 128.800628][ T8653] ? __pfx_common_lsm_audit+0x10/0x10 [ 128.800652][ T8653] ? avc_update_node.isra.0+0x578/0xb90 [ 128.800678][ T8653] ? __x64_sys_membarrier+0xcb/0x200 [ 128.800701][ T8653] slow_avc_audit+0x186/0x210 [ 128.800723][ T8653] ? __pfx_slow_avc_audit+0x10/0x10 [ 128.800755][ T8653] ? avc_perm_nonode+0x164/0x180 [ 128.800779][ T8653] ? avc_perm_nonode+0xf8/0x180 [ 128.800810][ T8653] audit_inode_permission+0x1ea/0x2a0 [ 128.800840][ T8653] ? __pfx_audit_inode_permission+0x10/0x10 [ 128.800872][ T8653] ? avc_has_perm_noaudit+0x145/0x470 [ 128.800898][ T8653] selinux_inode_permission+0x7ed/0x1130 [ 128.800929][ T8653] ? devcgroup_check_permission+0x39/0x440 [ 128.800953][ T8653] ? __pfx_selinux_inode_permission+0x10/0x10 [ 128.800976][ T8653] ? find_held_lock+0x2b/0x80 [ 128.801004][ T8653] ? devcgroup_check_permission+0x174/0x440 [ 128.801027][ T8653] ? match_exception_partial+0x239/0x2d0 [ 128.801054][ T8653] security_inode_permission+0xda/0x250 [ 128.801077][ T8653] inode_permission+0x36c/0x620 [ 128.801102][ T8653] may_open+0x2b8/0x480 [ 128.801123][ T8653] path_openat+0x51f/0x2440 [ 128.801148][ T8653] ? __pfx_path_openat+0x10/0x10 [ 128.801182][ T8653] do_file_open+0x20e/0x430 [ 128.801205][ T8653] ? __pfx_do_file_open+0x10/0x10 [ 128.801248][ T8653] ? _raw_spin_unlock+0x28/0x50 [ 128.801280][ T8653] ? alloc_fd+0x471/0x7a0 [ 128.801308][ T8653] do_sys_openat2+0x10f/0x1e0 [ 128.801334][ T8653] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.801358][ T8653] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 128.801392][ T8653] __x64_sys_openat+0x12d/0x210 [ 128.801419][ T8653] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.801454][ T8653] do_syscall_64+0x123/0x790 [ 128.801474][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.801494][ T8653] RIP: 0033:0x7f7fd835e98e [ 128.801510][ T8653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.801529][ T8653] RSP: 002b:00007f7fd9251b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.801548][ T8653] RAX: ffffffffffffffda RBX: 00007f7fd92526c0 RCX: 00007f7fd835e98e [ 128.801567][ T8653] RDX: 0000000000000002 RSI: 00007f7fd9251c00 RDI: ffffffffffffff9c [ 128.801580][ T8653] RBP: 00007f7fd9251c00 R08: 0000000000000000 R09: 0000000000000000 [ 128.801593][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 128.801606][ T8653] R13: 00007f7fd8626038 R14: 00007f7fd8625fa0 R15: 00007ffcd03d12b8 [ 128.801633][ T8653] [ 128.839334][ T8653] LUN: removable file: (no medium) [ 129.023409][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.566'. [ 129.074760][ T8664] tmpfs: Unknown parameter '0x0000000000000003' [ 129.089745][ T8664] netlink: 68 bytes leftover after parsing attributes in process `syz.7.567'. [ 129.633907][ T7564] usb 14-1: USB disconnect, device number 6 [ 129.703649][ T8688] netlink: 72 bytes leftover after parsing attributes in process `syz.8.573'. [ 130.050113][ T8712] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.578'. [ 130.191444][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.306279][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.315721][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.319389][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.322214][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.323713][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.355845][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.377723][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.9.581'. [ 130.473418][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.574015][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 130.574433][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.712579][ T13] bridge_slave_1: left allmulticast mode [ 130.712596][ T13] bridge_slave_1: left promiscuous mode [ 130.712707][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.714301][ T13] bridge_slave_0: left allmulticast mode [ 130.714313][ T13] bridge_slave_0: left promiscuous mode [ 130.714402][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.873597][ T5819] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 130.877501][ T13] gretap0 (unregistering): left promiscuous mode [ 130.902485][ T8742] jffs2: notice: (8742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.945281][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.946591][ T13] bond0 (unregistering): Released all slaves [ 130.949876][ T13] bond1 (unregistering): Released all slaves [ 131.026271][ T5819] usb 13-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 131.048437][ T5819] usb 13-1: config 1 has an invalid interface number: 3 but max is 0 [ 131.048463][ T5819] usb 13-1: config 1 has no interface number 0 [ 131.064557][ T5819] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.064575][ T5819] usb 13-1: Product: syz [ 131.064582][ T5819] usb 13-1: Manufacturer: syz [ 131.064589][ T5819] usb 13-1: SerialNumber: syz [ 131.076051][ T5819] usb 13-1: 3:1 : does not exist [ 131.076064][ T5819] usb 13-1: 3:2 : does not exist [ 131.095324][ T8750] macvlan2: entered promiscuous mode [ 131.095347][ T8750] bridge0: entered promiscuous mode [ 131.309516][ T5819] usb 13-1: USB disconnect, device number 3 [ 131.506951][ T13] hsr_slave_0: left promiscuous mode [ 131.507911][ T13] hsr_slave_1: left promiscuous mode [ 131.508314][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.508326][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.509556][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.509567][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.538817][ T13] veth1_macvtap: left promiscuous mode [ 131.538843][ T13] veth0_macvtap: left promiscuous mode [ 131.538890][ T13] veth1_vlan: left promiscuous mode [ 131.538924][ T13] veth0_vlan: left promiscuous mode [ 131.602815][ T8768] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 131.618469][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.584'. [ 131.637130][ T8771] x_tables: duplicate underflow at hook 3 [ 131.642172][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.594'. [ 131.722796][ T8776] tmpfs: Bad value for 'mpol' [ 131.805098][ T13] team0 (unregistering): Port device team_slave_1 removed [ 131.809723][ T13] team0 (unregistering): Port device team_slave_0 removed [ 131.901417][ T8772] geneve2: entered allmulticast mode [ 132.075829][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 132.178694][ T8785] trusted_key: syz.9.596 sent an empty control message without MSG_MORE. [ 132.270293][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.367892][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.367936][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.368005][ T8721] bridge_slave_0: entered allmulticast mode [ 132.368850][ T8721] bridge_slave_0: entered promiscuous mode [ 132.375364][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.375408][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.375469][ T8721] bridge_slave_1: entered allmulticast mode [ 132.376260][ T8721] bridge_slave_1: entered promiscuous mode [ 132.409180][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.416496][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.438560][ T8721] team0: Port device team_slave_0 added [ 132.440330][ T5089] Bluetooth: hci2: command tx timeout [ 132.446073][ T8721] team0: Port device team_slave_1 added [ 132.479256][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.479269][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.479283][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.484818][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.484829][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.484842][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.551080][ T8721] hsr_slave_0: entered promiscuous mode [ 132.551657][ T8721] hsr_slave_1: entered promiscuous mode [ 132.552010][ T8721] debugfs: 'hsr0' already exists in 'hsr' [ 132.552022][ T8721] Cannot create hsr debugfs directory [ 132.656368][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.8.600'. [ 132.695183][ T8822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8822 comm=syz.9.601 [ 132.809141][ T5089] Bluetooth: latency 65520 > 499 [ 132.826969][ T8825] netlink: 64 bytes leftover after parsing attributes in process `syz.8.602'. [ 132.826989][ T8825] netlink: 'syz.8.602': attribute type 1 has an invalid length. [ 132.911429][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911459][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992915][ T5445] 8021q: adding VLAN 0 to HW filter on device eth22 [ 133.151110][ T5745] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 133.171521][ T43] kauditd_printk_skb: 3248 callbacks suppressed [ 133.171534][ T43] audit: type=1400 audit(2000000069.809:33813): avc: denied { read } for pid=8721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.172118][ T43] audit: type=1400 audit(2000000069.809:33814): avc: denied { read } for pid=8721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.172152][ T43] audit: type=1400 audit(2000000069.809:33815): avc: denied { search } for pid=8836 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.172248][ T43] audit: type=1400 audit(2000000069.809:33816): avc: denied { search } for pid=8836 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.172312][ T43] audit: type=1400 audit(2000000069.809:33817): avc: denied { search } for pid=8836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.172413][ T43] audit: type=1400 audit(2000000069.809:33818): avc: denied { read } for pid=8836 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.172701][ T43] audit: type=1400 audit(2000000069.809:33819): avc: denied { write } for pid=8721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.172934][ T43] audit: type=1400 audit(2000000069.809:33820): avc: denied { read open } for pid=8836 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.173421][ T43] audit: type=1400 audit(2000000069.809:33821): avc: denied { getattr } for pid=8836 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.174447][ T43] audit: type=1400 audit(2000000069.809:33822): avc: denied { search } for pid=8836 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.181457][ T8721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.190668][ T8721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.194193][ T8721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.200527][ T8721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.203864][ T8721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.213459][ T8721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.216462][ T8721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.227754][ T8721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.359839][ T8845] bond0: no command found in slaves file - use +ifname or -ifname [ 133.391965][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.436028][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.454726][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.454772][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.467814][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.467894][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.563575][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.563724][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.569287][ T8852] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 133.639328][ T8852] 9pnet: p9_errstr2errno: server reported unknown error [ 133.792488][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.612'. [ 133.821967][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.822074][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.837625][ T8872] warning: `syz.9.611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.849869][ T5445] 8021q: adding VLAN 0 to HW filter on device eth23 [ 134.208989][ T5826] hsr0: entered promiscuous mode [ 134.217138][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.614'. [ 134.330443][ T9] libceph: connect (1)[c::]:6789 error -101 [ 134.330547][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 134.348365][ T8854] ceph: No mds server is up or the cluster is laggy [ 134.511936][ T5745] Bluetooth: hci2: command tx timeout [ 134.630587][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.649454][ T8916] fuse: Bad value for 'fd' [ 134.779324][ T8721] veth0_vlan: entered promiscuous mode [ 134.813009][ T8721] veth1_vlan: entered promiscuous mode [ 134.830042][ T5445] 8021q: adding VLAN 0 to HW filter on device eth24 [ 134.830326][ T5745] Bluetooth: hci1: command tx timeout [ 134.925474][ T8721] veth0_macvtap: entered promiscuous mode [ 134.932297][ T8721] veth1_macvtap: entered promiscuous mode [ 134.965702][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.977340][ T8935] netlink: 'syz.9.620': attribute type 4 has an invalid length. [ 134.977354][ T8935] netlink: 152 bytes leftover after parsing attributes in process `syz.9.620'. [ 134.980844][ T8935] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.989417][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.021593][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.021621][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.021639][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.021657][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.162350][ T8430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.162365][ T8430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.187967][ T8449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.187981][ T8449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.279130][ T8943] ntfs3(sr0): Primary boot signature is not NTFS. [ 135.280069][ T8943] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 135.314914][ T8943] MPI: mpi too large (16392 bits) [ 135.604428][ T8962] netlink: 148 bytes leftover after parsing attributes in process `syz.7.626'. [ 135.797511][ T8975] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.912920][ T8975] netlink: 'syz.9.629': attribute type 4 has an invalid length. [ 135.912940][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.629'. [ 136.024523][ T8975] netlink: 'syz.9.629': attribute type 4 has an invalid length. [ 136.024537][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.629'. [ 136.027001][ T8979] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.129649][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.155915][ T5745] Bluetooth: hci1: Malformed Event: 0x02 [ 136.427736][ T9004] ip_tables: iptables: counters copy to user failed while replacing table [ 136.446370][ T9004] MINIX-fs: blocksize too small for device [ 136.517013][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.523013][ T9015] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.525672][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.526790][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.528002][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.529238][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.530006][ T9013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.639'. [ 136.584082][ T9017] teql0: left allmulticast mode [ 136.600264][ T5745] Bluetooth: hci2: command tx timeout [ 136.603344][ T9017] tmpfs: Bad value for 'mpol' [ 136.609232][ T9017] SELinux: Context system_u:object_r:var_spool_t:s0 is not valid (left unmapped). [ 136.624376][ T9020] tmpfs: Bad value for 'mpol' [ 136.736494][ T9026] team0: Port device vlan0 added [ 136.897556][ T9036] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 137.002269][ T8721] svc: failed to register nfsdv3 RPC service (errno 111). [ 137.005518][ T8721] svc: failed to register nfsaclv3 RPC service (errno 111). [ 137.005530][ T8721] failed to unregister udp with rpcbind [ 137.007148][ T8721] svc: failed to register nfsdv3 RPC service (errno 97). [ 137.007160][ T8721] svc: failed to register nfsaclv3 RPC service (errno 97). [ 137.007167][ T8721] failed to unregister udp with rpcbind [ 137.051622][ T9037] eql: left allmulticast mode [ 137.210461][ T9044] binder: 9043:9044 ioctl c0306201 200000000080 returned -14 [ 137.421570][ T9059] openvswitch: netlink: Missing key (keys=40, expected=100) [ 137.763447][ T5745] Bluetooth: hci1: unexpected cc 0x0c22 length: 4 > 1 [ 137.944233][ T9089] cgroup: Unknown subsys name 'cpuset' [ 138.192982][ T43] kauditd_printk_skb: 4339 callbacks suppressed [ 138.193002][ T43] audit: type=1400 audit(2000000074.829:38162): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.193042][ T43] audit: type=1400 audit(2000000074.829:38163): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.193078][ T43] audit: type=1400 audit(2000000074.829:38164): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.193215][ T9089] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 138.193714][ T43] audit: type=1400 audit(2000000074.829:38165): avc: denied { read } for pid=9094 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.193755][ T43] audit: type=1400 audit(2000000074.829:38166): avc: denied { read open } for pid=9094 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.194154][ T43] audit: type=1400 audit(2000000074.829:38167): avc: denied { getattr } for pid=9094 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.195084][ T43] audit: type=1400 audit(2000000074.829:38168): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.195124][ T43] audit: type=1400 audit(2000000074.829:38169): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.195237][ T43] audit: type=1400 audit(2000000074.829:38170): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.195273][ T43] audit: type=1400 audit(2000000074.829:38171): avc: denied { search } for pid=9094 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.670706][ T5745] Bluetooth: hci2: command tx timeout [ 138.879946][ T9106] cgroup: fork rejected by pids controller in /syz9 [ 138.987259][ T9120] null_blk: nullb1: using native zone append [ 139.325852][ T9120] null_blk: disk nullb1 created [ 139.561933][ T6852] hid (null): invalid report_count 30758 [ 139.561967][ T6852] hid (null): report_id 0 is invalid [ 139.579816][ T6852] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x3 [ 139.579853][ T6852] logitech-hidpp-device 0005:046D:B012.0003: collection stack underflow [ 139.579872][ T6852] logitech-hidpp-device 0005:046D:B012.0003: item 0 2 0 12 parsing failed [ 139.586601][ T6852] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 139.586681][ T6852] logitech-hidpp-device 0005:046D:B012.0003: probe with driver logitech-hidpp-device failed with error -22 [ 139.647411][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 139.647428][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.647446][ T5745] Tainted: [L]=SOFTLOCKUP [ 139.647451][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.647459][ T5745] Workqueue: hci2 hci_rx_work [ 139.647495][ T5745] Call Trace: [ 139.647499][ T5745] [ 139.647505][ T5745] dump_stack_lvl+0x100/0x190 [ 139.647525][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 139.647544][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 139.647560][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.647589][ T5745] ? find_held_lock+0x2b/0x80 [ 139.647606][ T5745] ? kobject_add_internal+0x25f/0x930 [ 139.647621][ T5745] ? kobject_add_internal+0x25f/0x930 [ 139.647636][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.647652][ T5745] kobject_add_internal+0x2c8/0x930 [ 139.647669][ T5745] kobject_add+0x16a/0x1e0 [ 139.647685][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 139.647699][ T5745] ? class_to_subsys+0x10f/0x150 [ 139.647718][ T5745] ? kobject_put+0xb9/0x640 [ 139.647731][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 139.647751][ T5745] device_add+0x294/0x1970 [ 139.647767][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 139.647778][ T5745] ? __pfx_device_add+0x10/0x10 [ 139.647795][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 139.647815][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 139.647835][ T5745] le_conn_complete_evt+0x122f/0x2130 [ 139.647855][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.647869][ T5745] ? hci_event_packet+0x186/0xcd0 [ 139.647883][ T5745] ? hci_event_packet+0x186/0xcd0 [ 139.647900][ T5745] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 139.647917][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 139.647929][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 139.647950][ T5745] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.647968][ T5745] hci_event_packet+0x51c/0xcd0 [ 139.647983][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.648001][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 139.648020][ T5745] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.648043][ T5745] hci_rx_work+0x451/0xfc0 [ 139.648060][ T5745] process_one_work+0xac7/0x1b10 [ 139.648085][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 139.648105][ T5745] ? lock_acquire+0x1d1/0x380 [ 139.648121][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 139.648136][ T5745] worker_thread+0x5ef/0xe50 [ 139.648159][ T5745] ? kthread+0x13a/0x450 [ 139.648174][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 139.648191][ T5745] kthread+0x373/0x450 [ 139.648206][ T5745] ? __pfx_kthread+0x10/0x10 [ 139.648222][ T5745] ret_from_fork+0x730/0xd60 [ 139.648236][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 139.648250][ T5745] ? __switch_to+0x800/0x10f0 [ 139.648288][ T5745] ? __pfx_kthread+0x10/0x10 [ 139.648306][ T5745] ret_from_fork_asm+0x1a/0x30 [ 139.648327][ T5745] [ 139.649679][ T5745] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.649702][ T5745] Bluetooth: hci2: failed to register connection device [ 139.743432][ T9175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.745124][ T9175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.767338][ T9175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.773245][ T9178] .`: (slave bond_slave_0): Releasing backup interface [ 139.773460][ T9175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.773491][ T9175] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.794652][ T9175] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.797083][ T9175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.797163][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.820181][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.823875][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.848477][ T9178] bond_slave_0: entered promiscuous mode [ 139.848500][ T9178] bond_slave_0: entered allmulticast mode [ 140.041974][ T9187] FAULT_INJECTION: forcing a failure. [ 140.041974][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 140.041996][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.3.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.042012][ T9187] Tainted: [L]=SOFTLOCKUP [ 140.042016][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.042022][ T9187] Call Trace: [ 140.042026][ T9187] [ 140.042031][ T9187] dump_stack_lvl+0x100/0x190 [ 140.042052][ T9187] should_fail_ex.cold+0x5/0xa [ 140.042069][ T9187] should_failslab+0xc2/0x120 [ 140.042085][ T9187] kmem_cache_alloc_noprof+0x92/0x6a0 [ 140.042099][ T9187] ? __asan_memcpy+0x3c/0x60 [ 140.042110][ T9187] ? __kernfs_new_node+0xd2/0xa10 [ 140.042131][ T9187] __kernfs_new_node+0xd2/0xa10 [ 140.042148][ T9187] ? mark_held_locks+0x40/0x70 [ 140.042161][ T9187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 140.042179][ T9187] ? __pfx___kernfs_new_node+0x10/0x10 [ 140.042200][ T9187] ? lock_acquire+0x1d1/0x380 [ 140.042212][ T9187] ? kernfs_root+0x23/0x2a0 [ 140.042228][ T9187] ? find_held_lock+0x2b/0x80 [ 140.042244][ T9187] ? kernfs_root+0xee/0x2a0 [ 140.042258][ T9187] ? kernfs_root+0xee/0x2a0 [ 140.042277][ T9187] kernfs_create_dir_ns+0xa6/0x2b0 [ 140.042292][ T9187] sysfs_create_dir_ns+0x13a/0x2b0 [ 140.042307][ T9187] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.042322][ T9187] ? find_held_lock+0x2b/0x80 [ 140.042337][ T9187] ? kobject_add_internal+0x25f/0x930 [ 140.042351][ T9187] ? kobject_add_internal+0x25f/0x930 [ 140.042365][ T9187] ? net_namespace+0x12/0x50 [ 140.042377][ T9187] ? device_namespace+0x76/0xa0 [ 140.042394][ T9187] kobject_add_internal+0x2c8/0x930 [ 140.042410][ T9187] kobject_add+0x16a/0x1e0 [ 140.042424][ T9187] ? __pfx_kobject_add+0x10/0x10 [ 140.042438][ T9187] ? get_device_parent+0x1b3/0x4c0 [ 140.042453][ T9187] ? kobject_put+0xb9/0x640 [ 140.042470][ T9187] device_add+0x294/0x1970 [ 140.042487][ T9187] ? __pfx_dev_set_name+0x10/0x10 [ 140.042498][ T9187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.042532][ T9187] ? __pfx_device_add+0x10/0x10 [ 140.042550][ T9187] ? lockdep_init_map_type+0x5c/0x250 [ 140.042564][ T9187] ? __init_waitqueue_head+0xca/0x150 [ 140.042583][ T9187] netdev_register_kobject+0x1df/0x410 [ 140.042599][ T9187] register_netdevice+0x15b6/0x25a0 [ 140.042620][ T9187] ? __pfx_register_netdevice+0x10/0x10 [ 140.042638][ T9187] ? slip_open+0xb49/0x1120 [ 140.042651][ T9187] ? kfree+0x1e5/0x6d0 [ 140.042668][ T9187] ? __local_bh_enable_ip+0xa5/0x120 [ 140.042682][ T9187] slip_open+0xb8a/0x1120 [ 140.042699][ T9187] ? __pfx_slip_open+0x10/0x10 [ 140.042714][ T9187] ? down_write+0x146/0x1f0 [ 140.042727][ T9187] ? __pfx_slip_open+0x10/0x10 [ 140.042741][ T9187] tty_ldisc_open+0xa2/0x120 [ 140.042754][ T9187] tty_set_ldisc+0x325/0x740 [ 140.042768][ T9187] tty_ioctl+0x5b2/0x1640 [ 140.042783][ T9187] ? __pfx_tty_ioctl+0x10/0x10 [ 140.042795][ T9187] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 140.042812][ T9187] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.042828][ T9187] ? __fget_files+0x34/0x3d0 [ 140.042849][ T9187] ? selinux_file_ioctl+0x13b/0x290 [ 140.042862][ T9187] ? selinux_file_ioctl+0xb6/0x290 [ 140.042877][ T9187] ? __pfx_tty_ioctl+0x10/0x10 [ 140.042891][ T9187] __x64_sys_ioctl+0x18e/0x210 [ 140.042905][ T9187] do_syscall_64+0x123/0x790 [ 140.042917][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.042929][ T9187] RIP: 0033:0x7f201239e159 [ 140.042944][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.042956][ T9187] RSP: 002b:00007f2013200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.042969][ T9187] RAX: ffffffffffffffda RBX: 00007f2012625fa0 RCX: 00007f201239e159 [ 140.042977][ T9187] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000004 [ 140.042985][ T9187] RBP: 00007f201243506b R08: 0000000000000000 R09: 0000000000000000 [ 140.042991][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.042999][ T9187] R13: 00007f2012626038 R14: 00007f2012625fa0 R15: 00007ffc35ba11d8 [ 140.043015][ T9187] [ 140.050925][ T9187] kobject: kobject_add_internal failed for sl0 (error: -12 parent: net) [ 140.294677][ T9187] netlink: 'syz.3.670': attribute type 14 has an invalid length. [ 140.371533][ T9191] tipc: Started in network mode [ 140.371549][ T9191] tipc: Node identity 1000001, cluster identity 4369 [ 140.371558][ T9191] tipc: Node number set to 16777217 [ 140.371729][ T9191] tipc: Cannot configure node identity twice [ 140.988165][ T9242] kvm: emulating exchange as write [ 141.431759][ T9234] cgroup: fork rejected by pids controller in /syz8 [ 141.752742][ T9293] smpboot: CPU 1 is now offline [ 141.801014][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.801102][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.857656][ T9293] smpboot: CPU 3 is now offline [ 141.872640][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.955485][ T9296] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 142.010001][ T9320] __nla_validate_parse: 68 callbacks suppressed [ 142.010014][ T9320] netlink: 184 bytes leftover after parsing attributes in process `syz.8.691'. [ 142.043472][ T9296] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 142.306964][ T9329] netlink: 52 bytes leftover after parsing attributes in process `syz.9.692'. [ 142.392268][ T9291] syz.7.686 (9291) used greatest stack depth: 19288 bytes left [ 142.394922][ T9329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9329 comm=syz.9.692 [ 142.395258][ T9329] netlink: 52 bytes leftover after parsing attributes in process `syz.9.692'. [ 142.413506][ T9336] netlink: 52 bytes leftover after parsing attributes in process `syz.9.692'. [ 142.433775][ T9340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9340 comm=syz.9.692 [ 142.434105][ T9340] netlink: 52 bytes leftover after parsing attributes in process `syz.9.692'. [ 142.840334][ T7995] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 143.007911][ T7995] usb 8-1: not running at top speed; connect to a high speed hub [ 143.007931][ T7995] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 143.023901][ T7995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 143.023922][ T7995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 143.064565][ T7995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.064583][ T7995] usb 8-1: Product: syz [ 143.064592][ T7995] usb 8-1: Manufacturer: syz [ 143.064600][ T7995] usb 8-1: SerialNumber: syz [ 143.111848][ T7995] oti6858 8-1:1.0: oti6858 converter detected [ 143.127484][ T7995] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 143.200890][ T43] kauditd_printk_skb: 3953 callbacks suppressed [ 143.200908][ T43] audit: type=1400 audit(2000000079.839:42104): avc: denied { bpf } for pid=9377 comm="syz.7.701" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.202807][ T43] audit: type=1400 audit(2000000079.839:42105): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.202885][ T43] audit: type=1400 audit(2000000079.839:42106): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.203565][ T43] audit: type=1400 audit(2000000079.839:42107): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.203637][ T43] audit: type=1400 audit(2000000079.839:42108): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.206539][ T43] audit: type=1400 audit(2000000079.839:42110): avc: denied { perfmon } for pid=9377 comm="syz.7.701" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.207919][ T43] audit: type=1400 audit(2000000079.839:42109): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.208033][ T43] audit: type=1400 audit(2000000079.839:42111): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.208059][ T43] audit: type=1400 audit(2000000079.839:42112): avc: denied { search } for pid=9373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.208146][ T43] audit: type=1400 audit(2000000079.839:42113): avc: denied { read } for pid=9373 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.384514][ T9389] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 143.496302][ T9345] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 143.775706][ T522] IPVS: starting estimator thread 0... [ 143.861821][ T9414] IPVS: using max 44 ests per chain, 105600 per kthread [ 143.873493][ T5089] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.873518][ T5089] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.952375][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.019568][ T9418] block nbd8: Device being setup by another task [ 144.076364][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.707'. [ 144.085476][ T9418] block nbd8: Cannot add socket to a running device [ 144.428957][ T9431] tmpfs: Bad value for 'mpol' [ 144.452006][ T9431] FAULT_INJECTION: forcing a failure. [ 144.452006][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 144.452029][ T9431] CPU: 1 UID: 0 PID: 9431 Comm: syz.7.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.452046][ T9431] Tainted: [L]=SOFTLOCKUP [ 144.452050][ T9431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.452057][ T9431] Call Trace: [ 144.452062][ T9431] [ 144.452067][ T9431] dump_stack_lvl+0x100/0x190 [ 144.452102][ T9431] should_fail_ex.cold+0x5/0xa [ 144.452120][ T9431] should_failslab+0xc2/0x120 [ 144.452140][ T9431] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 144.452154][ T9431] ? sidtab_sid2str_get+0x84/0x670 [ 144.452170][ T9431] ? sidtab_sid2str_get+0x17a/0x670 [ 144.452189][ T9431] kmemdup_noprof+0x29/0x60 [ 144.452201][ T9431] sidtab_sid2str_get+0x17a/0x670 [ 144.452219][ T9431] security_sid_to_context_core+0x373/0x700 [ 144.452257][ T9431] avc_audit_post_callback+0x1aa/0x910 [ 144.452276][ T9431] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 144.452294][ T9431] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 144.452311][ T9431] ? skb_put+0x138/0x180 [ 144.452333][ T9431] ? audit_log_n_string+0x2a3/0x5a0 [ 144.452349][ T9431] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 144.452365][ T9431] common_lsm_audit+0x23f/0x2b0 [ 144.452380][ T9431] ? __pfx_common_lsm_audit+0x10/0x10 [ 144.452394][ T9431] ? avc_denied+0x14a/0x190 [ 144.452414][ T9431] slow_avc_audit+0x186/0x210 [ 144.452432][ T9431] ? __pfx_slow_avc_audit+0x10/0x10 [ 144.452450][ T9431] ? find_held_lock+0x2b/0x80 [ 144.452466][ T9431] ? avc_has_perm_noaudit+0x359/0x470 [ 144.452488][ T9431] avc_has_perm+0x1a6/0x1e0 [ 144.452505][ T9431] ? __pfx_avc_has_perm+0x10/0x10 [ 144.452538][ T9431] ? vsnprintf+0x4c5/0x1300 [ 144.452563][ T9431] selinux_kernel_module_request+0x128/0x180 [ 144.452581][ T9431] ? __pfx_selinux_kernel_module_request+0x10/0x10 [ 144.452603][ T9431] security_kernel_module_request+0x87/0x1e0 [ 144.452621][ T9431] __request_module+0x17a/0x6a0 [ 144.452639][ T9431] ? __pfx___request_module+0x10/0x10 [ 144.452655][ T9431] ? rcu_is_watching+0x13/0xc0 [ 144.452675][ T9431] ? lock_acquire+0x1d1/0x380 [ 144.452688][ T9431] ? inet_create+0x94/0x1060 [ 144.452699][ T9431] ? find_held_lock+0x2b/0x80 [ 144.452714][ T9431] ? inet_create+0xa72/0x1060 [ 144.452728][ T9431] inet_create+0xd45/0x1060 [ 144.452739][ T9431] ? inet_create+0x94/0x1060 [ 144.452752][ T9431] __sock_create+0x339/0x860 [ 144.452766][ T9431] __sys_socket+0x14d/0x260 [ 144.452779][ T9431] ? __pfx___sys_socket+0x10/0x10 [ 144.452795][ T9431] __x64_sys_socket+0x72/0xb0 [ 144.452806][ T9431] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.452829][ T9431] do_syscall_64+0x123/0x790 [ 144.452841][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.452855][ T9431] RIP: 0033:0x7f2b1c59e159 [ 144.452866][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.452878][ T9431] RSP: 002b:00007f2b1d3db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 144.452891][ T9431] RAX: ffffffffffffffda RBX: 00007f2b1c825fa0 RCX: 00007f2b1c59e159 [ 144.452899][ T9431] RDX: 000000000000005e RSI: 0000000000080000 RDI: 0000000000000002 [ 144.452905][ T9431] RBP: 00007f2b1c63506b R08: 0000000000000000 R09: 0000000000000000 [ 144.452912][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.452919][ T9431] R13: 00007f2b1c826038 R14: 00007f2b1c825fa0 R15: 00007ffe1c5bcce8 [ 144.452934][ T9431] [ 144.710426][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.9.711'. [ 144.726038][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.726082][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.726118][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.729416][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9441 comm=syz.9.711 [ 144.730937][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.730961][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.730978][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.730994][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.731014][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 144.787709][ T9444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9444 comm=syz.9.711 [ 144.810479][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.712'. [ 144.819887][ T9419] block nbd8: shutting down sockets [ 145.485244][ T5289] usb 8-1: USB disconnect, device number 2 [ 145.497722][ T5289] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 145.498475][ T5289] oti6858 8-1:1.0: device disconnected [ 145.732271][ T9474] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `ݗb"^6C2W [ 145.732271][ T9474] 7 [ 145.858084][ T9479] bond1: (slave wg2): Device is not bonding slave [ 145.858154][ T9479] bond1: option active_slave: invalid value (wg2) [ 145.871250][ T9479] bond1 (unregistering): Released all slaves [ 145.962084][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.962110][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.128523][ T9487] ip6t_srh: unknown srh invflags 51E8 [ 146.180768][ T9487] fuse: Bad value for 'user_id' [ 146.180782][ T9487] fuse: Bad value for 'user_id' [ 146.188518][ T9487] overlayfs: overlapping lowerdir path [ 146.260028][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.7.721'. [ 146.275329][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.7.721'. [ 146.580440][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 147.121240][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 147.127866][ T1131] ata1.00: configured for UDMA/100 [ 147.384846][ T9538] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 147.490533][ T5089] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 147.494025][ T9552] __nla_validate_parse: 2 callbacks suppressed [ 147.494037][ T9552] netlink: 84 bytes leftover after parsing attributes in process `syz.7.735'. [ 147.512629][ T5089] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 147.579496][ T9566] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 147.685524][ T9566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.975588][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.9.742'. [ 148.212268][ T43] kauditd_printk_skb: 4179 callbacks suppressed [ 148.212281][ T43] audit: type=1400 audit(2000000084.849:46293): avc: denied { getattr } for pid=9589 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.213319][ T43] audit: type=1400 audit(2000000084.849:46294): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.213417][ T43] audit: type=1400 audit(2000000084.849:46295): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.213515][ T43] audit: type=1400 audit(2000000084.849:46296): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.213606][ T43] audit: type=1400 audit(2000000084.849:46297): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.216879][ T43] audit: type=1400 audit(2000000084.849:46298): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.216996][ T43] audit: type=1400 audit(2000000084.849:46299): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.217090][ T43] audit: type=1400 audit(2000000084.849:46300): avc: denied { search } for pid=9589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.217186][ T43] audit: type=1400 audit(2000000084.849:46301): avc: denied { read } for pid=9589 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.217896][ T43] audit: type=1400 audit(2000000084.849:46302): avc: denied { read open } for pid=9589 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.427641][ T9605] bridge0: port 3(syz_tun) entered blocking state [ 148.427729][ T9605] bridge0: port 3(syz_tun) entered disabled state [ 148.427808][ T9605] syz_tun: entered allmulticast mode [ 148.428685][ T9605] syz_tun: entered promiscuous mode [ 148.429064][ T9605] bridge0: port 3(syz_tun) entered blocking state [ 148.429108][ T9605] bridge0: port 3(syz_tun) entered forwarding state [ 148.440395][ T9605] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 148.445989][ T9605] bridge0: port 3(syz_tun) entered disabled state [ 148.455187][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.456075][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.625554][ T9612] gfs2: gfs2 mount does not exist [ 148.629307][ T9612] netlink: 112 bytes leftover after parsing attributes in process `syz.7.751'. [ 148.842073][ T9620] mmap: syz.3.752 (9620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.854863][ T9622] tmpfs: User quota inode hardlimit too large. [ 149.388051][ T9636] netlink: 'syz.9.759': attribute type 39 has an invalid length. [ 149.410500][ T9636] hsr_slave_0 (unregistering): left promiscuous mode [ 149.550323][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.652635][ T9644] tc_dump_action: action bad kind [ 149.768663][ T9647] loop5: detected capacity change from 0 to 7 [ 149.772635][ T9647] Dev loop5: unable to read RDB block 7 [ 149.772653][ T9647] loop5: AHDI p1 p2 [ 149.772663][ T9647] loop5: partition table partially beyond EOD, truncated [ 149.772751][ T9647] loop5: p1 start 1818582900 is beyond EOD, truncated [ 149.949285][ T9655] scsi_dev_info_list_add_str: bad dev info string '00000000000000000000010 00000000000000000000004 00000000000000000174036' '' '' [ 150.631720][ T5089] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 150.969513][ T9693] netlink: zone id is out of range [ 150.969523][ T9693] netlink: zone id is out of range [ 150.969528][ T9693] netlink: zone id is out of range [ 150.969544][ T9693] netlink: set zone limit has 4 unknown bytes [ 150.972259][ T9693] .`: entered promiscuous mode [ 150.972271][ T9693] bond_slave_1: entered promiscuous mode [ 151.483131][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.775'. [ 151.489788][ T9714] block nbd9: Device being setup by another task [ 151.497158][ T9712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35841 sclass=netlink_route_socket pid=9712 comm=syz.9.775 [ 151.499786][ T9711] block nbd9: shutting down sockets [ 151.857273][ T9743] Cannot find del_set index 2 as target [ 152.133472][ T9754] netlink: 348 bytes leftover after parsing attributes in process `syz.8.784'. [ 152.350886][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.8.784'. [ 152.903260][ T9772] block nbd8: Cannot add socket to a running device [ 152.966530][ T9774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.326661][ T43] kauditd_printk_skb: 2962 callbacks suppressed [ 153.326680][ T43] audit: type=1400 audit(2000000089.959:49265): avc: denied { search } for pid=9776 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.329114][ T43] audit: type=1400 audit(2000000089.959:49266): avc: denied { read } for pid=9776 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.329157][ T43] audit: type=1400 audit(2000000089.959:49267): avc: denied { read open } for pid=9776 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.360906][ T43] audit: type=1400 audit(2000000089.999:49268): avc: denied { search } for pid=9776 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.361112][ T43] audit: type=1400 audit(2000000089.999:49269): avc: denied { search } for pid=9776 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.361328][ T43] audit: type=1400 audit(2000000089.999:49270): avc: denied { search } for pid=9776 comm="cmp" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.362397][ T43] audit: type=1400 audit(2000000089.999:49271): avc: denied { read } for pid=9776 comm="cmp" name="resolv.conf.eth21.ipv4ll" dev="tmpfs" ino=5391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.363594][ T43] audit: type=1400 audit(2000000089.999:49272): avc: denied { read open } for pid=9776 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth21.ipv4ll" dev="tmpfs" ino=5391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.364754][ T43] audit: type=1400 audit(2000000089.999:49273): avc: denied { getattr } for pid=9776 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.365962][ T43] audit: type=1400 audit(2000000089.999:49274): avc: denied { getattr } for pid=9776 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth21.ipv4ll" dev="tmpfs" ino=5391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.512964][ T67] block nbd8: Receive control failed (result -32) [ 153.521436][ T9770] block nbd8: shutting down sockets [ 153.792982][ T9785] binder_alloc: 9783: binder_alloc_buf, no vma [ 154.609355][ T9785] binder: 9783:9785 ioctl c0306201 200000000180 returned -14 [ 156.415320][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 156.415389][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 156.415400][ T9854] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 156.415408][ T9854] UDF-fs: Scanning with blocksize 1024 failed [ 156.423968][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 156.424023][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 156.424033][ T9854] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 156.424040][ T9854] UDF-fs: Scanning with blocksize 2048 failed [ 156.424280][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 156.424324][ T9854] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 156.424334][ T9854] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 156.424340][ T9854] UDF-fs: Scanning with blocksize 4096 failed [ 156.424345][ T9854] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 156.453806][ T9854] ntfs3(sr0): Primary boot signature is not NTFS. [ 156.453920][ T9854] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 156.623767][ T9858] [ 156.624602][ T9858] ====================================================== [ 156.626763][ T9858] WARNING: possible circular locking dependency detected [ 156.628919][ T9858] syzkaller #0 Tainted: G L [ 156.631311][ T9858] ------------------------------------------------------ [ 156.633546][ T9858] syz.8.805/9858 is trying to acquire lock: [ 156.635450][ T9858] ffff888059322368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 156.639071][ T9858] [ 156.639071][ T9858] but task is already holding lock: [ 156.641768][ T9858] ffff888059323460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 156.644846][ T9858] [ 156.644846][ T9858] which lock already depends on the new lock. [ 156.644846][ T9858] [ 156.648107][ T9858] [ 156.648107][ T9858] the existing dependency chain (in reverse order) is: [ 156.650992][ T9858] [ 156.650992][ T9858] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 156.653454][ T9858] lock_acquire+0x1d1/0x380 [ 156.655072][ T9858] lock_sock_nested+0x41/0xf0 [ 156.656766][ T9858] smc_listen_out+0xf2/0x4b0 [ 156.658420][ T9858] smc_listen_work+0x767/0x50e0 [ 156.660195][ T9858] process_one_work+0xac7/0x1b10 [ 156.661966][ T9858] worker_thread+0x5ef/0xe50 [ 156.663614][ T9858] kthread+0x373/0x450 [ 156.665144][ T9858] ret_from_fork+0x730/0xd60 [ 156.666794][ T9858] ret_from_fork_asm+0x1a/0x30 [ 156.668497][ T9858] [ 156.668497][ T9858] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 156.671726][ T9858] check_prev_add+0xeb/0xe60 [ 156.673398][ T9858] __lock_acquire+0x1528/0x1f40 [ 156.675096][ T9858] lock_acquire+0x1d1/0x380 [ 156.676730][ T9858] __flush_work+0x4de/0xcb0 [ 156.678331][ T9858] cancel_work_sync+0xd1/0xf0 [ 156.680041][ T9858] smc_clcsock_release+0x5f/0xe0 [ 156.682224][ T9858] __smc_release+0x5c2/0x880 [ 156.683894][ T9858] smc_close_non_accepted+0xda/0x200 [ 156.685827][ T9858] smc_close_active+0x4ff/0x1060 [ 156.687542][ T9858] __smc_release+0x634/0x880 [ 156.689219][ T9858] smc_release+0x1fc/0x620 [ 156.690822][ T9858] __sock_release+0xb3/0x260 [ 156.692491][ T9858] sock_close+0x1c/0x30 [ 156.694009][ T9858] __fput+0x3ff/0xb50 [ 156.695491][ T9858] task_work_run+0x150/0x240 [ 156.697167][ T9858] exit_to_user_mode_loop+0x1d8/0x700 [ 156.699078][ T9858] do_syscall_64+0x661/0x790 [ 156.700754][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.702826][ T9858] [ 156.702826][ T9858] other info that might help us debug this: [ 156.702826][ T9858] [ 156.706220][ T9858] Possible unsafe locking scenario: [ 156.706220][ T9858] [ 156.709208][ T9858] CPU0 CPU1 [ 156.711060][ T9858] ---- ---- [ 156.712888][ T9858] lock(sk_lock-AF_SMC/1); [ 156.714358][ T9858] lock((work_completion)(&new_smc->smc_listen_work)); [ 156.717343][ T9858] lock(sk_lock-AF_SMC/1); [ 156.719569][ T9858] lock((work_completion)(&new_smc->smc_listen_work)); [ 156.721798][ T9858] [ 156.721798][ T9858] *** DEADLOCK *** [ 156.721798][ T9858] [ 156.724397][ T9858] locks held by syz.8.805/9858: 3, last CPU#0: [ 156.726325][ T9858] #0: ffff888056cf1f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 156.729593][ T9858] #1: ffff888059323460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 156.733230][ T9858] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 156.736080][ T9858] [ 156.736080][ T9858] stack backtrace: [ 156.738098][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.8.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.741532][ T9858] Tainted: [L]=SOFTLOCKUP [ 156.742903][ T9858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.746062][ T9858] Call Trace: [ 156.747134][ T9858] [ 156.748099][ T9858] dump_stack_lvl+0x100/0x190 [ 156.749609][ T9858] print_circular_bug.cold+0x178/0x1be [ 156.751381][ T9858] check_noncircular+0x146/0x160 [ 156.752946][ T9858] check_prev_add+0xeb/0xe60 [ 156.754484][ T9858] __lock_acquire+0x1528/0x1f40 [ 156.756019][ T9858] lock_acquire+0x1d1/0x380 [ 156.757464][ T9858] ? __flush_work+0x4ca/0xcb0 [ 156.758974][ T9858] ? mark_held_locks+0x40/0x70 [ 156.760522][ T9858] ? __flush_work+0x4ca/0xcb0 [ 156.762035][ T9858] __flush_work+0x4de/0xcb0 [ 156.763524][ T9858] ? __flush_work+0x4ca/0xcb0 [ 156.765028][ T9858] ? __pfx___flush_work+0x10/0x10 [ 156.766674][ T9858] ? __lock_acquire+0x5c0/0x1f40 [ 156.768245][ T9858] ? __pfx_wq_barrier_func+0x10/0x10 [ 156.769921][ T9858] ? __pfx___might_resched+0x10/0x10 [ 156.771624][ T9858] ? __smc_release+0x5ba/0x880 [ 156.773223][ T9858] cancel_work_sync+0xd1/0xf0 [ 156.774705][ T9858] smc_clcsock_release+0x5f/0xe0 [ 156.776288][ T9858] __smc_release+0x5c2/0x880 [ 156.777751][ T9858] ? __pfx_sock_def_readable+0x10/0x10 [ 156.779490][ T9858] smc_close_non_accepted+0xda/0x200 [ 156.781416][ T9858] smc_close_active+0x4ff/0x1060 [ 156.782990][ T9858] __smc_release+0x634/0x880 [ 156.784447][ T9858] smc_release+0x1fc/0x620 [ 156.785862][ T9858] __sock_release+0xb3/0x260 [ 156.787359][ T9858] ? __pfx_sock_close+0x10/0x10 [ 156.788955][ T9858] sock_close+0x1c/0x30 [ 156.790264][ T9858] __fput+0x3ff/0xb50 [ 156.791516][ T9858] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.793167][ T9858] task_work_run+0x150/0x240 [ 156.794661][ T9858] ? __pfx_task_work_run+0x10/0x10 [ 156.796294][ T9858] exit_to_user_mode_loop+0x1d8/0x700 [ 156.798045][ T9858] ? rcu_is_watching+0x13/0xc0 [ 156.799587][ T9858] do_syscall_64+0x661/0x790 [ 156.801172][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.803094][ T9858] RIP: 0033:0x7f262af9e159 [ 156.804594][ T9858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.810405][ T9858] RSP: 002b:00007f262bdba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 156.813047][ T9858] RAX: 0000000000000000 RBX: 00007f262b225fa0 RCX: 00007f262af9e159 [ 156.815553][ T9858] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 156.818119][ T9858] RBP: 00007f262b03506b R08: 0000000000000000 R09: 0000000000000000 [ 156.820692][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.823224][ T9858] R13: 00007f262b226038 R14: 00007f262b225fa0 R15: 00007ffd197f1018 [ 156.825804][ T9858] [ 158.738163][ T43] kauditd_printk_skb: 537 callbacks suppressed [ 158.738182][ T43] audit: type=1400 audit(2000000095.369:49812): avc: denied { unmount } for pid=8721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 158.751947][ T43] audit: type=1400 audit(2000000095.389:49813): avc: denied { unmount } for pid=8721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 158.758259][ T43] audit: type=1400 audit(2000000095.389:49814): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.760336][ T43] audit: type=1400 audit(2000000095.389:49815): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.760364][ T43] audit: type=1400 audit(2000000095.389:49816): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.619231][ T43] audit: type=1400 audit(2000000100.249:49817): avc: denied { search } for pid=9868 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.619364][ T43] audit: type=1400 audit(2000000100.249:49818): avc: denied { search } for pid=9868 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.619475][ T43] audit: type=1400 audit(2000000100.249:49819): avc: denied { search } for pid=9868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.619582][ T43] audit: type=1400 audit(2000000100.249:49820): avc: denied { search } for pid=9868 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.654717][ T43] audit: type=1400 audit(2000000100.289:49821): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.741709][ T43] kauditd_printk_skb: 359 callbacks suppressed [ 163.741721][ T43] audit: type=1400 audit(2000000100.379:50181): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.741785][ T43] audit: type=1400 audit(2000000100.379:50182): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.742648][ T43] audit: type=1400 audit(2000000100.379:50183): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.742681][ T43] audit: type=1400 audit(2000000100.379:50184): avc: denied { read } for pid=9869 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.742709][ T43] audit: type=1400 audit(2000000100.379:50185): avc: denied { read open } for pid=9869 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.742736][ T43] audit: type=1400 audit(2000000100.379:50186): avc: denied { getattr } for pid=9869 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.743327][ T43] audit: type=1400 audit(2000000100.379:50187): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.743397][ T43] audit: type=1400 audit(2000000100.379:50188): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.743455][ T43] audit: type=1400 audit(2000000100.379:50189): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.743516][ T43] audit: type=1400 audit(2000000100.379:50190): avc: denied { search } for pid=9869 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1