last executing test programs: 53.129835307s ago: executing program 0 (id=391): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') 53.040402549s ago: executing program 0 (id=392): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x24, 0xf801}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x24, 0xf801}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) ioctl$CDROMVOLCTRL(r5, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) (async) ioctl$CDROMVOLCTRL(r5, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000d06000)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80180005"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) syz_emit_ethernet(0x1382, &(0x7f0000002740)={@local, @dev, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1344, 0x6, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) 52.771816883s ago: executing program 0 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x4, 0x101201) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000580)={0x0, 0x5, 0x300, 0xffff, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="3a74966c898cdc52852ffa9889efcf7a8e", 0x11}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8004}], 0x1, 0x40800) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r4) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/98, 0x62}], 0x1}, 0x500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000100000300"/50], &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r5, 0x3, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000100)=[r8, r7], 0x2, 0x80000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c0002801400030084001f000000110002000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r7, r8], 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="ab002db07000fbdbff25100000000800030013c8b2e3a7e56ce8ee7993b53e7a21639350e9267244a4722d9a585182f8cac85e7ffdab4652f0e09a7121fa06f43bdfb5cf17edb3eb9370cd51273bf7e64b6b3d85662426868e5c1eb02f1b15c47f539a416cd3a6363acf47417ddc4522896a8af0d24fac2f53126a1a2ee6ee3794f9655e85f0ec06f80ae18dbdeecea7e71868f91d84eacdc1d2a48e6900"/168, @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES32=r11, @ANYBLOB="08003b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c010) 51.881441043s ago: executing program 0 (id=397): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x1, 0xfffffffffffff000, 0x10000}) 51.879746521s ago: executing program 0 (id=398): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) (async) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x3, 0x635}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, &(0x7f0000002080)=[{0x0}, {&(0x7f0000000180)="c9edc668922493667938ad63bc077c124dcd1220d80884f5d61b23b640b29a0166f2211cc327dbece4441c6368a60806302a87969f2b9a93e0cbf265f0826ff8439e73521675b5d8041c0b02891714e443c230a9e96ee0c1a9", 0x59}, {&(0x7f0000000f80)="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", 0xfa8}], 0x3}}], 0x1, 0x2400c042) 51.696099591s ago: executing program 0 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xb1, 0xfd, &(0x7f0000000300)="14920df1be14baaa29f38570718d201688fecf7773c74150831c5c2680d16e97bc3ed8e0a8d3cdae332f07d5e99c2e6da5574306063cbfebe70d0cec187c43c361784510bfdb728c3832d3397057573747f89129026fe753d1d7ef10dc816f87b24c228b3b68b377e78105ab6577551249bb2b113f04ff8a5366ea57f92cdbf4014d1e0359606dd62cf9249a75aff02fedab74aa3a68dc6c4bb09a0853e7fa3458cc94bc4c0f5df4f7138217d9a578248a", &(0x7f0000000800)=""/253, 0xd73, 0x0, 0xc3, 0x71, &(0x7f0000000600)="32305a4b377fa94264792799f5e97f40c33140dc5095bae5233d7fe3ef04ed2a886af06125e408e60dde5f916ed543f1b87fa840d3602a771ed18b613c332aa9fefd09e185f5df6545aff0f493b388abbf368769e85ea34694f72f305cfc4a078ee023fcabaab6e8ae8d5abc77572312b2cf1b7a38312352312f0fcbdad0c45a9440a5ab5d9f9322fc87716302d56d9c89e3dc29fb9d02c5501093dc299aca7501a3e234a5fb318fadb05b4ba23b81d8955d557e716acbe52123bfadaab8612fdf5ba7", &(0x7f0000000700)="74450182f086d7e659a3fb2c3fd261db4735a226c198e48dc3f72f7923f1963f0fa70521112387e74fb8bffc1fa3a674e52dac19253a0ea1d29de325225647a7c508bdd374e3229d264c8f6d8448e676d97ef083037d2f6585b1337b2bfd7c890ee94efccc264863ff71995db8ec6db445", 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 51.653845364s ago: executing program 32 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xb1, 0xfd, &(0x7f0000000300)="14920df1be14baaa29f38570718d201688fecf7773c74150831c5c2680d16e97bc3ed8e0a8d3cdae332f07d5e99c2e6da5574306063cbfebe70d0cec187c43c361784510bfdb728c3832d3397057573747f89129026fe753d1d7ef10dc816f87b24c228b3b68b377e78105ab6577551249bb2b113f04ff8a5366ea57f92cdbf4014d1e0359606dd62cf9249a75aff02fedab74aa3a68dc6c4bb09a0853e7fa3458cc94bc4c0f5df4f7138217d9a578248a", &(0x7f0000000800)=""/253, 0xd73, 0x0, 0xc3, 0x71, &(0x7f0000000600)="32305a4b377fa94264792799f5e97f40c33140dc5095bae5233d7fe3ef04ed2a886af06125e408e60dde5f916ed543f1b87fa840d3602a771ed18b613c332aa9fefd09e185f5df6545aff0f493b388abbf368769e85ea34694f72f305cfc4a078ee023fcabaab6e8ae8d5abc77572312b2cf1b7a38312352312f0fcbdad0c45a9440a5ab5d9f9322fc87716302d56d9c89e3dc29fb9d02c5501093dc299aca7501a3e234a5fb318fadb05b4ba23b81d8955d557e716acbe52123bfadaab8612fdf5ba7", &(0x7f0000000700)="74450182f086d7e659a3fb2c3fd261db4735a226c198e48dc3f72f7923f1963f0fa70521112387e74fb8bffc1fa3a674e52dac19253a0ea1d29de325225647a7c508bdd374e3229d264c8f6d8448e676d97ef083037d2f6585b1337b2bfd7c890ee94efccc264863ff71995db8ec6db445", 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 39.270513819s ago: executing program 4 (id=562): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x305, 0x6110383c, 0x0, 0xff7c, 0x6, 0x5d21c6cc, 0x0, 0x0, 0x120, 0x10001}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x305, 0x6110383c, 0x0, 0xff7c, 0x6, 0x5d21c6cc, 0x0, 0x0, 0x120, 0x10001}}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TCSBRKP(r2, 0x541e, 0x4) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) (async) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) (async) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) setresuid(0xffffffffffffffff, 0xee01, 0x0) syz_ublk_setup_queues(r11, r10, &(0x7f0000000700)={0x0, 0x0, 0x80}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x39c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x2, 0x0, 0x0}}, &(0x7f0000000b00)) (async) syz_ublk_setup_queues(r11, r10, &(0x7f0000000700)={0x0, 0x0, 0x80}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x39c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x2, 0x0, 0x0}}, &(0x7f0000000b00)) 37.718763464s ago: executing program 4 (id=588): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000004"], 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x408949, 0x0) 37.660056079s ago: executing program 4 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010016bd7000fddbf0c9b7c0000020675888bedc482072912018a0d8230019d2ae6bdf00", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x6, 0x9, 0xa, @remote, @mcast2, 0x700, 0x20, 0x8, 0x81}}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x4, 0x70bd26, 0x25dfdbfc, {0x2, 0x20, 0x10, 0x6, 0xfc, 0x0, 0xfd, 0x0, 0x40e43f2db12cd5b}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 37.608827296s ago: executing program 4 (id=593): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x149acfe49ee3630d, 0x3f2, &(0x7f0000000700)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000100)=0x1b) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r6) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) close(r2) 35.861745221s ago: executing program 4 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4a, 0x20, 0x528a84c8, 0x1}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r1, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='never', 0x5) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xac, "396754692329f4c1ce4f569727049fb18cc909b4498ed9fe8c86bca51d8e2d191380c1dad2fa815b0d12e5b444bd49d8fcddf13c4b6e475abe3e13eab536e1ef7f96a78448f91657d95dade371eed5df43e6ed474409f887780890c64db1158ba74d0cf5f9913b2b0e0f2c61ded0663efd246386aa0f5195a9c235c4a0ff411bdc79777295597df026151ace278310492f1afeb8c4c63d73a3747858fbc1f5fbffca1f2a75e77201879e9508"}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e80)="74a4e87cc89d33547afbda9d629f9f9f20b9b051442633c7a8ea06007c312479a404b3704c8d07860bf96d27dfa41893811161b20d535ad55badcf99b5863b28d31d6185a51a", 0x46}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4d", 0x4e}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc41", 0x46}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925", 0x57}], 0x4}}], 0x2, 0x8810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000500050007"], 0x4a) 35.711124667s ago: executing program 4 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000bc444a4cfcc57059e8c750d6f41152e2bacf3e2382a1181d607f26186453efedf93a4bdaf910c3d2756d61769c8c3cfcc718290098d3fc9b47", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r3, 0x7, 0x9, 0x0) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b) shutdown(r5, 0x1) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x12, 0x35}, 0x18) mknodat$loop(r6, &(0x7f0000000280)='./file0\x00', 0x80, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000bc444a4cfcc57059e8c750d6f41152e2bacf3e2382a1181d607f26186453efedf93a4bdaf910c3d2756d61769c8c3cfcc718290098d3fc9b47", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) fadvise64(r3, 0x7, 0x9, 0x0) (async) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b) (async) shutdown(r5, 0x1) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x12, 0x35}, 0x18) (async) mknodat$loop(r6, &(0x7f0000000280)='./file0\x00', 0x80, 0x1) (async) 34.826640763s ago: executing program 3 (id=615): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c004256893bc1f400f87659001800dd8d00000000000000800d12"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 34.824623877s ago: executing program 3 (id=616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0xe68, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x9, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0xffffffff, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x84}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0xaaed, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xfffffffffffffe58}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) (rerun: 32) 34.751641534s ago: executing program 3 (id=617): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r2, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) io_uring_enter(r5, 0x2c43, 0x12b6, 0x20, &(0x7f0000000000), 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r5, 0x40285107) 34.751377898s ago: executing program 3 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0xb43c919ddb0a9b42, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r0], 0x1c}}, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getdents64(r4, &(0x7f00000003c0)=""/99, 0x63) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf9", 0x2d}], 0x1}}], 0x1, 0x40080) sendto$inet(r5, &(0x7f0000000580)="17", 0x7fbc, 0x10008048, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="68f04af77c1758c0955a34591699a76e5302000d29dd44de33", 0x19}, 0x1, 0x0, 0x0, 0x40001}, 0x20040800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000010028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2caa040000000000140003006e6d30000000000000180016801400018010000600ff070000040000000600"/52], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4050) 34.630787145s ago: executing program 3 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="940000001c00040025bd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB='\x00\x00 \b\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="0800070014000000080007000b00000014000e800400020004000200040002000400020014000100fe800000000000000000ffffffff000000000e800500010006000000040002000500010001000000040002001400030000080000050000006c0500000500000006000500040000000357c987e14a2b5c25276c5dc58b33b5d5b0c1677e7ef64d47a84fe17bfaacd51ba1e0101ca7769f6bf0e2db3213150c41c0c4d8aebbdca1ed5573"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) fcntl$getflags(r6, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) 34.291357574s ago: executing program 3 (id=621): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) unshare(0x40040000) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYRESOCT=r2], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002740)={&(0x7f0000001480)={0x12a8, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d33557ff836a408a052f3865e042769d23a322f8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dd693a086b8481c1e584cac76eaf402f14ab469e292cdaa90cf1bc0130c0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9558}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd21}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf800000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfdc5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa58}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x24000005}, 0x810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', r6, 0x10, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @broadcast}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001080)={r8, 0xbe, 0xd1}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20030000", @ANYRES16=r9, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x4800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/5, 0x2}, 0x20) r10 = syz_open_pts(r1, 0x127200) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) close(r0) 34.234564712s ago: executing program 33 (id=621): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) unshare(0x40040000) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYRESOCT=r2], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002740)={&(0x7f0000001480)={0x12a8, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d33557ff836a408a052f3865e042769d23a322f8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dd693a086b8481c1e584cac76eaf402f14ab469e292cdaa90cf1bc0130c0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9558}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd21}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf800000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfdc5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa58}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x24000005}, 0x810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', r6, 0x10, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @broadcast}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001080)={r8, 0xbe, 0xd1}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20030000", @ANYRES16=r9, @ANYBLOB="100025bd7000ffdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00ff7f000006001600000200000500120000000000060011000300000008000b0000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b0007000000060016000f0000000500120000000000060011000500000008000b00000100000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100005cb3189281e73e700006001600050000000500120000000000060011000400000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000000000006001600ff7f00000500120001000000060011000180000008000b00ff0300000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000c54f1f006001600020000000500120001000000060011000300000008000b0003000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001600040000000500120001000000060011000500000008000b00e90000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b004a47095d06001600ffff0000050012000000000006001100c005000008000b0009000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000200000006001600400000000500120000000000060011008000000008000b00d90000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000700000006001600340400000500120001000000060011000e00000008000b0009000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0004000000060016006d0000000500120001000000060011000900000008000b0000000000135a4cdeb6ece872b545ae182022f79b28e18a27ae97350564e5c59e3abbc0bdf2eebf1861d15f43e7e2ad55441fafdfb349f9eed2768e7ae32a1ed1536d722d44fa3126a507f7367d10f336f66e72748bb176b4b4b9b0f2ac468b2b2645e2212dc3ef7ecaf22eac"], 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x4800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/5, 0x2}, 0x20) r10 = syz_open_pts(r1, 0x127200) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) close(r0) 25.688474168s ago: executing program 2 (id=697): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)={0x1, 0x0, [{0xc0000000, 0x2909ac95, 0x2, 0x4, 0x9, 0x796af221, 0xc4}]}) r5 = socket(0x15, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) getsockopt(r0, 0x1000117, 0x8, &(0x7f0000000040)=""/6, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x7}, "f93a043d3a672237", "df23f224cfff66620f03ae4e4924a502", "741c0289", "2f37ae5a10cea397"}, 0x28) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x339, 0xa, 0x64, 0x10, 0x7f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)={0x1, 0x0, [{0xc0000000, 0x2909ac95, 0x2, 0x4, 0x9, 0x796af221, 0xc4}]}) (async) socket(0x15, 0x5, 0x0) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) getsockopt(r0, 0x1000117, 0x8, &(0x7f0000000040)=""/6, &(0x7f0000000000)=0x6) (async) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x7}, "f93a043d3a672237", "df23f224cfff66620f03ae4e4924a502", "741c0289", "2f37ae5a10cea397"}, 0x28) (async) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x339, 0xa, 0x64, 0x10, 0x7f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 25.55160921s ago: executing program 2 (id=699): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x204001, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000300)={0x16, 0xfd34, 0x1171, 0x6, 0x80000001, 0x7ff, 0x5}) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a01020301090224"], 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x20}}, 0x8, @random=0x2, 0x1, @void, @val, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x99, 0x1}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @void, @void, @void}}]]}, 0x5c}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x40, 0x5, 0x5, 0x401}, {0x5, 0xff, 0x5, 0x9}, {0x42, 0xa, 0xe, 0x246}, {0x5df, 0x4, 0x6}, {0xf, 0x1, 0x7, 0xa}, {0x6, 0x2, 0x2, 0x7fff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20042, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, 0x0, 0x1) dup2(r5, r6) ioctl$CDROM_DEBUG(r1, 0x5330, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'sit0\x00', 0x800}) 22.3785226s ago: executing program 2 (id=742): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r4, r3, r3], 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x1, 0x2}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x1001}}}}}}}, 0x0) 22.376996652s ago: executing program 2 (id=743): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x80, 0x80000, @private1}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x1, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x5, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffdfffb, 0x8, 0xe, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1800, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file1\x00', r3}, 0x18) r4 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x142, 0xfffffffc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0xa}]}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r5, 0x0, 0x20044000) syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 20.692705672s ago: executing program 34 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000bc444a4cfcc57059e8c750d6f41152e2bacf3e2382a1181d607f26186453efedf93a4bdaf910c3d2756d61769c8c3cfcc718290098d3fc9b47", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r3, 0x7, 0x9, 0x0) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b) shutdown(r5, 0x1) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x12, 0x35}, 0x18) mknodat$loop(r6, &(0x7f0000000280)='./file0\x00', 0x80, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000bc444a4cfcc57059e8c750d6f41152e2bacf3e2382a1181d607f26186453efedf93a4bdaf910c3d2756d61769c8c3cfcc718290098d3fc9b47", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) fadvise64(r3, 0x7, 0x9, 0x0) (async) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b) (async) shutdown(r5, 0x1) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x12, 0x35}, 0x18) (async) mknodat$loop(r6, &(0x7f0000000280)='./file0\x00', 0x80, 0x1) (async) 19.301626443s ago: executing program 2 (id=775): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x100009b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00010000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, 0x0, 0x0, 0xe7c) openat$comedi(0xffffffffffffff9c, 0x0, 0x40400, 0x0) fstat(r2, 0x0) read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002b80)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f000000a400)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000000100)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b111234"}}, 0xb) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/msi_bus\x00', 0x1, 0x0) write$tun(r7, &(0x7f0000001440)=ANY=[@ANYBLOB="0200fb0449450693f128574ed062b6beb5d71a1ef755f1209f83f7bf0ce91938f669473477255cf773a65045a5"], 0x2d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.930116841s ago: executing program 2 (id=779): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}}, 0x4004) socketpair(0x2, 0xa, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf66, 0x65}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b08809a28d686d396db82516a6"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x4041) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000003c0)={'gretap0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x4080) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$nci(r6, &(0x7f0000000700)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x0, {0x0, 0x9, 0x6, 0x1}}, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000740)=0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0x2004000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf4, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000ac0)=0x40, 0x4) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'tunl0\x00', 0x0, 0x20, 0x7, 0x6, 0xfffffffa, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x67, 0x0, 0x3, 0xec6073caba4c4bab, 0x0, @empty, @rand_addr=0x64010102, {[@end, @lsrr={0x83, 0xb, 0xef, [@multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0xf8, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000d40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1a8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x20044080) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc00000, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xfffd, 0x7}, {0x1, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c850}, 0x20008091) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000011c0)={0x0, @multicast2, @loopback}, &(0x7f0000001200)=0xc) 3.686896319s ago: executing program 35 (id=779): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}}, 0x4004) socketpair(0x2, 0xa, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf66, 0x65}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b08809a28d686d396db82516a6"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x4041) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000003c0)={'gretap0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x4080) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$nci(r6, &(0x7f0000000700)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x0, {0x0, 0x9, 0x6, 0x1}}, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000740)=0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0x2004000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf4, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000ac0)=0x40, 0x4) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'tunl0\x00', 0x0, 0x20, 0x7, 0x6, 0xfffffffa, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x67, 0x0, 0x3, 0xec6073caba4c4bab, 0x0, @empty, @rand_addr=0x64010102, {[@end, @lsrr={0x83, 0xb, 0xef, [@multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0xf8, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000d40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1a8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x20044080) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc00000, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xfffd, 0x7}, {0x1, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c850}, 0x20008091) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000011c0)={0x0, @multicast2, @loopback}, &(0x7f0000001200)=0xc) 3.371519429s ago: executing program 1 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x2a8, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x9}}], 0xd2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone3(&(0x7f0000000640)={0x80400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x31}, &(0x7f0000000380)=""/142, 0x8e, &(0x7f0000000500)=""/214, &(0x7f0000000600)=[0x0, 0x0], 0x2}, 0x58) sched_setscheduler(r4, 0x2, &(0x7f00000006c0)=0xe2d7) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000040)='\x00', 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r5, &(0x7f0000000300)='1\x00', 0x2) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400030000000900020073797a32000000000c0007800500150001000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) 3.248636551s ago: executing program 6 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000500)={0x9, @output={0x0, 0x0, {0x1, 0x1}, 0x8}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x40010) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0/../file0/file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xe, {0x3, 0x0, 0xfffffffffffff8, 0x800, 0x0, 0x0, {0x0, 0x3, 0x1000000000000002, 0x1399, 0x7, 0x46, 0xffff8702, 0x0, 0x2, 0x4000, 0x0, r5, r6, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) rename(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x280000, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x401}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000440)={r9, 0x4}, &(0x7f0000000480)=0x8) 3.061606386s ago: executing program 6 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000078000/0x1000)=nil, 0x1000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x9c, 0x24, 0x400, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000000}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x70c4}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xdba}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x28}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004055) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000078000/0x1000)=nil, 0x1000, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x9c, 0x24, 0x400, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000000}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x70c4}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xdba}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x28}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004055) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) 2.891547022s ago: executing program 6 (id=934): r0 = socket$inet6(0xa, 0x5, 0xd8ea) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4, 0x0, @mcast2}}}, 0xffffffffffffff4f) 2.351417622s ago: executing program 1 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x1, 0x1a, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.250561742s ago: executing program 1 (id=938): io_uring_setup(0x128e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046, 0x2000000, 0x173}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) setpgid(r5, r4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) 1.549386302s ago: executing program 5 (id=940): mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x4d, 0xea6, '.\x00'}}) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) close(r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='proc_mnt/self/cwd\x00', 0x0, 0x0) 1.490457227s ago: executing program 5 (id=941): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x80, 0x50}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) close(0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000750000/0x3000)=nil, 0x3000, 0x1, 0x1010, r6, 0xb780b000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r7, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 1.36039071s ago: executing program 1 (id=942): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4620000000000000000000000002003e"], 0x146) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_stats}) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) 1.229316649s ago: executing program 5 (id=943): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x20241) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) (async) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000640)={&(0x7f0000000080)=0x5, 0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000680)=0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x2, 0x5, 0x8, 0x2, 0x44a7, r1}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000780)) (async, rerun: 64) fadvise64(r0, 0x1, 0x9e9, 0x5) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000007c0)={0x4, 0x0, [{}, {0x0, 0x0, 0x7}, {0x4c1, 0x0, 0x9}, {0xb8f, 0x0, 0x6}]}) (async, rerun: 64) r4 = syz_open_dev$vcsn(&(0x7f0000000840), 0x2, 0x400) (rerun: 64) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000880)={0x0, r3, r3, 0x8000000000000001, 0x8000000000000000, '\x00', {0xfffffffffffffffe, 0x4, 0x0, 0x9, 0x0, 0x9, 0x915, 0x7, {0xa, 0x8}, {0x10001, 0x3}, {0x8, 0x7}, 0x9, 0x4, 0x0, 0x50000, 0x1, 0x7ff, 0x1, 0xffd1, 0x63, 0xffff, '\x00', 0x3, 0x9f, 0x6, 0x4000}}) (async) open_by_handle_at(r0, &(0x7f0000000940)=@FILEID_INO32_GEN={0x8, 0x1, {0x9, 0x3051}}, 0x402) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x140d, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048814}, 0x20000000) (rerun: 64) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000b80)={&(0x7f0000000ac0)="0003fb9601fb3b23da74fce4deb79c4387faf164be8987cbc26a1f1e567cb910c7f43838c0d265d3f8ebcdef8d7baa44828a25a18d8abc37a8efd7b8c95f22ced2bb6f2603880d66767793b899a4a1be5227bdbe79def7976dc8fc750054018d427b698aad1b83335306bad5550bc812c529ed1963d3cdd286b0e0519593823eab53edb0119e4be298cc98e9faed745ca3147118ce4cfb2dbe68583259ba7152eacd4ee058015e695d022bfda2bf1d", 0xaf, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000bc0)={r6}) (async) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000c00)={0x1, 0x2, 0x8, 0x8, 0x9, 0x7ff}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000c40)={r4, r4}) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000c80)={0xf, 0x1}) (async) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000cc0)) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001100)={0x0, &(0x7f0000000d00)=[@nested_amd_vmload={0x182, 0x18}, @uexit={0x0, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xf8, 0x3, 0x1}}, @nested_load_syzos={0x136, 0x40, {0x1, 0x100000001, [@in_dx={0x69, 0x20, {0xe8e5, 0x5}}]}}, @out_dx={0x6a, 0x28, {0x5b15, 0x1, 0x8}}, @nested_load_syzos={0x136, 0x70, {0x3, 0x4, [@enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0xc9, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @rdmsr={0x66, 0x18, {0x946}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xa742}}, @out_dx={0x6a, 0x28, {0x520d, 0x7, 0xb}}, @nested_load_syzos={0x136, 0xb0, {0x3, 0x8, [@nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x1, 0xa9a6, 0x1}}, @wr_drn={0x68, 0x20, {0x5, 0x8}}]}}, @out_dx={0x6a, 0x28, {0x2b62, 0x5, 0x8}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x6c, 0x7, 0x6}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5d7, 0x3, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x57, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4022, 0x0, 0x0, 0x5}}, @enable_nested={0x12c, 0x18}], 0x3c8}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000001140)=0x1000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000001280)) (async) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001380)={'nat\x00', 0x0, 0x4, 0x1c, [0xe841, 0x2, 0x8, 0x5, 0x6, 0x4], 0x8, &(0x7f00000012c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001340)=""/28}, &(0x7f0000001400)=0x78) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000001440)) 1.129476887s ago: executing program 5 (id=944): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x50) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x204001, 0x0) 1.030273799s ago: executing program 1 (id=945): mkdir(&(0x7f0000000040)='./file0/../file0\x00', 0x81) chdir(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, 0x14) socket$netlink(0x10, 0x3, 0xc) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r7, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.029481207s ago: executing program 5 (id=946): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x77) (async) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x77) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="03cc040003130000240012800b000100697036746e6c00001400028008000100e971e8b5f95bf69740b6277a2179de49a1875618c5954a", @ANYRES32=r4, @ANYBLOB="060012004e230000"], 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000480)={0x1c1043000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r6, 0x400, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x21}) r10 = getpid() fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r10}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)) (async) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r6, 0x8, r11) timer_settime(r7, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x10ed) (async) truncate(&(0x7f0000000080)='./file1\x00', 0x10ed) fcntl$setlease(r6, 0x400, 0x2) (async) fcntl$setlease(r6, 0x400, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0xbb0) 676.746693ms ago: executing program 6 (id=947): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x10001, 'syz0\x00', 0x0}) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, &(0x7f0000000200)=""/59, &(0x7f0000000000)=0x3b) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x6, 0x4) (async, rerun: 32) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x4, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0xd9, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 594.501485ms ago: executing program 6 (id=948): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x7) (async) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 461.463118ms ago: executing program 5 (id=949): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./my_sys/bus/pci/rescan\x00', &(0x7f0000000040), 0x100) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) mount$nfs(&(0x7f00000000c0)='sysfs\x00', &(0x7f0000000140)='./my_sys/bus/pci/rescan\x00', &(0x7f0000000180), 0x100800, &(0x7f0000000240)={[{'sysfs\x00'}], [{@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'sysfs\x00'}}, {@dont_hash}]}) (async, rerun: 64) write(r1, &(0x7f0000000a00)='1', 0x1) (rerun: 64) 460.634132ms ago: executing program 6 (id=950): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000300)) syz_open_procfs(r0, &(0x7f0000000140)='environ\x00') r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) read(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000001700)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0xb) 0s ago: executing program 1 (id=951): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000000c00)=[{0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000580)=""/78, 0x4e}]}, {0xf, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/115, 0x73}]}, {0x7, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/15, 0xf}, {&(0x7f0000000a00)=""/148, 0x94}, {&(0x7f0000000ac0)=""/255, 0xff}]}], 0x3) open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write(r5, &(0x7f0000000180)="31bd3aadd4944463cfdb300353415cba6eb5279c9df541955ca9e5bc84c44ff2ddbee719acc0e60dfa7457e6b7d2c707447e3aeee4135c8800000000", 0x3c) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080000}, 0x8048080) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435330386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) poll(&(0x7f0000000040)=[{r6, 0x8}], 0x1, 0xfffffff8) kernel console output (not intermixed with test programs): -2: endpoint not enabled [ 98.826595][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.830457][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.833975][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.837504][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.840851][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.844150][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.847969][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.851371][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.854660][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.858203][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.861578][ T7497] SELinux: syz.2.434 (7497) wrote to user. This is no longer supported. [ 98.861604][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.868871][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.872392][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.875821][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.881512][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.884627][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.888254][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.891447][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.894628][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.898220][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.901537][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.904514][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.907070][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.910588][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.914162][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.917738][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.921069][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.924580][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.928327][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.931667][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.935012][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.938680][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.942137][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.945700][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.949245][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.952526][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.955970][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.959465][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.962921][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.966309][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.969659][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.972987][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.976509][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.980661][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.983412][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.983921][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.990609][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.994163][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 98.998833][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.002454][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.005821][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.009551][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.013135][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.016560][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.020530][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.024151][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.027769][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.031203][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.034747][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.038443][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.041850][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.045167][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.049363][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.053584][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.056185][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.059550][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.063192][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.066680][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.070388][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.073888][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.075503][ T7510] loop4: detected capacity change from 0 to 1 [ 99.077541][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.082843][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.086157][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.089900][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.093408][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.095240][ T7510] Dev loop4: unable to read RDB block 1 [ 99.096719][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.099230][ T7510] loop4: unable to read partition table [ 99.102507][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.103829][ T7510] loop4: partition table beyond EOD, truncated [ 99.106859][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.108932][ T7510] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 99.112435][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.117999][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.121566][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.124339][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.126403][ T5149] Dev loop4: unable to read RDB block 1 [ 99.127735][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.130331][ T5149] loop4: unable to read partition table [ 99.132782][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.134707][ T5149] loop4: partition table beyond EOD, truncated [ 99.138317][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.143891][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.147616][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.151452][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.154907][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.159066][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.163116][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.167086][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.170771][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.174269][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.178186][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.181639][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.185159][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.189052][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.192581][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.194596][ T7319] veth0_vlan: entered promiscuous mode [ 99.195988][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.201409][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.204876][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.209371][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.211493][ T7319] veth1_vlan: entered promiscuous mode [ 99.212698][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.217570][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.220628][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.223304][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.225793][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.228892][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.230016][ T7319] veth0_macvtap: entered promiscuous mode [ 99.232279][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.236412][ T7319] veth1_macvtap: entered promiscuous mode [ 99.237077][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.242189][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.245587][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.248996][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.252446][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.252861][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.255695][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.262479][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.264508][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.265530][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.271876][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.275478][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.279106][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.282696][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.286222][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.288586][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.290177][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.295034][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.296101][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.302310][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.306032][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.309191][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.312334][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.315824][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.319419][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.333878][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.346711][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.354417][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.358101][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.359557][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.361627][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.364283][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.367795][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.374593][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.378048][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.381186][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.384548][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.387784][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.390870][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.393999][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.394407][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.397917][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.402829][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.402896][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.408502][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.411822][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.415068][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.417295][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.419163][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.421623][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.424849][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.435554][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.435881][ T42] audit: type=1400 audit(1785614925.337:607): avc: denied { mounton } for pid=7319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 99.441474][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.449414][ T42] audit: type=1400 audit(1785614925.337:608): avc: denied { mounton } for pid=7319 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 99.452933][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.460096][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.463577][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.467112][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.472584][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.473302][ T42] audit: type=1400 audit(1785614925.377:609): avc: denied { bpf } for pid=7520 comm="syz.1.438" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.477349][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.483208][ T42] audit: type=1400 audit(1785614925.377:610): avc: denied { perfmon } for pid=7520 comm="syz.1.438" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.488242][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.501115][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.503868][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.506818][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.510138][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.514050][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.517539][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.520365][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.523011][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.525599][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.528394][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.529628][ T7522] tipc: Enabling of bearer rejected, failed to enable media [ 99.531962][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.537434][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.540756][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.543489][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.546105][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.549245][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.552028][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.554789][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.558229][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.560994][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.563661][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.566278][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.568888][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.573688][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.576488][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.579251][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.581821][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.584399][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.586864][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.590982][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.593541][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.596084][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.599983][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.602778][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.605485][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.609172][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.611815][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.614423][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.616769][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.619677][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.622439][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.624963][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.627647][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.630238][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.632715][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.635293][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.638884][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.641846][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.644561][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.647040][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.649788][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.652325][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.654776][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.657433][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.660012][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.662484][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.665079][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.668333][ T7373] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.681939][ T1497] usb 8-1: USB disconnect, device number 11 [ 99.750669][ T7532] No control pipe specified [ 99.767388][ T5755] Bluetooth: hci1: command tx timeout [ 99.844523][ T7541] capability: warning: `syz.2.444' uses 32-bit capabilities (legacy support in use) [ 99.889362][ T59] IPVS: starting estimator thread 0... [ 99.948980][ T7554] kvm: user requested TSC rate below hardware speed [ 99.977893][ T7551] IPVS: using max 30 ests per chain, 72000 per kthread [ 100.006759][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 100.068077][ T7571] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 100.078494][ T7571] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 100.119280][ T7571] bond4: entered allmulticast mode [ 100.135983][ T7578] syzkaller0: entered promiscuous mode [ 100.138602][ T7578] syzkaller0: entered allmulticast mode [ 100.146566][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 100.244989][ T7580] sysfs: Unknown parameter '' [ 100.391450][ T7612] size and base must be multiples of 4 kiB [ 100.394102][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.394133][ T7612] Tainted: [L]=SOFTLOCKUP [ 100.394141][ T7612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.394153][ T7612] Call Trace: [ 100.394173][ T7612] [ 100.394181][ T7612] dump_stack_lvl+0x100/0x190 [ 100.394344][ T7612] mtrr_del.cold+0x72/0x85 [ 100.394368][ T7612] mtrr_ioctl+0xbc8/0xcf0 [ 100.394403][ T7612] ? __pfx_mtrr_ioctl+0x10/0x10 [ 100.394448][ T7612] ? __pfx_mtrr_ioctl+0x10/0x10 [ 100.394474][ T7612] proc_reg_unlocked_ioctl+0x229/0x320 [ 100.394538][ T7612] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 100.394565][ T7612] __x64_sys_ioctl+0x18e/0x210 [ 100.394601][ T7612] do_syscall_64+0x115/0x870 [ 100.394707][ T7612] ? clear_bhb_loop+0x40/0x90 [ 100.394730][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.394750][ T7612] RIP: 0033:0x7f4e48b9e019 [ 100.394767][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.394784][ T7612] RSP: 002b:00007f4e49a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.394811][ T7612] RAX: ffffffffffffffda RBX: 00007f4e48e26090 RCX: 00007f4e48b9e019 [ 100.394823][ T7612] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 000000000000000a [ 100.394835][ T7612] RBP: 00007f4e48c3500c R08: 0000000000000000 R09: 0000000000000000 [ 100.394849][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.394861][ T7612] R13: 00007f4e48e26128 R14: 00007f4e48e26090 R15: 00007ffef2071e28 [ 100.394888][ T7612] [ 100.658408][ T7625] ublk1: read batch cmd buffer failed [ 100.662340][ T7625] ublk1: read batch cmd buffer failed [ 100.947251][ T1497] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 101.012134][ T7631] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.062848][ T7633] input: syz0 as /devices/virtual/input/input12 [ 101.087338][ T1497] usb 8-1: device descriptor read/64, error -71 [ 101.146270][ T7635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 101.149626][ T7635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 101.170945][ T7637] tipc: Enabled bearer , priority 0 [ 101.174735][ T7637] syzkaller0: entered promiscuous mode [ 101.177745][ T7637] syzkaller0: entered allmulticast mode [ 101.217791][ T7637] efs: cannot read volume header [ 101.225042][ T7636] tipc: Resetting bearer [ 101.256685][ T7636] tipc: Disabling bearer [ 101.347384][ T1497] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 101.477284][ T1497] usb 8-1: device descriptor read/64, error -71 [ 101.559817][ T7664] netlink: 'syz.1.478': attribute type 2 has an invalid length. [ 101.597715][ T1497] usb usb8-port1: attempt power cycle [ 101.649212][ T7670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=7670 comm=syz.1.480 [ 101.686196][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.480'. [ 101.692736][ T7670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.480'. [ 101.837090][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7672 comm=syz.1.481 [ 101.846064][ T7672] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 101.847285][ T5755] Bluetooth: hci1: command tx timeout [ 101.863179][ T7672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.957309][ T1497] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 101.978331][ T1497] usb 8-1: device descriptor read/8, error -71 [ 102.227732][ T1497] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 102.263144][ T1497] usb 8-1: device descriptor read/8, error -71 [ 102.309750][ T7682] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.377652][ T1497] usb usb8-port1: unable to enumerate USB device [ 102.507617][ T34] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 102.563967][ T42] kauditd_printk_skb: 137 callbacks suppressed [ 102.563980][ T42] audit: type=1400 audit(1785614928.467:748): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.633846][ T42] audit: type=1400 audit(1785614928.537:749): avc: denied { ioctl } for pid=7698 comm="syz.2.488" path="socket:[21577]" dev="sockfs" ino=21577 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.647323][ T34] usb 8-1: device descriptor read/64, error -71 [ 102.721045][ T42] audit: type=1400 audit(1785614928.627:750): avc: denied { name_bind } for pid=7704 comm="syz.2.489" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 102.730590][ T42] audit: type=1400 audit(1785614928.627:751): avc: denied { node_bind } for pid=7704 comm="syz.2.489" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.763950][ T42] audit: type=1400 audit(1785614928.667:752): avc: denied { ioctl } for pid=7706 comm="syz.2.490" path="/dev/vbi8" dev="devtmpfs" ino=1030 ioctlcmd=0x563f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.774368][ T42] audit: type=1400 audit(1785614928.677:753): avc: denied { setopt } for pid=7708 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.815310][ T42] audit: type=1400 audit(1785614928.717:754): avc: denied { map_read map_write } for pid=7711 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.824360][ T7714] (syz.1.493,7714,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 102.829414][ T7714] (syz.1.493,7714,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 102.831661][ T7714] (syz.1.493,7714,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.834173][ T7714] (syz.1.493,7714,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 102.897282][ T34] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 102.914385][ T42] audit: type=1400 audit(1785614928.817:755): avc: denied { mount } for pid=7716 comm="syz.1.494" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.924058][ T42] audit: type=1400 audit(1785614928.827:756): avc: denied { search } for pid=7716 comm="syz.1.494" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.933585][ T42] audit: type=1400 audit(1785614928.827:757): avc: denied { search } for pid=7716 comm="syz.1.494" name="usb_gadget" dev="configfs" ino=2241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.027830][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.029194][ T34] usb 8-1: device descriptor read/64, error -71 [ 103.030689][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.030751][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.044594][ T7726] hugetlbfs: Bad value 'x' for mount option 'size' [ 103.044594][ T7726] [ 103.049944][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.052885][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.055781][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 103.059650][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.064039][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.066822][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.069705][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.138125][ T34] usb usb8-port1: attempt power cycle [ 103.237595][ T7748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.245987][ T7751] netlink: 'syz.1.499': attribute type 11 has an invalid length. [ 103.450791][ T7760] binder: 7759:7760 ioctl 80186e82 200000000100 returned -22 [ 103.487648][ T34] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 103.518041][ T34] usb 8-1: device descriptor read/8, error -71 [ 103.847606][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.927478][ T5755] Bluetooth: hci1: command tx timeout [ 104.194202][ T5755] Bluetooth: hci0: Dropping invalid advertising data [ 104.197540][ T5755] Bluetooth: hci0: Malformed LE Event: 0x02 [ 104.488668][ T7817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7817 comm=syz.1.514 [ 104.700589][ T7831] syzkaller0: entered promiscuous mode [ 104.715275][ T7831] syzkaller0: entered allmulticast mode [ 105.189190][ T7852] devtmpfs: Unknown parameter 'nl80211' [ 105.213644][ T1165] Bluetooth: (null): Invalid header checksum [ 105.337661][ T1165] Bluetooth: (null): Invalid header checksum [ 105.440377][ T1164] Bluetooth: (null): Invalid header checksum [ 105.543736][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'. [ 105.550796][ T1164] Bluetooth: (null): Invalid header checksum [ 105.552721][ T7861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.557386][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 105.560674][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 105.571136][ T7861] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 105.658896][ T48] Bluetooth: (null): Invalid header checksum [ 105.774641][ T7804] Bluetooth: (null): Invalid header checksum [ 105.779378][ T7871] kvm: kvm [7870]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 105.782944][ T7871] kvm: kvm [7870]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 105.878487][ T7804] Bluetooth: (null): Invalid header checksum [ 106.005062][ T7877] netlink: 56 bytes leftover after parsing attributes in process `syz.4.531'. [ 106.413156][ T7896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 106.415831][ T7896] UDF-fs: Scanning with blocksize 2048 failed [ 106.421634][ T7896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 106.424683][ T7896] UDF-fs: Scanning with blocksize 4096 failed [ 106.528664][ T7902] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 106.533555][ T7899] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 106.580236][ T7909] trusted_key: syz.1.540 sent an empty control message without MSG_MORE. [ 106.591371][ T7909] vhci_hcd vhci_hcd.0: remove, state 4 [ 106.594276][ T7909] usb usb38: USB disconnect, device number 1 [ 106.649863][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.656073][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.660136][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.664625][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.669630][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.672058][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.678037][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.680703][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.683473][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.686413][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.689117][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.691440][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.694044][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.696168][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.698807][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.701436][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.703678][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.706729][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.709474][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.711635][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.713826][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.716114][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.720617][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.722806][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.725168][ T7909] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 106.737528][ T7909] vhci_hcd vhci_hcd.0: remove, state 4 [ 106.739676][ T7909] usb usb37: USB disconnect, device number 1 [ 106.780567][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.785321][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.787772][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.793023][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.795432][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.797971][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.800492][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.802714][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.804908][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.807644][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.810515][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.812818][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.815341][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.817945][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.820329][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.823665][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.825925][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.829174][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.831724][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.833974][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.836228][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.838778][ T13] vhci_hcd vhci_hcd.0: stop threads [ 106.841011][ T13] vhci_hcd vhci_hcd.0: release socket [ 106.843401][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 106.845791][ T7909] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 106.858005][ T7913] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 106.874598][ T7913] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 106.879885][ T7913] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 106.885870][ T7913] usb usb37: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 106.889890][ T7913] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 106.893403][ T7913] usb usb37: Product: USB/IP Virtual Host Controller [ 106.896203][ T7913] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 106.898947][ T7913] usb usb37: SerialNumber: vhci_hcd.0 [ 106.918754][ T7913] hub 37-0:1.0: USB hub found [ 106.925334][ T7913] hub 37-0:1.0: 8 ports detected [ 106.957382][ T7913] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 106.965041][ T7913] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 38 [ 106.968896][ T7913] usb usb38: We don't know the algorithms for LPM for this host, disabling LPM. [ 106.976427][ T7913] usb usb38: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 106.980163][ T7913] usb usb38: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 106.983055][ T7913] usb usb38: Product: USB/IP Virtual Host Controller [ 106.985626][ T7913] usb usb38: Manufacturer: Linux syzkaller vhci_hcd [ 106.989343][ T7913] usb usb38: SerialNumber: vhci_hcd.0 [ 107.000671][ T7913] hub 38-0:1.0: USB hub found [ 107.003197][ T7913] hub 38-0:1.0: 8 ports detected [ 107.284777][ T7928] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 107.289347][ T7928] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 107.294953][ T7928] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 107.301960][ T7928] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.312081][ T7928] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.473992][ T7938] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.569445][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 107.569456][ T42] audit: type=1400 audit(1785614933.477:848): avc: denied { bind } for pid=7946 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.586601][ T42] audit: type=1400 audit(1785614933.487:849): avc: denied { write } for pid=7948 comm="syz.1.555" name="configs" dev="configfs" ino=11376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.596808][ T42] audit: type=1400 audit(1785614933.497:850): avc: denied { write } for pid=7948 comm="syz.1.555" name="configs" dev="configfs" ino=11376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.606766][ T42] audit: type=1400 audit(1785614933.497:851): avc: denied { remove_name } for pid=7948 comm="syz.1.555" name="c.1" dev="configfs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.616604][ T42] audit: type=1400 audit(1785614933.497:852): avc: denied { rmdir } for pid=7948 comm="syz.1.555" name="c.1" dev="configfs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.637982][ T42] audit: type=1400 audit(1785614933.547:853): avc: denied { read } for pid=7951 comm="syz.1.556" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.647920][ T42] audit: type=1400 audit(1785614933.547:854): avc: denied { open } for pid=7951 comm="syz.1.556" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.659261][ T42] audit: type=1400 audit(1785614933.557:855): avc: denied { ioctl } for pid=7951 comm="syz.1.556" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.766709][ T42] audit: type=1400 audit(1785614933.667:856): avc: denied { create } for pid=7956 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.773343][ T42] audit: type=1400 audit(1785614933.677:857): avc: denied { connect } for pid=7956 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.825522][ T7962] netlink: 'syz.3.560': attribute type 3 has an invalid length. [ 107.829015][ T7962] netlink: 'syz.3.560': attribute type 6 has an invalid length. [ 107.888568][ T7969] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 107.904513][ T7969] syzkaller1: entered promiscuous mode [ 107.906892][ T7969] syzkaller1: entered allmulticast mode [ 108.071500][ T7985] __nla_validate_parse: 7 callbacks suppressed [ 108.071517][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 108.087437][ T59] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 108.089807][ T7985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7985 comm=syz.3.569 [ 108.239455][ T59] usb 9-1: not running at top speed; connect to a high speed hub [ 108.246908][ T59] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.254504][ T59] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 108.259227][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.263600][ T59] usb 9-1: Product: syz [ 108.265755][ T59] usb 9-1: Manufacturer: syz [ 108.271674][ T59] usb 9-1: SerialNumber: syz [ 108.278276][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 108.280930][ T59] oti6858 9-1:1.0: oti6858 converter detected [ 108.295299][ T59] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 108.303050][ T7999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.314993][ T7999] batman_adv: batadv0: Adding interface: gretap1 [ 108.317569][ T7999] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.325626][ T7999] batman_adv: batadv0: Interface activated: gretap1 [ 108.564113][ T8017] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 108.657712][ T8022] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 108.744658][ T8027] ublk_ctrl_add_dev: dev id not match 4294967295 2 [ 108.834589][ T8029] Line length is too long: Should be less than 4094 [ 108.871258][ T9] usb 9-1: USB disconnect, device number 2 [ 108.887716][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 108.893288][ T9] oti6858 9-1:1.0: device disconnected [ 109.053210][ T8040] xt_l2tp: missing protocol rule (udp|l2tpip) [ 109.058441][ T8042] xt_l2tp: missing protocol rule (udp|l2tpip) [ 109.182110][ T8046] kvm: kvm [8045]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 109.414469][ T8051] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 109.428451][ T8053] netlink: 'syz.4.588': attribute type 11 has an invalid length. [ 109.431009][ T8053] netlink: 224 bytes leftover after parsing attributes in process `syz.4.588'. [ 109.456012][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'. [ 109.720281][ T5850] Process accounting resumed [ 109.729293][ T8079] evm: overlay not supported [ 109.847255][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 110.007251][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 110.137266][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 110.243973][ T8093] unsupported nla_type 62499 [ 110.287378][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 110.289926][ T9] usb usb6-port1: attempt power cycle [ 110.647271][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 110.667636][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 110.797711][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 110.817664][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 110.819651][ T9] usb usb6-port1: unable to enumerate USB device [ 110.852515][ T8119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.856292][ T8119] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 110.861119][ T8119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.867072][ T8120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.870702][ T8120] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 110.875454][ T8120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 112.168953][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.418555][ T8153] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.586272][ T8155] ehci-pci 0000:00:1d.7: remove, state 1 [ 112.592477][ T8155] usb usb2: USB disconnect, device number 1 [ 112.595292][ T8155] usb 2-1: USB disconnect, device number 2 [ 112.726773][ T8155] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 112.829413][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.895261][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 112.895274][ T42] audit: type=1400 audit(1785614938.797:921): avc: denied { execute } for pid=8157 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.905245][ T42] audit: type=1400 audit(1785614938.797:922): avc: denied { execute_no_trans } for pid=8157 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.943910][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.962881][ T8159] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 112.991594][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.997950][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.002600][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.006332][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.011591][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.018808][ T34] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 113.041666][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.046922][ T42] audit: type=1400 audit(1785614938.947:923): avc: denied { mounton } for pid=8160 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 113.120461][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.203016][ T34] usb 1-1: not running at top speed; connect to a high speed hub [ 113.230097][ T34] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 113.238636][ T34] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 113.244496][ T34] usb 1-1: Product: QEMU USB Tablet [ 113.246662][ T34] usb 1-1: Manufacturer: QEMU [ 113.257751][ T34] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 113.303785][ T42] audit: type=1400 audit(1785614939.207:924): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 113.310221][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input14 [ 113.319482][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 113.371618][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 113.376042][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 113.406488][ T13] bridge_slave_1: left allmulticast mode [ 113.409816][ T13] bridge_slave_1: left promiscuous mode [ 113.412304][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.421734][ T34] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 113.428228][ T13] bridge_slave_0: left allmulticast mode [ 113.430033][ T13] bridge_slave_0: left promiscuous mode [ 113.433206][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.471512][ T8156] usb 1-1: USB disconnect, device number 2 [ 113.750882][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.758040][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.762749][ T13] bond0 (unregistering): Released all slaves [ 113.793537][ T8185] netlink: 168 bytes leftover after parsing attributes in process `syz.2.629'. [ 113.796760][ T8185] netlink: 168 bytes leftover after parsing attributes in process `syz.2.629'. [ 113.851488][ T13] tipc: Left network mode [ 113.907949][ T8156] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 113.940470][ T8156] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 113.952917][ T8156] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 113.967915][ T8156] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 113.979782][ T42] audit: type=1400 audit(1785614939.887:925): avc: denied { write } for pid=8192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.991930][ T8156] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 113.996160][ T8156] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 113.999710][ T8156] usb usb2: Product: EHCI Host Controller [ 114.002274][ T8156] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 114.004824][ T8156] usb usb2: SerialNumber: 0000:00:1d.7 [ 114.046554][ T42] audit: type=1400 audit(1785614939.947:926): avc: denied { write } for pid=8195 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.054030][ T8156] hub 2-0:1.0: USB hub found [ 114.062099][ T8156] hub 2-0:1.0: 6 ports detected [ 114.110313][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 114.153388][ T8156] hub 1-0:1.0: USB hub found [ 114.158491][ T8156] hub 1-0:1.0: 2 ports detected [ 114.218869][ T8156] hub 3-0:1.0: USB hub found [ 114.226654][ T8156] hub 3-0:1.0: 2 ports detected [ 114.240375][ T13] hsr_slave_0: left promiscuous mode [ 114.248487][ T13] hsr_slave_1: left promiscuous mode [ 114.252500][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.254035][ T42] audit: type=1400 audit(1785614940.157:927): avc: denied { write } for pid=8201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.254754][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.269830][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.272218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.278849][ T13] veth1_macvtap: left promiscuous mode [ 114.281564][ T13] veth0_macvtap: left promiscuous mode [ 114.283497][ T13] veth1_vlan: left promiscuous mode [ 114.285307][ T13] veth0_vlan: left promiscuous mode [ 114.309555][ T8156] hub 4-0:1.0: USB hub found [ 114.314695][ T8156] hub 4-0:1.0: 2 ports detected [ 114.324018][ T42] audit: type=1400 audit(1785614940.227:928): avc: denied { write } for pid=8204 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.367556][ T5850] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 114.447220][ T42] audit: type=1400 audit(1785614940.347:929): avc: denied { map } for pid=8206 comm="syz.1.631" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.534029][ T13] team0 (unregistering): Port device team_slave_1 removed [ 114.542503][ T13] team0 (unregistering): Port device team_slave_0 removed [ 114.550743][ T5850] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 114.553634][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 114.556270][ T5850] usb 2-1: Product: QEMU USB Tablet [ 114.558960][ T5850] usb 2-1: Manufacturer: QEMU [ 114.561223][ T5850] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 114.600621][ T5850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input15 [ 114.642810][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 114.686068][ T5850] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 114.710033][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.712437][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.715608][ T8160] bridge_slave_0: entered allmulticast mode [ 114.720368][ T8160] bridge_slave_0: entered promiscuous mode [ 114.724960][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.728504][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.731698][ T8160] bridge_slave_1: entered allmulticast mode [ 114.741146][ T8160] bridge_slave_1: entered promiscuous mode [ 114.796970][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.803422][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.808522][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 114.811398][ T8221] netlink: 'syz.1.634': attribute type 7 has an invalid length. [ 114.813989][ T8221] netlink: 'syz.1.634': attribute type 8 has an invalid length. [ 114.816366][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 114.836566][ T8160] team0: Port device team_slave_0 added [ 114.840367][ T8160] team0: Port device team_slave_1 added [ 114.885197][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.897468][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.907733][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.918129][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.920323][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.928802][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.938341][ T42] audit: type=1400 audit(1785614940.837:930): avc: denied { write } for pid=8223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.964684][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.040226][ T8160] hsr_slave_0: entered promiscuous mode [ 115.042927][ T8160] hsr_slave_1: entered promiscuous mode [ 115.046124][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 115.047652][ T5755] Bluetooth: hci2: command tx timeout [ 115.133658][ T13] IPVS: stop unused estimator thread 0... [ 115.225379][ T8160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.232961][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.236179][ T8160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.243134][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.246745][ T8160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.251629][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.255070][ T8160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.264175][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.279853][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 115.297193][ T7257] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 115.331763][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.346872][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.354846][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.357903][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.371697][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.373998][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.450489][ T7257] usb 6-1: Using ep0 maxpacket: 8 [ 115.454822][ T7257] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 115.458233][ T7257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.464674][ T7257] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 115.473463][ T7257] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 115.649602][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.807559][ T8160] veth0_vlan: entered promiscuous mode [ 115.820519][ T8160] veth1_vlan: entered promiscuous mode [ 115.848589][ T8160] veth0_macvtap: entered promiscuous mode [ 115.854230][ T8160] veth1_macvtap: entered promiscuous mode [ 115.869443][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.876229][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.967320][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.970316][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.977712][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.980220][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.008301][ T5589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.012824][ T5589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.015880][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.018573][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.097043][ T8270] devpts: Unknown parameter './file0' [ 116.235458][ T9] usb 6-1: USB disconnect, device number 10 [ 116.261561][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 116.266017][ T9] kobil_sct 6-1:1.0: device disconnected [ 116.282244][ T8277] /dev/nbd5: Can't open blockdev [ 116.298288][ T8277] libceph: Failed to parse secret: -22 [ 116.302427][ T8277] policy can only be matched on NF_INET_PRE_ROUTING [ 116.302442][ T8277] unable to load match [ 116.493184][ T8284] netlink: 'syz.5.640': attribute type 58 has an invalid length. [ 116.718703][ T8289] netlink: 'syz.5.642': attribute type 1 has an invalid length. [ 116.895576][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 116.901591][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 116.905000][ T8303] netlink: 'syz.2.645': attribute type 7 has an invalid length. [ 116.909694][ T8303] netlink: 'syz.2.645': attribute type 13 has an invalid length. [ 117.005093][ T8319] SELinux: policydb version -1387064283 does not match my version range 15-35 [ 117.009393][ T8319] SELinux: failed to load policy [ 117.043360][ T8322] ima: policy update failed [ 117.083990][ T8329] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 117.086666][ T8329] netlink: 220 bytes leftover after parsing attributes in process `syz.5.652'. [ 117.127370][ T5755] Bluetooth: hci2: command tx timeout [ 117.717579][ T8340] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 117.733692][ T8340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.753395][ T8340] bond5: (slave gretap1): making interface the new active one [ 117.758126][ T8340] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 117.775921][ T8307] ceph: No mds server is up or the cluster is laggy [ 117.789745][ T8340] bond5 (unregistering): (slave gretap1): Releasing active interface [ 117.799150][ T8340] bond5 (unregistering): Released all slaves [ 117.822573][ T5755] Bluetooth: hci3: unexpected event for opcode 0x041b [ 117.950179][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 117.950194][ T42] audit: type=1400 audit(1785614943.857:957): avc: denied { append } for pid=8348 comm="syz.2.656" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.983063][ T8349] input: syz0 as /devices/virtual/input/input16 [ 118.075710][ T42] audit: type=1400 audit(1785614943.977:958): avc: denied { create } for pid=8352 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.090551][ T42] audit: type=1400 audit(1785614943.997:959): avc: denied { write } for pid=8352 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.094243][ T8353] cgroup: subsys name conflicts with all [ 118.170400][ T8356] ALSA: mixer_oss: invalid OSS volume '' [ 118.176251][ T8356] ALSA: mixer_oss: invalid OSS volume '@' [ 118.183439][ T8356] ALSA: mixer_oss: invalid OSS volume '|' [ 118.186463][ T8356] ALSA: mixer_oss: invalid OSS volume '' [ 118.193705][ T42] audit: type=1400 audit(1785614944.097:960): avc: denied { read } for pid=8355 comm="syz.5.659" name="host_addr" dev="configfs" ino=25334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 118.205161][ T42] audit: type=1800 audit(1785614944.097:961): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.659" name="host_addr" dev="configfs" ino=25334 res=0 errno=0 [ 118.216224][ T8358] netlink: 'syz.2.660': attribute type 12 has an invalid length. [ 118.278055][ T42] audit: type=1400 audit(1785614944.177:962): avc: denied { read } for pid=8361 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.413120][ T8365] batman_adv: batadv0: Adding interface: macvtap1 [ 118.415346][ T8365] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.424267][ T8365] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 118.476073][ T8365] tipc: Enabling of bearer rejected, media not registered [ 118.513191][ T42] audit: type=1400 audit(1785614944.417:963): avc: denied { open } for pid=8369 comm="syz.5.664" path="/dev/ptyqe" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 118.537274][ T42] audit: type=1400 audit(1785614944.417:964): avc: denied { ioctl } for pid=8369 comm="syz.5.664" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 118.616520][ T5850] IPVS: starting estimator thread 0... [ 118.707782][ T8377] IPVS: using max 44 ests per chain, 105600 per kthread [ 118.714442][ T8379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.847001][ T42] audit: type=1326 audit(1785614944.747:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.5.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cfb9e019 code=0x7ffc0000 [ 118.855969][ T42] audit: type=1326 audit(1785614944.757:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.5.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cfb9e019 code=0x7ffc0000 [ 118.934074][ T8385] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 119.021108][ T8391] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 119.021295][ T8389] Mass Storage Function, version: 2009/09/11 [ 119.026929][ T8389] LUN: removable file: (no medium) [ 119.047612][ T8389] macvtap2: entered promiscuous mode [ 119.050007][ T8389] macvtap2: entered allmulticast mode [ 119.199626][ T8399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8399 comm=syz.5.674 [ 119.209667][ T5755] Bluetooth: hci2: command tx timeout [ 119.235182][ T8399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.254012][ T8401] binder: Unknown parameter 'mao' [ 119.445143][ T8408] team0: Port device vlan0 added [ 119.490096][ T8411] vivid-000: ================= START STATUS ================= [ 119.494540][ T8411] vivid-000: Test Pattern: 75% Colorbar [ 119.497235][ T8411] vivid-000: Fill Percentage of Frame: 100 [ 119.499689][ T8411] vivid-000: Horizontal Movement: No Movement [ 119.502240][ T8411] vivid-000: Vertical Movement: No Movement [ 119.510764][ T8411] vivid-000: OSD Text Mode: All [ 119.516348][ T8411] vivid-000: Show Border: false [ 119.521870][ T8411] vivid-000: Show Square: false [ 119.527191][ T8411] vivid-000: Sensor Flipped Horizontally: false [ 119.529976][ T8411] vivid-000: Sensor Flipped Vertically: false [ 119.532717][ T8411] vivid-000: Insert SAV Code in Image: true [ 119.535291][ T8411] vivid-000: Insert EAV Code in Image: false [ 119.539969][ T8411] vivid-000: Insert Video Guard Band: false [ 119.543339][ T8411] vivid-000: Reduced Framerate: false [ 119.545806][ T8411] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 119.550021][ T8411] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 119.553380][ T8411] vivid-000: Enable Capture Cropping: true grabbed [ 119.556229][ T8411] vivid-000: Enable Capture Composing: false grabbed [ 119.560638][ T8411] vivid-000: Enable Capture Scaler: true grabbed [ 119.563405][ T8411] vivid-000: Timestamp Source: End of Frame [ 119.565919][ T8411] vivid-000: Colorspace: sRGB [ 119.568033][ T8411] vivid-000: Transfer Function: Default [ 119.570458][ T8411] vivid-000: Y'CbCr Encoding: Default [ 119.572766][ T8411] vivid-000: HSV Encoding: Hue 0-179 [ 119.574993][ T8411] vivid-000: Quantization: Default [ 119.577215][ T8411] vivid-000: Apply Alpha To Red Only: false [ 119.579664][ T8411] vivid-000: Standard Aspect Ratio: 4x3 [ 119.581555][ T8411] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 119.584515][ T8411] vivid-000: DV Timings: 640x480p59 inactive [ 119.586732][ T8411] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 119.589191][ T8411] vivid-000: Maximum EDID Blocks: 1 [ 119.591401][ T8411] vivid-000: Limited RGB Range (16-235): false [ 119.593607][ T8411] vivid-000: Rx RGB Quantization Range: Automatic [ 119.596318][ T8411] vivid-000: Power Present: 0x00000001 [ 119.598845][ T8411] tpg source WxH: 1920x1080 (Luma) [ 119.600966][ T8411] tpg field: 1 [ 119.602557][ T8411] tpg crop: (0,0)/1920x1080 [ 119.604409][ T8411] tpg compose: (0,0)/1920x1080 [ 119.607514][ T8411] tpg colorspace: 8 [ 119.609081][ T8411] tpg transfer function: 0/2 [ 119.610931][ T8411] tpg quantization: 0/1 [ 119.612714][ T8411] tpg RGB range: 0/2 [ 119.614345][ T8411] vivid-000: ================== END STATUS ================== [ 119.845762][ T8424] xt_cgroup: path and classid specified [ 120.765668][ T8432] __nla_validate_parse: 3 callbacks suppressed [ 120.765686][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.5.684'. [ 120.773926][ T8432] loop5: detected capacity change from 0 to 7 [ 120.782459][ T8432] Dev loop5: unable to read RDB block 7 [ 120.784745][ T8432] loop5: unable to read partition table [ 120.788924][ T8432] loop5: partition table beyond EOD, truncated [ 120.795276][ T8432] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 120.936610][ T8441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31283 sclass=netlink_route_socket pid=8441 comm=syz.5.687 [ 120.955150][ T8440] /dev/sr0: Can't open blockdev [ 121.002960][ T8443] FAULT_INJECTION: forcing a failure. [ 121.002960][ T8443] name failslab, interval 1, probability 0, space 0, times 1 [ 121.008358][ T8443] CPU: 3 UID: 0 PID: 8443 Comm: syz.1.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.008387][ T8443] Tainted: [L]=SOFTLOCKUP [ 121.008393][ T8443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.008405][ T8443] Call Trace: [ 121.008424][ T8443] [ 121.008432][ T8443] dump_stack_lvl+0x100/0x190 [ 121.008523][ T8443] should_fail_ex.cold+0x5/0xa [ 121.008546][ T8443] should_failslab+0xc2/0x120 [ 121.008577][ T8443] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 121.008598][ T8443] ? __alloc_skb+0x5b7/0x710 [ 121.008673][ T8443] ? __alloc_skb+0x140/0x710 [ 121.008698][ T8443] __alloc_skb+0x140/0x710 [ 121.008718][ T8443] ? __alloc_skb+0x5b7/0x710 [ 121.008739][ T8443] ? __pfx___alloc_skb+0x10/0x10 [ 121.008759][ T8443] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 121.008805][ T8443] ? sock_has_perm+0x25a/0x2f0 [ 121.008835][ T8443] ? __pfx_sock_has_perm+0x10/0x10 [ 121.008860][ T8443] netlink_alloc_large_skb+0x69/0x150 [ 121.008893][ T8443] netlink_sendmsg+0x680/0xda0 [ 121.008916][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.008938][ T8443] ? selinux_socket_sendmsg+0x198/0x2f0 [ 121.008967][ T8443] ____sys_sendmsg+0xa4d/0xbe0 [ 121.008994][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.009016][ T8443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.009054][ T8443] ___sys_sendmsg+0x190/0x1e0 [ 121.009074][ T8443] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.009093][ T8443] ? __lock_acquire+0x49f/0x1a40 [ 121.009123][ T8443] ? get_pid_task+0x106/0x250 [ 121.009167][ T8443] __sys_sendmsg+0x160/0x210 [ 121.009191][ T8443] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.009228][ T8443] do_syscall_64+0x115/0x870 [ 121.009307][ T8443] ? clear_bhb_loop+0x40/0x90 [ 121.009328][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.009346][ T8443] RIP: 0033:0x7fd133f9e019 [ 121.009362][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.009379][ T8443] RSP: 002b:00007fd134d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.009406][ T8443] RAX: ffffffffffffffda RBX: 00007fd134225fa0 RCX: 00007fd133f9e019 [ 121.009418][ T8443] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 121.009429][ T8443] RBP: 00007fd134d86090 R08: 0000000000000000 R09: 0000000000000000 [ 121.009440][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.009451][ T8443] R13: 00007fd134226038 R14: 00007fd134225fa0 R15: 00007ffef626d828 [ 121.009476][ T8443] [ 121.291431][ T5755] Bluetooth: hci2: command tx timeout [ 121.400545][ T8464] netlink: 80 bytes leftover after parsing attributes in process `syz.2.697'. [ 121.492723][ T8468] netlink: 80 bytes leftover after parsing attributes in process `syz.2.697'. [ 121.880776][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 121.903483][ T8485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.918984][ T8485] macvlan2: entered promiscuous mode [ 121.921261][ T8485] macvlan2: entered allmulticast mode [ 121.924505][ T8485] bond1: (slave macvlan2): Opening slave failed [ 122.176221][ T8494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.706'. [ 122.229481][ T8500] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.379692][ T8508] netlink: 180 bytes leftover after parsing attributes in process `syz.1.711'. [ 122.383748][ T8508] netlink: 180 bytes leftover after parsing attributes in process `syz.1.711'. [ 122.597954][ T8515] syzkaller0: entered promiscuous mode [ 122.600313][ T8515] syzkaller0: entered allmulticast mode [ 122.606401][ T5755] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 123.019981][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 123.019994][ T42] audit: type=1400 audit(1785614948.927:998): avc: denied { create } for pid=8548 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.256286][ T8564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.264271][ T8564] hfsplus: unable to find HFS+ superblock [ 123.344698][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.730'. [ 123.345542][ T42] audit: type=1400 audit(1785614949.247:999): avc: denied { setopt } for pid=8567 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.682533][ T8581] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.940149][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 124.015436][ T42] audit: type=1400 audit(1785614949.917:1000): avc: denied { write } for pid=8588 comm="syz.1.737" name="dlm" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.025902][ T42] audit: type=1800 audit(1785614949.927:1001): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.737" name="cluster_name" dev="configfs" ino=28695 res=0 errno=0 [ 124.036702][ T42] audit: type=1400 audit(1785614949.937:1002): avc: denied { write } for pid=8588 comm="syz.1.737" name="comms" dev="configfs" ino=28694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.045641][ T42] audit: type=1800 audit(1785614949.947:1003): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.737" name="local" dev="configfs" ino=28697 res=0 errno=0 [ 124.321123][ T8592] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.550645][ T42] audit: type=1400 audit(1785614950.457:1004): avc: denied { ioctl } for pid=8593 comm="syz.1.739" path="socket:[28714]" dev="sockfs" ino=28714 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.560796][ T42] audit: type=1400 audit(1785614950.457:1005): avc: denied { write } for pid=8593 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.723073][ T42] audit: type=1400 audit(1785614950.627:1006): avc: denied { accept } for pid=8598 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.985018][ T42] audit: type=1400 audit(1785614950.887:1007): avc: denied { write } for pid=8608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.207412][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.207477][ T5099] Bluetooth: hci4: command 0x1003 tx timeout syzkaller syzkaller login: [ 126.588205][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.595215][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.601054][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.605861][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.609768][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.978783][ T8267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.059665][ T8725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.770'. [ 127.069089][ T8725] netlink: 'syz.1.770': attribute type 13 has an invalid length. [ 127.091469][ T8725] gretap0: refused to change device tx_queue_len [ 127.093499][ T8725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.147855][ T8267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.163887][ T8736] binder: BINDER_SET_CONTEXT_MGR already set [ 127.168240][ T8736] binder: 8735:8736 ioctl 4018620d 200000004a80 returned -16 [ 127.277020][ T8745] can: request_module (can-proto-0) failed. [ 127.281551][ T8740] netlink: 'syz.5.772': attribute type 11 has an invalid length. [ 127.297822][ T8267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.332509][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.335013][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.338205][ T8680] bridge_slave_0: entered allmulticast mode [ 127.343644][ T8680] bridge_slave_0: entered promiscuous mode [ 127.366901][ T8267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.380963][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.386700][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.390257][ T8680] bridge_slave_1: entered allmulticast mode [ 127.395071][ T8680] bridge_slave_1: entered promiscuous mode [ 127.429423][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.436116][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.466197][ T8680] team0: Port device team_slave_0 added [ 127.473506][ T8680] team0: Port device team_slave_1 added [ 127.499297][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.502217][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.512564][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.539262][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.542408][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.552133][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.615107][ T8680] hsr_slave_0: entered promiscuous mode [ 127.618395][ T8680] hsr_slave_1: entered promiscuous mode [ 127.621296][ T8680] debugfs: 'hsr0' already exists in 'hsr' [ 127.623758][ T8680] Cannot create hsr debugfs directory [ 127.684719][ T8267] bridge_slave_1: left allmulticast mode [ 127.684743][ T8267] bridge_slave_1: left promiscuous mode [ 127.684936][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.692164][ T8267] bridge_slave_0: left allmulticast mode [ 127.696334][ T8267] bridge_slave_0: left promiscuous mode [ 127.696503][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.860818][ T8267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.866813][ T8267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.873379][ T8267] bond0 (unregistering): Released all slaves [ 128.060211][ T8769] netlink: 'syz.5.777': attribute type 10 has an invalid length. [ 128.091525][ T8774] tmpfs: Bad value for 'mpol' [ 128.113693][ T8776] netlink: 14 bytes leftover after parsing attributes in process `syz.5.777'. [ 128.157581][ T8769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.163360][ T8769] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 128.186665][ T8776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.191567][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 128.191576][ T42] audit: type=1400 audit(1785614954.097:1037): avc: denied { create } for pid=8767 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.202068][ T42] audit: type=1400 audit(1785614954.107:1038): avc: denied { ioctl } for pid=8767 comm="syz.5.777" path="socket:[28199]" dev="sockfs" ino=28199 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.202445][ T8776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.210717][ T42] audit: type=1400 audit(1785614954.107:1039): avc: denied { read } for pid=8767 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.226043][ T42] audit: type=1400 audit(1785614954.127:1040): avc: denied { write } for pid=8779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.234214][ T8776] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 128.242042][ T8776] bond0 (unregistering): Released all slaves [ 128.304931][ T42] audit: type=1400 audit(1785614954.207:1041): avc: denied { write } for pid=8782 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.427383][ T42] audit: type=1400 audit(1785614954.337:1042): avc: denied { bind } for pid=8786 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.431966][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 128.436434][ T42] audit: type=1400 audit(1785614954.337:1043): avc: denied { read } for pid=8786 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.511199][ T8267] hsr_slave_0: left promiscuous mode [ 128.515745][ T8267] hsr_slave_1: left promiscuous mode [ 128.522096][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.527612][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.535838][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.547215][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.572222][ T42] audit: type=1400 audit(1785614954.477:1044): avc: denied { nlmsg_read } for pid=8797 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.580822][ T42] audit: type=1400 audit(1785614954.477:1045): avc: denied { read } for pid=8797 comm="syz.1.783" path="socket:[29909]" dev="sockfs" ino=29909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.581459][ T8267] veth1_macvtap: left promiscuous mode [ 128.600748][ T8267] veth0_macvtap: left promiscuous mode [ 128.603179][ T8267] veth1_vlan: left promiscuous mode [ 128.605368][ T8267] veth0_vlan: left promiscuous mode [ 128.643498][ T8803] smbdirect: ib_dev[syz1] removed [ 128.657223][ T5755] Bluetooth: hci4: command tx timeout [ 128.661413][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 128.679839][ T42] audit: type=1400 audit(1785614954.587:1046): avc: denied { bind } for pid=8805 comm="syz.5.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.893258][ T8267] team0 (unregistering): Port device team_slave_1 removed [ 128.912446][ T8267] team0 (unregistering): Port device team_slave_0 removed [ 129.008320][ T8804] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 129.090074][ T8680] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.105911][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.111328][ T8680] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.132423][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.158026][ T8680] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.166957][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.171369][ T8680] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.205529][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.215252][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.786'. [ 129.262606][ T8827] overlayfs: empty lowerdir [ 129.322078][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 129.407493][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.419627][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.427448][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.430768][ T7027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.445280][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.448308][ T7027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.460651][ T8267] IPVS: stop unused estimator thread 0... [ 129.634198][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 129.871635][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.945520][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 130.136519][ T8680] veth0_vlan: entered promiscuous mode [ 130.143976][ T8680] veth1_vlan: entered promiscuous mode [ 130.166306][ T8680] veth0_macvtap: entered promiscuous mode [ 130.171813][ T8680] veth1_macvtap: entered promiscuous mode [ 130.185480][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.195669][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.205629][ T8267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.211782][ T8267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.269196][ T5589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.297484][ T5589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.369628][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.373385][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.402240][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.410556][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.483878][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.798'. [ 130.493932][ T8898] bridge_slave_0: left allmulticast mode [ 130.495847][ T8898] bridge_slave_0: left promiscuous mode [ 130.497895][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.506795][ T8898] bridge_slave_1: left allmulticast mode [ 130.509133][ T8898] bridge_slave_1: left promiscuous mode [ 130.511045][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.524617][ T8898] bond0: (slave bond_slave_0): Releasing backup interface [ 130.530875][ T8898] bond0: (slave bond_slave_1): Releasing backup interface [ 130.536729][ T8898] team0: Port device team_slave_0 removed [ 130.544194][ T8898] team0: Port device team_slave_1 removed [ 130.546502][ T8898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.549340][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.552593][ T8898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.554939][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.560352][ T8898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.569430][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 130.577632][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 130.710730][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.800'. [ 130.727814][ T5755] Bluetooth: hci4: command tx timeout [ 130.799967][ T8907] I!q: renamed from lo [ 131.115081][ T8934] ima: policy update completed [ 131.435419][ T8964] bridge_slave_0: left allmulticast mode [ 131.438073][ T8964] bridge_slave_0: left promiscuous mode [ 131.443579][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.450565][ T8964] bridge_slave_1: left allmulticast mode [ 131.452908][ T8964] bridge_slave_1: left promiscuous mode [ 131.455397][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.489937][ T8964] team0: Port device team_slave_0 removed [ 131.501944][ T8964] team0: Port device team_slave_1 removed [ 131.506575][ T8964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.511720][ T8964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.515129][ T8964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.518579][ T8964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.522663][ T8964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.661025][ T8971] lo speed is unknown, defaulting to 1000 [ 131.668707][ T8971] lo speed is unknown, defaulting to 1000 [ 131.674621][ T8971] lo speed is unknown, defaulting to 1000 [ 131.677892][ T7255] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 131.686946][ T8971] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 131.694523][ T8971] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 131.704752][ T8971] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 131.721585][ T8971] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.755035][ T8971] lo speed is unknown, defaulting to 1000 [ 131.763229][ T8971] lo speed is unknown, defaulting to 1000 [ 131.769742][ T8971] lo speed is unknown, defaulting to 1000 [ 131.773974][ T8971] lo speed is unknown, defaulting to 1000 [ 131.897261][ T41] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 132.057374][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 132.062685][ T41] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 132.070862][ T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.076169][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.080213][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.083599][ T41] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.087997][ T41] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.091216][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.412234][ T8998] openvswitch: netlink: Missing valid actions attribute. [ 132.414982][ T8998] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.652347][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.654847][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.817253][ T5099] Bluetooth: hci4: command tx timeout [ 132.867793][ T8975] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 132.871207][ T8975] overlayfs: overlapping lowerdir path [ 133.001163][ T9020] veth1_to_batadv: entered promiscuous mode [ 133.003913][ T9019] Failed to get privilege flags for destination (handle=0x2:0xfffffffc) [ 133.024605][ T9018] veth1_to_batadv: left promiscuous mode [ 133.075755][ T9026] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.092831][ T9026] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 133.171725][ T9029] ALSA: seq fatal error: cannot create timer (-19) [ 133.248660][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 133.248676][ T42] audit: type=1800 audit(1785614959.157:1117): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 133.288781][ T42] audit: type=1400 audit(1785614959.197:1118): avc: denied { listen } for pid=9031 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.296749][ T42] audit: type=1400 audit(1785614959.197:1119): avc: denied { accept } for pid=9031 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.330334][ T42] audit: type=1800 audit(1785614959.237:1120): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 133.350617][ T42] audit: type=1800 audit(1785614959.257:1121): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174170 res=0 errno=0 [ 133.486332][ T9035] overlayfs: failed to resolve './file2': -2 [ 134.255525][ T42] audit: type=1800 audit(1785614960.157:1122): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 134.293947][ T42] audit: type=1400 audit(1785614960.197:1123): avc: denied { append } for pid=9040 comm="syz.1.834" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.326720][ T9041] ipvlan0: entered promiscuous mode [ 134.343254][ T9041] ipvlan0: entered allmulticast mode [ 134.348379][ T9041] bond1: entered allmulticast mode [ 134.352242][ T9041] geneve2: entered allmulticast mode [ 134.361011][ T9041] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 134.485514][ T42] audit: type=1800 audit(1785614960.387:1124): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 134.592160][ T9] usb 10-1: USB disconnect, device number 2 [ 134.616199][ T42] audit: type=1800 audit(1785614960.517:1125): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 134.657707][ T42] audit: type=1800 audit(1785614960.557:1126): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 134.887322][ T5099] Bluetooth: hci4: command 0x0419 tx timeout [ 134.894114][ T9057] syzkaller0: entered promiscuous mode [ 134.895847][ T9057] syzkaller0: entered allmulticast mode [ 134.919286][ T9057] Line length is too long: Should be less than 4094 [ 135.236945][ T9069] syz.1.844: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 135.401614][ T9023] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.424432][ T9023] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 135.640294][ T9091] ima: policy update failed [ 135.978717][ T9103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.010185][ T5755] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 136.256122][ T9119] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 136.369026][ T9125] ip6erspan0: entered allmulticast mode [ 136.395529][ T9125] nicvf0: renamed from team0 (while UP) [ 136.416991][ T9125] nicvf0: Cannot enslave team device to itself [ 136.420511][ T9125] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 136.436011][ T9027] syz.6.830 (9027): drop_caches: 2 [ 136.573774][ T9132] netlink: 'syz.1.862': attribute type 2 has an invalid length. [ 136.591677][ T9132] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 136.620741][ T9132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.632002][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 136.640575][ T9132] netlink: 52 bytes leftover after parsing attributes in process `syz.1.862'. [ 136.695070][ T9137] CacheFiles: Empty directory specified [ 136.752899][ T9139] loop4: detected capacity change from 0 to 2640 [ 136.768400][ T9139] buffer_io_error: 248 callbacks suppressed [ 136.768411][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.780801][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.787275][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.797255][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.802458][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.817370][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.820916][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.824321][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.837309][ T9139] ldm_validate_partition_table(): Disk read failed. [ 136.839680][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.842690][ T9139] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.851816][ T9139] Dev loop4: unable to read RDB block 0 [ 136.856070][ T9139] loop4: unable to read partition table [ 136.861195][ T9139] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 136.967887][ T5755] Bluetooth: hci4: command 0x0419 tx timeout [ 137.060810][ T9156] trusted_key: encrypted_key: master key parameter 'defau' is invalid [ 137.069763][ T9157] trusted_key: encrypted_key: master key parameter 'defau' is invalid [ 137.136058][ T9159] comedi comedi2: board detection failed [ 137.438663][ T9188] netlink: 52 bytes leftover after parsing attributes in process `syz.6.876'. [ 137.450373][ T9186] syz.5.878: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.476533][ T9186] CPU: 1 UID: 0 PID: 9186 Comm: syz.5.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.476555][ T9186] Tainted: [L]=SOFTLOCKUP [ 137.476560][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.476567][ T9186] Call Trace: [ 137.476582][ T9186] [ 137.476587][ T9186] dump_stack_lvl+0x100/0x190 [ 137.476657][ T9186] warn_alloc.cold+0x94/0xa8 [ 137.476671][ T9186] ? __pfx_warn_alloc+0x10/0x10 [ 137.476695][ T9186] ? kasan_save_stack+0x3f/0x50 [ 137.476712][ T9186] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 137.476733][ T9186] ? vb2_vmalloc_alloc+0xf9/0x410 [ 137.476803][ T9186] ? __vb2_queue_alloc+0x8d5/0x1160 [ 137.476824][ T9186] ? vb2_core_create_bufs+0x5fa/0xa30 [ 137.476844][ T9186] ? vb2_create_bufs+0x40c/0x830 [ 137.476862][ T9186] ? v4l_create_bufs+0x17d/0x270 [ 137.476883][ T9186] ? __video_do_ioctl+0xb2a/0xdf0 [ 137.476898][ T9186] ? video_usercopy+0x47a/0x1730 [ 137.476914][ T9186] ? __x64_sys_ioctl+0x18e/0x210 [ 137.476946][ T9186] ? do_syscall_64+0x115/0x870 [ 137.477033][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.477048][ T9186] ? vb2_vmalloc_alloc+0x135/0x410 [ 137.477061][ T9186] __vmalloc_node_range_noprof+0x136c/0x1630 [ 137.477086][ T9186] ? vb2_vmalloc_alloc+0x135/0x410 [ 137.477124][ T9186] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.477146][ T9186] ? kasan_save_track+0x14/0x30 [ 137.477161][ T9186] ? __kasan_kmalloc+0xaa/0xb0 [ 137.477176][ T9186] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 137.477196][ T9186] ? vb2_vmalloc_alloc+0x135/0x410 [ 137.477209][ T9186] vmalloc_user_noprof+0x9e/0xe0 [ 137.477228][ T9186] ? vb2_vmalloc_alloc+0x135/0x410 [ 137.477243][ T9186] vb2_vmalloc_alloc+0x135/0x410 [ 137.477255][ T9186] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 137.477267][ T9186] __vb2_queue_alloc+0x8d5/0x1160 [ 137.477292][ T9186] vb2_core_create_bufs+0x5fa/0xa30 [ 137.477312][ T9186] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 137.477331][ T9186] ? trace_contention_end+0x126/0x160 [ 137.477353][ T9186] ? __mutex_lock+0x26d/0x1bd0 [ 137.477368][ T9186] vb2_create_bufs+0x40c/0x830 [ 137.477386][ T9186] ? __pfx_vb2_create_bufs+0x10/0x10 [ 137.477403][ T9186] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.477419][ T9186] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.477436][ T9186] v4l_create_bufs+0x17d/0x270 [ 137.477453][ T9186] __video_do_ioctl+0xb2a/0xdf0 [ 137.477472][ T9186] ? __might_fault+0xc5/0x140 [ 137.477484][ T9186] ? __pfx___video_do_ioctl+0x10/0x10 [ 137.477505][ T9186] video_usercopy+0x47a/0x1730 [ 137.477521][ T9186] ? __pfx___video_do_ioctl+0x10/0x10 [ 137.477535][ T9186] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.477568][ T9186] ? __pfx_video_usercopy+0x10/0x10 [ 137.477595][ T9186] v4l2_ioctl+0x1bd/0x250 [ 137.477612][ T9186] ? __pfx_v4l2_ioctl+0x10/0x10 [ 137.477631][ T9186] __x64_sys_ioctl+0x18e/0x210 [ 137.477651][ T9186] do_syscall_64+0x115/0x870 [ 137.477665][ T9186] ? clear_bhb_loop+0x40/0x90 [ 137.477679][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.477691][ T9186] RIP: 0033:0x7f05cfb9e019 [ 137.477701][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.477712][ T9186] RSP: 002b:00007f05d0acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.477731][ T9186] RAX: ffffffffffffffda RBX: 00007f05cfe25fa0 RCX: 00007f05cfb9e019 [ 137.477744][ T9186] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000005 [ 137.477751][ T9186] RBP: 00007f05cfc3500c R08: 0000000000000000 R09: 0000000000000000 [ 137.477759][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.477766][ T9186] R13: 00007f05cfe26038 R14: 00007f05cfe25fa0 R15: 00007ffe8d600ea8 [ 137.477782][ T9186] [ 137.623999][ T9186] Mem-Info: [ 137.625297][ T9186] active_anon:30521 inactive_anon:119 isolated_anon:0 [ 137.625297][ T9186] active_file:697 inactive_file:32117 isolated_file:0 [ 137.625297][ T9186] unevictable:1768 dirty:187 writeback:0 [ 137.625297][ T9186] slab_reclaimable:8060 slab_unreclaimable:72420 [ 137.625297][ T9186] mapped:26244 shmem:19827 pagetables:3953 [ 137.625297][ T9186] sec_pagetables:297 bounce:0 [ 137.625297][ T9186] kernel_misc_reclaimable:0 [ 137.625297][ T9186] free:344896 free_pcp:18801 free_cma:0 [ 137.643197][ T9186] Node 0 active_anon:66684kB inactive_anon:476kB active_file:2788kB inactive_file:126252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:84456kB dirty:700kB writeback:0kB shmem:20960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16448kB pagetables:14136kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.656172][ T9186] Node 1 active_anon:55400kB inactive_anon:0kB active_file:0kB inactive_file:2216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20520kB dirty:48kB writeback:0kB shmem:58348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:1676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.668937][ T9186] Node 0 DMA free:8264kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1000kB inactive_anon:0kB active_file:0kB inactive_file:3248kB unevictable:0kB writepending:288kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:32kB free_cma:0kB [ 137.680568][ T9186] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 137.682785][ T9186] Node 0 DMA32 free:105200kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65684kB inactive_anon:476kB active_file:2788kB inactive_file:123004kB unevictable:3536kB writepending:412kB zspages:0kB present:2080628kB managed:1255188kB mlocked:0kB bounce:0kB free_pcp:34516kB local_pcp:3836kB free_cma:0kB [ 137.695222][ T9186] lowmem_reserve[]: 0 0 0 0 0 [ 137.697060][ T9186] Node 1 Normal free:1291088kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55400kB inactive_anon:0kB active_file:0kB inactive_file:2216kB unevictable:3536kB writepending:48kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:49244kB local_pcp:24380kB free_cma:0kB [ 137.709685][ T9186] lowmem_reserve[]: 0 0 0 0 0 [ 137.711482][ T9186] Node 0 DMA: 91*4kB (UM) 58*8kB (UM) 24*16kB (UM) 51*32kB (UM) 17*64kB (UM) 8*128kB (UM) 7*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 8284kB [ 137.716499][ T9186] Node 0 DMA32: 1145*4kB (UME) 947*8kB (UME) 303*16kB (UME) 256*32kB (UME) 209*64kB (UME) 122*128kB (UME) 61*256kB (UME) 23*512kB (UME) 19*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 113324kB [ 137.722604][ T9186] Node 1 Normal: 171*4kB (UM) 103*8kB (UME) 99*16kB (UME) 100*32kB (UME) 85*64kB (UME) 67*128kB (UM) 61*256kB (UME) 55*512kB (UM) 50*1024kB (UME) 4*2048kB (UME) 289*4096kB (M) = 1307220kB [ 137.728580][ T9186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.731867][ T9186] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.735129][ T9186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.738089][ T9186] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.740867][ T9186] 52640 total pagecache pages [ 137.742412][ T9186] 0 pages in swap cache [ 137.743733][ T9186] Free swap = 124996kB [ 137.745015][ T9186] Total swap = 124996kB [ 137.746274][ T9186] 1048443 pages RAM [ 137.747513][ T9186] 0 pages HighMem/MovableOnly [ 137.748896][ T9186] 285335 pages reserved [ 137.750275][ T9186] 0 pages cma reserved [ 137.789314][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'. [ 137.901893][ T9194] netlink: 'syz.5.880': attribute type 63 has an invalid length. [ 137.905164][ T9194] netlink: 5 bytes leftover after parsing attributes in process `syz.5.880'. [ 137.911751][ T9194] gretap0: entered allmulticast mode [ 137.914997][ T9194] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.148164][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e748c00: rx timeout, send abort [ 139.153211][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e748c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.159332][ T42] kauditd_printk_skb: 147 callbacks suppressed [ 139.159343][ T42] audit: type=1400 audit(1785614965.067:1274): avc: denied { read } for pid=5131 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 139.170885][ T42] audit: type=1400 audit(1785614965.067:1275): avc: denied { search } for pid=5131 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.179088][ T42] audit: type=1400 audit(1785614965.067:1276): avc: denied { write search } for pid=5131 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.187217][ T42] audit: type=1400 audit(1785614965.067:1277): avc: denied { add_name } for pid=5131 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.194931][ T42] audit: type=1400 audit(1785614965.067:1278): avc: denied { create } for pid=5131 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.202608][ T42] audit: type=1400 audit(1785614965.067:1279): avc: denied { append open } for pid=5131 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.210143][ T42] audit: type=1400 audit(1785614965.067:1280): avc: denied { read } for pid=5131 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.216966][ T42] audit: type=1400 audit(1785614965.067:1281): avc: denied { getattr } for pid=5131 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.218853][ T9172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.291891][ T42] audit: type=1800 audit(1785614966.197:1282): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 140.318782][ T42] audit: type=1800 audit(1785614966.217:1283): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 140.335476][ T9200] nullb0: [POWERTEC] [ 140.594433][ T9222] netlink: 108 bytes leftover after parsing attributes in process `syz.6.888'. [ 140.730596][ T9232] netlink: 'syz.6.890': attribute type 1 has an invalid length. [ 140.733623][ T9231] netlink: 'syz.6.890': attribute type 1 has an invalid length. [ 140.759350][ T9231] bond1 (unregistering): Released all slaves [ 140.840256][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.6.890'. [ 140.867296][ T9246] autofs: Bad value for 'fd' [ 140.921879][ T9246] netlink: 80 bytes leftover after parsing attributes in process `syz.1.892'. [ 141.139974][ T9262] tmpfs: Group quota inode hardlimit too large. [ 141.155017][ T9262] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.212944][ T9270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9270 comm=syz.6.899 [ 141.402777][ T9286] tls_set_device_offload_rx: netdev not found [ 141.456004][ T9279] pci_bus 0000:01: busn_res: [bus 01] is released [ 141.457971][ T9294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.461700][ T9287] tls_set_device_offload_rx: netdev not found [ 141.543309][ T9291] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 141.544090][ T9303] misc userio: Begin command sent, but we're already running [ 141.565839][ T9291] pci 0000:00:04.0: PCI bridge to [bus 01] [ 141.572117][ T9291] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 141.577845][ T9291] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 141.584495][ T9291] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 141.588514][ T9291] pci 0000:00:04.0: enabling Extended Tags [ 141.605368][ T9291] pci 0000:00:04.0: Adding to iommu group 4 [ 141.620272][ T9291] pci 0000:00:04.0: PCI bridge to [bus 01] [ 141.625823][ T9306] loop2: detected capacity change from 0 to 7 [ 141.627893][ T9291] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 141.636628][ T9291] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 141.641804][ T9291] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 141.643637][ T9306] Dev loop2: unable to read RDB block 7 [ 141.644975][ T9291] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 141.650875][ T9291] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 141.653842][ T9291] pci 0000:00:04.0: PCI bridge to [bus 01] [ 141.653845][ T9306] loop2: AHDI p1 p2 p3 [ 141.653868][ T9306] loop2: partition table partially beyond EOD, [ 141.655930][ T9291] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 141.657682][ T9306] truncated [ 141.657869][ T9306] loop2: p1 start 1601398130 is beyond EOD, [ 141.661911][ T9291] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 141.664155][ T9306] truncated [ 141.664167][ T9306] loop2: p2 start 1702059890 is beyond EOD, truncated [ 141.673864][ T9291] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 141.682422][ T9306] hub 8-0:1.0: USB hub found [ 141.691880][ T9306] hub 8-0:1.0: 1 port detected [ 141.735115][ T9312] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.742769][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 141.752187][ T9291] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 141.806689][ T9312] overlay: filesystem on ./file0 not supported as upperdir [ 141.807224][ T9291] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 141.823808][ T9313] can0: slcan on ttyS3. [ 141.942537][ T9313] can0 (unregistered): slcan off ttyS3. [ 142.076940][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.6.909'. [ 142.156352][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.911'. [ 142.164485][ T9339] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 142.167337][ T8267] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.171037][ T8267] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.187729][ T8267] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.193958][ T8267] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.224819][ T9343] netlink: 'syz.6.912': attribute type 1 has an invalid length. [ 142.285930][ T9343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.297410][ T9347] bond1: (slave geneve2): making interface the new active one [ 142.307087][ T9347] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.348795][ T9348] fuse: root generation should be zero [ 142.359820][ T9346] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 142.365872][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.913'. [ 142.370369][ T9350] vlan1: entered promiscuous mode [ 142.385009][ T9350] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 142.396695][ T9350] bond2 (unregistering): Released all slaves [ 142.580126][ T9362] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20003 [ 142.949702][ T9367] lo speed is unknown, defaulting to 1000 [ 143.118929][ T9371] xt_connbytes: Forcing CT accounting to be enabled [ 143.125900][ T9371] set match dimension is over the limit! [ 143.508484][ T9385] overlayfs: conflicting options: userxattr,metacopy=on [ 143.644031][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.665153][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.666079][ T9387] Need at least one configuration in g1. [ 143.670986][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.672275][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.683068][ T9387] udc usbip-vudc.0: failed to start g1: -22 [ 143.683371][ T9394] netlink: 112 bytes leftover after parsing attributes in process `syz.1.926'. [ 143.689958][ T9387] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 143.694218][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.775923][ T9387] UDC core: g1: couldn't find an available UDC or it's busy [ 143.982992][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.986576][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.104996][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.109404][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.127397][ T9390] lo speed is unknown, defaulting to 1000 [ 144.129568][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.932'. [ 144.134836][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.932'. [ 144.211896][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.213392][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 144.213407][ T42] audit: type=1800 audit(1785614970.117:1384): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 144.230836][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.232868][ T42] audit: type=1800 audit(1785614970.137:1385): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 144.271150][ T42] audit: type=1800 audit(1785614970.177:1386): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179845 res=0 errno=0 [ 144.279624][ T42] audit: type=1800 audit(1785614970.187:1387): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179856 res=0 errno=0 [ 144.305198][ T9430] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 144.313312][ T42] audit: type=1800 audit(1785614970.217:1388): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 144.368220][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.371568][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.506884][ T42] audit: type=1800 audit(1785614970.407:1389): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 144.527318][ T42] audit: type=1800 audit(1785614970.427:1390): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181617 res=0 errno=0 [ 144.534511][ T42] audit: type=1800 audit(1785614970.437:1391): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=181622 res=0 errno=0 [ 144.537041][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.541290][ T42] audit: type=1800 audit(1785614970.437:1392): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=181626 res=0 errno=0 [ 144.544470][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.551170][ T42] audit: type=1800 audit(1785614970.437:1393): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=181625 res=0 errno=0 [ 144.561484][ T9390] bridge_slave_0: entered allmulticast mode [ 144.565509][ T9390] bridge_slave_0: entered promiscuous mode [ 144.570239][ T9441] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.585236][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.585668][ T9441] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 144.592191][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.597473][ T9390] bridge_slave_1: entered allmulticast mode [ 144.602261][ T9390] bridge_slave_1: entered promiscuous mode [ 144.648244][ T9390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.653000][ T9390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.703390][ T13] bridge_slave_1: left allmulticast mode [ 144.705983][ T13] bridge_slave_1: left promiscuous mode [ 144.709053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.714691][ T13] bridge_slave_0: left allmulticast mode [ 144.722839][ T13] bridge_slave_0: left promiscuous mode [ 144.725517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.753520][ T9444] Bluetooth: hci0: unsupported parameter 255 [ 144.759434][ T9444] Bluetooth: hci0: unsupported parameter 255 [ 144.762982][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 144.986252][ T13] bond2 (unregistering): (slave bridge1): Releasing active interface [ 144.998024][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.004933][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.014054][ T13] bond0 (unregistering): Released all slaves [ 145.022223][ T13] bond1 (unregistering): Released all slaves [ 145.038152][ T13] bond2 (unregistering): Released all slaves [ 145.058560][ T13] bond3 (unregistering): Released all slaves [ 145.075679][ T13] bond4 (unregistering): Released all slaves [ 145.100244][ T9390] team0: Port device team_slave_0 added [ 145.110133][ T9390] team0: Port device team_slave_1 added [ 145.143813][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.146028][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.154385][ T9390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.159782][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.161995][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.170072][ T9390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.194069][ T9390] hsr_slave_0: entered promiscuous mode [ 145.196486][ T9390] hsr_slave_1: entered promiscuous mode [ 145.199300][ T9390] debugfs: 'hsr0' already exists in 'hsr' [ 145.201474][ T9390] Cannot create hsr debugfs directory [ 145.496435][ T9390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 145.525730][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.532639][ T9390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 145.546054][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.549556][ T9390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 145.569663][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.626218][ T9390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 145.659884][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.664537][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 145.803913][ T9472] 0x00000000001d-0x000000020000 : "" [ 145.804135][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.832626][ T9390] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.843304][ T9472] ftl_cs: FTL header corrupt! [ 145.860369][ T5099] Bluetooth: hci1: command tx timeout [ 145.871677][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.874724][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.900317][ T13] hsr_slave_0: left promiscuous mode [ 145.903600][ T13] hsr_slave_1: left promiscuous mode [ 145.905771][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.912561][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.923299][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.930949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.950639][ T13] veth1_macvtap: left promiscuous mode [ 145.957788][ T13] veth0_macvtap: left promiscuous mode [ 145.960260][ T13] veth1_vlan: left promiscuous mode [ 145.962475][ T13] veth0_vlan: left promiscuous mode [ 146.025064][ T9486] qnx6: unable to set blocksize [ 146.207640][ T13] team0 (unregistering): Port device team_slave_1 removed [ 146.216557][ T13] team0 (unregistering): Port device team_slave_0 removed [ 146.328422][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 146.339321][ T9494] syzkaller0: entered promiscuous mode [ 146.340585][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 146.344843][ T5099] Bluetooth: hci3: command 0x1003 tx timeout [ 146.346729][ T9494] syzkaller0: entered allmulticast mode [ 146.379121][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.382300][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.412267][ T9490] lo speed is unknown, defaulting to 1000 [ 146.700783][ T13] IPVS: stop unused estimator thread 0... [ 146.723678][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 146.861310][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.956326][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 147.024616][ T9390] veth0_vlan: entered promiscuous mode [ 147.034562][ T9390] veth1_vlan: entered promiscuous mode [ 147.058135][ T9390] veth0_macvtap: entered promiscuous mode [ 147.062894][ T9390] veth1_macvtap: entered promiscuous mode [ 147.072150][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.077869][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.140485][ T5589] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.142275][ T9521] ============================================================================= [ 147.146265][ T9521] [ 147.146272][ T9521] ====================================================== [ 147.146276][ T9521] WARNING: possible circular locking dependency detected [ 147.146284][ T9521] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc [ 147.146290][ T9521] ------------------------------------------------------ [ 147.146293][ T9521] syz.5.949/9521 is trying to acquire lock: [ 147.146299][ T9521] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4c0/0x6b0 [ 147.146332][ T9521] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.146332][ T9521] but task is already holding lock: [ 147.146335][ T9521] ffff888027f24618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 147.146359][ T9521] [ 147.146359][ T9521] which lock already depends on the new lock. [ 147.146359][ T9521] [ 147.146363][ T9521] [ 147.146363][ T9521] the existing dependency chain (in reverse order) is: [ 147.146366][ T9521] [ 147.146366][ T9521] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 147.146379][ T9521] lock_acquire+0x1b9/0x370 [ 147.146397][ T9521] _raw_spin_lock_irqsave+0x3a/0x60 [ 147.146408][ T9521] __refill_objects_node+0x120/0xaa0 [ 147.146418][ T9521] refill_objects+0x58/0x410 [ 147.146426][ T9521] __pcs_replace_empty_main+0x376/0x680 [ 147.146442][ T9521] __kmalloc_noprof+0x66d/0x820 [ 147.146452][ T9521] tty_buffer_alloc+0x29f/0x320 [ 147.146487][ T9521] __tty_buffer_request_room+0x129/0x2c0 [ 147.146499][ T9521] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 147.146510][ T9521] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 147.146523][ T9521] pty_write+0xd2/0x100 [ 147.146538][ T9521] n_tty_write+0xa9e/0x1160 [ 147.146558][ T9521] file_tty_write.isra.0+0x4d2/0x890 [ 147.146569][ T9521] vfs_write+0x6ac/0x1050 [ 147.146584][ T9521] ksys_write+0x12a/0x250 [ 147.146599][ T9521] do_syscall_64+0x115/0x870 [ 147.146610][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.146621][ T9521] [ 147.146621][ T9521] -> #2 (&port->lock#2){-...}-{3:3}: [ 147.146636][ T9521] lock_acquire+0x1b9/0x370 [ 147.146647][ T9521] _raw_spin_lock_irqsave+0x3a/0x60 [ 147.146656][ T9521] tty_port_tty_get+0x21/0x100 [ 147.146668][ T9521] tty_port_default_wakeup+0x15/0x60 [ 147.146681][ T9521] serial8250_tx_chars+0x68f/0x860 [ 147.146694][ T9521] serial8250_handle_irq_locked+0x770/0x9a0 [ 147.146708][ T9521] serial8250_handle_irq.part.0+0xb4/0x530 [ 147.146721][ T9521] serial8250_default_handle_irq+0xc2/0x280 [ 147.146734][ T9521] serial8250_interrupt+0xf8/0x1b0 [ 147.146762][ T9521] __handle_irq_event_percpu+0x232/0x880 [ 147.146777][ T9521] handle_irq_event+0xab/0x1e0 [ 147.146792][ T9521] handle_edge_irq+0x34c/0x950 [ 147.146806][ T9521] __common_interrupt+0xd8/0x2f0 [ 147.146818][ T9521] common_interrupt+0xb9/0xe0 [ 147.146832][ T9521] asm_common_interrupt+0x26/0x40 [ 147.146841][ T9521] pv_native_safe_halt+0xf/0x20 [ 147.146852][ T9521] default_idle+0x9/0x10 [ 147.146864][ T9521] default_idle_call+0x6c/0xb0 [ 147.146877][ T9521] do_idle+0x3a7/0x5b0 [ 147.146890][ T9521] cpu_startup_entry+0x4f/0x60 [ 147.146903][ T9521] rest_init+0x251/0x260 [ 147.146916][ T9521] start_kernel+0x48e/0x490 [ 147.146966][ T9521] x86_64_start_reservations+0x24/0x30 [ 147.146981][ T9521] x86_64_start_kernel+0x12b/0x130 [ 147.146994][ T9521] common_startup_64+0x13e/0x158 [ 147.147009][ T9521] [ 147.147009][ T9521] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 147.147023][ T9521] lock_acquire+0x1b9/0x370 [ 147.147034][ T9521] _raw_spin_lock_irqsave+0x3a/0x60 [ 147.147043][ T9521] serial8250_console_write+0x177/0x1a50 [ 147.147057][ T9521] console_flush_one_record+0x790/0xe50 [ 147.147072][ T9521] console_unlock+0x103/0x260 [ 147.147086][ T9521] vprintk_emit+0x407/0x6b0 [ 147.147100][ T9521] _printk+0xcf/0x110 [ 147.147109][ T9521] register_console.cold+0xc0/0x248 [ 147.147118][ T9521] univ8250_console_init+0x6f/0x80 [ 147.147143][ T9521] console_init+0x3d5/0x5b0 [ 147.147152][ T9521] start_kernel+0x314/0x490 [ 147.147165][ T9521] x86_64_start_reservations+0x24/0x30 [ 147.147179][ T9521] x86_64_start_kernel+0x12b/0x130 [ 147.147193][ T9521] common_startup_64+0x13e/0x158 [ 147.147208][ T9521] [ 147.147208][ T9521] -> #0 (console_owner){-.-.}-{0:0}: [ 147.147220][ T9521] check_prev_add+0xeb/0xe60 [ 147.147231][ T9521] __lock_acquire+0x136c/0x1a40 [ 147.147242][ T9521] lock_acquire+0x1b9/0x370 [ 147.147253][ T9521] vprintk_emit+0x4d1/0x6b0 [ 147.147267][ T9521] _printk+0xcf/0x110 [ 147.147275][ T9521] __slab_bug+0x4f/0xb0 [ 147.147284][ T9521] slab_bug+0x5d/0x80 [ 147.147292][ T9521] __kmem_cache_shutdown.cold+0x39/0x177 [ 147.147303][ T9521] kmem_cache_destroy+0x73/0x190 [ 147.147318][ T9521] virtio_gpu_free_vbufs+0x38/0x80 [ 147.147344][ T9521] virtio_gpu_release+0x5c/0x1c0 [ 147.147357][ T9521] drm_dev_put.part.0+0xbd/0x140 [ 147.147375][ T9521] drm_dev_put+0x1f/0x30 [ 147.147389][ T9521] virtio_dev_remove+0xb8/0x170 [ 147.147401][ T9521] device_remove+0xcb/0x180 [ 147.147420][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.147434][ T9521] bus_remove_device+0x2bc/0x560 [ 147.147444][ T9521] device_del+0x376/0x9b0 [ 147.147454][ T9521] device_unregister+0x1d/0xe0 [ 147.147465][ T9521] unregister_virtio_device+0x39/0x60 [ 147.147477][ T9521] virtio_pci_remove+0x7c/0x110 [ 147.147487][ T9521] pci_device_remove+0xb2/0x1d0 [ 147.147508][ T9521] device_remove+0xcb/0x180 [ 147.147518][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.147536][ T9521] pci_stop_bus_device+0x120/0x160 [ 147.147551][ T9521] pci_stop_and_remove_bus_device+0x58/0xa0 [ 147.147567][ T9521] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 147.147583][ T9521] remove_store+0x123/0x140 [ 147.147604][ T9521] dev_attr_store+0x58/0x80 [ 147.147625][ T9521] sysfs_kf_write+0xf2/0x150 [ 147.147656][ T9521] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.147676][ T9521] vfs_write+0x6ac/0x1050 [ 147.147696][ T9521] ksys_write+0x12a/0x250 [ 147.147714][ T9521] do_syscall_64+0x115/0x870 [ 147.147725][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.147735][ T9521] [ 147.147735][ T9521] other info that might help us debug this: [ 147.147735][ T9521] [ 147.147738][ T9521] Chain exists of: [ 147.147738][ T9521] console_owner --> &port->lock#2 --> &n->list_lock [ 147.147738][ T9521] [ 147.147756][ T9521] Possible unsafe locking scenario: [ 147.147756][ T9521] [ 147.147758][ T9521] CPU0 CPU1 [ 147.147761][ T9521] ---- ---- [ 147.147763][ T9521] lock(&n->list_lock); [ 147.147770][ T9521] lock(&port->lock#2); [ 147.147778][ T9521] lock(&n->list_lock); [ 147.147785][ T9521] lock(console_owner); [ 147.147791][ T9521] [ 147.147791][ T9521] *** DEADLOCK *** [ 147.147791][ T9521] [ 147.147793][ T9521] 9 locks held by syz.5.949/9521: [ 147.147799][ T9521] #0: ffff88803ce86630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 147.147824][ T9521] #1: ffff88802872a450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 147.147853][ T9521] #2: ffff888036783480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 147.147878][ T9521] #3: ffffffff8f86c9a0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 147.147906][ T9521] #4: ffff888022cc81f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 147.147944][ T9521] #5: ffff888025d5a1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 147.147970][ T9521] #6: ffffffff8ea7a230 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 147.147999][ T9521] #7: ffffffff8ed88280 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 147.148027][ T9521] #8: ffff888027f24618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 147.148052][ T9521] [ 147.148052][ T9521] stack backtrace: [ 147.148061][ T9521] CPU: 2 UID: 0 PID: 9521 Comm: syz.5.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.148075][ T9521] Tainted: [L]=SOFTLOCKUP [ 147.148079][ T9521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.148086][ T9521] Call Trace: [ 147.148089][ T9521] [ 147.148094][ T9521] dump_stack_lvl+0x100/0x190 [ 147.148108][ T9521] print_circular_bug.cold+0x178/0x1c7 [ 147.148124][ T9521] check_noncircular+0x146/0x160 [ 147.148137][ T9521] check_prev_add+0xeb/0xe60 [ 147.148150][ T9521] __lock_acquire+0x136c/0x1a40 [ 147.148164][ T9521] lock_acquire+0x1b9/0x370 [ 147.148176][ T9521] ? vprintk_emit+0x4c0/0x6b0 [ 147.148192][ T9521] ? vprintk_emit+0x4ae/0x6b0 [ 147.148208][ T9521] vprintk_emit+0x4d1/0x6b0 [ 147.148223][ T9521] ? vprintk_emit+0x4c0/0x6b0 [ 147.148238][ T9521] ? __pfx_vprintk_emit+0x10/0x10 [ 147.148256][ T9521] _printk+0xcf/0x110 [ 147.148265][ T9521] ? __pfx__printk+0x10/0x10 [ 147.148275][ T9521] ? do_raw_spin_lock+0x128/0x260 [ 147.148290][ T9521] __slab_bug+0x4f/0xb0 [ 147.148301][ T9521] slab_bug+0x5d/0x80 [ 147.148311][ T9521] __kmem_cache_shutdown.cold+0x39/0x177 [ 147.148326][ T9521] kmem_cache_destroy+0x73/0x190 [ 147.148341][ T9521] virtio_gpu_free_vbufs+0x38/0x80 [ 147.148357][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.148370][ T9521] virtio_gpu_release+0x5c/0x1c0 [ 147.148386][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.148400][ T9521] drm_dev_put.part.0+0xbd/0x140 [ 147.148412][ T9521] drm_dev_put+0x1f/0x30 [ 147.148423][ T9521] virtio_dev_remove+0xb8/0x170 [ 147.148435][ T9521] ? __pfx_virtio_dev_remove+0x10/0x10 [ 147.148447][ T9521] device_remove+0xcb/0x180 [ 147.148459][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.148474][ T9521] bus_remove_device+0x2bc/0x560 [ 147.148486][ T9521] ? __pfx_bus_remove_device+0x10/0x10 [ 147.148496][ T9521] ? __pfx_device_remove_attrs+0x10/0x10 [ 147.148509][ T9521] device_del+0x376/0x9b0 [ 147.148521][ T9521] ? __pfx_device_del+0x10/0x10 [ 147.148533][ T9521] ? __pfx___might_resched+0x10/0x10 [ 147.148546][ T9521] ? __pfx_pci_device_is_present+0x10/0x10 [ 147.148561][ T9521] device_unregister+0x1d/0xe0 [ 147.148573][ T9521] unregister_virtio_device+0x39/0x60 [ 147.148586][ T9521] virtio_pci_remove+0x7c/0x110 [ 147.148596][ T9521] pci_device_remove+0xb2/0x1d0 [ 147.148606][ T9521] ? __pfx_pci_device_remove+0x10/0x10 [ 147.148616][ T9521] device_remove+0xcb/0x180 [ 147.148627][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.148642][ T9521] pci_stop_bus_device+0x120/0x160 [ 147.148654][ T9521] pci_stop_and_remove_bus_device+0x58/0xa0 [ 147.148666][ T9521] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 147.148679][ T9521] remove_store+0x123/0x140 [ 147.148691][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.148704][ T9521] ? find_held_lock+0x2b/0x80 [ 147.148713][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.148727][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.148742][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.148755][ T9521] dev_attr_store+0x58/0x80 [ 147.148768][ T9521] ? __pfx_dev_attr_store+0x10/0x10 [ 147.148782][ T9521] sysfs_kf_write+0xf2/0x150 [ 147.148797][ T9521] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.148811][ T9521] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.148826][ T9521] vfs_write+0x6ac/0x1050 [ 147.148841][ T9521] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 147.148855][ T9521] ? __pfx_vfs_write+0x10/0x10 [ 147.148874][ T9521] ksys_write+0x12a/0x250 [ 147.148891][ T9521] ? __pfx_ksys_write+0x10/0x10 [ 147.148908][ T9521] do_syscall_64+0x115/0x870 [ 147.148920][ T9521] ? clear_bhb_loop+0x40/0x90 [ 147.148931][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.148942][ T9521] RIP: 0033:0x7f05cfb9e019 [ 147.148951][ T9521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.148962][ T9521] RSP: 002b:00007f05d0acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.148971][ T9521] RAX: ffffffffffffffda RBX: 00007f05cfe25fa0 RCX: 00007f05cfb9e019 [ 147.148978][ T9521] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 147.148984][ T9521] RBP: 00007f05cfc3500c R08: 0000000000000000 R09: 0000000000000000 [ 147.148990][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.148996][ T9521] R13: 00007f05cfe26038 R14: 00007f05cfe25fa0 R15: 00007ffe8d600ea8 [ 147.149005][ T9521] [ 147.155787][ T5589] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.157479][ T9521] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 147.157495][ T9521] ----------------------------------------------------------------------------- [ 147.157495][ T9521] [ 147.157506][ T9521] Object 0xffff888036b90af0 @offset=2800 [ 147.157518][ T9521] Object 0xffff888036b90c08 @offset=3080 [ 147.157527][ T9521] Object 0xffff888036b90d20 @offset=3360 [ 147.157535][ T9521] Object 0xffff888036b90e38 @offset=3640 [ 147.178143][ T9390] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 147.181163][ T9521] Slab 0xffffea0000dae400 objects=29 used=4 fp=0xffff888036b90000 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 147.181404][ T9521] ------------[ cut here ]------------ [ 147.202314][ T9390] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 147.205018][ T9521] 1 [ 147.205029][ T9521] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#2: syz.5.949/9521 [ 147.205061][ T9521] Modules linked in: [ 147.205080][ T9521] CPU: 2 UID: 0 PID: 9521 Comm: syz.5.949 Tainted: G B L syzkaller #0 PREEMPT(full) [ 147.223988][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.224872][ T9521] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 147.227352][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.229352][ T9521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.229367][ T9521] RIP: 0010:__slab_err+0x15/0x20 [ 147.229396][ T9521] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 147.231455][ T7804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.233526][ T9521] RSP: 0018:ffffc90006c27738 EFLAGS: 00010093 [ 147.233545][ T9521] RAX: 0000000000000000 RBX: ffffc90006c27788 RCX: ffffffff81c709af [ 147.233556][ T9521] RDX: ffff888025c3a540 RSI: ffffffff81c709bd RDI: ffff888025c3a540 [ 147.236239][ T7804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.238165][ T9521] RBP: ffff888027f24618 R08: 0000000000000007 R09: 0000000000000000 [ 147.238175][ T9521] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001ea0 [ 147.238182][ T9521] R13: ffff888036b91fb8 R14: ffff888027f24600 R15: ffffea0000dae400 [ 147.238189][ T9521] FS: 00007f05d0acd6c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 147.238211][ T9521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.238221][ T9521] CR2: 00005609a8390ce8 CR3: 0000000025e30000 CR4: 0000000000352ef0 [ 147.238228][ T9521] Call Trace: [ 147.238233][ T9521] [ 147.238237][ T9521] __kmem_cache_shutdown.cold+0x16e/0x177 [ 147.238257][ T9521] kmem_cache_destroy+0x73/0x190 [ 147.238275][ T9521] virtio_gpu_free_vbufs+0x38/0x80 [ 147.684754][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.686511][ T9521] virtio_gpu_release+0x5c/0x1c0 [ 147.688035][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.689755][ T9521] drm_dev_put.part.0+0xbd/0x140 [ 147.691311][ T9521] drm_dev_put+0x1f/0x30 [ 147.692668][ T9521] virtio_dev_remove+0xb8/0x170 [ 147.694209][ T9521] ? __pfx_virtio_dev_remove+0x10/0x10 [ 147.695938][ T9521] device_remove+0xcb/0x180 [ 147.697365][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.699271][ T9521] bus_remove_device+0x2bc/0x560 [ 147.700790][ T9521] ? __pfx_bus_remove_device+0x10/0x10 [ 147.702417][ T9521] ? __pfx_device_remove_attrs+0x10/0x10 [ 147.704222][ T9521] device_del+0x376/0x9b0 [ 147.705607][ T9521] ? __pfx_device_del+0x10/0x10 [ 147.707180][ T9521] ? __pfx___might_resched+0x10/0x10 [ 147.708849][ T9521] ? __pfx_pci_device_is_present+0x10/0x10 [ 147.710688][ T9521] device_unregister+0x1d/0xe0 [ 147.712225][ T9521] unregister_virtio_device+0x39/0x60 [ 147.713849][ T9521] virtio_pci_remove+0x7c/0x110 [ 147.715723][ T9521] pci_device_remove+0xb2/0x1d0 [ 147.717245][ T9521] ? __pfx_pci_device_remove+0x10/0x10 [ 147.718931][ T9521] device_remove+0xcb/0x180 [ 147.720359][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.722283][ T9521] pci_stop_bus_device+0x120/0x160 [ 147.723881][ T9521] pci_stop_and_remove_bus_device+0x58/0xa0 [ 147.725791][ T9521] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 147.727790][ T9521] remove_store+0x123/0x140 [ 147.729175][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.730752][ T9521] ? find_held_lock+0x2b/0x80 [ 147.732256][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.733778][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.735361][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.737014][ T9521] dev_attr_store+0x58/0x80 [ 147.738451][ T9521] ? __pfx_dev_attr_store+0x10/0x10 [ 147.740128][ T9521] sysfs_kf_write+0xf2/0x150 [ 147.741576][ T9521] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.743245][ T9521] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.745027][ T9521] vfs_write+0x6ac/0x1050 [ 147.746589][ T9521] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 147.748497][ T9521] ? __pfx_vfs_write+0x10/0x10 [ 147.750049][ T9521] ksys_write+0x12a/0x250 [ 147.751466][ T9521] ? __pfx_ksys_write+0x10/0x10 [ 147.753020][ T9521] do_syscall_64+0x115/0x870 [ 147.754527][ T9521] ? clear_bhb_loop+0x40/0x90 [ 147.756086][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.757962][ T9521] RIP: 0033:0x7f05cfb9e019 [ 147.759360][ T9521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.765270][ T9521] RSP: 002b:00007f05d0acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.767908][ T9521] RAX: ffffffffffffffda RBX: 00007f05cfe25fa0 RCX: 00007f05cfb9e019 [ 147.770372][ T9521] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 147.772839][ T9521] RBP: 00007f05cfc3500c R08: 0000000000000000 R09: 0000000000000000 [ 147.775525][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.778042][ T9521] R13: 00007f05cfe26038 R14: 00007f05cfe25fa0 R15: 00007ffe8d600ea8 [ 147.780465][ T9521] [ 147.781443][ T9521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.783782][ T9521] CPU: 2 UID: 0 PID: 9521 Comm: syz.5.949 Tainted: G B L syzkaller #0 PREEMPT(full) [ 147.787493][ T9521] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 147.789207][ T9521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.792349][ T9521] Call Trace: [ 147.793401][ T9521] [ 147.794389][ T9521] dump_stack_lvl+0x100/0x190 [ 147.795851][ T9521] vpanic+0x552/0x970 [ 147.797138][ T9521] ? __pfx_vpanic+0x10/0x10 [ 147.798605][ T9521] ? lock_release+0x24d/0x310 [ 147.800077][ T9521] panic+0xd1/0xe0 [ 147.801271][ T9521] ? __pfx_panic+0x10/0x10 [ 147.802690][ T9521] ? check_panic_on_warn+0x1f/0x90 [ 147.804331][ T9521] check_panic_on_warn.cold+0x19/0x34 [ 147.805994][ T9521] ? __slab_err+0x15/0x20 [ 147.807353][ T9521] __warn.cold+0x191/0x318 [ 147.808764][ T9521] __report_bug+0x30f/0x440 [ 147.810173][ T9521] ? __slab_err+0x15/0x20 [ 147.811527][ T9521] ? __pfx___report_bug+0x10/0x10 [ 147.813115][ T9521] ? rcu_is_watching+0x12/0xc0 [ 147.814622][ T9521] ? irq_work_queue+0xce/0x100 [ 147.816059][ T9521] ? __wake_up_klogd+0xe2/0x140 [ 147.817616][ T9521] ? vprintk_emit+0x1c9/0x6b0 [ 147.819143][ T9521] ? __pfx_vprintk_emit+0x10/0x10 [ 147.820718][ T9521] ? __slab_err+0x15/0x20 [ 147.822100][ T9521] report_bug+0xb2/0x220 [ 147.823432][ T9521] ? __slab_err+0x15/0x20 [ 147.825063][ T9521] handle_bug+0x16a/0x2a0 [ 147.826542][ T9521] exc_invalid_op+0x17/0x50 [ 147.827966][ T9521] asm_exc_invalid_op+0x1a/0x20 [ 147.829410][ T9521] RIP: 0010:__slab_err+0x15/0x20 [ 147.830908][ T9521] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 147.836897][ T9521] RSP: 0018:ffffc90006c27738 EFLAGS: 00010093 [ 147.838745][ T9521] RAX: 0000000000000000 RBX: ffffc90006c27788 RCX: ffffffff81c709af [ 147.841133][ T9521] RDX: ffff888025c3a540 RSI: ffffffff81c709bd RDI: ffff888025c3a540 [ 147.843612][ T9521] RBP: ffff888027f24618 R08: 0000000000000007 R09: 0000000000000000 [ 147.846152][ T9521] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001ea0 [ 147.848757][ T9521] R13: ffff888036b91fb8 R14: ffff888027f24600 R15: ffffea0000dae400 [ 147.851195][ T9521] ? add_taint+0x5f/0xb0 [ 147.852526][ T9521] ? add_taint+0x6d/0xb0 [ 147.853797][ T9521] ? __slab_err+0x14/0x20 [ 147.855098][ T9521] __kmem_cache_shutdown.cold+0x16e/0x177 [ 147.856775][ T9521] kmem_cache_destroy+0x73/0x190 [ 147.858400][ T9521] virtio_gpu_free_vbufs+0x38/0x80 [ 147.860000][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.861724][ T9521] virtio_gpu_release+0x5c/0x1c0 [ 147.863299][ T9521] ? __pfx_virtio_gpu_release+0x10/0x10 [ 147.865247][ T9521] drm_dev_put.part.0+0xbd/0x140 [ 147.866755][ T9521] drm_dev_put+0x1f/0x30 [ 147.868088][ T9521] virtio_dev_remove+0xb8/0x170 [ 147.869630][ T9521] ? __pfx_virtio_dev_remove+0x10/0x10 [ 147.871335][ T9521] device_remove+0xcb/0x180 [ 147.872772][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.874713][ T9521] bus_remove_device+0x2bc/0x560 [ 147.876283][ T9521] ? __pfx_bus_remove_device+0x10/0x10 [ 147.878015][ T9521] ? __pfx_device_remove_attrs+0x10/0x10 [ 147.879826][ T9521] device_del+0x376/0x9b0 [ 147.881196][ T9521] ? __pfx_device_del+0x10/0x10 [ 147.882754][ T9521] ? __pfx___might_resched+0x10/0x10 [ 147.884564][ T9521] ? __pfx_pci_device_is_present+0x10/0x10 [ 147.886506][ T9521] device_unregister+0x1d/0xe0 [ 147.888049][ T9521] unregister_virtio_device+0x39/0x60 [ 147.889811][ T9521] virtio_pci_remove+0x7c/0x110 [ 147.891382][ T9521] pci_device_remove+0xb2/0x1d0 [ 147.892920][ T9521] ? __pfx_pci_device_remove+0x10/0x10 [ 147.894865][ T9521] device_remove+0xcb/0x180 [ 147.896654][ T9521] device_release_driver_internal+0x44e/0x620 [ 147.898604][ T9521] pci_stop_bus_device+0x120/0x160 [ 147.900237][ T9521] pci_stop_and_remove_bus_device+0x58/0xa0 [ 147.902123][ T9521] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 147.904165][ T9521] remove_store+0x123/0x140 [ 147.905583][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.907156][ T9521] ? find_held_lock+0x2b/0x80 [ 147.908680][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.910256][ T9521] ? sysfs_file_kobj+0xe4/0x290 [ 147.911781][ T9521] ? __pfx_remove_store+0x10/0x10 [ 147.913384][ T9521] dev_attr_store+0x58/0x80 [ 147.914846][ T9521] ? __pfx_dev_attr_store+0x10/0x10 [ 147.916467][ T9521] sysfs_kf_write+0xf2/0x150 [ 147.917922][ T9521] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.919658][ T9521] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.921276][ T9521] vfs_write+0x6ac/0x1050 [ 147.922684][ T9521] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 147.924528][ T9521] ? __pfx_vfs_write+0x10/0x10 [ 147.926038][ T9521] ksys_write+0x12a/0x250 [ 147.927405][ T9521] ? __pfx_ksys_write+0x10/0x10 [ 147.928954][ T9521] do_syscall_64+0x115/0x870 [ 147.930381][ T9521] ? clear_bhb_loop+0x40/0x90 [ 147.931800][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.933663][ T9521] RIP: 0033:0x7f05cfb9e019 [ 147.935243][ T9521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.941199][ T9521] RSP: 002b:00007f05d0acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.943793][ T9521] RAX: ffffffffffffffda RBX: 00007f05cfe25fa0 RCX: 00007f05cfb9e019 [ 147.946274][ T9521] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 147.948898][ T9521] RBP: 00007f05cfc3500c R08: 0000000000000000 R09: 0000000000000000 [ 147.951453][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.954208][ T9521] R13: 00007f05cfe26038 R14: 00007f05cfe25fa0 R15: 00007ffe8d600ea8 [ 147.957274][ T9521] [ 147.959101][ T9521] Kernel Offset: disabled [ 147.960490][ T9521] Rebooting in 86400 seconds..