last executing test programs: 5m11.721822565s ago: executing program 32 (id=448): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="a72d4952962f65f76998112b", 0xc}, {&(0x7f00000002c0)="b8869dd9fb606c38b5f1e38268a108562d150070f2", 0x15}], 0x2, 0x0, 0x0, 0x4004001}}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004f80)="ef66f2dd78c79ea63ba182c99f4c6c80ded85f864557859c91c67e232da846c2a249fea1f722922ee8531756c2921c86b4463b1a183d188ad8619668bd11a4e262e407ef736eee8ab208395fe5045a755186694ecf0d6e06fc0f94ec6158a3edf14ca0e2300b0da6b979589a42f9c1a0c26a99943c167be51a114eab1025228db4", 0x81}], 0x1, 0x0, 0x0, 0x4008004}}], 0x2, 0x4000801) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m52.540399152s ago: executing program 33 (id=601): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) (async, rerun: 32) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYBLOB="883a893b"]) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2043) (rerun: 64) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2d, 0x4, 0x8, 0x0, 0x7d, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x3, 0x8000000000, 0x9, 0xebd, 0xebad, {0x5, 0x0, 0x4, 0x1, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, r4, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) 4m34.326005199s ago: executing program 4 (id=782): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) (async) r1 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_DELRULE={0x140, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xfa, 0x7, 0x1, 0x0, "0491a8a64c5de26826f5099a4e82fc50e0475b9b92e230a3aa0cde2db8a66ef530900eda30ae6d45ead78442fba484ea73f3dcb0fb2e7b8ed5a87c216284a1f339b4a7c281c9438fdd79f2f87e02c0261dd534afb99b8b0e292c7be9c4a665e9acf7da47e6538ea10e5397b667006a5edb7914d2b730909a485aa86e414c64cc3b0d9399d35d56365ec95d6ce7351b9a00577d75131256b278ec7cca00ca19770562897af908e9f0b13dae54d37502aef30a2e5fae6c8197fc80e31c440bdd0c3792f3e94e57b169f30e42b707d4127a4fb06c1d28a527f3df976a99c12f6c397323f26efce01b2654444ad07416963bf971980d61d6"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "0269ae253d724f83f6063ec006a173e38998b0d5bb3265e5ab5b"}]}, @NFT_MSG_NEWSET={0x4b4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_DESC={0x480, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1521}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6529}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7074}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9e}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x526}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1145}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29b}]}]}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f82}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffff394}, @NFTA_SET_DESC_CONCAT={0x1d8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x457a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x871}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3682}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x710f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f6da7c8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60b}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x698}}, 0x20000000) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) (async, rerun: 64) r5 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r5, 0x0) (async) preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000540)=""/17, 0x11}], 0x1, 0x80000000, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c0002800500100007800000e92ca1988914a342117fcb1730b77831a5eddff446e7a889c60de5f1220b3e8011a6f2e36168eecd42208cd8e446e31f24c183d74c9244ed630e55d5f93aee6bdbb8e4bd5788c196a0b752369dbfce4060a20bffabbe025e77999153b9341534b1065eeb7dae5ed12d1a4827d79b91ee50fc0da9262eb2f18c681f8b44cfdc45260e6ed4594d3efd38c2b19944619c7425137ed9ee73685d8c90a6b0c3e38b2190be7b9ae096a4a78370df1d5a491ab367c1cc47ff27caa4ea62a3b9"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 4m34.316127487s ago: executing program 4 (id=785): syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f0000000480)="b2", 0x1}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000200)=0x7fff, 0x80000000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x200003fc}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m33.113337161s ago: executing program 4 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x10000}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='\\x01020304 2000000000 -', 0x17) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2}) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) 4m32.886795137s ago: executing program 4 (id=790): prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) r0 = eventfd(0x6bb1) write(r0, &(0x7f0000000000)="37b25c0100cdd49a1660f868b5e6409ca5eafd4ffbc3b3db27c9976c6e0e51d50622df9817446a66375cf7f6b1aa6911411758b5d903c7162a4b6c23bb512e3b0d63d1731a916f5a3768964f9ec6f3a2cb099d6ce714a4d901fded51caa673a3a886cfdfb9409fa3bbea2c255c5fca3059e7e7e732366623e7d8dca3ba2f5e23ad7dea7339b5c8a32b199fa698f5658a780f1dcebb37ffc581fe26d42caa139caa1f33db662e4b2ec6ed4db1d60ca2a48e5a356052722dcd2bde85a378b7141358da2b", 0xc3) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) (async) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) 4m32.8142953s ago: executing program 4 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abdf6020000df251900000008000300", @ANYRES32=r3, @ANYBLOB="05001d002700000005001c"], 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='0000:00:1d.7', 0xc) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r4) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r11, @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r12, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) r13 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x8, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0xfffd}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x2, 0x1}}) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000040)={0x100000001}) process_vm_writev(r5, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='0000:00:1d.7', 0xc) sched_getscheduler(r5) 4m31.737962932s ago: executing program 4 (id=802): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRESOCT=r0], 0x20) 4m17.111774459s ago: executing program 34 (id=920): syz_emit_ethernet(0xfa, &(0x7f00000003c0)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x22, 0x4, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x9, [{@multicast2, 0x1}, {@loopback, 0x5}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x6, "9389e00f"}, {0x1, 0x3, "cd"}, {0x2, 0x10, "4f327f1d97834eb6842e61997e09"}, {0x6, 0x5, "41a378"}]}, @timestamp={0x44, 0x8, 0xc1, 0x0, 0x7, [0x2]}, @timestamp={0x44, 0x10, 0x30, 0x0, 0xb, [0x9, 0x0, 0x40]}, @noop, @generic={0x94, 0xf, "2338283be66f86439cb6adaed9"}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x1, [0xd8bd]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x22, [@private=0xa010101]}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25bba296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) (async) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x150, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "72f01afe02000000366a6a849a73904519240062227c0200"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) (async) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r6, 0x107, 0x6, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x888e}, @val={0x1, 0x1, 0x4, 0x8, 0x4, 0x40}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local}}, 0x2a) 4m16.102364263s ago: executing program 35 (id=802): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRESOCT=r0], 0x20) 4m11.027698983s ago: executing program 6 (id=968): r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) (async) getsockopt(r1, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) landlock_create_ruleset(&(0x7f0000000040)={0x15020, 0x4, 0x0, 0x5109}, 0x30, 0x3) (async) landlock_create_ruleset(&(0x7f0000000040)={0x15020, 0x4, 0x0, 0x5109}, 0x30, 0x3) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) write(r3, &(0x7f0000000180)='1000', 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x3, 0x1, 0x200, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x34324948}) 4m10.748514422s ago: executing program 6 (id=970): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020035880000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r2, @ANYBLOB='\x00\x00#\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020035880000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r2, @ANYBLOB='\x00\x00#\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) (async) pipe(&(0x7f0000000180)) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) 4m10.747078112s ago: executing program 6 (id=973): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/raid_disks/file0\x00', 0x200000, 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0404"], 0xd) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x101000) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)=[0x1, 0x3, 0x8], &(0x7f0000000080)=[0xec, 0x9, 0x3, 0x9, 0xfffffffe], 0x0, 0x40000038, 0x7, &(0x7f00000000c0)=[0x3, 0x81d6, 0x0, 0x3, 0xffff0000], &(0x7f00000001c0)=[0x2, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) 4m10.634762581s ago: executing program 6 (id=978): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000001, 0x46032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f0000000280)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x491}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x28, r2, 0x5, 0x0, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 4m10.407614088s ago: executing program 6 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) (async) sendmmsg$inet6(r1, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x7, 0x121402) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x8000006, 0x8}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x8000006, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kexec_load(0x20000000, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x4d, 0x0, 0x8000}], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 4m10.406171329s ago: executing program 6 (id=983): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x168) write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='ata_generic\x00', 0xc) r4 = openat(r2, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0000:00:03.0', 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r6, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x1008000000200, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) 4m5.260684358s ago: executing program 1 (id=1021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}}, 0x4000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10c}}, 0x0) 4m5.260211485s ago: executing program 1 (id=1022): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$packet(0x11, 0x3, 0x300) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) socket$packet(0x11, 0x3, 0x300) (async) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) (async) 4m5.183851707s ago: executing program 1 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000003, 0x0, 0x1, r2, 0xb}) 4m4.934699556s ago: executing program 1 (id=1026): r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000), 0xa3f, 0x101000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x80000000}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000740)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000900)={r3, &(0x7f0000000840), &(0x7f0000000880)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) close_range(r4, 0xffffffffffffffff, 0x0) 4m4.746741158s ago: executing program 1 (id=1027): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 4m4.245332191s ago: executing program 1 (id=1031): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x2000000effdffff, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r5, 0x1, 0x1) recvmsg$can_j1939(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) 4m4.211594186s ago: executing program 36 (id=1031): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x2000000effdffff, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r5, 0x1, 0x1) recvmsg$can_j1939(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) 3m54.332568083s ago: executing program 37 (id=983): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x168) write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='ata_generic\x00', 0xc) r4 = openat(r2, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0000:00:03.0', 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r6, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x1008000000200, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) 3m4.358098333s ago: executing program 9 (id=1689): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x800) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(r1, &(0x7f0000000080)="b03b7591517b6c9644a74f6984a0309edee41d2efc091fd57aa35c950c", 0x1d) 3m4.221494282s ago: executing program 9 (id=1691): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x3, 0x0, 0x4, 0x5}, 0x20) 3m4.162994504s ago: executing program 9 (id=1693): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000024003507d23b806fac6394f90324fc60", 0x14}], 0x1}, 0x20000080) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0xffffffffffffffe5, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0x4c802) 3m1.495471753s ago: executing program 9 (id=1727): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x178, 0xc, 0x0, 0x178, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {0xff}, 0x3b, 0x1, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa, 0x0, '\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0xf2, 0x4, 0x7, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, [0xff, 0xff000000, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff], 0x100, 0x80}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x161003, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x2c000014}, 0x8001) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x6}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x802) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf9800000000000057080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0xe01, 0x3c) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x684802) socket$nl_netfilter(0x10, 0x3, 0xc) chroot(&(0x7f0000000400)='./file0\x00') 3m1.494092793s ago: executing program 9 (id=1729): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES64=r2], 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) (async) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @remote, @local, @dev={0xac, 0x14, 0x14, 0x14}}}}}, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) write(r5, &(0x7f0000000300)="dca5437963d28de823d920642ce831a3dc251e7b", 0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x3}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000200000000002000030000000000187a8b897df8c8f12491970c30c620b5c31b835a5a81f08e2d11aacf6c325e6d4f5c4f5c9cf86525c52532cf9fce4015"], 0x24, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0x7, {0x2, 0x0, 0x4}}, 0x18) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x8000000000000003, {}, 0xfd}, 0x18) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x40060) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000006c0)={@rand_addr, @initdev, @loopback}, &(0x7f00000007c0)=0xc) 3m1.053131502s ago: executing program 9 (id=1734): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) landlock_restrict_self(r0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3501a600", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf25050000000c0002000400000000000000080001000000000004000a000c00030006000000000000000c0004000800000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24028080}, 0x48080) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x228102, 0x100) ioctl(r3, 0x541b, 0x0) ioctl(r3, 0x5451, 0x0) 3m0.811897069s ago: executing program 38 (id=1734): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) landlock_restrict_self(r0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3501a600", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf25050000000c0002000400000000000000080001000000000004000a000c00030006000000000000000c0004000800000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24028080}, 0x48080) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x228102, 0x100) ioctl(r3, 0x541b, 0x0) ioctl(r3, 0x5451, 0x0) 2m26.132663284s ago: executing program 0 (id=2018): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x400440, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{}, r1, 0x0, @unused=[0x8000000000000000, 0x100, 0x1, 0x8000000000000001], @subvolid=0xefbc5f0}) r2 = getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001080)=r2) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000010c0), 0x242000, 0x0) pselect6(0x40, &(0x7f0000001100)={0x6, 0x7, 0x0, 0x6, 0x4, 0x31, 0x2, 0x4}, &(0x7f0000001140)={0xb04e, 0x1, 0x1, 0x0, 0x9, 0x4, 0x7ff, 0x2}, &(0x7f0000001180)={0x3, 0x70be, 0x1, 0x5, 0xfffffffffffffffd, 0x7, 0x2, 0x2}, &(0x7f00000011c0), &(0x7f0000001240)={&(0x7f0000001200)={[0x3]}, 0x8}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4081) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) mkdirat(r3, &(0x7f00000013c0)='./file0\x00', 0x191) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x4c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x4c}}, 0x40043) readlink(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)=""/73, 0x49) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000016c0)={0x100, 0x8, {r2}, {0xffffffffffffffff}, 0xffffffff00000001, 0x800}) newfstatat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fchownat(r3, &(0x7f0000001680)='./file0\x00', r8, r9, 0x1000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r10, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x80c5) getpid() syz_emit_vhci(&(0x7f0000001900)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x42}, @l2cap_cid_signaling={{0x3e}, [@l2cap_conn_req={{0x2, 0xf2, 0x4}, {0x6a, 0x5}}, @l2cap_conf_rsp={{0x5, 0xbe, 0x2a}, {0xf, 0x8, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x9, 0x3, 0x7ff, 0x4}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xc}, @l2cap_conf_rfc={0x4, 0x9, {0x7, 0x0, 0x3, 0x7, 0x3, 0x2}}]}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xb0, 0x7f}}]}}, 0x47) read$FUSE(r0, &(0x7f0000001980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f00000039c0)={0x78, 0x0, r12, {0x8020, 0x81, 0x0, {0x2, 0x2, 0x2, 0x0, 0x7fb, 0x90, 0x7d5, 0x19d, 0xff, 0x6000, 0x1, r8, r9, 0x0, 0xe1}}}, 0x78) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000003a40)={0x4, 0x80000, r5}) ioctl$HIDIOCGFIELDINFO(r13, 0xc038480a, &(0x7f0000003a80)={0x2, 0x200, 0x7, 0x7, 0xe4e, 0x4, 0x6, 0x7, 0x9, 0x7, 0x6, 0x2, 0x1, 0x103e}) ioctl$KVM_NMI(r3, 0xae9a) epoll_pwait2(r3, &(0x7f0000003ac0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000003b00)={0x77359400}, &(0x7f0000003b40)={[0x2]}, 0x8) 2m26.017942196s ago: executing program 0 (id=2020): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4f, 0x1d, 0x6, 0x8000}, {0x6, 0x8, 0x3, 0x2}]}, 0x10) 2m25.9279308s ago: executing program 0 (id=2023): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0xc2400, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x8004) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1024, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1016, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1002, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r3, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000004000)=""/4095, 0xfff}], 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2m24.926033759s ago: executing program 0 (id=2033): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x4000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 2m24.669879245s ago: executing program 0 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r2], 0x2c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000500"/20, @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x20000000) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='./tracing/events/uprobes/p1/enable\x00', &(0x7f0000000300)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/events/uprobes/p1/enable\x00', 0x10bc40, 0x1ff) write(r3, &(0x7f00000001c0)="d800040000c3", 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x80a0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r12, 0x3b88, &(0x7f0000000200)={0xc, r13}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r12, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) tee(r10, r11, 0x8f5, 0xb) write(r9, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) 2m24.136080365s ago: executing program 0 (id=2043): syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f0000000480)="b2", 0x1}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000200)=0x7fff, 0x80000000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x200003fc}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m8.095729269s ago: executing program 39 (id=2043): syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="99", 0x1}, {&(0x7f0000000480)="b2", 0x1}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000200)=0x7fff, 0x80000000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x200003fc}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m22.701757153s ago: executing program 5 (id=2537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) (async) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) (async) r1 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbf8, {0x24}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') accept$alg(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xb146000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1\x00'}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r7, 0x0, 0x10008801) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r8) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) 1m21.592295507s ago: executing program 5 (id=2544): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x109040, 0x0) r1 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x7a}]}, 0x2c}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x2, 0x80, 0x80, 0xd, 0x10, 0x4000001, 0x2, 0x3, 0xfffffecd, 0x2000001, 0x20, 0xffffffff, 0x0, 0x0, 0x0}) mlockall(0x5) r4 = socket$packet(0x11, 0x3, 0x300) close_range(r4, r0, 0x2) 1m21.076310883s ago: executing program 5 (id=2550): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) setreuid(0x0, 0xee00) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) r3 = getpid() r4 = fanotify_init(0x1, 0x40000) fanotify_mark(r4, 0x0, 0x8, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') r5 = syz_pidfd_open(r3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x23, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x50606, 0xac) 1m21.069041857s ago: executing program 5 (id=2553): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0xc, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x5}, {0x3}, {0x3, @uvalue=0x5}]}, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x7}}, 0x40) ioctl$FE_READ_SNR(r0, 0x80026f48, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r2, 0xc138fd02, &(0x7f0000000000)="04000000000000000000") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e0001002abd7000040000001c000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000ac1e010104000e80"], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb2480, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'batadv0\x00', @multicast}) 1m21.037625005s ago: executing program 5 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000000040), 0x20000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r6, 0x4, 0x0, @void}, 0x10) (async) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.831010444s ago: executing program 5 (id=2558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff0000000079a100fe0000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x7, [@func={0xc, 0x0, 0x0, 0xc, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x376}, {0x2, 0x4, 0xc}, {0x1, 0x7, 0x2}], "d783"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x9, 0x2}, {0x5}]}, @fwd={0xa}, @func={0x5, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x2e, 0x30, 0x2e, 0x61]}}, &(0x7f0000000240)=""/243, 0xb3, 0xf3, 0x1, 0x2, 0x10000}, 0x28) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) fcntl$setlease(r4, 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x2, 0xfffffff8, 0x100, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) (async) sched_setaffinity(r12, 0x8, &(0x7f00000005c0)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x34}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x14}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8a}}], &(0x7f00000000c0)='syzkaller\x00', 0x76, 0x57, &(0x7f0000000100)=""/87, 0x40f00, 0x2, '\x00', r2, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x8, 0xee, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580)=[r4, r7, r10, 0xffffffffffffffff, r11, r0, r13], &(0x7f00000006c0)=[{0x4, 0x3, 0xe, 0x6}, {0x1, 0x1, 0x5, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x1, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x1, 0x6}, {0x2, 0x5, 0xe, 0xc}, {0x4, 0x4, 0xb, 0x8}, {0x4, 0x4, 0xa, 0x7}, {0x1, 0x5, 0xd, 0x2}, {0x1, 0x2, 0x10, 0x2}], 0x10, 0x2}, 0x94) 1m20.769504662s ago: executing program 40 (id=2558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff0000000079a100fe0000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x7, [@func={0xc, 0x0, 0x0, 0xc, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x376}, {0x2, 0x4, 0xc}, {0x1, 0x7, 0x2}], "d783"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x9, 0x2}, {0x5}]}, @fwd={0xa}, @func={0x5, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x2e, 0x30, 0x2e, 0x61]}}, &(0x7f0000000240)=""/243, 0xb3, 0xf3, 0x1, 0x2, 0x10000}, 0x28) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) fcntl$setlease(r4, 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x2, 0xfffffff8, 0x100, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) (async) sched_setaffinity(r12, 0x8, &(0x7f00000005c0)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x34}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x14}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8a}}], &(0x7f00000000c0)='syzkaller\x00', 0x76, 0x57, &(0x7f0000000100)=""/87, 0x40f00, 0x2, '\x00', r2, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x8, 0xee, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580)=[r4, r7, r10, 0xffffffffffffffff, r11, r0, r13], &(0x7f00000006c0)=[{0x4, 0x3, 0xe, 0x6}, {0x1, 0x1, 0x5, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x1, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x1, 0x6}, {0x2, 0x5, 0xe, 0xc}, {0x4, 0x4, 0xb, 0x8}, {0x4, 0x4, 0xa, 0x7}, {0x1, 0x5, 0xd, 0x2}, {0x1, 0x2, 0x10, 0x2}], 0x10, 0x2}, 0x94) 10.646397044s ago: executing program 7 (id=3114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) mprotect(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f000034b000/0x1000)=nil, 0x1000, 0x200000f, 0x110, r0, 0xb2b33000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000480)={'erspan0\x00', r6, 0x0, 0x20, 0x2, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x6b, 0x0, 0xe, 0x0, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3c, 0x3, [{0x7, 0x9, "cf420ffc888f01"}, {0x2, 0xc, "cbf272bedea9a7d5586c"}, {0x5, 0x2}, {0x1, 0x3, 'D'}, {0x0, 0xf, "ae1cfed6322a484d5fd24e6c92"}, {0x1, 0xd, "3fa50000fe9a6ff347295e"}]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}, @end, @end, @timestamp_prespec={0x44, 0x54, 0xe3, 0x3, 0xe, [{@broadcast, 0x401}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x2}, {@multicast1, 0xffff}, {@broadcast, 0x8}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0xff, 0x0}, 0x4}, {@broadcast}, {@local, 0x80000000}]}]}}}}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r7, 0x9, 0x5}, &(0x7f0000000300)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x25000, 0x10e000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4008881) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 10.401225437s ago: executing program 7 (id=3115): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0xfffffff9, 0x4) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (rerun: 32) pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x38000000}], 0x1, 0x40010002, 0x0) 9.428995517s ago: executing program 7 (id=3129): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) 9.290174024s ago: executing program 7 (id=3132): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xffffffff, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x8001, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x8001, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0x10a7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x1000, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xfe, 0xd8ce, 0x7fffffff, 0x100009, 0x2000c, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x40009, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES64=r6, @ANYBLOB="14bf968505b6104e18180a7f14e34f4c61b0a2762c0ad97b8090516a35b33c31d6177e83b4bb03dbd9d1157b3d6b71ab6b1b36eb60db76b13016d9678e07566ebb027beb45a2501c3ba2138dce1352c0b6cfae7bd1189d038f5660246c74a1acdfbe00a089a4fddfebe33430d6a9c715ab9b97d7daa291875047b7e2dde6720969dc06d3", @ANYRESDEC, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRES8=r0, @ANYRES32=r2, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 9.180222483s ago: executing program 7 (id=3134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) r1 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x4) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000040)="21fc7b04", 0x4}], 0x1, 0x6, 0x200, 0x0) 9.021039385s ago: executing program 7 (id=3136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x7, 0xfffffffa, 0x8, {{0x1e, 0x4, 0x1, 0x6, 0x78, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x17, 0x3, [{0x1, 0xa, "91e91da44d8f3b20"}, {0x1, 0x7, "9f283630f0"}]}, @generic={0x86, 0x8, "0df4e871ff46"}, @timestamp={0x44, 0x24, 0xdb, 0x0, 0x9, [0x6, 0x1, 0xffffffff, 0x5, 0x2, 0x4, 0xffff7484, 0x9ec]}, @end, @lsrr={0x83, 0x7, 0x14, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x9, [{@multicast1, 0x2e5}]}, @cipso={0x86, 0xa, 0x3, [{0x6, 0x4, "7f91"}]}]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=@newae={0x31c, 0x1e, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4d6, 0x2, 0x2b}, @in6=@mcast1, 0x4}, [@offload={0xc, 0x1c, {r2, 0x3}}, @tmpl={0x104, 0x5, [{{@in6=@loopback, 0x4d6, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x1, 0x80, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1000, 0x3}, {{@in6=@empty, 0x4d6, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x1, 0x8, 0x1, 0x5841}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x5, 0x2, 0xf, 0x40, 0x1000, 0x1}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x4101}, @in=@remote, 0x0, 0xa}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x8001}, @tmpl={0x184, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4d3, 0x33}, 0x2, @in6=@loopback, 0x3500, 0x3, 0x0, 0x40, 0x6, 0x5, 0x80}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@local, 0x34ff, 0x4, 0x0, 0xc, 0x0, 0x3, 0x23}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@private=0xa010101, 0x3502, 0x2, 0x1, 0x0, 0x7ff, 0x1, 0x51}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in=@local, 0x3505, 0x1, 0x3, 0x7, 0x9, 0xf261, 0x1}, {{@in6=@private0, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3503, 0x2, 0x3, 0x1, 0x9f, 0x5, 0xff}, {{@in=@local, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x0, 0x3, 0x1, 0x15, 0x5, 0x1, 0x1}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x6040000}, 0x4800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x4e21, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "72f01afe02000000366a6a849a73904500240062227c02000300018000e8ffff"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 4.915866415s ago: executing program 3 (id=3166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r4, 0x1, 0x3c, 0x0, &(0x7f0000000040)) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) (async) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/74, 0x4a}, 0x40000020) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x0, {0x1a2, 0x6}, 0x3, 0x3}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0xd8d50000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x8080a, 0x6) splice(r5, &(0x7f00000000c0)=0x8, r4, &(0x7f0000000180)=0xb, 0xffffffffffffff06, 0x8) 4.544901241s ago: executing program 3 (id=3167): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) preadv(r0, &(0x7f0000002d80), 0x0, 0x40000000, 0x8) memfd_secret(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4011) sendfile(r5, r5, 0x0, 0x30) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {}, [@alu={0x7, 0x0, 0x3, 0x9, 0x0, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) 4.417136787s ago: executing program 3 (id=3168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x200, 0x13, 0x10, 0x70bd27, 0x25dfdbfe, {0x3, 0x2, 0x0, 0x0, {0x4e21, 0x4e22, [0x3ff, 0x7, 0x827, 0x7], [0x8000, 0x2, 0xe13, 0xffffffff], r2, [0x5, 0xcab]}, 0xe, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xea, 0x1, "f792ad633d210b9f69f6311e0d439ecc1d97d7b2a392500ef93a942f659ba546514ea224ebc8b76519611872a80ad03c73c283feb3131f5238adb7622429f1f61d28b31e8320dfe2c99878a0a7f6009ad5925c24f92eeb97183ed722fd2c33ba90bf51fbe0d96eac60bc42310a29d95862e1828f2014bb97573219d2d1d0111316292bfbcc62cc9fd94e9f6df7327cd97e3b76f2c85ea6877c4e4ff5e2feffc988c670b83552da16a24be228f726e0c4d920de6a19ba83b368bc4dadbb3bfda82ff9f5b30af53bbfcc39ca7bbb056ee7d51f1f23f3ccfebe9fbf0424d3b07bdb75cb08660fbd"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "88792aec34457abd6ea15f6cd97e3914b6dea6f88495495edd18a97edd9f4ac0c69a8c5b7fd44c013930a363061648851555a5bc44bd3d4747cdbcc3f359cac498602213c4895d35ac48b361a66e364d3d952ed83b5fa7c807dfcaeb336ab8fed4c7f76cdaa08c237f498fcb897ce613a7a15f3c9ca109227f776ccd416573b07794f60215206815ea6012829eeb7ecb7266b8b6c70f203388b28fc0c3c1872c62327ff64f9e3a947d7a22e444412e276f936fa07cae5889017d3979a2a5979380c6a310"}]}, 0x200}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000102) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000081, 0x0, 0x3}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0xc5, 0x25}, 0x18) mkdirat(r6, &(0x7f00000001c0)='./file0\x00', 0x0) 4.144436257s ago: executing program 3 (id=3170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x20c) r2 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000740)={0xb467d103e8338fee}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff0000000705"], 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000180)) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff050000000000112233ff07000000000000eeff0011", 0x20, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 3.878365426s ago: executing program 2 (id=3172): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000300)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0xfc, 0xe684}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x48}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8, 0x40, 0xfff, 0x1, 0x9, 0xd, 0x9, 0xfffffffffffffffe, 0x141, 0x1, 0x8, 0x1, 0x6ac0326b, 0x7fffffff, 0x2], 0x40003, 0x800}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0x7, 0xffffffff, 0xfffffffd, 0x6, 0xffffffff, 0xffffffff, 0xffff7fff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x1], [0xffffffff, 0xffffffff, 0xffefffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x6]], '\x00', [{0x9, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x10001, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffd, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r2 = socket$tipc(0x1e, 0x7, 0x0) accept4(r2, 0x0, &(0x7f00000001c0), 0x800) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000500), 0x1000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x18d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000480)={0xd85, "b7861dade7633308ddcc846b620a5718f332a7537d9b57c5303f3b762d235aae", 0x2, 0x1, 0x1ff, 0x0, 0x10, 0x2, 0x8, 0xffff0000}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={0x0, 0x58, 0x0, 0x1, 0x0, 0x0, 0x404c812}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 2.675547452s ago: executing program 2 (id=3177): syz_clone(0x0, 0x0, 0xfd6c, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="956ace0232283117728a0093c019ccb24c08000010e80000000000000000000000000000ee298b", @ANYRES32=0x0, @ANYBLOB="2da004008d8b00002c0012800e00010069703665727370616e000000180002800500160002000000040012000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="d3bb5fa9ef628b56e0f940d97c2d9a366c3df00afb4126ced52ac3d5d60f2c4a4a88c9f7cfca1c824fff2c2e09c0f53bd1a8a2f4e6bcddb202157cfa16eab9a679c0f328b44062f36f56d00a1213ad92a66acf77a2f6ac937eca4216138c1ea21140b4bd2378df42"], 0x32) 2.457594914s ago: executing program 2 (id=3179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x1, "072b20d017bbf2bd1632992e8c5c357cb8507e8dfa0a347a2852e54a4b71ab3a", 0x1, 0x1, 0x100, 0xff06ff, 0x8}) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27805000000, 0x0, 0x0, r3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.309654305s ago: executing program 3 (id=3181): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x81, 0x8, 0x22, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x1, 0x19bc, 0xffffffff}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x80, 0x80, 0x3, 0x8312, {{0x14, 0x4, 0x1, 0x26, 0x50, 0x64, 0x0, 0x1, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x18, 0x64, 0x0, 0x1, [0x3, 0x6, 0x0, 0x1c, 0x400]}, @lsrr={0x83, 0xb, 0x76, [@rand_addr=0x64010101, @private=0xa010102]}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x1, [0x0, 0x80000001, 0x0]}, @lsrr={0x83, 0x7, 0x83, [@broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x50c01, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000540)='oom_adj\x00') writev(r11, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async) read$FUSE(r11, 0x0, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00') r13 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (async) write$binfmt_misc(r12, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r10, 0x0) (async) write$selinux_load(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c01000000"], 0x10) (async) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x2000) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (async) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0xa0f, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x6, 0x80000001, 0xe66, 0x3, 0x6, 0x4006, 0x7f, 0x3]}) 2.175238167s ago: executing program 2 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8850) 2.107063422s ago: executing program 3 (id=3183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x9fd00f6ab3720ec3, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 32) setresuid(0xee01, 0xee01, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x10, 0x0, 0x7, 0x1, @local, @loopback, 0x700, 0x18, 0x43f, 0xffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) (async) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000540)=@IORING_OP_FGETXATTR={0x2b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f000000e480)="b0e852"}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.001879561s ago: executing program 2 (id=3184): r0 = syz_ublk_setup_io_uring(0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000480)=@ublk_start_user_recovery_sqe={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_ublk_setup_io_uring(0x1e61, &(0x7f0000000340)={0x0, 0x6814, 0x4800, 0x3, 0x246, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000500), &(0x7f0000000440)) syz_ublk_add_dev(r0, r5, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x91}}}, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x16) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="8520000004cf62bee3000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c76657273696f6e3d3970323030f1268b388150715cb25624302c61636365"]) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r11, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r13, 0xf4240) close(r13) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) r14 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r14, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r14, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) 1.822500215s ago: executing program 2 (id=3186): r0 = socket$inet(0x2, 0x3, 0x4) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x23, 0x66, 0xfcd66a900070b359, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.558984542s ago: executing program 8 (id=3189): syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth1_to_bond\x00'}) write$hidraw(r0, 0x0, 0x0) 1.328855442s ago: executing program 8 (id=3190): syz_emit_ethernet(0xf3, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0xb9, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x7, 0x67}, @dstopts={0x3c, 0x5, '\x00', [@ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}}, @hao={0xc9, 0x10, @mcast2}, @pad1]}], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x3c, 0x0, @private1, @mcast1, [@hopopts={0x2c}], "75297bfc1f132024a3917b4f082d369264bcfca9efbdad1a34cde42242e63656df9e89ae8ab3e33dfffe53d3eb0a816ce3c0e64c35cacaf6b9cc52026f2cca1f6e"}}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x3f, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0xa, @private0}, r2}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) (async, rerun: 64) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145009804f864002c00000000400600000a000001", 0x16}], 0x1, 0x7, 0x0) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r7}, {0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x3}]}]}, 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) (async, rerun: 64) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) (async, rerun: 32) getpid() (rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000006c0)={{r3}, "2bc238dbc1fb1a012fb37c0728ae04833a91ffacc361a7050dccafcdf68f20d9f7415f8734d04e8306f14c619552d87f68741a24d2c9f16d3c477765636422aa279db1d1cfecb94c3b7a5cf746bf7f9cc675386245387f567d713dad16c7ba608e076fca49b60ac9ca2fb0f1d35f9a7b2adef87aa3eb7ff8ca60c56f97544765854f228e3acbf66868ba524e7c7d740f69e523f42589ac6837526e85c0fc1ffed34c0993c2a62057adfe19a6e06d8309dc1e89cb1837907cd3b64980cd806d2444a5ffcdcfd29a520af088b40c93439fc2d3f542d4158320f3839c28257da3d448638641e7a5410c55a5253050bb218b4416127decde2319c7efb42a902ca455c33d24b0d92b66331b2b8d15f6517de02d6aade178a6b828212ca0fda68ea9156ad639e0308faeddb3589634523b70896b6f65b30f3a210d5f8ef7f42e6e30738bd641ed095981bd28c7a8bf84da811b3656779fdb7aefdabb4579bb425ffe7bbffff0b1148b370503ba4bca5b24a3bf8713526d6e2e7734aa4ffdf4c88fe4805e78b2234db72835dc5f980bab51eff2447c78d6c5990cab475f0af1f7d6ce716ce7cc9ec34f1aecff509b667074b0daae9700c38416dbd9dd87dc7e9c0d70d180cda473028d6a69a8e42a67eb4a4930419300f597fc9bb5bd9bb03df83cfd2a8be1058bc3418629fa5f7ce662072cc05982fd168170ed46fc183460b842e188582dfd143c1a7b21783758d2e6715686c11ee7374502d482a1b8495bed120cd04d197f0acb628f62132edd39c300238e6dac6f97ea77b13ba3da89fa5953ea53b09e5b8dc5f1ccb6673486449e6a6f66fc826ad55eb17751d2651af79cfb0dacde6f31389af67b1f8e374da26946e3390cbeabb312bb9044d2b28841597cfd9b00e69b873ebcb27e26f7b09347a10f4df4789d84ed3f25657d54c4fc6fcdfc178ff64e47c27ee54726a35651b0777395e6a54a12d643a6985d3cfeb22e2bd43ee21e614a798edfa6098d78afdd37899aaf7948475f818634c96e54c2bb32b0cf8064223bc18d65036f0fe92cba6d4c6610aed62b156fa9be7c68e43de28106ff0d6215bfbca2c89b4515be14ce3b4cbea6e2f8154ccc964ed8c1b7255354959b2cc1ecb60adf55df72296c56ee30b2cfa4435b541f4f8382e6b05602b667d46cf2f4ee563c2c8407e1c90ad9b67ade2f6ac21b486be80b94a61c5e167143bf32a421334401c4e4927c607b10481adb3b168b50a9de531f9d4b2f34f330125b4d0f469fdb42c099449c69e7db7cc906690a6599aac15fca110d1debde0177149a243666a6de6efc4d2c261448d7f1e9326e06952ac1b159a18da05e98b0aff23294d6565e9d0d49a953a9075ad6d2ea5b52358bd079f1c389f50682413fc2b7e713629c95ff87b762936279ff13ab24f54bf83ae7d4ce39ac637a01e10289deb84ddc4c9a7a305ba90f17cf55b1935cb4970d259ad5987ba52221945b223e0dcc8b4b56fba2b6353f330228a3709c84d72f2db783b3a594137a22666593eb5b3db1aace1e95a6787de26296b90ae3272eeeef0a70c72a73801f152ac21c9703375c67d75762e70a83ccffee4588c7c980518c597847d546864bc6bc682355eb295496951c0c6eb532cc2969f8f354a1c8fa7fdd8a53f4fc3c1e2564402e671db70766f35f9c8e16324593628a4970dd111d8e0bc45756c0cfb3461db043e49dc7a2a03f2f203dd0e8d8da42c7df93e8fff1408a69192e511b5cdcea61d6d36deb41edbdc98d2b70e981a599c9e24e10ac60b0e78ad424ed35b6585ee8cd0fc3b4eb9940fd66ba16604fb9cbb258761ec55d98ef23dd20c8b9e50dcafe8085d13ed2f9589f28b53e84339bd17292abd9bd46d392b57d28eafead88c4e4d5216b043c5168791118a80422644f21d2df516ceb87d5e48e3f65f4e6c79f793a10e3349003afc61290c5b996dd29f8fe6956aa1a557d2324f936e245832441991e62f5423e4263579cb4b9afb81cab99d5248f6cb0eab56b90f19be2222c1f5fc8c093bce8d51ab7d7fbdd0528ff1abb0d96887923ae5f48a722bd4ea4aad3cd08a3823250d20c893ce83c302e5766cb1f1fb452f2491e8340db1c170dce73da3ae1f845911ccd29b272ee8543b7672bdd3c7851db987e29573d7d076c849a40f6e934e2c656c6f9d172195bcaa135d9b64231ba80c301afbf5ba300ae527c624aa8b39bb4f68c3126ca1c62ed67a0d06ae123745dcad191ec3f338ab6dc11354a93ec1fe269923d348a7e602687d790fa16b7fd77393d474ac40c7e244552aab1979f4938225014eae8740cb61c510c97c57a42b69e845e8e36e8db2b384c370b36e2f571501fda593869e56e2795de1ef59122f9c1f608ecaf2fdc161daf96f512d53a3bcf7f5be40ed3fe79db360387f6af83c6599d442a571af22feb1cb2bf45f2f0517a1146532beebc3de9329b9789f40e8bc819e2d0c23402ec977abbb649744ae80f568c3872a7458005c2c77b02db77231b6fc126ee9013e984e6cf499444de453b340d408a821169f6cd0b1e0707c2ee8aae1cb9a12560797be51a777ee4d1fab0e43f80a8347e437531104b4a9af3251d0fbb824226f84d4e3e743d562311312757fc01d5c0d9247fbe6045f6f39c076d3eb62a6a41d7bf0f54e753ae01513d749ff85daa14c54ad69dc8c976f537385cff70dda3ce81d7b49dd6ddd697749b56c7399c136a83ad9dcbf810c97cb68826cd48c458e5f2a953fcb64a2331e38b72d20fb1f0d2932b37f08fe861fe5d0f205dbec1d9f49a9ef21647e6bc87b2328d6c2e0ae4eef71c28e985086960486d749f0a7c367072e07f8350fe8dcb3251ee20b6978972ec1f973050df46b625359d7ae67dd455c971a0658b880fbfc44d3dd246bc04f4b913043ff465d10e678da483db2ffdd827bc3dc4d6aea0395794fb14ea04f6d154b8df4604392cd1d71b1834241a9cc0424db6506bf1438f2b10f347c22d70c769b0b5791bb1b6a7ffa9b051af3a7fdd2c5dbfc0b44a79d9b9f3cd66102944c50c78f4e80b29856982143f235f5401abc218c638e8717c12a92ec48d263af906bbe9778407b8014af53e6ce8b379d09e205fbed3158bfde85e1f1a6402d343b90b7981e3f6cc0120a81cc8b91dd4bd6ff7d87ee2a12788aa377f5f3447a735e6abb7effead0c61fe3e50b7ebfa64f2bf1930695ff5bbeb5fd1988d4ef942e61bdf99765da2468fafc5f447f70c66c7668809cf2e2563b580f2f4b4f95ff450d2cfa5a8a3ec823792861deb82fd9ed6f723a42fb6ff3a58c25fe29eebd7061eb91611efd85b5fa3afc51faedee4ad39f8bdeb339bfd4eae76b9e671a46c97c2e141480f7ecc6ecdbbb2477fb46eb0be84b0ee9684c2aff595ec3addbd9239bd9146232bcadfbc513bc844a1e920b14fa43f875d0e60890d576332f97ea3078880ef384ad683320b7038c73d800f6860f1530927ebc25edb127b1d9669ea8939aac2a01e1f180c7e9aefcc5ed18e6c141a781ace6837a5ce525e1dbcc117c7e883b9cd7646ab181cc0e2937fd011eb75b6bd5f54c5dc84a4d59a9517f1880dce756cb7fb616fbe37a1e8f865d5135127d8c533962ca7c578733b37c756a9fd385a92c0fa5e1687611390125273ba38e9eb70c1bbef8aa80aeac51389198ce18cce144c8eb4bf689aa02fd481a9680d77919a959440d6e92bd500b44064756e1f2518551c837b4304d3ab5661582241ed8b53e1ad9b07db2e9108f01ac57072a57797b42d8ae994bd5d2291beb9ed8f12e44d84e8017880f6a8d0c3588cee1682a35d1fce62488c5ae5727b661e9940c8cbcda688b6c7c7c237802b0fffad8030caa20983439c7805dabb2b6f45a3696666078161d36991e5388dbd326ffbd23220936d03da92bc0e50679d411c151973ab9c7f065eb8272ac6eea720a60a0bf130a034e45c7eddce9a13067dcb6a59abefd52b8a11ed6ca796c1035c68a8560b335246168df9a9e6219004f1e42a666c2f3310a29c859f319893f0469a1aef1f94a35fc069fceba7493b7cff847d7ea1a6ff7dab836faac86c38bd227beb4f29572b10f237866699f0ca47ab4cca3cd4a72ee78342e630c4f6c8604fc04d7314bc31fb85991d3e6eb4aff47217634769c81cc66b2dc441571d3fc17d95bf0c4928f53c5c44601b2fbbc87ea13d39270f408e90bacbb0f60314cbe420d3b55b210913dd2455249582757e00df7db06c05e1b9388d46f3920df21599e9017f60fbad89334b408fbbcdae7c2fa652204a7772a8f07c6464a0137183601ce4249e9962e3e6558a90c498628e2b27300f6bfd453ac720a7ba59ef4ab8a9706754a3036e90f34ba31d6c06976220d5ebd4bd71844e21af4d32c7fb453e4cc509ac13ea26fda9564db4a25f132c13c058868fa6dcf4f7259deda1c141de536d87924cf40d5dfbdf1b42a74cb0659e9236cc1328ee8ac13d9afdffdad427919e544a0397666829459ac9484355081bd30af9375f847eedeb1042282833c7390dfef8f0167d14aa7b2b955fe286f1c16ae5a3379de3bd8a7c332d8cf12f6f08e317ab584c2795ab14350fb5caaf6a2d3d4215a3e775ebc1782b3053278b6599c550ef55e49d96e7c377dbb0ef3084d352d690914549317234c4c185639e71d5bb9569a2edd4917753c5f0bf8586edea7eb624ec6967086c9c1d5253fb198d9d2bd5b140369f4ebd0bbd1fc034ab7627ef13d1bb090beff1c6b43403a49454958fd0be07dd04f152fb410a401762e37f68db221fbe86a504070e75df684dbb4cb9cb6378c04611d854a47abc3cd4485c1ed8e03e3bc939e80ccd88e93d0db3c1063b8dd8467a35a14e3643e4206ad81975c8bbb633ca760ac5ca39fae1d6454fb6eef918cc02e43f57e8fbe97164b0c7bd8b7d9a9615fbc02eebd55ecc1a44133c5635cc8ec8f3b0c1039ac67cbc771b55ad5480007b0e19edfa66d4ac930fbaed8ab5295f1970705b966a9f07d67fd7b02997591e0064021488b932ce2ff2016912e3dab93a858eb695e0f0412c1d1312f4bc78e37c654b4304bcf4d3516a0dbe341246f57d442dc1c1b2d4c87a196d1adc41b721efd7db04fe502db34a445f296f74cc69933e3b32557002b121c3fbe8af1a357986f56eb65fe11db29bc3ff648c79bc81a26dfb8f98d20e41f779e27dc93760bdfa0d317f0ffe6a06f47eb8c3737ce4acccbd848b29398f81a02d89addbf8fe5c959be4ee80fd3f295fb69e2221dba6dc3174cd587a6c990e0de906a73c7d9ff4c0fa0adc4589bc2a4fb71e4e50d772a7f411dbdb7192220e31b8d64a09695dba198a304bbe02749aa44d15709fb1ebe768a554b4b743a929b4aee3c4e7c115aede065c809dbf93d2cf108dd6a91aaed633abdf2da9e89bb9bff05ce70c4a80bd77c502c2e321d120b034002bbe4d099f7827798053b986a33d7ea750d3d7fabce03ebd59f214d9602d13dfbd09312554b7d69b53dfaf3f5e371e9736ba00ba159b057200f3dbd3a023f67e905152080a0afd4833a71e67a39f8541b68979e3238a0e0918e1ebce27cf94a4b82e096e000cb818ef9fd032167d1b6ecc952f85ef9cbd8339c02dde23d535bc596be2d6034ee79726f8c115a10cdf1f7944419a2c82367cdcce59d5e7ca5aa3d20bb43de506994fae5601c59172abd6f62f8e133ce1dc1da8635bd02fc2f3bf12d7e1b0d8f0bad8678ea222de73bdc2de2c56e4b65e736a1feeb224806f0464d1bdff8d17921d5d447c8630f78396ce185443b0c4d2"}) 279.474368ms ago: executing program 8 (id=3191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bynd=s']) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x47ffffa, 0x105401) (async, rerun: 32) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (rerun: 32) ioctl$LOOP_SET_STATUS(r2, 0xc01070ce, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0010000100001002dbd700000000000fe88f3ffffff00000000000008000101ac1e010100000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000100cd0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e00004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x10, 0x5e}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x1, 0xfffffffffffffffe, 0x3, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400801, 0x9, 0x2}, {0x1cb00000, 0x301, 0xfffffffc}, 0x0, 0x0, 0xa, 0x5, 0x0, 0x2c}, [@sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x144}}, 0x44050) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) 174.955042ms ago: executing program 8 (id=3192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x16c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x140, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xd8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc6, 0x2, 'ethto\x7fl\x00\xe5;F\xbeA\xe0\x9b\xc4|\x16`\xa0\x96\x0f\x16\xbb\xe7!x\xb9\xc6\xff8C\x1d\xb1\xcdd\xae[IH\n\x17c\xda\xea\x1c\x14\xe0\xe9CiJ5\x10\x0f\x90%\xff#\xb2\x1e\xab\x01\b\xdaM\xd7J\xea/ay\xb18\xfe\xff\xff\xff\xec\xb1\xf7oa\xd07\xb5\xb2C`\xf1\xd0wl\xbc\xd2\x9cx\xc1\xbb\x106l/\xc4\x7f\xec\x0e\xd76\x80\xe9\x91\xaf\xf0\x82\x9fl\xb6\x8d\x1f^\xf8(t\xccb\fP\x03\xc4\xa9\x8a\xad\xca\xae|\xc5O\xe8\xc1\x03\xdb\x92R\x1f\xfbe\xbe\xc3\xf3\xe5O+\xbec\xbd\xb6\xdf\xaaLG\xf1\x1e\x05Q\xbcY\x9cQ\x00\x10\x00'/194}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000009}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x16c}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 909.696µs ago: executing program 8 (id=3193): r0 = syz_io_uring_complete(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40d7, @mcast2, 0x2}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000040)="13620c7190d298188f225ec4f6f5e4bca8dc5449db56cde4d5a46b59cf26ea8adf459bfccd8bc4190b0718b92f356341946024303d46f6e50b3c352131ed62e04c2c9fa7d4c5c8a943a4323f3471f2eb513c19daf895cbc1172c5d81bd18321eaedd42cb5b77f175097328ea5feb3cf247b8b0a63f8c71e06d35fd1e26ab", 0x7e}, {&(0x7f00000000c0)="eaaa268861db83f7b9fa54c04924a9a736ee94db244879a844eb9d95ce4dbc76f4e8fd821d1de466d2a89e37721128019ed3230be1f1c591e09945986e4e1b524437cebd6a5ada39ef3c7e9c27272a307c688c7ad7deebd40234282a2edabf45e30fa41377eec64d06c114b19df7ebc7cd50c516b044a1c7dab4ea3eb348aa837baa56b440c105d0693aa914cf91fc41e69e4aa7d8910b631087b57fb50428d68df49205ea32a6e64b19ed7edaf9243bd6ef43ede312", 0xb6}, {&(0x7f0000000180)="3e63e3a9e00e1439526f2c19abe2a777415025e6f35b2ca6393697d57b8a220afb802dec5438640e19a33331d936d9ec09826c5526ef314b3bab8df57b30661770b811a677138d79f690c873caa5f3cae73062d69c252a955c8f1ae74c46693bbd9f0d606ac1c0069e920dafc8338d161a305546c656b91511691b1884293836f8680fb239803bb97a10fa3a6179caecb25201e4fbbab315b166a0bccc5a2f30151b1c", 0xa3}, {&(0x7f0000000240)="65fac9a65a5c7b843f0cc41e3b2500b436ead62852a69d3149458e104b703ad513cf2e6273a23cbed3579cddd41fe1896eb488675c1ee30eb06bf8d66ff7238acf2800c81830ae23c3e25f7e4e85631b2f3b726704e39817a66c19784f259a85cb784539cff394afbb9eb638f448f91b5bf14de20b316095a13d0af7490d6407bd3818c9082fee0bac81cff17512a8fd14b8", 0x92}, {&(0x7f0000000300)="0115aeda4545d8a957df0634cd470936520e86387ed1a0ed74e70c73b1aa34d6be58d5e228eb191dc4b6e952c93d3054e29190eb9b7af210ff4cbbfedae09727d870df5feb98d84887647433fce16de00d8d8d9c612058534ca58139ec60ba9c6b1bcfaec70ad8fe44bcb2a45e3b3ac87c40c3142a85d665404516c9538fa4caa2d623c82ba959ec89e276a91fe759466f8b0303f2e4c6825c993b73e7f239446468ce9e6c9c354c223a33cda58246d2b6f91cfdede994fd9722530738b47b9ff71c8326f70b89ad2844a9ff3fdf85dff3aae51d6880ca15471061521b3d5ce914955c896f88f4eb3cf37c9606480123cd3631ffdbe61ec6da", 0xf9}, {&(0x7f0000000400)="5c83c0a29a3a511b34364ea77a3a7f8a084b5dde2ca8fcfaf433c3b3a27c1adc241134ec4884b22a77e1b449cd83fb45c521d64d82a0ff4d237910ff1120e2908bffd405d06cb39be61ba8df6537b0c9177d14c8000f4acb686e042d6f7796bf6fa86e625c3df3a50d1932feca5f32fa307d282d66110f9996f86caf9a69e64801ee552115c3a9ffd1ca9237d002061c68e59c5393d6633ae25bfe9fb2df9c8cba890372ca98c33afc5bf379bbddd4f5eef7ed74a6dd32ba51bf9e1948ddee497e0c23029e11284c120806316c29874ed0de0fd81b7b5b8fea1647afaddd7b93d667312c7d24f42bac78cc3b4f", 0xed}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="f9a505479be8d00c7c837f777ef4af0b1acb5192410cdc0dd7583a6057ab6b6fbb51256249005efb4c8503e063507622bfa13d3e6ec1533edc6699080711891b9ae7b581789e2e927cce7ddb77610a8961c3dc0d62e082ed43503544d1f9ec2608dee4d8e3fe53d14e76a56d1fff45ee5b2c2d3b53f2ee6039cc60e0aa0669a4318bf6a3025b8d2bf8d0b68d4d7face8e0d112cc140b3290245501f19f23f9bb57fcc2794f4f40decf6e9b9664500a5955014a53dcc8c6e17b5202b02480fae15681fe297b24df05fe", 0xc9}, {&(0x7f0000001600)="eea637148bd7c76e440debe886678af95b950696c2036390a46ace15aaa7f75ef5398ff04bd6b7a3e2e17bf51fbac0344db7db86e127bd647d33b5301d645201776f38f93491f43b4221230a3579f9795743d4593b990f117dd0bccb1b48213fd5af1bebae0cc88e197e8ac1225bdd9f51e298593e9079ec43c93b0b874e737b715f8e15d331f31806fc30a692e51ce02d372856a787bd726eafd5ca655b61ddb5ea1f403dc9c3", 0xa7}], 0x9}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001780)="8bb4eb5073b0a05e0543f07a457a1a1af556e579eb23f96436eb98a4fce88c17b7591639db5f45142cbd7474a36ffc7b1fecb1bc5217612ede2d63f5d34fc884fe0a2799395427d97a9bae5d11387ab50af4ff3a28652ad2607b7a75caffe35be6a3a17188fd7324c08a3196cc3973b0a5be60fb87e219569adf04a7021622099ab7d697a0aa58543ff421dbc293a93279f94fadcc9c22fc515c07ff534ca77307479638fddab2a100677f9ac3370b9fa22ae0fbfafad0e205428093b6ee8dda226f9500cf4a1e56449f34a6e1ce5b9e098b22d4fc4b88474a87d1e92934e9", 0xdf}, {&(0x7f0000001880)="c6972987bad8798f00d609ac29125d9ad5dc424321f919ff7e4abcad229fbcb9892059da92622b0d4600e470ad1fbfef0461733351de9c730544b822e0b323fc676f94850baee5ae8ac73679b709f32fbb20c23c2321218e9ef662e6c031c0f1e69ee35bf64607c22cb6c621c56df11d0a6c8794815414cd8d9cbe4b05db96b4fa68df59f1217563d607a1c2d0", 0x8d}], 0x2, &(0x7f0000001980)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0xb, 0x0, [@mcast2, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff8}}, @rthdr={{0x98, 0x29, 0x39, {0x88, 0x10, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast1, @private1, @loopback, @empty, @rand_addr=' \x01\x00', @mcast1]}}}], 0xe8}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001ac0)="42fd5bdd7345abc7bb871946993c0c25fdff915d19af14bbb024e03e25228cb4dea9367edc300a97d03b16d7f544de9168a40c08e75bf0448cd0c106cc8bbe11d19cbab2c3cacbe03c404f4070532e955cf68467b7ff", 0x56}, {&(0x7f0000001b40)="ba6dc95fd3ea2066e37669c3e194903e74c0c742210e75db05de2024ba8ba9ab50dee2005121dc6e7e1d28f286970448d316d866fa317c2ee58cd8bd270d0e07d3f02dda88f3ff6dfeae9e7cfa44644939d3226daf6254013572180ebd0932df02954d5683c8c898413518cf253d557acf2037f3ef9fe2d8a2afb9f57e9ba1434be7e8ae9fb4bd6675cbc0ad720441db41a4f6fa4453f8f948c9ab1298127752ae64cb6a303d0faf49cf48", 0xab}], 0x2, &(0x7f0000001c40)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x3}]}}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x89, 0x1d, '\x00', [@pad1, @generic={0xbc, 0x93, "56745becddc74d6cafd8a40660e2728a2b8629a4b218b3749137ef2a5f2cfa24eb6d9f1da4d616e0e5cee843f90d529cc96675394b1ee1f42c857d3f40308ec7c1b46696dcbc6ebffda9279863dde012dbfa21e366feda979635e071834fc7d1a98fc18b02c041253ee2b16e068ffa9c4801f5f68b89f799ecc26b9886a3d697d63e4ca737cdb7af1f2f3bd1c09e89e25bab1f"}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0x23, "5bba47a0d23420d6b76de3f3cbf2381b251289a49a4ab7fca0db6ae172a8e40db78297"}, @ra={0x5, 0x2, 0x2}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x800}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x88, 0xe, 0x0, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}}}], 0x1c0}}, {{&(0x7f0000001e00)={0xa, 0x4e23, 0xa, @local}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001e40)="bf29ec305c9982520fff59537bd4876d283a772c59dd40ac5b89a5d50d23e3ac0e765744def3bee397ee54ec3feba2f28cb968704c69342704c96d74b04df1d21727458f433ca33dc8cc739454a26b958e17c0d212c2f9947439d16f36dc9841664aba1e548f712a22974d8e81524307ac7b22ee1d929699ffb2542ec7561c7261b562a37c4ed105b522eabe2a86c78924acdc240e505148c93e04e83c9e081181204405d280d78fbac8e879e9459812e73f759641d6ba5e5a948a0390d37824a0e2cef18a6ac5c83564911462435324d76c51d3c88726b90da0286bf65623f7751791f778331c", 0xe7}, {&(0x7f0000001f40)="39a2d46e82b40f2d8691fde73c6a31fec24f3acda1cfb83fd56ebf561ceda7394c4adfce3da052ef66fce0a568cac16fc97556be17", 0x35}, {&(0x7f0000001f80)="5099306977be86202b589c1cf7a465affafaa1d9cd02e2b105e742b3468ed05407d520240d3b87e73cf89f", 0x2b}, {&(0x7f0000001fc0)="8430daba217b2bce9cf4c6987fc142893a642ea0b7e1ab3c8e828b6e399c51d18c842bae4bda0db06b5325145035b9dae468e9e2ebc6ba2ffcdc936709c278ffd9608ff93ab22f428904eabc68ba48538be5ed0262f002c04f5838a1303d93fe9c0a18def294eb6f155d9e804f27924049b5f624b670128b1ff81e6d5e3bf30b78cd8317e36ffb2d274be4c7fe0967aedf1f0c2408e8", 0x96}], 0x4, &(0x7f00000020c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @hopopts={{0x30, 0x29, 0x36, {0x2, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x1, [0x3]}}]}}}], 0x48}}, {{&(0x7f0000002140)={0xa, 0x4e22, 0x23, @private1, 0x3}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002180)="3fbfb5cbe106c39b2e5c87b14ff3687d85763a456b6b4b5d58c0f10f91e51c714110451a142862b9af755a745bd1741f37bf70603754a3cd3acef648426d072f", 0x40}, {&(0x7f00000021c0)="91877ef88d06c6335799921c496047e3c90aa209bda49fbf3f6400f22845944cd9364b20eebef86a5144b5fb948f261fefd335ddf0f70efc993f5fd350d66b4cb700c55b8576fa21c76f7ec97ef94857296c6d63bf0e0663ec20d2932f3ebb6ca314b74d09113e7327e6c37aae55c1db70ff66b475b05012090f4dc6938b5bbc431b755931271b2bd9d0916640f26a4f048dac1abeea85100cfff1e3cb6379ac3e4235571c206a3bd2d6306c61a0b80a4852768637b328069e1fd15cdb27937b30e733133bf283dd43e3a79c0db55750ad4314230fc463952986be751d8db3fdcc4253a7b58e568240495e87ec2a80e5b3d96a445061e9c2a5542a0e147126266d41dcbd6e8eaa976c9e0085d5cf96144bc1f0f6b71426f18cf3b58ac1af0f41de6ae46f0ca055a5a782184781f89a9b21f95a595b75a63462f17c2c9118c001d9114e61ab8decd5951801a15c8a3b99ed6fe2709813f9868f010cd09a0b7e740574477b132b622c783c568c6d13a7a44e8edb727c06eed1db30a83c7987b550d4abb195f7feb53bcf71c9961a1e7149bea60c771a807f54cc0a0d2465ddfd822df6229789d44823905c27842315196fd1f5b347e33b1988a831122378d96e3b212bc171b45ffe0ccd9d28390abb46a0a038d091f062e317d0a01218e618b4127cef7244e037577a41743f3aaf5435b45c6900197c665e9cde35865f5c288148f17548e807c5eba550ae0b79353ece46d35ac2c0a0236696e8e5b441c4948561f552858c24139bd841805c330f37e954ad49b541c8cc9165368d9e8a88923eb4b0495c1408d0d01b8f34659b64518920382eb41c9c798335170320300c203ccc206b686f765e47501f211d5530e1ef477fa87e0420b3eaa190782f7ed1016080da9aafc93175703f15902b3ccca0a7a5240a88a18d06fb4e7a2e45196c856b284a830292ee14a147c44ad38b1eae3427ef9b59e2a69038344463ef56c3de81bc848942bc5821ae406e6cacc07939b5df3a87e037220571081b1b63bbc466778abb159201b90c8dbce76207530b5067b9a0280a312f6647637a33570a9e280073f791c11c39e6a130720fa2e7001432c99a67fc809c2fcb8ac4220ae6a0c8b9ff2e066dfeb22301a9799081c1f61be532a40a75945088a9c55efff57ac1c235b69701f06bd01f4ed2af95148ab40977f28e1b8dac76f193766fb9427a0d8a77f76215eb22ab4611f0d31888f600a234888d11621f849c50d343d5abde053f23cdb263188aa576589224a9c0b1776b9d817935f30a3ed7a9d23191bdbc558ca281b6736c342e7adc90677bd0a1a4a81e58982cf39ba5e79a3148d01b6d979c223a9b36166d0d08bcb0709aef5d696a83d04b5ffcbfc247f2897016a826482f8a898aec1cd835d740407ae5b17eda36b03630c88dac8139615ac7f4876c3009d294afc3c09306778ad8c0a1b77b20b797d268aad9a457526f4a6284331bc16e5053f55cd9b0df9a3c9928ed5b15a2e7685a37fe985d60953bd24a8ca867d9aa2e6122174e56cca803ea399e3aa5cef677911f971a6dd22ebb2d0735f471b235516967d70395726297e3247a3378b8dcd14b5125d58b4611ddfad5875a4c8a85042ada129d863220759253a009bb16ef94d01668a5e05637dc8e1fc3334943b6204dcbd64afcdb0ff23906972c210ddfacdaaf6b9008aeb2aff39387acdcc2e1743fc4009c6afaec37ba5266264b4f86e4a1e21a3b3720f8aa4d29a019c15fc9ea5e6bfa282d343386081a9c5374c6efd4af94138eaade3026bb6fbfff1e03455ffbb9335a7bc1228025a59a80a51a6530c13009a566233eabce3caff87a5aa2731c5cab6732c60693ddb60e44ac54764e8bdad693fbb651a357b48ba9207c1971246fcaff526aed52223451dfb4b74163cf892c497ebc140b7e1d91a9d8cdcf696f23e1b45454735f2d3ca91df586e4ffecd064579fc53eec5c052f61d44172dbff51be2388af47bb578a5749506870b7a93450a7ee0fdbe5d391491aca7e4ca52cd207d375ffa5098c24344ee752bba8ae685983c1ed6e8562f349113aac85d70fef9a8e3b4fc0a2830c1b7eac7ff6690150261f21074ac07b8ffe452c8a73539604fba5e0ad798acff6e951902dfc4b64945f056705de05b799d758a90069708b220047bc24bac18d373f61a3c6229ef728adce00635c54c9f6c00817423c9fccf84777b36fdfee1c682c0c62e4dd72bf7b586b2a79b99003f45f358ddbdf00d877f7aec8d3f6911d3c660983562d4fa2edfd77818bcb481a17bbbd10bd8ad6139249c04ff546eccb1fd50cc98f65a1d219fd860ba7c4bec2b26fc4de64d638f448a914373a01d71549614504bbaacd13fdea1c831eea1905e333be23fb97d1dac182a7749613c61f72cbeee8c1f5dec5c3ec75a5a4bad211c219a5001da42410856ceef5238552aadc26c2ca167dd02834c526d44d2cba770b6668093184214314eead52417cdd131c99ba5b1b1f436afeaadbfc178908aa92293294474d49173ade5be076f7170c4fc6f86689ad4320f7b209f56fd4ae5415e31c23843a6162f8c518c8ec9b16a6301d0b589d27de82e6337e98ab192d18bc81ed6b2ccf3cddb9a485a05d00c1aa9f48d4fc7cb08f94eb05a18df9f9b201dc3b840dc9b62809d5477938a40cf1edb59761d875ed4b061d37b0e38da114297b184f666b0381fd7d81304c123aa175d0f71b1954b26113cadca5ca88de598ca0f381c11d2ccf3cddfd3c8671710c4e57c3e876645e665b070a016388a291e4b01ba4bbb72a6502a67841ca1903e80ebadf0e2be51d90f474dd0bb43310e158da3efa033df27c22e6574dd51b088445cf55b7d179e92d5594bcdcbc2e26506e5c376338a8c04b1571d21fdba121152cdee011854ff0fbb170bd9f494ffc5a0a566000a5ec60bd33bb85ee58b61257bb70938f9c1aed3cb28818e61f13ad17a6a5754996cbf1bde37d8c142c1136e923010d121a687733d03dbe0b8a7e63b85a81f8f2d565ed3cb19533c2c648ba86e9413edf4b2f68ae50b7a447dc95f8d5e8adbdafa41514ba444d95eb1fc37cbe7d55887a3444dec3fc55e9aba906a23e96d40684f7f9548ad90b79a578c119fb96f2aa77d8ee6dcebc3a547ec752ba8b230a14d3a5003b72f8a5c759f6aa756eb0b9bde5342159fd7eff2d84e88ed7c59b7e7fbd72021e11d99e891446b50b252bb91f42b6ae0a057a0d02db6bbf350e67798d78b2684bc3eed83b3073cff546c23a4b1f242e86850f02e777c3967332d84584e12f297300811d5fb3c3cea1a73731182b1722bd89f1f8e1593c8470896222d99cc1203b3151a0366b279bf0c0333f60d164b50f5bbc8d58882cb619e07b4c34a15968b18f6eaf989f8282966f07217a5f7c83a80e33649e28329af70f9ccc5d61648691caa616cf6d3478ac9e0605b9164dcbf397a177cc2d9639f0947afe43f3a60381bc7ca1db8908aac74cdedfa80201a788e976dfad079e71731bd8d277b8408e1777a403b38d22d344a740bb6bed49934c41903055aae798bf9ee9c909235138a2577b002f7a9623304c9692999911246331dcb544549c240f97c61e3be160e37d47e3774a894dddcc83652b6104dd11cea6caf9d99fb91560d9f6dedf07d74f93882c8743b291c77f82edb753afc74cb968755e2913e6d3b0fa81752c1c68099fe06f4946b6744508b659b7d9aa16aa4e90c50d7df2994eeb5f1d6aa39979250125cd8ead34294dcc46bf5b5eb9f1496463002c4fe1ee7fdda0c668221f4cdc40dcc9b852f6df44f2b280305cfa7c51c24353bffcee80e18f52447b4e50e23e88d7142d8bf93fcd22149688115e5b1e3751f93bac66086c6222ced7d17e67efe43a7fa9a2734f59f85d5c16b1c2e8a93c682f484b90221aa92c55fe6b0f025d4e918f251b756e63563cf471433d682ffb9fad64abd9803861c7219c16919366af3c3c565bbc16b620a589719614cfceb1398137f512dc0768ef8d7aff07051884c64b9253cf492e831193b3c31328314c1288590b2c40698d1a006d74c5b1e55e9306ff7370c9f1f8dcb3a1b8e2ca730f1aee7225b276a9537030e6308c12616e3d68013ef0c28f94ae9a698ac8c7ffaa1028b40670ca9d80a48b433d8de3644ae6815fdf12b0902614d1de933942096531d5ab118e7b4fce54d559cd1d1ab78313e4892a248a71a2c292a54db306f19945646db5b7af59ad9e60ca2a6ac60dada60191da2fe99edb6a4449364d0110fd179e1dd2d40e4668942aba7816497973e37efeb57f08cfb9af310f14b8dbf5f5ef085c52b2af5ff8d03b3765e941e9eb774088eeb483478540a6ca9e18391b50251ce95dfa2e8ad1f8780129d7a3e746553d35c518e620afa8abf967489b525a14f7a13c3a6809cd6dda9cd7144bca88c712b7d3a15071b623ac9a0686ea15163b494a540f95d988bffbef8218c548bbf29138fc728f422db99c91eb0e9ee107393642a0f70523688b8c797062185b88d6986c669837491f6d5bdff304da9dccc044ab73c5e6618aa889fdfbfc43e2e9d57b1b6186d38406270caf04e3c868484921617cc47276d1c02d363ec6d8071766d311a1de057b9f6dfabf841bb42a70add25173c9aec63fa2d26669822a41ecc7cff114b11800f9e8c586b4f4680cbdc7a27aed36619722fd2b805ff6f663cc091c9355917fd2738e594c96c107793be5b3edeff620e66a5417784806071d56cfcebe5dad5326e72e0f2ac41180e04f759e88c5e832904c04a6160869a6e9e3ea391217ab9ebe46c2df1eda3f44466a352cbe9153dab238d7c0c32b99ed99525391a4076ac5b57e1230910352e777813c2a874ad87af732ba339b99f12722a853cb8911ea268934fc3f508c9893646e1030a398a701c46320dad0a5a5e93830d3bfb81b3db7df3d3e4942e0c67052fcd748a0cdd83027f5360e3c3b164437a6b14a5f513e5307246c29b7fe05c683183f1bda826c7b85202bb1374c677ffe10f20db164245ad5da108065a0ac8c9073c172e1809001e754cf4292a4ceaceb1fa151cd9f77a8045ab4a2783365e890a93176d14b04ea2d70d45883b75cceb51f3c768d1cd895fc50ae9d4ec549160534f5eda0926bf3bbbb11e887400d8bf4c3cd735308ceb7eb3f7e13bbcee35f9bd9ec468cc5c60a968f81f944071c282fbeaabe1a73149b5ff2dea25fdb64b53dbe6e3def9e35f497adf6135a68a6392dccbe72ef9f31f829a0deb39be3354382369ff508c479f3f4f70f981664d8621c2c81c80345e918b7e810bbe1578fba0073791e13c7b016409e392dcb5aa50e2b458e1044125d1b5de091c8f94bd9f84c70dcf3eb575761bc92b1e6991a17614f5ab0ab8272bab59bf27b0aa43b26044cbe559d81774a85e57d640e7c62e38e7565eeddd4675415070e617e46756c37f5354103cd9111ee79c488ebe03f0c6cfff77d4318b050808a9a6b93dd9f6c873f63f28eea57cb9ed49e221506d0f08b03cc04e60251ab6ceda480979c7ba81948bb664861896965d9e96bfe72b2c5472ca4f67f9b1e44997d24e8ce8f060f9563147197ad1094fa06b30a56ea65e3820c0c8d2c9b9cf25bdbc5bc21d76be88688a26b4738d7d2c1442d46f4bc05891f276c70b20db3623839b6d62d7356a81ecc52594059571f9b518fa8d3e67b44290d54041e257e8d659553cfca311d421c8f686f165b1c8d544d18142c62eb72fca0a03c6605d57ee196b8d2017331ae7ccf5f8a544429737f19bccd4cb04a255f351f7e0e", 0x1000}, {&(0x7f00000031c0)="2ac323c6a6ee42d2368b4dad8eabac987b0a3d1c9dba5cb9a3dda67fa1550ce41912e6ed3feae6068f853e1357c584", 0x2f}, {&(0x7f0000003200)="b54ca2e0451f6b983270a4f20fb1a078e41f88b5b35d80fec43fe667925392c0bce6123c6b289339ea0c33e7d8326dc08e8ce432d89a56f05d1bc8cba008710a517d6c86ecd5c5b5a08bffb485a6904ab551581c347ce8b601f92dbf0690ad17edae4461e5f7dc4a5616be4f068fbd01c34102c3a06524f813b2fc77d4bef9c7bbaf1b358f7ed8dd771073b36df37f8e303108af4b3181e87c91f3bd5b722513", 0xa0}, {&(0x7f00000032c0)="33d8576fe94eda5fb68c15b6f52bcbb00f972ef4333f95442a7fc972d8a651e9654b94caa851278e99", 0x29}, {&(0x7f0000003300)="672977aea3400425d2ae3e92d669d56fc8fd5192019350fe7b195df2a108c8f55c9c0616e994550514ba9a", 0x2b}, {&(0x7f0000003340)="6ea0acc3cc875a014855e935ea95ca7f39c8c81cc0f0de064a6b29eecff11b3c95971dddf29cea9941d3e6eda2134ebba85aa0223b2c88a8a31dc87aeddac4f9c7ac3248796d233f449a4e6ea033781b21930c75e45b0bf2741428a72e76567f247a2f6dca58290cbf7fb5bbe8fb7f6a727d5297854bc009fe4098b19f7748b86c68a66cc1b4b489e891c8ee934e1bbc6d3b1daf8a3f214524e2ed4e0fbd844768f93398871c6e92cd3d8d75a9", 0xad}], 0x7, &(0x7f0000003480)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x8, 0x1a, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0xb54, [0x0, 0x46, 0x2, 0x2c4a]}}, @generic={0x7, 0x12, "7ad7cd641063cf6ac397c883b043b0e066eb"}, @enc_lim={0x4, 0x1, 0xba}, @generic={0x2, 0x50, "209f41778e05587ec53fb8087d18b574892ebf3efe53849669703a03657f8ba8fc88b04b6759bae483e1debdd0cc20947c4dc0e637b298bdbff589414c81c4481c42e7a912d9921f8864542acecad961"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x80, 0x1, [0x7ff, 0xf4, 0x1, 0x2, 0x7, 0x3, 0x4]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3a}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}], 0x150}}, {{&(0x7f0000003600)={0xa, 0x4e23, 0xd4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f0000003940)=[{&(0x7f0000003640)="253ee3281bbdaf6913a06977b6857ebed8ca0a53bee747d82d7544ee", 0x1c}, {&(0x7f0000003680)="c4ec19aca95b69518e0bcb8abf8289e2f72ac1fb5b07b2992e414ae64523e55241d922d8ff3050c3353b954a1e0ae967aba9672a8b4dd22669dd02225c0169667dfc450cb03f29382eca3ad2f285bb2f560c7784742fbb", 0x57}, {&(0x7f0000003700)="861e5588dc944f9ed4a88ade47603b5eb315ef5549be9d5fa7e2659c80b8ffc3f68fe5f16db9df0949f7cbea9687fa168a675d1a9f3d7a51ebe0194d5973ace609ef0a362d9d55766432695a0665b2187fa9801726587570a07433d1e92d4790172f7911b73aed72f62803a00b3380b1f0a44267a4071f79dd1ab0106931", 0x7e}, {&(0x7f0000003780)="23d3a69eaf65c0e5d41722cc915ad69f5b9d852eecbbdedaf36d10ac869efd62bb25e4f2a32e4818eb5078a1d496e7ebfa8c56d16cef4b08873f7798f6c737395b3a75d174b3a4695617bae7c4eec453816e937dc98e6261d871b687b06727de8dd7d60d1116806ea739f5aeef28fb5de8dc259524777a5a6ff41a52a30ffb2e4b36", 0x82}, {&(0x7f0000003840)="c71e8f27c8240f22371637954db29eea051707d6041ad3edb15bfdf48c7e5aa23d639e5feae2b4352c89f2b6cde445f250487984fa316a2230f69f3ab2c4735a22fe32c99ee9197a072833cad542e9c55b156bed74b6dbcaaece5a665293f1b978fdd4f49e029bc28f0cf6cfd56bd300930637975360ac52ccccd275ac62", 0x7e}, {&(0x7f00000038c0)="15f9e9a13dcfae26e17610f5d0dad8e710829bbcb45af7363f5df0d6c4b1251f0bd266424cea9b6a555b52df535c803f4b5944e15b51244ee4aa2e24640980f1e0ef5971bbfbd77e6aa06c7b97440c0ec7b38de310641e", 0x57}], 0x6}}], 0x6, 0x4080) ioctl(r0, 0x6, &(0x7f0000003b40)="54cce9e08bc166203d861c9d404cc0147c5910902703ca5d6ce0afda86edcdbfa4e6a88819ea2e7abe3e6382fc7db93205e0c328f0070754de092946a51cff76e5064ca48e2aadbd091e132fac4eb8374bc2ee95552ac4246a98ec6b") r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x1000000, 0x10010, r0, 0x20000000) r2 = syz_ublk_setup_io_uring(0x34b0, &(0x7f0000003bc0)={0x0, 0xe4ee, 0x2000, 0x0, 0x36, 0x0, r0}, &(0x7f0000003c40), &(0x7f0000003c80)=0x0, &(0x7f0000003cc0)) r4 = syz_io_uring_complete(r1, r3) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000003d00)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = syz_ublk_setup_io_uring(0x4e37, &(0x7f0000003d40)={0x0, 0x5b8a, 0x80, 0x2, 0x185, 0x0, r5}, &(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000003e80)=0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000040c0)={&(0x7f0000003ec0)="5d46f176a09d79cac0b39ba0b404ee27c3b63a3700831501cbdb3907f5d46e0797cca292806ca51917677a62543318e836c0639f34578b11df31a5163fad02b7046a1037fc9442250061bd8e05453008d47cf20d87fb87ba4cc7205bac3119711788744e5bc23c4804494416c879941ab6ff53b0ebbce8f6c14acc087c6d163123933cf19cdc506b06c310a0", &(0x7f0000003f80)=""/113, &(0x7f0000004000)="c8163e8ff2b77fcb1d4554e724783c6ac0063575fb8261f835ec0d189e0891e5f404a5c27d870c93fc5075b8a4c8faa6c330e9c946ba39b7a2d08dc9db6a1c3a72f9b695256bb51e08d3ef093e22525a40379722502acdc6bc913f5a9fa7b334509bccc43ef3b89cdd3a89131c75118343", &(0x7f0000004080)="b9508f587f0aa7d8fe537c340ba39cc0a84c3003ff853b1f59497aa30997b73fce6e46ad368b2b43b81936bc31", 0x7ff, r5, 0x4}, 0x38) r7 = dup(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000004140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)=@getqdisc={0x38, 0x26, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x9, 0xf}, {0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8094}, 0x24008800) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000004240)={@private2, 0x1f, r8}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004280), 0x802, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000042c0)) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000004300)={0x0, 0x1bed, 0x0, 0x3, 0x27f, 0x0, r0}, &(0x7f0000004380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x37cb, 0x8, 0x0, 0x38c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6e1, 0x40, 0x0, 0x59, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51e2, 0x200, 0x3, 0x234}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82b8, 0x300, 0x3, 0x1d9, 0x0, r5}}], 0x4, &(0x7f0000005600)={0x2e, 0x14, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xcf8}, 0x0, 0x0, '\x00', {0x0, 0x1fb, 0x0, &(0x7f0000004600)=@buf_4k="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"}}, &(0x7f0000005680)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000056c0)={0x0, 0xecc8, 0x8, 0x0, 0x214, 0x0, r7}, &(0x7f0000005740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf41b, 0x12, 0x3, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa173, 0x20, 0x0, 0x287, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1691, 0x1, 0x3, 0x1a1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x852b, 0x1340, 0x0, 0x116, 0x0, r4}}], 0x4, &(0x7f00000069c0)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x400}, 0x0, 0x0, '\x00', {0x1, 0xfbb, 0x0, &(0x7f00000059c0)=@buf_4k="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"}}, &(0x7f0000006a40)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_process_io(r10, 0x0, 0x3, &(0x7f0000007a80)=@ublk_io_fetch_sqe={0x2e, 0x48, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, r13, '\x00', {0x0, 0xf0d, 0x0, &(0x7f0000006a80)=@buf_512="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"}}, 0x1) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x100010, 0xffffffffffffffff, 0x6e000) io_uring_enter(r2, 0x5c74, 0x2fe8, 0x41, &(0x7f0000007b00)={[0x8]}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000007b40)=""/4096, &(0x7f0000008b40)=0x1000) ioctl$UBLK_U_IO_NEED_GET_DATA(r12, 0xc0107522, &(0x7f0000009b80)={0x1, 0x9da, 0x200, &(0x7f0000008b80)=@buf_max_buf="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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000009c00)='./binderfs/custom1\x00', 0x800, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000009c40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, '\x00', r8, r0, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000009d40)={{r5, 0xffffffffffffffff}, &(0x7f0000009cc0), &(0x7f0000009d00)=r5}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000000a280)={r4, 0xe0, &(0x7f000000a180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000009fc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f000000a000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000a040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f000000a080)=[{}, {}], 0x10, 0x10, &(0x7f000000a0c0), &(0x7f000000a100), 0x8, 0x40, 0x8, 0x8, &(0x7f000000a140)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000a3c0)={0x2, 0x1c, &(0x7f0000009d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@ldst={0x3, 0x2, 0x0, 0x9, 0x0, 0x40, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x49}, @jmp={0x5, 0x0, 0x4, 0x4, 0x3, 0x2271c5259d5d5d35, 0xdd4ad865ef544f8e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000009e80)='syzkaller\x00', 0x7, 0x64, &(0x7f0000009ec0)=""/100, 0x41100, 0x40, '\x00', r8, @fallback=0x1f, r7, 0x8, &(0x7f0000009f40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000009f80)={0x5, 0x9, 0x8, 0x2}, 0x10, r16, 0xffffffffffffffff, 0x3, &(0x7f000000a340)=[r7], &(0x7f000000a380)=[{0x3, 0x3, 0x0, 0x3}, {0x0, 0x2, 0x6, 0x4}, {0x1, 0x3, 0x9}]}, 0x94) 0s ago: executing program 8 (id=3194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r3, &(0x7f0000000000)='^&#\x00', 0x240080, &(0x7f0000000080)={@align=0xd6, {0xdd6, 0x10, 0x80000000, 0x8}}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x1}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000280)="f3a766b800c0ffff0f23d80f21f86635800000500f23f8baf80c66b8f03fd88c66efbafc0c66ed3e0fe96daa65803f000f30d8f366b9060900000f320f236366b9800000c00f326635000400000f30", 0x4f}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 6 ORIG_RAX: 0000000000000010 [ 338.016848][T16295] RAX: ffffffffffffffda RBX: 00007fcec9425fa0 RCX: 00007fcec919e0d9 [ 338.016860][T16295] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000004 [ 338.016871][T16295] RBP: 00007fcec9235024 R08: 0000000000000000 R09: 0000000000000000 [ 338.016882][T16295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.016893][T16295] R13: 00007fcec9426038 R14: 00007fcec9425fa0 R15: 00007ffcfec80568 [ 338.016922][T16295] [ 338.086533][T13129] usb 13-1: device descriptor read/64, error -71 [ 338.235113][T16312] binfmt_misc: register: failed to install interpreter ./file1 [ 338.247590][T16312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16312 comm=syz.2.2636 [ 338.336807][T16323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2638'. [ 338.344937][T13129] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 338.441825][ T42] audit: type=1400 audit(1787802137.339:27162): avc: denied { recv } for pid=5711 comm="sshd-session" saddr=10.0.2.2 src=33066 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 338.521973][T13129] usb 13-1: device descriptor read/64, error -71 [ 338.534444][ T1127] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 338.544037][ T1127] ata1: failed to read log page 10h (errno=-5) [ 338.546623][ T1127] ata1.00: exception Emask 0x1 SAct 0x8000 SErr 0x0 action 0x0 [ 338.549063][ T1127] ata1.00: irq_stat 0x40000000 [ 338.565016][ T1127] ata1.00: failed command: WRITE FPDMA QUEUED [ 338.566936][ T1127] ata1.00: cmd 61/08:78:36:81:08/00:00:00:00:00/40 tag 15 ncq dma 4096 out [ 338.566936][ T1127] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 338.575862][ T1127] ata1.00: status: { DRDY } [ 338.577989][ T1127] ata1.00: error: { ABRT } [ 338.617725][ T1127] ata1.00: configured for UDMA/100 [ 338.621964][ T1127] ata1: EH complete [ 338.640649][T13129] usb usb13-port1: attempt power cycle [ 338.843037][ T61] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 338.853727][ T1345] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 338.981870][ T61] usb 12-1: device descriptor read/64, error -71 [ 339.013942][T13129] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 339.026771][ T1345] usb 7-1: Using ep0 maxpacket: 8 [ 339.029395][ T1345] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 339.036065][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16336 comm=syz.3.2643 [ 339.036879][ T1345] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 339.037410][T13129] usb 13-1: device descriptor read/8, error -71 [ 339.057227][ T1345] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 339.062818][ T1345] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 339.068967][ T1345] usb 7-1: config 250 has no interface number 0 [ 339.071123][ T1345] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 339.088806][ T1345] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.092181][ T1345] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 339.095947][ T1345] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 339.099138][ T1345] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 339.120720][ T1345] usb 7-1: config 250 interface 228 has no altsetting 0 [ 339.131043][ T1345] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 339.142194][ T1345] usb 7-1: Product: syz [ 339.143647][ T1345] usb 7-1: SerialNumber: syz [ 339.149106][ T1345] hub 7-1:250.228: bad descriptor, ignoring hub [ 339.155264][ T1345] hub 7-1:250.228: probe with driver hub failed with error -5 [ 339.159744][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 339.249183][ T61] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 339.292264][T13129] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 339.313939][T13129] usb 13-1: device descriptor read/8, error -71 [ 339.373496][T16351] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b236ea (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 339.380267][ T1345] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 339.385214][T16351] Call Trace: [ 339.386639][T16351] [ 339.387906][T16351] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 339.389185][ T61] usb 12-1: device descriptor read/64, error -71 [ 339.391136][T16351] ? native_send_call_func_ipi+0xcb/0x1b0 [ 339.396510][T16351] mce_cpu_restart+0xd5/0x1f0 [ 339.398701][T16351] ? __pfx_mce_cpu_restart+0x10/0x10 [ 339.400996][T16351] ? set_bank+0x240/0x3a0 [ 339.403454][T16351] smp_call_function_many_cond+0x1449/0x18c0 [ 339.406256][T16351] ? __pfx_mce_cpu_restart+0x10/0x10 [ 339.408122][T16351] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 339.411153][T16351] ? __timer_delete_sync+0x10f/0x1c0 [ 339.413900][T16351] set_bank+0x240/0x3a0 [ 339.416091][T16351] ? __pfx_set_bank+0x10/0x10 [ 339.418037][T16351] ? find_held_lock+0x2b/0x80 [ 339.420127][T16351] ? sysfs_file_kobj+0xe4/0x290 [ 339.422153][T16351] ? sysfs_file_kobj+0xe4/0x290 [ 339.424344][T16351] ? __pfx_set_bank+0x10/0x10 [ 339.426173][T16351] dev_attr_store+0x58/0x80 [ 339.428142][T16351] ? __pfx_dev_attr_store+0x10/0x10 [ 339.430278][T16351] sysfs_kf_write+0xf2/0x150 [ 339.432184][T16351] kernfs_fop_write_iter+0x3e0/0x5f0 [ 339.434313][T16351] ? __pfx_sysfs_kf_write+0x10/0x10 [ 339.436690][T16351] vfs_write+0x6af/0x1050 [ 339.438982][T16351] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 339.441365][T16351] ? __pfx_vfs_write+0x10/0x10 [ 339.443243][T16351] ? find_held_lock+0x2b/0x80 [ 339.445097][T16351] ksys_write+0x12a/0x250 [ 339.446773][T16351] ? __pfx_ksys_write+0x10/0x10 [ 339.448776][T16351] do_syscall_64+0x123/0x790 [ 339.450722][T16351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.453332][T16351] RIP: 0033:0x7f2102d9e0d9 [ 339.455458][T13129] usb usb13-port1: unable to enumerate USB device [ 339.455669][T16351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.466696][T16351] RSP: 002b:00007f2103c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.470024][T16351] RAX: ffffffffffffffda RBX: 00007f2103025fa0 RCX: 00007f2102d9e0d9 [ 339.473500][T16351] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 339.476961][T16351] RBP: 00007f2102e35024 R08: 0000000000000000 R09: 0000000000000000 [ 339.480330][T16351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.483726][T16351] R13: 00007f2103026038 R14: 00007f2103025fa0 R15: 00007ffdc8543168 [ 339.487497][T16351] [ 339.516267][ T61] usb usb12-port1: attempt power cycle [ 339.592404][T16332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.601938][T16332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.623237][ T5741] Bluetooth: hci3: command tx timeout [ 339.670024][T16353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.674088][T16353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.752310][ C0] usblp0: nonzero read bulk status received: -71 [ 339.754093][ T42] audit: type=1326 audit(1787802138.584:27163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec919e0d9 code=0x7ffc0000 [ 339.772783][ T42] audit: type=1326 audit(1787802138.584:27164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.2.2641" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec919e0d9 code=0x7ffc0000 [ 339.880473][ T61] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 339.901390][ T61] usb 12-1: device descriptor read/8, error -71 [ 339.922479][ T5589] net_ratelimit: 87 callbacks suppressed [ 339.922503][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 339.928448][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.039895][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.043161][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.050841][ T2318] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 340.157395][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.157400][ T61] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 340.163934][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.179510][ T61] usb 12-1: device descriptor read/8, error -71 [ 340.275055][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.278011][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.296473][ T61] usb usb12-port1: unable to enumerate USB device [ 340.331528][ T2318] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 340.393197][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.397110][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.894188][ T2318] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 340.933126][T16366] qnx6: unable to read the first superblock [ 340.936296][T16366] qnx6: unable to read the first superblock [ 340.939051][T16366] qnx6: unable to read the first superblock [ 341.143229][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2650'. [ 341.161733][T16357] ceph: No mds server is up or the cluster is laggy [ 341.309134][T16373] 9pnet_virtio: no channels available for device syz [ 341.376189][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2652'. [ 341.381391][T16376] 9p: Bad value for 'wfdno' [ 341.382888][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2652'. [ 341.390936][T16375] geneve5: entered promiscuous mode [ 341.518434][ T42] audit: type=1400 audit(1787802140.231:27165): avc: denied { cmd } for pid=16378 comm="iou-wrk-16380" path="socket:[76313]" dev="sockfs" ino=76313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 341.748145][ T2318] usb 7-1: USB disconnect, device number 35 [ 341.769651][ T2318] usblp0: removed [ 342.166811][T16402] netlink: 'syz.7.2658': attribute type 8 has an invalid length. [ 342.177992][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 342.180584][T16404] /dev/nullb0: Can't open blockdev [ 342.302814][T16409] netlink: 'syz.3.2661': attribute type 39 has an invalid length. [ 342.310139][T16407] input: syz0 as /devices/virtual/input/input43 [ 342.352050][T16410] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 342.416212][ T42] audit: type=1400 audit(1787802141.073:27166): avc: denied { append } for pid=16414 comm="syz.7.2663" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.423726][T16415] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 342.576663][ T5741] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 342.628509][ T42] audit: type=1326 audit(1787802141.270:27167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.8.2664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae3819e0d9 code=0x0 [ 342.829492][T16431] tmpfs: Unknown parameter 'usrquota”žÐn(Ž ¬œv`' [ 342.829999][T16428] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2667'. [ 342.849144][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xcd3c instead [ 342.853359][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x43ee instead [ 342.859265][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x647b instead [ 342.864729][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x09b0 instead [ 342.876477][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x2a37 instead [ 342.881971][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9832 instead [ 342.888054][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x46b8 instead [ 342.893078][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1cdf instead [ 342.912570][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7cc2 instead [ 342.919151][T16439] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2671'. [ 342.928498][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1ace instead [ 342.931541][T16439] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2671'. [ 342.946398][T16428] jffs2: Further such events for this erase block will not be printed [ 342.949326][T16439] tmpfs: Unknown parameter 'indo64' [ 342.960929][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x879b instead [ 342.966186][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x8cce instead [ 342.972574][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x6c22 instead [ 342.980702][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xf37c instead [ 342.988484][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xab20 instead [ 343.000658][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x66ad instead [ 343.008091][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xdb54 instead [ 343.008126][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x0f6f instead [ 343.008143][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xd4de instead [ 343.008159][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x9860 instead [ 343.008176][T16428] jffs2: Further such events for this erase block will not be printed [ 343.008541][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x8945 instead [ 343.008566][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x266e instead [ 343.008582][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x193c instead [ 343.008602][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xfe6f instead [ 343.008618][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x01d3 instead [ 343.008633][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x878c instead [ 343.008647][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x453c instead [ 343.008661][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xf265 instead [ 343.008787][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x5802 instead [ 343.008810][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x3e5b instead [ 343.008828][T16428] jffs2: Further such events for this erase block will not be printed [ 343.009216][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x6a9a instead [ 343.009241][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x7cfa instead [ 343.009257][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xb25a instead [ 343.009275][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x06c0 instead [ 343.009292][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xade7 instead [ 343.009307][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x1e70 instead [ 343.009321][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4a28 instead [ 343.009336][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x5772 instead [ 343.009350][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x6946 instead [ 343.009366][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x719c instead [ 343.009379][T16428] jffs2: Further such events for this erase block will not be printed [ 343.009681][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xc05a instead [ 343.009695][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x475b instead [ 343.009706][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x84db instead [ 343.009718][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xdfc3 instead [ 343.009731][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x85b9 instead [ 343.009743][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xde5f instead [ 343.009755][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6444 instead [ 343.009767][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x8a28 instead [ 343.009779][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x58cc instead [ 343.009806][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x7f78 instead [ 343.009818][T16428] jffs2: Further such events for this erase block will not be printed [ 343.010085][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x6cf8 instead [ 343.010099][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xd1f9 instead [ 343.010111][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xe035 instead [ 343.010123][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xcb0f instead [ 343.010132][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x91c1 instead [ 343.010141][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x1f63 instead [ 343.010151][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xeea7 instead [ 343.010160][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x8a32 instead [ 343.010169][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x7181 instead [ 343.010179][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x6f22 instead [ 343.010188][T16428] jffs2: Further such events for this erase block will not be printed [ 343.013189][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xa0cc instead [ 343.215778][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x8dfa instead [ 343.215796][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x2743 instead [ 343.215806][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xaeb4 instead [ 343.215816][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x242e instead [ 343.215826][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xc4e8 instead [ 343.215837][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3039 instead [ 343.215849][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xa34f instead [ 343.215881][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x65ac instead [ 343.215893][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xd9f5 instead [ 343.215903][T16428] jffs2: Further such events for this erase block will not be printed [ 343.216173][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x0d6e instead [ 343.257687][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x94af instead [ 343.260916][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xdec8 instead [ 343.264509][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1910 instead [ 343.268140][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xd2ae instead [ 343.271204][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0f63 instead [ 343.274599][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0663 instead [ 343.278406][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xdbfc instead [ 343.282003][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x37ec instead [ 343.285738][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xf300 instead [ 343.289355][T16428] jffs2: Further such events for this erase block will not be printed [ 343.292571][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xded4 instead [ 343.295909][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0378 instead [ 343.301763][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x94d0 instead [ 343.305539][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x246a instead [ 343.308976][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x5e13 instead [ 343.313347][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xa8c2 instead [ 343.317440][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf191 instead [ 343.321364][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xb836 instead [ 343.324901][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x64c6 instead [ 343.328250][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x92e6 instead [ 343.332352][T16428] jffs2: Further such events for this erase block will not be printed [ 343.335728][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x306d instead [ 343.339709][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xb0b8 instead [ 343.343557][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x5484 instead [ 343.347198][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xbb32 instead [ 343.352650][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 343.352855][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x116e instead [ 343.360303][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xa3e8 instead [ 343.364226][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd76e instead [ 343.367691][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x95c5 instead [ 343.371101][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xfc74 instead [ 343.375422][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x2434 instead [ 343.379064][T16428] jffs2: Further such events for this erase block will not be printed [ 343.382279][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xcdac instead [ 343.390080][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xff93 instead [ 343.394299][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xe152 instead [ 343.398718][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xef5f instead [ 343.402425][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xf22f instead [ 343.408378][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xe2f7 instead [ 343.412157][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8a89 instead [ 343.415273][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x5310 instead [ 343.419150][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xee2b instead [ 343.423504][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x0662 instead [ 343.427304][T16428] jffs2: Further such events for this erase block will not be printed [ 343.430604][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x12fa instead [ 343.433826][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xcd10 instead [ 343.437057][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x5428 instead [ 343.448726][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1a8a instead [ 343.452380][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x3ae4 instead [ 343.455800][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xc927 instead [ 343.460066][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8983 instead [ 343.475839][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6fa3 instead [ 343.486614][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x112a instead [ 343.495489][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xb5d2 instead [ 343.508825][T16428] jffs2: Further such events for this erase block will not be printed [ 343.517111][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xf82b instead [ 343.526372][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x29e2 instead [ 343.534186][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xd366 instead [ 343.545011][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x4efd instead [ 343.553516][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x8039 instead [ 343.565339][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x143b instead [ 343.571110][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xec0e instead [ 343.574833][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x86a6 instead [ 343.579368][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x33d4 instead [ 343.583117][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x468a instead [ 343.586651][T16428] jffs2: Further such events for this erase block will not be printed [ 343.586672][T16471] overlay: Bad value for 'index' [ 343.595020][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2ddd instead [ 343.599782][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x3ef9 instead [ 343.603961][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xa060 instead [ 343.609567][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xcb41 instead [ 343.618276][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xa152 instead [ 343.626361][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5044 instead [ 343.632380][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5e2f instead [ 343.637177][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xf388 instead [ 343.653386][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x3195 instead [ 343.657986][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xf07d instead [ 343.663266][T16428] jffs2: Further such events for this erase block will not be printed [ 343.671773][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xfc5c instead [ 343.679185][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x6e43 instead [ 343.694037][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x9a94 instead [ 343.708924][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x2b63 instead [ 343.716186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 343.724219][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xdf1f instead [ 343.736028][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xa3b6 instead [ 343.747788][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x34fb instead [ 343.751369][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x8b27 instead [ 343.754909][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x197f instead [ 343.758266][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x6112 instead [ 343.773775][T16428] jffs2: Further such events for this erase block will not be printed [ 343.777310][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x80e1 instead [ 343.781133][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x9e7f instead [ 343.784669][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xe35b instead [ 343.789477][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xdd5d instead [ 343.794605][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xb14e instead [ 343.798131][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x3ada instead [ 343.801839][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x51fb instead [ 343.805870][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x5081 instead [ 343.809103][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xdaf6 instead [ 343.813760][T16428] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x2119 instead [ 343.817498][T16428] jffs2: Further such events for this erase block will not be printed [ 343.822270][T16428] jffs2: notice: (16428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 343.830072][T16428] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 343.832987][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2682'. [ 343.839115][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2682'. [ 344.019634][T16497] netlink: 'syz.7.2687': attribute type 3 has an invalid length. [ 344.087963][T16502] nvme_rdma: malformed address passed: 1:4420 [ 344.182567][T16498] team0 (unregistering): Port device team_slave_0 removed [ 344.197311][T16498] team0 (unregistering): Port device team_slave_1 removed [ 344.373682][ T42] audit: type=1400 audit(1787802142.898:27168): avc: denied { map } for pid=16510 comm="syz.8.2691" path="socket:[76760]" dev="sockfs" ino=76760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 344.512365][T16524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2694'. [ 344.523679][ T42] audit: type=1400 audit(1787802143.038:27169): avc: denied { setopt } for pid=16519 comm="syz.7.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.623978][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2697'. [ 344.967423][T16547] nfs4: Unknown parameter '' [ 344.990200][T16549] SELinux: ebitmap: empty map [ 344.993025][T16549] SELinux: failed to load policy [ 345.060105][ T42] audit: type=1400 audit(1787802143.544:27170): avc: denied { write } for pid=16548 comm="syz.2.2703" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 345.065402][T16552] GUP no longer grows the stack in syz.8.2704 (16552): 200000007000-20000000a000 (200000004000) [ 345.081256][T16552] CPU: 3 UID: 0 PID: 16552 Comm: syz.8.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.081293][T16552] Tainted: [L]=SOFTLOCKUP [ 345.081300][T16552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.081313][T16552] Call Trace: [ 345.081322][T16552] [ 345.081331][T16552] dump_stack_lvl+0x100/0x190 [ 345.081380][T16552] gup_vma_lookup.cold+0x83/0x96 [ 345.081411][T16552] __get_user_pages+0x252/0x3280 [ 345.081450][T16552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 345.081486][T16552] ? __pfx___get_user_pages+0x10/0x10 [ 345.081512][T16552] ? __pfx_down_read_killable+0x10/0x10 [ 345.081550][T16552] __gup_longterm_locked+0x87d/0x16f0 [ 345.081584][T16552] ? __pfx___gup_longterm_locked+0x10/0x10 [ 345.081617][T16552] ? lock_acquire+0x1b9/0x370 [ 345.081657][T16552] gup_fast_fallback+0x16dc/0x2790 [ 345.081707][T16552] ? __pfx_gup_fast_fallback+0x10/0x10 [ 345.081736][T16552] ? __lock_acquire+0x4c5/0x1ec0 [ 345.081763][T16552] ? rcu_is_watching+0x13/0xc0 [ 345.081784][T16552] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 345.081937][T16552] get_user_pages_fast+0xa7/0xf0 [ 345.081975][T16552] ? __pfx_get_user_pages_fast+0x10/0x10 [ 345.082014][T16552] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 345.082050][T16552] ? __mutex_lock+0x26c/0x1bc0 [ 345.082073][T16552] ? pipe_lock+0x69/0x80 [ 345.082101][T16552] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 345.082132][T16552] ? __pfx___mutex_lock+0x10/0x10 [ 345.082154][T16552] ? import_ubuf+0x1b6/0x220 [ 345.082211][T16552] iov_iter_get_pages2+0xa3/0x100 [ 345.082247][T16552] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 345.082281][T16552] ? wait_for_space+0x2ca/0x3b0 [ 345.082320][T16552] __do_sys_vmsplice+0x7dd/0x13c0 [ 345.082346][T16552] ? find_held_lock+0x2b/0x80 [ 345.082373][T16552] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 345.082401][T16552] ? __pfx_futex_wait+0x10/0x10 [ 345.082468][T16552] ? do_syscall_64+0x123/0x790 [ 345.082490][T16552] do_syscall_64+0x123/0x790 [ 345.082514][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.082536][T16552] RIP: 0033:0x7fae3819e0d9 [ 345.082554][T16552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.082573][T16552] RSP: 002b:00007fae38f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 345.082597][T16552] RAX: ffffffffffffffda RBX: 00007fae38425fa0 RCX: 00007fae3819e0d9 [ 345.082611][T16552] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000004 [ 345.082625][T16552] RBP: 00007fae38235024 R08: 0000000000000000 R09: 0000000000000000 [ 345.082636][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.082649][T16552] R13: 00007fae38426038 R14: 00007fae38425fa0 R15: 00007ffe9eb74a68 [ 345.082673][T16552] [ 345.090199][ T42] audit: type=1400 audit(1787802143.572:27171): avc: denied { ioctl } for pid=16554 comm="syz.7.2705" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 345.090424][T16557] comedi comedi2: comedi_config --init_data is deprecated [ 345.117715][T16552] vlan2: entered promiscuous mode [ 345.154255][T16560] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2707'. [ 345.156382][T16552] ªªªªª): entered promiscuous mode [ 345.192517][ T42] audit: type=1400 audit(1787802143.675:27172): avc: denied { remount } for pid=16561 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 345.196018][T16552] vlan2: entered allmulticast mode [ 345.247018][T16552] ªªªªª): entered allmulticast mode [ 345.249978][T16552] hsr_slave_0: entered allmulticast mode [ 345.252383][T16552] hsr_slave_1: entered allmulticast mode [ 345.254209][T16564] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:21 [ 345.363709][T16573] trusted_key: encrypted_key: key trusted:syz not found [ 345.367978][T16571] netlink: 'syz.8.2709': attribute type 1 has an invalid length. [ 345.384707][ T5808] net_ratelimit: 70 callbacks suppressed [ 345.384727][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.392012][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.511137][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.513897][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.518290][T16577] xt_hashlimit: size too large, truncated to 1048576 [ 345.624997][T16579] 9pnet_virtio: no channels available for device syz [ 345.631828][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.648717][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.740077][T16590] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.2716'. [ 345.767886][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.772045][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.886780][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.899338][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.994964][T16600] netlink: 'syz.7.2719': attribute type 1 has an invalid length. [ 346.068032][T16604] /dev/nullb0: Can't open blockdev [ 346.185740][T16585] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 131 out of range (51000000..2150000000) [ 346.197450][T16607] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.201634][T16585] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 346.298914][T16620] netlink: 'syz.3.2720': attribute type 7 has an invalid length. [ 346.301864][T13129] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 346.499507][T13129] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 346.510869][T13129] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.515253][T13129] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.532079][T13129] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 346.535678][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 346.560201][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 346.564781][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 346.568347][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 346.577686][T13129] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 346.582681][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 346.587067][T13129] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 346.595348][T13129] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 346.636739][ T2318] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 346.646869][T12727] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 346.787014][T16628] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 346.804293][ T2318] usb 7-1: Using ep0 maxpacket: 16 [ 346.813308][ T2318] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 346.818737][T12727] usb 13-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 346.825032][ T2318] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 346.826394][T12727] usb 13-1: config 1 has an invalid interface number: 3 but max is 0 [ 346.828393][ T2318] usb 7-1: config 0 has no interface number 0 [ 346.837349][T12727] usb 13-1: config 1 has no interface number 0 [ 346.843279][ T2318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.845500][T12727] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.847656][ T2318] usb 7-1: Product: syz [ 346.852499][ T2318] usb 7-1: Manufacturer: syz [ 346.854356][ T2318] usb 7-1: SerialNumber: syz [ 346.857632][T12727] usb 13-1: Product: syz [ 346.860268][T12727] usb 13-1: Manufacturer: syz [ 346.862776][T12727] usb 13-1: SerialNumber: syz [ 346.863463][ T2318] usb 7-1: config 0 descriptor?? [ 346.870592][ T2318] hub 7-1:0.132: bad descriptor, ignoring hub [ 346.872662][ T2318] hub 7-1:0.132: probe with driver hub failed with error -5 [ 346.878022][ T2318] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input44 [ 346.960543][T12727] usb 13-1: 3:1 : does not exist [ 346.970241][T12727] usb 13-1: 3:2 : does not exist [ 347.208111][T16636] bridge0: port 3(vlan2) entered blocking state [ 347.215327][T16636] bridge0: port 3(vlan2) entered disabled state [ 347.220566][T16636] vlan2: entered allmulticast mode [ 347.223296][T16636] geneve0: entered allmulticast mode [ 347.233783][T16636] vlan2: entered promiscuous mode [ 347.235906][T16636] geneve0: entered promiscuous mode [ 347.241185][ T2318] usb 13-1: USB disconnect, device number 27 [ 347.441382][T16642] binder: BINDER_SET_CONTEXT_MGR already set [ 347.448061][T16637] bond1: entered promiscuous mode [ 347.482034][T16642] binder: 16641:16642 ioctl 4018620d 200000000100 returned -16 [ 347.741649][ T2318] usb 12-1: USB disconnect, device number 37 [ 347.757586][ T2318] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 347.817814][ T2318] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 347.827589][ T2318] keyspan 12-1:1.0: device disconnected [ 348.011635][ T5726] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 348.175890][ T5726] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.194402][ T5726] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 348.198233][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.205696][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.214550][ T5726] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.215599][ T6194] usb 7-1: USB disconnect, device number 36 [ 348.225218][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.280849][ T5726] usb 8-1: config 0 descriptor?? [ 348.489475][T16663] __nla_validate_parse: 6 callbacks suppressed [ 348.489501][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2735'. [ 348.497942][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2735'. [ 348.519049][T16663] netlink: 'syz.7.2735': attribute type 16 has an invalid length. [ 348.523088][T16663] netlink: 'syz.7.2735': attribute type 17 has an invalid length. [ 348.551514][T16663] bond0: left promiscuous mode [ 348.555096][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.568574][T16663] virt_wifi0: entered promiscuous mode [ 348.573994][T16663] virt_wifi0: entered allmulticast mode [ 348.577161][T16663] macsec1: left promiscuous mode [ 348.580508][T16663] macsec1: left allmulticast mode [ 348.582936][T16663] virt_wifi0: left allmulticast mode [ 348.599825][T16663] bond1: left allmulticast mode [ 348.604249][T16663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.613253][T16663] bond2: left promiscuous mode [ 348.740086][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.747158][ T42] audit: type=1326 audit(1787802146.997:27173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz.2.2736" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcec9197e57 code=0x0 [ 348.760657][ T5589] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.764712][ T5589] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.768615][ T5589] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.837634][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 348.955630][ T5726] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 348.966025][ T5726] plantronics 0003:047F:FFFF.0013: item fetching failed at offset 13/15 [ 348.985813][ T5726] plantronics 0003:047F:FFFF.0013: parse failed [ 348.993239][ T5726] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22 [ 349.015528][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2739'. [ 349.087005][T14923] udevd[14923]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 349.162275][ T1345] usb 8-1: USB disconnect, device number 21 [ 349.185436][T16682] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2740'. [ 349.201482][T16682] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2740'. [ 349.213710][T16682] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 349.302811][ T42] audit: type=1400 audit(1787802147.511:27174): avc: denied { write } for pid=16681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.337868][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 349.408297][ T42] audit: type=1400 audit(1787802147.614:27175): avc: denied { write } for pid=16695 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.589051][T16701] program syz.7.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.846054][T16708] erspan0: entered promiscuous mode [ 349.859022][T16708] erspan0: entered allmulticast mode [ 349.874353][ T42] audit: type=1400 audit(1787802148.054:27176): avc: denied { write } for pid=16714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.928093][ T42] audit: type=1400 audit(1787802148.101:27177): avc: denied { write } for pid=16721 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.022952][T16731] 9pnet_virtio: no channels available for device syz [ 350.527575][T16751] netlink: 'syz.8.2756': attribute type 1 has an invalid length. [ 350.550205][ C0] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 350.553758][ C0] sr 2:0:0:0: [sr0] tag#1 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 350.614786][T16751] 8021q: adding VLAN 0 to HW filter on device bond9 [ 350.651741][T16751] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2756'. [ 350.662167][T16752] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2756'. [ 350.685471][T16751] syzkaller1: entered promiscuous mode [ 350.693812][T16751] syzkaller1: entered allmulticast mode [ 350.843483][T12219] net_ratelimit: 72 callbacks suppressed [ 350.843501][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.857120][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 350.971603][ T5806] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.982201][ T5806] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.099852][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.102555][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.219605][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.222427][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.265129][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2760'. [ 351.279877][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2760'. [ 351.347263][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.353680][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.600354][T16779] nfs: Deprecated parameter 'nointr' [ 352.005557][T16796] futex_atomic_op_inuser: 23 callbacks suppressed [ 352.005581][T16796] futex_wake_op: syz.3.2771 tries to shift op by 32; fix this program [ 352.032139][T16798] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 352.077900][ T6292] IPVS: starting estimator thread 0... [ 352.169900][T16801] IPVS: using max 27 ests per chain, 64800 per kthread [ 353.168697][T16803] syz.2.2773 (16803): drop_caches: 1 [ 353.238568][T16828] netlink: 'syz.3.2780': attribute type 1 has an invalid length. [ 353.588559][T16844] tls_set_device_offload: netdev not found [ 353.611884][T16846] kvm: user requested TSC rate below hardware speed [ 353.801299][ T42] audit: type=1400 audit(1787802151.723:27178): avc: denied { map } for pid=16857 comm="syz.7.2787" path="socket:[78271]" dev="sockfs" ino=78271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 354.104175][T16866] ªªªªªª: renamed from vlan0 (while UP) [ 354.305612][ T2318] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 354.481755][ T2318] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.494130][ T2318] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.499435][ T2318] usb 7-1: config 0 has no interfaces? [ 354.514563][ T2318] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.518517][ T2318] usb 7-1: Product: syz [ 354.521203][ T2318] usb 7-1: SerialNumber: syz [ 354.531672][ T2318] usb 7-1: config 0 descriptor?? [ 354.632677][T16872] __nla_validate_parse: 3 callbacks suppressed [ 354.632694][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2792'. [ 354.970782][T16868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.983754][T16868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.986588][ T42] audit: type=1400 audit(1787802152.836:27179): avc: denied { map } for pid=16893 comm="syz.8.2798" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 355.000940][ T2318] usb 7-1: USB disconnect, device number 37 [ 355.015908][T16896] UBIFS error (pid: 16896): cannot open "ubi0:testvol", error -19 [ 355.072851][T16900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2800'. [ 355.084643][T16900] netlink: 'syz.3.2800': attribute type 6 has an invalid length. [ 355.087976][T16900] netlink: 'syz.3.2800': attribute type 5 has an invalid length. [ 355.093133][T16900] netlink: 'syz.3.2800': attribute type 4 has an invalid length. [ 355.119219][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2801'. [ 355.234456][ T42] audit: type=1400 audit(1787802153.061:27180): avc: denied { write } for pid=16908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.322898][ T42] audit: type=1400 audit(1787802153.154:27181): avc: denied { write } for pid=16916 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.415927][ T42] audit: type=1400 audit(1787802153.229:27182): avc: denied { write } for pid=16924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.484445][ T42] audit: type=1400 audit(1787802153.304:27183): avc: denied { write } for pid=16930 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.576891][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 355.660338][T16947] kAFS: unable to lookup cell '(,c¾Ì' [ 356.038182][T16950] tipc: Started in network mode [ 356.040574][T16950] tipc: Node identity 2000004, cluster identity 4711 [ 356.043680][T16950] tipc: Node number set to 33554436 [ 356.050174][ T42] audit: type=1400 audit(1787802153.828:27184): avc: denied { setattr } for pid=16959 comm="syz.7.2812" name="NETLINK" dev="sockfs" ino=78482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.134692][ T5741] Bluetooth: hci4: unexpected event for opcode 0x100c [ 356.288000][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 356.304254][ T5806] net_ratelimit: 82 callbacks suppressed [ 356.304285][ T5806] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.326732][ T5806] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.378836][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 356.442915][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.446334][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.473333][T16975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 356.475674][T16975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 356.507009][T16975] vhci_hcd vhci_hcd.0: Device attached [ 356.521055][T16977] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 356.526423][ T5589] vhci_hcd vhci_hcd.3: stop threads [ 356.528623][ T5589] vhci_hcd vhci_hcd.3: release socket [ 356.530717][ T5589] vhci_hcd vhci_hcd.3: disconnect device [ 356.594289][T16983] netlink: 'syz.8.2818': attribute type 14 has an invalid length. [ 356.658462][T16989] tap0: tun_chr_ioctl cmd 1074025675 [ 356.664876][T16989] tap0: persist disabled [ 356.729918][ T5589] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.734664][ T5589] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.741385][T16997] syzkaller0: entered promiscuous mode [ 356.747831][T16997] syzkaller0: entered allmulticast mode [ 356.882754][T17001] IPVS: sh: FWM 3 0x00000003 - no destination available [ 357.169524][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.173625][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.264668][T17013] overlayfs: failed to resolve 'obj_type=/dev/video36': -2 [ 357.270186][T17013] overlay: Bad value for 'xino' [ 357.290198][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.375309][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2825'. [ 357.488794][ C0] Unknown status report in ack skb [ 357.565361][T17023] input: syz1 as /devices/virtual/input/input46 [ 357.711589][T17023] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 357.804563][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.817992][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.900220][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 357.998152][T17044] »»»»»»: renamed from vlan0 (while UP) [ 358.054590][T17048] netlink: 'syz.2.2835': attribute type 2 has an invalid length. [ 358.057023][ T61] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 358.209784][T17059] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 358.241696][ T61] usb 13-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 358.250234][ T61] usb 13-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 131, changing to 7 [ 358.255232][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xcd3c instead [ 358.261229][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x43ee instead [ 358.266079][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x647b instead [ 358.271172][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x09b0 instead [ 358.278000][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.282133][ T61] usb 13-1: Product: syz [ 358.284048][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x2a37 instead [ 358.288390][ T61] usb 13-1: Manufacturer: å…㱣㒙鿘뱉좮ퟵ徽æ¼é›‡æ›€åž“馅痡磼蓽懲Ѹì»ë†’ë°®äŸ¯áš”ìæ½âƒˆå–¸å¿žéª’ï¨»ç‰Ÿêµ‰â¡ë‘™ë°¸ì©¬îê„·á«”æ‚Û–èºê¨‹åŠ¥áªÎ‚ç—펭í˜áŸ­î£’䙶Ϧඛꖃé¢ì¦»ëº¡ì–—í‘䰌骖뛖åžë™®á±¶ [ 358.298971][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9832 instead [ 358.307937][ T61] usb 13-1: SerialNumber: syz [ 358.311148][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x46b8 instead [ 358.325373][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1cdf instead [ 358.332483][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7cc2 instead [ 358.338106][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1ace instead [ 358.345598][T17061] jffs2: Further such events for this erase block will not be printed [ 358.349744][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x879b instead [ 358.354441][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x8cce instead [ 358.359674][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x6c22 instead [ 358.363961][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xf37c instead [ 358.370579][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xab20 instead [ 358.375570][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x66ad instead [ 358.384058][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xdb54 instead [ 358.390743][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x0f6f instead [ 358.397166][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xd4de instead [ 358.404105][T17064] bond2: (slave geneve2): making interface the new active one [ 358.405954][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x9860 instead [ 358.417069][T17064] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 358.423246][T17061] jffs2: Further such events for this erase block will not be printed [ 358.437030][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x8945 instead [ 358.438022][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.449885][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.455708][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.455885][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x266e instead [ 358.459270][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.473295][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x193c instead [ 358.477175][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xfe6f instead [ 358.482386][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x01d3 instead [ 358.488275][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x878c instead [ 358.493190][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x453c instead [ 358.497920][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xf265 instead [ 358.502405][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x5802 instead [ 358.506793][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x3e5b instead [ 358.511162][T17061] jffs2: Further such events for this erase block will not be printed [ 358.514915][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x6a9a instead [ 358.520555][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x7cfa instead [ 358.525353][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xb25a instead [ 358.531123][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x06c0 instead [ 358.536306][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xade7 instead [ 358.540797][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x1e70 instead [ 358.546256][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4a28 instead [ 358.555712][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x5772 instead [ 358.563291][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x6946 instead [ 358.567858][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x719c instead [ 358.573549][T17061] jffs2: Further such events for this erase block will not be printed [ 358.575923][ T61] usb 13-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 358.577155][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xc05a instead [ 358.585469][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x475b instead [ 358.589060][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x84db instead [ 358.592787][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xdfc3 instead [ 358.605589][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x85b9 instead [ 358.609362][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xde5f instead [ 358.610627][ T61] usb 13-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 358.616839][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6444 instead [ 358.620469][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x8a28 instead [ 358.631739][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x58cc instead [ 358.635300][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x7f78 instead [ 358.640572][T17061] jffs2: Further such events for this erase block will not be printed [ 358.644286][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x6cf8 instead [ 358.647981][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xd1f9 instead [ 358.651228][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xe035 instead [ 358.654506][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xcb0f instead [ 358.658634][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x91c1 instead [ 358.662557][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x1f63 instead [ 358.669161][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xeea7 instead [ 358.673971][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x8a32 instead [ 358.679884][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x7181 instead [ 358.683866][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x6f22 instead [ 358.688663][T17061] jffs2: Further such events for this erase block will not be printed [ 358.692633][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xa0cc instead [ 358.696650][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x8dfa instead [ 358.702675][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x2743 instead [ 358.706855][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xaeb4 instead [ 358.710383][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x242e instead [ 358.713491][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xc4e8 instead [ 358.716526][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3039 instead [ 358.720108][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xa34f instead [ 358.723159][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x65ac instead [ 358.726227][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xd9f5 instead [ 358.729328][T17061] jffs2: Further such events for this erase block will not be printed [ 358.735244][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x0d6e instead [ 358.739488][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x94af instead [ 358.743534][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xdec8 instead [ 358.746629][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1910 instead [ 358.749837][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xd2ae instead [ 358.753318][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0f63 instead [ 358.756481][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0663 instead [ 358.759877][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xdbfc instead [ 358.764595][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x37ec instead [ 358.766607][ T61] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 358.767955][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xf300 instead [ 358.774462][T17061] jffs2: Further such events for this erase block will not be printed [ 358.775028][ T61] usb 13-1: USB disconnect, device number 28 [ 358.777201][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xded4 instead [ 358.784454][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0378 instead [ 358.788854][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x94d0 instead [ 358.792269][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x246a instead [ 358.795732][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x5e13 instead [ 358.799621][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xa8c2 instead [ 358.803133][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf191 instead [ 358.806609][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xb836 instead [ 358.810629][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x64c6 instead [ 358.814466][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x92e6 instead [ 358.818952][T17061] jffs2: Further such events for this erase block will not be printed [ 358.822812][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x306d instead [ 358.826393][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xb0b8 instead [ 358.829959][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x5484 instead [ 358.833320][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xbb32 instead [ 358.836818][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x116e instead [ 358.840087][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xa3e8 instead [ 358.843308][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd76e instead [ 358.846861][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x95c5 instead [ 358.856883][T14923] udevd[14923]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.865126][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xfc74 instead [ 358.875566][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x2434 instead [ 358.899922][T17061] jffs2: Further such events for this erase block will not be printed [ 358.934116][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xcdac instead [ 358.945463][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xff93 instead [ 358.953142][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xe152 instead [ 358.957599][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xef5f instead [ 358.962231][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xf22f instead [ 358.966390][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xe2f7 instead [ 358.970769][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8a89 instead [ 358.978239][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x5310 instead [ 358.982119][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xee2b instead [ 358.987896][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x0662 instead [ 358.993374][T17061] jffs2: Further such events for this erase block will not be printed [ 358.996789][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x12fa instead [ 359.001121][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xcd10 instead [ 359.005422][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x5428 instead [ 359.009709][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1a8a instead [ 359.014373][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x3ae4 instead [ 359.019074][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xc927 instead [ 359.023337][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8983 instead [ 359.027541][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6fa3 instead [ 359.033288][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x112a instead [ 359.038201][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xb5d2 instead [ 359.044821][T17061] jffs2: Further such events for this erase block will not be printed [ 359.060540][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xf82b instead [ 359.070435][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x29e2 instead [ 359.075308][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xd366 instead [ 359.079690][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x4efd instead [ 359.084297][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x8039 instead [ 359.088558][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x143b instead [ 359.093714][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xec0e instead [ 359.100151][T17092] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.104462][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x86a6 instead [ 359.109834][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x33d4 instead [ 359.119962][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x468a instead [ 359.125668][T17061] jffs2: Further such events for this erase block will not be printed [ 359.129858][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2ddd instead [ 359.133142][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x3ef9 instead [ 359.137289][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xa060 instead [ 359.141702][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xcb41 instead [ 359.145609][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xa152 instead [ 359.150336][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5044 instead [ 359.154758][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5e2f instead [ 359.158092][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xf388 instead [ 359.162145][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x3195 instead [ 359.166210][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xf07d instead [ 359.171123][T17061] jffs2: Further such events for this erase block will not be printed [ 359.176145][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xfc5c instead [ 359.180801][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x6e43 instead [ 359.185855][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x9a94 instead [ 359.196239][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x2b63 instead [ 359.213704][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xdf1f instead [ 359.218138][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xa3b6 instead [ 359.222742][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x34fb instead [ 359.251979][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x8b27 instead [ 359.259969][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x197f instead [ 359.269841][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x6112 instead [ 359.276712][T17061] jffs2: Further such events for this erase block will not be printed [ 359.282256][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x80e1 instead [ 359.286719][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x9e7f instead [ 359.293242][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xe35b instead [ 359.299564][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xdd5d instead [ 359.304358][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xb14e instead [ 359.309231][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x3ada instead [ 359.316606][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x51fb instead [ 359.321176][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x5081 instead [ 359.327597][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xdaf6 instead [ 359.334275][T17061] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x2119 instead [ 359.340153][T17061] jffs2: Further such events for this erase block will not be printed [ 359.344698][T17061] jffs2: notice: (17061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 359.352784][T17061] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 359.396585][ T5741] Bluetooth: hci4: unexpected event for opcode 0x080f [ 359.578564][T17108] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2851'. [ 359.909867][ T13] syzkaller0: tun_net_xmit 76 [ 359.919163][T17117] syzkaller0: create flow: hash 2627911331 index 1 [ 359.921192][ T13] syzkaller0: tun_net_xmit 48 [ 359.937532][T12727] syzkaller0: tun_net_xmit 76 [ 359.984043][ T42] audit: type=1400 audit(2000000002.348:27185): avc: denied { write } for pid=17116 comm="syz.7.2854" name="functions" dev="configfs" ino=9609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.021616][T17117] printk: legacy console [ttyGS0] disabled [ 360.074843][T17120] device-mapper: ioctl: populate_table: no targets specified [ 360.276637][T17116] syzkaller0: delete flow: hash 2627911331 index 1 [ 360.570714][T17128] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 360.706034][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 362.047473][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880622fac00: rx timeout, send abort [ 362.058382][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880622fa800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.178620][ T42] audit: type=1400 audit(2000000004.398:27186): avc: denied { read } for pid=5113 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 362.195263][ T42] audit: type=1400 audit(2000000004.398:27187): avc: denied { search } for pid=5113 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.203516][ T42] audit: type=1400 audit(2000000004.398:27188): avc: denied { write search } for pid=5113 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.211552][ T42] audit: type=1400 audit(2000000004.398:27189): avc: denied { add_name } for pid=5113 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.218460][ T42] audit: type=1400 audit(2000000004.398:27190): avc: denied { create } for pid=5113 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.226535][ T42] audit: type=1400 audit(2000000004.398:27191): avc: denied { append open } for pid=5113 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.235907][ T42] audit: type=1400 audit(2000000004.398:27192): avc: denied { getattr } for pid=5113 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.587375][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880622fac00: abort rx timeout. Force session deactivation [ 365.526244][T12219] net_ratelimit: 39 callbacks suppressed [ 365.526262][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.538616][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.597071][ T42] audit: type=1400 audit(2000000007.598:27193): avc: denied { setopt } for pid=17138 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 365.627362][ T42] audit: type=1400 audit(2000000007.626:27194): avc: denied { write } for pid=17135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.686340][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.690440][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.695305][ T42] audit: type=1400 audit(2000000007.692:27195): avc: denied { write } for pid=17144 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.819310][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.822001][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.841828][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2862'. [ 365.845279][T17162] Unknown options in mask b7f2 [ 365.873758][T17151] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2862'. [ 365.884344][T17151] Unknown options in mask b7f2 [ 365.945080][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.948228][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.064736][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.067933][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.499133][T17204] 9pnet_virtio: no channels available for device syz [ 366.519312][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2872'. [ 366.524652][T17206] netlink: 'syz.7.2872': attribute type 7 has an invalid length. [ 366.528387][T17206] netlink: 'syz.7.2872': attribute type 8 has an invalid length. [ 366.532060][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2872'. [ 366.544999][T17206] erspan0: entered promiscuous mode [ 366.553506][T17206] erspan0: left promiscuous mode [ 366.917602][T17219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=17219 comm=syz.8.2874 [ 366.935999][T17216] netlink: 'syz.8.2874': attribute type 19 has an invalid length. [ 367.004064][T17219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17219 comm=syz.8.2874 [ 367.304335][T17249] netlink: 'syz.2.2882': attribute type 29 has an invalid length. [ 367.310516][T17249] netlink: 'syz.2.2882': attribute type 3 has an invalid length. [ 367.320336][T17249] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2882'. [ 367.481611][T17257] 9pnet_virtio: no channels available for device syz [ 367.490638][T17255] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 367.502787][T17255] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2885'. [ 367.671874][ T5726] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 367.676513][ T5726] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 367.899843][T17267] autofs: Unknown parameter '/dev/kvm' [ 367.934114][T17269] tipc: MTU too low for tipc bearer [ 367.964615][T17267] SELinux: policydb version 380650015 does not match my version range 15-35 [ 367.969251][T17267] SELinux: failed to load policy [ 367.973098][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 367.973120][ T42] audit: type=1400 audit(2000000009.825:27204): avc: denied { write } for pid=17262 comm="syz.2.2886" name="uvc.usb0" dev="configfs" ino=20294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.157333][T17283] fuse: Bad value for 'fd' [ 368.213927][ T42] audit: type=1326 audit(2000000010.050:27205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17285 comm="syz.7.2893" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47bb39e0d9 code=0x0 [ 368.302845][T17292] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 368.309979][T17292] device-mapper: ioctl: error adding target to table [ 368.424359][T17281] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 368.457489][T17281] overlayfs: missing 'lowerdir' [ 368.463513][T17281] overlayfs: overlapping lowerdir path [ 368.574267][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 368.645764][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2898'. [ 368.755880][ T42] audit: type=1400 audit(2000000010.565:27206): avc: denied { append } for pid=17321 comm="syz.3.2901" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 368.800374][T17327] comedi comedi0: pc212e: a I/O base address must be specified [ 368.994655][T17338] tmpfs: Bad value for 'mpol' [ 369.137487][ T42] audit: type=1400 audit(2000000010.911:27207): avc: denied { getopt } for pid=17343 comm="syz.2.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.150708][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 369.176138][T17347] kAFS: bad VL server IP address [ 369.293642][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 369.299009][T17362] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 369.302062][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 369.347923][T17366] 9pnet_virtio: no channels available for device syz [ 369.416695][T17362] geneve3: entered promiscuous mode [ 369.422440][T17362] geneve3: entered allmulticast mode [ 369.464471][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2913'. [ 369.785021][T17391] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 369.791280][T17391] Unsupported digest algo: 106 [ 369.802401][ T42] audit: type=1400 audit(2000000011.538:27208): avc: denied { mount } for pid=17389 comm="syz.8.2920" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 369.805053][T17390] Mount JFS Failure: -5 [ 369.819923][T17390] jfs_mount failed w/return code = -5 [ 369.821754][ T42] audit: type=1400 audit(2000000011.547:27209): avc: denied { watch } for pid=17389 comm="syz.8.2920" path="/477/file0" dev="tmpfs" ino=2650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 369.821803][ T42] audit: type=1400 audit(2000000011.547:27210): avc: denied { watch_sb watch_reads } for pid=17389 comm="syz.8.2920" path="/477/file0" dev="tmpfs" ino=2650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.071249][ T42] audit: type=1400 audit(2000000011.791:27211): avc: denied { nlmsg_write } for pid=17413 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 370.346488][ T42] audit: type=1400 audit(2000000012.043:27212): avc: denied { write } for pid=17431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.424339][T17444] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 370.443384][ T42] audit: type=1400 audit(2000000012.137:27213): avc: denied { write } for pid=17446 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.525283][T17447] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 370.763781][T17468] xfrm1: entered promiscuous mode [ 370.770525][T17468] xfrm1: entered allmulticast mode [ 371.063909][ T5741] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 371.066511][ T5741] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 371.106341][T12219] net_ratelimit: 73 callbacks suppressed [ 371.106361][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.111489][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.224840][ T5806] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.229497][ T5806] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.351798][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.360125][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.480926][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.484921][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.493431][T17499] 9pnet_virtio: no channels available for device syz [ 371.534252][T17502] netlink: 'syz.3.2945': attribute type 11 has an invalid length. [ 371.584970][T12727] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 371.617404][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.621391][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.746166][T12727] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 371.751230][T12727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.754974][T12727] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 371.758495][T12727] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.764419][T12727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 371.768148][T12727] usb 7-1: Product: syz [ 371.769875][T12727] usb 7-1: Manufacturer: syz [ 371.774265][T17493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 371.781443][T12727] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 371.790070][T12727] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 371.996657][T12727] usb 7-1: USB disconnect, device number 38 [ 372.008771][T12727] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 372.015365][T12727] garmin_gps 7-1:1.0: device disconnected [ 372.807024][T17523] overlayfs: failed to resolve './bus/file0': -2 [ 373.688531][T17530] syz_tun: entered allmulticast mode [ 373.713155][T17530] IPVS: set_ctl: invalid protocol: 50 172.20.20.36:20002 [ 373.724332][T17528] syz_tun: left allmulticast mode [ 373.753063][T17533] vlan0: entered allmulticast mode [ 373.903926][ T5741] Bluetooth: hci3: command 0x0406 tx timeout [ 374.240573][T17548] __nla_validate_parse: 1 callbacks suppressed [ 374.240592][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2961'. [ 374.252059][T17552] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2962' resets device [ 374.346131][T17557] netlink: 'syz.7.2963': attribute type 2 has an invalid length. [ 374.351696][T17557] netlink: 'syz.7.2963': attribute type 2 has an invalid length. [ 374.364707][T17554] syzkaller0: entered promiscuous mode [ 374.366465][T17554] syzkaller0: entered allmulticast mode [ 374.390649][T17554] syz_tun: tun_net_xmit 86 [ 374.466425][T17560] xt_CT: No such helper "pptp" [ 374.597841][T17562] block2mtd: error: cannot open device /dev/loop0 [ 374.974503][T17588] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 374.986594][T17588] zonefs (nullb1): Mounting 1000 zones [ 374.988162][T17588] zonefs (nullb1): Zone group "seq" has 999 files [ 375.346899][T17590] loop4: detected capacity change from 0 to 10832 [ 375.351543][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.357301][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.367811][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.370642][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.373483][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 375.373499][ T42] audit: type=1400 audit(2000000016.750:27220): avc: denied { unmount } for pid=17591 comm="syz.7.2973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.375471][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.405782][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.413784][T17589] Buffer I/O error on dev loop4, logical block 7, async page read [ 375.431977][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.444957][T17590] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.460108][T17590] ldm_validate_partition_table(): Disk read failed. [ 375.468459][T17590] Dev loop4: unable to read RDB block 0 [ 375.477426][T17590] loop4: unable to read partition table [ 375.493347][T17590] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 375.539121][ C3] syz_tun: tun_net_xmit 86 [ 375.654168][T17609] netlink: 'syz.7.2977': attribute type 1 has an invalid length. [ 375.707226][T17611] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 375.714879][T17611] netlink: 'syz.8.2978': attribute type 1 has an invalid length. [ 375.729470][T17611] bond10: entered promiscuous mode [ 375.732324][T17611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 375.752513][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 375.794203][T17611] veth7: entered allmulticast mode [ 375.818788][T17611] bond10: (slave veth7): making interface the new active one [ 375.834973][T17611] veth7: entered promiscuous mode [ 375.854264][T17611] bond10: (slave veth7): Enslaving as an active interface with an up link [ 375.884301][T17615] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 375.895618][T17615] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 375.912940][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 375.918410][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 375.929704][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.985543][T17625] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2980'. [ 375.995007][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 376.005622][ T10] pvrusb2: ********** [ 376.007342][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 376.038112][ T10] pvrusb2: Important functionality might not be entirely working. [ 376.042832][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 376.062672][ T10] pvrusb2: ********** [ 376.177718][ T2511] pvrusb2: Invalid write control endpoint [ 376.452872][T17603] pvrusb2: Invalid write control endpoint [ 376.491110][ T2511] pvrusb2: Invalid write control endpoint [ 376.501100][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 376.507602][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 376.510527][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 376.512178][T17603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 376.514411][ T2511] pvrusb2: Device being rendered inoperable [ 376.531549][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 376.534671][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 376.569039][ T2511] pvrusb2: Attached sub-driver cx25840 [ 376.569768][ T13] net_ratelimit: 73 callbacks suppressed [ 376.569791][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.573306][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 376.578470][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.591449][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 376.650274][ C3] syz_tun: tun_net_xmit 86 [ 376.703656][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.707327][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.821625][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.826597][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.949524][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.952380][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.954210][T17658] dlm: no locking on control device [ 377.077795][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.082485][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 377.148461][T17663] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2993'. [ 377.443591][T17668] fuse: Bad value for 'fd' [ 378.675841][ T34] usb 7-1: USB disconnect, device number 39 [ 379.108361][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.112756][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.116574][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.120963][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.125195][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.132655][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.137100][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'. [ 379.436087][T17708] xt_hashlimit: size too large, truncated to 1048576 [ 379.476425][ T5080] Bluetooth: hci4: command 0x0c1a tx timeout [ 379.480004][T17663] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 379.593589][T17711] netlink: 'syz.7.3009': attribute type 63 has an invalid length. [ 379.610237][T17711] __nla_validate_parse: 76 callbacks suppressed [ 379.610267][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3009'. [ 380.264787][T17663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.267842][T17663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.270739][T17663] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 380.287735][T17663] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 380.298462][T17663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.301712][T17663] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.495285][T17725] sg_read: process 287 (syz.2.3013) changed security contexts after opening file descriptor, this is not allowed. [ 380.597691][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 380.628814][T17740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3018'. [ 381.025054][T17770] syzkaller0: entered promiscuous mode [ 381.027847][T17770] syzkaller0: entered allmulticast mode [ 381.044115][T17770] tipc: Started in network mode [ 381.048715][T17770] tipc: Node identity 02bfc379fcf1, cluster identity 4711 [ 381.060320][T17770] tipc: Enabled bearer , priority 0 [ 381.145611][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3031'. [ 381.355112][T17769] tipc: Resetting bearer [ 381.391569][T17769] tipc: Disabling bearer [ 381.426965][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 381.590435][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 381.592955][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.595013][ T42] audit: type=1400 audit(2000000022.571:27221): avc: denied { write } for pid=17786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.597305][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.632317][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.641987][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.663033][ T10] usb 8-1: config 0 descriptor?? [ 381.683573][ T5080] Bluetooth: hci1: command 0x0c1a tx timeout [ 381.704320][ T42] audit: type=1400 audit(2000000022.674:27222): avc: denied { write } for pid=17791 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.003927][ T5808] net_ratelimit: 77 callbacks suppressed [ 382.003955][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.009754][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 382.054731][ T42] audit: type=1400 audit(2000000023.001:27223): avc: denied { write } for pid=17801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.141672][ T42] audit: type=1400 audit(2000000023.076:27224): avc: denied { write } for pid=17818 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.164136][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.170018][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 382.294786][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.328830][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 382.442027][ T5806] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.445098][ T5806] bond1: (slave macvlan2): failed to get link speed/duplex [ 382.452915][ T5080] Bluetooth: hci3: command 0x0406 tx timeout [ 382.456617][ T5080] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.644796][T17851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3044'. [ 382.649336][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.652808][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.154656][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3047'. [ 383.158626][T17866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=17866 comm=syz.8.3047 [ 383.300178][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3051'. [ 383.444625][ T42] audit: type=1400 audit(2000000024.302:27225): avc: denied { map } for pid=17874 comm="syz.2.3052" path="socket:[82943]" dev="sockfs" ino=82943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 383.511652][T17878] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3053'. [ 383.639132][ T42] audit: type=1400 audit(2000000024.489:27226): avc: denied { write } for pid=17889 comm="syz.8.3055" name="instances" dev="tracefs" ino=2331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 383.675925][ T42] audit: type=1400 audit(2000000024.508:27227): avc: denied { remove_name } for pid=17889 comm="syz.8.3055" name="foo" dev="tracefs" ino=16566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 383.685771][ T42] audit: type=1400 audit(2000000024.527:27228): avc: denied { rmdir } for pid=17889 comm="syz.8.3055" name="foo" dev="tracefs" ino=16566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 383.817633][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3057'. [ 383.826918][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3057'. [ 383.898291][ T42] audit: type=1400 audit(2000000024.733:27229): avc: denied { connect } for pid=17895 comm="syz.2.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 384.001706][T17903] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 384.010628][ T6548] IPVS: starting estimator thread 0... [ 384.131117][T17907] IPVS: using max 47 ests per chain, 112800 per kthread [ 384.305321][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 384.307413][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 384.325790][ T10] usb 8-1: USB disconnect, device number 22 [ 384.373587][T17927] pim6reg1: entered promiscuous mode [ 384.375579][T17927] pim6reg1: entered allmulticast mode [ 384.396026][T17929] 9pnet_virtio: no channels available for device syz [ 384.398232][T14842] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 384.479753][ T42] audit: type=1400 audit(2000000025.275:27230): avc: denied { write } for pid=17931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.538522][T17941] trusted_key: encrypted_key: insufficient parameters specified [ 384.675501][ T5080] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.675521][ T5741] Bluetooth: hci3: command 0x0406 tx timeout [ 386.898332][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.368444][ T12] net_ratelimit: 75 callbacks suppressed [ 387.368462][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.373511][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.485790][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.488417][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.603541][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.606855][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.721081][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.723681][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.838644][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.841951][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.786136][ T12] net_ratelimit: 82 callbacks suppressed [ 392.786154][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.790404][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.905432][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.908031][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 392.908051][ T42] audit: type=1400 audit(2000000033.164:27236): avc: denied { write } for pid=17978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.909218][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.986844][ T42] audit: type=1400 audit(2000000033.230:27237): avc: denied { write } for pid=17981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.053405][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.055910][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.170806][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.173418][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.288754][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.292298][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.641544][ T42] audit: type=1400 audit(2000000035.719:27238): avc: denied { write } for pid=17984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.697892][ T42] audit: type=1400 audit(2000000035.775:27239): avc: denied { write } for pid=17987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.870408][T18008] __nla_validate_parse: 2 callbacks suppressed [ 397.870428][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3079'. [ 397.994469][ T5741] Bluetooth: hci1: unexpected event for opcode 0x202d [ 397.999986][T18023] binder: BINDER_SET_CONTEXT_MGR already set [ 398.008589][T18023] binder: 18021:18023 ioctl 4018620d 200000000240 returned -16 [ 398.192590][T18031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 398.192670][T18032] e1000e 0000:00:02.0: resetting [ 398.236198][T12219] net_ratelimit: 82 callbacks suppressed [ 398.236232][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.241433][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.272554][T18032] e1000e 0000:00:02.0: reset done [ 398.353949][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.360285][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.481977][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.487462][ T5808] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.514716][T18043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.522430][T18043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.529124][T18043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.531115][T18043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.620737][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.624992][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.725735][T18052] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 398.781778][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.786780][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.505357][ T42] audit: type=1400 audit(2000000039.331:27240): avc: denied { listen } for pid=18077 comm="new_name" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 400.136655][T18106] 9pnet_virtio: no channels available for device syz [ 400.581556][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'. [ 400.661845][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.662006][ T5080] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.747339][ T5080] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.749708][ T5741] Bluetooth: hci3: command 0x0406 tx timeout [ 400.867639][ T42] audit: type=1400 audit(2000000040.613:27241): avc: denied { mount } for pid=18127 comm="syz.3.3116" name="/" dev="gadgetfs" ino=8602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 400.870331][T18128] gadgetfs: bound to dummy_udc driver [ 401.049292][ T42] audit: type=1400 audit(2000000040.782:27242): avc: denied { unmount } for pid=14334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 401.104006][ T42] audit: type=1400 audit(2000000040.828:27243): avc: denied { read } for pid=18140 comm="syz.2.3119" name="cec2" dev="devtmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.131812][ T42] audit: type=1400 audit(2000000040.828:27244): avc: denied { open } for pid=18140 comm="syz.2.3119" path="/dev/cec2" dev="devtmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.134837][T18139] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 401.144324][ T42] audit: type=1400 audit(2000000040.828:27245): avc: denied { ioctl } for pid=18140 comm="syz.2.3119" path="/dev/cec2" dev="devtmpfs" ino=985 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.201994][T18144] input: syz1 as /devices/virtual/input/input49 [ 401.428814][T18154] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 401.441568][T18154] netlink: 'syz.2.3124': attribute type 4 has an invalid length. [ 401.445538][T18154] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3124'. [ 401.743529][T18178] No control pipe specified [ 401.778610][T18182] ubi0: attaching mtd0 [ 401.801464][T18182] ubi0: scanning is finished [ 401.805147][T18182] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 401.840374][ T42] audit: type=1400 audit(2000000041.521:27246): avc: denied { write } for pid=18179 comm="syz.2.3131" name="nullb" dev="configfs" ino=4674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 401.921170][ T42] audit: type=1400 audit(2000000041.586:27247): avc: denied { mount } for pid=18188 comm="syz.8.3133" name="/" dev="overlay" ino=2907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 401.945256][ T42] audit: type=1400 audit(2000000041.624:27248): avc: denied { unmount } for pid=9847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 402.028733][T18192] overlayfs: failed to clone upperpath [ 402.053782][ T42] audit: type=1400 audit(2000000041.717:27249): avc: denied { map } for pid=18193 comm="syz.8.3135" path="socket:[86858]" dev="sockfs" ino=86858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.144234][T18182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 402.304005][T18184] null_blk: disk nullb2 created [ 402.531716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 402.543042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 402.575116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 402.612456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 402.628231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 402.790899][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.814990][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.835534][ T1345] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 402.838782][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.877362][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.880795][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.970218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 403.008830][ T1345] usb 7-1: not running at top speed; connect to a high speed hub [ 403.012924][ T1345] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 403.027250][ T1345] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 403.047010][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.051056][ T1345] usb 7-1: Product: syz [ 403.053494][ T1345] usb 7-1: Manufacturer: syz [ 403.056644][ T1345] usb 7-1: SerialNumber: syz [ 403.530397][T18247] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 403.697244][ T13] net_ratelimit: 77 callbacks suppressed [ 403.697275][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.703573][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.887073][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.898608][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.105562][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.114049][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.209468][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.212328][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.524343][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.535483][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.645448][T18273] syzkaller1: entered promiscuous mode [ 404.647937][T18273] syzkaller1: entered allmulticast mode [ 404.757811][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.761852][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.776709][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.779997][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.793143][T18226] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.801406][T18226] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.810012][T18226] bridge_slave_0: entered allmulticast mode [ 404.823774][T18226] bridge_slave_0: entered promiscuous mode [ 404.839034][T18226] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.856680][T18226] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.859208][T18226] bridge_slave_1: entered allmulticast mode [ 404.862980][T18226] bridge_slave_1: entered promiscuous mode [ 404.969534][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.973450][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.035462][T18226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.042651][T18226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.109724][T18294] bond11 (unregistering): Released all slaves [ 405.117957][ T5741] Bluetooth: hci0: command tx timeout [ 405.128085][T18226] team0: Port device team_slave_0 added [ 405.134507][T18226] team0: Port device team_slave_1 added [ 405.244078][T18226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.246940][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.255217][T18226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.260827][T18226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.263501][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.275494][T18226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.327973][T18226] hsr_slave_0: entered promiscuous mode [ 405.330864][T18226] hsr_slave_1: entered promiscuous mode [ 405.334633][T18226] debugfs: 'hsr0' already exists in 'hsr' [ 405.340773][T18226] Cannot create hsr debugfs directory [ 405.660653][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.664080][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.719721][ T1345] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.733403][ T1345] usb 7-1: MIDIStreaming interface descriptor not found [ 405.824669][T18303] kvm: apic: phys broadcast and lowest prio [ 405.832107][T18303] tmpfs: Unknown parameter 'quOta' [ 405.965990][ T1345] usb 7-1: USB disconnect, device number 40 [ 405.987945][T18303] 9p: Could not find request transport: xen [ 406.128734][T18314] udevd[18314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.342778][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 406.342800][ T42] audit: type=1400 audit(2000000045.732:27254): avc: denied { map } for pid=18318 comm="syz.3.3166" path="socket:[88173]" dev="sockfs" ino=88173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 406.543087][ T13] bond0 (unregistering): Released all slaves [ 406.558520][ T13] bond1 (unregistering): Released all slaves [ 406.597864][ T13] bond2 (unregistering): Released all slaves [ 406.751120][T18327] SELinux: DCCP has been removed, pid=18327 comm=syz.3.3168 [ 406.974801][ T13] tipc: Disabling bearer [ 406.977429][ T13] tipc: Left network mode [ 407.285964][ T42] audit: type=1400 audit(2000000046.612:27255): avc: denied { write } for pid=18334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.344876][ T5741] Bluetooth: hci0: command tx timeout [ 407.368487][T18340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3172'. [ 407.391794][ T42] audit: type=1400 audit(2000000046.715:27256): avc: denied { write } for pid=18341 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.492145][ T34] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 407.593929][T18316] buffer_io_error: 177 callbacks suppressed [ 407.593945][T18316] Buffer I/O error on dev loop6, logical block 32767999, async page read [ 407.717156][ T34] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 407.722906][ T34] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.728511][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.796649][ T13] IPVS: stopping master sync thread 15705 ... [ 407.886452][ T13] IPVS: stopping master sync thread 15704 ... [ 407.894065][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.894102][ T34] usb 8-1: Product: syz [ 407.894119][ T34] usb 8-1: Manufacturer: syz [ 407.894136][ T34] usb 8-1: SerialNumber: syz [ 407.915399][ T13] IPVS: stopping master sync thread 15703 ... [ 407.918077][ T34] symbolserial 8-1:1.0: symbol converter detected [ 407.947032][ T13] IPVS: stopping master sync thread 15702 ... [ 408.056285][ T34] usb 8-1: symbol converter now attached to ttyUSB0 [ 408.215586][ T34] usb 8-1: USB disconnect, device number 23 [ 408.218378][ T5741] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 408.229844][ T34] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 408.258569][ T34] symbolserial 8-1:1.0: device disconnected [ 408.329090][ T5433] 8021q: adding VLAN 0 to HW filter on device eth26 [ 408.660624][ T42] audit: type=1400 audit(2000000047.903:27257): avc: denied { write } for pid=18369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.840245][ T42] audit: type=1400 audit(2000000048.072:27258): avc: denied { write } for pid=18376 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.900207][ T13] hsr_slave_0: left promiscuous mode [ 408.905004][ T13] hsr_slave_1: left promiscuous mode [ 408.910071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.917893][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.924094][ T5741] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 408.934755][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.942154][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.079141][ T13] virt_wifi0: left promiscuous mode [ 409.086014][ T13] veth1_macvtap: left promiscuous mode [ 409.088394][ T13] veth0_macvtap: left promiscuous mode [ 409.090752][ T13] veth1_vlan: left promiscuous mode [ 409.093630][ T13] veth0_vlan: left promiscuous mode [ 409.552437][ T5741] Bluetooth: hci0: command tx timeout [ 409.724811][T18416] hid-generic 0003:0627:0001.000F: pid 18416 passed too short report [ 409.816729][T18419] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3190'. [ 409.931042][T18405] Console: switching to colour dummy device 80x25 [ 410.757430][ T5433] 8021q: adding VLAN 0 to HW filter on device eth27 [ 410.900129][T18424] tmpfs: Bad value for 'mpol' [ 410.959306][T18316] Buffer I/O error on dev loop6, logical block 32767999, async page read [ 411.005801][T12219] net_ratelimit: 10 callbacks suppressed [ 411.005822][T12219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.014596][T12219] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.153198][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.156365][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.209055][T18405] ============================================================================= [ 411.215640][T18405] [ 411.215650][T18405] ====================================================== [ 411.215654][T18405] WARNING: possible circular locking dependency detected [ 411.215663][T18405] syzkaller #0 Tainted: G L [ 411.215670][T18405] ------------------------------------------------------ [ 411.215675][T18405] syz.2.3186/18405 is trying to acquire lock: [ 411.215683][T18405] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 411.215719][T18405] [ 411.215719][T18405] but task is already holding lock: [ 411.215722][T18405] ffff88802743d618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 411.215761][T18405] [ 411.215761][T18405] which lock already depends on the new lock. [ 411.215761][T18405] [ 411.215765][T18405] [ 411.215765][T18405] the existing dependency chain (in reverse order) is: [ 411.215769][T18405] [ 411.215769][T18405] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 411.215784][T18405] lock_acquire+0x1b9/0x370 [ 411.215802][T18405] _raw_spin_lock_irqsave+0x3a/0x60 [ 411.215828][T18405] __refill_objects_node+0x120/0xaa0 [ 411.215845][T18405] refill_objects+0x58/0x410 [ 411.215858][T18405] __pcs_replace_empty_main+0x372/0x680 [ 411.215872][T18405] __kmalloc_noprof+0x66b/0x820 [ 411.215886][T18405] tty_buffer_alloc+0x29f/0x320 [ 411.215906][T18405] __tty_buffer_request_room+0x129/0x2c0 [ 411.215923][T18405] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 411.215941][T18405] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 411.215962][T18405] pty_write+0xd2/0x100 [ 411.215974][T18405] tty_put_char+0x130/0x160 [ 411.215987][T18405] do_output_char+0x155/0x850 [ 411.215997][T18405] __process_echoes+0x21c/0xb10 [ 411.216007][T18405] n_tty_receive_buf_common+0x462/0x1930 [ 411.216020][T18405] tty_ldisc_receive_buf+0xaa/0x1a0 [ 411.216035][T18405] tty_port_default_receive_buf+0x70/0xb0 [ 411.216045][T18405] flush_to_ldisc+0x26b/0x730 [ 411.216060][T18405] process_one_work+0xac7/0x1b10 [ 411.216073][T18405] worker_thread+0x5ef/0xe50 [ 411.216086][T18405] kthread+0x373/0x450 [ 411.216098][T18405] ret_from_fork+0x730/0xd60 [ 411.216114][T18405] ret_from_fork_asm+0x1a/0x30 [ 411.216124][T18405] [ 411.216124][T18405] -> #2 (&port->lock#2){-...}-{3:3}: [ 411.216140][T18405] lock_acquire+0x1b9/0x370 [ 411.216154][T18405] _raw_spin_lock_irq_disable+0x5e/0x90 [ 411.216169][T18405] tty_port_tty_get+0x1f/0xf0 [ 411.216179][T18405] tty_port_default_wakeup+0x15/0x60 [ 411.216189][T18405] serial8250_tx_chars+0x68f/0x860 [ 411.216200][T18405] __start_tx+0x3e4/0x490 [ 411.216209][T18405] serial8250_start_tx+0x368/0x540 [ 411.216218][T18405] __uart_start+0x295/0x510 [ 411.216232][T18405] uart_write+0x211/0xb20 [ 411.216241][T18405] n_tty_write+0x431/0x1160 [ 411.216255][T18405] file_tty_write.isra.0+0x4d2/0x890 [ 411.216264][T18405] redirected_tty_write+0xd4/0x120 [ 411.216273][T18405] vfs_write+0x6af/0x1050 [ 411.216285][T18405] ksys_write+0x12a/0x250 [ 411.216297][T18405] do_syscall_64+0x123/0x790 [ 411.216308][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.216327][T18405] [ 411.216327][T18405] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 411.216342][T18405] lock_acquire+0x1b9/0x370 [ 411.216358][T18405] _raw_spin_lock_irqsave+0x3a/0x60 [ 411.216374][T18405] serial8250_console_write+0x177/0x1a50 [ 411.216387][T18405] console_flush_one_record+0x78e/0xf10 [ 411.216401][T18405] console_unlock+0x103/0x260 [ 411.216412][T18405] vprintk_emit+0x407/0x6b0 [ 411.216424][T18405] _printk+0xcf/0x110 [ 411.216434][T18405] register_console.cold+0xc0/0x248 [ 411.216446][T18405] univ8250_console_init+0x6f/0x80 [ 411.216457][T18405] console_init+0x3d5/0x5b0 [ 411.216471][T18405] start_kernel+0x314/0x490 [ 411.216482][T18405] x86_64_start_reservations+0x24/0x30 [ 411.216494][T18405] x86_64_start_kernel+0x12b/0x130 [ 411.216505][T18405] common_startup_64+0x13e/0x158 [ 411.216516][T18405] [ 411.216516][T18405] -> #0 (console_owner){-.-.}-{0:0}: [ 411.216529][T18405] check_prev_add+0xeb/0xe60 [ 411.216544][T18405] __lock_acquire+0x1492/0x1ec0 [ 411.216560][T18405] lock_acquire+0x1b9/0x370 [ 411.216575][T18405] console_lock_spinning_enable+0x72/0x80 [ 411.216587][T18405] console_flush_one_record+0x737/0xf10 [ 411.216598][T18405] console_unlock+0x103/0x260 [ 411.216608][T18405] vprintk_emit+0x407/0x6b0 [ 411.216619][T18405] _printk+0xcf/0x110 [ 411.216628][T18405] __slab_bug+0x4f/0xb0 [ 411.216637][T18405] slab_bug+0x5d/0x80 [ 411.216646][T18405] __kmem_cache_shutdown.cold+0x39/0x177 [ 411.216659][T18405] kmem_cache_destroy+0x73/0x190 [ 411.216670][T18405] virtio_gpu_free_vbufs+0x38/0x80 [ 411.216684][T18405] virtio_gpu_release+0x5c/0x1c0 [ 411.216694][T18405] drm_dev_put.part.0+0xbd/0x140 [ 411.216704][T18405] drm_dev_put+0x1f/0x30 [ 411.216712][T18405] virtio_dev_remove+0xb8/0x170 [ 411.216721][T18405] device_remove+0xcb/0x180 [ 411.216730][T18405] device_release_driver_internal+0x44e/0x620 [ 411.216742][T18405] bus_remove_device+0x2bc/0x560 [ 411.216758][T18405] device_del+0x376/0x9b0 [ 411.216766][T18405] device_unregister+0x1d/0xe0 [ 411.216775][T18405] unregister_virtio_device+0x39/0x60 [ 411.216785][T18405] virtio_pci_remove+0x7c/0x110 [ 411.216799][T18405] pci_device_remove+0xb2/0x1d0 [ 411.216813][T18405] device_remove+0xcb/0x180 [ 411.216821][T18405] device_release_driver_internal+0x44e/0x620 [ 411.216832][T18405] pci_stop_bus_device+0x120/0x160 [ 411.216847][T18405] pci_stop_and_remove_bus_device+0x58/0xa0 [ 411.216863][T18405] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 411.216879][T18405] remove_store+0x123/0x140 [ 411.216889][T18405] dev_attr_store+0x58/0x80 [ 411.216900][T18405] sysfs_kf_write+0xf2/0x150 [ 411.216915][T18405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.216929][T18405] vfs_write+0x6af/0x1050 [ 411.216941][T18405] ksys_write+0x12a/0x250 [ 411.216953][T18405] do_syscall_64+0x123/0x790 [ 411.216963][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.216973][T18405] [ 411.216973][T18405] other info that might help us debug this: [ 411.216973][T18405] [ 411.216977][T18405] Chain exists of: [ 411.216977][T18405] console_owner --> &port->lock#2 --> &n->list_lock [ 411.216977][T18405] [ 411.216995][T18405] Possible unsafe locking scenario: [ 411.216995][T18405] [ 411.216998][T18405] CPU0 CPU1 [ 411.217002][T18405] ---- ---- [ 411.217005][T18405] lock(&n->list_lock); [ 411.217011][T18405] lock(&port->lock#2); [ 411.217020][T18405] lock(&n->list_lock); [ 411.217028][T18405] lock(console_owner); [ 411.217034][T18405] [ 411.217034][T18405] *** DEADLOCK *** [ 411.217034][T18405] [ 411.217037][T18405] locks held by syz.2.3186/18405: 11, last CPU#1: [ 411.217045][T18405] #0: ffff88803d2355f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 411.217068][T18405] #1: ffff88802b288460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 411.217095][T18405] #2: ffff88805c19d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 411.217120][T18405] #3: ffffffff8fa7d5e0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 411.217152][T18405] #4: ffff8880227ec1f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 411.217178][T18405] #5: ffff888025da51b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 411.217203][T18405] #6: ffffffff8ec7a830 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 411.217227][T18405] #7: ffffffff8ef940c0 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 411.217250][T18405] #8: ffff88802743d618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 411.217280][T18405] #9: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 411.217302][T18405] #10: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 411.217339][T18405] [ 411.217339][T18405] stack backtrace: [ 411.217350][T18405] CPU: 1 UID: 0 PID: 18405 Comm: syz.2.3186 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.217368][T18405] Tainted: [L]=SOFTLOCKUP [ 411.217373][T18405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.217381][T18405] Call Trace: [ 411.217386][T18405] [ 411.217392][T18405] dump_stack_lvl+0x100/0x190 [ 411.217410][T18405] print_circular_bug.cold+0x178/0x1be [ 411.217427][T18405] check_noncircular+0x146/0x160 [ 411.217445][T18405] check_prev_add+0xeb/0xe60 [ 411.217462][T18405] ? printk_get_next_message+0x30a/0x6c0 [ 411.217476][T18405] __lock_acquire+0x1492/0x1ec0 [ 411.217496][T18405] lock_acquire+0x1b9/0x370 [ 411.217513][T18405] ? console_lock_spinning_enable+0x61/0x80 [ 411.217525][T18405] ? console_lock_spinning_enable+0x4a/0x80 [ 411.217537][T18405] console_lock_spinning_enable+0x72/0x80 [ 411.217549][T18405] ? console_lock_spinning_enable+0x61/0x80 [ 411.217561][T18405] console_flush_one_record+0x737/0xf10 [ 411.217574][T18405] ? __pfx_console_flush_one_record+0x10/0x10 [ 411.217588][T18405] ? is_printk_cpu_sync_owner+0x32/0x40 [ 411.217602][T18405] console_unlock+0x103/0x260 [ 411.217614][T18405] ? __pfx_console_unlock+0x10/0x10 [ 411.217626][T18405] ? do_raw_spin_unlock+0x145/0x1e0 [ 411.217637][T18405] ? _printk+0xcf/0x110 [ 411.217647][T18405] vprintk_emit+0x407/0x6b0 [ 411.217659][T18405] ? __pfx_vprintk_emit+0x10/0x10 [ 411.217673][T18405] _printk+0xcf/0x110 [ 411.217683][T18405] ? __pfx__printk+0x10/0x10 [ 411.217695][T18405] __slab_bug+0x4f/0xb0 [ 411.217708][T18405] slab_bug+0x5d/0x80 [ 411.217719][T18405] __kmem_cache_shutdown.cold+0x39/0x177 [ 411.217734][T18405] kmem_cache_destroy+0x73/0x190 [ 411.217745][T18405] virtio_gpu_free_vbufs+0x38/0x80 [ 411.217760][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.217771][T18405] virtio_gpu_release+0x5c/0x1c0 [ 411.217782][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.217794][T18405] drm_dev_put.part.0+0xbd/0x140 [ 411.217805][T18405] drm_dev_put+0x1f/0x30 [ 411.217814][T18405] virtio_dev_remove+0xb8/0x170 [ 411.217825][T18405] ? __pfx_virtio_dev_remove+0x10/0x10 [ 411.217835][T18405] device_remove+0xcb/0x180 [ 411.217845][T18405] device_release_driver_internal+0x44e/0x620 [ 411.217858][T18405] bus_remove_device+0x2bc/0x560 [ 411.217875][T18405] ? __pfx_bus_remove_device+0x10/0x10 [ 411.217891][T18405] ? __pfx_device_remove_attrs+0x10/0x10 [ 411.217909][T18405] device_del+0x376/0x9b0 [ 411.217919][T18405] ? __pfx_device_del+0x10/0x10 [ 411.217929][T18405] ? __pfx___might_resched+0x10/0x10 [ 411.217945][T18405] ? __pfx_pci_device_is_present+0x10/0x10 [ 411.217958][T18405] device_unregister+0x1d/0xe0 [ 411.217968][T18405] unregister_virtio_device+0x39/0x60 [ 411.217980][T18405] virtio_pci_remove+0x7c/0x110 [ 411.218001][T18405] pci_device_remove+0xb2/0x1d0 [ 411.218022][T18405] ? __pfx_pci_device_remove+0x10/0x10 [ 411.218042][T18405] device_remove+0xcb/0x180 [ 411.218057][T18405] device_release_driver_internal+0x44e/0x620 [ 411.218075][T18405] pci_stop_bus_device+0x120/0x160 [ 411.218099][T18405] pci_stop_and_remove_bus_device+0x58/0xa0 [ 411.218126][T18405] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 411.218149][T18405] remove_store+0x123/0x140 [ 411.218165][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.218182][T18405] ? find_held_lock+0x2b/0x80 [ 411.218202][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.218226][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.218253][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.218269][T18405] dev_attr_store+0x58/0x80 [ 411.218289][T18405] ? __pfx_dev_attr_store+0x10/0x10 [ 411.218309][T18405] sysfs_kf_write+0xf2/0x150 [ 411.218340][T18405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.218358][T18405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.218382][T18405] vfs_write+0x6af/0x1050 [ 411.218401][T18405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 411.218422][T18405] ? __pfx_vfs_write+0x10/0x10 [ 411.218443][T18405] ? find_held_lock+0x2b/0x80 [ 411.218469][T18405] ksys_write+0x12a/0x250 [ 411.218491][T18405] ? __pfx_ksys_write+0x10/0x10 [ 411.218515][T18405] do_syscall_64+0x123/0x790 [ 411.218536][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.218556][T18405] RIP: 0033:0x7fcec919e0d9 [ 411.218574][T18405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.218592][T18405] RSP: 002b:00007fceca0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.218611][T18405] RAX: ffffffffffffffda RBX: 00007fcec9425fa0 RCX: 00007fcec919e0d9 [ 411.218622][T18405] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 411.218633][T18405] RBP: 00007fcec9235024 R08: 0000000000000000 R09: 0000000000000000 [ 411.218644][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.218655][T18405] R13: 00007fcec9426038 R14: 00007fcec9425fa0 R15: 00007ffcfec80568 [ 411.218674][T18405] [ 411.648209][T18405] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 411.651851][T18405] ----------------------------------------------------------------------------- [ 411.651851][T18405] [ 411.655197][T18405] Object 0xffff8880623d2000 @offset=0 [ 411.657074][T18405] Object 0xffff8880623d2118 @offset=280 [ 411.659003][T18405] Object 0xffff8880623d2230 @offset=560 [ 411.660789][T18405] Slab 0xffffea000188f480 objects=29 used=3 fp=0xffff8880623d2348 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 411.665478][T18405] ------------[ cut here ]------------ [ 411.667307][T18405] 1 [ 411.667315][T18405] WARNING: mm/slub.c:1245 at __slab_err+0x15/0x20, CPU#1: syz.2.3186/18405 [ 411.671297][T18405] Modules linked in: [ 411.672718][T18405] CPU: 1 UID: 0 PID: 18405 Comm: syz.2.3186 Tainted: G B L syzkaller #0 PREEMPT(full) [ 411.676352][T18405] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 411.678117][T18405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.681925][T18405] RIP: 0010:__slab_err+0x15/0x20 [ 411.683518][T18405] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 411.690131][T18405] RSP: 0018:ffffc9000718f740 EFLAGS: 00010046 [ 411.693018][T18405] RAX: 0000000000080000 RBX: ffffc9000718f790 RCX: ffffc9000cd02000 [ 411.695685][T18405] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff88805572a580 [ 411.698231][T18405] RBP: ffff88802743d618 R08: 0000000000000007 R09: 0000000000000000 [ 411.700842][T18405] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 411.703468][T18405] R13: ffff8880623d3fb8 R14: ffff88802743d600 R15: ffffea000188f480 [ 411.706068][T18405] FS: 00007fceca0fe6c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 411.708778][T18405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.710924][T18405] CR2: 00007fae38f5da08 CR3: 000000004ab07000 CR4: 0000000000352ef0 [ 411.713726][T18405] Call Trace: [ 411.714841][T18405] [ 411.715802][T18405] __kmem_cache_shutdown.cold+0x16e/0x177 [ 411.717798][T18405] kmem_cache_destroy+0x73/0x190 [ 411.719702][T18405] virtio_gpu_free_vbufs+0x38/0x80 [ 411.721538][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.723382][T18405] virtio_gpu_release+0x5c/0x1c0 [ 411.725045][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.726757][T18405] drm_dev_put.part.0+0xbd/0x140 [ 411.728246][T18405] drm_dev_put+0x1f/0x30 [ 411.729702][T18405] virtio_dev_remove+0xb8/0x170 [ 411.731659][T18405] ? __pfx_virtio_dev_remove+0x10/0x10 [ 411.733749][T18405] device_remove+0xcb/0x180 [ 411.735560][T18405] device_release_driver_internal+0x44e/0x620 [ 411.738317][T18405] bus_remove_device+0x2bc/0x560 [ 411.740114][T18405] ? __pfx_bus_remove_device+0x10/0x10 [ 411.742090][T18405] ? __pfx_device_remove_attrs+0x10/0x10 [ 411.744126][T18405] device_del+0x376/0x9b0 [ 411.745544][T18405] ? __pfx_device_del+0x10/0x10 [ 411.747128][T18405] ? __pfx___might_resched+0x10/0x10 [ 411.749042][T18405] ? __pfx_pci_device_is_present+0x10/0x10 [ 411.750933][T18405] device_unregister+0x1d/0xe0 [ 411.752545][T18405] unregister_virtio_device+0x39/0x60 [ 411.754498][T18405] virtio_pci_remove+0x7c/0x110 [ 411.755976][T18405] pci_device_remove+0xb2/0x1d0 [ 411.757560][T18405] ? __pfx_pci_device_remove+0x10/0x10 [ 411.759501][T18405] device_remove+0xcb/0x180 [ 411.761128][T18405] device_release_driver_internal+0x44e/0x620 [ 411.763360][T18405] pci_stop_bus_device+0x120/0x160 [ 411.765319][T18405] pci_stop_and_remove_bus_device+0x58/0xa0 [ 411.767406][T18405] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 411.769697][T18405] remove_store+0x123/0x140 [ 411.771251][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.772924][T18405] ? find_held_lock+0x2b/0x80 [ 411.774592][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.776242][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.777749][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.779394][T18405] dev_attr_store+0x58/0x80 [ 411.780936][T18405] ? __pfx_dev_attr_store+0x10/0x10 [ 411.782586][T18405] sysfs_kf_write+0xf2/0x150 [ 411.784180][T18405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.785862][T18405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.787607][T18405] vfs_write+0x6af/0x1050 [ 411.789117][T18405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 411.790934][T18405] ? __pfx_vfs_write+0x10/0x10 [ 411.792432][T18405] ? find_held_lock+0x2b/0x80 [ 411.793989][T18405] ksys_write+0x12a/0x250 [ 411.795322][T18405] ? __pfx_ksys_write+0x10/0x10 [ 411.796872][T18405] do_syscall_64+0x123/0x790 [ 411.798640][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.801085][T18405] RIP: 0033:0x7fcec919e0d9 [ 411.802727][T18405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.809299][T18405] RSP: 002b:00007fceca0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.811861][T18405] RAX: ffffffffffffffda RBX: 00007fcec9425fa0 RCX: 00007fcec919e0d9 [ 411.814399][T18405] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 411.816896][T18405] RBP: 00007fcec9235024 R08: 0000000000000000 R09: 0000000000000000 [ 411.819574][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.822162][T18405] R13: 00007fcec9426038 R14: 00007fcec9425fa0 R15: 00007ffcfec80568 [ 411.825846][T18405] [ 411.827302][T18405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.830072][T18405] CPU: 1 UID: 0 PID: 18405 Comm: syz.2.3186 Tainted: G B L syzkaller #0 PREEMPT(full) [ 411.833498][T18405] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 411.835324][T18405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.838401][T18405] Call Trace: [ 411.839563][T18405] [ 411.840524][T18405] dump_stack_lvl+0x100/0x190 [ 411.841966][T18405] vpanic+0x553/0x970 [ 411.843274][T18405] ? __pfx_vpanic+0x10/0x10 [ 411.845004][T18405] ? lock_release+0x24d/0x310 [ 411.846561][T18405] panic+0xd1/0xe0 [ 411.847759][T18405] ? __pfx_panic+0x10/0x10 [ 411.849203][T18405] check_panic_on_warn.cold+0x19/0x34 [ 411.850791][T18405] ? __slab_err+0x15/0x20 [ 411.852233][T18405] __warn.cold+0x191/0x318 [ 411.853754][T18405] __report_bug+0x30f/0x440 [ 411.855366][T18405] ? __slab_err+0x15/0x20 [ 411.857066][T18405] ? __pfx___report_bug+0x10/0x10 [ 411.859289][T18405] ? irq_work_queue+0xd1/0x100 [ 411.860966][T18405] ? __wake_up_klogd+0xe5/0x140 [ 411.862540][T18405] ? vprintk_emit+0x1c9/0x6b0 [ 411.864044][T18405] ? __pfx_vprintk_emit+0x10/0x10 [ 411.865784][T18405] ? __pfx_vprintk_emit+0x10/0x10 [ 411.867437][T18405] ? __slab_err+0x15/0x20 [ 411.868881][T18405] report_bug+0xb3/0x220 [ 411.870240][T18405] ? __slab_err+0x15/0x20 [ 411.871587][T18405] handle_bug+0x16a/0x2a0 [ 411.872995][T18405] exc_invalid_op+0x17/0x50 [ 411.874627][T18405] asm_exc_invalid_op+0x1a/0x20 [ 411.876446][T18405] RIP: 0010:__slab_err+0x15/0x20 [ 411.878500][T18405] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 411.884781][T18405] RSP: 0018:ffffc9000718f740 EFLAGS: 00010046 [ 411.886727][T18405] RAX: 0000000000080000 RBX: ffffc9000718f790 RCX: ffffc9000cd02000 [ 411.889347][T18405] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff88805572a580 [ 411.891995][T18405] RBP: ffff88802743d618 R08: 0000000000000007 R09: 0000000000000000 [ 411.894709][T18405] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 411.897626][T18405] R13: ffff8880623d3fb8 R14: ffff88802743d600 R15: ffffea000188f480 [ 411.900645][T18405] ? add_taint+0x6d/0xb0 [ 411.902025][T18405] __kmem_cache_shutdown.cold+0x16e/0x177 [ 411.903795][T18405] kmem_cache_destroy+0x73/0x190 [ 411.905589][T18405] virtio_gpu_free_vbufs+0x38/0x80 [ 411.907372][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.909226][T18405] virtio_gpu_release+0x5c/0x1c0 [ 411.910818][T18405] ? __pfx_virtio_gpu_release+0x10/0x10 [ 411.912708][T18405] drm_dev_put.part.0+0xbd/0x140 [ 411.914402][T18405] drm_dev_put+0x1f/0x30 [ 411.916047][T18405] virtio_dev_remove+0xb8/0x170 [ 411.917942][T18405] ? __pfx_virtio_dev_remove+0x10/0x10 [ 411.920303][T18405] device_remove+0xcb/0x180 [ 411.922038][T18405] device_release_driver_internal+0x44e/0x620 [ 411.924188][T18405] bus_remove_device+0x2bc/0x560 [ 411.925976][T18405] ? __pfx_bus_remove_device+0x10/0x10 [ 411.927934][T18405] ? __pfx_device_remove_attrs+0x10/0x10 [ 411.929865][T18405] device_del+0x376/0x9b0 [ 411.931192][T18405] ? __pfx_device_del+0x10/0x10 [ 411.932788][T18405] ? __pfx___might_resched+0x10/0x10 [ 411.934777][T18405] ? __pfx_pci_device_is_present+0x10/0x10 [ 411.936754][T18405] device_unregister+0x1d/0xe0 [ 411.938537][T18405] unregister_virtio_device+0x39/0x60 [ 411.940369][T18405] virtio_pci_remove+0x7c/0x110 [ 411.942206][T18405] pci_device_remove+0xb2/0x1d0 [ 411.943760][T18405] ? __pfx_pci_device_remove+0x10/0x10 [ 411.945382][T18405] device_remove+0xcb/0x180 [ 411.946764][T18405] device_release_driver_internal+0x44e/0x620 [ 411.949059][T18405] pci_stop_bus_device+0x120/0x160 [ 411.951367][T18405] pci_stop_and_remove_bus_device+0x58/0xa0 [ 411.953497][T18405] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 411.955840][T18405] remove_store+0x123/0x140 [ 411.957284][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.959334][T18405] ? find_held_lock+0x2b/0x80 [ 411.961463][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.963685][T18405] ? sysfs_file_kobj+0xe4/0x290 [ 411.966061][T18405] ? __pfx_remove_store+0x10/0x10 [ 411.968295][T18405] dev_attr_store+0x58/0x80 [ 411.969741][T18405] ? __pfx_dev_attr_store+0x10/0x10 [ 411.971281][T18405] sysfs_kf_write+0xf2/0x150 [ 411.972956][T18405] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.974911][T18405] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.976685][T18405] vfs_write+0x6af/0x1050 [ 411.978239][T18405] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 411.980189][T18405] ? __pfx_vfs_write+0x10/0x10 [ 411.981691][T18405] ? find_held_lock+0x2b/0x80 [ 411.983237][T18405] ksys_write+0x12a/0x250 [ 411.984666][T18405] ? __pfx_ksys_write+0x10/0x10 [ 411.986153][T18405] do_syscall_64+0x123/0x790 [ 411.987714][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.989897][T18405] RIP: 0033:0x7fcec919e0d9 [ 411.991623][T18405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.997943][T18405] RSP: 002b:00007fceca0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.000931][T18405] RAX: ffffffffffffffda RBX: 00007fcec9425fa0 RCX: 00007fcec919e0d9 [ 412.003596][T18405] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 412.006523][T18405] RBP: 00007fcec9235024 R08: 0000000000000000 R09: 0000000000000000 [ 412.009156][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.011640][T18405] R13: 00007fcec9426038 R14: 00007fcec9425fa0 R15: 00007ffcfec80568 [ 412.014214][T18405] [ 412.015959][T18405] Kernel Offset: disabled [ 412.017504][T18405] Rebooting in 86400 seconds..