last executing test programs: 47.629816501s ago: executing program 0 (id=177): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000500)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000500)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000ec0)="0b0ec2a1e3fc847889722e61fec27348bd54a57f68a85a0200ad43e00d06c0f7bd6c1e1d81e80505232e5bb561d223ed2fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec930b43749f25be60c4f87070100008000000000dccc6c1c61011ea282b784fdcfe6f2bebd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55adde130609528b84359e76eee93584aad3f751172c449fb0000005d28c5d5522c201f5b3d7675ad6c3d1b5f95343067d7ff51d8a712eecfa0e369284f6d626810302aab9d072060db813ae9c6f72c7f5a4f1ce05e04561820316460cbd46d456403d087ee0ec7c87e0a27f3d1", 0xea}, {&(0x7f0000003b80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069a0d001d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696890953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac931809ad5190b9324d8d66280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a69770c01d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e83a03e82642156fb14f7dc5d05d76e4cc2fc5d16d0a70e2dbdeda54fe9cf33ccaa327e8c15e0006529a397720a3104e33dc039b813416366334239dbbb9cca72d3618fef5f898bc2d751f6c214567b663ed41be7943b784413fa03dc1e56cd995af6911679b871c20ecf1f8eb9d3b7520e7a66667ca99e08f32fc9d95b3258d3f118aa6a90a9d3a2889eaf9a7b6e5b187a2316ed05dd719b8f3c7ac82f4913cb3cbfb6a0446cec2dfc4eed98c7ce4026b923b910f1eaa00a14cf00549166dda2a4decd6b00c4ce20a8ea4cb663a5681b9c8cf4812dad9879e2f72eebd887e1eebdd29589e8c2a9c60d9d0ea36ba81ff50972f3807d921cec59204e9e0b5a36cca6adce93c1afabd5daee333f4f838716f8065400e4e789dd53d9f8a5c9b6160f33f4c3212842993cd9f192a655d812ebbcde30455815510db4e217f6c6c429aa52034fc3f1eed6a370083dbccd422d6f2e3a0e3e76dade7069451fc252d71d1819ee62a90da03758d7e7cf889077fdd0e02275d8a2e382f5e90a9911522d05989993265b138f286d", 0xd7b}], 0x4}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 47.571054249s ago: executing program 0 (id=179): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000640)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @random="88f2e20e5d0f", @void, {@generic={0x18}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x41c, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x1, '\x00', r2, 0x18, r0, 0x8, &(0x7f0000001800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x2, 0x9, 0x3}, 0x10, 0x2e8f, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001880)=[{0x4, 0x4, 0xa, 0x6}, {0x3, 0x3, 0x7, 0xb}], 0x10, 0x90000000}, 0x94) 47.570526733s ago: executing program 0 (id=181): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='\\x01020304 2000000000 0 0', 0x19) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r5, 0x1) shutdown(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') pread64(r6, &(0x7f0000007300)=""/102400, 0x19000, 0x100008) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x2, 0xb, 0x7f, '\x00', 0x67b4a8e1}) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000002c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x6, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 47.350956608s ago: executing program 0 (id=183): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000180)='tracefs\x00', 0x200802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000ac0)={@local, @remote, @val={@void}, {@generic={0x88a2, 'f\n'}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000480)={0x1, 0x1, &(0x7f00000004c0)=[r5], &(0x7f00000005c0), &(0x7f00000006c0), &(0x7f0000000700)}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="c9aa572c6d120725505717e319509f91419aa9abac7a20dc5ac57f14e4cd4d512d958c83043940d3db1b8a8886f2de54f47d425d29b3bd227507f953c772996536a8070dcda5022f7c53ffb73ade5fc0e67fb5326671673bb82901a39ec1c6498d49cc79a2ead53a07d6473e949b9925e0d89facdb8c8b412a3efa64c4ea93492be198d16f5e4433782f83e86252125c0d5c5f5f153f0b0b7eabb538d420c4aa06652022bd04ecc2aa3d5bb37954cd0b8aa72cf87decfcae", @ANYBLOB="3d7199885d2bc0de2f3f5c1d3e1a466a70af246d57c76a6030bac30ce6c6957ec0862f1594aedb219801c858a18c80a32f6eab49f811c00b665f37d977a28772cfacb7835e55b4", @ANYRES16=r3, @ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0xd, 0x5, &(0x7f0000000a40)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000a80)='GPL\x00'}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = syz_clone(0x80000000, &(0x7f0000000500)="0c91da4b77c500adad6655d36d027aa015b2a7827b31fe675024034d783dc8d9cda0d0353c0af765237325", 0x2b, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000900)="16dd673fda2c14a279d97cf41a67ae88d21581108627d82cb04c79b2ff7e335ae691dae86437d0ce9138c939f0c0010289b9a24b") ptrace$poke(0x4, r8, &(0x7f0000000940), 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_open_dev$loop(&(0x7f00000005c0), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0xc030128a, 0xfffffffffffffff7) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0xfffffffd, 0x4) 47.272229727s ago: executing program 0 (id=184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @private2, 0x800}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @remote}], 0x9c) (async, rerun: 64) r1 = socket$inet(0x2, 0x3, 0x2) (rerun: 64) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) (async, rerun: 32) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000140)=""/151, &(0x7f0000000200)=0x97) (rerun: 32) setsockopt(r0, 0x84, 0x7f, &(0x7f00000003c0)="020000000980ffff", 0x8) 46.741238273s ago: executing program 0 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x7ff, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) 46.722389036s ago: executing program 32 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x7ff, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) 44.309665845s ago: executing program 1 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x4048811) recvmsg(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)=""/81, 0x51}], 0x1}, 0x2) r2 = landlock_create_ruleset(&(0x7f0000002500)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x154, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@private2, 0xfffc, 0xecdf, 0x0, 0x0, 0xa, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc}, {0x1, 0x400800, 0x3, 0x292}, {0x1000}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x55, 0x2, {{'cbc(twofish)\x00'}, 0x68, '\x00\x00\x00\a\b\x00\x00\x00\x00\x00\x00\x00\x00'}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x154}}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x1c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f0000001080)="b800000500000000", &(0x7f00000010c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001140)) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x7, 0x8, 0x7b, @private1, @private0, 0x7800, 0x700, 0x9, 0x3}}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x8, 0x20, 0x2, 0x0, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x64, 0x0, 0x7, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x1, [{@remote, 0x1000}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x7, [{@rand_addr=0x64010100}]}, @rr={0x7, 0xf, 0x62, [@private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @generic={0x83, 0x8, "44f644b1eb37"}, @rr={0x7, 0x23, 0xd, [@rand_addr=0x64010102, @local, @empty, @empty, @multicast2, @local, @remote, @loopback]}, @ssrr={0x89, 0x7, 0xa8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000880)={0xffffffffffffffff, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2fcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x0) getsockname$packet(r13, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) sendmsg$nl_route(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r15 = syz_open_procfs(0x0, &(0x7f0000001200)='fd\x00') getdents(r15, &(0x7f0000001300)=""/4096, 0x1000) sendmsg$nl_xfrm(r6, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)=@updsa={0x280, 0x1a, 0x0, 0x70bd2b, 0x25dfdbfe, {{@in=@remote, @in=@rand_addr=0x64010100, 0x4e23, 0xa, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x0, r7, r8}, {@in6=@private0, 0x4d5, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x5, 0xcb2d, 0x400, 0x4, 0x9, 0x7fffffffffffffff, 0xff, 0xe}, {0x4, 0xb605, 0x291, 0x7c11}, {0xe, 0x4, 0x8}, 0x70bd29, 0x34ff, 0xa, 0x5, 0xf7, 0x12}, [@srcaddr={0x14, 0xd, @in6=@remote}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e20, 0x2, 0x4e24, 0x0, 0x2, 0x20, 0xa0, 0x6, r9, r10}, {0x3ff, 0x8001, 0x7fffffffffffffff, 0x2, 0xfffffffffffffff1, 0x3, 0x41, 0x8000000000000000}, {0x1, 0x8001, 0x1, 0x6}, 0x3, 0x52726d4, 0x1, 0x0, 0x0, 0x3}}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@empty, 0x4e22, 0x2, 0x4e23, 0x5, 0x2, 0x20, 0xa0, 0x87, r11, 0xee01}, {0xa79e, 0x6, 0xffffffffd17d5605, 0x8000000000000001, 0x1, 0x8, 0x4, 0xfff}, {0x6, 0xb7d5c7a, 0x100000001, 0xda6b}, 0x2, 0x6e6bbc, 0x765acfe69af07078}}, @offload={0xc, 0x1c, {r14, 0x3}}, @iptfs_drop_time={0x8, 0x24, 0x4}, @extra_flags={0x8, 0x18, 0x9}]}, 0x280}, 0x1, 0x0, 0x0, 0xed6add01ad9e68cb}, 0x4) 44.051082151s ago: executing program 1 (id=221): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x77, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x134}}, 0x40008) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xffffffffffffffda, 0x0, {0x9, 0x40, 0x0, {0x5, 0x9, 0x4, 0x6, 0x5d, 0x1, 0x2, 0x40, 0x6e7570b9, 0x2000, 0x9, 0xee01, 0x0, 0x9, 0x3}}}, 0x78) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8a, 0x6f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ad}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}]}, 0x60}, 0x1, 0x0, 0x0, 0x40094}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x11e, 0x48f, 0x0, 0x0) pivot_root(0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf250000000070c40596f5011ba5a8e87f69aa67c3c9e9a6666f9f0bb842cb457c1d8edc143eba22fd2752c6588aa1065c725fb8724663fca0c0b9e336cd7a59707c97df53d954121b5d9ca71a4af161661477a791fc563782c8f8afe11f998355c5ed0d7572ece31843d245354e948fbac1e508c80ef0076ee0d87e63a03f", @ANYRES32=0x0, @ANYBLOB="28820100000000001400350076657468315f6d616376746170000000"], 0x34}}, 0x10) 44.050905191s ago: executing program 1 (id=222): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2da402, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1002}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) (async) write(r0, &(0x7f0000000340)="ffffffffffff0011223344554305600f32000000ffff0011", 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi1\x00', 0xa2000, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/118, 0x76}], 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) close(0x3) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async, rerun: 32) mremap(&(0x7f00000ec000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000c20000/0x3000)=nil) (rerun: 32) 43.995606955s ago: executing program 1 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)='\x00', 0x1}], 0x1, 0x10004, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x404, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002800)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002880)="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", 0x2000, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004940)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006ac0)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r3, r4, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006b80)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000006c80)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x40000, &(0x7f0000006cc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5f804c5f}}], [{@fowner_lt={'fowner<', r5}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@obj_user}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r6, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000780)='./file2\x00', &(0x7f00000007c0)}}, 0x40) 43.093670847s ago: executing program 1 (id=229): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0x114c, 0xfffffdd9) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) 42.760276369s ago: executing program 1 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181e01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010015, 0x0, 0x140000000000000}]}) 42.713565637s ago: executing program 33 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181e01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010015, 0x0, 0x140000000000000}]}) 29.550982631s ago: executing program 2 (id=401): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x42c3, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140) fcntl$setlease(r1, 0x400, 0x0) unlink(&(0x7f0000000540)='./file0\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x1000, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x88, r3, &(0x7f0000000480)='3', 0x1, 0xb}]) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x140, 0x1a0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x842, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/169, 0xffffffa0}], 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r8, &(0x7f0000000300)='1,0x400000,0x4', 0xe) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r7, 0x0, 0xffff, 0x4, &(0x7f0000000440)="5c34ac2f", 0x1}) 29.420116528s ago: executing program 2 (id=404): r0 = inotify_init() mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0xbea58000) r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x400, 0x0, 0x4000010, 0xffffffffffffffff, 0x20000000) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x2000000, 0x12, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001040)=@ublk_io_cmd_sqes={0x2e, 0x85, 0x0, r4, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', @need_get_data_cmd={0x1, 0x965, 0xffff, &(0x7f0000000040)=@buf_1k="363d9323cebe0fa428cea04f079c3db0d0bbf029acb7f5a3bf1becf8597d931792ab4983b4bbc46a05fd0e88579dd820ef49060200ff0e059146714dd179d8d17814953a48a982fa80c1c2e2477a18974fdc6aeb89e340f0ff94e219f9e0cdc2a6aff7f283d3e8be8cc3ccff5d1bdd4f9a376d69fb02a95fc84247c0ba4bbd122ea181d1788a7f50a77e133d597305f01791084acb3f4c203ac2c936c4a5492c7bf716bebc85e95b2255422db35f48bfef700ccdaf102d8964a95fbe174becf5df4a8acbd9bfcdb5ae8f9e76d47b769b9c212e34f01757da0a18140cd54197db14afbd848d12ad7731d22efbaab6325d9fee2999e4aaf3cb594d0de903641b52751d8ae3f324e4c387c43d309ab364b7209bf56fb5de2190da510c53b563a10cc691b32e1cf5b1ef3a8926f211348b9a98135c4672758cd53ff720f213a288e41f6805bbade7e1d972ce05fca40302b7723b52e2a1d6022f321c363943bb82c1f3be49e7e9fbe928d15c1fbb7140f80a9be6ed48cdb73fb9f603f834932f547043c651135625c616a44729616ff06499a10b544ada0430c45c9044c9fa967d4a209a146037c3ca4e138342d97ab801931113e3a2efddc0766eacb3b5926622a645f2e461e86c0eff1bb211ef9c6b88f504a84eaf6a65532d8daf3c6f58fe046519d8b4fcd0c783b0e7b64b9958c2a67ec16d93dcb452b77072526053ce79ae4bb0657eeaa64f81e46282b3062de5b8a42a71127f64d3fa415d6d23966c231dac5db08b05bad2bce2dd562eb9dd8018ea43d784f2659f66260490f5fbdba7201aafe24303621101dd65d8d71e242a364d700d81a5d71f2bb1e2312722d1308d38f5055e21a0b07a2bfdd26c3dd6806c537de3e8f69edf9fa943bd54783805578bb5e46aa203922144b6048c50d26c4f43b94ac95212642a585c1695fada48c2ddad37459df35dffb1861f728c43122ecd278b869d4478b3cae3f59d3bba477aa84309056775d89b4c3a3bab11d16fb6bdddb25be06391ccd7426372cc3b5a7db697867ac63ae9b6fbaba0ec96e35eef1cf72122803c1ce8bd73b0ed0f3ea1ee2176d82b4f629eadd9c6b57f14b317389ebcbd332efad4d8e68dc240ca5219db97eeb53deb3f3289a9d1fbe3f712e3bfb9ce8be47b1d12acc6faf16204fa755b2d9a005b1105131697f8328c9fb20e04bf08d87b28ae55dc5a2b72c1da82407dac6afbf074cabce3b2762062c2d636e8add3eb7514ffc240557c0a2521a1788d32e4311205ec4fcfd9326ab065adc49fef9e122bdd178f67613bd6f7a0f25a516facbf057739f43d9d2661123afedd0034180019e673f68d31cdbd59b547c5d4218c717270992ea1852603b00f7cb251168f3151d31eb491925032703f4026dffa842fc5b1052aa7701e6bc5e2bda0f31fc2ebd055cb6aae128bf069e72c60a810"}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001280)={{r5, &(0x7f00000010c0)='z\x00', 0x20202, &(0x7f0000001100)={@align=0x7, {0x7, 0x5c20, 0x6, 0x3}}, 0x0, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0xfff}, {[0x100, 0xf, 0x6, 0x1]}, 0x7, 0xa7, &(0x7f00000011c0)=""/167}) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000001300)) write$binfmt_register(r6, &(0x7f0000001340)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\xc3', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x4f]}, 0x2b) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000013c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001400)=0x18) r7 = inotify_init1(0x800) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000001440)=0x4, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x4b08, &(0x7f00000016c0)={0x0, 0xd59e, 0x200, 0x0, 0x12c}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) getsockname$packet(r6, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001840)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x2, 0x3e6, 0x1ff, 0x1, r6, 0x24c, '\x00', r8, r4, 0x2, 0x0, 0x3, 0x8}, 0x50) lseek(r9, 0x2, 0x4e088a9a8cfe5e65) fcntl$getflags(r5, 0x408) bind$netlink(r6, &(0x7f0000001900)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) syz_clone(0x80000000, &(0x7f0000001940)="0a4ff3e028adb4c4dc1925d7eae4cea2351e", 0x12, &(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)="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") r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r10) io_uring_enter(r10, 0x28bd, 0x4c92, 0x2, &(0x7f0000001b80)={[0x1]}, 0x8) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001bc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@llc_tr={0x11, {@llc={0x80, 0x42, '\'', "139227f543e33e9d8d187ede148161f20bbe328661d672d014854f50e7fe19a5cbff7c371520b8a5e19cbbd1a0339437bde1cf136296c0daf3a00b81f5da6c143c78f5391ecb4b0d3b6b6c3a64272a22d71249a8ec25ef7d5a833e36c6c53279093a0a24a667d20ce50c6f2383f24986134d50f7f14bbc6267f73a45c2b29cfcaf69db24e1220661bf05fdf717a6fc3d086557e1d01bd89245f775face19fd83742ae3c8f4979178ebdbd7358c068f75587beae6ecc1d5378db5cd094699aa2b7d029e9ae5a75d2b79602a7f8b63af5f88a499a9fd801b8ed7a8b252f638b60611217a48689442c2d3eb80197ba81c5ce454bb2b08990984dabff89f4c3a435ba06e9b4b15b503971069d8cb3c40f6a89854a0d4383857bb95dfb96d4d0b81bb6ab61a3f66065bcd90964ec11c4b6045bd96f41bbec3748fa463baa9fa2d5f678b4f17dfe26dd7daf4efc13852a41d63ff88f40580ea0972ad283b3e596fb9df1a9c842c534eea1c9a1e2eb91ed6f50109c0cd7d756c3217bc4cbf6b04290ac49a231054b13d34a428459f7acca3ae1a3ce5c3d34390272d62a4a0c86c771219c03313cebfb72b1d660d83c8db480dc435e313544ae9b49cc96494c2e340477f6ae8b2add1e05a906e41adcd00959743c3c6d57e0cc3c8531ac2b9577ee26f4351ee4b28c7a5570d0c095e313fedc4b99ccf522e0e6de7dd9e1b002a611beedbd92812e386280b7e20d2aa76f73dce644aae32c6d1fe91ce98345893b6b5cb1729c8fdc0d1b305b07a08ad437090418910db34cab386a428be2c9c59e07a195cb524e3c1d074f3ceee564b77c2a1382c92e86812a27d934d270b678f5f7e8231f5267d38e8bf87968a2c074fc0bb61c59e4c22e602c61ffea2e96e15b7387cc10085f7e29e2d1114b4771e5f9f9961c7a6693672eb7118284533c7945539b8ea92321ee19e8e9e6298cedf05ef9699ea2b0adcfff3ae3485a0a4444a8e0dc117fe3f07babb1cf59aa8398718b52dc75acdbbe0a3f98d42c187a9866f7f9d9246ac9feab7a01224875918b9d0fd7a2077a9a8d01c44a0379c0582032c4b3d7038e4809846c5a0e5d2b975518d31f0914756c30fffa55c609833eddbf110a2694b67e848176d2f2a0b2ec2b4e4f7651453bcc272fa41ec42dc592d5ba47c279652ab8a249d5ff54877143e451802fcd7fdb0704feb5bd9f9cd8de7f598b206fdd89a2d337ec8a615a4b7ffd7a4d055271a8595fab6703f7a1d764499545b4176cc7cb88c88ec5d93af95f0ab8b60187d3957f5a0b5a613bdb5786e21188dff01ed16bd4919dfc24c0c17066b1939739cb77287379ecba8004b8bd40c3874a975b486b036304ddecbcea4ce5e6221840fcad7cbbd7d26ee33b1e667a58c42bff1627edd1091e12e326b07262353132db8cf2c6f722d48c73f862cf9e026471093e0abbc768fd36fbd9daa894bde745901a51cf7d5e230793caf374e3735cd7870fb300871e0e0ffeccfdae1badc87a7e52d123d6655da358345cee71a32c666a9654207eb399f98fa4fe5b75f9a9140e13322fdb9320a46d3e7921469a733f0d7b026c353d614665719a0385eecd6806b4787cdf3057c5a74add90f938d599b6d50e38256cb6a76f0f52524870ae59dcb87a7b0833f0f918652db32498b067974335e3ab7702a9ae1ac0cc3e5e4b9c52b93d57fd0ec97731074187f96cb98bba491ddf0c01f5d533f8b789224ccf3d66e1400a99639f66ddd6db713e4169a9d451050cfae5bab3703e72904c74525a38797cbb450fb03f956779ecebb798ccb174b014a5111bce62ad8540bffd0bde1fabfeb88bc6a3e07f55d42eed3d9ec367100e423b190ff2614e4e9bf67ec6295d33eb710ab6b6d23c0747861513a7a1aee92ccfdf40768febddc5d88b818ade7de520e12242fd9d635ffd1e9e3aad80279c5b4ba447ed2ef198d5ce3a19a97c4382e7435c2f83275fe8b077b2a6e8f3fccd32fd0e46034a665a3708df48af36eee2913557d97b8ac52492380c904317bef7711cc4de33558089a91214a4b88dd7725a4ad26124a23676e94015b98eab69ec6c008fe9992ac18c773ef236620bfd62927d8a6315fd870b5cf11e7800e6aa2eacc8d3283968a1c725d639e452e18d79d05f185546e68ed7b564b1c554426909e5515ce2fbe50066d7d0ae8f5ec28838ad339e81db9bc32b6ad604473793396817021b80a490ad6992ca151f45efb0148cba2a1d77e33d8fa4c8e4baaac53f7511bc7a28c999f8ec89b9cb4646832ea1a023f2b3dcfa885ead63eae002841c88a0f85a2f89f9774e0881cc85803d9a796bc899d75f80e9f51dc94186f1308c06836e615a2f81e45d96cc258b115746cdf109626bf96b7ec348b8ac0bbf19cd43131ff8f1c30b2fb3800821b5b4512af1275cbfe572a093f9baefbc87d3c608d9de8f8833a78a13d08a7f2ee321956fe2693b30d7af3075af1d7067d7d028d10baac7da310a750ce95da571bcc1ddaf14a9b50cc41141ddcf8a4a7efa4bfa34c35d8bc62afee5015f93f3c2fd61a6fb9661e260165a3cec41fed14d580b090b9607a93584670f848aa48d12d3749e747972a065aae7726788eac10b8ec91a40b51187afd4c0f811a02ff14d3704e33ebc3066cc2a586ef172c9657154030807dec645350e723f981d9f6d50e6ce22301b312cbefe00094f5b7cf5bf6b48e74d98cb96e1a9c9c0cf3881044817b04e7477779e25282c5b993be3abefdd2cc030738dc059e8ebe549349bc43a36ea2d0efe243552e69f365b1cd22e42cf35dbed864ccba49d14743979c7f4f966042748e02d2abf1b6b0772d4484d1617d71e6292df77714422159aaca7fcc9170ebf0b7240f29155cbdf999f116a45b4d480d520316e833029a1db76e1aeff3788236c8f0e3fecfacd356bea9fb9bd41a8db9357a6f1cbf9411bb95380e107af64087bae13821c4b81fe0ae18bc30513ca2ecd213245c8af1389399d5f14a56e705694111439ecf6cb5fdfd714d1b691897dfd141d8d49b80f68d5d95377e4c0268b30a51254d700aa455b02e3a3a48879f78a571d5cbd539ebd62d2159205054af8fbda52f5b4699cf740640165bee2ecffb39623f1b6fec2253812e5aee236505b61e097707426d37433e6a886b43ccaf6a5afe67e54ece0068453ae9ea3c30cd055594ed6a3041e0e694743198beaa6903ddc5e9e74de9d4f5509a07dc8376f2ddc53ac41d37abf90d8d35554087820cbf21e8239f45450eb9329a7332ffa060f71fc7ce15405d0cd9b96569e26c2fd810d4b1e96739484e105e669ce9cded708bdfc82d7d96b29b6bad6d3e8c8e7c845141665fdc326b08ee75896fd8fd6e1793376d63f19e9e0e158b3e7de0ef158a519e19cea54ebebccbf73cad7df284885045ef68d93a3f4fbbac4aa90dfffd92221485e47d94e002ec00f9006872926fe60fd07830794c5f6364d932110ce2f8bbe1d6202ca7561bea760554eacc3c61bbbf3fce01c1f5dc39801785702e53e583a2825dc8ef6667b81d343f97d726f0b11e6dc957c64f62f51f1496df9ecba5a7920e030706cc4ed46ea5b8b313c391b07b56a73b6a13a268b38b5804af4f7afa16a24062acf5ff8d574979f8ae2a53fca1653e520839abc086547fa0255d5f385bec8217e788a1a37638b50043afa46712a65cda1de9c07b55e238fd673ed39ab9d64042bfb80c45362d39cffc796d3b75518f7439ef65a2df8c2dcb25457b69964d5697f338bcc684a52d7058724b524282189d5221157b74f3d781987f3dbecab40b286d4bfbe5f3bb5b23033f844c044da6a836b3c0b105bc2951a4147f42fa342c0222b2e0f839562488f8124b3acc2474ef995d54185bc421bd03631c32fc97146a82b78339ceb896d2729707efd4c7d0cdd293bc17e7576e881f769f9522f3389f90b12590177835e6344e5b624dc16a4aa1d54155148500a7e1e2bfca13ba7116288d6723960e797b69b40599038eaa83cfe3393df7e0b4bdc45e94adfa094a8c2009a1f0fa703ebbd1f362b4cd4956b259c76e3618a7d074aaadb3812cfc8eaac4f2df11155dbfbb745a1c99d47df478eeb8c6997b8b6dc05209388f2398f0d5b947a9983d53be2c6c853d9b31646397f40012752bee889aa031821f032be951e5a03273e210dca56f090a1d87f831a2db09b7a9523147e9a08790c6b3632ad8143fa1363b759427c0bba7b6b05e25cba130c86b36b637149d8263ea549bcac2ae56284c55084213428bb4612265714eaad2722f8477c595cf05ba1b74b84564aed580bc10e7bfe01b8e5daf659b23b2ebf0158a6a498a42c82d093d396dee12a1bcc0b85a6870cde4429d7e09e2bc320c04c6e83b1c7fa8ce4f37a81b605699e9369b567137778ce3b40fb21bc46111db83fec1059050dd87769af5c3d0515c7fa79bdddbd05be4373b5e2ed7d338f9bd675a929c6e616e0bef54333b15e0a06eed461de3f4841beaa605daf561eaf90e65082fecbcf4e38accbd9987b37c4a1f95a488aee1eecc49449995c66006073ba51c88561a0e44e342a3c3f4c73bf15be74fedd68c0143630ec2061842d763c879e181c26840ba6c3c243e0306f619045df74c1163279086e9d5a66c6c381ce4c3d29d3f2d8ada9380497f162d8ddf9aa6b765ebe09bc8d55452be681b617b176f878579393964f59ad158e3929d4564cce84ee08fd282541467d662ad5d886ff5d41b7c7c26733100759a161e4d3fea8f3d95a0d1eef240d63e0b6fec2e292da64e83ade0c09703824a32a65363f2c30114153a3b77842be3d9e7b62d1bf232c0fcb063dc773cc6f70571e949ea6086248af1a115e9cb23118857c1e698b083a72b3efe97b1497a7f5300e43fed0b02b05602a02b78c5d7ed808be3dd66d5118eccbc307e56987afcc5c591550acaf91ab632e516d6829e00dc7841e84029aa2180ca79434d544d9c9ee69e081891ab71121fd58095ad3faad856a2679eea1916d3223b9afec7c10809d9d156be1ebd1636b4ae1cd2f9e39d9dd07848d069e8524f099732c93c50651a052192f475bab9a6c2fa0d60fa1f9d5081b7085d3f762d371f0518a36f05b8febc722c700bde98412924be9069fee5629800876cf8115dbfc20d6566bdf7faf1b3c4b450dcfead635e6a6dc1db266031afcdca054fe2d88c7e5fc47d3fb135201255a53fbcaef2785719d3a95c7f64760f54a57bf6644c0cc60d20beb81a5ab9a4b8187f81e61ffd9d76762394fd89326fc44551c98e00715b93f009003b71e2445c343ae57dad6ca78c8b638ed4d82b9d99c94ec73254ad52a04785e171f333188d2189ae17f03f63befd5f38fa52779347890127f6b3a1fedbc9641f79fd435f091fb1bd80bd9f81042966470b5a9dcf39d85df9c4da9e8dcebc60b63c86609298b3392b503740259699762d4b136c3248f9f6bcef9c3a682a3bc8cd3744db5488ad21629c6d7a49832ca82a59db5e6a29aa4954ceb0358157ae9923e9486578c68d67079ec8c2aaa2a82e3b124ab95acf2630684c8532dc98a3d1b676f7b914426b0f6a1bcb266c0d3147d254190c83c0b32dafb1830ef4d44047db5cf5fe8c2ea2e46685a2e1ad97fc12fe8e59662990e741ad2835a2ab7d360d261748bcd8c2283814caa216ab970a7434e31459997277276da57a5dcf8404c82a85da4a14e68329d4ecbc454e688a12a8f3fa4bf5fe25d10d55422f3dfb7046d9b74e525bd3359403d74cb5412a548f3b0df989273d6ff5c34c4c79cf005ac2e144d1202f2443"}}}}}, &(0x7f0000002c00)={0x0, 0x4, [0x289, 0x1, 0xc99, 0x7ad]}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000002c40)) 29.326954965s ago: executing program 2 (id=405): syz_io_uring_setup(0x111, &(0x7f0000000240)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000009c0)=0x4, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa00", 0x7}, {&(0x7f00000015c0)="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", 0xc5d}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8c0, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={r1, 0x8000}) 29.326559292s ago: executing program 2 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='disconnect 11:aa:aa:aa:aa:aa 0', 0x1e) (async) r3 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000b00)={0x9, r4, r5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000c00)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[{}], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x1, 0x7, 0x3, 0x0, r5}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000b80)={r4, 0x2, 0xd4e, 0x8, &(0x7f0000000b40)=[{0x4, 0x5, 0x7}, {0x8, 0x4, 0x5, 0x3}, {0xe, 0x3, 0xf, 0x8001}, {0x6, 0x7, 0x9, 0x9a}, {0x7fff, 0x1, 0x0, 0x1706}, {0x5, 0x2, 0x7, 0x8}, {0x32b3, 0x8, 0x3, 0x4}, {0x9, 0xa91, 0x4, 0x4}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xd5848, 0x0) (async) pivot_root(0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'dummy0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) (async) rmdir(&(0x7f0000000400)='./file0/../file0\x00') r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f00000001c0)={0x0, "02c0cf0c629c527e5162bf1cab3223b02749791e5c7465e0caa7b1214ac1efe3", 0x5, 0x100, 0xfffffffe, 0x4b70, 0x4, 0x2, 0x80000001, 0x6}) (async, rerun: 32) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000700)={"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"}) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x230000, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 29.127434195s ago: executing program 2 (id=413): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$md_new_array(r1, &(0x7f0000000040)={'md', @num=0x0}, 0x3) (async) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x1000ba1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016"], 0x60}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000300), 0x4000000000001f2, 0x0) (async, rerun: 64) r4 = dup2(r0, r2) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r5, 0x4}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') pread64(r6, &(0x7f00000001c0)=""/19, 0x13, 0x3) accept4$unix(r4, 0x0, 0x0, 0x80000) 28.961238088s ago: executing program 2 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0xf) 28.960207252s ago: executing program 34 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0xf) 3.45897181s ago: executing program 3 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000001340)="3e260f01b20b0000000f20d835200000000f22d8440f001ce500700000ded0450f01cf0fc71b660fe618260f01cf26f30f58e0b9800000c00f3235001000000f30", 0x41}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) read$FUSE(r3, &(0x7f00000013c0)={0x2020}, 0x2020) 3.300952645s ago: executing program 3 (id=628): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r2 = openat(r1, &(0x7f0000000040)='can/rcvlist_eff\x00', 0x0, 0x0) read(r2, &(0x7f0000000080), 0x1000) pread64$ublk_bdev(r2, &(0x7f00000000c0)=""/48, 0x30, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newchain={0x30, 0x1e, 0x1, 0x1000, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x2004c000) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f00000001c0)=""/188, &(0x7f0000000280)=0xbc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f00000002c0)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) ioctl$KDENABIO(r0, 0x4b36) 2.440561328s ago: executing program 3 (id=634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000280)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="0b0312002e3c64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000380)={0x11, 0x88a8, r3}, 0x14) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff52c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff52c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000440)={0x81, 0x0, 0x3}) (async) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000440)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f00000004c0)={0x3000, 0xdddd1000, 0x1000, 0x0, 0x1}) (async) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f00000004c0)={0x3000, 0xdddd1000, 0x1000, 0x0, 0x1}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000000206030000000000000a00000000000005000100070000000900020073797a32000000000c0007800800064000000008050005000a000000425d81d606f8b5092c414505000400000000000500050001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 2.370864222s ago: executing program 6 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40201, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000200)={0x30}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r2, 0xc0045878) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000002c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1, 0x81, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0xc084) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x8, 0x5, 0x1, 0x1, "8df0a95613a9ad8c2144d9d46eec0389ae0ff8"}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.649217217s ago: executing program 5 (id=640): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000002480)="81700a1df2e172b40b2d26ad577c8cce099e3da98cfc042ca5d8c32e113a8460e3e1ee33d411b3778a144f5e1a105c158503dacae21ab70968747509f5a358b6320b4da541929d95bd", 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$tun(r1, 0x0, 0x11f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfffc, 0x0, 0x3, 0xa}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x9, 0x81, 0x0, 0x3}, {0x4, 0x4b, 0x6, 0x400}, {0x9, 0xfb, 0x6, 0x1}, {0x3, 0x4, 0xc2, 0x6beb8ad0}]}) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000015001f0f01000000fddb880000000000000000000000000101fe8000000000000000000200000000bb4e2000004e23fffc0a00100002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0400000000000000030000000000000004000000b56b6e000001030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) semop(0x0, &(0x7f0000000340)=[{0x0, 0x9, 0x1800}], 0x1) 1.620691226s ago: executing program 5 (id=642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) (async, rerun: 64) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x0, 0x4}, 0xc) (async) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000480)='./sys\x00', 0x200, 0x1) (async, rerun: 64) read(r2, &(0x7f0000000280), 0x100) (rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@index_on}]}) (async) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r5, 0x3dd47000) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046}) (async) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001540)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000001640)=0xe8) sendmsg$nl_route(r7, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)=@ipv6_delrule={0x6c, 0x21, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x10, 0xa6, 0x5, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8, r9}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x48ab}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4001) (async) write$UHID_INPUT(r4, &(0x7f0000000500)={0x9, {"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", 0x1000}}, 0x1068) 1.501074077s ago: executing program 3 (id=643): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x8, 0x8000}, 0x20) r2 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='gid', &(0x7f0000000280)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}, 0x8040) 1.499802613s ago: executing program 3 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b5, 0x0, 0x8}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 1.359590979s ago: executing program 3 (id=645): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04e4e7e5ae5c8f679c37556b81da374e26c82915b0fe5d2762e1b7323394a3532f77df3adf49e90057b24a6c0bd29bd8182e38019166974544f5d1092eab734af1e48dde39464f483235"], 0x7) (async) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair(0x6, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000680)={'wlan1\x00'}) socket$kcm(0x2, 0x3, 0x2) (async) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = fsopen(&(0x7f00000006c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='gid', &(0x7f0000000740)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff27, 0x40000010) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) sendto$inet(r5, &(0x7f0000000240), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r5, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10001000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x0, 0x7, 0x1, 0x6, 0x2, 0x10, 0x3, 0x8, 0x4, 0x8, 0x3, 0x0, 0x6}, 0xe) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) (async) setrlimit(0xf, &(0x7f0000000940)={0x8, 0x8000000000000001}) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000b0feffff000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035080100000040009500000000000000b7020000000000007b9af8ff000000007509fdff030000007baaf0ff00000000bf2700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x40, 0x0, 0x4000010, r1, 0x0) 1.001113376s ago: executing program 6 (id=651): r0 = openat$kvm(0x0, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04"], 0xd) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) r7 = syz_io_uring_setup(0x5092, &(0x7f00000002c0)={0x0, 0xc383, 0x0, 0xfffffffe, 0x200003}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) (async) r11 = eventfd2(0xfff, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000400)=r11, 0x1) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000440)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xd2c, 0x0, 0x0, 0x1000, 0x3f3fee7e, 0xffffffffffffffff, 0x0, 0x20}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0x4, &(0x7f0000000740)=@raw=[@exit, @exit, @map_fd={0x18, 0x8}], &(0x7f0000000780)='syzkaller\x00', 0x6, 0xaf, &(0x7f00000007c0)=""/175, 0xc3200, 0x0, '\x00', r6, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x2, 0x4, 0xa}, {0x2, 0x4, 0x8}, {0x4, 0x5, 0xa, 0x39912de48230928d}, {0x5, 0x4, 0x2, 0x3}, {0x4, 0x5, 0x8, 0x6}], 0x10, 0x602}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000a40)=r13) (async) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x4040000) (async) r16 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$selinux_validatetrans(r16, &(0x7f00000005c0)=ANY=[@ANYBLOB='system_u:object_r:pinentry_exec_t:s0 system_u:object_r:mouse_device_t:s0 00000@\x000000000000000 /usr/lib/telepathy/mission-control-5\x00'], 0x83) (async) r17 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000580)={0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r17, &(0x7f0000806000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000700)=[@cr4], 0x1) 920.506722ms ago: executing program 4 (id=652): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x4e6581, 0x0) 919.705292ms ago: executing program 4 (id=653): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x3, 0x7}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xc0000000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x44) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000001c0)={{0x1, 0x4, 0xe, 0x9, 0x7}, [{0x8, 0x4, 0xfb, 0x3}, {0x6, 0x5, 0x37, 0x6}, {0xf87b, 0xdb, 0x3, 0x6}, {0x9, 0x3, 0x2, 0x7f}, {0xa, 0x401, 0x9, 0xd}, {0x7, 0x200, 0x8, 0x8b}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000002c0)={0x0, 0x3, [0x0, 0xff, 0x33, 0x80, 0x3, 0xfffffffffffffffb]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x324, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7fffffff, 0x1}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}]}]}, 0x38}}, 0x40) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = accept4$inet6(r6, &(0x7f0000000740)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000780)=0x1c, 0x800) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)={0xff, {{0xa, 0x4e24, 0x0, @empty}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x7c76, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}]}, 0x110) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x2080, 0x0) sendto$inet6(r8, &(0x7f0000000940)="933cc01442e72219055dd7f75d189a4d2ef7e2e15bf7a4c1a2b2212ae96f54da7cef39b950bc04f32e33d9b3b55d373d4eb96a692233", 0x36, 0x8001, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x12448c04}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000ac0)={0x0, 0xc4d, 0x30}, &(0x7f0000000b00)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000b40)={r11, 0xe13}, &(0x7f0000000b80)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r8, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r13, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r14, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x8, 0xed82, 0xbdea}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000002300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000022c0)={&(0x7f0000001080)={0x1214, r15, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf5, 0x4, "a11ceb65af71d42d079df3db16ad82cc1d747b345d4b1b47fc22285235ca183e669dd8d6b2a749d31577173a877cb0e2429b10625e54725adaedf8834929b646fc728d5394be8dc2637351349364b3da80c483b4e6a9f7c04f35ef4f67f66dbab296db0773b70b4ff44576abc586d8d366050cf38ae52721c24dc376607ed5abaad6c2e1f5ba12161d602b836cf19d7c35f577714aab25cf80b89c29e0e91dbee9247b606dfafe3a1cea5e1ca135dd09070c107ef4c9f125dee2a45fcbd6ba0dab49222330d1da2a7f60d00694a38e7732506866f2d78feaced8ed45ee6fb41eec5ff78b004a8c5c7c910b46423b4023c9"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x448}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "06226ea3750760dd62ea9e99d546e4be479d13ce9573ac8ad800aafd024b43ab5a6bf42fad01dd25f814d8efcac9bd53bd33c4dac9dbbb6f8c010a3e34955924fb6293a60b1546b3f70a53292971217f2c183fcd0c135c732d7566631bf3057da4f80753522854c7c8ef58442b344ac632660590b3a0ccd24c7bfe2311d6b8fb259920c23038ca0fc411add5bca5a9a9"}]}]}, 0x1214}, 0x1, 0x0, 0x0, 0x14}, 0x0) inotify_add_watch(r6, &(0x7f0000002340)='./file0\x00', 0x1000080) 860.742083ms ago: executing program 4 (id=654): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x173) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ftruncate(r2, 0x8008971) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) rt_sigqueueinfo(r3, 0x37, &(0x7f00000001c0)={0x30, 0x3, 0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 740.636525ms ago: executing program 4 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000040000300012800b00010067656e657665000020000280060005004e23000004000600050003000b00000005000a00"], 0x50}}, 0x40800) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000800)={0x8, 0x0, 0xfffffffd}, 0x24) write(r8, &(0x7f0000000840)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000540)={@empty, 0x0}, &(0x7f0000000580)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb74c}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20004401}, 0x2004c001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x28000, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000940)=0x2) setuid(0xee01) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000980)=0xf) symlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00') 679.402903ms ago: executing program 5 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0x81c0, 0xffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000020000000000000000003f2900000000009afc"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000480)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x187) (async) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) (async) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file2\x00', 0x0) 679.285488ms ago: executing program 5 (id=657): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) unshare(0x22020600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x20206, 0xac) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendfile(r2, r2, 0x0, 0x68) bind$bt_hci(r2, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="007f104157118547ebe59c56a9fb71133b04044655a3fcc72a3fbc2fe79a527df04717ade975ad4ef62fff"], 0x7) r3 = pidfd_getfd(r1, r1, 0x0) setns(r3, 0x66020000) 317.331171ms ago: executing program 4 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001d000100000000488a0000000a02000000000000000000001500"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x1c0102, 0x0) write$vga_arbiter(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB='lock io'], 0xc) close_range(r7, r7, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000002c0)={r10, 0x7fff, 0x6, 0xfffffff7}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000340)={r10, 0x7}, &(0x7f0000000380)=0xc) io_uring_setup(0x3dc6, &(0x7f0000000180)={0x0, 0x7943, 0x200, 0x3, 0x5d}) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x32) 238.88912ms ago: executing program 6 (id=659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4048801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000001000)='./gadget\x00', &(0x7f0000001040)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f00000010c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(0x0, 0x0, 0x2) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001180)='./proc\x00', &(0x7f00000011c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001280)='./gadget/ep1in-bulk\x00', 0x2, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000110000d2328bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0xc, 0x6, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @lsrr={0x83, 0x27, 0x1b, [@loopback, @empty, @empty, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x15, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x80, 0x8000, 0x1, 0xccf1, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0xf, 0x18, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0xf800, 0x4d07b395c1a18898, 0x1, 0x0, {{0x29, 0x4, 0x3, 0x8, 0xa4, 0x68, 0x0, 0x3, 0x2f08245ba1433de9, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0xf, 0xa0, [@local, @broadcast, @multicast1]}, @rr={0x7, 0x13, 0x1c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x7, 0xf8, [@rand_addr=0x64010101]}, @noop, @rr={0x7, 0x1b, 0x0, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast2, @broadcast]}, @rr={0x7, 0x23, 0x1f, [@empty, @loopback, @empty, @multicast1, @broadcast, @remote, @multicast2, @rand_addr=0x64010102]}, @noop, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0xe, [{@rand_addr=0x64010101, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbc}]}, @lsrr={0x83, 0xf, 0xb, [@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x78, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x40, 0xe, 0x70000000}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @local, 0x40, 0x40, 0xa706, 0x5}}) 238.631882ms ago: executing program 4 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000090000f600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200, 0x7f4}}, './file0\x00'}) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x3, 0xf1, 0x10338, 0xffffffffffffffff, 0x856e, '\x00', r1, r2, 0x3, 0x1, 0x0, 0xa, @void, @value, @value=r3}, 0x50) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async, rerun: 32) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 32) ioctl$CDROM_DEBUG(r6, 0x5330, 0x1) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r5, r4}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) (async) close(r0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) 188.866578ms ago: executing program 6 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer']) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2402}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x9, 0x4, 0x5}) 100.597289ms ago: executing program 5 (id=662): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x1b7) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000840)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000880)=0x2) r2 = syz_io_uring_setup(0x7245, &(0x7f0000000600)={0x0, 0x8bac, 0x10, 0x6, 0x275}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1000, 0x1000, {r0}, {}, 0xfffffffffffff375, 0xe6e}) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x1, 0x85, 0x0, 0x0, 0x1000, 0x6, r5, 0x0, 0x2c}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000280)={0x0, 0x10f003, 0x8, 0xffffffffffffffff, 0x2}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x5, 0x8, 0xc}, 0x50) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000900)='cgroup.events\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$DRM_IOCTL_AUTH_MAGIC(r10, 0x40046411, &(0x7f0000002980)=0xffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r8}, 0x38) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f00000029c0)={0x6a6, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="002700000008000100d504ab3500"/25], 0x20}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001614"], 0x10}}, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000003c0)) r13 = creat(&(0x7f0000000580)='./mnt\x00', 0x20) sendmsg$RDMA_NLDEV_CMD_SET(r13, &(0x7f000000ca40)={&(0x7f000000c980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000ca00)={&(0x7f000000c9c0)={0x18, 0x1402, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}}, 0x10) 99.586039ms ago: executing program 5 (id=663): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x4000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000006, 0x2000007, 0x7140467a010f839c, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000a00)={0xd2f1, 0x2000, 0x8, 0xadea}) r1 = io_uring_setup(0x8c3, &(0x7f0000000a40)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000ac0)={[0x100000]}, 0x18) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000700), 0xf, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000740)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) bind$inet(r0, &(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000008c0)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x2, 0xc, 0xe}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x100000000}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_to_bond\x00', 0x2}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xdc) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) 334.467µs ago: executing program 6 (id=664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x40fff, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0xffffffff, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW2(r3, 0x5437, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_pts(r2, 0x10440) 0s ago: executing program 6 (id=665): timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8002) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000180)=""/51, 0x33}], 0x1) (async) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000180)=""/51, 0x33}], 0x1) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '#]/'}, {0x20, '/dev/sg#\x00'}, {0x20, '^:'}, {0x20, ']+*.#\x94:$%@'}, {0x20, ']!.!#:'}, {0x20, '!\x9bI$\x0f\x12\xf1_\xcdk\xa3^A(\xd3\"'}, {0x20, '/dev/sg#\x00'}], 0xa, "fbf8e60ed876bebe125583599092ef031f55d18aaa1f60de82c78ce17b7d5c0c75b222b6e7077fa67b137cf9a3d7f6f5d9fdbfd56bf4cae88d1a0e204d850bcc0c851c60d49b06d96a218864c461424d1d49326dfd0ffa0278cabd17e96e71b09269ec5a5811035940047df32accf7e6d2657db3663ee2d75b24a32313b1afe6d299f057de416b632e77fbd194fe9fbc7b27c7f3f162ed45192f48e71d4c6b844159e77bf095d8a3b0b993915d"}, 0x100) 0s ago: executing program 6 (id=667): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0xa0800, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3fffffffffefe7, 0x0, 0xc0, 'crypt\x00', {'capi:ccm(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '8191', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1'}, ' 2 integrity:32:aead integrity_key_size:32'}}]}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newqdisc={0xb8, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc}}, [@TCA_STAB={0x39, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x8000, 0xee1, 0x2, 0x1000, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0x80000, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x14, 0x6, 0xca48, 0x8000, 0x2, 0x2, 0x7f, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xf5, 0xdf, 0x2, 0x5, 0x1, 0x5, 0x4451b5f0, 0x2}}, {0x8, 0x2, [0x5, 0x40]}}]}]}, 0xb8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) open$dir(&(0x7f0000000880)='./file0\x00', 0x0, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x3c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x16}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x40855) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) kernel console output (not intermixed with test programs): 5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.729626][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.730140][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.755823][ T6769] process 'syz.1.188' launched './file0' with NULL argv: empty string added [ 64.819137][ T5856] bridge_slave_1: left promiscuous mode [ 64.820116][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.825916][ T5856] bridge_slave_0: left allmulticast mode [ 64.825935][ T5856] bridge_slave_0: left promiscuous mode [ 64.826178][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.865145][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563b6400: abort rx timeout. Force session deactivation [ 64.865776][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563b7400: rx timeout, send abort [ 64.948565][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.950748][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.951768][ T5856] bond0 (unregistering): Released all slaves [ 64.963442][ T6794] jffs2: notice: (6794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 64.984766][ T5496] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.056867][ T5856] IPVS: stopping backup sync thread 5958 ... [ 65.129048][ T6766] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.131873][ T5496] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.321842][ T5496] 8021q: adding VLAN 0 to HW filter on device eth4 [ 65.335805][ T6819] syz.3.193 (6819) used greatest stack depth: 19368 bytes left [ 65.365828][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563b7400: abort rx timeout. Force session deactivation [ 65.379989][ T6834] __nla_validate_parse: 67 callbacks suppressed [ 65.380001][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 65.380008][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 65.396528][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 65.396541][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 65.446839][ T5856] hsr_slave_0: left promiscuous mode [ 65.447533][ T5856] hsr_slave_1: left promiscuous mode [ 65.447985][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.448004][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.450139][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.450150][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.465509][ T5856] batadv_slave_0: left allmulticast mode [ 65.465640][ T5856] batadv_slave_0: left promiscuous mode [ 65.465698][ T5856] veth1_macvtap: left promiscuous mode [ 65.465712][ T5856] veth0_macvtap: left promiscuous mode [ 65.465823][ T5856] veth1_vlan: left promiscuous mode [ 65.465862][ T5856] veth0_vlan: left promiscuous mode [ 65.610863][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 65.621359][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 65.711648][ T5496] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.741881][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.741960][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.742014][ T6766] bridge_slave_0: entered allmulticast mode [ 65.742685][ T6766] bridge_slave_0: entered promiscuous mode [ 65.744383][ T5831] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.745948][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.746027][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.746118][ T6766] bridge_slave_1: entered allmulticast mode [ 65.747373][ T6766] bridge_slave_1: entered promiscuous mode [ 65.754031][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.774768][ T6854] lo: entered allmulticast mode [ 65.779452][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.782627][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.801681][ T6766] team0: Port device team_slave_0 added [ 65.803432][ T6766] team0: Port device team_slave_1 added [ 65.833777][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.833792][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.833812][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.835975][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.835987][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.836006][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.863334][ T6766] hsr_slave_0: entered promiscuous mode [ 65.864452][ T6766] hsr_slave_1: entered promiscuous mode [ 65.864975][ T6766] debugfs: 'hsr0' already exists in 'hsr' [ 65.864994][ T6766] Cannot create hsr debugfs directory [ 65.915466][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.916102][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.916141][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.916291][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 65.916901][ T24] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.919900][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 65.919924][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.919935][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.919946][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.919957][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 65.919976][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.065549][ T6766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.067456][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.067830][ T6766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.069550][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.070042][ T6766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.072166][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.072721][ T6766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.074602][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.087264][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.087333][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.087441][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.087485][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.112854][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.124524][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.130590][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.140322][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.148485][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.148550][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.152694][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.152744][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.177062][ T6879] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 66.186757][ T6879] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 66.417791][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.427908][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 66.427921][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 66.463302][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 66.463322][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 66.471415][ T6909] xt_socket: unknown flags 0x8 [ 66.580689][ T6915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6915 comm=syz.2.207 [ 66.586636][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 66.597804][ T6766] veth0_vlan: entered promiscuous mode [ 66.600968][ T6766] veth1_vlan: entered promiscuous mode [ 66.617141][ T6766] veth0_macvtap: entered promiscuous mode [ 66.619926][ T6766] veth1_macvtap: entered promiscuous mode [ 66.630878][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.637192][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.685791][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.685804][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.707197][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.707215][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.716293][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.734099][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.734171][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.734190][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.745128][ T5798] Bluetooth: hci2: command tx timeout [ 67.034308][ T6944] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.088183][ T42] kauditd_printk_skb: 271 callbacks suppressed [ 67.088216][ T42] audit: type=1400 audit(1793163019.788:705): avc: denied { setopt } for pid=6950 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.088354][ T42] audit: type=1400 audit(1793163019.788:706): avc: denied { accept } for pid=6950 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.095369][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.095606][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.095852][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.096023][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.096222][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.096474][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.096723][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.097060][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.097321][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.097587][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.273321][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'. [ 67.303522][ T6970] tmpfs: Bad value for 'mpol' [ 67.303650][ T6970] tmpfs: Bad value for 'mpol' [ 67.303772][ T6970] tmpfs: Bad value for 'mpol' [ 67.303884][ T6970] tmpfs: Bad value for 'mpol' [ 67.304115][ T6970] tmpfs: Bad value for 'mpol' [ 67.304288][ T6970] tmpfs: Bad value for 'mpol' [ 67.304502][ T6970] tmpfs: Bad value for 'mpol' [ 67.304701][ T6970] tmpfs: Bad value for 'mpol' [ 67.304889][ T6970] tmpfs: Bad value for 'mpol' [ 67.305072][ T6970] tmpfs: Bad value for 'mpol' [ 67.305255][ T6970] tmpfs: Bad value for 'mpol' [ 67.305449][ T6970] tmpfs: Bad value for 'mpol' [ 67.305680][ T6970] tmpfs: Bad value for 'mpol' [ 67.305867][ T6970] tmpfs: Bad value for 'mpol' [ 67.306053][ T6970] tmpfs: Bad value for 'mpol' [ 67.306239][ T6970] tmpfs: Bad value for 'mpol' [ 67.306429][ T6970] tmpfs: Bad value for 'mpol' [ 67.306614][ T6970] tmpfs: Bad value for 'mpol' [ 67.306807][ T6970] tmpfs: Bad value for 'mpol' [ 67.306998][ T6970] tmpfs: Bad value for 'mpol' [ 67.307202][ T6970] tmpfs: Bad value for 'mpol' [ 67.307396][ T6970] tmpfs: Bad value for 'mpol' [ 67.307581][ T6970] tmpfs: Bad value for 'mpol' [ 67.307769][ T6970] tmpfs: Bad value for 'mpol' [ 67.307955][ T6970] tmpfs: Bad value for 'mpol' [ 67.308159][ T6970] tmpfs: Bad value for 'mpol' [ 67.308345][ T6970] tmpfs: Bad value for 'mpol' [ 67.308530][ T6970] tmpfs: Bad value for 'mpol' [ 67.308722][ T6970] tmpfs: Bad value for 'mpol' [ 67.308907][ T6970] tmpfs: Bad value for 'mpol' [ 67.309093][ T6970] tmpfs: Bad value for 'mpol' [ 67.309279][ T6970] tmpfs: Bad value for 'mpol' [ 67.309873][ T6970] tmpfs: Bad value for 'mpol' [ 67.321878][ T6970] batman_adv: batadv0: Adding interface: syzkaller0 [ 67.321892][ T6970] batman_adv: batadv0: Interface activated: syzkaller0 [ 67.510597][ T42] audit: type=1400 audit(1793163020.208:707): avc: denied { create } for pid=6984 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.523057][ T6990] overlayfs: failed lookup in lower (newroot/51, name='bus', err=-40): overlapping layers [ 67.820800][ T42] audit: type=1400 audit(1793163020.518:708): avc: denied { read } for pid=6992 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.824228][ T42] audit: type=1400 audit(1793163020.528:709): avc: denied { append } for pid=6992 comm="syz.4.227" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.828428][ T6993] device-mapper: table: 248:2: clone: Error opening destination device (-ENOENT) [ 67.828451][ T6993] device-mapper: ioctl: error adding target to table [ 67.879469][ T42] audit: type=1400 audit(1793163020.578:710): avc: denied { create } for pid=6995 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.880690][ T42] audit: type=1400 audit(1793163020.578:711): avc: denied { write } for pid=6995 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.880928][ T42] audit: type=1400 audit(1793163020.578:712): avc: denied { read } for pid=6995 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.886464][ T42] audit: type=1400 audit(1793163020.588:713): avc: denied { getopt } for pid=6995 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.893747][ T6996] kernel read not supported for file /file1 (pid: 6996 comm: syz.4.228) [ 67.895316][ T42] audit: type=1800 audit(1793163020.588:714): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.228" name="file1" dev="mqueue" ino=17577 res=0 errno=-22 [ 68.215278][ T5791] overlayfs: failed lookup in lower (newroot/51, name='bus', err=-40): overlapping layers [ 68.215442][ T5791] overlayfs: failed lookup in lower (newroot/51, name='bus', err=-40): overlapping layers [ 68.463627][ T24] usb 8-1: usb_control_msg returned -71 [ 68.463658][ T24] usbtmc 8-1:16.0: can't read capabilities [ 68.467385][ T24] usb 8-1: USB disconnect, device number 4 [ 68.495304][ T7001] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 68.519669][ T7001] bond1: (slave veth0_to_bond): making interface the new active one [ 68.520942][ T7001] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 68.701390][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.702418][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.703169][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.710468][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.712816][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.754164][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.884166][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.886917][ T7013] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.924414][ T29] usb 9-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 68.927192][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.927205][ T29] usb 9-1: Product: syz [ 68.927212][ T29] usb 9-1: Manufacturer: syz [ 68.927219][ T29] usb 9-1: SerialNumber: syz [ 69.064045][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 69.065033][ T24] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.065944][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.065958][ T24] usb 8-1: config 0 has no interface number 0 [ 69.065975][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.065986][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.065997][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.066009][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.066027][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.067885][ T24] usb 8-1: config 0 descriptor?? [ 69.079694][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 69.155109][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.155246][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.155344][ T7013] bridge_slave_0: entered allmulticast mode [ 69.156577][ T7013] bridge_slave_0: entered promiscuous mode [ 69.158820][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.158938][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.159038][ T7013] bridge_slave_1: entered allmulticast mode [ 69.159334][ T29] rtl8150 9-1:1.0: couldn't reset the device [ 69.159485][ T29] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.160030][ T7013] bridge_slave_1: entered promiscuous mode [ 69.166191][ T29] usb 9-1: USB disconnect, device number 2 [ 69.188133][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.189590][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.202654][ T7013] team0: Port device team_slave_0 added [ 69.204137][ T7013] team0: Port device team_slave_1 added [ 69.218852][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.218882][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.218903][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.220634][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.220647][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.220667][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.263837][ T7013] hsr_slave_0: entered promiscuous mode [ 69.264342][ T7013] hsr_slave_1: entered promiscuous mode [ 69.264645][ T7013] debugfs: 'hsr0' already exists in 'hsr' [ 69.264657][ T7013] Cannot create hsr debugfs directory [ 69.278165][ T5938] usb 8-1: USB disconnect, device number 5 [ 69.285889][ T5938] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 69.384397][ T7013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.388376][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.388895][ T7013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.390709][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.391133][ T7013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.392997][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.393469][ T7013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.395534][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.450118][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.469539][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.474609][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.474699][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.481253][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.481341][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.682304][ T7066] netlink: 'syz.4.240': attribute type 10 has an invalid length. [ 69.743547][ T7068] netlink: 'syz.4.240': attribute type 10 has an invalid length. [ 69.837901][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.946572][ T5792] Bluetooth: hci2: command tx timeout [ 70.009373][ T7013] veth0_vlan: entered promiscuous mode [ 70.014959][ T7013] veth1_vlan: entered promiscuous mode [ 70.041081][ T7013] veth0_macvtap: entered promiscuous mode [ 70.043531][ T7013] veth1_macvtap: entered promiscuous mode [ 70.058877][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.062658][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.067553][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.067632][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.067704][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.067770][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.119379][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.119393][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.139999][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.140014][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.554141][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 70.705379][ T7126] program syz.2.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.708146][ T7126] loop5: detected capacity change from 0 to 7 [ 70.717413][ T7126] Dev loop5: unable to read RDB block 7 [ 70.717444][ T7126] loop5: unable to read partition table [ 70.717623][ T7126] loop5: partition table beyond EOD, truncated [ 70.717668][ T7126] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.724365][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 70.724815][ T29] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.725813][ T29] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 70.725851][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.725869][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.725889][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.725908][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.725939][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.745018][ T5792] Bluetooth: hci3: command tx timeout [ 70.936798][ T7128] __nla_validate_parse: 3 callbacks suppressed [ 70.936812][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 70.953662][ T7129] random: crng reseeded on system resumption [ 71.238169][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238219][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.238709][ T34] cfg80211: failed to load regulatory.db [ 71.864197][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.014013][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 72.014707][ T5938] usb 7-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 72.015678][ T5938] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 72.015691][ T5938] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.015700][ T5938] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.017596][ T5938] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 72.017608][ T5938] usb 7-1: Product: syz [ 72.017615][ T5938] usb 7-1: Manufacturer: syz [ 72.017622][ T5938] usb 7-1: SerialNumber: syz [ 72.019251][ T5938] usb 7-1: config 0 descriptor?? [ 72.035851][ T5792] Bluetooth: hci2: command tx timeout [ 72.223601][ T5938] usb 7-1: USB disconnect, device number 3 [ 72.311059][ T7138] syzkaller0: entered promiscuous mode [ 72.311080][ T7138] syzkaller0: entered allmulticast mode [ 72.322457][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 72.322481][ T42] audit: type=1400 audit(1793163025.018:729): avc: denied { mount } for pid=7137 comm="syz.4.254" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.323051][ T42] audit: type=1400 audit(1793163025.018:730): avc: denied { search } for pid=7137 comm="syz.4.254" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.323155][ T42] audit: type=1400 audit(1793163025.018:731): avc: denied { search } for pid=7137 comm="syz.4.254" name="target" dev="configfs" ino=3889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.325792][ T42] audit: type=1400 audit(1793163025.028:732): avc: denied { write } for pid=7137 comm="syz.4.254" name="dbroot" dev="configfs" ino=19640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 72.325896][ T42] audit: type=1400 audit(1793163025.028:733): avc: denied { open } for pid=7137 comm="syz.4.254" path="/15/my_configfs/target/dbroot" dev="configfs" ino=19640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 72.441832][ T42] audit: type=1400 audit(1793163025.138:734): avc: denied { unmount } for pid=6766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.448903][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 72.448946][ T7142] netlink: 3 bytes leftover after parsing attributes in process `syz.2.255'. [ 72.496819][ T42] audit: type=1400 audit(1793163025.198:735): avc: denied { ioctl } for pid=7146 comm="syz.2.257" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17747 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.518536][ T42] audit: type=1400 audit(1793163025.218:736): avc: denied { setopt } for pid=7148 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.518797][ T42] audit: type=1400 audit(1793163025.218:737): avc: denied { bind } for pid=7148 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.519301][ T42] audit: type=1400 audit(1793163025.218:738): avc: denied { write } for pid=7148 comm="syz.4.258" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.528154][ T7149] netlink: 64 bytes leftover after parsing attributes in process `syz.4.258'. [ 72.533356][ T7149] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 72.556927][ T7149] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 72.824244][ T5792] Bluetooth: hci3: command tx timeout [ 72.914060][ T5938] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.064139][ T5938] usb 9-1: Using ep0 maxpacket: 32 [ 73.066109][ T5938] usb 9-1: unable to get BOS descriptor or descriptor too short [ 73.066132][ T5938] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 73.069728][ T5938] usb 9-1: string descriptor 0 read error: -22 [ 73.069784][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.076905][ T5938] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 73.076925][ T5938] dw2102: su3000_power_ctrl: 1, initialized 0 [ 73.077342][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 73.083886][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 73.084744][ T5938] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 73.084817][ T5938] usb 9-1: media controller created [ 73.085160][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085171][ T5938] dw2102: i2c transfer failed. [ 73.085192][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085199][ T5938] dw2102: i2c transfer failed. [ 73.085204][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085211][ T5938] dw2102: i2c transfer failed. [ 73.085216][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085222][ T5938] dw2102: i2c transfer failed. [ 73.085227][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085233][ T5938] dw2102: i2c transfer failed. [ 73.085238][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 73.085244][ T5938] dw2102: i2c transfer failed. [ 73.085311][ T5938] dvb-usb: MAC address: 02:02:02:02:02:02 [ 73.093248][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.122836][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 73.122851][ T5938] dw2102: command 0x0e transfer failed. [ 73.122857][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 73.122927][ T5938] dw2102: command 0x0e transfer failed. [ 73.141862][ T7159] overlay: ./file0 is not a directory [ 73.141928][ T7158] overlay: ./file0 is not a directory [ 73.193175][ T7162] 9pnet_virtio: no channels available for device syz [ 73.196112][ T7162] ip_tables: iptables: counters copy to user failed while replacing table [ 73.260237][ T29] usb 10-1: usb_control_msg returned -71 [ 73.260262][ T29] usbtmc 10-1:16.0: can't read capabilities [ 73.267162][ T29] usb 10-1: USB disconnect, device number 2 [ 73.371819][ T7172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.427010][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 73.427024][ T5938] dw2102: command 0x0e transfer failed. [ 73.427036][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 73.427042][ T5938] dw2102: command 0x0e transfer failed. [ 73.427046][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 73.427052][ T5938] dw2102: command 0x51 transfer failed. [ 73.462759][ T5938] DVB: Unable to find symbol ds3000_attach() [ 73.462772][ T5938] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 73.524020][ T5938] rc_core: IR keymap rc-su3000 not found [ 73.524037][ T5938] Registered IR keymap rc-empty [ 73.529096][ T5938] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 73.531207][ T5938] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input7 [ 73.538931][ T5938] dvb-usb: schedule remote query interval to 150 msecs. [ 73.538944][ T5938] dw2102: su3000_power_ctrl: 0, initialized 1 [ 73.538950][ T5938] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 73.543398][ T7191] trusted_key: encrypted_key: master key parameter is missing [ 73.548409][ T5938] usb 9-1: USB disconnect, device number 3 [ 73.596446][ T7197] jffs2: notice: (7197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.610492][ T5938] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 73.623223][ T7200] netlink: 108 bytes leftover after parsing attributes in process `syz.5.273'. [ 73.714051][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 73.875711][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 73.875769][ T24] usb 7-1: New USB device found: idVendor=05ac, idProduct=0217, bcdDevice=0.40 [ 73.878856][ T24] usb 7-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.878874][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 73.880591][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.880608][ T24] usb 7-1: Product: ш [ 73.880619][ T24] usb 7-1: Manufacturer: ﳨ朘쓆̗ጊ믔ᮀ䙚ïªå˜©à±¼ì…ˆãˆªä¥šë¡‰å¿¤ì…층퇋࿋ӹ被陫摊㧶ꊱ㡣腫ᛒ臲涀㤖ܥ옰⿞䉹î싉í‚嬕簷ଙ驞謒筓㯣ì¶æ¼–Гﹲ䋀屺駞ｺ꯴㾢í‡âƒ§ë´²â›±ì³°ç¹¾êšªêˆ“괳軯éžã®¿â’¹Ó™ìŠ”혀䮒蔛ᣒ㜸둵çŒâž¸á ½ì‘´îŒ²á˜¾é­¿à¨¹ë½‚࿲⤣홰㡎çƒë·¯â¢Ýµæžˆì¯—å¬ïˆ‰â‹¦â˜©ÈŸï˜Šáƒ›è²§ [ 73.880638][ T24] usb 7-1: SerialNumber: 芶ì¦ê¸–ೕï¡ã•î„–ᡖ䧺䂙솯蕗绌Щ樟↶튽茚찭决훈ᆿ粼Ὓᯋ㬹뙦ç©à¡¦é‘¬ä­¤ãŒŽç¡€å­œä†‰ç™µé“§ç‰ëœœê£³åˆ­ì‹™ì ´ì¶¢é£¨é—˜ï§ºå¸§æ¡€æŽ·ì›± [ 73.897100][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.277'. [ 73.897545][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.277'. [ 73.938530][ T7218] netlink: 'syz.4.278': attribute type 12 has an invalid length. [ 73.938545][ T7218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.278'. [ 73.976923][ T7221] loop5: detected capacity change from 0 to 7 [ 73.978919][ T7221] Dev loop5: unable to read RDB block 7 [ 73.978940][ T7221] loop5: unable to read partition table [ 73.979061][ T7221] loop5: partition table beyond EOD, truncated [ 73.979090][ T7221] loop_reread_partitions: partition scan of loop5 (þ被xü—Ÿâ·û) failed (rc=-5) [ 73.994975][ T7223] trusted_key: encrypted_key: insufficient parameters specified [ 74.100994][ T24] appletouch 7-1:1.0: Failed to read mode from device. [ 74.101094][ T24] appletouch 7-1:1.0: probe with driver appletouch failed with error -5 [ 74.103692][ T24] usb 7-1: USB disconnect, device number 4 [ 74.117216][ T7234] Bluetooth: MGMT ver 1.23 Hü[ 74.154855][ T5792] Bluetooth: hci4: setting up ROME/QCA6390 [ 74.216619][ T7244] syzkaller0: entered promiscuous mode [ 74.216633][ T7244] syzkaller0: entered allmulticast mode [ 74.236849][ T7244] netlink: 'syz.5.286': attribute type 10 has an invalid length. [ 74.236864][ T7244] netlink: 55 bytes leftover after parsing attributes in process `syz.5.286'. ü[ 74.470858][ T7248] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 74.471672][ T7248] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 74.509665][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 74.562028][ T7253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.636141][ T7265] »»»»»»: renamed from vlan0 (while UP) [ 74.643679][ T7268] fuse: Unknown parameter 'Q' [ 74.652852][ T7266] lo: entered allmulticast mode [ 74.663164][ T7264] lo: left allmulticast mode [ 74.739793][ T7281] netlink: 'syz.3.297': attribute type 9 has an invalid length. [ 74.739858][ T7274] netlink: 'syz.3.297': attribute type 9 has an invalid length. [ 74.802105][ T7287] netlink: 'syz.4.300': attribute type 2 has an invalid length. [ 74.866855][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 74.867076][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 74.867092][ T7291] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 74.867104][ T7291] UDF-fs: Scanning with blocksize 512 failed [ 74.868535][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 74.868645][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 74.868663][ T7291] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 74.868675][ T7291] UDF-fs: Scanning with blocksize 1024 failed [ 74.869229][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 74.869317][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 74.869333][ T7291] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 74.869344][ T7291] UDF-fs: Scanning with blocksize 2048 failed [ 74.869849][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 74.869926][ T7291] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 74.869942][ T7291] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 74.869951][ T7291] UDF-fs: Scanning with blocksize 4096 failed [ 74.869958][ T7291] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 74.905413][ T5798] Bluetooth: hci3: command tx timeout [ 75.152288][ T7318] cgroup: none used incorrectly [ 75.550382][ T7339] loop6: detected capacity change from 0 to 1 [ 75.558905][ T7339] Dev loop6: unable to read RDB block 1 [ 75.558935][ T7339] loop6: unable to read partition table [ 75.559056][ T7339] loop6: partition table beyond EOD, truncated [ 75.559079][ T7339] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 75.661870][ T7353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.661893][ T7353] overlayfs: failed to set xattr on upper [ 75.661900][ T7353] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.661906][ T7353] overlayfs: ...falling back to index=off. [ 75.661912][ T7353] overlayfs: ...falling back to uuid=null. [ 75.708109][ T7359] netlink: 'syz.5.321': attribute type 4 has an invalid length. [ 75.904047][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.919402][ T7378] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 75.919991][ T7378] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 75.991319][ T7383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7383 comm=syz.2.331 [ 76.076899][ T5887] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 76.077976][ T5887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.078010][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 76.078028][ T5887] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.078053][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.510009][ T5887] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 76.510024][ T5887] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 76.514458][ T5798] Bluetooth: hci4: command 0xfc00 tx timeout [ 76.517101][ T5792] Bluetooth: hci4: Reading QCA version information failed (-110) Hü[ 76.517140][ T5792] Bluetooth: hci4: Retry BT power ON:0 [ 76.533763][ T5887] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 76.548667][ T5887] usb 8-1: USB disconnect, device number 6 ü[ 76.921798][ T7406] __nla_validate_parse: 5 callbacks suppressed [ 76.921816][ T7406] netlink: 64 bytes leftover after parsing attributes in process `syz.2.337'. [ 76.995312][ T5798] Bluetooth: hci3: command tx timeout [ 77.209529][ T7439] GUP no longer grows the stack in syz.4.343 (7439): 200000003000-20000000a000 (200000002000) [ 77.209565][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.4.343 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 77.209582][ T7439] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 77.209587][ T7439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.209600][ T7439] Call Trace: [ 77.209605][ T7439] [ 77.209611][ T7440] befs: (nullb0): No write support. Marking filesystem read-only [ 77.209610][ T7439] dump_stack_lvl+0x100/0x190 [ 77.209693][ T7439] gup_vma_lookup.cold+0x83/0x96 [ 77.209717][ T7439] __get_user_pages+0x252/0x2c20 [ 77.209748][ T7439] ? lock_acquire+0x1d1/0x380 [ 77.209762][ T7439] ? mtree_load+0xdc/0xb50 [ 77.209828][ T7439] ? __pfx___get_user_pages+0x10/0x10 [ 77.209840][ T7439] ? mtree_load+0x388/0xb50 [ 77.209850][ T7439] ? mtree_load+0x388/0xb50 [ 77.209866][ T7439] get_user_pages_remote+0x3d2/0xb10 [ 77.209879][ T7439] ? mas_prev_setup.constprop.0+0x950/0x9e0 [ 77.209893][ T7439] ? __pfx_get_user_pages_remote+0x10/0x10 [ 77.209912][ T7439] __access_remote_vm+0x3bb/0x890 [ 77.209928][ T7439] ? __pfx___access_remote_vm+0x10/0x10 [ 77.209939][ T7439] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 77.209950][ T7439] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 77.209999][ T7439] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 77.210018][ T7440] befs: (nullb0): invalid magic header [ 77.210018][ T7439] proc_pid_cmdline_read+0x552/0x9a0 [ 77.210037][ T7439] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 77.210056][ T7439] ? rw_verify_area+0xce/0x6d0 [ 77.210070][ T7439] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 77.210086][ T7439] vfs_readv+0x5d8/0x8d0 [ 77.210102][ T7439] ? __pfx_vfs_readv+0x10/0x10 [ 77.210118][ T7439] ? lock_acquire+0x1d1/0x380 [ 77.210138][ T7439] ? __fget_files+0x34/0x3d0 [ 77.210160][ T7439] ? __fget_files+0x21f/0x3d0 [ 77.210179][ T7439] ? do_preadv+0x1ac/0x270 [ 77.210191][ T7439] do_preadv+0x1ac/0x270 [ 77.210204][ T7439] ? __pfx_do_preadv+0x10/0x10 [ 77.210220][ T7439] do_syscall_64+0x123/0x790 [ 77.210233][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.210244][ T7439] RIP: 0033:0x7f3675b9f559 [ 77.210254][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.210264][ T7439] RSP: 002b:00007f3676a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 77.210283][ T7439] RAX: ffffffffffffffda RBX: 00007f3675e26270 RCX: 00007f3675b9f559 [ 77.210290][ T7439] RDX: 0000000000000001 RSI: 0000200000003800 RDI: 0000000000000009 [ 77.210296][ T7439] RBP: 00007f3675c36b20 R08: 00000000fffffff9 R09: 0000000000000000 [ 77.210303][ T7439] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 77.210309][ T7439] R13: 00007f3675e26308 R14: 00007f3675e26270 R15: 00007ffd536c4ef8 [ 77.210323][ T7439] [ 77.390109][ T42] kauditd_printk_skb: 2151 callbacks suppressed [ 77.390133][ T42] audit: type=1400 audit(1793163030.088:2887): avc: denied { write } for pid=7445 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.512814][ T42] audit: type=1400 audit(1793163030.208:2888): avc: denied { getopt } for pid=7464 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.643958][ T42] audit: type=1400 audit(1793163030.338:2889): avc: denied { write } for pid=7467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.764426][ T42] audit: type=1400 audit(1793163030.458:2890): avc: denied { write } for pid=7473 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.125876][ T7485] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 78.168675][ T7485] bond1: (slave veth0_to_bond): making interface the new active one [ 78.172895][ T7485] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 78.233523][ T42] audit: type=1400 audit(1793163030.928:2891): avc: denied { write } for pid=7487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.374720][ T42] audit: type=1400 audit(1793163031.078:2892): avc: denied { write } for pid=7490 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.591265][ T42] audit: type=1400 audit(1793163031.288:2893): avc: denied { create } for pid=7497 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.591979][ T42] audit: type=1400 audit(1793163031.288:2894): avc: denied { setopt } for pid=7497 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.592451][ T42] audit: type=1400 audit(1793163031.288:2895): avc: denied { write } for pid=7497 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.675134][ T42] audit: type=1400 audit(1793163031.378:2896): avc: denied { ioctl } for pid=7499 comm="syz.5.354" path="socket:[21563]" dev="sockfs" ino=21563 ioctlcmd=0x3b64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.882125][ T7524] CIFS: Attempting to mount //127.0.0.1/share [ 78.888553][ T5856] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 78.888579][ T5856] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 78.892559][ T7524] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV Hü[ 78.895827][ T5856] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 78.895851][ T5856] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 78.896758][ T7524] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 78.902867][ T7524] CIFS: VFS: cifs_mount failed w/return code = -2 [ 78.905927][ T5798] Bluetooth: hci4: command 0xfc00 tx timeout [ 78.906611][ T29] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 78.906909][ T5792] Bluetooth: hci4: Reading QCA version information failed (-110) [ 78.906920][ T5792] Bluetooth: hci4: Retry BT power ON:1 [ 78.911866][ T7524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.361'. [ 78.911885][ T7524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.361'. [ 78.911900][ T7524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.361'. [ 78.924893][ T7515] bond0: (slave dummy0): Releasing backup interface [ 78.965597][ T7515] bridge_slave_0: left allmulticast mode [ 78.965641][ T7515] bridge_slave_0: left promiscuous mode [ 78.965743][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.971394][ T7515] bridge_slave_1: left allmulticast mode [ 78.971409][ T7515] bridge_slave_1: left promiscuous mode [ 78.971509][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.993537][ T7515] bond1: (slave veth0_to_bond): Releasing active interface [ 79.001640][ T7515] bond0: (slave bond_slave_0): Releasing backup interface [ 79.036936][ T7515] bond0: (slave bond_slave_1): Releasing backup interface [ 79.043403][ T7515] team0: Port device team_slave_0 removed [ 79.060358][ T7515] team0: Port device team_slave_1 removed [ 79.060802][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.060815][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.067991][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.068003][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.073584][ T5938] hid-sensor-hub 0003:1234:5678.0003: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 79.086786][ T7515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.099987][ T7535] IPVS: length: 120 != 24 [ 79.120750][ T7526] team0: Mode "rou" not found [ 79.134683][ T7536] tipc: Started in network mode [ 79.134710][ T7536] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 79.135421][ T7536] tipc: Enabled bearer , priority 0 ü[ 79.219456][ T7547] fido_id[7547]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0003:1234:5678.0003/report_descriptor': No such device [ 79.241199][ T7533] 8021q: VLANs not supported on ip6_vti0 [ 79.241846][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.364'. [ 79.281797][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 79.281812][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 79.281819][ T7552] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 79.281837][ T7552] iwpm_mapping_info_cb: Unable to parse nlmsg [ 79.554779][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 79.588667][ T7560] tmpfs: Bad value for 'mpol' [ 79.625449][ T5938] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 79.890056][ T7531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.978904][ T7571] ip_tables: iptables: counters copy to user failed while replacing table [ 80.083525][ T7577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 80.136216][ T50] tipc: Node number set to 11578026 [ 80.232758][ T7585] bridge_slave_0: left allmulticast mode [ 80.232781][ T7585] bridge_slave_0: left promiscuous mode [ 80.232938][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.243319][ T7585] bridge_slave_1: left allmulticast mode [ 80.243342][ T7585] bridge_slave_1: left promiscuous mode [ 80.243490][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.259705][ T7585] bond0: (slave bond_slave_0): Releasing backup interface [ 80.263874][ T7585] bond0: (slave bond_slave_1): Releasing backup interface [ 80.276921][ T7585] team0: Port device team_slave_0 removed [ 80.282540][ T7585] team0: Port device team_slave_1 removed [ 80.284622][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.284642][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.294892][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.294912][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.297112][ T7585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.334286][ T7592] team0: Mode "rou" not found [ 80.508986][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.510914][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.670867][ T7606] syz.3.383 uses obsolete (PF_INET,SOCK_PACKET) [ 80.750532][ T7608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.750740][ T7608] block device autoloading is deprecated and will be removed. [ 80.810164][ T7609] md: invalid raid superblock magic on ram11 [ 80.810177][ T7609] md: ram11 does not have a valid v0.0 superblock, not importing! [ 80.810232][ T7609] md: md_import_device returned -22 [ 80.872871][ T7608] md/raid:md5: invalid chunk size 0 [ 80.872890][ T7608] md: pers->run() failed ... [ 81.127436][ T7639] overlayfs: failed to resolve './bus': -2 Hü[ 81.224249][ T5798] Bluetooth: hci4: command 0xfc00 tx timeout [ 81.224327][ T5792] Bluetooth: hci4: Reading QCA version information failed (-110) [ 81.224345][ T5792] Bluetooth: hci4: Retry BT power ON:2 [ 81.270340][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88803e447800: connection exists (fe ff). last cmd: 20 [ 81.270464][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88803e447c00: connection exists (fe ff). last cmd: 20 [ 81.507837][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803ff7b400: rx timeout, send abort [ 81.519708][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035d99000: rx timeout, send abort ü[ 81.900005][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 81.946591][ T7478] syz.5.346 (7478) used greatest stack depth: 18296 bytes left [ 82.007886][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803ff7b400: abort rx timeout. Force session deactivation [ 82.019774][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035d99000: abort rx timeout. Force session deactivation [ 82.136797][ T7688] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 82.173218][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 82.181899][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 82.285518][ T7699] SELinux: policydb string SgkrE L does not match my string SE Linux [ 82.285633][ T7699] SELinux: failed to load policy [ 82.286014][ T7699] Format for deleting device is "id" (uint). [ 82.292952][ T7703] debugfs: Invalid uid '0x00000000ffffffff' [ 82.363068][ T5831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.411774][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 82.411802][ T42] audit: type=1400 audit(1793163035.108:2931): avc: denied { watch watch_reads } for pid=7707 comm="syz.5.418" path="/46" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.476888][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.479140][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.480626][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.481347][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.481815][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.482292][ T7718] NILFS (loop3): device size too small [ 82.483295][ T42] audit: type=1400 audit(1793163035.178:2932): avc: denied { getopt } for pid=7716 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.483565][ T7714] program syz.4.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.493137][ T7725] program syz.4.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.497083][ T5831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.502908][ T7728] netlink: 68 bytes leftover after parsing attributes in process `syz.5.421'. [ 82.583699][ T7736] netlink: 68 bytes leftover after parsing attributes in process `syz.5.421'. [ 82.607592][ T5831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.613044][ T7742] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 82.613057][ T7742] netlink: 17 bytes leftover after parsing attributes in process `syz.3.424'. [ 82.613286][ T42] audit: type=1400 audit(1793163035.308:2933): avc: denied { write } for pid=7741 comm="syz.3.424" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.690472][ T42] audit: type=1400 audit(1793163035.388:2934): avc: denied { map } for pid=7750 comm="syz.3.425" path="socket:[23798]" dev="sockfs" ino=23798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.690970][ T42] audit: type=1400 audit(1793163035.388:2935): avc: denied { accept } for pid=7750 comm="syz.3.425" path="socket:[23798]" dev="sockfs" ino=23798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.703801][ T5831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.787684][ T7713] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.809633][ T7764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7764 comm=syz.5.427 [ 82.810004][ T7764] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.427'. [ 82.812561][ T7761] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.427'. [ 82.813460][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 82.831591][ T7761] ip6erspan0: entered promiscuous mode [ 82.837981][ T42] audit: type=1400 audit(1793163035.538:2936): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.932667][ T5831] pimreg: left allmulticast mode [ 82.976039][ T42] audit: type=1400 audit(1793163035.678:2937): avc: denied { write } for pid=7768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.003993][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 83.021803][ T7776] netlink: 'syz.5.431': attribute type 1 has an invalid length. [ 83.082642][ T42] audit: type=1400 audit(1793163035.778:2938): avc: denied { write } for pid=7778 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.108992][ T5831] bond0 (unregistering): Released all slaves [ 83.111769][ T5831] bond1 (unregistering): Released all slaves [ 83.142475][ T5496] 8021q: adding VLAN 0 to HW filter on device eth6 [ 83.154457][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 83.155881][ T9] usb 8-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 83.156707][ T9] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 83.156720][ T9] usb 8-1: config 0 has no interface number 0 [ 83.156740][ T9] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.156751][ T9] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.156763][ T9] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 83.156774][ T9] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.156786][ T9] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.158432][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.158444][ T9] usb 8-1: Product: syz [ 83.158451][ T9] usb 8-1: Manufacturer: syz [ 83.158458][ T9] usb 8-1: SerialNumber: syz [ 83.168972][ T9] usb 8-1: config 0 descriptor?? [ 83.212623][ T5831] tipc: Disabling bearer [ 83.219336][ T5831] tipc: Left network mode [ 83.327455][ T42] audit: type=1400 audit(1793163036.028:2939): avc: denied { write } for pid=7785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.338026][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.338424][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.374598][ T9] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 83.412847][ T42] audit: type=1400 audit(1793163036.108:2940): avc: denied { write } for pid=7795 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.447380][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.449831][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.531275][ T5831] hsr_slave_0: left promiscuous mode [ 83.532477][ T5831] hsr_slave_1: left promiscuous mode [ 83.534908][ T5831] veth1_macvtap: left promiscuous mode [ 83.534926][ T5831] veth0_macvtap: left promiscuous mode [ 83.534969][ T5831] veth1_vlan: left promiscuous mode [ 83.534998][ T5831] veth0_vlan: left promiscuous mode [ 83.555473][ T5798] Bluetooth: hci4: command 0xfc00 tx timeout [ 83.555547][ T5792] Bluetooth: hci4: Reading QCA version information failed (-110) [ 83.759546][ T5496] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.764116][ T5856] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.764140][ T5856] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.764157][ T5856] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.764174][ T5856] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.767634][ C0] iowarrior 8-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 83.768190][ T1045] usb 8-1: USB disconnect, device number 7 [ 83.815920][ T5792] Bluetooth: hci2: failed to read key size for handle 201 [ 83.871305][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.871410][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.871467][ T7713] bridge_slave_0: entered allmulticast mode [ 83.872151][ T7713] bridge_slave_0: entered promiscuous mode [ 83.873990][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.874085][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.874168][ T7713] bridge_slave_1: entered allmulticast mode [ 83.875230][ T7713] bridge_slave_1: entered promiscuous mode [ 83.893781][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.895398][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.908129][ T7713] team0: Port device team_slave_0 added [ 83.909305][ T7713] team0: Port device team_slave_1 added [ 83.920779][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.920789][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.920802][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.921651][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.921658][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.921671][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.941767][ T7713] hsr_slave_0: entered promiscuous mode [ 83.942182][ T7713] hsr_slave_1: entered promiscuous mode [ 83.942484][ T7713] debugfs: 'hsr0' already exists in 'hsr' [ 83.942496][ T7713] Cannot create hsr debugfs directory [ 84.058111][ T5496] 8021q: adding VLAN 0 to HW filter on device eth8 [ 84.073989][ T7779] comedi comedi1: reset error (fatal) [ 84.082093][ T7713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.085448][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.085978][ T7713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.092111][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.095609][ T7713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.105118][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.106211][ T7713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.109662][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.130424][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.130472][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.130573][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.130626][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.159753][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.168409][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.169094][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.178992][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.190355][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.190417][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.190977][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.191018][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.304782][ T5496] 8021q: adding VLAN 0 to HW filter on device eth9 [ 84.485849][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.594120][ T5792] Bluetooth: hci0: command tx timeout [ 84.670897][ T7713] veth0_vlan: entered promiscuous mode [ 84.679585][ T7713] veth1_vlan: entered promiscuous mode [ 84.717729][ T7713] veth0_macvtap: entered promiscuous mode [ 84.721463][ T7713] veth1_macvtap: entered promiscuous mode [ 84.738937][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.752023][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.784203][ T5856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784229][ T5856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784247][ T5856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784264][ T5856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819774][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.819795][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.840756][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.840771][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.968087][ T7880] netlink: 176 bytes leftover after parsing attributes in process `syz.5.442'. [ 85.518905][ T7909] netlink: 'syz.5.451': attribute type 11 has an invalid length. [ 85.717670][ T7914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.717692][ T7914] block device autoloading is deprecated and will be removed. [ 85.965083][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64361 sclass=netlink_route_socket pid=7923 comm=syz.6.458 [ 86.045013][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.051036][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.051939][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.052883][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.053440][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.321122][ T7926] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.405200][ T7943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.460'. [ 86.487900][ T7945] team0 (unregistering): Port device team_slave_0 removed [ 86.498903][ T7945] team0 (unregistering): Port device team_slave_1 removed [ 86.674064][ T5798] Bluetooth: hci0: command tx timeout [ 86.717308][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.717441][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.717569][ T7926] bridge_slave_0: entered allmulticast mode [ 86.718831][ T7926] bridge_slave_0: entered promiscuous mode [ 86.721622][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.721750][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.721850][ T7926] bridge_slave_1: entered allmulticast mode [ 86.723185][ T7926] bridge_slave_1: entered promiscuous mode [ 86.748863][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.756339][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.781579][ T7926] team0: Port device team_slave_0 added [ 86.784797][ T7926] team0: Port device team_slave_1 added [ 86.809279][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.809296][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.809317][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.812370][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.812383][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.812404][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.904675][ T7926] hsr_slave_0: entered promiscuous mode [ 86.905397][ T7926] hsr_slave_1: entered promiscuous mode [ 86.906953][ T7926] debugfs: 'hsr0' already exists in 'hsr' [ 86.906972][ T7926] Cannot create hsr debugfs directory [ 87.015098][ T7926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.063438][ T7964] vlan2: entered promiscuous mode [ 87.063453][ T7964] hsr0: entered promiscuous mode [ 87.063615][ T7964] vlan2: entered allmulticast mode [ 87.063622][ T7964] hsr0: entered allmulticast mode [ 87.063628][ T7964] hsr_slave_0: entered allmulticast mode [ 87.063635][ T7964] hsr_slave_1: entered allmulticast mode [ 87.091577][ T7965] bond0: (slave bond_slave_0): Releasing backup interface [ 87.144838][ T7926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.218504][ T7926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.287823][ T7926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.407536][ T7926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.411427][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.412158][ T7926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.415247][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.415943][ T7926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.419490][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.420067][ T7926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.422797][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.444874][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.445008][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.445207][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.445293][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.507270][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.510046][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 87.510061][ T42] audit: type=1400 audit(1793163040.208:2953): avc: denied { setopt } for pid=7982 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.524225][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.528291][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.538740][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.542593][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.542638][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.555028][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.555094][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.853804][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.067676][ T7926] veth0_vlan: entered promiscuous mode [ 88.071257][ T7926] veth1_vlan: entered promiscuous mode [ 88.097951][ T7926] veth0_macvtap: entered promiscuous mode [ 88.102046][ T7926] veth1_macvtap: entered promiscuous mode [ 88.105596][ T5798] Bluetooth: hci3: command tx timeout [ 88.115503][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.121594][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.194708][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.194751][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.194780][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.194809][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.754146][ T5798] Bluetooth: hci0: command tx timeout [ 88.908879][ T42] audit: type=1400 audit(1793163041.608:2954): avc: denied { create } for pid=8014 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.909234][ T42] audit: type=1400 audit(1793163041.608:2955): avc: denied { setopt } for pid=8014 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.912407][ T8015] __nla_validate_parse: 1 callbacks suppressed [ 88.912419][ T8015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.471'. [ 88.934077][ T8012] Attempt to restore checkpoint with obsolete wellknown handles [ 90.184114][ T5798] Bluetooth: hci3: command tx timeout [ 90.468805][ T7983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.520123][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.520136][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.553492][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.553512][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.600748][ T42] audit: type=1400 audit(1793163043.298:2956): avc: denied { read } for pid=8028 comm="syz.6.475" path="socket:[23516]" dev="sockfs" ino=23516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.602662][ T8029] futex_wake_op: syz.6.475 tries to shift op by 144; fix this program [ 90.729591][ T8039] bridge_slave_0: left allmulticast mode [ 90.729630][ T8039] bridge_slave_0: left promiscuous mode [ 90.729943][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.745571][ T8039] bridge_slave_1: left allmulticast mode [ 90.745595][ T8039] bridge_slave_1: left promiscuous mode [ 90.745828][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.769042][ T8039] bond0: (slave bond_slave_0): Releasing backup interface [ 90.779273][ T8039] bond0: (slave bond_slave_1): Releasing backup interface [ 90.790857][ T42] audit: type=1400 audit(1793163043.488:2957): avc: denied { map } for pid=8046 comm="syz.6.479" path="/dev/radio6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.791604][ T8039] team0: Port device team_slave_0 removed [ 90.803477][ T42] audit: type=1400 audit(1793163043.498:2958): avc: denied { bind } for pid=8045 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.819446][ T8039] team0: Port device team_slave_1 removed [ 90.819625][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.825131][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.826042][ T5798] Bluetooth: hci0: command tx timeout [ 90.829173][ T8052] tmpfs: Cannot disable swap on remount [ 90.838642][ T8039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.840403][ T42] audit: type=1400 audit(1793163043.538:2959): avc: denied { read } for pid=8042 comm="syz.5.478" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.869064][ T8043] nvme nvme0: failed to connect socket: -111 [ 90.936429][ T42] audit: type=1400 audit(1793163043.638:2960): avc: denied { bind } for pid=8055 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.007898][ T8076] overlayfs: missing 'lowerdir' [ 91.018167][ T42] audit: type=1400 audit(1793163043.718:2961): avc: denied { remount } for pid=8067 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.074484][ T42] audit: type=1400 audit(1793163043.778:2962): avc: denied { write } for pid=8080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.083190][ T8083] VFS: Mount too revealing [ 91.224096][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 91.394101][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 91.394605][ T34] usb 10-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 91.396356][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.396372][ T34] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 91.399738][ T34] usb 10-1: New USB device strings: Mfr=32, Product=2, SerialNumber=3 [ 91.399757][ T34] usb 10-1: Product: syz [ 91.399769][ T34] usb 10-1: Manufacturer: syz [ 91.399780][ T34] usb 10-1: SerialNumber: syz [ 91.612246][ T34] usb 10-1: USB disconnect, device number 3 [ 91.963972][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.6.492'. [ 92.037946][ T8136] ip_tables: iptables: counters copy to user failed while replacing table [ 92.048956][ T8133] bridge_slave_0: left allmulticast mode [ 92.048972][ T8133] bridge_slave_0: left promiscuous mode [ 92.049084][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.057425][ T8133] bridge_slave_1: left allmulticast mode [ 92.057475][ T8133] bridge_slave_1: left promiscuous mode [ 92.057637][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.073120][ T8133] bond0: (slave bond_slave_0): Releasing backup interface [ 92.083896][ T8133] bond0: (slave bond_slave_1): Releasing backup interface [ 92.095599][ T8133] team0: Port device team_slave_0 removed [ 92.101023][ T8133] team0: Port device team_slave_1 removed [ 92.101556][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.101568][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.103220][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.103237][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.107314][ T8133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.245413][ T5654] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.274302][ T5798] Bluetooth: hci3: command tx timeout [ 92.384069][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 92.404078][ T5654] usb 8-1: Using ep0 maxpacket: 8 [ 92.407580][ T5654] usb 8-1: unable to get BOS descriptor or descriptor too short [ 92.407605][ T5654] usb 8-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 92.408518][ T5654] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 92.408532][ T5654] usb 8-1: config 0 has no interface number 0 [ 92.408550][ T5654] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 92.408564][ T5654] usb 8-1: config 0 interface 88 has no altsetting 0 [ 92.411797][ T5654] usb 8-1: string descriptor 0 read error: -22 [ 92.411852][ T5654] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 92.413882][ T5654] usb 8-1: config 0 descriptor?? [ 92.417788][ T5654] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.88/input/input10 [ 92.533984][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 92.534618][ T34] usb 11-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00 [ 92.535487][ T34] usb 11-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 92.535504][ T34] usb 11-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 92.535521][ T34] usb 11-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 92.535534][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 92.535548][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.538168][ T34] usb 11-1: config 0 descriptor?? [ 92.539956][ T34] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 92.681045][ T5654] usb 8-1: USB disconnect, device number 8 [ 93.049721][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 93.049741][ T42] audit: type=1400 audit(1793163045.748:2976): avc: denied { ioctl } for pid=8159 comm="syz.4.504" path="socket:[25179]" dev="sockfs" ino=25179 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.050254][ T42] audit: type=1400 audit(1793163045.748:2977): avc: denied { connect } for pid=8159 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.053625][ T42] audit: type=1400 audit(1793163045.748:2978): avc: denied { read } for pid=8159 comm="syz.4.504" dev="nsfs" ino=4026533299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.054147][ T42] audit: type=1400 audit(1793163045.748:2979): avc: denied { open } for pid=8159 comm="syz.4.504" path="net:[4026533299]" dev="nsfs" ino=4026533299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.057868][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 93.101774][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 93.126135][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 93.236298][ T42] audit: type=1400 audit(1793163045.938:2980): avc: denied { map } for pid=8168 comm="syz.4.506" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.274865][ T42] audit: type=1400 audit(1793163045.978:2981): avc: denied { listen } for pid=8182 comm="syz.5.509" laddr=127.0.0.1 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.295454][ T42] audit: type=1400 audit(1793163045.998:2982): avc: denied { ioctl } for pid=8184 comm="syz.3.510" path="socket:[25206]" dev="sockfs" ino=25206 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.116548][ T42] audit: type=1400 audit(1793163046.818:2983): avc: denied { getopt } for pid=8197 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.134074][ T8190] md: array md5 already has disks! [ 94.187951][ T8190] md: could not open device unknown-block(1,11). [ 94.188008][ T8190] md: error, md_import_device() returned -16 [ 94.296009][ T8205] dump_vmcs: 55 callbacks suppressed [ 94.296034][ T8205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.344222][ T5798] Bluetooth: hci3: command tx timeout [ 94.540932][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.519'. [ 94.550524][ T8224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.519'. [ 94.597599][ T8230] ecryptfs_get_tree: kern_path() failed [ 94.600617][ T8230] Reading sb failed; rc = [-2] [ 94.602520][ T8234] Could not find key with description: [syz] [ 94.602606][ T8234] process_request_key_err: No key [ 94.602611][ T8234] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 94.602616][ T8234] One or more global auth toks could not properly register; rc = [-2] [ 94.602634][ T8234] Error validating options; rc = [-2] [ 94.657306][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 94.690424][ T42] audit: type=1400 audit(1793163047.388:2984): avc: denied { write } for pid=8238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.756011][ T42] audit: type=1400 audit(1793163047.458:2985): avc: denied { write } for pid=8241 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.138888][ T34] usb 11-1: USB disconnect, device number 2 [ 95.898488][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.901133][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.902624][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.906260][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.910833][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.010233][ T8299] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 96.093591][ T12] bond0 (unregistering): Released all slaves [ 96.126631][ T5496] 8021q: adding VLAN 0 to HW filter on device eth10 [ 96.195179][ T8312] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.221927][ T8312] evm: overlay not supported [ 96.329488][ T8288] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.501052][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.536'. [ 96.759942][ T5496] 8021q: adding VLAN 0 to HW filter on device eth11 [ 96.801005][ T12] hsr_slave_0: left promiscuous mode [ 96.801639][ T12] hsr_slave_1: left promiscuous mode [ 96.997735][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.077796][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.077874][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.077929][ T8288] bridge_slave_0: entered allmulticast mode [ 97.078818][ T8288] bridge_slave_0: entered promiscuous mode [ 97.080375][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.080450][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.080501][ T8288] bridge_slave_1: entered allmulticast mode [ 97.081448][ T8288] bridge_slave_1: entered promiscuous mode [ 97.116698][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.125647][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.142980][ T8288] team0: Port device team_slave_0 added [ 97.144785][ T8288] team0: Port device team_slave_1 added [ 97.194040][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.194052][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.194064][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.196950][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.196960][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.196973][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.290763][ T5496] 8021q: adding VLAN 0 to HW filter on device eth12 [ 97.328482][ T8288] hsr_slave_0: entered promiscuous mode [ 97.329214][ T8288] hsr_slave_1: entered promiscuous mode [ 97.329755][ T8288] debugfs: 'hsr0' already exists in 'hsr' [ 97.329774][ T8288] Cannot create hsr debugfs directory [ 97.500581][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.543'. [ 97.501385][ T8371] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 97.501757][ T8368] gadgetfs: bound to dummy_udc driver [ 97.506886][ T8371] No control pipe specified [ 97.673230][ T8389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.548'. [ 97.692855][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 97.711823][ T8389] bond2: Removing last ns target with arp_interval on [ 97.819003][ T8288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.821342][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.821895][ T8288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.823396][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.830188][ T8288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.840969][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.841402][ T8288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.845621][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.911725][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.921729][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.927253][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.927299][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.930422][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.930464][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.944057][ T5798] Bluetooth: hci2: command tx timeout [ 97.994118][ T50] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 98.080120][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 98.080132][ T42] audit: type=1400 audit(1793163050.778:3010): avc: denied { write } for pid=8413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.129191][ T42] audit: type=1400 audit(1793163050.828:3011): avc: denied { write } for pid=8419 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.165040][ T50] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.166382][ T50] usb 8-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 98.166418][ T50] usb 8-1: config 0 interface 0 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.166440][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.170509][ T50] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.170528][ T50] usb 8-1: Product: syz [ 98.170540][ T50] usb 8-1: Manufacturer: syz [ 98.170552][ T50] usb 8-1: SerialNumber: syz [ 98.179014][ T50] usb 8-1: config 0 descriptor?? [ 98.194446][ T42] audit: type=1400 audit(1793163050.898:3012): avc: denied { write } for pid=8423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.252828][ T42] audit: type=1400 audit(1793163050.948:3013): avc: denied { write } for pid=8427 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.267115][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.339581][ T42] audit: type=1400 audit(1793163051.038:3014): avc: denied { write } for pid=8432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.386988][ T42] audit: type=1400 audit(1793163051.088:3015): avc: denied { write } for pid=8437 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.471987][ T8288] veth0_vlan: entered promiscuous mode [ 98.479918][ T8288] veth1_vlan: entered promiscuous mode [ 98.482756][ T42] audit: type=1326 audit(1793163051.178:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.6.550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b2979f559 code=0x0 [ 98.502405][ T8288] veth0_macvtap: entered promiscuous mode [ 98.506395][ T8288] veth1_macvtap: entered promiscuous mode [ 98.513568][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.517405][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.555012][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.555208][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.555228][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.555245][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.794104][ T3415] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 98.954720][ T3415] usb 11-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 98.955800][ T3415] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.955814][ T3415] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.955825][ T3415] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.958134][ T3415] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 98.958151][ T3415] usb 11-1: Product: syz [ 98.958162][ T3415] usb 11-1: Manufacturer: syz [ 98.958173][ T3415] usb 11-1: SerialNumber: syz [ 99.169586][ T3415] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.418158][ T1045] usb 11-1: USB disconnect, device number 3 [ 99.426379][ T8451] usblp0: removed [ 99.429196][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.550'. [ 100.034386][ T5798] Bluetooth: hci2: command tx timeout [ 100.749723][ T8395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.820000][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.820026][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.843842][ T8465] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 100.844831][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.844842][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.846468][ T50] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 100.849757][ T50] usb 8-1: USB disconnect, device number 9 [ 100.865267][ T8338] udevd[8338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.866211][ T8465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16912 sclass=netlink_route_socket pid=8465 comm=syz.3.554 [ 100.895218][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 100.895854][ T8465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.034046][ T29] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 101.076034][ T42] audit: type=1400 audit(1793163053.778:3017): avc: denied { read } for pid=8479 comm="syz.4.558" path="socket:[27150]" dev="sockfs" ino=27150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.184893][ T29] usb 10-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 101.186000][ T29] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 101.186021][ T29] usb 10-1: config 0 has no interface number 0 [ 101.186049][ T29] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.186066][ T29] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 101.186186][ T29] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 101.186207][ T29] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 101.186225][ T29] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 101.186246][ T29] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.186279][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.188426][ T29] usb 10-1: config 0 descriptor?? [ 101.189532][ T8461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 101.189681][ T8461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 101.198711][ T29] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 101.264158][ T50] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 101.396858][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.399852][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.406662][ T8461] ldusb 10-1:0.55: Write buffer overflow, 14 bytes dropped [ 101.410173][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.410883][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.420543][ T29] usb 10-1: USB disconnect, device number 4 [ 101.427654][ T29] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 101.435033][ T8461] tipc: Started in network mode [ 101.435046][ T8461] tipc: Node identity 8a7738bb3579, cluster identity 4711 [ 101.435120][ T8461] tipc: Enabled bearer , priority 0 [ 101.435527][ T8461] syzkaller0: entered promiscuous mode [ 101.435544][ T8461] syzkaller0: entered allmulticast mode [ 101.445280][ T50] usb 8-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.455099][ T50] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.455124][ T50] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.455155][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.458570][ T8472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 101.461869][ T50] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.896548][ T42] audit: type=1400 audit(1793163054.598:3018): avc: denied { setopt } for pid=8484 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.896601][ T42] audit: type=1400 audit(1793163054.598:3019): avc: denied { ioctl } for pid=8484 comm="syz.6.560" path="socket:[27169]" dev="sockfs" ino=27169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.958042][ T8461] tipc: Resetting bearer [ 101.969313][ T8461] tipc: Disabling bearer [ 102.025195][ T8503] exFAT-fs (nbd5): unable to read boot sector [ 102.025211][ T8503] exFAT-fs (nbd5): failed to read boot sector [ 102.025219][ T8503] exFAT-fs (nbd5): failed to recognize exfat type [ 102.037490][ T8505] ./cgroup: Can't lookup blockdev [ 102.277993][ T8527] kvm [8526]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 102.278832][ T8527] kvm [8526]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 102.589980][ T5798] Bluetooth: hci1: link tx timeout [ 102.589992][ T5798] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 102.593758][ T5798] Bluetooth: hci1: link tx timeout [ 102.593769][ T5798] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.016881][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.017319][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.017813][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.018126][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.018318][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.018607][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.018804][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.019048][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.019265][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.020956][ T8567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.201888][ T8568] cgroup: fork rejected by pids controller in /syz5 [ 103.891786][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 103.891806][ T42] audit: type=1400 audit(1793163056.588:3021): avc: denied { unmount } for pid=8288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.932936][ T8657] netlink: 'syz.6.570': attribute type 4 has an invalid length. [ 103.955137][ T50] usb 8-1: USB disconnect, device number 10 [ 103.963244][ T42] audit: type=1400 audit(1793163056.658:3022): avc: denied { write } for pid=8651 comm="syz.4.569" name="target" dev="configfs" ino=3889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.963288][ T42] audit: type=1400 audit(1793163056.658:3023): avc: denied { add_name } for pid=8651 comm="syz.4.569" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.968985][ T42] audit: type=1400 audit(1793163056.668:3024): avc: denied { create } for pid=8651 comm="syz.4.569" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 103.976303][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.569'. [ 104.093918][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 104.098260][ T42] audit: type=1400 audit(1793163056.798:3025): avc: denied { create } for pid=8672 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 104.114443][ T5798] Bluetooth: hci2: command tx timeout [ 104.303539][ T8679] netlink: 'syz.5.574': attribute type 21 has an invalid length. [ 104.303581][ T8680] netlink: 'syz.5.574': attribute type 21 has an invalid length. [ 104.303653][ T8679] netlink: 144 bytes leftover after parsing attributes in process `syz.5.574'. [ 104.303761][ T8680] netlink: 144 bytes leftover after parsing attributes in process `syz.5.574'. [ 104.383744][ T42] audit: type=1400 audit(1793163057.078:3026): avc: denied { read write } for pid=8681 comm="syz.5.575" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.389578][ T42] audit: type=1400 audit(1793163057.088:3027): avc: denied { open } for pid=8681 comm="syz.5.575" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.643306][ T8689] syz_tun: entered allmulticast mode [ 104.649627][ T8689] pimreg: entered allmulticast mode [ 104.660414][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 104.660416][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 104.664160][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 104.692227][ T5831] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.692253][ T5831] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.704442][ T5831] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.704468][ T5831] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.704660][ T8688] syz_tun: left allmulticast mode [ 104.704774][ T8688] pimreg: left allmulticast mode [ 104.922840][ T42] audit: type=1400 audit(1793163057.618:3028): avc: denied { setopt } for pid=8702 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.923152][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 104.960887][ T8692] md: md6 stopped. [ 105.005300][ T42] audit: type=1400 audit(1793163057.708:3029): avc: denied { unmount } for pid=7713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 105.052572][ T42] audit: type=1400 audit(1793163057.748:3030): avc: denied { append } for pid=8708 comm="syz.6.582" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.066298][ T8709] FAULT_INJECTION: forcing a failure. [ 105.066298][ T8709] name fail_futex, interval 1, probability 0, space 0, times 1 [ 105.066339][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.6.582 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 105.066356][ T8709] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 105.066360][ T8709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.066375][ T8709] Call Trace: [ 105.066380][ T8709] [ 105.066385][ T8709] dump_stack_lvl+0x100/0x190 [ 105.066455][ T8709] should_fail_ex.cold+0x5/0xa [ 105.066472][ T8709] get_futex_key+0x1c9/0x13e0 [ 105.066496][ T8709] ? __pfx_get_futex_key+0x10/0x10 [ 105.066512][ T8709] ? do_syscall_64+0x123/0x790 [ 105.066594][ T8709] futex_wake+0xf4/0x5e0 [ 105.066609][ T8709] ? __pfx_futex_wake+0x10/0x10 [ 105.066628][ T8709] do_futex+0x2b2/0x440 [ 105.066640][ T8709] ? __pfx_do_futex+0x10/0x10 [ 105.066651][ T8709] ? kasan_quarantine_put+0x104/0x240 [ 105.066673][ T8709] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.066687][ T8709] __x64_sys_futex+0x34f/0x4d0 [ 105.066701][ T8709] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.066713][ T8709] ? __pfx___x64_sys_mount+0x10/0x10 [ 105.066731][ T8709] do_syscall_64+0x123/0x790 [ 105.066743][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.066755][ T8709] RIP: 0033:0x7f0b2979f559 [ 105.066764][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.066775][ T8709] RSP: 002b:00007f0b2a5940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.066805][ T8709] RAX: ffffffffffffffda RBX: 00007f0b29a25fa8 RCX: 00007f0b2979f559 [ 105.066812][ T8709] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b29a25fac [ 105.066818][ T8709] RBP: 00007f0b29a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 105.066825][ T8709] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 105.066831][ T8709] R13: 00007f0b29a26038 R14: 00007fff246897a0 R15: 00007fff24689888 [ 105.066845][ T8709] [ 105.081347][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 105.108662][ T8712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.108679][ T8712] overlayfs: failed to set xattr on upper [ 105.108683][ T8712] overlayfs: ...falling back to redirect_dir=nofollow. [ 105.108687][ T8712] overlayfs: ...falling back to index=off. [ 105.108691][ T8712] overlayfs: ...falling back to uuid=null. [ 105.108714][ T8712] overlayfs: maximum fs stacking depth exceeded [ 105.237819][ T8731] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 2, id = 0 [ 105.242469][ T8729] tipc: Started in network mode [ 105.242480][ T8729] tipc: Node identity , cluster identity 4711 [ 105.242490][ T8729] tipc: Failed to set node id, please configure manually [ 105.242520][ T8729] tipc: Enabling of bearer rejected, failed to enable media [ 105.518649][ T8747] fuse: Bad value for 'fd' [ 105.571802][ T8750] netlink: 'syz.5.589': attribute type 10 has an invalid length. [ 105.580012][ T8750] team0: Port device nlmon0 added [ 105.644377][ T8754] netlink: 'syz.5.591': attribute type 1 has an invalid length. [ 105.828915][ T8758] overlayfs: failed to resolve './file2': -2 [ 105.830028][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.593'. [ 106.318364][ T8789] block nbd0: server does not support multiple connections per device. [ 106.318906][ T8789] block nbd0: shutting down sockets [ 106.352393][ T8791] overlayfs: conflicting options: userxattr,redirect_dir=on [ 106.386669][ T8792] block nbd3: shutting down sockets [ 106.710239][ T8813] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.712178][ T8817] Bluetooth: MGMT ver 1.23 [ 106.714473][ T8817] ptp ptp0: only physical clock in use now [ 106.746855][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 106.941026][ T8828] FAULT_INJECTION: forcing a failure. [ 106.941026][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 106.941073][ T8828] CPU: 2 UID: 0 PID: 8828 Comm: syz.3.607 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 106.941090][ T8828] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 106.941094][ T8828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.941111][ T8828] Call Trace: [ 106.941121][ T8828] [ 106.941126][ T8828] dump_stack_lvl+0x100/0x190 [ 106.941202][ T8828] should_fail_ex.cold+0x5/0xa [ 106.941226][ T8828] should_failslab+0xc2/0x120 [ 106.941253][ T8828] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.941265][ T8828] ? tcx_link_attach+0x734/0xbc0 [ 106.941282][ T8828] tcx_link_attach+0x734/0xbc0 [ 106.941298][ T8828] ? __pfx_tcx_link_attach+0x10/0x10 [ 106.941316][ T8828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.941334][ T8828] __sys_bpf+0x462a/0x4b60 [ 106.941349][ T8828] ? plist_check_list+0x1b8/0x280 [ 106.941441][ T8828] ? plist_check_list+0x180/0x280 [ 106.941457][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 106.941471][ T8828] ? find_held_lock+0x2b/0x80 [ 106.941482][ T8828] ? futex_wake+0x4ea/0x5e0 [ 106.941497][ T8828] ? futex_private_hash_put.part.0+0xdc/0x180 [ 106.941515][ T8828] ? futex_private_hash_put+0x24/0x30 [ 106.941535][ T8828] ? __pfx_futex_wake+0x10/0x10 [ 106.941561][ T8828] ? rcu_read_lock_any_held+0x6a/0x90 [ 106.941575][ T8828] ? find_held_lock+0x2b/0x80 [ 106.941585][ T8828] ? ksys_write+0x190/0x250 [ 106.941598][ T8828] ? ksys_write+0x190/0x250 [ 106.941620][ T8828] ? __x64_sys_futex+0x34f/0x4d0 [ 106.941630][ T8828] ? __x64_sys_futex+0x358/0x4d0 [ 106.941643][ T8828] ? xfd_validate_state+0x129/0x190 [ 106.941658][ T8828] ? __x64_sys_bpf+0xce/0x140 [ 106.941672][ T8828] __x64_sys_bpf+0xce/0x140 [ 106.941688][ T8828] ? do_syscall_64+0xae/0x790 [ 106.941700][ T8828] do_syscall_64+0x123/0x790 [ 106.941711][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.941723][ T8828] RIP: 0033:0x7fd049d9f559 [ 106.941732][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.941743][ T8828] RSP: 002b:00007fd047ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.941773][ T8828] RAX: ffffffffffffffda RBX: 00007fd04a025fa0 RCX: 00007fd049d9f559 [ 106.941781][ T8828] RDX: 0000000000000020 RSI: 0000200000001a80 RDI: 000000000000001c [ 106.941788][ T8828] RBP: 00007fd049e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.941795][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.941802][ T8828] R13: 00007fd04a026038 R14: 00007fd04a025fa0 R15: 00007ffd4e214dc8 [ 106.941818][ T8828] [ 106.952426][ T8828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.052939][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.6.609'. [ 107.063390][ T8834] bond0: entered promiscuous mode [ 107.066322][ T8834] gretap0: entered promiscuous mode [ 107.069091][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 107.069111][ T8834] Cannot create hsr debugfs directory [ 107.069137][ T8834] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 107.069146][ T8834] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 107.071945][ T8834] hsr0: entered promiscuous mode [ 107.145980][ T8844] block nbd6: NBD_DISCONNECT [ 107.151135][ T8846] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.268177][ T8850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.404119][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 107.428417][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428497][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428569][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428641][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428734][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428808][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428881][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.428977][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429146][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429318][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429472][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429546][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429637][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429709][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429780][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429885][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.429983][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430130][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430204][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430275][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430367][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430438][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430509][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430581][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430670][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430742][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430812][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430887][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.430985][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.431058][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.431130][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.431201][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.431276][ T8870] usb usb7: usbfs: process 8870 (syz.6.616) did not claim interface 0 before use [ 107.554755][ T29] usb 9-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 107.558297][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.558317][ T29] usb 9-1: Product: syz [ 107.558328][ T29] usb 9-1: Manufacturer: syz [ 107.558340][ T29] usb 9-1: SerialNumber: syz [ 107.805641][ T8903] netlink: 'syz.3.624': attribute type 5 has an invalid length. [ 107.806758][ T8903] netlink: 'syz.3.624': attribute type 5 has an invalid length. [ 107.837594][ T29] rtl8150 9-1:1.0: couldn't reset the device [ 107.837725][ T29] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 107.840495][ T29] usb 9-1: USB disconnect, device number 4 [ 108.018851][ T8920] netlink: 'syz.3.628': attribute type 8 has an invalid length. [ 108.075308][ T8921] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 108.961333][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 109.204047][ T29] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 109.311070][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 109.311098][ T42] audit: type=1400 audit(1793163062.008:3060): avc: denied { ioctl } for pid=8943 comm="syz.4.637" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xc008640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 109.374362][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 109.374878][ T29] usb 11-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 109.375816][ T29] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.375828][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.375848][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 109.375862][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 109.375881][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.379876][ T29] hub 11-1:1.0: bad descriptor, ignoring hub [ 109.379889][ T29] hub 11-1:1.0: probe with driver hub failed with error -5 [ 109.388655][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 109.388670][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 109.398842][ T29] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 109.398860][ T29] cdc_wdm 11-1:1.0: Unknown control protocol [ 109.526455][ T42] audit: type=1400 audit(1793163062.228:3061): avc: denied { mounton } for pid=8947 comm="syz.4.638" path="/19/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 109.581843][ T42] audit: type=1400 audit(1793163062.278:3062): avc: denied { read write } for pid=8941 comm="syz.6.636" name="cdc-wdm0" dev="devtmpfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.582017][ T42] audit: type=1400 audit(1793163062.278:3063): avc: denied { open } for pid=8941 comm="syz.6.636" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.638672][ T42] audit: type=1804 audit(1793163062.338:3064): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.638" name="/newroot/19/file0" dev="fuse" ino=1 res=1 errno=0 [ 109.680982][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.4.639'. [ 109.710139][ T8955] fuse: Bad value for 'user_id' [ 109.710151][ T8955] fuse: Bad value for 'user_id' [ 109.795774][ T1045] usb 11-1: USB disconnect, device number 4 [ 109.960220][ T42] audit: type=1400 audit(1793163062.658:3065): avc: denied { create } for pid=8966 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.122866][ T42] audit: type=1400 audit(1793163062.818:3066): avc: denied { append } for pid=8978 comm="syz.4.647" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.140779][ T8979] device-mapper: table: 248:7: raid: Bogus data_offset value (-EINVAL) [ 110.140811][ T8979] device-mapper: ioctl: error adding target to table [ 110.178045][ T8982] netlink: 'syz.4.648': attribute type 12 has an invalid length. [ 110.255106][ T42] audit: type=1400 audit(1793163062.948:3067): avc: denied { map } for pid=8983 comm="syz.4.649" path="socket:[30863]" dev="sockfs" ino=30863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.255138][ T42] audit: type=1400 audit(1793163062.948:3068): avc: denied { read } for pid=8983 comm="syz.4.649" path="socket:[30863]" dev="sockfs" ino=30863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.256923][ T8984] netlink: 11156 bytes leftover after parsing attributes in process `syz.4.649'. [ 110.333606][ T5792] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 110.348882][ T8989] netlink: 'syz.4.650': attribute type 9 has an invalid length. [ 110.401663][ T42] audit: type=1400 audit(1793163063.098:3069): avc: denied { validate_trans } for pid=8991 comm="syz.6.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 111.093857][ T9019] gadgetfs: bound to dummy_udc driver [ 111.110878][ T9019] FAULT_INJECTION: forcing a failure. [ 111.110878][ T9019] name fail_futex, interval 1, probability 0, space 0, times 0 [ 111.110923][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.6.659 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 111.110942][ T9019] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 111.110947][ T9019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.110962][ T9019] Call Trace: [ 111.110967][ T9019] [ 111.110972][ T9019] dump_stack_lvl+0x100/0x190 [ 111.110993][ T9019] should_fail_ex.cold+0x5/0xa [ 111.111010][ T9019] get_futex_key+0x1c9/0x13e0 [ 111.111029][ T9019] ? __pfx_get_futex_key+0x10/0x10 [ 111.111047][ T9019] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 111.111067][ T9019] futex_wait_setup+0x91/0x540 [ 111.111085][ T9019] __futex_wait+0x19f/0x360 [ 111.111099][ T9019] ? __pfx___futex_wait+0x10/0x10 [ 111.111112][ T9019] ? __pfx_try_to_wake_up+0x10/0x10 [ 111.111125][ T9019] ? futex_hash+0x311/0x400 [ 111.111142][ T9019] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.111158][ T9019] ? find_held_lock+0x2b/0x80 [ 111.111168][ T9019] ? futex_wake+0x4ea/0x5e0 [ 111.111184][ T9019] futex_wait+0xe6/0x370 [ 111.111197][ T9019] ? __pfx_futex_wait+0x10/0x10 [ 111.111214][ T9019] ? putname+0xb1/0x110 [ 111.111233][ T9019] ? kmem_cache_free+0x127/0x6c0 [ 111.111248][ T9019] do_futex+0x265/0x440 [ 111.111259][ T9019] ? __pfx_do_futex+0x10/0x10 [ 111.111270][ T9019] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.111284][ T9019] __x64_sys_futex+0x34f/0x4d0 [ 111.111296][ T9019] ? __x64_sys_openat+0x12d/0x210 [ 111.111306][ T9019] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.111323][ T9019] do_syscall_64+0x123/0x790 [ 111.111377][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.111389][ T9019] RIP: 0033:0x7f0b2979f559 [ 111.111399][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.111411][ T9019] RSP: 002b:00007f0b2a5940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.111435][ T9019] RAX: ffffffffffffffda RBX: 00007f0b29a25fa8 RCX: 00007f0b2979f559 [ 111.111443][ T9019] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b29a25fa8 [ 111.111453][ T9019] RBP: 00007f0b29a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.111462][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.111471][ T9019] R13: 00007f0b29a26038 R14: 00007fff246897a0 R15: 00007fff24689888 [ 111.111494][ T9019] [ 111.111953][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 111.111972][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.659'. [ 111.118882][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 111.118901][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.659'. [ 111.146646][ T5831] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.146719][ T5831] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.146738][ T5831] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.146755][ T5831] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.187434][ T9025] bond1: Unable to set up delay as MII monitoring is disabled [ 111.190509][ T9025] bond1 (unregistering): Released all slaves [ 111.312512][ T9037] ip6t_hbh: Not strict - not implemented [ 111.422147][ T9046] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 111.426001][ T9046] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 111.428734][ T9046] CPU: 3 UID: 0 PID: 9046 Comm: syz.6.667 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 111.432127][ T9046] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 111.434009][ T9046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.437266][ T9046] RIP: 0010:crypt_setkey+0x6a2/0x910 [ 111.438953][ T9046] Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22 [ 111.445816][ T9046] RSP: 0018:ffffc900036e77d0 EFLAGS: 00010247 [ 111.447802][ T9046] RAX: dffffc0000000000 RBX: ffff888058686000 RCX: ffffc900235a9000 [ 111.450324][ T9046] RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004 [ 111.452779][ T9046] RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020 [ 111.455179][ T9046] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000 [ 111.457594][ T9046] R13: ffff888058686660 R14: 0000000000000000 R15: 0000000000000000 [ 111.460007][ T9046] FS: 00007f0b2a5946c0(0000) GS:ffff8880d4798000(0000) knlGS:0000000000000000 [ 111.462734][ T9046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.464808][ T9046] CR2: 000000110c3d67dc CR3: 0000000057ca3000 CR4: 0000000000352ef0 [ 111.467264][ T9046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000041391c33 [ 111.469773][ T9046] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 111.472212][ T9046] Call Trace: [ 111.473273][ T9046] [ 111.474256][ T9046] ? crypt_set_key+0x11b/0x630 [ 111.475776][ T9046] ? rcu_is_watching+0x13/0xc0 [ 111.477504][ T9046] ? crypt_set_key+0x11b/0x630 [ 111.479207][ T9046] ? kfree+0x1e5/0x6d0 [ 111.480651][ T9046] crypt_set_key+0x1c8/0x630 [ 111.482310][ T9046] crypt_ctr+0x1091/0x3d10 [ 111.484125][ T9046] ? __pfx_crypt_ctr+0x10/0x10 [ 111.486191][ T9046] ? kasan_save_track+0x14/0x30 [ 111.488278][ T9046] ? __kasan_kmalloc+0xaa/0xb0 [ 111.490325][ T9046] ? dm_split_args+0xc1/0x570 [ 111.492381][ T9046] ? rcu_is_watching+0x13/0xc0 [ 111.494049][ T9046] ? dm_split_args+0xc1/0x570 [ 111.495576][ T9046] ? kfree+0x1e5/0x6d0 [ 111.496905][ T9046] ? skip_spaces+0xee/0x130 [ 111.498383][ T9046] dm_table_add_target+0x58b/0xee0 [ 111.500002][ T9046] ? __pfx_dm_table_add_target+0x10/0x10 [ 111.502301][ T9046] ? dm_table_create+0x2d3/0x3d0 [ 111.504386][ T9046] table_load+0x3b9/0x7b0 [ 111.506235][ T9046] ? __pfx_table_load+0x10/0x10 [ 111.508212][ T9046] ? __might_fault+0xc5/0x140 [ 111.510211][ T9046] ? __might_fault+0xc5/0x140 [ 111.512035][ T9046] ctl_ioctl+0x4d2/0xcc0 [ 111.513800][ T9046] ? __pfx_table_load+0x10/0x10 [ 111.515889][ T9046] ? __pfx_ctl_ioctl+0x10/0x10 [ 111.517962][ T9046] ? selinux_file_ioctl+0x1e0/0x290 [ 111.520171][ T9046] dm_ctl_ioctl+0x22/0x30 [ 111.522046][ T9046] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 111.524160][ T9046] __x64_sys_ioctl+0x18e/0x210 [ 111.526176][ T9046] do_syscall_64+0x123/0x790 [ 111.528168][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.530645][ T9046] RIP: 0033:0x7f0b2979f559 [ 111.532517][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.539664][ T9046] RSP: 002b:00007f0b2a594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.542318][ T9046] RAX: ffffffffffffffda RBX: 00007f0b29a25fa0 RCX: 00007f0b2979f559 [ 111.545491][ T9046] RDX: 0000200000000600 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 111.548612][ T9046] RBP: 00007f0b29836b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.551344][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.554114][ T9046] R13: 00007f0b29a26038 R14: 00007f0b29a25fa0 R15: 00007fff24689888 [ 111.556773][ T9046] [ 111.558105][ T9046] Modules linked in: [ 111.561612][ T9046] ---[ end trace 0000000000000000 ]--- [ 111.565429][ T9046] RIP: 0010:crypt_setkey+0x6a2/0x910 [ 111.565468][ T9046] Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22 [ 111.565488][ T9046] RSP: 0018:ffffc900036e77d0 EFLAGS: 00010247 [ 111.565506][ T9046] RAX: dffffc0000000000 RBX: ffff888058686000 RCX: ffffc900235a9000 [ 111.565519][ T9046] RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004 [ 111.565532][ T9046] RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020 [ 111.565544][ T9046] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000 [ 111.565591][ T9046] R13: ffff888058686660 R14: 0000000000000000 R15: 0000000000000000 [ 111.565604][ T9046] FS: 00007f0b2a5946c0(0000) GS:ffff8880d4798000(0000) knlGS:0000000000000000 [ 111.565639][ T9046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.565654][ T9046] CR2: 00007f05ebbb1ff8 CR3: 0000000057ca3000 CR4: 0000000000352ef0 [ 111.565667][ T9046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000041391c33 [ 111.565679][ T9046] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 111.565694][ T9046] Kernel panic - not syncing: Fatal exception [ 111.610884][ T9046] Kernel Offset: disabled [ 111.612253][ T9046] Rebooting in 86400 seconds..