last executing test programs: 58.200829874s ago: executing program 1 (id=2): r0 = userfaultfd(0x801) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0000600001000000000014"], 0x4a) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000400)=0x5) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0xa0800, 0x0) setuid(0xee00) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x381100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000100)={"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"}) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f00000006c0)='.\x00', 0xaa) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r11, r12, 0x0) readv(r12, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) 57.977958333s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x23, 0x5, 0x0) writev(r2, &(0x7f0000001700)=[{&(0x7f0000000040)="ef9f85", 0x3}], 0x1) r3 = fsopen(&(0x7f0000000040)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) listen(r2, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r8, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000280)={0x6, "0314e95854eccfd999192debf48f201c17e9cb1a3dc770c7b1cb3c2c7d63897c"}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x48}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580700000000000000ffffff03000000000000009982fe8f5d91fda3aaf60e01db92713fad975b04c0eea5968672a23ef5561f0abb8d3e3fa3446ee14f0a378911c7fceb208ee7885ca9a17fa61a23ede9e43c03b77ae54b6e4972f1bca6efa8d337b103f7089acbcf9a078cbd54956b655bfd902f9397137ba87958e654efd38e495894110eb28dc480e27425c21e4a1a8757b6748b07a675936a2470e006f1157b323fadcd46ef02850df319723dbda6efc06c17f9358c003d2d290df886fdc62f61d1d3", @ANYRES32=0x0, @ANYBLOB="5b12577cbcb5f31a24001280110001006272696467655f736c617665000000000c000580080022009f0d73018ff5261f2349bd670a89f55dd901dda98545282b47670ec56fce8ec2860e42d1d1d49ddfc504057e74f36deb5d73afafc907aa27a2a84b0200000000000000a18855d8211c0dd49d8f108ef6e0acafe8ca313c101f5f25d6c77b3e7a0416f26bee485f", @ANYRESDEC=r4, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 57.832536995s ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 57.742330936s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x48000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/mtrr\x00', 0x2840, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x26}, 0x50) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000540)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f00000006c0)) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000004c0), 0x10480, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000500)=0x200000) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r9) 57.564845452s ago: executing program 1 (id=12): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4090) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\x02\x00\x00\x00\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) write$binfmt_misc(r0, 0x0, 0x0) 56.992405501s ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbc7000ffdbdf2102000000080004010300000008000a01"], 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x20040800) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100027042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100"], 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d37, 0xff, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x6, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) getsockname$inet(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x10}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000f93a095a5e49c43400060000ebb74ec4b30b07750000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 56.921622727s ago: executing program 3 (id=20): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x80000004, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000100)="df6e8217d4db24eb3d6e1d79327c000000000000000116b87ef10d2ba00c3340d5d230270000000000", 0xfffffffffffffeac, r2) (async) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000100)="df6e8217d4db24eb3d6e1d79327c000000000000000116b87ef10d2ba00c3340d5d230270000000000", 0xfffffffffffffeac, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 56.461179784s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x48000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/mtrr\x00', 0x2840, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x26}, 0x50) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000540)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f00000006c0)) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000004c0), 0x10480, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000500)=0x200000) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r9) 56.280943358s ago: executing program 3 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x42, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440003001000050027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="984e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 42.519546603s ago: executing program 32 (id=12): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4090) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\x02\x00\x00\x00\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) write$binfmt_misc(r0, 0x0, 0x0) 41.008080053s ago: executing program 33 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x42, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440003001000050027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="984e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 36.886140314s ago: executing program 5 (id=92): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000140)={{[0xee41, 0x0, 0x3, 0x5]}, 0x0, 0x3, 0x5358, 0x0, &(0x7f0000000080)=[{{@align=0x4, {0x4, 0x0, 0xc, 0x67be}}, 0x401, 0x0, '\'\':{j$]-!\xfb\\\x00'}, {{@align=0x9, {0xca7, 0xeba, 0x3c8, 0x1}}, 0xfffffffe, 0x0, '-/.&%\x00'}, {{@align, {0x0, 0xa00, 0x4, 0xffffffff}}, 0xe429, 0x0, '\x00'}]}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000080c0)={0x28, r1, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1c}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400e011}, 0x24000814) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'macvtap0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r10, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000640)="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", 0x273}, {&(0x7f0000000140)="acf730000094767e", 0x8}], 0x3}, 0x44081) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000440)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x7, 0x2127}) (async) write(r11, &(0x7f0000000100)='1', 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000d9115e71ca6841bf4af610e5fc7dd4eae4da94c48eb8093233d012cc15c5fcf258acce35495f7850984f2ffe29df415330af04adf0bd643cf6fd42a6c9235657a7880679b3429dabcd0dc57cb09dd158a0076f7e8d698b0c19b29c6c83bcf235ded37f04e5f289122cf5bc669b20c2567350b6d0d133f416d37062", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (async) times(&(0x7f0000000000)) 36.78089006s ago: executing program 5 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10b800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0xa, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x2}}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delchain={0x5c, 0x65, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x3, 0x1}, {0xa, 0x6}, {0xc, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x5e, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x5c}}, 0x0) accept4$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x40000) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) 15.018591568s ago: executing program 5 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x50, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1303}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000003c0)=@newqdisc={0x160, 0x24, 0x3fe3aa0262d8c583, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xfff1}, {0xfff5, 0x9}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x7f, 0xfffff801, 0x1, 0x5, 0x2, 0x7}}, {0x12, 0x2, [0x8, 0x3, 0x101, 0x9, 0x6, 0x9, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x3, 0x7, 0x1, 0x1c, 0x2, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0xa, 0x433, 0x0, 0x1, 0xf, 0x10, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x6, 0x0, 0x6, 0x7, 0x2, 0x8, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xe, 0xfc, 0x8, 0xffff2126, 0x0, 0x7fff, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x2, 0x0, 0x3754, 0x80000000, 0x1, 0x101, 0xc, 0x6}}, {0x10, 0x2, [0x6, 0x3ff, 0x1, 0x4, 0xa227, 0x1abf]}}, {{0x1c, 0x1, {0x8, 0x7, 0xc98, 0x1, 0x1, 0x401, 0x4, 0x4}}, {0xc, 0x2, [0x0, 0x6, 0x400, 0x9]}}, {{0x1c, 0x1, {0x2, 0x2, 0x3, 0x7, 0x2, 0xc360, 0x7, 0x3}}, {0xa, 0x2, [0x101, 0x1, 0x7]}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x400005, 0x2000004, 0x40010, r8, 0x0) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="195893d03c8b"}) write$tun(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce) 14.590925554s ago: executing program 5 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x3, 0x3a, '/dev/fuse\x00', 0x3a, '/dev/fuse\x00', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x50, 0x43, 0x43, 0x46]}, 0x41) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) 14.52017189s ago: executing program 5 (id=142): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4040091}, 0x40814) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSBRKP(r3, 0x5425, 0x6) 14.240746675s ago: executing program 5 (id=143): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x1}, @volatile={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x80}}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @ptr={0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000480)=""/129, 0x84, 0x81, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r4, r6, 0x5, 0x1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x144, 0x10, 0x713, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x2b}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x80000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffff4}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000881}, 0x890) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x144, 0x10, 0x713, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x2b}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x80000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffff4}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000881}, 0x890) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 14.143785758s ago: executing program 34 (id=143): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x1}, @volatile={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x80}}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @ptr={0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000480)=""/129, 0x84, 0x81, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r4, r6, 0x5, 0x1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x144, 0x10, 0x713, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x2b}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x80000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffff4}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000881}, 0x890) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x144, 0x10, 0x713, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x2b}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x80000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffff4}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000881}, 0x890) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 9.241785387s ago: executing program 4 (id=193): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x242603) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01864c1, &(0x7f0000000100)) 9.241245905s ago: executing program 4 (id=194): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xa24c68e5f41c431f, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24028844}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x200000000}) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2d, 0x8, 0x800, 0x81, 0x4, 0x8a, 0x7f, 0x0, 0x0, 0x8, 0x80000000}}, 0x50) r5 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x24) syz_usb_control_io(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r7, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000040)=0xfff80003) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x86, {0x86, 0x31, "fdfeb81bd04abc14cfa20a7fe11824028415ac78286849ddcca8557a29ae92ba5bc9a1251d58ceb290be1dafa1a7b4e33f329587bd1971f22bc1ab9ef20679393c13c541e7048341a6cfd1bebe5fb4edcdb3be7d6e62ee72583e3a8a556cb24f708430a902a9417b78e37b82a276354a670b8920cd56c6a74a98f116eadffd0c3fcb23cd"}}, &(0x7f0000000140)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "baadd3b354210bc89438d7e2b50d068c27060b6d6762c03e1bf1b7417f390caaa7f71b2f59c2cd7d6670cecad33ef7b95e5564f5259dcac646fa95d9e720437b9cc35d5b8f29fd51c325854814660c643204262832b5ba82583af25e5d4a04eb01a763fbc9e674114f4b9ac4e628f917c733c77284928da952b2e85d08c9f90817f2ff34774b6f601bce06a63d8bd51f7849772b3318397faebb7ad3dc0da81fcb76a20fec831da996f8f3ea044ffa76edb4d6973c8691370ed1bc29511d3297bc983b66fb42440fdde61d72af3a2eeedc04b71842e66f636280cfad0b9f82fd63af42dd57d68b2b5df3b31abb881b12a4ca40fb505dff7bf2"}}, &(0x7f0000000280)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x1, 0x60, 0xef0}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x9, 0xfe, "b201145b", "ee39ae7e"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x54, 0x2, 0x11, 0x6, 0xffff}}}, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x7, 0xa7, "aff6ba4b437373346711124eddf94d415b91827a2a2eb364619970642f78187555ce5eaa68cb9537e1f502add35bac8219812ecb3d69411936c4589bf6e0506595edffa3c715df8221e02ca729718abe57620dc55c356ba6e060b1c1c389757f4042c8f9b7682fc309d1f95be5d03c456a8410dba937f6e96b2a52ddd9f170113254cc83110ce86e19da30546ce7af349c321079852db7c08ca3ca678555d0abe646983e044162"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000740)={0x40, 0xb, 0x2, "4ad1"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'D}'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xcd}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x9}}) sendmsg$tipc(r2, &(0x7f0000000c40)={&(0x7f0000000640)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}}}, 0x10, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)="13cde27e250e46ef1f281b978a2847ea9c14b7caa65eb0dd194127520f8a940b650dfc2ff23d96d2e35f949cf94c80e0c5a6dbac844de5834662a20e7078671570f3", 0x42, 0x80}, 0x4000000) 6.161125391s ago: executing program 4 (id=215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2182c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001500)='ns/time_for_children\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40229, 0x72863}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0xb703, 0x0) 6.099114199s ago: executing program 4 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="24cd335a79f309bc129502bf9acfa195fc27d1", 0x13, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r1}, &(0x7f00000004c0)=""/67, 0x28, 0x0) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') r3 = accept(r0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x84, 0x0, 0x0, 0x0) 5.651714644s ago: executing program 2 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 5.585537007s ago: executing program 2 (id=225): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000380)=0x6, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0xffffffa5, 0x1ff, 0xfff, 0x80000000}, 0xffffffffffffffb6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000510000/0xb000)=nil, &(0x7f00000c9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f00006b2000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000154000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0xc000, 0x800, 0xb4}, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$nfs4(&(0x7f0000000000)='&\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x1800008, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202c6a66667332002c6d656d6f72792ee576656e74732e6c6f63616c002c2321202c5e3a60912321202c7569643d", @ANYRESDEC=r6, @ANYBLOB=',rootcontext=system_u,\x00']) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000486000/0x800000)=nil, 0x800000, 0xa, 0x28011, r5, 0x0) ftruncate(r5, 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) write(r4, &(0x7f0000000080)="4afb", 0x2) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000280)='\x00', 0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) 5.288340506s ago: executing program 2 (id=228): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaa0aaaaffff00ffffff88a804008100a0ed44e601009217000090031234000100"/50], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaa0aaaaffff00ffffff88a804008100a0ed44e601009217000090031234000100"/50], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x1, 0x0, &(0x7f0000000040)="93", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffff}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x1, 0x0, &(0x7f0000000040)="93", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffff}, 0x50) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) statx(r0, 0x0, 0x1000, 0x8797ad8f20b549ec, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) write$tun(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="450a013400650000021190780a010101ffffffff441c6e01e000000100000007e000000200000007ac141422000000018907c80a01010044280b90fff7ffff0000000000000003000000050000449b0000000d000000050000078000007e034414eaf3e000000100000008000000000000000283131864010100ac1414bbffffffffac1414bb94040000890800e9f650ab0e00e84d244e2200a090783df4a6fadc76570f8e6a24d838bf07550944f538e9a2d8a3e17e0a95a13f6536bfa07e7d9706a5048b310225fafa89fcf7db6af9c43fd3a325965585e2010000008fc5a8ddc4940c466653e05e0bbac3c52249250d3167772ce64b8602c337cfb3879437044cb0c5221343342b51b154070e2d4539507f2c2a6dcc56f76bf2a602cb41fce5afc5dbb5ad3bc41d64e7ea490cbd889289c2116fdb"], 0x134) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0x6, &(0x7f0000000080)=0xc0000}) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20000804) mkdirat(0xffffffffffffff9c, 0x0, 0x1bd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) 5.21135582s ago: executing program 4 (id=229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00'}) r4 = syz_ublk_setup_io_uring(0x24ca, &(0x7f0000000300)={0x0, 0xab2d, 0x20, 0x1, 0x268, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r4, 0x4006642, 0x200c7b1, 0x90, &(0x7f00000002c0)={[0x201]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f0000000000)='sysfs\x00', 0x1141010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r5, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x400040c0}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r6, &(0x7f00000001c0)='w{', 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x40001, 0x98) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) process_mrelease(r2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00'}) (async) syz_ublk_setup_io_uring(0x24ca, &(0x7f0000000300)={0x0, 0xab2d, 0x20, 0x1, 0x268, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) (async) io_uring_enter(r4, 0x4006642, 0x200c7b1, 0x90, &(0x7f00000002c0)={[0x201]}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f0000000000)='sysfs\x00', 0x1141010, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r5, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x400040c0}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) (async) write(r6, &(0x7f00000001c0)='w{', 0x2) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) (async) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x40001, 0x98) (async) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) (async) 5.092227853s ago: executing program 4 (id=230): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x3, 0x800000d, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x28012, r0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000000)='1000', 0x4, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181002, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000180001002dbd7000fbdbdf251d0100001500010000000000fc0000003bad90732d8c59f707010000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0xf18, @empty, 0xffff}, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0x3ff, @mcast1, 0x473}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, @in6={0xa, 0x4e22, 0x7, @remote, 0x2}], 0x8c) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={0x0}) 2.271478106s ago: executing program 2 (id=241): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x2, 0x80}) write$char_usb(r3, 0x0, 0x0) close(r3) syz_usb_control_io(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000001000900020073797a32000000001400078008000840000000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) ioctl$HIDIOCGRDESC(r8, 0x90044802, &(0x7f0000000a40)={0xa0c, "64ad7b908c4a5a219dcf3986dad8a18b22e025aa0bd19a035448d4e2d11ecebe1608ef9c9ca28935ac6d46ca2850acb73b19614072713d762d51d3b2fe36be6018dd69dba804f0b76faf9e6e4f2b5da21803d372034e4e7c64929cda1aace11c56bfe1fec9b09d5295c18b65d3e151e2515d98cd5ad382b2f1c9233679469d030c415e25a2c887916cd3a0c42c8390aa403a482b61ba538e50e3c1e47be4dd8cca54d06bec81a0c393dd65dd6713ec6ea2094c76847eb3b9bd9f107bafca19df2dbab381714c90c3edec513de7f9fee66a78507642b6133b885a3a4ae40e8d03452d1d69d64d5f6ba59047d4af33ee4c8809f37057477fa60dce26070419bc70a73ed28b9fab532b0ce3eefaee4c2d6481c856e21468766c50c6b980e8548811a6c77693a62249bfc6c134f767ac766ca89a0958ad690f46f74ea2fbedb0ab3e30b524e185b22239a14c1ad2f621b6cdf8e1228f2deb5f9b8485578d008e60d366edc8c302fcce99e6e3fd929b4c0193add672c170b0b0245522edda40cccb42c9b3848791edb65d9b25bae059ae38b66ecaf3f84b511a5c52733a93a6028ea1e830c9008d6306ad16092723cc0117e1fca9e5ef4948e923d17d7943bdc5d72536c4d03ab282801bcde8b8a52bc9b3eef69450d0c9ff70e48589a0820c878a247665082669f0b0d168282a871576402fc1c1c2e8bcd89659fcc317e83657d6e367b0670878b46888386487dee104e931fea18b65aa148e44bcacdda36f9c474dd27d0c36a395d606af8316300176a9a800f93798799a91890220f03f60ebd4d0858ae9df1f082034f1873624632add987f81667e98a23a30f14eb1280a10241a7a7471aeda870cfc6bbe0c3265a21a83b38b98d3949dff23e1bbc5cfb0690a189c9c720f64fae65c929ced152bed84065b2bf3f6f8cf64e4ae6ed7b817170e5093d7a69bfc3b08890cf0e18abf03a5a7a4bba3cc4edce06a3fb2e441d0ae1d6ea0dea8af9fe79b7ee55de34d240fa72983ce912a0e343472e5f01f31ecc8cdbf3055baf2985191ddb8254ecd059d31cb5fbf916ae0bc7e01b4290ca66bf3030a83912caf695c9b293662a17efc23c679edb327eb862c6e262748e036a8fae316ebb222fcb23ad77c310eeac59c6d83b1c522f34fedb6d05f60eacefb3e8f79efd61e620de5d90636194af49f724e385cda78fb40279eae2e02188e3b3e1f9b85d7520d0529eccd4713df49a0743875a5e2d156861650f35cc3243ef586eeb4c14a291f3ef6dd5cc5e516b22d7b27d5b3b2a5f51f797341ddab3497dac6d72cb5bb800c79a81a080530c840cddacde50732b567d3865cd68d0f647de21820d70c946d7ea5c81d75c64e3d457f8ed142cb44139f19604f0bf1a1d238241aef5270dc08552318c491d0979fd178df247f3b8a234d0543b2ade350f3b9f5d0943e1afb28bf1ecde66a950adc4dd9a782d400b4698076f752806da7afa55e43d449fc3dbeeed96d07473b0ee0ee0c005be9d9aa3c82ebfc231f5d06d190f64c2691f917ce485c3f9e8739878b71e3727ebe3bb099061fe57b3203fa30322af74932a00d418073f59026e7938af6703f2751992662b8b71ab8308af4f183b83cbc854722ef08fa1bed56a3e0da54406b3097b4ba81c199d987675fe5d555131850f85b3d9c85142799a83264e259fb05a46fab3721ffa41be34bf954e2f14bdefee85f7ba363415a9359424b1b96e38433a38a982c401342c7405782140cf6e999eade68b723031347ac9e8d8ee863119ef6ae9bcfff4ef27ca9403f6f58e890ee75121330bf4a404c3cb9d3317d78f9753ce3d59ef40efbad51aa47ee1e1d87c5f075de5c19205d92d165cb8afcca6eeafdcdcacfe8fd0ea27a2d2c2e12dad5cd1b192e642f1b3c8d00d883549f96937df1f0b9a8382919be9f3c629431ddd7758941ccdd48707c81a569659baf2f4ebdc22054342d07a064b64e3074c09e6a223d3d4b485f6af2f1346298deb61f26c06e4b69163ef5b0ec4db78eaed693cfe5206ed21d8fa773dfbd80a9da75c86251acd2d439dcacb3d6c8ab4af31d971ba02947fe44272890e92b5ed99d83658454a4ca31d22a7a914ef01d668a111cd138f5edb4b86b36f19f8d266d3441881dbf4c9c835dd69c77542457d22569ae3b3d54b22ea748a869fa82d908803d32b675f5a7c77a0346a617d94b1d51149699d082d0505444bc2c70749fe78d6eacefca9035887e7579706983723803ae17bac05ad9d520f301c29f7312ccfda6f2ff5409a53d7b6973ceea7150cb3c4a6f2bd298ed1879c6060f8353aa18b06dd85fab753dab4d5340c3fcef4c190bfaf20497b900de420e9a0ee79fc52e1e80c1f954fbe779ce345c8d124f3a3429d40246b8b98519b2727d943825d442009248118e20d007d93c7523a6e3b7b1dc056c1194f1ba1454add23cd9be5b3541635cbe6c3a50a9b6fc41e0c1731f4f5c56c022099bc7ba39cc4567e8f2d0f8bbca7c4d68edaf6e765145be58ff73fbc3475ad8161a8a380872fe36208788392b206e52aae98bd32d4b638bb4f4d6bcf9cc1c319fd5714b2bbb5ed900592467b43498ca3c5b1afd916787846dc8f6b3f4835745d9a8f8ecac8289c01c0710002067c0b5b06ef5a9d46fe57e6bdfb28124e637e074661cd5fcc5aabf0aa4448248b543e567b56d8c0d88c2b3602d9b9836cef59e5020549ac46eb0d29462bad715d568dc026484d0c7401c3d8815cbf341f9558f156d2a4ca8e971e98dead28fd3c0678038a9732d52db8c3c3374886974dd69be9ad0edad5049b8f7c90f4853600c5329d4b545ef415b4d36f328eecff6dfce7efbaa86990920ee3315230bfd067c7c80905405ddf82e7c32b49f817ece4e9a616dd6c0cdfe1dc5247cd9a84d718ba9ab85e8efc315b525d5fecbd27c56c33c0f7cf1e8d0fb56dc4cb713cd743f5f5070d56a064375a54dadc91ec0af78d105d1bf2a0fd269c859261193352af47ca11791762b56c348f9dee574da3669cea2fe09629c9cf27cd8e00044e832be579dadd61b2e96d8426cc19855c29596df4e13673806c2d0c9b43227ff152807e3bdbf2e85a9d2103ede1956079abe862c8f2837dc3aa4c3c802bcb09be1c99a33f8aa98baaaa5b61bb75b5adeb60ed943eb3a1825c2ecf458eb0f8fdd8d38d74c3d1534d87b3b01900cb5e61628534d5311ebe3d49388fddc6a35d6b9570d50b7d9227ae32354ce65ae0182505735d108c2353a156eb85076c3b55889e28211176029823ede990a73416b08338b8552dd9c3e9d40fd4371e7f1ff945a0013dfb381a949cc9b9ecc3d379dc0d6632acbff81590c9c243f0fbb0d359f9a167b7af41e6ebe6f998524ae86b126848ff8724e55b7321bae34c8c27e19666ead0657d8214de89536cae856088dd5d701e1feda883c8247665a52361c6d1bbdbd76ca2fa98b6e81369829574d21fb1eb309ac5f289768277155549afffb216708ba2546e240972d850e14a9466d9b621c06afd1136c11b58fa76b60dbc1ff9f60ffc41d2853ef85b1cf74b60c4b3d2a76c406cdea8d3588733fa9b163a118a1ed3e29b630135067a55ac81a1af34aa1ac9806a647ee8fa430cc3e3f4f3cec55df2bf53988"}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000010000080500010008000000000000000800124010ef207132d6dc37d1000000050004000000000009000a7b5087020073797a390000000013000300686173683a6e65742c696661f69ada0ef3ad327d53d066a5bebb714cc1ccd369a6488012ae117a1c6e"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="8e95fc1d0440007b0e0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 2.121953897s ago: executing program 0 (id=243): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x158) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8000) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@private0, 0x0}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004081}, 0x48000) (async, rerun: 64) move_mount(r1, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x31) (async, rerun: 64) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"c6bfba063d3ad95ff651644e7bb26023", 0x0, 0x0, {0x3, 0x800}, {0x3, 0x80000000}, 0x9, [0x8000000000000001, 0xf, 0xb0, 0xb6, 0x94a8, 0x48, 0x7fffffffffffffff, 0xffff, 0x4, 0x6, 0x9, 0x8000000000000000, 0x15, 0x4, 0x800, 0xf]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000400)={{r4}, r5, 0x1a, @unused=[0x80000000, 0x2, 0x8, 0x1], @name="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"}) (async) getdents64(r0, &(0x7f0000001400)=""/141, 0x8d) (async) close_range(r1, r0, 0x2) (async, rerun: 32) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000014c0)={{0x2, 0x4e22, @multicast2}, {0x306, @multicast}, 0x28, {0x2, 0x4e20, @rand_addr=0x64010100}, 'wlan1\x00'}) (async, rerun: 32) syz_io_uring_setup(0x6a76, &(0x7f0000001540)={0x0, 0x3cae, 0x10000, 0x0, 0xfe, 0x0, r1}, &(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) r7 = syz_io_uring_complete(r6, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001680)={0x0, 0x101, 0x2, 0x0, 0x1, 0x2}, &(0x7f00000016c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000001700)={r8, 0xdeb}, &(0x7f0000001740)=0x8) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001780)={'pimreg\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001ac0)={&(0x7f00000017c0)="9f283fbd4352ea5ec56d59bdd4b3fa0711c71849e17b4b976414f7f8a80bdbcc007f90db6b545a60823e7220ed", &(0x7f0000001800)=""/131, &(0x7f00000018c0)="1dd8dead51a430210e292e875f69c94314e98141f21524a3ffe28b792c848c60b8de054dbae21f92bc54cb2154a2709058fb9475dc8da4395f1fca21baff3cd98cfcb02f2f3a66562fbf7459ce43f4e6bdd3b92a166f7301e907a08991c5b5936b51d5e09f5fc9f0daa8cddb715de3d828d78f9fac78a22ea9401da52ae76fc7ef8fc92154be2a2c0bebec27c55d0479f02b8d880fe8f624ddc2986b169d478f26d08444c455a984198478dfced35bfefcd828faf657aef73b580ea29d20dcfab258aa6db260ea0b606fefb3ef7726c674", &(0x7f00000019c0)="2eb63cd233412f94ec2513356590013a531309e8318cc666aca6253426e6d5b9124973b05244bde07cf1d09ee7b138d4bb62b5227a3e8fbc51a6431d64592ee12d702a702eed0663bcf279d6544658ac73e7bc051a51b219c9dd9f497210f4c93e90edd97c0fd45a3d042ff6adb531e41571e6bd045736c19c33b2229100a70c85c2bb9ae3f0a62c31c50ef875fac47f9e884a716379aaa4572d24acf32a6775f1a2255f1c28aaa3e72aaf8d1332416de6094f8466ad7ad1126d11b0cf83668f8df87ddcb55fe5ed5e552b3a478766eda2e7ba724894acff86de476a6cf34f989099deffbcd6246753d7549df7b0e8ca49c6a0fd7f806bcb", 0x100, r1}, 0x38) (async) r11 = openat(r0, &(0x7f0000001b00)='./file0\x00', 0x88042, 0x2) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002100)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000820}, 0xc, &(0x7f00000020c0)={&(0x7f0000001b80)={0x534, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, {0x1f, 0xf8, 0x4, 0x5, {0x4e21, 0x4e24, [0x9, 0x1, 0x2, 0x9], [0x7, 0xfff, 0x40, 0x6], r10, [0x8, 0xf]}, 0x40, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x41, 0x1, "c53b72b3bb42d4eff8598ab9a88ab296c537b07d75874f9543ebf54a3e9c2595b3c23b0ba76a49e8b586baebe68e9341ad20c8e3171598c8846ddcb514"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "df40e12f1c6d67ef6801e333cf568c87966d93e15bf41d7eea68cb7bc4d91cf58bf38ef228c78cf0cc9a7fb7676ae6de"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "c0f519c908cbf059171a96c71be184ca7bc97206a034f76050c41ccfffa76dd6a203da2a3f6867922b5c7cbc9ad7cbf41b775f463aa2a15ff3b86a292851dc69db2512b7ca7633f80fd05e693aa3ae9e51c8469a0609bcb4c82d00ec7fc2b5b246eab1f188428704754e69beba8cbd90e2474706daf36b688271d89e548c3858858e339c4257eb793f4bb1e3d3805106a6874c1c248d766ae9e866dd22b7c6911db8a6e1532d99c074c4c4afb6f5369e9370"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "c472"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "3263704acc7cf196d85b0f6a7e023bb03edf254ac02f57b1cfba9dd3907abfb54b67ac3e254b86a7aa297e47565e2b21951afd6ad396cd39f53596b387854eb7a687923716cfd3b65dd2651b7fc217e98a128c7e85f3d590128877811f339ff019f834c60722647ffae53004349d16f485b1bfb352f8a8626bc73f01320179b160460762be2d61b8f66f9c122b24d5fe4f64ff49bafe79182945ea059af1158fdfcba115e6c0334dabb158ee480bf008392c6b39dc299e449980b06cce4df31174e9f32c5594a2066e526b484c4d3ded3b4f52451447ede583622da71e8a1414"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "fcb6e2cc684bcd2966dc798be245cbb07e87f7b2f1220bf656c178f0f4d1b357e940e63b08f91365d2082848ef803356c1f8220075177afc4958637c41f1eefa"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "6e0206d9e5fe7e9bdf68dd7b8a6099976d1190d1e6e66463897c85811bd755fbcd8a348773d71107c96b0e02808febfbd3516e38e2dc3a9ebced554f8eab687deff88565ea8be7eba6084ae05dc559d370f1ec6f8cbf2063807e231a85d8a92311b1274f70daec21fb50c8faefaa43534213708c3464f656eedcf61afd1cb686ca4561a880e7b2fbea3b6a19aa422c3986"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "63ae5d1c6942cbb5f5adaa6644cbc7a9a34aa62791e017704bbd4ba2559036ed5a30afea055beba7b86e27067d1397c11b35606a41a1e76659615d08317d8e71a378185b30dfe6fafd131430822db2cc1d70f8f069f0520a55ec25dabbfc549d832339c414636b4dc354673799aaa99089ded47e50be2bc3c7a68234f6b5210d7a513960a3edeab6dea745d88e3e7512b7d77bf902cf882e2beb8e6b769c009eff4650b571220bd190bf9d814d377de0bb4c02c016b89fc864dc419166bff8f5e5df392ccd573d6dd8468931f17fc2afdc743dd54bb98b6f95"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "6b556b8bc5c9d8f1a7b3"}]}, 0x534}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) vmsplice(r11, &(0x7f0000002300)=[{&(0x7f0000002140)="5684a612b0dc9f64aebc07b14587e21dd65e55f6c07610ff1f4dae0bcb14c2edcf35185113f37847ec3c1f9d038f041b6fab1bad6d73c7942a4ea8ce8615f3b55a03bfd84fc4fc2a22b1377db0dfa62044dad85410d93a9907a73a96a596fbaeaeeb29239577b9f99d90f704767a6e7b859fc665d8c9db8b601d267690f00c5eae819866d92ad0c15755df0cc1d4fd07517f3247c60ec0bbdf3ed7814290be9793bf8b80d1550748d87298224c8c09f5e4c9796fceb63b9343bbf5313666e21b76643d93d44ebdb4b62ef1d4dbead65a18d7e3263958f9bff1230e863d20f9af3cdeba1234c07a8d4558c4ed7a04fd50", 0xf0}, {&(0x7f0000002240)="f4ec3b2831eae26cf5c0f852b5f52eb727de13c1f15a233bd76359c6fd7c15a40a922effbaea86662ac2f6af318db14a76f2113e0bee", 0x36}, {&(0x7f0000002280)="4edf", 0x2}, {&(0x7f00000022c0)="332b6f3ff0e9934409f2a56849f1ad9c575e1697a9dee03e6c7ae25595ea7d4373", 0x21}], 0x4, 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003340)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002340)="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", 0x1000, r0}, 0x68) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000003440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000003480)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000034c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000003500)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r12, &(0x7f00000035c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x34, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) 2.048083321s ago: executing program 0 (id=244): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r1, 0x0, r1}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.872063851s ago: executing program 0 (id=247): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x218, r0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x45}}}}, [@NL80211_ATTR_FRAME={0x1f8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @random="af758e843704", {0x2, 0x4}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @random=0x7, 0x620, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x6, 0x8, 0x1}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x7, 0x9, 0xf}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x0, 0x0, {0x4e4a, 0x7, 0x0, 0x3f5}, 0x1, 0x2, 0x4}}, @void, @void, @void, [{0xdd, 0xc9, "de97f8e4df0b4544508a1d473d3fb0703cb4bd04134e1646faf57747ca054dc85d617d842c35d1a2877b1d23576cefca17b60d20ef997b1c7ea808b46ffcf1499c15280fd712f423c31e84b5268d032424078ca6a255e2fc07b6981b4667c5621442c143bdc9850af2157db729708c6c10fee4fff605738c5a60ec0d283d2930554c629a19ae4b6e79551fc1fb36dd6ec1b442bcc2e77daaa53b48a62a5308228b2bbf71fbe37dbf76e97b03faabc3dc7797caa357f87e4140b6033974591b5b85fcc53fbddce9b7dd"}, {0xdd, 0xd2, "39b1390d6792c3f71634862726bc2bfe7186c17405809ded837c6a37b6eec42de005134dcd3c00460073761033528114325238dcae9fd3f8c95ec8c34a8174053bac5ba02b45ea0b6062d8076e1d624c9e79bffe43765d3913c1b918d73332af31d7e8ec000d482736605df02af9f04a5427131dcf7d0f7f43c5b9c40c4ae857047be982ac678256e749e779cf41846ed6076cb6802c162529e0730d08700b91d8f0dcdc4162cd7e2b8245fed5ddbdb384995455a0e03ea066c473f66f9fbea3384dc493585ffc831bc824d9f3b0597b9589"}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ff, 0x2000000, 0x40010, r3, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000400)={{r1}, 0x1, &(0x7f00000003c0)=[0x5f], 0xa6c2, 0x1, 0x1}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x420080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x6, 0x40000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) lseek(r4, 0x8000, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) bind$llc(r5, &(0x7f0000000540)={0x1a, 0x204, 0x7, 0x7, 0xf0, 0xc, @local}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f00000005c0)={0x1, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2c, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf4d}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x44}]]}, 0x78}, 0x1, 0x0, 0x0, 0x41}, 0x4044000) r7 = syz_open_dev$dmmidi(&(0x7f0000000780), 0x73ea1e6a, 0x20000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f00000007c0)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000840)=&(0x7f0000000800)) fstat(r2, &(0x7f0000000880)) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000900)={0x0, 0x0, "3bee32ab53092b3532fcfb357f9d56c0"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000009c0)=[@text32={0x20, &(0x7f0000000940)="0f01cf66b820000f00d866baf80cb87851af89ef66bafc0cecc4e39968c40fc74424000c000000c7442402fc0f0000c7442406000000000f011c243e0f21b766baf80cb856fc1d8cef66bafc0cec440f20c03508000000440f22c0660f68f0c4c17a7fd5", 0x64}], 0x1, 0x1, &(0x7f0000000a00)=[@dstype3={0x7, 0x5}, @cstype0={0x4, 0x2}], 0x2) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000a40)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000a80)={0x18, 0x1, 0x1, 0x0, r8, 0x3}) getdents64(0xffffffffffffff9c, &(0x7f0000000ac0)=""/140, 0x8c) 1.790274023s ago: executing program 0 (id=248): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000019c0)={0x0, 'vlan0\x00', {0x2}, 0x7}) openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) 1.711901174s ago: executing program 0 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0x6a80, 0x24, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x1, 0xb5}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r7, 0x4) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x1b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xafef}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x2, 0x72, &(0x7f0000000440)=""/114, 0x41000, 0x64, '\x00', r5, @fallback=0x26, r6, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x9533, 0xffff4404}, 0x10, r7, r8, 0x3, &(0x7f0000000880)=[r9, r10], &(0x7f00000008c0)=[{0x4, 0x4, 0xf03c, 0x8}, {0x5, 0x2, 0x7, 0x8731b72410e35b5a}, {0x0, 0x1, 0xc, 0xa}], 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x557}, 0x0, 0x0, 0x0, 0x0) 1.040882545s ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x6, 0x4}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) 748.183647ms ago: executing program 2 (id=253): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket(0x22, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000e10000000000ffff0000000008000800090300"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) close(r0) 679.876762ms ago: executing program 0 (id=254): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000200)={[0x6000, 0xe000, 0xd000, 0x41000], 0x1, 0x2, 0xff5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x4, r8, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c04"], 0xf) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1002002, &(0x7f00000003c0)={[{@xino_on, 0x3a}], [], 0x2f}) 582.471337ms ago: executing program 6 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010001000000000004000000000000e74ce4a500", @ANYRES32=0x0, @ANYBLOB="10000500000000002000000000000000"], 0x2c, 0x0) 522.291438ms ago: executing program 6 (id=257): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000"], 0x4c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x2) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x80, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x44) write(r4, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 s', 0x35) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") ioctl$FE_GET_FRONTEND(r4, 0x80246f4d, &(0x7f0000000140)={0x0, 0x0, @ofdm}) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff15, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000002c0)) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0xc, 0x5, '\x00', 0x4}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x54000, 0x2, 0xffff0001, 0x9, 0x0, [{0xf, 0x10, 0x0, '\x00', 0x4}, {0x7, 0x2, 0x8, '\x00', 0x6}, {0xd0, 0x74, 0x10, '\x00', 0x8}, {0x3, 0x7, 0x3, '\x00', 0x1}, {0xc, 0x4, 0x6a, '\x00', 0x92}, {0x4, 0xf, 0xde}, {0x5, 0x6, 0xf, '\x00', 0x5}, {0x4, 0xf0, 0x7, '\x00', 0xc3}, {0x5, 0xfd, 0x24, '\x00', 0xb}, {0xc2, 0x1, 0x3, '\x00', 0x4}, {0x2, 0x8, 0x2, '\x00', 0x66}, {0x0, 0x7, 0x10, '\x00', 0x3}, {0x81, 0x8, 0x6, '\x00', 0xb}, {0xf, 0x4, 0x4, '\x00', 0x9}, {0x1, 0x4, 0x92, '\x00', 0x7}, {0x9, 0x8, 0x2, '\x00', 0x1a}, {0x7, 0xa, 0xc, '\x00', 0x2}, {0x6, 0x8a, 0x6, '\x00', 0x9}, {0x6, 0xfb, 0x8, '\x00', 0x3}, {0x2, 0x7, 0x9, '\x00', 0x2}, {0x7, 0xda, 0x9, '\x00', 0x3}, {0x10, 0xff, 0x5, '\x00', 0x5}, {0x7, 0x6, 0x0, '\x00', 0x48}, {0x5, 0xc2, 0x9c, '\x00', 0x9}]}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0, 0x0, 0x2) 449.878346ms ago: executing program 6 (id=258): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x204080) (async, rerun: 32) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r3, 0xb15, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x80) (async) r6 = fcntl$dupfd(r0, 0x0, r1) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) (async, rerun: 32) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) (rerun: 32) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="12c3514e6581a6224583", 0xa}, 0x1, 0x0, 0x0, 0x4}, 0x41) ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, 0x0) (async, rerun: 32) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1}) (rerun: 32) 382.326951ms ago: executing program 6 (id=259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r3 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) connect$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 181.668717ms ago: executing program 6 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x10000, 0x196) write(r0, &(0x7f0000000200)='1\n', 0x2) mknodat(r0, &(0x7f0000000040)='./config/nvmet/subsystems/testsubsys/namespaces/1/file0\x00', 0x800, 0x8000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000001f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e1"], 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) write(r1, &(0x7f0000000280)='1', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x13d) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='/dev/nullb1', 0xb) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f00000003c0)="b67433", 0x3}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r9, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="051bf144c20000f100", @ANYRES32=r10, @ANYBLOB="45000e0080000600ffffffffffff08021100000008021100000000000000000000000000640001007206030303030303dd135fc690314e7d96f783cf53b6539c4b1547331d00000009000f0001034ac87e000000080026006c09000008000c006400000008000d0008000000"], 0x88}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r9, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa058, 0x12}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x139718a38625ddf7}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "080e71a4211987f887ea373d85"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000000) (async) write(r6, &(0x7f0000000600)='1', 0x1) 0s ago: executing program 6 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43000000000000000006"], 0x14}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) kernel console output (not intermixed with test programs): 52.140139][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.152469][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.152550][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.161523][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.161596][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.411908][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.452797][ T5748] veth0_vlan: entered promiscuous mode [ 52.460178][ T5748] veth1_vlan: entered promiscuous mode [ 52.469682][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.501637][ T5748] veth0_macvtap: entered promiscuous mode [ 52.507874][ T5748] veth1_macvtap: entered promiscuous mode [ 52.510264][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.544031][ T5735] veth0_vlan: entered promiscuous mode [ 52.555335][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.566455][ T5735] veth1_vlan: entered promiscuous mode [ 52.570906][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.574653][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.605881][ T5736] veth0_vlan: entered promiscuous mode [ 52.642596][ T5736] veth1_vlan: entered promiscuous mode [ 52.663750][ T5735] veth0_macvtap: entered promiscuous mode [ 52.675354][ T5735] veth1_macvtap: entered promiscuous mode [ 52.698547][ T5743] veth0_vlan: entered promiscuous mode [ 52.706489][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.706505][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.728134][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.728153][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.729948][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.730538][ T5743] veth1_vlan: entered promiscuous mode [ 52.745442][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.751513][ T5736] veth0_macvtap: entered promiscuous mode [ 52.759235][ T5736] veth1_macvtap: entered promiscuous mode [ 52.788119][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.813516][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.816839][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.817738][ T5748] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.847840][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.847860][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.864676][ T5743] veth0_macvtap: entered promiscuous mode [ 52.877777][ T5743] veth1_macvtap: entered promiscuous mode [ 52.911487][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.911509][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.937919][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.952467][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.970076][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.970095][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.971831][ T5881] FAULT_INJECTION: forcing a failure. [ 52.971831][ T5881] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.971851][ T5881] CPU: 1 UID: 0 PID: 5881 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 52.971865][ T5881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.971871][ T5881] Call Trace: [ 52.971876][ T5881] [ 52.971880][ T5881] dump_stack_lvl+0x100/0x190 [ 52.971901][ T5881] should_fail_ex.cold+0x5/0xa [ 52.971918][ T5881] _copy_to_user+0x32/0xd0 [ 52.971932][ T5881] bpf_verifier_vlog+0x333/0x6d0 [ 52.971953][ T5881] btf_verifier_log+0x16b/0x180 [ 52.971969][ T5881] ? __pfx_btf_verifier_log+0x10/0x10 [ 52.971985][ T5881] ? lock_acquire+0x1d1/0x380 [ 52.971998][ T5881] ? __might_fault+0xc5/0x140 [ 52.972019][ T5881] __btf_verifier_log_type+0x47a/0x8a0 [ 52.972039][ T5881] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 52.972063][ T5881] btf_struct_check_meta+0x166/0x6e0 [ 52.972080][ T5881] btf_new_fd+0x1ba8/0x5bc0 [ 52.972095][ T5881] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 52.972117][ T5881] ? __pfx_btf_new_fd+0x10/0x10 [ 52.972134][ T5881] ? rcu_is_watching+0x13/0xc0 [ 52.972150][ T5881] ? cap_capable+0x107/0x430 [ 52.972168][ T5881] ? security_capable+0x80/0x260 [ 52.972185][ T5881] ? ns_capable+0xd2/0xf0 [ 52.972198][ T5881] __sys_bpf+0x13ef/0x4a30 [ 52.972212][ T5881] ? __pfx___sys_bpf+0x10/0x10 [ 52.972222][ T5881] ? __pfx_futex_hash+0x10/0x10 [ 52.972245][ T5881] ? vfs_write+0x914/0x1050 [ 52.972256][ T5881] ? vfs_write+0x15d/0x1050 [ 52.972275][ T5881] ? __x64_sys_futex+0x34f/0x4d0 [ 52.972290][ T5881] ? __x64_sys_futex+0x358/0x4d0 [ 52.972309][ T5881] ? xfd_validate_state+0x129/0x190 [ 52.972323][ T5881] ? __x64_sys_bpf+0xce/0x140 [ 52.972333][ T5881] __x64_sys_bpf+0xce/0x140 [ 52.972345][ T5881] ? do_syscall_64+0xae/0x790 [ 52.972362][ T5881] do_syscall_64+0x123/0x790 [ 52.972379][ T5881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.972391][ T5881] RIP: 0033:0x7fc685d9e159 [ 52.972401][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.972411][ T5881] RSP: 002b:00007fc683ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.972423][ T5881] RAX: ffffffffffffffda RBX: 00007fc686025fa0 RCX: 00007fc685d9e159 [ 52.972430][ T5881] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 52.972437][ T5881] RBP: 00007fc685e3506b R08: 0000000000000000 R09: 0000000000000000 [ 52.972443][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.972450][ T5881] R13: 00007fc686026038 R14: 00007fc686025fa0 R15: 00007ffd73796748 [ 52.972464][ T5881] [ 52.973352][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.051687][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.051707][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.157893][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.157914][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.234586][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.234605][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.294957][ T5601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.343463][ T5601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.394478][ T5601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.394688][ T5601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.394882][ T5601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.395126][ T5601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.395885][ T5601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.407713][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 53.425294][ T5912] ptrace attach of "/syz-executor exec"[5748] was attempted by "ο0B<&c7RB0\x0a30Â\x0d:w=c3q2> >^vyBIakŤSyP]~DF~`(\x1b&~P+a)nmcs1cwQ^t*Edidu;eo\x22X<wPNTFNW@eps w>,Q ~A%I:MŲ\x0a@Mԧ='iܼ6{Y\x0d>pq˅,b ݛCONڑ+bty'=\x074 3\x0a1 \x22Ïⱆ0\x0c1@ʬ\x0b+R%ޭ=VóD}`^i.y~uՔr^( (iFu3~?1i nAO'LWZ\x0dn(\x1b>C\x0bU߹m)r ](O|f\x5cjhc9v\x5cC+Ȃ\x07V\x0a{‚E>ڙ\x5coyhx\x5cv#cq(~D^ [ 53.867826][ T5944] dump_stack_lvl+0x100/0x190 [ 53.867871][ T5944] should_fail_ex.cold+0x5/0xa [ 53.867896][ T5944] ? prepare_alloc_pages+0x16d/0x5b0 [ 53.867926][ T5944] should_fail_alloc_page+0xeb/0x140 [ 53.867955][ T5944] prepare_alloc_pages+0x1f0/0x5b0 [ 53.867986][ T5944] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 53.868007][ T5944] ? __pfx_get_page_from_freelist+0x10/0x10 [ 53.868039][ T5944] ? prepare_alloc_pages+0x1f0/0x5b0 [ 53.868062][ T5944] ? is_bpf_text_address+0x94/0x1a0 [ 53.868090][ T5944] ? rcu_is_watching+0x13/0xc0 [ 53.868117][ T5944] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 53.868140][ T5944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.868166][ T5944] ? stack_trace_save+0x8e/0xc0 [ 53.868184][ T5944] ? __pfx_stack_trace_save+0x10/0x10 [ 53.868202][ T5944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 53.868221][ T5944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.868240][ T5944] ? is_bpf_text_address+0x94/0x1a0 [ 53.868271][ T5944] ? kasan_save_track+0x14/0x30 [ 53.868292][ T5944] ? __kasan_slab_alloc+0x89/0x90 [ 53.868313][ T5944] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 53.868334][ T5944] ? alloc_vmap_area+0x640/0x2bb0 [ 53.868354][ T5944] ? __get_vm_area_node+0x1ed/0x350 [ 53.868376][ T5944] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 53.868400][ T5944] ? __vmalloc_node_noprof+0xad/0xf0 [ 53.868424][ T5944] ? __vmalloc_noprof+0xa3/0x120 [ 53.868447][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.868491][ T5944] ? bpf_prog_load+0x1ac3/0x2a80 [ 53.868516][ T5944] ? __sys_bpf+0x1f46/0x4a30 [ 53.868534][ T5944] ? __x64_sys_bpf+0xce/0x140 [ 53.868554][ T5944] ? do_syscall_64+0x123/0x790 [ 53.868583][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.868610][ T5944] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 53.868636][ T5944] ? policy_nodemask+0xed/0x4f0 [ 53.868664][ T5944] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 53.868699][ T5944] __kasan_populate_vmalloc+0xf0/0x210 [ 53.868727][ T5944] alloc_vmap_area+0x95d/0x2bb0 [ 53.868757][ T5944] ? kasan_save_track+0x14/0x30 [ 53.868779][ T5944] ? __kasan_kmalloc+0xaa/0xb0 [ 53.868800][ T5944] ? __pfx_alloc_vmap_area+0x10/0x10 [ 53.868824][ T5944] ? __get_vm_area_node+0x124/0x350 [ 53.868856][ T5944] __get_vm_area_node+0x1ed/0x350 [ 53.868885][ T5944] __vmalloc_node_range_noprof+0x268/0x1420 [ 53.868912][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.868945][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.868975][ T5944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.869007][ T5944] ? avc_has_perm_noaudit+0x145/0x3b0 [ 53.869040][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.869064][ T5944] __vmalloc_node_noprof+0xad/0xf0 [ 53.869089][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.869117][ T5944] __vmalloc_noprof+0xa3/0x120 [ 53.869142][ T5944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 53.869171][ T5944] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 53.869199][ T5944] ? security_bpf_prog_load+0x10f/0x2f0 [ 53.869224][ T5944] bpf_check+0x17fb/0xa980 [ 53.869249][ T5944] ? __css_rstat_updated+0x1ce/0x590 [ 53.869272][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.869293][ T5944] ? __pfx___css_rstat_updated+0x10/0x10 [ 53.869324][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.869352][ T5944] ? __pfx_bpf_check+0x10/0x10 [ 53.869378][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.869398][ T5944] ? bpf_prog_load+0x1a09/0x2a80 [ 53.869423][ T5944] ? find_held_lock+0x2b/0x80 [ 53.869467][ T5944] ? bpf_prog_load+0x1a09/0x2a80 [ 53.869497][ T5944] ? __asan_memset+0x23/0x50 [ 53.869523][ T5944] ? bpf_prog_load+0x1ac3/0x2a80 [ 53.869549][ T5944] bpf_prog_load+0x1ac3/0x2a80 [ 53.869582][ T5944] ? __pfx_bpf_prog_load+0x10/0x10 [ 53.869631][ T5944] __sys_bpf+0x1f46/0x4a30 [ 53.869659][ T5944] ? __pfx___sys_bpf+0x10/0x10 [ 53.869677][ T5944] ? find_held_lock+0x2b/0x80 [ 53.869704][ T5944] ? futex_wake+0x4ea/0x5e0 [ 53.869752][ T5944] ? find_held_lock+0x2b/0x80 [ 53.869779][ T5944] ? __fget_files+0x215/0x3d0 [ 53.869802][ T5944] ? __fget_files+0x215/0x3d0 [ 53.869842][ T5944] ? __x64_sys_futex+0x34f/0x4d0 [ 53.869872][ T5944] ? __x64_sys_futex+0x358/0x4d0 [ 53.869901][ T5944] ? xfd_validate_state+0x129/0x190 [ 53.869926][ T5944] ? __x64_sys_bpf+0xce/0x140 [ 53.869945][ T5944] __x64_sys_bpf+0xce/0x140 [ 53.869970][ T5944] ? do_syscall_64+0xae/0x790 [ 53.870000][ T5944] do_syscall_64+0x123/0x790 [ 53.870029][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.870049][ T5944] RIP: 0033:0x7fad83d9e159 [ 53.870066][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.870085][ T5944] RSP: 002b:00007fad84d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.870105][ T5944] RAX: ffffffffffffffda RBX: 00007fad84025fa0 RCX: 00007fad83d9e159 [ 53.870118][ T5944] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 53.870131][ T5944] RBP: 00007fad83e3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.870143][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.870156][ T5944] R13: 00007fad84026038 R14: 00007fad84025fa0 R15: 00007ffcc4c11cc8 [ 53.870183][ T5944] [ 53.870947][ T5944] syz.0.15: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 53.871086][ T5944] CPU: 2 UID: 0 PID: 5944 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 53.871141][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.871152][ T5944] Call Trace: [ 53.871159][ T5944] [ 53.871166][ T5944] dump_stack_lvl+0x100/0x190 [ 53.871201][ T5944] warn_alloc.cold+0x9e/0xb2 [ 53.871223][ T5944] ? __pfx_warn_alloc+0x10/0x10 [ 53.871242][ T5944] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.871274][ T5944] ? __get_vm_area_node+0x2f0/0x350 [ 53.871303][ T5944] ? __get_vm_area_node+0x22b/0x350 [ 53.871334][ T5944] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 53.871369][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.871399][ T5944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.871431][ T5944] ? avc_has_perm_noaudit+0x145/0x3b0 [ 53.871461][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.871486][ T5944] __vmalloc_node_noprof+0xad/0xf0 [ 53.871511][ T5944] ? bpf_check+0x17fb/0xa980 [ 53.871539][ T5944] __vmalloc_noprof+0xa3/0x120 [ 53.871564][ T5944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 53.871622][ T5944] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 53.871651][ T5944] ? security_bpf_prog_load+0x10f/0x2f0 [ 53.871678][ T5944] bpf_check+0x17fb/0xa980 [ 53.871705][ T5944] ? __css_rstat_updated+0x1ce/0x590 [ 53.871729][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.871750][ T5944] ? __pfx___css_rstat_updated+0x10/0x10 [ 53.871780][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.871809][ T5944] ? __pfx_bpf_check+0x10/0x10 [ 53.871834][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.871859][ T5944] ? bpf_prog_load+0x1a09/0x2a80 [ 53.871885][ T5944] ? find_held_lock+0x2b/0x80 [ 53.871913][ T5944] ? bpf_prog_load+0x1a09/0x2a80 [ 53.871945][ T5944] ? __asan_memset+0x23/0x50 [ 53.871970][ T5944] ? bpf_prog_load+0x1ac3/0x2a80 [ 53.871996][ T5944] bpf_prog_load+0x1ac3/0x2a80 [ 53.872030][ T5944] ? __pfx_bpf_prog_load+0x10/0x10 [ 53.872077][ T5944] __sys_bpf+0x1f46/0x4a30 [ 53.872103][ T5944] ? __pfx___sys_bpf+0x10/0x10 [ 53.872120][ T5944] ? find_held_lock+0x2b/0x80 [ 53.872147][ T5944] ? futex_wake+0x4ea/0x5e0 [ 53.872195][ T5944] ? find_held_lock+0x2b/0x80 [ 53.872220][ T5944] ? __fget_files+0x215/0x3d0 [ 53.872248][ T5944] ? __fget_files+0x215/0x3d0 [ 53.872290][ T5944] ? __x64_sys_futex+0x34f/0x4d0 [ 53.872317][ T5944] ? __x64_sys_futex+0x358/0x4d0 [ 53.872347][ T5944] ? xfd_validate_state+0x129/0x190 [ 53.872373][ T5944] ? __x64_sys_bpf+0xce/0x140 [ 53.872392][ T5944] __x64_sys_bpf+0xce/0x140 [ 53.872414][ T5944] ? do_syscall_64+0xae/0x790 [ 53.872444][ T5944] do_syscall_64+0x123/0x790 [ 53.872476][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.872498][ T5944] RIP: 0033:0x7fad83d9e159 [ 53.872515][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.872533][ T5944] RSP: 002b:00007fad84d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.872553][ T5944] RAX: ffffffffffffffda RBX: 00007fad84025fa0 RCX: 00007fad83d9e159 [ 53.872566][ T5944] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 53.872579][ T5944] RBP: 00007fad83e3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.872592][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.872604][ T5944] R13: 00007fad84026038 R14: 00007fad84025fa0 R15: 00007ffcc4c11cc8 [ 53.872631][ T5944] [ 53.872640][ T5944] Mem-Info: [ 53.872650][ T5944] active_anon:7332 inactive_anon:0 isolated_anon:0 [ 53.872650][ T5944] active_file:0 inactive_file:55045 isolated_file:0 [ 53.872650][ T5944] unevictable:1000 dirty:1809 writeback:0 [ 53.872650][ T5944] slab_reclaimable:11449 slab_unreclaimable:64578 [ 53.872650][ T5944] mapped:24288 shmem:1554 pagetables:1110 [ 53.872650][ T5944] sec_pagetables:292 bounce:0 [ 53.872650][ T5944] kernel_misc_reclaimable:0 [ 53.872650][ T5944] free:471810 free_pcp:13904 free_cma:0 [ 53.872748][ T5944] Node 0 active_anon:29328kB inactive_anon:0kB active_file:0kB inactive_file:219980kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:97152kB dirty:7236kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:4224kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 53.872804][ T5944] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 53.872862][ T5944] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.872915][ T5944] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 53.872951][ T5944] Node 0 DMA32 free:235208kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29328kB inactive_anon:0kB active_file:0kB inactive_file:219980kB unevictable:2000kB writepending:7236kB zspages:0kB present:2080628kB managed:1253236kB mlocked:0kB bounce:0kB free_pcp:52208kB local_pcp:17832kB free_cma:0kB [ 53.873008][ T5944] lowmem_reserve[]: 0 0 0 0 0 [ 53.873044][ T5944] Node 1 Normal free:1636672kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3404kB local_pcp:64kB free_cma:0kB [ 53.873100][ T5944] lowmem_reserve[]: 0 0 0 0 0 [ 53.873135][ T5944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 53.880342][ T5944] Node 0 DMA32: 0*4kB 1*8kB (M) 0*16kB 2*32kB (UE) 2*64kB (ME) 2*128kB (UM) 2*256kB (UE) 1*512kB (U) 2*1024kB (UE) 3*2048kB (UM) 55*4096kB (M) = 234952kB [ 53.880483][ T5944] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 4*16kB (UM) 7*32kB (UM) 4*64kB (UM) 4*128kB (UM) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 397*4096kB (M) = 1636672kB [ 53.880632][ T5944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.880647][ T5944] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.880662][ T5944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.880677][ T5944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.880691][ T5944] 56595 total pagecache pages [ 53.880697][ T5944] 0 pages in swap cache [ 53.880703][ T5944] Free swap = 124996kB [ 53.880710][ T5944] Total swap = 124996kB [ 53.880717][ T5944] 1048443 pages RAM [ 53.880724][ T5944] 0 pages HighMem/MovableOnly [ 53.880730][ T5944] 285824 pages reserved [ 53.880736][ T5944] 0 pages cma reserved [ 53.894549][ T5944] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 53.894742][ T5944] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 53.895358][ T5944] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 53.953456][ T5742] Bluetooth: hci3: command tx timeout [ 53.954511][ T5742] Bluetooth: hci2: command tx timeout [ 53.963474][ T5742] Bluetooth: hci1: command tx timeout [ 53.963500][ T5742] Bluetooth: hci0: command tx timeout [ 54.027993][ T5952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.094289][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.227454][ T35] usb 7-1: device descriptor read/64, error -71 [ 54.307542][ T5958] Could not find key with description: [syz] [ 54.307557][ T5958] process_request_key_err: No key [ 54.307565][ T5958] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 54.307573][ T5958] One or more global auth toks could not properly register; rc = [-2] [ 54.307637][ T5958] Error validating options; rc = [-2] [ 54.473636][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.605633][ T35] usb 7-1: device descriptor read/64, error -71 [ 54.714431][ T35] usb usb7-port1: attempt power cycle [ 54.782673][ T5961] team1: entered promiscuous mode [ 54.782956][ T5961] team1: entered allmulticast mode [ 54.783484][ T5961] 8021q: adding VLAN 0 to HW filter on device team1 [ 55.053376][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 55.084442][ T35] usb 7-1: device descriptor read/8, error -71 [ 55.353310][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 55.376122][ T35] usb 7-1: device descriptor read/8, error -71 [ 55.389534][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 55.389551][ T43] audit: type=1400 audit(1789970365.971:272): avc: denied { ioctl } for pid=5965 comm="syz.0.23" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.483601][ T35] usb usb7-port1: unable to enumerate USB device [ 55.636637][ T43] audit: type=1400 audit(1789970366.221:273): avc: denied { map_read map_write } for pid=5969 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.733000][ T43] audit: type=1400 audit(1789970366.311:274): avc: denied { mount } for pid=5972 comm="syz.0.25" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.736880][ T43] audit: type=1400 audit(1789970366.321:275): avc: denied { mount } for pid=5972 comm="syz.0.25" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.738335][ T43] audit: type=1400 audit(1789970366.321:276): avc: denied { ioctl } for pid=5972 comm="syz.0.25" path="socket:[9580]" dev="sockfs" ino=9580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.740342][ T43] audit: type=1400 audit(1789970366.321:277): avc: denied { getopt } for pid=5972 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.763029][ T43] audit: type=1400 audit(1789970366.341:278): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.801020][ T43] audit: type=1400 audit(1789970366.381:279): avc: denied { setopt } for pid=5974 comm="syz.0.26" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.805651][ T5975] xt_hashlimit: size too large, truncated to 1048576 [ 55.853796][ T43] audit: type=1400 audit(1789970366.441:280): avc: denied { ioctl } for pid=5974 comm="syz.0.26" path="socket:[9587]" dev="sockfs" ino=9587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.856547][ T43] audit: type=1400 audit(1789970366.441:281): avc: denied { connect } for pid=5974 comm="syz.0.26" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.036153][ T5742] Bluetooth: hci1: command tx timeout [ 56.036186][ T5742] Bluetooth: hci2: command tx timeout [ 56.036206][ T5742] Bluetooth: hci3: command tx timeout [ 56.036330][ T5092] Bluetooth: hci0: command tx timeout [ 56.650261][ T5994] overlay: Unknown parameter 'smackfshat' [ 56.951605][ T6009] FAULT_INJECTION: forcing a failure. [ 56.951605][ T6009] name failslab, interval 1, probability 0, space 0, times 1 [ 56.951637][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(full) [ 56.951670][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.951681][ T6009] Call Trace: [ 56.951688][ T6009] [ 56.951696][ T6009] dump_stack_lvl+0x100/0x190 [ 56.951730][ T6009] should_fail_ex.cold+0x5/0xa [ 56.951758][ T6009] should_failslab+0xc2/0x120 [ 56.951783][ T6009] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.951804][ T6009] ? d_instantiate+0x8a/0xb0 [ 56.951830][ T6009] ? alloc_empty_file+0x5b/0x1c0 [ 56.951861][ T6009] alloc_empty_file+0x5b/0x1c0 [ 56.951888][ T6009] alloc_file_pseudo+0x183/0x290 [ 56.951916][ T6009] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 56.951942][ T6009] ? alloc_fd+0x471/0x7a0 [ 56.951970][ T6009] sock_alloc_file+0x50/0x210 [ 56.951997][ T6009] __sys_socket+0x1c0/0x260 [ 56.952015][ T6009] ? __pfx___sys_socket+0x10/0x10 [ 56.952042][ T6009] __x64_sys_socket+0x72/0xb0 [ 56.952059][ T6009] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.952087][ T6009] do_syscall_64+0x123/0x790 [ 56.952116][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.952135][ T6009] RIP: 0033:0x7fc685d9e159 [ 56.952151][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.952169][ T6009] RSP: 002b:00007fc683fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 56.952188][ T6009] RAX: ffffffffffffffda RBX: 00007fc686026180 RCX: 00007fc685d9e159 [ 56.952200][ T6009] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 56.952211][ T6009] RBP: 00007fc685e3506b R08: 0000000000000000 R09: 0000000000000000 [ 56.952223][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.952234][ T6009] R13: 00007fc686026218 R14: 00007fc686026180 R15: 00007ffd73796748 [ 56.952260][ T6009] [ 57.829067][ T6016] jffs2: notice: (6016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.836218][ T6016] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 57.981451][ T6020] ======================================================= [ 57.981451][ T6020] WARNING: The mand mount option has been deprecated and [ 57.981451][ T6020] and is ignored by this kernel. Remove the mand [ 57.981451][ T6020] option from the mount to silence this warning. [ 57.981451][ T6020] ======================================================= [ 58.123530][ T5737] Bluetooth: hci3: command tx timeout [ 58.123553][ T5737] Bluetooth: hci2: command tx timeout [ 58.123589][ T5737] Bluetooth: hci1: command tx timeout [ 58.123621][ T5092] Bluetooth: hci0: command tx timeout [ 59.425512][ T1355] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.574227][ T1355] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 59.576992][ T1355] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 59.577015][ T1355] usb 7-1: config 1 has no interface number 0 [ 59.579300][ T1355] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.579322][ T1355] usb 7-1: Product: syz [ 59.579334][ T1355] usb 7-1: Manufacturer: syz [ 59.579345][ T1355] usb 7-1: SerialNumber: syz [ 60.182313][ T6050] FAULT_INJECTION: forcing a failure. [ 60.182313][ T6050] name failslab, interval 1, probability 0, space 0, times 0 [ 60.182345][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 60.182368][ T6050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.182380][ T6050] Call Trace: [ 60.182386][ T6050] [ 60.182394][ T6050] dump_stack_lvl+0x100/0x190 [ 60.182446][ T6050] should_fail_ex.cold+0x5/0xa [ 60.182474][ T6050] should_failslab+0xc2/0x120 [ 60.182505][ T6050] __kmalloc_noprof+0xfc/0x840 [ 60.182527][ T6050] ? __kasan_kmalloc+0xaa/0xb0 [ 60.182547][ T6050] ? do_replace_table+0x4b8/0x760 [ 60.182587][ T6050] do_replace_table+0x4b8/0x760 [ 60.182627][ T6050] xt_register_table+0x384/0x9a0 [ 60.182664][ T6050] ? __pfx_xt_register_table+0x10/0x10 [ 60.182691][ T6050] ? xt_alloc_table_info+0x44/0xa0 [ 60.182718][ T6050] ? __asan_memset+0x23/0x50 [ 60.182739][ T6050] ipt_register_table+0x137/0x2b0 [ 60.182770][ T6050] ? __pfx_ipt_register_table+0x10/0x10 [ 60.182798][ T6050] ? __kmalloc_noprof+0x350/0x840 [ 60.182826][ T6050] ? ipt_alloc_initial_table+0x5b8/0x700 [ 60.182858][ T6050] iptable_nat_table_init+0x4b/0x270 [ 60.182881][ T6050] xt_find_table_lock+0x2db/0x520 [ 60.182913][ T6050] xt_request_find_table_lock+0x28/0xf0 [ 60.182941][ T6050] get_info+0x1a7/0x790 [ 60.182967][ T6050] ? avc_has_perm_noaudit+0x145/0x3b0 [ 60.182993][ T6050] ? __pfx_get_info+0x10/0x10 [ 60.183023][ T6050] ? cred_has_capability.isra.0+0x186/0x300 [ 60.183048][ T6050] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 60.183076][ T6050] ? rcu_is_watching+0x13/0xc0 [ 60.183100][ T6050] ? cap_capable+0x107/0x430 [ 60.183129][ T6050] ? bpf_lsm_capable+0x9/0x10 [ 60.183157][ T6050] ? security_capable+0x80/0x260 [ 60.183214][ T6050] do_ipt_get_ctl+0x231/0xbf0 [ 60.183247][ T6050] ? __mutex_unlock_slowpath+0x35d/0x930 [ 60.183287][ T6050] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 60.183316][ T6050] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 60.183348][ T6050] ? lock_acquire+0x1d1/0x380 [ 60.183374][ T6050] ? nf_sockopt_find.isra.0+0x222/0x290 [ 60.183404][ T6050] nf_getsockopt+0x7c/0xe0 [ 60.183431][ T6050] ip_getsockopt+0x192/0x1e0 [ 60.183452][ T6050] ? __pfx_ip_getsockopt+0x10/0x10 [ 60.183471][ T6050] ? rcu_is_watching+0x13/0xc0 [ 60.183497][ T6050] ? trace_sched_exit_tp+0x120/0x160 [ 60.183527][ T6050] sctp_getsockopt+0x19b/0x7110 [ 60.183552][ T6050] ? avc_has_perm_noaudit+0x56/0x3b0 [ 60.183615][ T6050] ? find_held_lock+0x2b/0x80 [ 60.183644][ T6050] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 60.183671][ T6050] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 60.183700][ T6050] ? __pfx_sctp_getsockopt+0x10/0x10 [ 60.183728][ T6050] ? __lock_acquire+0x5c0/0x1f40 [ 60.183749][ T6050] ? avc_has_perm+0x135/0x1e0 [ 60.183776][ T6050] ? __pfx_avc_has_perm+0x10/0x10 [ 60.183809][ T6050] ? lock_acquire+0x1d1/0x380 [ 60.183828][ T6050] ? __might_fault+0xc5/0x140 [ 60.183858][ T6050] ? find_held_lock+0x2b/0x80 [ 60.183884][ T6050] ? __might_fault+0xc5/0x140 [ 60.183912][ T6050] ? __might_fault+0xc5/0x140 [ 60.183948][ T6050] ? _copy_from_user+0x59/0xd0 [ 60.183971][ T6050] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 60.184002][ T6050] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 60.184037][ T6050] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 60.184068][ T6050] do_sock_getsockopt+0x50a/0x6e0 [ 60.184101][ T6050] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 60.184135][ T6050] ? __fget_files+0x34/0x3d0 [ 60.184160][ T6050] ? find_held_lock+0x2b/0x80 [ 60.184195][ T6050] ? __fget_files+0x21f/0x3d0 [ 60.184226][ T6050] __sys_getsockopt+0x148/0x260 [ 60.184259][ T6050] ? __x64_sys_getsockopt+0xbd/0x160 [ 60.184282][ T6050] __x64_sys_getsockopt+0xbd/0x160 [ 60.184304][ T6050] ? do_syscall_64+0xae/0x790 [ 60.184332][ T6050] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.184360][ T6050] do_syscall_64+0x123/0x790 [ 60.184392][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.184412][ T6050] RIP: 0033:0x7fad83d9e159 [ 60.184430][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.184448][ T6050] RSP: 002b:00007fad84d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 60.184469][ T6050] RAX: ffffffffffffffda RBX: 00007fad84025fa0 RCX: 00007fad83d9e159 [ 60.184483][ T6050] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 60.184494][ T6050] RBP: 00007fad83e3506b R08: 00002000000000c0 R09: 0000000000000000 [ 60.184505][ T6050] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 60.184517][ T6050] R13: 00007fad84026038 R14: 00007fad84025fa0 R15: 00007ffcc4c11cc8 [ 60.184543][ T6050] [ 60.401484][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 60.401502][ T43] audit: type=1400 audit(1789970370.981:317): avc: denied { read } for pid=6054 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.401601][ T43] audit: type=1400 audit(1789970370.981:318): avc: denied { read open } for pid=6054 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.401741][ T43] audit: type=1400 audit(1789970370.981:319): avc: denied { getattr } for pid=6054 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.416029][ T43] audit: type=1400 audit(1789970370.991:320): avc: denied { write } for pid=6053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.416295][ T43] audit: type=1400 audit(1789970371.001:321): avc: denied { add_name } for pid=6053 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.506068][ T43] audit: type=1400 audit(1789970371.091:322): avc: denied { write } for pid=6056 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.506282][ T43] audit: type=1400 audit(1789970371.091:323): avc: denied { remove_name } for pid=6056 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=2105 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.508717][ T43] audit: type=1400 audit(1789970371.091:324): avc: denied { mount } for pid=6057 comm="syz.0.42" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.511040][ T43] audit: type=1400 audit(1789970371.091:325): avc: denied { search } for pid=6057 comm="syz.0.42" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.511264][ T43] audit: type=1400 audit(1789970371.091:326): avc: denied { search } for pid=6057 comm="syz.0.42" name="usb_gadget" dev="configfs" ino=2660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.537420][ T6058] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 60.537445][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 60.541621][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 60.555821][ T5092] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 60.555848][ T5092] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 60.589046][ T6060] vhci_hcd: connection closed [ 60.591695][ T5808] vhci_hcd vhci_hcd.0: stop threads [ 60.592135][ T5808] vhci_hcd vhci_hcd.0: release socket [ 60.592154][ T5808] vhci_hcd vhci_hcd.0: disconnect device [ 62.276284][ T2223] usb 7-1: USB disconnect, device number 6 [ 62.503936][ T6094] IPv6: addrconf: prefix option has invalid lifetime [ 63.290074][ T6107] CacheFiles: No cache directory specified [ 63.304764][ T6107] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 63.323982][ T6107] vlan2: entered promiscuous mode [ 63.323997][ T6107] bridge0: entered promiscuous mode [ 63.702262][ T6120] jffs2: notice: (6120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 63.796655][ T58] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 63.843089][ T6124] fido_id[6124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.981790][ T6130] overlayfs: failed to resolve './bus': -2 [ 64.185082][ T6130] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.473146][ T6149] syz.2.63 uses obsolete (PF_INET,SOCK_PACKET) [ 64.654940][ T6152] jffs2: notice: (6152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 64.792269][ T6156] netlink: 'syz.0.65': attribute type 58 has an invalid length. [ 65.574418][ T6163] FAULT_INJECTION: forcing a failure. [ 65.574418][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 65.574448][ T6163] CPU: 2 UID: 0 PID: 6163 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 65.574468][ T6163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.574478][ T6163] Call Trace: [ 65.574485][ T6163] [ 65.574492][ T6163] dump_stack_lvl+0x100/0x190 [ 65.574523][ T6163] should_fail_ex.cold+0x5/0xa [ 65.574549][ T6163] should_failslab+0xc2/0x120 [ 65.574572][ T6163] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.574591][ T6163] ? __pfx_map_id_range_down+0x10/0x10 [ 65.574610][ T6163] ? security_inode_alloc+0x3b/0x2c0 [ 65.574635][ T6163] security_inode_alloc+0x3b/0x2c0 [ 65.574654][ T6163] inode_init_always_gfp+0xc6f/0xfb0 [ 65.574682][ T6163] alloc_inode+0x8e/0x250 [ 65.574699][ T6163] new_inode+0x22/0x1c0 [ 65.574719][ T6163] proc_get_inode+0x1d/0x780 [ 65.574745][ T6163] proc_lookup_de+0x236/0x360 [ 65.574767][ T6163] proc_tgid_net_lookup+0x61/0x90 [ 65.574785][ T6163] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 65.574803][ T6163] lookup_open+0xa79/0x1990 [ 65.574832][ T6163] path_openat+0xa2c/0x2440 [ 65.574859][ T6163] ? __pfx_path_openat+0x10/0x10 [ 65.574887][ T6163] do_file_open+0x20e/0x430 [ 65.574936][ T6163] ? __pfx_do_file_open+0x10/0x10 [ 65.574968][ T6163] ? __pfx_kfree_link+0x10/0x10 [ 65.574996][ T6163] ? _raw_spin_unlock+0x28/0x50 [ 65.575019][ T6163] ? alloc_fd+0x471/0x7a0 [ 65.575049][ T6163] do_sys_openat2+0x10f/0x1e0 [ 65.575075][ T6163] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.575116][ T6163] __x64_sys_openat+0x12d/0x210 [ 65.575140][ T6163] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.575176][ T6163] do_syscall_64+0x123/0x790 [ 65.575204][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.575223][ T6163] RIP: 0033:0x7fad83d5e98e [ 65.575237][ T6163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.575254][ T6163] RSP: 002b:00007fad84d0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.575274][ T6163] RAX: ffffffffffffffda RBX: 00007fad84d106c0 RCX: 00007fad83d5e98e [ 65.575286][ T6163] RDX: 0000000000000000 RSI: 00007fad84d0ff90 RDI: ffffffffffffff9c [ 65.575297][ T6163] RBP: 00007fad83e3506b R08: 0000000000000000 R09: 0000000000000000 [ 65.575308][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.575318][ T6163] R13: 00007fad84026038 R14: 00007fad84025fa0 R15: 00007ffcc4c11cc8 [ 65.575344][ T6163] [ 65.615662][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 65.615674][ T43] audit: type=1400 audit(2000000001.129:383): avc: denied { create } for pid=6162 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.616071][ T43] audit: type=1400 audit(2000000001.129:384): avc: denied { write } for pid=6162 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.616247][ T43] audit: type=1400 audit(2000000001.129:385): avc: denied { nlmsg_write } for pid=6162 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.844625][ T43] audit: type=1400 audit(2000000001.359:386): avc: denied { bind } for pid=6166 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.844818][ T43] audit: type=1400 audit(2000000001.359:387): avc: denied { name_bind } for pid=6166 comm="syz.0.68" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 65.844964][ T43] audit: type=1400 audit(2000000001.359:388): avc: denied { node_bind } for pid=6166 comm="syz.0.68" saddr=172.20.20.32 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 65.846259][ T43] audit: type=1400 audit(2000000001.359:389): avc: denied { setopt } for pid=6166 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.911973][ T43] audit: type=1400 audit(2000000001.419:390): avc: denied { read write } for pid=6168 comm="syz.2.69" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.912246][ T43] audit: type=1400 audit(2000000001.419:391): avc: denied { open } for pid=6168 comm="syz.2.69" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.915212][ T43] audit: type=1400 audit(2000000001.429:392): avc: denied { ioctl } for pid=6168 comm="syz.2.69" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.133139][ T6182] sctp: [Deprecated]: syz.0.70 (pid 6182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.133139][ T6182] Use struct sctp_sack_info instead [ 66.184574][ T6188] __nla_validate_parse: 127 callbacks suppressed [ 66.184592][ T6188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 66.189143][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 66.403348][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 66.404146][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 66.410660][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 66.410819][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 66.623860][ T6196] cgroup: fork rejected by pids controller in /syz2 [ 66.677096][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 66.677266][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 67.088326][ T6203] ceph: No mds server is up or the cluster is laggy [ 67.207680][ T6244] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.253067][ T5808] syzkaller0: tun_net_xmit 76 [ 67.254662][ T5808] syzkaller0: tun_net_xmit 48 [ 67.260918][ T6243] syzkaller0: create flow: hash 2518546604 index 1 [ 67.273570][ T6008] syzkaller0: tun_net_xmit 76 [ 67.289650][ T6241] syzkaller0: delete flow: hash 2518546604 index 1 [ 67.613806][ T6249] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.535067][ T6254] xfrm1: entered allmulticast mode [ 68.708577][ T6262] tmpfs: Bad value for 'mpol' [ 68.711029][ T6263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.83'. [ 68.746004][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.748093][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.749126][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.751239][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.751854][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.773834][ T6267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.86'. [ 68.778914][ T6269] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 68.783824][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 69.145148][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 69.184159][ T5808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.261699][ T5808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.355172][ T5808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.428160][ T5808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.461785][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.461900][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.461987][ T6264] bridge_slave_0: entered allmulticast mode [ 69.471295][ T6264] bridge_slave_0: entered promiscuous mode [ 69.482393][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.482462][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.482550][ T6264] bridge_slave_1: entered allmulticast mode [ 69.488278][ T6292] mmap: syz.2.89 (6292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.494327][ T6264] bridge_slave_1: entered promiscuous mode [ 69.532012][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.534650][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.586109][ T6264] team0: Port device team_slave_0 added [ 69.588433][ T6264] team0: Port device team_slave_1 added [ 69.631098][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.631121][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.631140][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.651293][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.651308][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.651328][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.732001][ T6264] hsr_slave_0: entered promiscuous mode [ 69.732977][ T6264] hsr_slave_1: entered promiscuous mode [ 69.733863][ T6264] debugfs: 'hsr0' already exists in 'hsr' [ 69.733881][ T6264] Cannot create hsr debugfs directory [ 69.774688][ T5808] bridge_slave_1: left allmulticast mode [ 69.774721][ T5808] bridge_slave_1: left promiscuous mode [ 69.776181][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.797628][ T5808] bridge_slave_0: left allmulticast mode [ 69.797655][ T5808] bridge_slave_0: left promiscuous mode [ 69.798101][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.068526][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.092043][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.097969][ T5808] bond0 (unregistering): Released all slaves [ 70.244625][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.249044][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.252252][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.253505][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.256688][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.425604][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.510212][ T6264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.515761][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.516610][ T6264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.523326][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.523975][ T6264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.528187][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.529090][ T6264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.532402][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.547025][ T5808] hsr_slave_0: left promiscuous mode [ 70.548002][ T5808] hsr_slave_1: left promiscuous mode [ 70.548909][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.548932][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.555251][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.555276][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.568045][ T5808] veth1_macvtap: left promiscuous mode [ 70.568093][ T5808] veth0_macvtap: left promiscuous mode [ 70.568174][ T5808] veth1_vlan: left promiscuous mode [ 70.568288][ T5808] veth0_vlan: left promiscuous mode [ 70.605398][ T5836] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 70.635530][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 70.635551][ T43] audit: type=1400 audit(2000000006.149:420): avc: denied { write } for pid=6328 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.754508][ T5836] usb 5-1: not running at top speed; connect to a high speed hub [ 70.754537][ T5836] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 70.755560][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 70.755589][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.757789][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.757810][ T5836] usb 5-1: Product: syz [ 70.757823][ T5836] usb 5-1: Manufacturer: syz [ 70.757835][ T5836] usb 5-1: SerialNumber: syz [ 70.807231][ T5836] oti6858 5-1:1.0: oti6858 converter detected [ 70.825125][ T5836] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 70.833969][ T5742] Bluetooth: hci4: command tx timeout [ 70.858931][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 70.868499][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 70.893323][ T43] audit: type=1400 audit(2000000006.399:421): avc: denied { mount } for pid=6338 comm="syz.2.97" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.896295][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.991398][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 71.023712][ T43] audit: type=1400 audit(2000000006.529:422): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.117493][ T6317] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 71.122329][ T30] usb 5-1: USB disconnect, device number 2 [ 71.149142][ T30] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 71.151695][ T30] oti6858 5-1:1.0: device disconnected [ 71.159954][ T43] audit: type=1400 audit(2000000006.669:423): avc: denied { write } for pid=6351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.183023][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.236465][ T43] audit: type=1400 audit(2000000006.749:424): avc: denied { write } for pid=6357 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.246102][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.253839][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.253886][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.254699][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.254744][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.283307][ T6354] xt_LOG: prefix is not null-terminated [ 71.300877][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 71.323098][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325763][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.435730][ T43] audit: type=1400 audit(2000000006.949:425): avc: denied { write } for pid=6366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.471433][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471602][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.471703][ T6308] bridge_slave_0: entered allmulticast mode [ 71.474421][ T6308] bridge_slave_0: entered promiscuous mode [ 71.478741][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.478903][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.479000][ T6308] bridge_slave_1: entered allmulticast mode [ 71.480424][ T6308] bridge_slave_1: entered promiscuous mode [ 71.515470][ T43] audit: type=1400 audit(2000000007.029:426): avc: denied { write } for pid=6373 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.530991][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.533588][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.565531][ T6308] team0: Port device team_slave_0 added [ 71.593829][ T5808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.599200][ T6308] team0: Port device team_slave_1 added [ 71.600561][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.622244][ T43] audit: type=1400 audit(2000000007.129:427): avc: denied { accept } for pid=6377 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 71.631276][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.631287][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.631300][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.634647][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.634663][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.634675][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.699266][ T43] audit: type=1400 audit(2000000007.209:428): avc: denied { create } for pid=6383 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.727273][ T5808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.731490][ T43] audit: type=1400 audit(2000000007.239:429): avc: denied { bind } for pid=6383 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.739723][ T6308] hsr_slave_0: entered promiscuous mode [ 71.740494][ T6308] hsr_slave_1: entered promiscuous mode [ 71.741039][ T6308] debugfs: 'hsr0' already exists in 'hsr' [ 71.741055][ T6308] Cannot create hsr debugfs directory [ 71.812729][ T5808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.829116][ T6391] bridge_slave_0: left allmulticast mode [ 71.829141][ T6391] bridge_slave_0: left promiscuous mode [ 71.831797][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.840689][ T6391] bridge_slave_1: left allmulticast mode [ 71.840714][ T6391] bridge_slave_1: left promiscuous mode [ 71.840898][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.852759][ T6391] bond0: (slave bond_slave_0): Releasing backup interface [ 71.857984][ T6391] bond0: (slave bond_slave_1): Releasing backup interface [ 71.864753][ T6391] team0: Port device team_slave_0 removed [ 71.869260][ T6391] team0: Port device team_slave_1 removed [ 71.869944][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.869961][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.871469][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.871483][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.877479][ T6391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.887725][ T6390] : renamed from vlan0 (while UP) [ 71.888379][ T6384] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 71.888485][ T6384] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 71.905700][ T6393] team0: Mode changed to "broadcast" [ 71.942122][ T5808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 72.025962][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.158441][ T5808] bridge_slave_1: left allmulticast mode [ 72.158457][ T5808] bridge_slave_1: left promiscuous mode [ 72.159698][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.166458][ T5808] bridge_slave_0: left allmulticast mode [ 72.166474][ T5808] bridge_slave_0: left promiscuous mode [ 72.166575][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.248170][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.265302][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.265530][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.265706][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.265865][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.266020][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.266184][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.266340][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.266503][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.266645][ T6421] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.273859][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.277007][ T5742] Bluetooth: hci0: command tx timeout [ 72.297654][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.302779][ T5808] bond0 (unregistering): Released all slaves [ 72.360892][ T6308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.363086][ T6308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.364581][ T6308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.375468][ T6308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.379662][ T6308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.384574][ T6308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.385332][ T6308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.390499][ T6308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.497490][ T6264] veth0_vlan: entered promiscuous mode [ 72.515255][ T6264] veth1_vlan: entered promiscuous mode [ 72.569586][ T6264] veth0_macvtap: entered promiscuous mode [ 72.597268][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.599765][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 72.602570][ T6264] veth1_macvtap: entered promiscuous mode [ 72.617996][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.629101][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.629183][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.633995][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.644799][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.644881][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.650802][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.687194][ T5808] hsr_slave_0: left promiscuous mode [ 72.687865][ T5808] hsr_slave_1: left promiscuous mode [ 72.688615][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.688632][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.689414][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.689430][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.700081][ T5808] veth1_macvtap: left promiscuous mode [ 72.700113][ T5808] veth0_macvtap: left promiscuous mode [ 72.700207][ T5808] veth1_vlan: left promiscuous mode [ 72.700261][ T5808] veth0_vlan: left promiscuous mode [ 72.766985][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.767445][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.913677][ T5742] Bluetooth: hci4: command tx timeout [ 72.984180][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 73.003358][ T1355] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.006060][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 73.115282][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 73.165453][ T6308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.178597][ T1355] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 73.180199][ T1355] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.180236][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.180255][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 73.180272][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 73.180289][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 73.180307][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 73.180324][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 73.180342][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 73.180358][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 73.180432][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 73.180451][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.180468][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 73.180486][ T1355] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.180502][ T1355] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.180519][ T1355] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 73.182378][ T1355] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.182399][ T1355] usb 7-1: Product: syz [ 73.182411][ T1355] usb 7-1: Manufacturer: syz [ 73.182422][ T1355] usb 7-1: SerialNumber: syz [ 73.242035][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242135][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242214][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242351][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242427][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242499][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242575][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242650][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.242968][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.243041][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.243109][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.247402][ T1355] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 73.249968][ T1355] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 73.282617][ T1355] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 73.289881][ T1355] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 73.292103][ T1355] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 73.303417][ T5601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303459][ T5601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303488][ T5601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303548][ T5601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318982][ T6470] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 73.417886][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.417900][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.460986][ T6008] usb 7-1: USB disconnect, device number 7 [ 73.490587][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.490609][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.496286][ T6008] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 73.498932][ T6008] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 73.500024][ T6008] keyspan 7-1:1.0: device disconnected [ 73.629202][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 73.730084][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.809575][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.810604][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.896905][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 73.897005][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 73.898272][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 73.898364][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 73.931910][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 73.975111][ T6308] veth0_vlan: entered promiscuous mode [ 73.977673][ T58] libceph: connect (1)[c::]:6789 error -101 [ 73.977840][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 73.992966][ T6308] veth1_vlan: entered promiscuous mode [ 74.024738][ T6308] veth0_macvtap: entered promiscuous mode [ 74.028642][ T6308] veth1_macvtap: entered promiscuous mode [ 74.043970][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.045962][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.073438][ T6436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106277][ T6436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106320][ T6436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106348][ T6436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153542][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.153561][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.154035][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 74.154197][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 74.195603][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.195624][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.233681][ T58] libceph: connect (1)[c::]:6789 error -101 [ 74.233834][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 74.287404][ T6548] macvtap0: entered promiscuous mode [ 74.290096][ T6548] macvtap0: entered allmulticast mode [ 74.290116][ T6548] veth0_macvtap: entered allmulticast mode [ 74.302150][ T6554] erofs (device loop2): cannot find valid erofs superblock [ 74.302431][ T6553] erofs (device loop2): cannot find valid erofs superblock [ 74.363447][ T5742] Bluetooth: hci0: command tx timeout [ 74.637489][ T6565] erspan0: entered promiscuous mode [ 74.665274][ T1478] libceph: connect (1)[c::]:6789 error -101 [ 74.665440][ T1478] libceph: mon0 (1)[c::]:6789 connect error [ 74.690579][ T6568] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 74.691285][ T6568] xt_hashlimit: size too large, truncated to 1048576 [ 74.738508][ T6571] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 74.744637][ T6572] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 74.757455][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 74.757614][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 74.864119][ T6517] ceph: No mds server is up or the cluster is laggy [ 74.864125][ T6518] ceph: No mds server is up or the cluster is laggy [ 74.994438][ T5742] Bluetooth: hci4: command tx timeout [ 76.433491][ T5742] Bluetooth: hci0: command tx timeout [ 76.442663][ T1690] cfg80211: failed to load regulatory.db [ 77.083430][ T5742] Bluetooth: hci4: command tx timeout [ 78.514954][ T5742] Bluetooth: hci0: command tx timeout [ 82.647999][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 82.648019][ T43] audit: type=1400 audit(2000000018.159:477): avc: denied { write } for pid=6594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.714179][ T43] audit: type=1400 audit(2000000018.229:478): avc: denied { write } for pid=6597 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.208824][ T43] audit: type=1400 audit(2000000018.719:479): avc: denied { write } for pid=6601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.276290][ T43] audit: type=1400 audit(2000000018.789:480): avc: denied { write } for pid=6604 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.800933][ T43] audit: type=1400 audit(2000000019.309:481): avc: denied { write } for pid=6607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.856119][ T43] audit: type=1400 audit(2000000019.369:482): avc: denied { write } for pid=6610 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.985984][ T43] audit: type=1400 audit(2000000019.499:483): avc: denied { write } for pid=6613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.050907][ T43] audit: type=1400 audit(2000000019.559:484): avc: denied { write } for pid=6616 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.627301][ T43] audit: type=1400 audit(2000000020.139:485): avc: denied { write } for pid=6619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.675222][ T43] audit: type=1400 audit(2000000020.189:486): avc: denied { write } for pid=6622 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.161369][ T6657] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 96.176423][ T6659] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 96.179006][ T6662] __nla_validate_parse: 29 callbacks suppressed [ 96.179025][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.136'. [ 96.179038][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.136'. [ 96.184871][ T6657] bridge1: entered promiscuous mode [ 96.185695][ T6657] batman_adv: batadv0: Adding interface: bridge1 [ 96.185707][ T6657] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.185730][ T6657] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 96.205184][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 96.205200][ T43] audit: type=1400 audit(2000000031.719:493): avc: denied { setopt } for pid=6661 comm="syz.5.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.279462][ T6668] netlink: 1 bytes leftover after parsing attributes in process `syz.4.138'. [ 96.483328][ T1478] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 96.559038][ T43] audit: type=1400 audit(2000000032.069:494): avc: denied { read write } for pid=6684 comm="syz.5.141" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 96.559434][ T43] audit: type=1400 audit(2000000032.069:495): avc: denied { open } for pid=6684 comm="syz.5.141" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 96.560273][ T43] audit: type=1400 audit(2000000032.069:496): avc: denied { mounton } for pid=6684 comm="syz.5.141" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.581524][ T43] audit: type=1400 audit(2000000032.089:497): avc: denied { mounton } for pid=6684 comm="syz.5.141" path="/3/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 96.595103][ T43] audit: type=1400 audit(2000000032.109:498): avc: denied { unmount } for pid=6308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.654272][ T1478] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 96.655427][ T1478] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 96.655452][ T1478] usb 7-1: config 1 has no interface number 0 [ 96.658800][ T1478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.658823][ T1478] usb 7-1: Product: syz [ 96.658836][ T1478] usb 7-1: Manufacturer: syz [ 96.658850][ T1478] usb 7-1: SerialNumber: syz [ 96.683297][ T1478] usb 7-1: 3:0 : does not exist [ 96.683319][ T1478] usb 7-1: 3:0 : does not exist [ 96.874608][ T1478] usb 7-1: USB disconnect, device number 8 [ 96.887526][ T43] audit: type=1400 audit(2000000032.399:499): avc: denied { create } for pid=6665 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.887716][ T43] audit: type=1400 audit(2000000032.399:500): avc: denied { bind } for pid=6665 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.931814][ T5601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.010225][ T5601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.048855][ T43] audit: type=1400 audit(2000000032.559:501): avc: denied { create } for pid=6687 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.049125][ T43] audit: type=1400 audit(2000000032.559:502): avc: denied { write } for pid=6687 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.102733][ T5601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.112476][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.114247][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.117921][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.122688][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.123124][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.212271][ T5601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.221583][ T6697] binder: BINDER_SET_CONTEXT_MGR already set [ 97.221593][ T6697] binder: 6696:6697 ioctl 4018620d 200000000040 returned -16 [ 97.222053][ T6697] binder: 6696:6697 ioctl c0306201 200000000c00 returned -22 [ 97.375535][ T6709] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 97.523864][ T5601] bridge_slave_1: left allmulticast mode [ 97.523890][ T5601] bridge_slave_1: left promiscuous mode [ 97.524075][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.529310][ T5601] bridge_slave_0: left allmulticast mode [ 97.529335][ T5601] bridge_slave_0: left promiscuous mode [ 97.529535][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.654422][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 97.741993][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.748018][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.749558][ T5601] bond0 (unregistering): Released all slaves [ 97.777639][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 97.865310][ T6745] ip6gre1: entered promiscuous mode [ 97.865331][ T6745] ip6gre1: entered allmulticast mode [ 98.050021][ T5601] hsr_slave_0: left promiscuous mode [ 98.050769][ T5601] hsr_slave_1: left promiscuous mode [ 98.055642][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.055657][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.056271][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.056281][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.068312][ T5601] veth1_macvtap: left promiscuous mode [ 98.068334][ T5601] veth0_macvtap: left allmulticast mode [ 98.068441][ T5601] veth0_macvtap: left promiscuous mode [ 98.068487][ T5601] veth1_vlan: left promiscuous mode [ 98.068517][ T5601] veth0_vlan: left promiscuous mode [ 98.175650][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.229333][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 98.237245][ T6778] loop6: detected capacity change from 0 to 7 [ 98.243465][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.243596][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.248211][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.248283][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.248611][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 98.250828][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.250933][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.251174][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.251228][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.251495][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.251548][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.251774][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.251828][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.251997][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.252053][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.252130][ T6778] ldm_validate_partition_table(): Disk read failed. [ 98.252244][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.252294][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.253384][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.253435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.254738][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.254798][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.255117][ T6778] Dev loop6: unable to read RDB block 0 [ 98.259086][ T6778] loop6: unable to read partition table [ 98.259263][ T6778] loop6: partition table beyond EOD, truncated [ 98.259300][ T6778] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 98.279655][ T6778] ldm_validate_partition_table(): Disk read failed. [ 98.281803][ T6778] Dev loop6: unable to read RDB block 0 [ 98.282783][ T6778] loop6: unable to read partition table [ 98.285191][ T6778] loop6: partition table beyond EOD, truncated [ 98.336001][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 98.338607][ T5877] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.342113][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.342152][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.349853][ T5877] usb 5-1: config 0 descriptor?? [ 98.380869][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 98.545218][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.545374][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.545480][ T6691] bridge_slave_0: entered allmulticast mode [ 98.546948][ T6691] bridge_slave_0: entered promiscuous mode [ 98.549540][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.549665][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.549816][ T6691] bridge_slave_1: entered allmulticast mode [ 98.551119][ T6691] bridge_slave_1: entered promiscuous mode [ 98.551883][ T6745] syz.2.154 (6745) used greatest stack depth: 18552 bytes left [ 98.565432][ T5877] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 98.619134][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.625018][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.647572][ T6691] team0: Port device team_slave_0 added [ 98.650012][ T6691] team0: Port device team_slave_1 added [ 98.699849][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.699867][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.699889][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.701585][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 98.704442][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.704455][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.704475][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.716182][ T6801] xt_cgroup: path and classid specified [ 98.755709][ T6691] hsr_slave_0: entered promiscuous mode [ 98.756475][ T6691] hsr_slave_1: entered promiscuous mode [ 98.756999][ T6691] debugfs: 'hsr0' already exists in 'hsr' [ 98.757016][ T6691] Cannot create hsr debugfs directory [ 98.892212][ T6813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.892318][ T6813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.923028][ T6813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.929237][ T6813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.929336][ T6813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.955465][ T6813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.969915][ T6813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.970145][ T6813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.990780][ T6813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.000696][ T6813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.001176][ T6813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.014759][ T6813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.045336][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 99.054464][ T6691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.062601][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.063715][ T6691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.086956][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.087640][ T6691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.092997][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.095305][ T6691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.108319][ T6691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.127809][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.128031][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.128227][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.128431][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.209378][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.221484][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.222226][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.241978][ T6691] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.252555][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.252645][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.257041][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.257122][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.589406][ T6691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.713348][ T1355] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 99.743967][ T6883] input: syz0 as /devices/virtual/input/input5 [ 99.781094][ T6691] veth0_vlan: entered promiscuous mode [ 99.808908][ T6883] serial 00:04: in use; can't configure [ 99.816108][ T6691] veth1_vlan: entered promiscuous mode [ 99.835022][ T6691] veth0_macvtap: entered promiscuous mode [ 99.837709][ T6691] veth1_macvtap: entered promiscuous mode [ 99.846234][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.850873][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.865302][ T1355] usb 9-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 99.866609][ T1355] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 81, changing to 7 [ 99.868779][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.868803][ T1355] usb 9-1: Product: 닮洈蛮큊쑚ۍ쁋律嵾켁맅ⲵ줹璤뗥㻫ఫꌾవ텤稾퀾좠顒鴶ᰈ媻뚺Ӱ椭㗏 [ 99.868820][ T1355] usb 9-1: Manufacturer: 皶⩪擨鱹㊳腛憧裏ᑘ斧ˎ홆㌤ʱ즞聺恭㔳긃ꓫ醠呈ꦡઘૣ鋚硹혅꫘틏閣ꡬ㕏聻顸佷䧢䩷藀㠃⨨몡ᣆ㟚⋨䕞쾱訇 [ 99.868842][ T1355] usb 9-1: SerialNumber: ݖ鷵缘엔廓襁ᔬ乐層谺臷シὭ扝ﮝီ꿸⒢茬訟譇꒝횓ꍟ䞴⟄氤ꌿ齼㓨ゑｘ巂븍싊嫈榛鿡˝뵒휈騑荦婯₀￲毮懏ꛝᲑ곷隫་抶ｾᾷ뎞퉣䮗扲腄ᩩ뤜啎韢꿆꟠黧泜㸜瘷鍹紂Һ썫崊살쑸屃즙齶娚캝忯踙┙뢳灜쟺⪪袲 [ 99.874764][ T6436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.894569][ T6436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.894600][ T6436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.894619][ T6436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.982720][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.982752][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.108386][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.108407][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.109457][ T1355] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.278366][ T6889] netlink: 72 bytes leftover after parsing attributes in process `syz.2.170'. [ 100.371309][ T1355] usb 9-1: 2:1: invalid format type 0x565f is detected, processed as PCM [ 100.371334][ T1355] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 100.426112][ T1355] usb 9-1: USB disconnect, device number 2 [ 100.923629][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.933115][ T30] usb 5-1: USB disconnect, device number 3 [ 100.938598][ T6924] jffs2: notice: (6924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 100.994740][ T5092] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.003450][ T5092] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.049925][ T6931] bond1: Unable to set up delay as MII monitoring is disabled [ 101.056380][ T6931] bond1 (unregistering): Released all slaves [ 101.073363][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 101.258768][ T6947] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 101.289355][ T6950] veth1_macvtap: left promiscuous mode [ 101.289380][ T6950] macsec0: entered allmulticast mode [ 101.298858][ T6951] veth1_macvtap: entered promiscuous mode [ 101.298880][ T6951] veth1_macvtap: entered allmulticast mode [ 101.304031][ T6951] macsec0: left allmulticast mode [ 101.304052][ T6951] veth1_macvtap: left allmulticast mode [ 101.328094][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 101.328113][ T43] audit: type=1400 audit(2000000036.839:548): avc: denied { create } for pid=6952 comm="syz.6.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.329087][ T43] audit: type=1400 audit(2000000036.839:549): avc: denied { read } for pid=6952 comm="syz.6.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.390994][ T6955] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 101.392810][ T6958] tipc: Started in network mode [ 101.392828][ T6958] tipc: Node identity 7f000001, cluster identity 4711 [ 101.397871][ T6958] tipc: New replicast peer: 127.0.0.1 [ 101.398846][ T6958] tipc: Enabled bearer , priority 10 [ 101.399891][ T6956] tipc: Cannot configure node identity twice [ 101.399902][ T6956] tipc: Cannot configure node identity twice [ 101.403408][ T43] audit: type=1400 audit(2000000036.909:550): avc: denied { mount } for pid=6954 comm="syz.6.184" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.419997][ T43] audit: type=1400 audit(2000000036.929:551): avc: denied { unmount } for pid=6691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.468035][ T6960] jffs2: notice: (6960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 101.521892][ T43] audit: type=1400 audit(2000000037.029:552): avc: denied { read } for pid=6962 comm="syz.6.186" dev="sockfs" ino=16119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.528012][ T6963] binder: BINDER_SET_CONTEXT_MGR already set [ 101.528026][ T6963] binder: 6962:6963 ioctl 4018620d 200000004a80 returned -16 [ 101.615327][ T6969] Cannot find del_set index 4 as target [ 101.619258][ T6969] vivid-000: ================= START STATUS ================= [ 101.619278][ T6969] vivid-000: Enable Output Cropping: true grabbed [ 101.621236][ T6969] vivid-000: Enable Output Composing: true grabbed [ 101.621271][ T6969] vivid-000: Enable Output Scaler: true grabbed [ 101.621291][ T6969] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 101.621313][ T6969] vivid-000: Transmit Mode: HDMI grabbed [ 101.621334][ T6969] vivid-000: Hotplug Present: 0x00000000 [ 101.621352][ T6969] vivid-000: RxSense Present: 0x00000000 [ 101.621369][ T6969] vivid-000: EDID Present: 0x00000000 [ 101.621387][ T6969] vivid-000: ================== END STATUS ================== [ 101.947544][ T6979] ip6t_srh: unknown srh invflags 51E8 [ 102.203378][ T5879] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 102.333381][ T5879] usb 9-1: device descriptor read/64, error -71 [ 102.506761][ T7004] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.514770][ T58] tipc: Node number set to 2130706433 [ 102.573468][ T5879] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 102.624914][ T43] audit: type=1400 audit(2000000038.139:553): avc: denied { write } for pid=7006 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.625991][ T43] audit: type=1400 audit(2000000038.139:554): avc: denied { setopt } for pid=7006 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.647236][ T43] audit: type=1400 audit(2000000038.159:555): avc: denied { accept } for pid=7006 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.703656][ T5879] usb 9-1: device descriptor read/64, error -71 [ 102.813620][ T5879] usb usb9-port1: attempt power cycle [ 102.845249][ T43] audit: type=1400 audit(2000000038.359:556): avc: denied { create } for pid=7008 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.846095][ T43] audit: type=1400 audit(2000000038.359:557): avc: denied { bind } for pid=7008 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.993500][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.073344][ T5092] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.073382][ T5092] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.153324][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 103.165487][ T5879] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.193599][ T5879] usb 9-1: device descriptor read/8, error -71 [ 103.435471][ T5879] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 103.454411][ T5879] usb 9-1: device descriptor read/8, error -71 [ 103.565787][ T5879] usb usb9-port1: unable to enumerate USB device [ 103.817698][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.202'. [ 104.388488][ T37] IPVS: starting estimator thread 0... [ 104.473334][ T7033] IPVS: using max 42 ests per chain, 100800 per kthread [ 105.057005][ T7058] CIFS: Attempting to mount //127.0.0.1/share [ 105.073734][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.165797][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.168152][ T5092] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.236781][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 105.280535][ T7064] FAULT_INJECTION: forcing a failure. [ 105.280535][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 105.280568][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(full) [ 105.280589][ T7064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.280600][ T7064] Call Trace: [ 105.280607][ T7064] [ 105.280614][ T7064] dump_stack_lvl+0x100/0x190 [ 105.280662][ T7064] should_fail_ex.cold+0x5/0xa [ 105.280687][ T7064] should_failslab+0xc2/0x120 [ 105.280742][ T7064] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 105.280766][ T7064] ? sock_alloc_inode+0x26/0x2c0 [ 105.280799][ T7064] ? __pfx_sock_alloc_inode+0x10/0x10 [ 105.280827][ T7064] sock_alloc_inode+0x26/0x2c0 [ 105.280850][ T7064] ? __pfx_sock_alloc_inode+0x10/0x10 [ 105.280874][ T7064] alloc_inode+0x68/0x250 [ 105.280893][ T7064] sock_alloc+0x44/0x280 [ 105.280914][ T7064] ? security_socket_create+0x7f/0x250 [ 105.280943][ T7064] __sock_create+0xc2/0x860 [ 105.280977][ T7064] __sys_socket+0x14d/0x260 [ 105.280996][ T7064] ? __pfx___sys_socket+0x10/0x10 [ 105.281018][ T7064] __x64_sys_socket+0x72/0xb0 [ 105.281034][ T7064] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.281069][ T7064] do_syscall_64+0x123/0x790 [ 105.281095][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.281114][ T7064] RIP: 0033:0x7fad83d9e159 [ 105.281130][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.281152][ T7064] RSP: 002b:00007fad84d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.281171][ T7064] RAX: ffffffffffffffda RBX: 00007fad84025fa0 RCX: 00007fad83d9e159 [ 105.281184][ T7064] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 105.281197][ T7064] RBP: 00007fad83e3506b R08: 0000000000000000 R09: 0000000000000000 [ 105.281209][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.281221][ T7064] R13: 00007fad84026038 R14: 00007fad84025fa0 R15: 00007ffcc4c11cc8 [ 105.281246][ T7064] [ 105.281368][ T7064] socket: no more sockets [ 105.416032][ T7072] netlink: 'syz.2.221': attribute type 2 has an invalid length. [ 105.416990][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.551801][ T7081] 8021q: VLANs not supported on sit0 [ 105.558564][ T7084] 8021q: VLANs not supported on sit0 [ 105.808863][ T7086] SELinux: failed to load policy [ 105.889434][ T7058] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 105.890074][ T7058] CIFS: VFS: cifs_mount failed w/return code = -11 [ 105.969756][ T7112] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 105.991641][ T7116] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 106.113503][ T5836] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 106.253904][ T5836] usb 7-1: device descriptor read/64, error -71 [ 106.496745][ T5836] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 106.556298][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 106.556315][ T43] audit: type=1326 audit(2000000042.069:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.0.231" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad83d9e159 code=0x0 [ 106.607373][ T43] audit: type=1400 audit(2000000042.119:575): avc: denied { read write } for pid=7137 comm="syz.0.231" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 106.608892][ T43] audit: type=1400 audit(2000000042.119:576): avc: denied { open } for pid=7137 comm="syz.0.231" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 106.619406][ T7139] lo: entered promiscuous mode [ 106.619651][ T7139] tunl0: entered promiscuous mode [ 106.620957][ T7139] gre0: entered promiscuous mode [ 106.633017][ T7139] gretap0: entered promiscuous mode [ 106.635451][ T5836] usb 7-1: device descriptor read/64, error -71 [ 106.638870][ T7139] erspan0: entered promiscuous mode [ 106.641848][ T43] audit: type=1400 audit(2000000042.159:577): avc: denied { mmap_zero } for pid=7142 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 106.646269][ T7139] ip_vti0: entered promiscuous mode [ 106.647618][ T7139] ip6_vti0: entered promiscuous mode [ 106.648963][ T7139] sit0: entered promiscuous mode [ 106.660011][ T7139] ip6tnl0: entered promiscuous mode [ 106.662820][ T7139] ip6gre0: entered promiscuous mode [ 106.671195][ T7139] syz_tun: entered promiscuous mode [ 106.677476][ T7139] ip6gretap0: entered promiscuous mode [ 106.683147][ T7139] bridge0: entered promiscuous mode [ 106.685929][ T7139] vcan0: entered promiscuous mode [ 106.690148][ T7139] bond0: entered promiscuous mode [ 106.693066][ T7139] team0: entered promiscuous mode [ 106.701076][ T7139] dummy0: entered promiscuous mode [ 106.706772][ T7139] nlmon0: entered promiscuous mode [ 106.708155][ T7139] batadv0: entered promiscuous mode [ 106.712662][ T7139] veth0: entered promiscuous mode [ 106.722435][ T7139] veth1: entered promiscuous mode [ 106.727292][ T7139] wg0: entered promiscuous mode [ 106.732807][ T7139] wg1: entered promiscuous mode [ 106.736153][ T7139] wg2: entered promiscuous mode [ 106.737570][ T7139] veth1_to_bridge: entered promiscuous mode [ 106.739733][ T7139] bridge_slave_1: entered promiscuous mode [ 106.741999][ T7139] veth0_to_bond: entered promiscuous mode [ 106.745078][ T5836] usb usb7-port1: attempt power cycle [ 106.749570][ T7139] bond_slave_0: entered promiscuous mode [ 106.751551][ T7139] veth1_to_bond: entered promiscuous mode [ 106.755221][ T7139] bond_slave_1: entered promiscuous mode [ 106.757160][ T7139] veth0_to_team: entered promiscuous mode [ 106.759147][ T7139] team_slave_0: entered promiscuous mode [ 106.759549][ T7139] veth1_to_team: entered promiscuous mode [ 106.761443][ T7139] team_slave_1: entered promiscuous mode [ 106.761642][ T7139] veth0_to_batadv: entered promiscuous mode [ 106.764318][ T7139] batadv_slave_0: entered promiscuous mode [ 106.766009][ T7139] veth1_to_batadv: entered promiscuous mode [ 106.767750][ T7139] batadv_slave_1: entered promiscuous mode [ 106.769330][ T7139] xfrm0: entered promiscuous mode [ 106.772371][ T7139] veth0_to_hsr: entered promiscuous mode [ 106.775448][ T7139] veth1_to_hsr: entered promiscuous mode [ 106.778301][ T7139] hsr0: entered promiscuous mode [ 106.779955][ T7139] veth1_virt_wifi: entered promiscuous mode [ 106.781477][ T7139] veth0_virt_wifi: entered promiscuous mode [ 106.783086][ T7139] virt_wifi0: entered promiscuous mode [ 106.788210][ T7139] vlan0: entered promiscuous mode [ 106.790258][ T7139] vlan1: entered promiscuous mode [ 106.794166][ T7139] macvlan0: entered promiscuous mode [ 106.795571][ T7139] macvlan1: entered promiscuous mode [ 106.795710][ T7139] ipvlan0: entered promiscuous mode [ 106.795818][ T7139] ipvlan1: entered promiscuous mode [ 106.810571][ T7139] macvtap0: entered promiscuous mode [ 106.812353][ T7139] macsec0: entered promiscuous mode [ 106.816272][ T7139] geneve0: entered promiscuous mode [ 106.818166][ T7139] geneve1: entered promiscuous mode [ 106.826682][ T7139] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 106.830240][ T7139] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 106.832394][ T7139] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 106.845614][ T7139] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 106.861132][ T7139] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 106.871308][ T7139] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 106.872722][ T7139] syztnl0: entered promiscuous mode [ 106.872846][ T7139] veth2: entered promiscuous mode [ 106.873027][ T7139] veth3: entered promiscuous mode [ 106.873143][ T7139] veth4: entered promiscuous mode [ 106.874503][ T7139] veth5: entered promiscuous mode [ 106.883516][ T5601] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883806][ T5601] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883828][ T5601] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883846][ T5601] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.948738][ T43] audit: type=1400 audit(2000000042.459:578): avc: denied { connect } for pid=7152 comm="syz.6.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.949007][ T43] audit: type=1400 audit(2000000042.459:579): avc: denied { accept } for pid=7152 comm="syz.6.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.103299][ T5836] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 107.133804][ T5836] usb 7-1: device descriptor read/8, error -71 [ 107.313377][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 107.386784][ T5836] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 107.407975][ T5836] usb 7-1: device descriptor read/8, error -71 [ 107.413845][ T7176] SELinux: policydb string does not match my string SE Linux [ 107.413889][ T7176] SELinux: failed to load policy [ 107.414049][ T7175] SELinux: policydb string does not match my string SE Linux [ 107.414080][ T7175] SELinux: failed to load policy [ 107.420140][ T7176] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 107.420161][ T7176] bridge0: left promiscuous mode [ 107.421784][ T7176] bridge0: entered promiscuous mode [ 107.422005][ T7176] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.422109][ T7175] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 107.478226][ T7180] netlink: 'syz.0.235': attribute type 5 has an invalid length. [ 107.482940][ T7180] netlink: 'syz.0.235': attribute type 3 has an invalid length. [ 107.489790][ T7180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7180 comm=syz.0.235 [ 107.519063][ T5836] usb usb7-port1: unable to enumerate USB device [ 107.763777][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.924054][ T5879] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 107.925196][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 107.925225][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 107.925247][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 107.925270][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 107.925292][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 107.925313][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 107.926879][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 107.926902][ T5879] usb 5-1: Product: syz [ 107.926916][ T5879] usb 5-1: Manufacturer: syz [ 107.943040][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.944455][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.944541][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.944684][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.944815][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.945046][ T7180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.955143][ T5879] usb 5-1: USB2VGA dongle found at address 4 [ 107.957665][ T5879] usb 5-1: Allocated 8 output buffers [ 107.967102][ T5879] usb 5-1: Failed to early initialize device [ 108.134235][ T7194] pim6reg: entered allmulticast mode [ 108.138160][ T7194] team0: entered allmulticast mode [ 108.138180][ T7194] team_slave_0: entered allmulticast mode [ 108.138194][ T7194] team_slave_1: entered allmulticast mode [ 108.138526][ T7194] pim6reg: left allmulticast mode [ 108.167302][ T7180] usb 5-1: Failed to initialize device [ 108.168425][ T30] usb 5-1: USB disconnect, device number 4 [ 108.189303][ T7193] team0: left allmulticast mode [ 108.189327][ T7193] team_slave_0: left allmulticast mode [ 108.189358][ T7193] team_slave_1: left allmulticast mode [ 108.231723][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.238'. [ 108.233607][ T7197] netlink: 'syz.6.238': attribute type 4 has an invalid length. [ 108.236604][ T7198] netlink: 'syz.6.238': attribute type 4 has an invalid length. [ 108.713118][ T7200] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 109.027574][ T43] audit: type=1400 audit(2000000044.539:580): avc: denied { create } for pid=7208 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.130525][ T43] audit: type=1400 audit(2000000044.639:581): avc: denied { connect } for pid=7215 comm="syz.6.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.313582][ T58] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 109.393981][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 109.477897][ T58] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.479109][ T58] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.479133][ T58] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.479150][ T58] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.479184][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.480955][ T58] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.480978][ T58] usb 7-1: Product: syz [ 109.480991][ T58] usb 7-1: Manufacturer: syz [ 109.512889][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 109.516222][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 109.534046][ T58] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 109.534067][ T58] cdc_wdm 7-1:1.0: Unknown control protocol [ 109.608138][ T7219] cgroup: fork rejected by pids controller in /syz6 [ 109.692169][ T43] audit: type=1400 audit(2000000045.199:582): avc: denied { read write } for pid=7204 comm="syz.2.241" name="cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.692571][ T43] audit: type=1400 audit(2000000045.199:583): avc: denied { open } for pid=7204 comm="syz.2.241" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.698085][ T7205] comedi comedi4: bad chanlist[0]=0x00000080 chan=128 range length=1 [ 109.992038][ T7205] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'. [ 110.025082][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 110.086989][ T58] usb 7-1: USB disconnect, device number 13 [ 110.426615][ T7301] xt_IDLETIMER: timeout value is zero [ 110.511549][ T7312] jffs2: notice: (7312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 110.514208][ T7312] FAULT_INJECTION: forcing a failure. [ 110.514208][ T7312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.514237][ T7312] CPU: 2 UID: 0 PID: 7312 Comm: syz.6.255 Not tainted syzkaller #0 PREEMPT(full) [ 110.514256][ T7312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.514267][ T7312] Call Trace: [ 110.514273][ T7312] [ 110.514280][ T7312] dump_stack_lvl+0x100/0x190 [ 110.514325][ T7312] should_fail_ex.cold+0x5/0xa [ 110.514350][ T7312] strncpy_from_user+0x3b/0x2d0 [ 110.514375][ T7312] ? get_pid_task+0x106/0x250 [ 110.514402][ T7312] path_setxattrat+0x127/0x3b0 [ 110.514427][ T7312] ? __pfx_path_setxattrat+0x10/0x10 [ 110.514454][ T7312] ? ksys_write+0x190/0x250 [ 110.514471][ T7312] ? ksys_write+0x190/0x250 [ 110.514503][ T7312] ? fput+0x7c/0x100 [ 110.514524][ T7312] ? ksys_write+0x1ac/0x250 [ 110.514539][ T7312] ? __pfx_ksys_write+0x10/0x10 [ 110.514559][ T7312] __x64_sys_lsetxattr+0xc9/0x140 [ 110.514582][ T7312] ? do_syscall_64+0xae/0x790 [ 110.514612][ T7312] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.514636][ T7312] do_syscall_64+0x123/0x790 [ 110.514662][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.514704][ T7312] RIP: 0033:0x7fe8e8b9e159 [ 110.514721][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.514737][ T7312] RSP: 002b:00007fe8e9abf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 110.514756][ T7312] RAX: ffffffffffffffda RBX: 00007fe8e8e25fa0 RCX: 00007fe8e8b9e159 [ 110.514767][ T7312] RDX: 0000200000000340 RSI: 0000200000003380 RDI: 0000200000000180 [ 110.514778][ T7312] RBP: 00007fe8e9abf090 R08: 0000000000000000 R09: 0000000000000000 [ 110.514788][ T7312] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 110.514799][ T7312] R13: 00007fe8e8e26038 R14: 00007fe8e8e25fa0 R15: 00007fff7d912ff8 [ 110.514822][ T7312] [ 110.516395][ T7313] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.578498][ T7317] jffs2: notice: (7317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 110.631587][ T7313] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 110.639478][ T7322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=7322 comm=syz.6.257 [ 111.246972][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.261'. [ 111.246992][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.261'. [ 111.326638][ T5601] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.336991][ T5601] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.337030][ T5601] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.337056][ T5601] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.340928][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 111.421022][ T7367] jffs2: notice: (7367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 111.422499][ T7367] FAULT_INJECTION: forcing a failure. [ 111.422499][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 111.422527][ T7367] CPU: 1 UID: 0 PID: 7367 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(full) [ 111.422546][ T7367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.422556][ T7367] Call Trace: [ 111.422563][ T7367] [ 111.422570][ T7367] dump_stack_lvl+0x100/0x190 [ 111.422613][ T7367] should_fail_ex.cold+0x5/0xa [ 111.422639][ T7367] should_failslab+0xc2/0x120 [ 111.422668][ T7367] __kvmalloc_node_noprof+0x113/0x9b0 [ 111.422690][ T7367] ? vmemdup_user+0x2a/0xe0 [ 111.422735][ T7367] vmemdup_user+0x2a/0xe0 [ 111.422752][ T7367] path_setxattrat+0x29e/0x3b0 [ 111.422778][ T7367] ? __pfx_path_setxattrat+0x10/0x10 [ 111.422805][ T7367] ? ksys_write+0x190/0x250 [ 111.422823][ T7367] ? ksys_write+0x190/0x250 [ 111.422857][ T7367] ? fput+0x7c/0x100 [ 111.422879][ T7367] ? ksys_write+0x1ac/0x250 [ 111.422896][ T7367] ? __pfx_ksys_write+0x10/0x10 [ 111.422916][ T7367] __x64_sys_lsetxattr+0xc9/0x140 [ 111.422939][ T7367] ? do_syscall_64+0xae/0x790 [ 111.422971][ T7367] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.422995][ T7367] do_syscall_64+0x123/0x790 [ 111.423023][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.423041][ T7367] RIP: 0033:0x7fc685d9e159 [ 111.423057][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.423074][ T7367] RSP: 002b:00007fc683ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 111.423092][ T7367] RAX: ffffffffffffffda RBX: 00007fc686025fa0 RCX: 00007fc685d9e159 [ 111.423104][ T7367] RDX: 0000200000000340 RSI: 0000200000003380 RDI: 0000200000000180 [ 111.423116][ T7367] RBP: 00007fc683ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.423127][ T7367] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 111.423138][ T7367] R13: 00007fc686026038 R14: 00007fc686025fa0 R15: 00007ffd73796748 [ 111.423161][ T7367] [ 111.454421][ T7365] syzkaller0: entered promiscuous mode [ 111.454440][ T7365] syzkaller0: entered allmulticast mode [ 111.474940][ T5092] Bluetooth: hci0: command 0x041b tx timeout [ 111.533959][ T7374] jffs2: notice: (7374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 111.565519][ T7377] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.599116][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 111.599134][ T43] audit: type=1400 audit(2000000047.109:603): avc: denied { map } for pid=7372 comm="syz.2.265" path="socket:[20012]" dev="sockfs" ino=20012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 111.611265][ T43] audit: type=1400 audit(2000000047.119:604): avc: denied { write } for pid=7379 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.676564][ T43] audit: type=1400 audit(2000000047.189:605): avc: denied { setattr } for pid=7372 comm="syz.2.265" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.761674][ T7385] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.765408][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.765831][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.776279][ T43] audit: type=1400 audit(2000000047.289:606): avc: denied { execute } for pid=7384 comm="syz.6.267" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 111.793325][ T5963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.955932][ T5963] usb 5-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.03 [ 111.956600][ T5963] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.956626][ T5963] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.956674][ T5963] usb 5-1: Dual-Role OTG device on HNP port [ 111.956955][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.962495][ C3] ------------[ cut here ]------------ [ 111.962509][ C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 111.962523][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: udevd/5142 [ 111.990311][ C3] Modules linked in: [ 111.992139][ C3] CPU: 3 UID: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 111.994267][ T43] audit: type=1400 audit(2000000047.499:607): avc: denied { recv } for pid=6264 comm="syz-executor" saddr=10.0.2.2 src=43238 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 111.995368][ T43] audit: type=1400 audit(2000000047.509:608): avc: denied { recv } for pid=5671 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59430 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 112.016772][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.020973][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 112.023263][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ca 2c 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 112.031348][ C3] RSP: 0000:ffffc90028707940 EFLAGS: 00010046 [ 112.034055][ C3] RAX: dffffc0000000000 RBX: ffff888025b000e0 RCX: ffffffff8cda4960 [ 112.037551][ C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a3c0 [ 112.041002][ C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 112.044444][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0 [ 112.047751][ C3] R13: 0000000000000000 R14: ffff888025b000e0 R15: ffff8880574af720 [ 112.050708][ C3] FS: 00007fc4039f1880(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000 [ 112.054113][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.056626][ C3] CR2: 0000200000108000 CR3: 0000000025bc6000 CR4: 0000000000352ef0 [ 112.059708][ C3] Call Trace: [ 112.061220][ C3] [ 112.062637][ C3] hidg_set_alt+0x190/0xa10 [ 112.064733][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.067110][ C3] ? rcu_is_watching+0x13/0xc0 [ 112.068623][ T7398] ecryptfs: Unknown parameter 'ecryptf_sig' [ 112.071876][ C3] composite_setup+0x2ccf/0x9290 [ 112.074044][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 112.076223][ C3] ? __pfx_composite_setup+0x10/0x10 [ 112.078568][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.080870][ C3] ? do_raw_spin_lock+0x128/0x260 [ 112.083120][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.085682][ C3] ? configfs_composite_setup+0xfb/0x130 [ 112.088368][ C3] configfs_composite_setup+0xfb/0x130 [ 112.090794][ C3] dummy_timer+0x2039/0x3700 [ 112.092828][ C3] ? do_raw_spin_lock+0x128/0x260 [ 112.094988][ C3] ? find_held_lock+0x2b/0x80 [ 112.097022][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.099505][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.101994][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.104517][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.106952][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 112.109577][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 112.111778][ C3] ? rcu_is_watching+0x13/0xc0 [ 112.113838][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.116416][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 112.118557][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 112.120928][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 112.123336][ C3] handle_softirqs+0x1e6/0x9d0 [ 112.125668][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 112.128997][ C3] ? _raw_spin_unlock+0x28/0x50 [ 112.131175][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 112.133649][ C3] __irq_exit_rcu+0x16a/0x210 [ 112.135824][ C3] irq_exit_rcu+0x9/0x30 [ 112.137736][ C3] sysvec_apic_timer_interrupt+0x56/0xc0 [ 112.140254][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.142896][ C3] RIP: 0033:0x7fc4032b80b8 [ 112.144944][ C3] Code: 05 00 00 0f b7 04 58 48 3b 05 5c 91 13 00 4c 8d 5b 10 72 5a e9 19 05 00 00 66 0f 1f 84 00 00 00 00 00 4c 8d 52 10 48 8b 7a 10 <4c> 89 d0 48 c1 e8 0c 48 31 c7 49 89 79 10 48 8b 3d 6b 01 14 00 48 [ 112.153064][ C3] RSP: 002b:00007ffd936d5480 EFLAGS: 00000202 [ 112.155760][ C3] RAX: 0000000000000006 RBX: 0000000000000002 RCX: 0000556a36b2ffe0 [ 112.159186][ C3] RDX: 0000556a36b31f30 RSI: 00007fc4033f1ae0 RDI: 0000000556a36b31 [ 112.162728][ C3] RBP: 00007fc4033f1ac0 R08: 0000556a36b26ee0 R09: 00007fc4033f1ad0 [ 112.166201][ C3] R10: 0000556a36b31f40 R11: 0000000000000012 R12: 0000000000000030 [ 112.169631][ C3] R13: 0000000000000004 R14: fffffffffffffea0 R15: 0000000000000000 [ 112.173170][ C3] [ 112.174594][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.177736][ C3] CPU: 3 UID: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 112.181442][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.185851][ C3] Call Trace: [ 112.187257][ C3] [ 112.188524][ C3] dump_stack_lvl+0x100/0x190 [ 112.190629][ C3] vpanic+0x553/0x970 [ 112.192444][ C3] ? __pfx_vpanic+0x10/0x10 [ 112.194384][ C3] panic+0xd1/0xe0 [ 112.196021][ C3] ? __pfx_panic+0x10/0x10 [ 112.197959][ C3] check_panic_on_warn.cold+0x19/0x34 [ 112.200324][ C3] ? usb_ep_enable+0x3e6/0x490 [ 112.202425][ C3] __warn.cold+0x191/0x318 [ 112.204271][ C3] __report_bug+0x30f/0x440 [ 112.206190][ C3] ? usb_ep_enable+0x3e6/0x490 [ 112.208214][ C3] ? __pfx___report_bug+0x10/0x10 [ 112.210470][ C3] ? try_to_wake_up+0x158/0x1c90 [ 112.212655][ C3] report_bug_entry+0xe2/0x290 [ 112.214765][ C3] ? usb_ep_enable+0x3f8/0x490 [ 112.216813][ C3] handle_bug+0x1cd/0x2a0 [ 112.218664][ C3] exc_invalid_op+0x17/0x50 [ 112.220659][ C3] asm_exc_invalid_op+0x1a/0x20 [ 112.222735][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 112.225028][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ca 2c 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 112.233123][ C3] RSP: 0000:ffffc90028707940 EFLAGS: 00010046 [ 112.235715][ C3] RAX: dffffc0000000000 RBX: ffff888025b000e0 RCX: ffffffff8cda4960 [ 112.239004][ C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a3c0 [ 112.242660][ C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 112.246072][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0 [ 112.249437][ C3] R13: 0000000000000000 R14: ffff888025b000e0 R15: ffff8880574af720 [ 112.252853][ C3] hidg_set_alt+0x190/0xa10 [ 112.254874][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.257117][ C3] ? rcu_is_watching+0x13/0xc0 [ 112.259130][ C3] composite_setup+0x2ccf/0x9290 [ 112.261234][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 112.263476][ C3] ? __pfx_composite_setup+0x10/0x10 [ 112.265981][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.268299][ C3] ? do_raw_spin_lock+0x128/0x260 [ 112.270420][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.272685][ C3] ? configfs_composite_setup+0xfb/0x130 [ 112.275060][ C3] configfs_composite_setup+0xfb/0x130 [ 112.277386][ C3] dummy_timer+0x2039/0x3700 [ 112.279405][ C3] ? do_raw_spin_lock+0x128/0x260 [ 112.281601][ C3] ? find_held_lock+0x2b/0x80 [ 112.283623][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.286144][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.288474][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.290928][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.293413][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 112.296032][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 112.298140][ C3] ? rcu_is_watching+0x13/0xc0 [ 112.300201][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.302702][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 112.305034][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 112.307529][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 112.309638][ C3] handle_softirqs+0x1e6/0x9d0 [ 112.312054][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 112.314269][ C3] ? _raw_spin_unlock+0x28/0x50 [ 112.316612][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 112.319211][ C3] __irq_exit_rcu+0x16a/0x210 [ 112.321321][ C3] irq_exit_rcu+0x9/0x30 [ 112.323088][ C3] sysvec_apic_timer_interrupt+0x56/0xc0 [ 112.325512][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.328182][ C3] RIP: 0033:0x7fc4032b80b8 [ 112.330190][ C3] Code: 05 00 00 0f b7 04 58 48 3b 05 5c 91 13 00 4c 8d 5b 10 72 5a e9 19 05 00 00 66 0f 1f 84 00 00 00 00 00 4c 8d 52 10 48 8b 7a 10 <4c> 89 d0 48 c1 e8 0c 48 31 c7 49 89 79 10 48 8b 3d 6b 01 14 00 48 [ 112.338554][ C3] RSP: 002b:00007ffd936d5480 EFLAGS: 00000202 [ 112.341160][ C3] RAX: 0000000000000006 RBX: 0000000000000002 RCX: 0000556a36b2ffe0 [ 112.344469][ C3] RDX: 0000556a36b31f30 RSI: 00007fc4033f1ae0 RDI: 0000000556a36b31 [ 112.347822][ C3] RBP: 00007fc4033f1ac0 R08: 0000556a36b26ee0 R09: 00007fc4033f1ad0 [ 112.351141][ C3] R10: 0000556a36b31f40 R11: 0000000000000012 R12: 0000000000000030 [ 112.354417][ C3] R13: 0000000000000004 R14: fffffffffffffea0 R15: 0000000000000000 [ 112.357882][ C3] [ 112.359917][ C3] Kernel Offset: disabled [ 112.361809][ C3] Rebooting in 86400 seconds..