last executing test programs: 1m11.437951795s ago: executing program 3 (id=332): modify_ldt$write(0x1, &(0x7f0000000140)={0x800, 0x20000800, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f00000002c0)="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", 0xfe, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "000000000000000000000000000000000000000000000000001200"}) 1m11.27913166s ago: executing program 3 (id=333): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0xffff, 0x6, 0x9, 0x1}, 0x0, 0x4}, [{0x400, 0x504d, 0x20ae, 0x7, 0x4, 0xb}, {0x8, 0x3, 0x7, 0x9, 0x4, 0x4}, {0x762, 0x1, 0x5000, 0x1, 0xfffffff7, 0x6ac5}, {0x85b5, 0x0, 0x5, 0xc3, 0x0, 0x7f}, {0x7, 0x523, 0x8, 0xd, 0x9, 0x6}, {0x120, 0xfff, 0x4, 0x80, 0x0, 0x5}, {0x7fff, 0x4, 0x2, 0x200, 0x8, 0x3}, {0x9, 0x101, 0x81, 0x8001, 0xfffffffe, 0x7f}, {0x6, 0x0, 0x5, 0x10, 0x7fff, 0x7}, {0xffffb215, 0x400, 0x6, 0x7ff, 0x0, 0x9}, {0x1, 0xffff, 0x10, 0x6, 0xffff, 0x5}, {0x6, 0x5, 0x6, 0x9, 0x8, 0x4}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x2}, {0x7fff, 0x6, 0x7, 0x6, 0x4d2, 0xa}, {0x4, 0x8, 0xd, 0x4, 0x2eb, 0x9}, {0x2, 0x3, 0x100, 0x2, 0x3, 0xbbf}, {0x0, 0x3ff, 0x9, 0x1, 0xf, 0x4}, {0x7, 0xfff, 0xa, 0x6, 0x200, 0x25d}, {0x0, 0x6, 0x0, 0x1, 0x0, 0x2}, {0x5, 0x4fb5, 0x7, 0x2, 0x3}, {0x3, 0xfffffffd, 0x4, 0x80000000, 0x9a, 0x10001}, {0x2, 0x9, 0x7fffffff, 0x5, 0x5, 0x6}, {0x5, 0x8, 0x2, 0x400, 0x4}, {0x7, 0x4, 0x8273, 0x3ff, 0x6, 0xc}, {0x4006008c, 0x80000001, 0x5, 0x3, 0x6, 0xe}, {0x3d8, 0x4, 0x2, 0x400, 0x9, 0x1}, {0x2, 0x5, 0x101, 0xf, 0x5, 0x33}, {0x9, 0x0, 0x1, 0x2, 0x2, 0x1}, {0x8, 0xab, 0x400, 0x7, 0x7, 0x3fa33a2}, {0x7f, 0x1, 0x8000, 0x6, 0xffffffff, 0x5}, {0x6, 0x6, 0x1, 0x8, 0x1a000, 0x6}, {0x9, 0x7, 0x1f6f, 0x1, 0x5c6d, 0x2}, {0xfffffffb, 0xe104, 0x9, 0x400000, 0x9, 0x5}, {0xfffffff6, 0xe6df, 0x1, 0x4, 0x5, 0x4}, {0x7f, 0x1, 0x24000, 0x81, 0x3, 0x2}, {0x7f, 0x8, 0x7, 0x5, 0x0, 0x4}, {0x1, 0x401, 0x6, 0xe9, 0xffff, 0xe}, {0x1, 0x4438, 0x10000, 0x80, 0xff, 0xff}, {0x50c, 0x10, 0x2, 0x2, 0x3, 0x7}, {0x8, 0x4, 0x6, 0x4, 0x30000000, 0x7}, {0x1, 0x6, 0x9, 0x5, 0x3786, 0x7}, {0x2, 0x7fffffff, 0x3, 0xfffffff9, 0x1, 0x100}, {0xb3d2, 0x1c, 0xa, 0x5, 0x2, 0x4}, {0x0, 0x0, 0x1, 0x705bf47a, 0x6, 0x7}, {0x4, 0x85c, 0x7, 0x3, 0xffffffc0, 0x7}, {0x1ff, 0x6, 0x5, 0x1, 0x5, 0xa50}, {0x8, 0x3, 0x5, 0xfe, 0x8, 0x7}, {0x7, 0x80000001, 0xca8, 0x9, 0x1, 0x17d}, {0x4, 0x8, 0xa, 0x5, 0x7, 0x4}, {0x2, 0x8, 0xffff26df, 0x2, 0x1, 0xa}, {0xfffffff9, 0x8, 0x5, 0xf7, 0xf9, 0x10}, {0x82c0, 0x7, 0x200, 0x2674, 0x2}, {0x4, 0x5, 0x9, 0x3, 0x0, 0x6}, {0x1, 0xeea0, 0x4, 0x7fffffff, 0x2, 0x9}, {0x8, 0x4, 0x6, 0x6, 0x1c20000, 0xe}, {0x7, 0x3, 0x2, 0x9, 0x400, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x0, 0x3}, {0xf, 0x1, 0x9, 0xffff0000, 0x9d, 0x9}, {0x1, 0x7, 0x4, 0x901e, 0x1, 0x7}, {0x101, 0x7, 0x9f, 0x3, 0x10, 0x323b}, {0x1000, 0xd, 0x6575, 0xfffffff9, 0x6, 0x9}, {0x1a, 0x9a, 0xff, 0xf, 0x0, 0x3}, {0x3, 0xed34, 0x2, 0x8, 0xfffffff7, 0x37b}, {0x9, 0x9, 0x45e3, 0xbecd, 0x7, 0x5}, {0x8, 0x2, 0x1, 0x6, 0x2, 0x40}, {0xffffb779, 0x4f8, 0x6, 0x8, 0x3, 0x7}, {0x3, 0x327d, 0x6, 0x5, 0x10001, 0xe7}, {0xfffffffc, 0x1e, 0x6000, 0x3, 0x8000, 0x4}, {0x0, 0x1, 0x0, 0x1, 0x3, 0x2}, {0x1, 0x401, 0x7fff, 0x3, 0xb966, 0x10001}, {0x0, 0x5, 0x1, 0x0, 0x5, 0xfffffffa}, {0x2e9, 0xde0b, 0x7f, 0x0, 0xfbb, 0x1}, {0xb2000000, 0x400, 0xffff0000, 0x2, 0x400, 0x2}, {0x3, 0x1, 0x4, 0x10001, 0x2, 0x2}, {0x7, 0x80000001, 0x4, 0x7, 0x8, 0x4}, {0x8001, 0x4, 0x7ff, 0x6, 0x3ff, 0x4a7e95ef}, {0x7, 0x1, 0x7, 0x8, 0x81, 0xfffffff8}, {0xe12f, 0x0, 0x8, 0x7, 0x9, 0x7ff}, {0x9, 0x9c, 0xffffffff, 0x6, 0x3, 0x1}, {0x3, 0x1000, 0x100, 0x2, 0x8, 0xe42e}, {0xd, 0x1995, 0x6, 0x7, 0x2, 0x5}, {0x6, 0x5, 0x2, 0x1, 0x100, 0x400}, {0x3, 0x4, 0x9, 0x43, 0x8000, 0x3}, {0x1000, 0x101, 0x6, 0x2, 0xfffffff9, 0xfffffffa}, {0x8, 0x6, 0x26000000, 0x8, 0x80000000, 0x8000}, {0x7f, 0x5, 0xf74e, 0x9, 0x6, 0x8108}, {0x3, 0x8, 0x0, 0x6044, 0x2, 0x6}, {0xfffffffd, 0x2, 0x3, 0xfc1, 0xf, 0xfff}, {0x0, 0x0, 0x7, 0x80000001, 0x2, 0x80000000}, {0x3, 0x1, 0x9, 0x70, 0x81, 0x21c5}, {0x40, 0x5, 0xf761, 0x2, 0x8, 0x1}, {0x8, 0x1, 0x9f44, 0x3, 0x1, 0x4}, {0x6, 0x3d, 0x8, 0x8, 0x10001, 0x4}, {0x6, 0x9, 0x30, 0x7, 0x4, 0x6}, {0x7fff, 0x10, 0xd8f, 0x38000, 0xff, 0x31ab}, {0x2, 0x3, 0x9, 0x5d10, 0x7f, 0x7}, {0x5, 0x200, 0x8, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x2, 0x0, 0x8, 0x5}, {0x80000001, 0x1, 0x1, 0x6, 0xb7f, 0x6}, {0x7, 0x4, 0x6, 0x5, 0x3}, {0x9, 0x9, 0x0, 0x6, 0x8, 0x8}, {0xc82, 0x4, 0x0, 0x614, 0x5b025791, 0x4}, {0x400, 0x2, 0x6, 0x22404ff0, 0x8}, {0x4, 0x80000001, 0x400, 0x18000000, 0x80000001, 0x1}, {0x5, 0x5, 0x6, 0xfff, 0xfffffffe, 0x10001}, {0x5, 0x87, 0x1, 0x5aa, 0x1, 0x800}, {0x7, 0x7, 0x2, 0xed0, 0x2, 0x7f}, {0x2, 0x4, 0x5, 0xb9, 0x8, 0xfff}, {0x1, 0x9, 0xe, 0x1, 0xb}, {0xfffffff9, 0x7, 0x9, 0x9e, 0x76, 0x80000001}, {0x9, 0x5b, 0x101, 0x8, 0x2}, {0x2, 0x6d3f, 0x8000, 0x2353, 0x27a6, 0x766e17e}, {0x6, 0x9, 0xd, 0xffffffff, 0x4, 0xa7d2}, {0x8, 0x2, 0x8, 0x1, 0xfffffffa, 0x2}, {0x4, 0x81, 0x959, 0x39, 0x2, 0x8}, {0xbf0, 0xfff, 0x5, 0x1000, 0x1, 0x6cac}, {0x1ff, 0x1, 0x9, 0x9, 0x0, 0x7}, {0x80000000, 0x2f, 0xb, 0x0, 0x4, 0x4}, {0x6, 0x100, 0x116, 0xbc6, 0xfff, 0x3}, {0x8, 0x508, 0x7fffffff, 0x83bc, 0x7, 0x3}, {0x4, 0x2, 0x3, 0x10fd, 0x800, 0x8}, {0x8000, 0xbab, 0xffff0000, 0x8000, 0x6, 0xe5}, {0x10, 0x9, 0x1ff, 0x400, 0x1, 0x7}, {0x8, 0x64, 0x7, 0x1d2, 0xfffffffa, 0x8}, {0x3, 0x7, 0x4, 0x8, 0x1}, {0x9, 0x5, 0x800, 0xfffffffb, 0x4, 0xf}, {0x4f, 0x0, 0x8, 0x2, 0xfffffc00, 0x105}, {0x5, 0x7, 0xb, 0xe9, 0x4, 0xc00000}], [{0x1}, {}, {0x5}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4, 0xf5ca9f525ddf3665}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x5, 0x1}, {}, {0x3}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) r2 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write$md_new_array(r2, &(0x7f0000000680)={'md', @num=0x0}, 0x3) openat$md(0xffffffffffffff9c, &(0x7f00000006c0)={'/dev/md', @num=0x0}, 0x2, 0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000006c0)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r3, 0x40480923, &(0x7f0000000700)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000780)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r3, 0x400c0930, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getrlimit(0x0, &(0x7f0000000600)) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) (async) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f0000000340)="abd9", 0x2}, {&(0x7f0000000380)="33070085e14a00c0e16cf560734f8244a2287802c59099f5147de1e5fa38677926307321d046da9f0c12b990707a669aaf738df0", 0x34}], 0x3) (async) writev(r7, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f0000000340)="abd9", 0x2}, {&(0x7f0000000380)="33070085e14a00c0e16cf560734f8244a2287802c59099f5147de1e5fa38677926307321d046da9f0c12b990707a669aaf738df0", 0x34}], 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'batadv0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010", @ANYRESOCT=r8], 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) 1m10.448846449s ago: executing program 3 (id=340): unshare(0x20060400) (async) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7e, 0x3000, 0x0, r2}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x5, 0x3000, 0x0, r2, 0x4}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000040)=0x7ffffffd, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) (async) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) 1m10.320651068s ago: executing program 3 (id=341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x0, 0x0) 1m10.260012156s ago: executing program 3 (id=342): socket(0x10, 0x2, 0x7) (async) r0 = socket(0x10, 0x2, 0x7) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc00) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r2, 0xe3036000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0xbc) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000480)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x500, 0x2d3, 0x1, 0x280000, 0xdd9f83, 0xc, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x6, {0x0, 0x6fd8e84b}, 0x3, 0x9}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) write(r5, &(0x7f0000000380)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 1m10.170788042s ago: executing program 3 (id=343): modify_ldt$write(0x1, &(0x7f0000000140)={0x800, 0x20000800, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f00000002c0)="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", 0xfe, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 54.990161536s ago: executing program 32 (id=343): modify_ldt$write(0x1, &(0x7f0000000140)={0x800, 0x20000800, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f00000002c0)="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", 0xfe, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 34.188024833s ago: executing program 1 (id=767): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r0, 0x0, 0x4084) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r5, 0x2, {0x0, 0xff}, 0xfe}, 0x18) 33.970757861s ago: executing program 1 (id=770): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="c0214500", 0x4}], 0x1, 0xf, 0x8001) 33.970088176s ago: executing program 1 (id=771): prctl$PR_SET_IO_FLUSHER(0x50, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x108) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x108) (async) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) (async) 33.969279998s ago: executing program 1 (id=772): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1a, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}}, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001800f0000003c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 33.890476701s ago: executing program 1 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/lru_gen\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20023000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) pread64(r2, &(0x7f0000000640), 0x100, 0x3f00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x12, r4, 0x80000000) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000004c0)=@objname={'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, 'unconfined', 0x20, 0x3, 0x20, './mnt\x00'}, 0x4d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x3f) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./mnt\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x7}, [{0x2, 0x1}, {0x2, 0x2}], {0x4, 0x1}, [], {}, {0x20, 0x5}}, 0x34, 0x2) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}, {0x40000004, 0x9, 0x6, 0x6, 0xfffffffe, 0xb61, 0x1}]}) 33.677171766s ago: executing program 1 (id=774): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0xa, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000001000)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16ac14fe1607080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001100), &(0x7f0000001140)}, 0x2a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x7fff, r0, 'id0\x00'}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00000a1000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 26.560756286s ago: executing program 4 (id=841): r0 = syz_open_dev$evdev(&(0x7f0000126400), 0xb, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0xfffe}, 0xe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) listen(r1, 0x0) shutdown(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/current\x00') read$eventfd(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000085d13e19ed2ba2606f000000000000138cc33696802eae9b9919fd93533a81f75360568c533ba4e13ea4fd4468b92c2d1417337c4bebef1141db6ba3a662affd143d94fc1e73966743fa279f0694a135145e18e255150c896b36841ee0c6b0ea1c6ae2254799f3a50cc364657b6bc981ccd67b8d07234429eaf9e52f1aab2acfdb6e610fe6062f75ca0bcb7ce02a94446ef94a1afab66f894535d20faef26fe39d861b631c298b7c54dfcb82c3e57670f205c0f237262124ed6ac68212a9ae0fbba7fbc659b2e0e41a3fb3a5", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x84) mknodat$null(r4, &(0x7f0000000400)='./file0\x00', 0x2000, 0x103) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRESDEC=r4, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20004091) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0xae) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x2, 0x1ff}, 0x1) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000126440)=""/220) 26.508280432s ago: executing program 4 (id=842): socket$pppoe(0x18, 0x1, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x6c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x40, r6, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='7', 0x1) write(r7, &(0x7f0000000380)='syz0:', 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf25010000001c0002800c0001800800483c191900000c000180080001005b00000004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40088c4) (async) fchdir(r1) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='gfs2meta\x00', 0x42000, 0x0) (async, rerun: 64) r11 = syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r12, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000780)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) setreuid(0xee01, 0xee01) (async) pread64(r11, &(0x7f0000000100)=""/15, 0xf, 0x4) 26.368725639s ago: executing program 4 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffb0}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4044881}}], 0x2, 0x20000880) r5 = fsopen(&(0x7f00000003c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000740)='source', &(0x7f0000000780)='[:::\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x3ffffffffe, {0x2, 0xff, 0x3}, 0x2}, 0x18) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r7, 0xffffffffffffffff, {0x0, 0x0, 0x3}, 0xfe}, 0x18) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004500001c0010000000119078ac1414bbac14140f4e244e2000089078"], 0x0) r9 = dup(0xffffffffffffffff) lsm_get_self_attr(0x68, 0x0, &(0x7f00000002c0), 0x0) read$FUSE(r9, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0) r10 = getegid() chown(&(0x7f0000000400)='./mnt\x00', 0x0, r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) mount$bpf(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x91ac7e, &(0x7f0000000980)={[{@uid={'uid', 0x3d, r11}}]}) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@private=0xa010101, @in6=@mcast2, 0x4e24, 0x8, 0x4e24, 0x6, 0xa, 0x80, 0x80, 0x2b, r7, r11}, {0xffffffffffffff7f, 0x2, 0x3c60c424, 0x2, 0x9, 0xe19, 0x2, 0x8000000000000000}, {0xf, 0x101, 0x9, 0x60a}, 0x1, 0x6e6bbc, 0x1, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x3, 0x0, 0x4, 0x4b5b1bee, 0x2, 0x9}}, 0xe8) 26.27079035s ago: executing program 4 (id=844): creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x208e24b) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x7ffffffffc) ptrace$pokeuser(0x6, r1, 0x388, 0xffefffffff7f0504) capset(&(0x7f0000000340)={0x19980330, r1}, &(0x7f0000000380)={0x72, 0x3ff, 0x9, 0x5, 0x6718, 0x4}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 26.208759845s ago: executing program 4 (id=845): mknod$loop(&(0x7f0000000200)='./file0\x00', 0xfff, 0x1) landlock_create_ruleset(&(0x7f0000000280)={0x100}, 0x6d, 0x0) r0 = memfd_create(&(0x7f00000024c0)='\b\xb9F\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd8n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\xca\x04\xb2C\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x02\x00\x00\x00\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\xc3\xce\xbb\xfb\xcf\xf4\xb5\xf0\x14\x8b]V\xc1O\xac\xe3V\xfe\x98\xd8\\p\xc1\x83\xb8\xb2\xc9\xa5\x03\xd5v\x05\xae\xd9\x05\xcc\xa7\xee*AV\xa2\xea4R\xc7aB\xd0]U\n B\xa1\x13\xf7\xcd\xe1~ \x01\x1f\x19\v\xbbH\xb8n\\\x88 \xda&K\xfe\xb7\x98+\xc2\xd6\x90\xc3A\x00&L\xbew\r\x9f\xf0\xef\xa1NP\x935\xdd\"\xf5\xe4\'\x99KR\xdbX\x82Wn i\x95i\x83\xbb\x8a\x9a\xb6\xa3G\xa2{iW\xda\xb4\")\x12mq\x7f\a\x89\xa3\xde3\x98\xb3~\xfc', 0x7) pipe2(&(0x7f00000026c0)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x9, 0x1) inotify_add_watch(r1, &(0x7f0000002700)='./sec/tomoyo/domain_policy/file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) listxattr(&(0x7f00000002c0)='./tracing\x00', &(0x7f0000002440)=""/127, 0x7f) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/tomoyo/domain_policy/file0\x00', 0x802, 0x108) write(r2, &(0x7f0000000100)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 0-65535\nnetwork inet dgram bind @grp1 0-65535\nselect pid=2\n', 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='nsfs\x00', 0x1000020, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000002380)="eb18ac207b0d872445acd021a809a872f216d5ff3e08da69990f376431ba3f0e2171b1c64b63b2d7661ca58432582b10034f4d06da2d51c0fd94b6737306b85e43c2a5ba89872dc4a4d3f1f74078189e87f73e2532c723c8a70fbf985efa4ee980a0861c02da3374fe64a91b6bbc468c7c278fba0936429c609ffad747a94c48bd59f8653bb2db279bb9de034ac782d0063d9f", 0x93) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2084) 25.900651986s ago: executing program 4 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2128030, &(0x7f00000002c0)={[{@xino_auto}, {@userxattr}, {@redirect_dir_follow}, {@verity_require}, {@metacopy_on}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f00000006c0)}, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2128030, &(0x7f00000002c0)={[{@xino_auto}, {@userxattr}, {@redirect_dir_follow}, {@verity_require}, {@metacopy_on}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000540), &(0x7f0000000640)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f00000006c0)}, 0x20) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) (async) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) (async) 25.814985894s ago: executing program 33 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2128030, &(0x7f00000002c0)={[{@xino_auto}, {@userxattr}, {@redirect_dir_follow}, {@verity_require}, {@metacopy_on}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f00000006c0)}, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2128030, &(0x7f00000002c0)={[{@xino_auto}, {@userxattr}, {@redirect_dir_follow}, {@verity_require}, {@metacopy_on}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000540), &(0x7f0000000640)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f00000006c0)}, 0x20) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) (async) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) (async) 18.248630834s ago: executing program 34 (id=774): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000dc0)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0xa, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000001000)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001100), &(0x7f0000001140)}, 0x2a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x7fff, r0, 'id0\x00'}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00000a1000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 13.659606136s ago: executing program 0 (id=977): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdeb, &(0x7f00000000c0)=[{&(0x7f0000000180)="6400000010000106000000007fff0000000000007fff0000000000000000000010003f00f8ff07002b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 13.573040006s ago: executing program 0 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5ad8d0b5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x1022104) keyctl$get_security(0x11, r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}) 13.572649641s ago: executing program 0 (id=981): modify_ldt$write(0x1, &(0x7f0000000140)={0x800, 0x20000800, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f00000002c0)="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", 0xfe, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "000000000000000000000000000000000000000000000000000000000000000000001200"}) 13.430164731s ago: executing program 0 (id=982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x50a) write$vhost_msg_v2(r2, &(0x7f0000002680)={0x2, 0x0, {&(0x7f0000002700)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002780)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000027c0)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002800)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002840)={0x8, 0x0, &(0x7f0000002880)=[@increfs]}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000028c0)={0x8, 0x0, &(0x7f0000002900)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002940)={0x4c, 0x0, &(0x7f0000002980)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10ca}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002d40)={'ip6gre0\x00', &(0x7f0000002cc0)={'ip6gre0\x00', 0x0, 0x2f, 0xa3, 0x1, 0xffff, 0x20, @empty, @rand_addr=' \x01\x00', 0x7800, 0x7, 0x9, 0x1}}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002d80), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002fc0)={0xffffffffffffffff, 0x20, &(0x7f0000002f80)={&(0x7f0000002e40)=""/99, 0x63, 0x0, &(0x7f0000002ec0)=""/163, 0xa3}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pread64(r9, &(0x7f0000003040)=""/185, 0xb9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fb00000000fb000000005a879ede0ea4520000000000007c044480e904371376fd1f6e5da567b2521c1e0000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x1d, 0x2b, &(0x7f0000002a00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf58}}, @generic={0x9, 0x2, 0x2, 0x3, 0x5aa}, @jmp={0x5, 0x0, 0x5, 0x8, 0xa, 0xfffffffffffffffc, 0x1}, @alu={0x4, 0x1, 0x5, 0x8, 0xb, 0x30, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit], &(0x7f0000002b80)='syzkaller\x00', 0x4, 0xd1, &(0x7f0000002bc0)=""/209, 0x40f00, 0x4, '\x00', r6, @lsm=0x1b, r7, 0x8, &(0x7f0000002dc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002e00)={0x0, 0x5, 0x9, 0x8}, 0x10, r8, r9, 0x5, &(0x7f0000003180)=[0xffffffffffffffff, r10], &(0x7f00000031c0)=[{0x0, 0x2, 0x4, 0x5}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6, 0x8}, {0x3, 0x3, 0xb, 0x7}, {0x5, 0x2, 0x2, 0x4}], 0x10, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r11, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x4) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0xfffffffe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0xffffffffffffffff}, {0x3, 0x0, 0x8}, {0x2000000, 0x0, 0x20000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe0}, [@algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3, 0xa00}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.539727587s ago: executing program 0 (id=997): io_setup(0x8001, &(0x7f00000000c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/dummy_udc\x00', 0x802, 0x0) pread64(r1, 0x0, 0x0, 0xa9) r2 = eventfd(0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002700), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000027c0)='fd/3\x00') ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000002800)={0xa, @raw_data="da884823fe0125e3ed552513c8a4a4b51899d45cf9fdeb9428d1321fefae60fc5d691d01864642273e3657ca13eadc709eb38475727467b7ea1293ed13c6a9f5629e4796ee9cd52d2c8b3c1607f77355c6f41ae2e0bed9c9d89bad14bf1474fb3a4ad3efbb8df262e8f4d780bb30c5e1d15af54a3022043f1c3f415816db28a6402e6e97e91d08fa1239a77c458ad21fb3b610b0a31f7d26a01a3db26c73495d645fb17970b0b68d731509276b0de972b13b83bca935050fbe0529b90f893bfd126be22cfe3909cf"}) r8 = eventfd(0xb25d) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a80), 0x340, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b00)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000002b40)={0x2020}, 0x2020) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r12 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000004c40)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) io_submit(r0, 0x9, &(0x7f0000005100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000100)="70fc2eceb8b9e114dc57b73f7c1737c3f05ce4f883ab1e91f6c5081947cdb098a77a7a4d30eb90161120504960987f2103af058f6b3169e514a479210551d0b7a7504f3ae098171a87cf72bcae5ebcc6511a749ac809f240ee76eacd42f82039807605e17458572452deb7bf793b4ebb4dc306ac612c38cf15ae15bb1eeb6944a0a33eae7a555de20f65983a33263a15ccadf3b114c1f586cef346f1d81833466c1aba826ab7018609ded1f51a2688473a277ee4b30c96e8abc6882e98873a867a7f5376b499d1f53e52a0b6eb371bc636db", 0xd2, 0xd, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xf89b, r1, &(0x7f0000000280)="afafb87bc2e6aabe020958050d6297fd0964361dd79ecfe079ea0ccc1a7661f35fcb45e149efb78d053d2eb77cfd3cb4ce92020df27714a0a7ae7e88cf288db06ac9bc4cc499b941571b21e2e5d2c5af099a14d62b6b99aaf5a9cee4ca4f8afca705ede04757264b5b2823b6193553b82cf6c8dc720e4eef283d9249fc34ee2cc9865d80355eb53cef7cb3d3a2484fd5dc", 0x91, 0x39, 0x0, 0x2, r2}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000003c0)="d4863412661c60a74a8bd7cb97f5c6f78adf7d87", 0x14, 0x10001, 0x0, 0x0, r4}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0xd595, r5, &(0x7f0000005180)="8f6cc6e599cf3f32dc27364280b1e983c64cc3972da542b40fa28fabd7af866344fba719045788b7bde75f515d61a2996e7e2a020b588c732f79e3a4c4926312233aa47986805177", 0x48, 0x4, 0x0, 0x1}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0xf66, r6, &(0x7f0000002740)="ed1b4777dcf03a9d658cd5cdade3c04505b75cb0abc1296cc4dfce4a59cd97d5f5d34f071ec4965da55ed17fd6307d1575141d2a759074bbe0f75e271b10d7684d2bf5a6e73386a880db7561500f7e64a2877a076c9d", 0x56, 0x5, 0x0, 0x3, r7}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000002940)="cce0e3f25d1266a9129a653ac7c316a93cd85ee4961af9abce960f3067dfe427f41ea91c157d109e7757f1e0c6020842fc1b956830c198f7581a2fabda9246adc7007d5da8c2784dda958c7b1ac19d3d6367f0264e30d7fec8956f5ab4f0898b64abdd9090ea0505ecc87a227aad6a50eefea0e0aa91d04a1c16af61c270550920df341f847db574fddfa6648b39d951d55b4b836c5a8358e5f295167ff4d4fca3a16dfdb81e28efdc78b8a3bac70a07bd281732c909e74436930120760c1698b392b16f36a89503dbdc3b0a08ee15465c90728b8c1d5e2c8eeb200ca893b2d181e288aabbf80a605d", 0xe9, 0x80000000, 0x0, 0x3, r8}, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x2, 0x4, r9, &(0x7f0000002ac0)="a76c404c8a889ed3570b2a109a2fd90a5ed293dbc8b73444f598425e04e1617dfc1420ad688151b131f2a8495cdf92ec3c2cffa9a94eb0161d2de19baf", 0x3d, 0x2, 0x0, 0x0, r10}, &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x1, 0x6, r11, &(0x7f0000004bc0)="d3a4c54ce6d51a98abfbacc8c2161a6e04db4c27527617f28d9ea53bb68822c36ced126061bad253db363d6f91a526ecf457a7", 0x33, 0x8, 0x0, 0x1}, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x7, 0x0, r12, &(0x7f0000005040)="93de62638c1c48ed95a9803b7e6916e1c99bab55662d533e4e35f4d440332f91fa1f8e689c5ffc8b4334e85858a3da92e98dc5b1906cc213cd93fa1971b70de049a72ce7c69f9ee445fc96f663b2db904bfa5fb83db8d3a53ad3ad9e35fd2de806de3639a22dfd487fb8356156fcb2b5b9be4e5a11d3a812b3072884", 0x7c, 0x2c9, 0x0, 0x1}]) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) 12.250166951s ago: executing program 0 (id=998): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r0, 0x323, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r6, 0x25863ca6c71e1c29, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8785}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@null, 0x1, 'veth0_to_batadv\x00'}) 12.212170938s ago: executing program 35 (id=998): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r0, 0x323, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r6, 0x25863ca6c71e1c29, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8785}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@null, 0x1, 'veth0_to_batadv\x00'}) 4.489856509s ago: executing program 2 (id=1104): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000006100)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006140)={0x2, 0x4, &(0x7f0000006200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000006240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000006280)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000062c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000006300)='./file0\x00', &(0x7f0000006340)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1}}, 0x40) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000100)={0x39, 0x8, 0x4, 0x800000, 0x24c, {0x77359400}, {0x1, 0x1, 0x7, 0x2, 0x9, 0x2, "008000"}, 0x8, 0x4, {}, 0x7, 0x0, r5}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000004ec0)='./dev\x00', &(0x7f0000004f00)='devtmpfs\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004f40)='./dev/kmsg\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000004f80)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000004fc0)='./dev/kmsg\x00', &(0x7f0000005000), 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = inotify_init() ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000005100)={{r6}, "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"}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2eba00, 0x14) fallocate(r3, 0x5b, 0xad, 0xffff) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) fallocate(r12, 0x3, 0xa9, 0x8000c5f) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000005080)={[{0x80000000, 0xb18, 0x9, 0x4f, 0x40, 0x1, 0x8d, 0x1, 0x4, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x1, 0xa, 0x17, 0x5, 0x6, 0x8}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x2000004}], 0xfffffff8}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x200, 0x2b1b, 0x0, 0x1000, 0x100000000, 0x4, 0x4, 0x0, 0x97, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4.250058356s ago: executing program 7 (id=1109): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x90, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002680)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f0000002740)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004840)="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", 0x2000, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xf0, 0x0, 0xfffffffffffffff9, [{{0xfffffffffffffffe, 0x1, 0x7, 0x170f, 0x8, 0x4, {0x3, 0xffffffffa37be7cb, 0x3000000000, 0x6f9c, 0x8, 0x6, 0x10000e, 0x2, 0x7, 0xa000, 0xfffffff7, r3, r4, 0x8, 0x10}}, {0x1, 0x10, 0x45, 0x4, '\x01\x00ndOt\xd0*\xf8\x1d\x1f\xca\b\x02\n\xab \x96\xd8\xca3so\xa4\x10lave[\x0f\xf4\xdd\xac\xec`\x9fy\xcf\x82\x95\xca\xdc:\xff\xadcB\xec:\xfd\xc5\xab\x12\x88E6\xf1U\xc9\xa0\t\xec\x80\xaaz0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4008041) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff7000/0x4000)=nil) cachestat(r0, &(0x7f00000001c0)={0x1, 0x1ff}, &(0x7f0000000200), 0x0) r3 = syz_usb_connect$uac3(0x2, 0x10a, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x8, 0x80, 0xf4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0xfd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5f, 0x2}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x206, 0x5, 0xc, 0x9f, 0xdb26, 0x3, 0x2, 0xef6}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x2, [0x8, 0x0]}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0x0, 0x81, 0x6}, @selector_unit={0x8, 0x24, 0xc, 0x3, 0x3, "1ed6c7"}, @extension_unit={0x15, 0x24, 0xa, 0x2, 0x1, [0x2, 0x2, 0x0, 0x1]}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x1, 0xfffffffb, 0x38, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x9df2, 0x6, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x3, 0xc, {0xa, 0x25, 0x25, 0xe8, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x101, 0x8, 0x50}, @as_header={0x17, 0x24, 0x1, 0x4, 0x1, 0x1, 0x1002, 0xf7, 0x2, 0x7ff, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x6, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0xaf, 0x9, 0xcf, 0xff, 0x9}, 0x11, &(0x7f00000003c0)={0x5, 0xf, 0x11, 0x1, [@generic={0xc, 0x10, 0x2, "c604ab57e210a6567b"}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x40, &(0x7f0000000440)=@string={0x40, 0x3, "e9f596005a37457b99493ba6ac903803c5d84664cbd4a09708f481159fa5adc5c9b06326a4a37c69a3487c93f4fc931445ce8570d921d78973d9c662a8a2"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$uac3(r3, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x20, 0x6, 0xf, {0xf, 0xb, "1f4e9279e21280c92830588cad"}}, &(0x7f0000000600)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "1cf107c38aa95a504afeafae590871dcab62e54bf2a4bbe0b489ae7a65fab51dc2b316509cf0a013648ad88424333203ed729225bb8e90bf3873d3e644115de9cc5e5a7e4e156309fbdb734e3bcf900d93ec4a3ee1d8112869042dbdef196bdf2e816299e5bdca9e0896fcb86b254858efd178c50be1b22d7df468cd996ddb131905d98a656e27489b239770999d91ae36ff9d47981acacbb32be68cb1ab28137d1efa710518"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x40, 0x14}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "6df6"}, &(0x7f0000000800)={0x20, 0x82, 0x1, '\a'}, &(0x7f0000000840)={0x20, 0x83, 0x2, "e246"}, &(0x7f0000000880)={0x20, 0x84, 0x2, "21c2"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "d0663d"}}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x258a, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x62, 0x90, 0x83, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1, 0x4f, 0x1, {0x22, 0x161}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xe9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf4, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0x4, 0xdf, 0x8, 0x40, 0x57}, 0x2a, &(0x7f0000000a00)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x91, 0x3, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "69bb1fcd3ae7b47490715513072f5223"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0xd}]}, 0x6, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x3401}}, {0x6a, &(0x7f0000000a80)=@string={0x6a, 0x3, "1a121cc87c1d996187fff56a5ea38be28071cd91a44caba886ce324047ccd1be4c9eef4920fa01f80309fe72edb72078d15b38437b54ba02eb00597e33fb406609db1fe499d3791c774886fde6aeeb4aa1285ebcc15fa138051233314263142e3ffc869644fdf602"}}, {0xd1, &(0x7f0000000b00)=@string={0xd1, 0x3, "8b410371ef22bf8680b9931dd99d04a24b03fe4267fe2534765f16b941d000c5fe9d395234c02fc4cdec9f3c3696fcf82de0322b91630f8be1c2eeef2dc82fe721b911035bb17825b2b405b8fc6c827e8f841d9d6ea8eae4d41aea8fb96ef5a75e421e8896f71583cc78d852b19043d4b6b3eefcdc94d4e168262ab92d399b5207418523baf01f12049301a0586cedb91b28ff02e3b38c90c53cd42cf3b693b7634df45f009fcd74a53116808171fb821ee92cd003a8de4422bde4e5eb09c5bbda39e2639aa9fc47df829265facd47"}}, {0xf8, &(0x7f0000000c00)=@string={0xf8, 0x3, "fe8b1b8ac69a83a70dc2ddd03ff110cc46b9a99405c479b7a961aef07ff2b66ba194a7a3919f0b9e70b967fa0d2e9d7ee36ebbcd8c9dda5c6bd65ac843e00947b8d76235b9e64a13793510d12f8e7b758474b5b9d497883abb93909d9c84b0a2dfbedd53ad9d22313345945dd3a87e14386e41b7fb0445e8b9772b409106fc86ef844f8c9cde86df32f65e3532d23d6e699aad6e4f2b766f9cd9b1b22c26c86353600ee45f55981fb3b91e10a1576ccde7344294e1e4c2cd2c86ca952a97c95058cd46e94b5e36efd5c19869dcdc2258b1f8f79ae768ab0440c203ad6be7b72e866aff651e76800edd975d0f6885c9073abfc8ac7f0a"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x812}}, {0x17, &(0x7f0000000d40)=@string={0x17, 0x3, "3fd17c2f7a0175ee44c028fcf60b3323f1bfa928f2"}}]}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000e00)={@loopback, @private=0xa010100, 0x1, "b10133cbcc7a3b6e2d8fb6cf84a0e35bddc311e8bcb2647ffc53b7efbcd24a6d", 0x1, 0x4000, 0x4, 0x9}, 0x3c) timer_create(0x5, &(0x7f0000000e40)={0x0, 0x36, 0x4}, &(0x7f0000000e80)) userfaultfd(0x80000) r5 = syz_open_dev$vcsu(&(0x7f0000000ec0), 0xf8b, 0x800) recvfrom$inet6(r5, &(0x7f0000000f00)=""/247, 0xf7, 0x40002010, &(0x7f0000001000)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, 0x1c) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001040)="81a59b0fa030d2a9c39f9211af661a492d46f60752d610301a59e1dbfedb50fbf9efe6af8285e5fd1fe5a83761bfad06d30dc3b683daf843e6cce9a796df3ba83376d117775bb1332011e2966ddb6dae2f15e56a746e", 0x56}, {&(0x7f00000010c0)="9ab1a277dbd1d8ecb0ef9b8719517263df0d4bc8a8fd2362de103efc124caca7b93270a9f9303f53c76da83f11dcff8413eecc5f95260f81cae9579c3fdc875a0c814eccce978adc30c30be4c4b7904475968d09c838b4a698182149a3bb56a0a04bcf3b3b34000758bc02d6d179f22fc4154a0d85f36ee9bb6c71aebb279cb78d67c19bfef14bc18aa9515d90d624304a28ba8d71fa2b68e32baf0a2bf72b41943e24e89588b8edc4ae357f4d2076157cecbd300d6a302469d9dea382159477ef265da7dafee39985143cf19e34461ff01a7a45dbb87354aae7de4969ed91025fa7abe5cca765355978", 0xea}, {&(0x7f00000011c0)="517952c46346b7ff6404af6e3599c3f665248c966e416f30e5fab41855b7e7a3e83ad6d8df71cb74d1dc0b0fa2af44af0c4364078969abda1c0a474bed46052979982554ccf3c2255ca3688cfaa79c8e4c01d955c5efff2b61a04beff8780d6bc37c6bb5e94560b58a49ef5b2d17c2d48089dbb26dff991b5ecf0c3b0126aa7c93ca276259c50dc42359d808f53c3fcbb71c27942a9d427f88dbe984891fb05bb9", 0xa1}, {&(0x7f0000001280)="91f2781d9369376a3ab322a4c1d284ad81c164c6a20fd0d472fad2d791dbe48031ddd438fb00b61247d311504bb146cb2c9e0820e1ed2e54609902fa52e8840c4b9348f61699089b5608358fef4c797b485aa234d531045646c3aafe3be4f67596110cd55618b35bf5668efa971aacf1e4cf5a7b56e5aa4b7dd6ca96a029c31ea81ea8897a1340aa1fa78df7d40294b8b4de4d1c6fcaccf2bf25342aad2b280c3eea2958e1f0170a017021", 0xab}], 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000013c0)=0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002400)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fed000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000001400)="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", 0x1000, r5}, 0x68) syz_genetlink_get_family_id$SEG6(&(0x7f0000002480), r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000024c0)={0x0, 0x5d, 0x4c}, &(0x7f0000002500)={'enc=', 'oaep', ' hash=', {'vmac64(khazad-generic)\x00'}}, &(0x7f0000002580)="eb4dfa21aca7f390bd8bae39f95a89d012638b3a56fb770772285686f37c03cc00ccf47fb4f2f871399be59bcf983a88aaf5b5e249b56983e3aecf3633dcc6b011b254505e54d6e7dcf1b97f262ae8a971d6ab20abffc989e4f4499a62", &(0x7f0000002600)="e44b05fa038a5137ca420f856ebae8fe3c75a7ba3e788c5ba91e906214e4722859a6431f2975dd7c2eaa5f810d3ffee0535b4e1d651ae061ebd6b970217fc4b75afe2bcae029d48df4223e11") r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002680)='/sys/kernel/softlockup_count', 0x448081, 0x100) syz_usb_connect$uac2(0x0, 0x0, 0xffffffffffffffff, &(0x7f00000027c0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x6, 0x8, 0x4}, 0x53, &(0x7f0000002700)={0x5, 0xf, 0x53, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0xfd, 0x4, 0x4, 0x0, 0x7, [0x3f00, 0x3f00, 0xff0f, 0xc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x5, 0x101}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8e4, 0xf000, 0x3ff, [0x0, 0x3f30, 0xffc000, 0xcf, 0xc030, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x420}}]}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000028c0)={&(0x7f0000002800)=""/163, 0x220000, 0x1000, 0x6, 0x1}, 0x20) r7 = openat(0xffffffffffffffff, &(0x7f0000002900)='./file0\x00', 0x22000, 0x101) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002980), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x3c, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x488b}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x343}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) r9 = add_key$user(&(0x7f0000002ac0), &(0x7f0000002b00)={'syz', 0x0}, &(0x7f0000002b40)="0b8af0f15fcc97d32f1c550b838d89c40288ef504f1237e03d819eada8f704f76877a4c2177451babaa0ef915fa356abf2dcc952c9cfb33d60a86d242cba2f6c503b546e0c2735fc1a8c160dcaf27586b8caac4811e8fdfbc8a1b5938cc6367879055b3205882e1eb303c5135a5a25c34fe4beef7a6d61edabe18d972c65", 0x7e, 0x0) keyctl$read(0xb, r9, &(0x7f0000002bc0)=""/110, 0x6e) 3.039436129s ago: executing program 7 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00214323c07060ef4ab9f19dc445032dbc7000ffdbdf2102000000080062000c0000000800690008000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000004ac0)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3930076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r4, &(0x7f0000004ac0)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="7472d168afe67138777f904426c70e10cf9ca945c29e99d0ec52"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="7472d168afe67138777f904426c70e10cf9ca945c29e99d0ec52"], 0x1c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x20141, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x12000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r2, @ANYBLOB=',group_id9', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x12000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r2, @ANYBLOB=',group_id9', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002780)={0x50, 0x0, r6, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000002780)={0x50, 0x0, r6, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002800)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ceb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x80700, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x80700, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee00]) setregid(r8, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000004980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000004a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="dbbf000000000000000004000000"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x0, 0x3, 0xa, 0x8, 0xada, 0x1}) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000004940)="130000001a001f00030300f9002304000a04d6", 0x13) (async) write(r11, &(0x7f0000004940)="130000001a001f00030300f9002304000a04d6", 0x13) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xfffffed3) write(r7, &(0x7f0000000080)="6000000041000901020000000000000003010000000000002c000100100004000000000000000000000000000600060081000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60) (async) write(r7, &(0x7f0000000080)="6000000041000901020000000000000003010000000000002c000100100004000000000000000000000000000600060081000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00') 2.680200393s ago: executing program 6 (id=1126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r6, 0x0, 0x3) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000700), 0xf00) close(0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="270302005919141206000043b96dbcf706e10500020086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010200000000000000000000000005000100070000000900020073797a300000000007000500020000000c0007800500150021000000050004000000000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0x48}, 0x40000) 2.570325723s ago: executing program 6 (id=1127): mount(&(0x7f0000000200)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x1210000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x9) name_to_handle_at(r0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x8, 0x9, 0x6, 0x490}}, &(0x7f00000001c0), 0x600) mount(&(0x7f0000000200)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x1210000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x9) (async) name_to_handle_at(r0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x8, 0x9, 0x6, 0x490}}, &(0x7f00000001c0), 0x600) (async) 2.566832024s ago: executing program 6 (id=1128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0xfffffffe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0xffffffffffffffff, 0x0, 0x0, 0xa00000000000000}, {0x3, 0x0, 0x8}, {0x2000000, 0x0, 0x20000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe0}, [@algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3, 0xa00}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.49044071s ago: executing program 6 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=virtio,noxattr,afid=0x0000000000000001,debug=0x0000000000000009,directio,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c007a1945a0fe6002ebc7130900b4de449aaa7d138aef89ea9e662f5a2a6b2b35eaf42bbc6694131510248c29199a2088315ce6fc6c375961fb3b73c24f8ffca1f5de73bb67982d7ec630884db4892fcefe866d7f662270ae26fcfa17998ab5c9c18208389ccc5feec44a5adedaf1427b91244ce5cc9f536e6cfc58050f6f513d646018967015cdc145bd43d905b468a9b5a6c4845b028da539fab14f78a30a3d2fe73ceb2ff06e2358a8c1052badd02f2ad76d11cab4b267b519ff58e157132392a0451e762a18f10e62840331393410019fdc24518a8adb4a2df753111c3c5a9705fa4e0bf04255"]) 2.490252206s ago: executing program 6 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) linkat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file7\x00', 0x1000) (rerun: 64) r2 = open(&(0x7f0000000700)='.\x00', 0x0, 0xa4) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f0000000540)={0x1, 0x2, 0x1, 0x7}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000500)={0x2, 0x5e23, @local}, 0x10) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000740)=0x1, 0x4) (async, rerun: 64) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c) (async, rerun: 64) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f00000007c0)=0x1, 0x4) (async) bind$inet6(r6, &(0x7f0000000800)={0xa, 0x5ea3, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/icmp6\x00') pread64(r7, &(0x7f0000000880)=""/195, 0xc3, 0x100) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000006c0)=0xf) (async) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r8, 0x400455c8, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES64=r2, @ANYBLOB="0100000000000000000001000000080009000100000008000a00010000000500070003000000060002000000000008001700", @ANYRES32, @ANYBLOB="d35c0e3361b5c805b52b4a5c91be6f8af34429215fbc462739e8f528582c7c09ca0351291fe2c69bd84251f434280eace4298f30974320fe7f7db1f005268c145603e747b94ee1ca3d705c891f95f506d29b39d208e77f2a7b6207961d406e8d"], 0x3c}}, 0x0) write(r0, &(0x7f0000000300)="975c5e9c82ff3a4f6652dc255ef0ee15781a8c1c91b212de160bed37c4091d4a172ab4fc9e801020f2671114ee457005d3533a2b2dbd7d7c2e5a33ccda383b790edd1a274186e4d3f422b810edec3cc9b13acb548778fd1b6dbbf7882fea2c22ecdce5950473202af23624b1c4edf83b4af80b9d9b65529dc822d6cf3074d374327d0abca1448ab08b19a4e0467428b8a1", 0x91) (async) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000400)='pagemap\x00') syz_open_procfs$namespace(r9, &(0x7f0000000440)='ns/uts\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x104) 2.040621776s ago: executing program 7 (id=1131): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e06050c10"], 0x9) openat$md_new_array(0xffffff9c, &(0x7f0000000600), 0x1, 0x0) r3 = openat$md(0xffffff9c, &(0x7f0000000640)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000680)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$GET_DISK_INFO(r3, 0x80140912, &(0x7f00000006c0)={0xd}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b330400000001dcdf250500000008000300", @ANYRES32=r5, @ANYBLOB="0c209900070000006b000000"], 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2572000000f3b7847b6403aa0ce8379d53409d2d919ac6a09af401b4990eee1b17cb1fa1eca6c828e976757701d757fb905864b9cbe3176b8391201314c2e4cf1d"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x81) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e80), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000ec0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$inet(r10, 0x0, &(0x7f0000000f80)) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000840)={0x3, 0x5a, &(0x7f00000007c0)="43c05796ccffdbd3d268a8cc3beb049b3f79df9b2821eecfd950b213a7b070f98d3c95e879225a6eec907dc9cb58491f4617d259a1a559ea06b904b28cda2f2b880489ff013c02290f44a27ca001253ae1236c704e6dfe1684b3"}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x600, 0x0) ioctl$CDROM_SEND_PACKET(r11, 0x5393, &(0x7f0000000740)={"a6db1b022826642d3ebe36c1", 0x0, 0x0, 0x0, &(0x7f0000000780)={0x60, 0x0, 0xfa, 0x9, 0x0, 0x1, 0x0, "3774b430", 0x9, "d8f71e8f", 0x3, 0x5, 0x1, "a7bb7b", "374a6ab0354e12fa0647e1e35e326f016d3077397e225cde1cba746dc98180f80c8499a9ba572bdfc725a42ec4b8"}, 0x2, 0xffff, 0x3, 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05002dbd70000031d4b60e00090008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.022078189s ago: executing program 2 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0xfffffffe, @loopback}, 0x43) (async) bind$l2tp6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c, 0x0, 0x10}, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0) close(r1) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000180), 0x4) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0xffffffffffffff19) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r8, 0x1, 0x470bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) (async) socket$packet(0x11, 0x3, 0x300) (async) r10 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000080)='IaA=7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f00000008c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) signalfd4(r11, &(0x7f0000000140)={[0x9b]}, 0x8, 0x40800) 260.151363ms ago: executing program 5 (id=1133): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='2', 0x1) connect$vsock_stream(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES8=r2], 0x30}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES8=r2], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000034001a0006000000020000002800048024000880080004000100000006000200010000000800030002000000080004"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000495}, 0x8081) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r12], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) r14 = syz_open_dev$mtd(&(0x7f00000000c0), 0x46, 0x1) ioctl$MEMREADOOB64(r14, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)}) 160.330004ms ago: executing program 6 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00), 0xa4242, 0x0) r3 = syz_io_uring_setup(0x3800, &(0x7f0000000d40)={0x0, 0x2a02, 0x20501, 0x3, 0x851}, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000e80)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x0, @fd=r2, 0x9, 0x0, 0x0, 0x10, 0x0, {0x40, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000f00)={0x2e, 0x8, 0xf5, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000f80)=@any_dev={0x1, 0xbad, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x40}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f00000001c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x102, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r13, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r10, 0x401, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xec}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01042cbd7000000000000100000008000100020000000c00fa7f05000300710000000800020003000ff2ffffffffffff49c764f726d5f227dd8529fd52e4ac15b1e647bf6e6e07602bde7eb8c0fbaaa2751c93d70596fb33f98c6e16966c15b9446005c6e46e41"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000340)) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r15) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r16, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x1}}, 0x0, 0x0, 0x20, 0x0, "a72aa280b2bf65c867bb56d60d2496790b01a1253d395f1202cd1010a0fed7934e3e07a741ad98fc0f016d936c982478047f320d020ef1f60fd67b1270045da19137be4bc5272518db7a746636dc8114"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r16, 0x6, 0xe, &(0x7f0000000940)={@in6={{0xa, 0x4e20, 0x20007, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}, 0x0, 0x0, 0x39, 0x0, "ffa1f819be2d45e250fd26562ce09916a27aed631363a5432fb12e08113effb5bb89cfeafda5f79a8e28471efbdc66c9a6152cedb293e5cbbef69e0b815ed1c8e7fd762d9008b749b97592e880b340e1"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 160.124534ms ago: executing program 5 (id=1135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x42, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x832, 0x40, 0x1, 0x3, 0x81}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r3, 0xd, 0x1, [0x1]}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000001c0)=0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x10800, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x2, 0x0, 0x8000, 0x52, 0x10, 0x40000, 0x6e}, 0x9c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 159.823552ms ago: executing program 2 (id=1136): madvise(&(0x7f0000bdc000/0x1000)=nil, 0x1000, 0x13) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000111401062dbd70000000020008004b0028"], 0x18}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x4040844}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 90.74813ms ago: executing program 5 (id=1137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0xfffffffe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00}, {0x3, 0x0, 0x8}, {0x2000000, 0x0, 0x20000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe0}, [@algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3, 0xa00}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) 89.598993ms ago: executing program 2 (id=1138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000008c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x2}]}) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x181c82, 0x0) write$sequencer(r3, &(0x7f0000000600)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x20) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYRESOCT=r8, @ANYRES32=r7, @ANYBLOB="6822287fc7ac987849a9b40db6c1c5f31264c6ea86604443aa106ef961f54cbe33b4a15c168109a8fcfd06a4ccab3fe2c4b338438760f0e6ff4aaba1a7224ce441f54cea6df78a76914481ae1366e9c4b527db57011572bbb923217f89d327fbd7d17f0fdb5dadd4bb6ab01bd96dc475b0f7042386aef8fa191e7b0415d9a3fca36a19741f5720e0042633d91f706305468fd55208133fde8146a8584ca57268d8fcef8c220ddeea04083762c8c31dee0d1ab6ed32e7ae3bdf040f9cd31b2b638aa1080e1243"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000640), 0x43) (async) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000680), 0x43) (async) recvmsg$kcm(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="b8", 0x1}], 0x1}, 0x4000001) (async) close(0x3) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040851}, 0x4041080) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xf) (async, rerun: 32) ioctl$TCFLSH(r11, 0x400455c8, 0x400000009) (rerun: 32) 89.395339ms ago: executing program 5 (id=1139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704e0788cacb8f5655eedd90296", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012004e22000006000f"], 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019", @ANYBLOB="02b197975b7ffbd198cee4535f8b1e7c26e4cb7e2436dea779952717f1a2fd6be21f0792a1b4d56291140b3ac7b97e29aec12cd625a4e6375fa1bf1c830106252b8c6a68578cca6406bfa4a868726bdd29b13533c860e4d3f234fe5873bd6e14cdfe62ad0af08c4644e61b690b442dc521506647fc9f98674137c5cd0c76eb48101d4dd4be7a207466815b99d8df2f1a642e101554dc99dcb2e82ccf3afed96e75b9cf07c42985b5"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 5 (id=1140): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}, {r0, r1/1000+60000}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r2, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cd6c5908060001080006040001aaaaaaaaaa3cac1414bbaaaa37aaaa94ac1414bb"], 0x0) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): 107.267170][ T8199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.267176][ T8199] R13: 00007fa62bc26038 R14: 00007fa62bc25fa0 R15: 00007ffd78314348 [ 107.267190][ T8199] [ 107.275345][ T5744] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 107.402294][ T8207] blktrace: Concurrent blktraces are not allowed on loop5 [ 107.853556][ T8236] loop0: detected capacity change from 0 to 1 [ 107.879247][ T8239] ufs: You didn't specify the type of your ufs filesystem [ 107.879247][ T8239] [ 107.879247][ T8239] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 107.879247][ T8239] [ 107.879247][ T8239] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 107.879285][ T8239] ufs: ufstype=old is supported read-only [ 107.881335][ T8239] ufs: ufs_fill_super(): bad magic number [ 107.894134][ T8236] ldm_validate_privheads(): Disk read failed. [ 107.894235][ T8236] Dev loop0: unable to read RDB block 1 [ 107.894263][ T8236] loop0: unable to read partition table [ 107.894406][ T8236] loop0: partition table beyond EOD, truncated [ 107.894445][ T8236] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 107.922225][ T8244] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 107.931139][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.944270][ T8244] bond1: (slave macvlan0): making interface the new active one [ 107.947747][ T8244] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 107.947878][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 108.030485][ T8249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.030519][ T8249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.111266][ T8249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.111298][ T8249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.181152][ T8249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.181174][ T8249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.249865][ T8249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.249899][ T8249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.375687][ T5802] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.375708][ T5802] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.375726][ T5802] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.375739][ T5802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.395946][ T5802] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.395978][ T5802] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.396011][ T5802] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.396033][ T5802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.798480][ T8258] netlink: 'syz.2.706': attribute type 16 has an invalid length. [ 108.798497][ T8258] netlink: 'syz.2.706': attribute type 17 has an invalid length. [ 108.823444][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.824504][ T8258] team0: left allmulticast mode [ 108.824519][ T8258] team_slave_0: left allmulticast mode [ 108.824530][ T8258] ±ÿ: left allmulticast mode [ 108.825088][ T8258] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.829338][ T8258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.609109][ T8258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.616931][ T8258] veth0_vlan: left promiscuous mode [ 109.617706][ T8258] veth0_vlan: entered promiscuous mode [ 109.618788][ T8258] macvlan1: left promiscuous mode [ 109.618903][ T8258] macvlan1: left allmulticast mode [ 109.618916][ T8258] veth1_vlan: left allmulticast mode [ 109.620980][ T8258] veth1_macvtap: left promiscuous mode [ 109.621619][ T8258] veth0_macvtap: left promiscuous mode [ 109.622120][ T8258] veth0_macvtap: entered promiscuous mode [ 109.622634][ T8258] veth1_macvtap: entered promiscuous mode [ 109.625929][ T8258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.626868][ T8258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.627704][ T8258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.628296][ T8258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.642988][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.643033][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.644236][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.644278][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.657350][ T8265] Invalid logical block size (9) [ 109.685516][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.685682][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.685702][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.685719][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.730133][ T8268] bridge_slave_0: left allmulticast mode [ 109.730149][ T8268] bridge_slave_0: left promiscuous mode [ 109.730317][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.734266][ T8268] bridge_slave_1: left allmulticast mode [ 109.734281][ T8268] bridge_slave_1: left promiscuous mode [ 109.734372][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.738884][ T8272] input: syz1 as /devices/virtual/input/input13 [ 109.757945][ T8268] bond0: (slave bond_slave_0): Releasing backup interface [ 109.765179][ T8268] bond0: (slave bond_slave_1): Releasing backup interface [ 109.782907][ T8268] team0: Port device team_slave_0 removed [ 109.795793][ T8268] team0: Port device 26±ÿ removed [ 109.796387][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.796403][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.800608][ T8268] bond0: (slave macvlan1): Releasing backup interface [ 109.833404][ T8268] bond0: entered promiscuous mode [ 109.837021][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.837843][ T8268] team0: Port device bond0 added [ 109.995454][ T5744] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 109.995516][ T5743] Bluetooth: hci2: command 0x1003 tx timeout [ 110.445072][ T8286] program syz.4.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.470939][ T8284] fuse: Bad value for 'fd' [ 110.562707][ T8301] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 110.562726][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 110.562984][ T8301] 8021q: VLANs not supported on tunl0 [ 110.578042][ T8298] overlayfs: failed to verify origin (60/file1, ino=346, err=-116) [ 110.578624][ T8298] overlayfs: failed to verify origin (60/file1, ino=346, err=-116) [ 110.689946][ T5744] Bluetooth: hci5: unexpected subevent 0x05 length: 5 < 12 [ 111.098499][ T8317] clocksource: Switched to clocksource acpi_pm [ 111.099441][ T8317] clocksource: Switched to clocksource tsc [ 111.197405][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 111.219039][ T7209] Bluetooth: hci2: Frame reassembly failed (-84) [ 111.219098][ T1067] Bluetooth: hci2: Frame reassembly failed (-84) [ 111.436680][ T1306] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 30 seconds [ 111.437739][ T1306] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 30 seconds [ 111.500784][ T8326] selinux_netlink_send: 24 callbacks suppressed [ 111.500798][ T8326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8326 comm=syz.2.726 [ 111.536842][ T8328] netlink: 104 bytes leftover after parsing attributes in process `syz.2.727'. [ 111.554163][ T8328] bond1 (unregistering): Released all slaves [ 111.858274][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 111.858293][ T42] audit: type=1400 audit(1792704029.406:711): avc: denied { mounton } for pid=8334 comm="syz.1.730" path="/syzcgroup/unified/syz1" dev="pstore" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 111.872790][ T8335] XFS (nbd1): SB validate failed with error -5. [ 111.913051][ T42] audit: type=1400 audit(1792704029.456:712): avc: denied { ioctl } for pid=8334 comm="syz.1.730" path="socket:[23380]" dev="sockfs" ino=23380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.019394][ T8345] device-mapper: table: 248:2: striped: Target length not divisible by number of stripes (-EINVAL) [ 112.019418][ T8345] device-mapper: ioctl: error adding target to table [ 112.031341][ T8345] netlink: 'syz.1.732': attribute type 16 has an invalid length. [ 112.031363][ T8345] netlink: 'syz.1.732': attribute type 17 has an invalid length. [ 112.081455][ T8345] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 112.115888][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.172020][ T8355] loop0: detected capacity change from 0 to 1 [ 112.192109][ T42] audit: type=1400 audit(1792704029.736:713): avc: denied { ioctl } for pid=8348 comm="syz.4.733" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 112.203818][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 112.247425][ T8349] Bluetooth: hci0: unsupported parameter 5135 [ 112.247444][ T8349] Bluetooth: hci0: invalid length 3, exp 2 for type 18 [ 112.277691][ T8355] ldm_validate_privheads(): Disk read failed. [ 112.277747][ T8355] Dev loop0: unable to read RDB block 1 [ 112.277774][ T8355] loop0: unable to read partition table [ 112.277913][ T8355] loop0: partition table beyond EOD, truncated [ 112.277950][ T8355] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 112.424085][ T8375] netlink: 7 bytes leftover after parsing attributes in process `syz.1.740'. [ 112.457048][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 112.596334][ T8386] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 112.655535][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.088422][ T5141] ldm_validate_privheads(): Disk read failed. [ 113.088519][ T5141] Dev loop0: unable to read RDB block 1 [ 113.088546][ T5141] loop0: unable to read partition table [ 113.088707][ T5141] loop0: partition table beyond EOD, truncated [ 113.199227][ T42] audit: type=1400 audit(1792704030.746:714): avc: denied { mount } for pid=8401 comm="syz.4.748" name="/" dev="hugetlbfs" ino=23448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 113.245124][ T42] audit: type=1400 audit(1792704030.786:715): avc: denied { mounton } for pid=8401 comm="syz.4.748" path="/mnt" dev="hugetlbfs" ino=23450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 113.253661][ T8402] eCryptfs: maximum fs stacking depth exceeded [ 113.256738][ T8402] Reading sb failed; rc = [-22] [ 113.278402][ T5744] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 113.689893][ T8423] hfsplus: unable to find HFS+ superblock [ 113.767420][ T5141] ldm_validate_privheads(): Disk read failed. [ 113.767490][ T5141] Dev loop0: unable to read RDB block 1 [ 113.767516][ T5141] loop0: unable to read partition table [ 113.767683][ T5141] loop0: partition table beyond EOD, truncated [ 113.921525][ T42] audit: type=1400 audit(1792704031.466:716): avc: denied { create } for pid=8442 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.935906][ T42] audit: type=1400 audit(1792704031.486:717): avc: denied { append } for pid=8442 comm="syz.2.760" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.988039][ T42] audit: type=1400 audit(1792704031.536:718): avc: denied { write } for pid=8442 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.118363][ T8460] loop0: detected capacity change from 0 to 1 [ 114.130407][ T42] audit: type=1400 audit(1792704031.676:719): avc: denied { create } for pid=8461 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.130783][ T42] audit: type=1400 audit(1792704031.676:720): avc: denied { bind } for pid=8461 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.143570][ T8462] syzkaller1: entered promiscuous mode [ 114.143584][ T8462] syzkaller1: entered allmulticast mode [ 114.170058][ T8460] ldm_validate_privheads(): Disk read failed. [ 114.170122][ T8460] Dev loop0: unable to read RDB block 1 [ 114.170151][ T8460] loop0: unable to read partition table [ 114.170303][ T8460] loop0: partition table beyond EOD, truncated [ 114.170319][ T8460] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 114.174202][ T5141] ldm_validate_privheads(): Disk read failed. [ 114.174414][ T5141] Dev loop0: unable to read RDB block 1 [ 114.174441][ T5141] loop0: unable to read partition table [ 114.174598][ T5141] loop0: partition table beyond EOD, truncated [ 114.208319][ T8464] md: invalid raid superblock magic on ram4 [ 114.208336][ T8464] md: ram4 does not have a valid v0.0 superblock, not importing! [ 114.208390][ T8464] md: md_import_device returned -22 [ 114.210102][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'. [ 114.239780][ T7215] Bluetooth: hci2: Frame reassembly failed (-84) [ 114.330031][ T8473] IPv6: addrconf: prefix option has invalid lifetime [ 114.334577][ T8474] IPv6: addrconf: prefix option has invalid lifetime [ 114.367154][ T8477] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 114.367167][ T8477] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.772'. [ 114.660543][ T8484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.710484][ T8484] kvm: emulating exchange as write [ 115.100073][ T8503] netlink: 'syz.0.782': attribute type 2 has an invalid length. [ 115.100090][ T8503] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 115.674648][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 115.674695][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 115.729988][ T8508] netlink: 316 bytes leftover after parsing attributes in process `syz.0.784'. [ 116.315641][ T5743] Bluetooth: hci2: command 0x1003 tx timeout [ 116.318812][ T5744] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 116.653435][ T8529] nvme_fcloop: unknown parameter or missing value 'wwnn=' [ 117.129469][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 117.129505][ T42] audit: type=1400 audit(1792704290.731:728): avc: denied { bind } for pid=8550 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.129661][ T8551] __nla_validate_parse: 1 callbacks suppressed [ 117.129676][ T8551] netlink: 14 bytes leftover after parsing attributes in process `syz.2.799'. [ 117.277637][ T8554] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.277658][ T8554] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.277872][ T8554] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.277886][ T8554] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 117.339660][ T8557] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 117.398170][ T42] audit: type=1400 audit(1792704291.001:729): avc: denied { read } for pid=8560 comm="syz.0.802" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 117.398420][ T42] audit: type=1400 audit(1792704291.001:730): avc: denied { open } for pid=8560 comm="syz.0.802" path="/158/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 117.399118][ T42] audit: type=1400 audit(1792704291.001:731): avc: denied { ioctl } for pid=8560 comm="syz.0.802" path="/158/proc/kmsg" dev="proc" ino=4026532047 ioctlcmd=0xc02064a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 117.507228][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 117.524325][ T7133] Bluetooth: hci2: Frame reassembly failed (-84) [ 117.614455][ T8565] ip_tables: iptables: counters copy to user failed while replacing table [ 117.616606][ T8565] Cannot find del_set index 0 as target [ 117.618558][ T8565] xt_IDLETIMER: timeout value is zero [ 117.847459][ T42] audit: type=1400 audit(1792704291.451:732): avc: denied { mounton } for pid=8566 comm="syz.2.805" path="/proc/596/task" dev="proc" ino=25697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 117.890869][ T8570] loop0: detected capacity change from 0 to 1 [ 117.919268][ T8570] ldm_validate_privheads(): Disk read failed. [ 117.919305][ T8570] Dev loop0: unable to read RDB block 1 [ 117.919321][ T8570] loop0: unable to read partition table [ 117.919423][ T8570] loop0: partition table beyond EOD, truncated [ 117.919461][ T8570] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 118.291431][ T8591] netlink: 'syz.2.814': attribute type 63 has an invalid length. [ 118.291447][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 118.404120][ T8596] device-mapper: table: 248:4: ram5 too small for target: start=0, len=8256, dev_size=8192 [ 118.404136][ T8596] device-mapper: core: Cannot calculate initial queue limits [ 118.404146][ T8596] device-mapper: ioctl: unable to set up device queue for new table. [ 118.728936][ T8610] netlink: 56 bytes leftover after parsing attributes in process `syz.4.818'. [ 119.386093][ T42] audit: type=1400 audit(1792704292.991:733): avc: denied { ioctl } for pid=8618 comm="syz.2.822" path="socket:[27798]" dev="sockfs" ino=27798 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.468933][ T8619] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 119.468953][ T8619] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 119.468975][ T8619] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 119.468984][ T8619] One or more global auth toks could not properly register; rc = [-22] [ 119.469010][ T8619] Error validating options; rc = [-22] [ 119.469347][ T8620] Could not find key with description: [syz] [ 119.469355][ T8620] process_request_key_err: No key [ 119.469361][ T8620] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 119.469369][ T8620] One or more global auth toks could not properly register; rc = [-2] [ 119.469393][ T8620] Error validating options; rc = [-2] [ 119.512130][ T8627] tmpfs: Unknown parameter 'Óˆv–' [ 119.535547][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 119.605393][ T5744] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 119.605425][ T5743] Bluetooth: hci2: command 0x1003 tx timeout [ 119.641074][ T8631] netlink: 'syz.2.825': attribute type 63 has an invalid length. [ 119.641090][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 119.696015][ T50] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 119.699073][ T50] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.699111][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.708672][ T50] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 119.708834][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 119.708881][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 119.709857][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 119.709896][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 119.715510][ T50] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 119.716578][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 119.716611][ T50] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 119.719523][ T50] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 120.005496][ T3381] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 120.063708][ T50] usb 9-1: USB disconnect, device number 3 [ 120.070106][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 120.077722][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 120.077993][ T50] keyspan 9-1:1.0: device disconnected [ 120.155404][ T3381] usb 7-1: Using ep0 maxpacket: 32 [ 120.157773][ T3381] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 120.159545][ T3381] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.159566][ T3381] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.159580][ T3381] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.159596][ T3381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.161074][ T3381] usb 7-1: config 0 descriptor?? [ 120.183449][ T8638] loop0: detected capacity change from 0 to 1 [ 120.256290][ T8638] ldm_validate_privheads(): Disk read failed. [ 120.256326][ T8638] Dev loop0: unable to read RDB block 1 [ 120.256343][ T8638] loop0: unable to read partition table [ 120.256459][ T8638] loop0: partition table beyond EOD, truncated [ 120.256470][ T8638] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 120.258969][ T5141] ldm_validate_privheads(): Disk read failed. [ 120.259001][ T5141] Dev loop0: unable to read RDB block 1 [ 120.259016][ T5141] loop0: unable to read partition table [ 120.259231][ T5141] loop0: partition table beyond EOD, truncated [ 120.329470][ T8640] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 120.330816][ T8640] bond3 (unregistering): Released all slaves [ 120.468653][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 120.469082][ T8647] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 120.484996][ T8647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.736721][ T8669] bond2 (unregistering): Released all slaves [ 120.787342][ T8681] overlayfs: failed to resolve './file2': -2 [ 120.805927][ T8672] bond2 (unregistering): Released all slaves [ 120.824209][ T8678] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 120.858992][ T8683] loop0: detected capacity change from 0 to 1 [ 120.897382][ T8683] ldm_validate_privheads(): Disk read failed. [ 120.897417][ T8683] Dev loop0: unable to read RDB block 1 [ 120.897480][ T8683] loop0: unable to read partition table [ 120.897563][ T8683] loop0: partition table beyond EOD, truncated [ 120.897573][ T8683] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 120.933133][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 121.793092][ T8695] FAULT_INJECTION: forcing a failure. [ 121.793092][ T8695] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.793114][ T8695] CPU: 2 UID: 0 PID: 8695 Comm: syz.4.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.793142][ T8695] Tainted: [L]=SOFTLOCKUP [ 121.793147][ T8695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.793165][ T8695] Call Trace: [ 121.793176][ T8695] [ 121.793181][ T8695] dump_stack_lvl+0x100/0x190 [ 121.793201][ T8695] should_fail_ex.cold+0x5/0xa [ 121.793218][ T8695] get_futex_key+0x1c9/0x13e0 [ 121.793235][ T8695] ? __pfx_get_futex_key+0x10/0x10 [ 121.793248][ T8695] ? kasan_quarantine_put+0x104/0x240 [ 121.793274][ T8695] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.793287][ T8695] ? proc_simple_write+0x90/0x1a0 [ 121.793312][ T8695] futex_wake+0xf4/0x5e0 [ 121.793323][ T8695] ? find_held_lock+0x2b/0x80 [ 121.793339][ T8695] ? __pfx_futex_wake+0x10/0x10 [ 121.793351][ T8695] ? rcu_read_lock_any_held+0x6a/0x90 [ 121.793367][ T8695] ? find_held_lock+0x2b/0x80 [ 121.793381][ T8695] ? ksys_write+0x190/0x250 [ 121.793402][ T8695] ? ksys_write+0x190/0x250 [ 121.793417][ T8695] do_futex+0x2b2/0x440 [ 121.793433][ T8695] ? __pfx_do_futex+0x10/0x10 [ 121.793449][ T8695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.793464][ T8695] __x64_sys_futex+0x34f/0x4d0 [ 121.793482][ T8695] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.793503][ T8695] do_syscall_64+0x123/0x790 [ 121.793517][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.793528][ T8695] RIP: 0033:0x7f51eef9f559 [ 121.793538][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.793548][ T8695] RSP: 002b:00007f51efe110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.793559][ T8695] RAX: ffffffffffffffda RBX: 00007f51ef225fa8 RCX: 00007f51eef9f559 [ 121.793566][ T8695] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f51ef225fac [ 121.793573][ T8695] RBP: 00007f51ef225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 121.793579][ T8695] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 121.793586][ T8695] R13: 00007f51ef226038 R14: 00007ffc07d0a310 R15: 00007ffc07d0a3f8 [ 121.793605][ T8695] [ 122.124049][ T5542] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.124087][ T5542] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.186575][ T5542] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.186606][ T5542] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.239634][ T5542] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.239664][ T5542] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.285777][ T5542] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.285810][ T5542] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.431507][ T5542] bridge_slave_1: left allmulticast mode [ 122.431525][ T5542] bridge_slave_1: left promiscuous mode [ 122.431637][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.436835][ T5542] bridge_slave_0: left allmulticast mode [ 122.436850][ T5542] bridge_slave_0: left promiscuous mode [ 122.436947][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.524710][ T42] audit: type=1400 audit(1792704296.121:734): avc: denied { write } for pid=8706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.573224][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.576969][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.590284][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.591447][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.594862][ T5542] bond0 (unregistering): Released all slaves [ 122.595016][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.602746][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.605593][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.623286][ T5542] bond1 (unregistering): (slave macvlan0): Releasing active interface [ 122.628803][ T5542] bond1 (unregistering): Released all slaves [ 122.643090][ T42] audit: type=1400 audit(1792704296.241:735): avc: denied { write } for pid=8712 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.683320][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.801784][ T42] audit: type=1400 audit(1792704296.401:736): avc: denied { write } for pid=8721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.860986][ T42] audit: type=1400 audit(1792704296.461:737): avc: denied { write } for pid=8726 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.881225][ T3381] usbhid 7-1:0.0: can't add hid device: -71 [ 122.881279][ T3381] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 122.883483][ T3381] usb 7-1: USB disconnect, device number 9 [ 122.917439][ T8729] loop0: detected capacity change from 0 to 1 [ 122.918309][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 122.918805][ T8710] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.978301][ T8729] ldm_validate_privheads(): Disk read failed. [ 122.978337][ T8729] Dev loop0: unable to read RDB block 1 [ 122.978353][ T8729] loop0: unable to read partition table [ 122.978436][ T8729] loop0: partition table beyond EOD, truncated [ 122.978454][ T8729] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 122.982187][ T5141] ldm_validate_privheads(): Disk read failed. [ 122.982218][ T5141] Dev loop0: unable to read RDB block 1 [ 122.982233][ T5141] loop0: unable to read partition table [ 122.982314][ T5141] loop0: partition table beyond EOD, truncated [ 123.005799][ T42] audit: type=1400 audit(1792704296.611:738): avc: denied { write } for pid=8731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.051849][ T42] audit: type=1400 audit(1792704296.651:739): avc: denied { write } for pid=8736 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.056464][ T8735] netlink: Failed to add helper -22 [ 123.056491][ T8735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.058539][ T42] audit: type=1400 audit(1792704296.661:740): avc: denied { bind } for pid=8734 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.081052][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 123.179303][ T42] audit: type=1400 audit(1792704296.781:741): avc: denied { write } for pid=8742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.188435][ T8745] device-mapper: ioctl: Next dm_target_spec (offset 330) is not 8-byte aligned [ 123.188449][ T8745] device-mapper: ioctl: unable to find target [ 123.238414][ T42] audit: type=1400 audit(1792704296.841:742): avc: denied { write } for pid=8750 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.276601][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 123.476412][ T42] audit: type=1400 audit(1792704297.081:743): avc: denied { ioctl } for pid=8759 comm="syz.2.852" path="socket:[28210]" dev="sockfs" ino=28210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.497713][ T5542] hsr_slave_0: left promiscuous mode [ 123.498373][ T5542] hsr_slave_1: left promiscuous mode [ 123.498762][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.498773][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.499619][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.499629][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.509183][ T5542] veth1_macvtap: left promiscuous mode [ 123.509210][ T5542] veth0_macvtap: left promiscuous mode [ 123.509327][ T5542] veth1_vlan: left promiscuous mode [ 123.509376][ T5542] veth0_vlan: left promiscuous mode [ 123.521669][ T8764] device-mapper: ioctl: Invalid data size in the ioctl structure: 194 [ 123.644308][ T5542] team0 (unregistering): Port device 26±ÿ removed [ 123.651253][ T5542] team0 (unregistering): Port device team_slave_0 removed [ 123.753168][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.753228][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.753285][ T8710] bridge_slave_0: entered allmulticast mode [ 123.754028][ T8710] bridge_slave_0: entered promiscuous mode [ 123.755796][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.755861][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.755916][ T8710] bridge_slave_1: entered allmulticast mode [ 123.756698][ T8710] bridge_slave_1: entered promiscuous mode [ 123.773199][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.774539][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.787511][ T8710] team0: Port device team_slave_0 added [ 123.790526][ T8710] team0: Port device team_slave_1 added [ 123.811906][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.811919][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.811938][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.813599][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.813610][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.813629][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.883157][ T8710] hsr_slave_0: entered promiscuous mode [ 123.883860][ T8710] hsr_slave_1: entered promiscuous mode [ 123.990640][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 123.990666][ T8775] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 124.065008][ T8774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.065086][ T8774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.092291][ T8774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.100552][ T8710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.100778][ T8774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.100836][ T8774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.110379][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.111550][ T8710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.115611][ T8774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.122514][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.124946][ T8710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.127927][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.128611][ T8710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.138593][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.148199][ T8787] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.148221][ T8787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.148291][ T8787] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.148308][ T8787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 124.159844][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.159946][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.209547][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.216360][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.231740][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.244594][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.244650][ T7219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.253004][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.253083][ T7219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.314328][ T8800] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 124.314508][ T8800] qnx6: wrong signature (magic) in superblock #1. [ 124.314515][ T8800] qnx6: unable to read the first superblock [ 124.327615][ T8802] qnx4: unable to read the superblock [ 124.359596][ T8805] netlink: 'syz.2.864': attribute type 63 has an invalid length. [ 124.359617][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.864'. [ 124.494662][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 124.500500][ T8817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.867'. [ 124.621553][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.641700][ T8833] netlink: zone id is out of range [ 124.641909][ T8833] netlink: zone id is out of range [ 124.642043][ T8833] netlink: zone id is out of range [ 124.642215][ T8833] netlink: zone id is out of range [ 124.642267][ T8833] netlink: zone id is out of range [ 124.642386][ T8833] netlink: zone id is out of range [ 124.642463][ T8833] netlink: zone id is out of range [ 124.642477][ T8833] netlink: zone id is out of range [ 124.731353][ T8842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.738190][ T8845] netlink: 'syz.2.874': attribute type 19 has an invalid length. [ 124.781549][ T8710] veth0_vlan: entered promiscuous mode [ 124.787843][ T8710] veth1_vlan: entered promiscuous mode [ 124.817142][ T8710] veth0_macvtap: entered promiscuous mode [ 124.821227][ T8710] veth1_macvtap: entered promiscuous mode [ 124.834154][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.838382][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.911241][ T7219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.911260][ T7219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.915961][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.934042][ T7219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.934054][ T7219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.955600][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.955946][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.956144][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.990642][ T8852] netlink: 14 bytes leftover after parsing attributes in process `syz.5.847'. [ 125.606532][ T8862] netlink: 'syz.0.876': attribute type 63 has an invalid length. [ 125.606548][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 125.911166][ T8882] loop0: detected capacity change from 0 to 1 [ 125.946046][ T8882] ldm_validate_privheads(): Disk read failed. [ 125.946101][ T8882] Dev loop0: unable to read RDB block 1 [ 125.946127][ T8882] loop0: unable to read partition table [ 125.946269][ T8882] loop0: partition table beyond EOD, truncated [ 125.946285][ T8882] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 126.075587][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.156401][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 126.519724][ T8903] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 126.602824][ T8915] program syz.2.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.739584][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 126.757357][ T7209] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.757466][ T7209] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.757516][ T7219] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.853060][ T8927] FAULT_INJECTION: forcing a failure. [ 126.853060][ T8927] name failslab, interval 1, probability 0, space 0, times 0 [ 126.853091][ T8927] CPU: 0 UID: 0 PID: 8927 Comm: syz.2.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.853113][ T8927] Tainted: [L]=SOFTLOCKUP [ 126.853121][ T8927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.853131][ T8927] Call Trace: [ 126.853137][ T8927] [ 126.853143][ T8927] dump_stack_lvl+0x100/0x190 [ 126.853174][ T8927] should_fail_ex.cold+0x5/0xa [ 126.853195][ T8927] ? __netlink_lookup+0x692/0x950 [ 126.853250][ T8927] should_failslab+0xc2/0x120 [ 126.853278][ T8927] kmem_cache_alloc_noprof+0x92/0x6a0 [ 126.853323][ T8927] ? skb_clone+0x190/0x400 [ 126.853361][ T8927] skb_clone+0x190/0x400 [ 126.853386][ T8927] netlink_deliver_tap+0xaed/0xcc0 [ 126.853412][ T8927] netlink_unicast+0x6ff/0x950 [ 126.853444][ T8927] ? __pfx_netlink_unicast+0x10/0x10 [ 126.853474][ T8927] netlink_sendmsg+0x9ac/0x10c0 [ 126.853501][ T8927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.853529][ T8927] ? selinux_socket_sendmsg+0x198/0x2f0 [ 126.853575][ T8927] ? ____sys_sendmsg+0xa4d/0xbe0 [ 126.853594][ T8927] ____sys_sendmsg+0xa4d/0xbe0 [ 126.853608][ T8927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.853633][ T8927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.853657][ T8927] ? lock_acquire+0x1d1/0x380 [ 126.853675][ T8927] ? get_pid_task+0x2a/0x250 [ 126.853700][ T8927] ___sys_sendmsg+0x190/0x1e0 [ 126.853721][ T8927] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.853739][ T8927] ? get_pid_task+0x106/0x250 [ 126.853769][ T8927] ? find_held_lock+0x2b/0x80 [ 126.853809][ T8927] __sys_sendmsg+0x160/0x210 [ 126.853834][ T8927] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.853871][ T8927] do_syscall_64+0x123/0x790 [ 126.853895][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.853912][ T8927] RIP: 0033:0x7fa62b99f559 [ 126.853929][ T8927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.853943][ T8927] RSP: 002b:00007fa62c897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.853962][ T8927] RAX: ffffffffffffffda RBX: 00007fa62bc25fa0 RCX: 00007fa62b99f559 [ 126.853972][ T8927] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.853984][ T8927] RBP: 00007fa62c897090 R08: 0000000000000000 R09: 0000000000000000 [ 126.853994][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.854003][ T8927] R13: 00007fa62bc26038 R14: 00007fa62bc25fa0 R15: 00007ffd78314348 [ 126.854028][ T8927] [ 126.885158][ T8929] netlink: 'syz.2.896': attribute type 63 has an invalid length. [ 126.885173][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 127.469774][ T8959] netlink: 84 bytes leftover after parsing attributes in process `syz.5.902'. [ 128.155631][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.245408][ T5743] Bluetooth: hci2: command 0x041b tx timeout [ 128.795467][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 128.801093][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.385122][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 129.403403][ T8973] bond4: (slave bond_slave_0): Device is not our slave [ 129.403424][ T8973] bond4: option active_slave: invalid value (bond_slave_0) [ 129.404873][ T8973] bond4 (unregistering): Released all slaves [ 130.111669][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.117098][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.118973][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.119646][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.120087][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.154669][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 130.154682][ T42] audit: type=1400 audit(1792704303.751:752): avc: denied { connect } for pid=8980 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.235953][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.285661][ T8950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.285680][ T8950] nci: nci_start_poll: failed to set local general bytes [ 130.289178][ T42] audit: type=1400 audit(1792704303.891:753): avc: denied { read } for pid=8993 comm="syz.0.911" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.291669][ T42] audit: type=1400 audit(1792704303.891:754): avc: denied { open } for pid=8993 comm="syz.0.911" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.296016][ T42] audit: type=1400 audit(1792704303.891:755): avc: denied { ioctl } for pid=8993 comm="syz.0.911" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.298516][ T8945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.319479][ T5743] Bluetooth: hci2: command 0x041b tx timeout [ 130.352975][ T8982] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.359283][ T9001] netlink: 84 bytes leftover after parsing attributes in process `syz.5.912'. [ 130.391370][ T9008] loop0: detected capacity change from 0 to 1 [ 130.486593][ T9008] ldm_validate_privheads(): Disk read failed. [ 130.486684][ T9008] Dev loop0: unable to read RDB block 1 [ 130.486712][ T9008] loop0: unable to read partition table [ 130.486875][ T9008] loop0: partition table beyond EOD, truncated [ 130.486895][ T9008] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 130.509506][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.509538][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.509561][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 130.541442][ T42] audit: type=1400 audit(1792704304.141:756): avc: denied { map } for pid=9015 comm="syz.2.918" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.598506][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.598529][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.598543][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 130.649166][ T9027] jffs2: notice: (9027) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.650484][ T7209] IPVS: starting estimator thread 0... [ 130.665215][ T9024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 130.665249][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.668687][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 130.668802][ T42] audit: type=1400 audit(1792704304.271:757): avc: denied { accept } for pid=9025 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 130.668918][ T9030] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 130.672345][ T5802] vhci_hcd vhci_hcd.0: stop threads [ 130.672377][ T5802] vhci_hcd vhci_hcd.0: release socket [ 130.672397][ T5802] vhci_hcd vhci_hcd.0: disconnect device [ 130.688074][ T9032] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(19) [ 130.688094][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.688119][ T9032] vhci_hcd vhci_hcd.0: Device attached [ 130.692602][ T9035] vhci_hcd: connection closed [ 130.697266][ T5542] vhci_hcd vhci_hcd.0: stop threads [ 130.697869][ T5542] vhci_hcd vhci_hcd.0: release socket [ 130.697896][ T5542] vhci_hcd vhci_hcd.0: disconnect device [ 130.729693][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.729715][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.729729][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 130.734749][ T9026] nft_compat: unsupported protocol 156 [ 130.738589][ T42] audit: type=1400 audit(1792704304.341:758): avc: denied { write } for pid=9025 comm="syz.2.921" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.738617][ T42] audit: type=1400 audit(1792704304.341:759): avc: denied { add_name } for pid=9025 comm="syz.2.921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.741790][ T42] audit: type=1400 audit(1792704304.341:760): avc: denied { read write open } for pid=9025 comm="syz.2.921" path="/257/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.745347][ T9029] IPVS: using max 43 ests per chain, 103200 per kthread [ 130.790686][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 130.791044][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.791070][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.791091][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 130.886749][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.886855][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.886935][ T8982] bridge_slave_0: entered allmulticast mode [ 130.887884][ T8982] bridge_slave_0: entered promiscuous mode [ 130.889456][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.889555][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.889701][ T8982] bridge_slave_1: entered allmulticast mode [ 130.890388][ T8982] bridge_slave_1: entered promiscuous mode [ 130.922595][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.923929][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.938010][ T8982] team0: Port device team_slave_0 added [ 130.939468][ T8982] team0: Port device team_slave_1 added [ 130.950003][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.950013][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.950027][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.950888][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.950895][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.950909][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.016903][ T42] audit: type=1400 audit(1792704304.621:761): avc: denied { remount } for pid=9047 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.026229][ T8982] hsr_slave_0: entered promiscuous mode [ 131.026730][ T8982] hsr_slave_1: entered promiscuous mode [ 131.027047][ T8982] debugfs: 'hsr0' already exists in 'hsr' [ 131.027168][ T8982] Cannot create hsr debugfs directory [ 131.040278][ T12] bridge_slave_1: left allmulticast mode [ 131.040301][ T12] bridge_slave_1: left promiscuous mode [ 131.040559][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.045078][ T12] bridge_slave_0: left allmulticast mode [ 131.045097][ T12] bridge_slave_0: left promiscuous mode [ 131.045316][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.170482][ T12] gretap0 (unregistering): left promiscuous mode [ 131.233810][ T9053] netlink: 'syz.2.926': attribute type 11 has an invalid length. [ 131.240093][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.243102][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.244468][ T12] bond0 (unregistering): Released all slaves [ 131.254648][ T12] bond1 (unregistering): Released all slaves [ 131.289581][ T9058] netlink: 'syz.0.927': attribute type 63 has an invalid length. [ 131.289601][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 131.389606][ T9065] loop0: detected capacity change from 0 to 1 [ 131.417072][ T9065] ldm_validate_privheads(): Disk read failed. [ 131.417107][ T9065] Dev loop0: unable to read RDB block 1 [ 131.417123][ T9065] loop0: unable to read partition table [ 131.417207][ T9065] loop0: partition table beyond EOD, truncated [ 131.417221][ T9065] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 131.457532][ T9072] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 131.457682][ T9072] qnx6: wrong signature (magic) in superblock #1. [ 131.457688][ T9072] qnx6: unable to read the first superblock [ 131.508214][ T9082] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 131.552946][ T8982] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.558635][ T8982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.559171][ T8982] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.569860][ T8982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.570599][ T8982] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.579833][ T8982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.580797][ T8982] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.587822][ T9091] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 131.589294][ T8982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.591929][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 131.602315][ T9091] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 131.608963][ T9100] iommufd_mock iommufd_mock3: Adding to iommu group 12 [ 131.615708][ T9102] iommufd_mock iommufd_mock2: Adding to iommu group 13 [ 131.656160][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.678156][ T9117] netlink: 'syz.5.938': attribute type 63 has an invalid length. [ 131.678170][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.938'. [ 131.776252][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.781737][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.781803][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.792879][ T12] hsr_slave_0: left promiscuous mode [ 131.793786][ T12] hsr_slave_1: left promiscuous mode [ 131.794520][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.794535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.803249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.803260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.811226][ T12] veth1_macvtap: left promiscuous mode [ 131.811248][ T12] veth0_macvtap: left promiscuous mode [ 131.811323][ T12] veth1_vlan: left promiscuous mode [ 131.811351][ T12] veth0_vlan: left promiscuous mode [ 131.968546][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.973286][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.042001][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 132.043499][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.043543][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.099772][ T9131] loop0: detected capacity change from 0 to 1 [ 132.137029][ T9131] ldm_validate_privheads(): Disk read failed. [ 132.137093][ T9131] Dev loop0: unable to read RDB block 1 [ 132.137122][ T9131] loop0: unable to read partition table [ 132.137279][ T9131] loop0: partition table beyond EOD, truncated [ 132.137305][ T9131] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 132.245509][ T5743] Bluetooth: hci4: command tx timeout [ 132.260674][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 132.395398][ T5743] Bluetooth: hci2: command 0x041b tx timeout [ 132.428094][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.471652][ T9164] F2FS-fs: Conflicting test_dummy_encryption options [ 132.472563][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'. [ 132.472581][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 132.544024][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 132.557049][ T9171] input: syz0 as /devices/virtual/input/input14 [ 132.630775][ T9176] netlink: 'syz.5.947': attribute type 42 has an invalid length. [ 132.632214][ T9176] /dev/sg0: Can't lookup blockdev [ 132.658545][ T9173] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.709320][ T5743] Bluetooth: hci1: unexpected event for opcode 0x100c [ 132.729207][ T8982] veth0_vlan: entered promiscuous mode [ 132.740589][ T8982] veth1_vlan: entered promiscuous mode [ 132.746643][ T9181] md: invalid raid superblock magic on ram4 [ 132.746658][ T9181] md: ram4 does not have a valid v0.0 superblock, not importing! [ 132.746712][ T9181] md: md_import_device returned -22 [ 132.751956][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 132.775362][ T8982] veth0_macvtap: entered promiscuous mode [ 132.780109][ T8982] veth1_macvtap: entered promiscuous mode [ 132.795367][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.802560][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.860904][ T5542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.861482][ T5542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.861553][ T5542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.861581][ T5542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.901416][ T7215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.901430][ T7215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.930035][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.930049][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.998861][ T9183] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 132.999999][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.908'. [ 133.040283][ T9185] FAULT_INJECTION: forcing a failure. [ 133.040283][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.040316][ T9185] CPU: 3 UID: 0 PID: 9185 Comm: syz.6.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.040365][ T9185] Tainted: [L]=SOFTLOCKUP [ 133.040373][ T9185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.040398][ T9185] Call Trace: [ 133.040416][ T9185] [ 133.040424][ T9185] dump_stack_lvl+0x100/0x190 [ 133.040497][ T9185] should_fail_ex.cold+0x5/0xa [ 133.040533][ T9185] _copy_from_user+0x2e/0xd0 [ 133.040582][ T9185] ppp_write+0x1a0/0x400 [ 133.040627][ T9185] ? __pfx_ppp_write+0x10/0x10 [ 133.040648][ T9185] vfs_writev+0x5ed/0xdd0 [ 133.040696][ T9185] ? __pfx_vfs_writev+0x10/0x10 [ 133.040722][ T9185] ? lock_acquire+0x1d1/0x380 [ 133.040747][ T9185] ? __fget_files+0x34/0x3d0 [ 133.040801][ T9185] ? __fget_files+0x21f/0x3d0 [ 133.040833][ T9185] ? do_pwritev+0x1ac/0x270 [ 133.040852][ T9185] do_pwritev+0x1ac/0x270 [ 133.040874][ T9185] ? __pfx_do_pwritev+0x10/0x10 [ 133.040902][ T9185] do_syscall_64+0x123/0x790 [ 133.040942][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.040966][ T9185] RIP: 0033:0x7f9120b9f559 [ 133.040980][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.040996][ T9185] RSP: 002b:00007f9121b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 133.041015][ T9185] RAX: ffffffffffffffda RBX: 00007f9120e25fa0 RCX: 00007f9120b9f559 [ 133.041026][ T9185] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 133.041037][ T9185] RBP: 00007f9121b3d090 R08: 0000000000008001 R09: 0000000000000000 [ 133.041049][ T9185] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 133.041059][ T9185] R13: 00007f9120e26038 R14: 00007f9120e25fa0 R15: 00007ffc3c87f0c8 [ 133.041084][ T9185] [ 133.200255][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.365698][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.951'. [ 133.365729][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.951'. [ 133.385794][ T9196] program syz.0.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.571185][ T9204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.624763][ T9212] FAULT_INJECTION: forcing a failure. [ 133.624763][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.624798][ T9212] CPU: 3 UID: 0 PID: 9212 Comm: syz.5.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.624820][ T9212] Tainted: [L]=SOFTLOCKUP [ 133.624824][ T9212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.624833][ T9212] Call Trace: [ 133.624838][ T9212] [ 133.624844][ T9212] dump_stack_lvl+0x100/0x190 [ 133.624874][ T9212] should_fail_ex.cold+0x5/0xa [ 133.624899][ T9212] _copy_from_user+0x2e/0xd0 [ 133.624921][ T9212] ppp_write+0x1a0/0x400 [ 133.624946][ T9212] ? __pfx_ppp_write+0x10/0x10 [ 133.624965][ T9212] vfs_writev+0x5ed/0xdd0 [ 133.624991][ T9212] ? __pfx_vfs_writev+0x10/0x10 [ 133.625034][ T9212] ? lock_acquire+0x1d1/0x380 [ 133.625048][ T9212] ? __fget_files+0x34/0x3d0 [ 133.625081][ T9212] ? __fget_files+0x21f/0x3d0 [ 133.625111][ T9212] ? do_pwritev+0x1ac/0x270 [ 133.625128][ T9212] do_pwritev+0x1ac/0x270 [ 133.625145][ T9212] ? __pfx_do_pwritev+0x10/0x10 [ 133.625168][ T9212] do_syscall_64+0x123/0x790 [ 133.625189][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.625206][ T9212] RIP: 0033:0x7f556f59f559 [ 133.625220][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.625236][ T9212] RSP: 002b:00007f55704e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 133.625251][ T9212] RAX: ffffffffffffffda RBX: 00007f556f825fa0 RCX: 00007f556f59f559 [ 133.625260][ T9212] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 133.625270][ T9212] RBP: 00007f55704e9090 R08: 0000000000008001 R09: 0000000000000000 [ 133.625280][ T9212] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 133.625290][ T9212] R13: 00007f556f826038 R14: 00007f556f825fa0 R15: 00007fff78d55428 [ 133.625315][ T9212] [ 133.697890][ T9215] loop0: detected capacity change from 0 to 1 [ 133.753432][ T9215] ldm_validate_privheads(): Disk read failed. [ 133.753500][ T9215] Dev loop0: unable to read RDB block 1 [ 133.753527][ T9215] loop0: unable to read partition table [ 133.753682][ T9215] loop0: partition table beyond EOD, truncated [ 133.753698][ T9215] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 133.900990][ T9244] netlink: 'syz.5.965': attribute type 63 has an invalid length. [ 133.987452][ T9248] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 134.004575][ T9253] net_ratelimit: 16 callbacks suppressed [ 134.004592][ T9253] netlink: del zone limit has 8 unknown bytes [ 134.056117][ T9259] netlink: 'syz.5.970': attribute type 10 has an invalid length. [ 134.234410][ T9269] loop0: detected capacity change from 0 to 1 [ 134.276020][ T9269] ldm_validate_privheads(): Disk read failed. [ 134.276055][ T9269] Dev loop0: unable to read RDB block 1 [ 134.276072][ T9269] loop0: unable to read partition table [ 134.276155][ T9269] loop0: partition table beyond EOD, truncated [ 134.276173][ T9269] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 134.315377][ T5744] Bluetooth: hci4: command tx timeout [ 134.475545][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 134.568451][ T9284] __nla_validate_parse: 4 callbacks suppressed [ 134.568471][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.976'. [ 134.568497][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.976'. [ 134.582575][ T9284] zero sized request [ 134.642704][ T9289] netlink: 'syz.0.977': attribute type 63 has an invalid length. [ 134.642725][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'. [ 134.662229][ T5802] tipc: Subscription rejected, illegal request [ 134.761238][ T9301] loop0: detected capacity change from 0 to 1 [ 134.795409][ T5743] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 134.814711][ T9301] ldm_validate_privheads(): Disk read failed. [ 134.814775][ T9301] Dev loop0: unable to read RDB block 1 [ 134.814804][ T9301] loop0: unable to read partition table [ 134.814950][ T9301] loop0: partition table beyond EOD, truncated [ 134.817388][ T9301] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 134.828183][ T9299] tipc: Enabling of bearer rejected, failed to enable media [ 134.831306][ T9306] tipc: Enabling of bearer rejected, failed to enable media [ 134.920767][ T9318] FAULT_INJECTION: forcing a failure. [ 134.920767][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 134.920801][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.6.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.920828][ T9318] Tainted: [L]=SOFTLOCKUP [ 134.920835][ T9318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.920846][ T9318] Call Trace: [ 134.920852][ T9318] [ 134.920860][ T9318] dump_stack_lvl+0x100/0x190 [ 134.920894][ T9318] should_fail_ex.cold+0x5/0xa [ 134.920921][ T9318] should_failslab+0xc2/0x120 [ 134.920968][ T9318] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 134.921006][ T9318] ? __lock_acquire+0x5c0/0x1f40 [ 134.921028][ T9318] ? __alloc_skb+0x140/0x710 [ 134.921081][ T9318] __alloc_skb+0x140/0x710 [ 134.921107][ T9318] ? __pfx___alloc_skb+0x10/0x10 [ 134.921133][ T9318] ? lock_acquire+0x1d1/0x380 [ 134.921157][ T9318] ? do_raw_write_lock+0x11e/0x260 [ 134.921186][ T9318] tipc_buf_acquire+0x26/0xe0 [ 134.921207][ T9318] named_prepare_buf+0x29/0x170 [ 134.921232][ T9318] tipc_named_withdraw+0x206/0x680 [ 134.921275][ T9318] tipc_nametbl_withdraw+0x174/0x3e0 [ 134.921307][ T9318] tipc_sk_withdraw+0x683/0x7c0 [ 134.921333][ T9318] ? tipc_sk_leave+0x142/0x1c0 [ 134.921357][ T9318] ? __pfx_tipc_sk_leave+0x10/0x10 [ 134.921384][ T9318] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 134.921411][ T9318] ? tipc_sk_filtering+0x47d/0x590 [ 134.921443][ T9318] tipc_release+0x129/0x1650 [ 134.921478][ T9318] ? down_write+0x141/0x1f0 [ 134.921503][ T9318] ? __pfx_down_write+0x10/0x10 [ 134.921529][ T9318] ? __pfx_locks_remove_file+0x10/0x10 [ 134.921571][ T9318] __sock_release+0xb3/0x260 [ 134.921611][ T9318] ? __pfx_sock_close+0x10/0x10 [ 134.921639][ T9318] sock_close+0x1c/0x30 [ 134.921666][ T9318] __fput+0x3fb/0xb50 [ 134.921699][ T9318] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.921730][ T9318] task_work_run+0x150/0x240 [ 134.921758][ T9318] ? __pfx_task_work_run+0x10/0x10 [ 134.921792][ T9318] exit_to_user_mode_loop+0x1d8/0x700 [ 134.921816][ T9318] ? rcu_is_watching+0x13/0xc0 [ 134.921844][ T9318] do_syscall_64+0x661/0x790 [ 134.921868][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.921889][ T9318] RIP: 0033:0x7f9120b9f559 [ 134.921906][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.921923][ T9318] RSP: 002b:00007f9121b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 134.921942][ T9318] RAX: 0000000000000004 RBX: 00007f9120e25fa0 RCX: 00007f9120b9f559 [ 134.921955][ T9318] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 134.921966][ T9318] RBP: 00007f9120c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.921976][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.921987][ T9318] R13: 00007f9120e26038 R14: 00007f9120e25fa0 R15: 00007ffc3c87f0c8 [ 134.922014][ T9318] [ 134.922059][ T9318] tipc: Withdrawal distribution failure [ 135.148445][ T9329] netlink: 'syz.6.988': attribute type 63 has an invalid length. [ 135.148468][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.988'. [ 135.256183][ T9333] loop0: detected capacity change from 0 to 1 [ 135.288649][ T9333] ldm_validate_privheads(): Disk read failed. [ 135.288706][ T9333] Dev loop0: unable to read RDB block 1 [ 135.288735][ T9333] loop0: unable to read partition table [ 135.288871][ T9333] loop0: partition table beyond EOD, truncated [ 135.288886][ T9333] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 135.292546][ T5141] ldm_validate_privheads(): Disk read failed. [ 135.292590][ T5141] Dev loop0: unable to read RDB block 1 [ 135.292615][ T5141] loop0: unable to read partition table [ 135.292718][ T5141] loop0: partition table beyond EOD, truncated [ 135.350933][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 135.541628][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 135.541646][ T42] audit: type=1400 audit(1792704309.141:788): avc: denied { write } for pid=9362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.550616][ T42] audit: type=1400 audit(1792704309.151:789): avc: denied { name_bind } for pid=9355 comm="syz.6.996" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 135.550661][ T42] audit: type=1400 audit(1792704309.151:790): avc: denied { name_bind } for pid=9355 comm="syz.6.996" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 135.599013][ T42] audit: type=1400 audit(1792704309.201:791): avc: denied { write } for pid=9368 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.685559][ T42] audit: type=1400 audit(1792704309.281:792): avc: denied { write } for pid=9372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.750075][ T42] audit: type=1400 audit(1792704309.351:793): avc: denied { write } for pid=9375 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.051980][ T5802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.110361][ T9335] nvme nvme0: rdma connection establishment failed (-512) [ 136.147763][ T5802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.148508][ T9380] netlink: 'syz.2.1000': attribute type 63 has an invalid length. [ 136.148522][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1000'. [ 136.190921][ T5141] ldm_validate_privheads(): Disk read failed. [ 136.190956][ T5141] Dev loop0: unable to read RDB block 1 [ 136.190973][ T5141] loop0: unable to read partition table [ 136.191063][ T5141] loop0: partition table beyond EOD, truncated [ 136.202411][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.202681][ T5802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.207061][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.208925][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.209687][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.210083][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.226011][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1002'. [ 136.256700][ T7212] Bluetooth: hci3: Frame reassembly failed (-84) [ 136.293082][ T5802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.313404][ T9395] Bluetooth: MGMT ver 1.23 [ 136.424779][ T5802] bridge_slave_1: left allmulticast mode [ 136.424796][ T5802] bridge_slave_1: left promiscuous mode [ 136.424930][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.431965][ T5802] bridge_slave_0: left allmulticast mode [ 136.431980][ T5802] bridge_slave_0: left promiscuous mode [ 136.432116][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.486762][ T5141] ldm_validate_privheads(): Disk read failed. [ 136.486797][ T5141] Dev loop0: unable to read RDB block 1 [ 136.486813][ T5141] loop0: unable to read partition table [ 136.486896][ T5141] loop0: partition table beyond EOD, truncated [ 136.542055][ T9412] could not allocate digest TFM handle cryptd(blake2b-160) [ 136.555425][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 136.562258][ T5802] bond2 (unregistering): (slave geneve2): Releasing active interface [ 136.577183][ T5802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.578721][ T5802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.580074][ T5802] bond0 (unregistering): Released all slaves [ 136.585022][ T5802] bond1 (unregistering): Released all slaves [ 136.593627][ T5802] bond2 (unregistering): Released all slaves [ 136.598967][ T5802] bond3 (unregistering): Released all slaves [ 136.609748][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1009'. [ 136.623857][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'. [ 136.667453][ T9433] netlink: 'syz.2.1014': attribute type 63 has an invalid length. [ 136.667469][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 136.699773][ T5802] tipc: Disabling bearer [ 136.700999][ T5802] tipc: Left network mode [ 136.701048][ T9384] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.714930][ T5802] IPVS: stopping backup sync thread 7945 ... [ 136.727762][ T42] audit: type=1400 audit(1792704310.331:794): avc: denied { write } for pid=9434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.800652][ T42] audit: type=1400 audit(1792704310.401:795): avc: denied { write } for pid=9442 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.829645][ T9448] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 136.847837][ T9448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.882625][ T9448] bond2: (slave geneve2): making interface the new active one [ 136.889060][ T9448] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 136.895043][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 137.043691][ T42] audit: type=1400 audit(1792704310.641:796): avc: denied { write } for pid=9460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.107414][ T42] audit: type=1400 audit(1792704310.711:797): avc: denied { write } for pid=9465 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.220490][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 137.270343][ T5802] hsr_slave_0: left promiscuous mode [ 137.274641][ T5802] hsr_slave_1: left promiscuous mode [ 137.275075][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.275087][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.290084][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.290099][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.302404][ T5802] veth1_macvtap: left promiscuous mode [ 137.302432][ T5802] veth0_macvtap: left promiscuous mode [ 137.302505][ T5802] veth1_vlan: left promiscuous mode [ 137.401326][ T5802] team0 (unregistering): Port device vlan0 removed [ 137.421620][ T7209] smc: removing ib device syz0 [ 137.493152][ T5802] team0 (unregistering): Port device team_slave_1 removed [ 137.507786][ T5802] team0 (unregistering): Port device team_slave_0 removed [ 137.602705][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 137.615615][ T5819] infiniband syz0: ib_query_port failed (-19) [ 137.708162][ T7209] smbdirect: ib_dev[syz0] removed [ 137.810204][ T9490] bridge: RTM_NEWNEIGH with invalid ether address [ 137.811385][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.811511][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.811609][ T9384] bridge_slave_0: entered allmulticast mode [ 137.840585][ T9384] bridge_slave_0: entered promiscuous mode [ 137.842520][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.845598][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.845703][ T9384] bridge_slave_1: entered allmulticast mode [ 137.846494][ T9384] bridge_slave_1: entered promiscuous mode [ 137.889128][ T5443] 8021q: adding VLAN 0 to HW filter on device eth18 [ 137.896088][ T9384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.898767][ T9384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.937048][ T9384] team0: Port device team_slave_0 added [ 137.939339][ T9384] team0: Port device team_slave_1 added [ 137.984522][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.984534][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.984548][ T9384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.987661][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.987670][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.987684][ T9384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.042711][ T9384] hsr_slave_0: entered promiscuous mode [ 138.043569][ T9384] hsr_slave_1: entered promiscuous mode [ 138.044167][ T9384] debugfs: 'hsr0' already exists in 'hsr' [ 138.044183][ T9384] Cannot create hsr debugfs directory [ 138.235947][ T5744] Bluetooth: hci4: command tx timeout [ 138.248893][ T9384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.253674][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.254695][ T9384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.273932][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.274672][ T9384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.284898][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.287868][ T9384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.290429][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.311019][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.311069][ T9384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.311169][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.311212][ T9384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.315472][ T5743] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 138.316397][ T5743] Bluetooth: hci0: command tx timeout [ 138.373833][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.384418][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.384603][ T5802] IPVS: stop unused estimator thread 0... [ 138.387513][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.437303][ T9384] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.446634][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.446679][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.452592][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.452667][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.521627][ T9518] FAULT_INJECTION: forcing a failure. [ 138.521627][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 138.521650][ T9518] CPU: 0 UID: 0 PID: 9518 Comm: syz.5.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.521665][ T9518] Tainted: [L]=SOFTLOCKUP [ 138.521670][ T9518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.521676][ T9518] Call Trace: [ 138.521681][ T9518] [ 138.521686][ T9518] dump_stack_lvl+0x100/0x190 [ 138.521707][ T9518] should_fail_ex.cold+0x5/0xa [ 138.521723][ T9518] should_failslab+0xc2/0x120 [ 138.521742][ T9518] __kmalloc_cache_noprof+0x91/0x6d0 [ 138.521756][ T9518] ? lockdep_init_map_type+0x5c/0x250 [ 138.521768][ T9518] ? snd_seq_prioq_new+0x3f/0x110 [ 138.521801][ T9518] snd_seq_prioq_new+0x3f/0x110 [ 138.521814][ T9518] snd_seq_queue_alloc+0x12b/0x540 [ 138.521829][ T9518] snd_seq_ioctl_create_queue+0xa9/0x370 [ 138.521853][ T9518] snd_seq_ioctl+0x219/0x410 [ 138.521868][ T9518] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 138.521890][ T9518] ? selinux_file_ioctl+0x1e0/0x290 [ 138.521925][ T9518] ? selinux_file_ioctl+0x1e7/0x290 [ 138.521943][ T9518] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 138.521958][ T9518] __x64_sys_ioctl+0x18e/0x210 [ 138.521975][ T9518] do_syscall_64+0x123/0x790 [ 138.521988][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.522000][ T9518] RIP: 0033:0x7f556f59f559 [ 138.522010][ T9518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.522020][ T9518] RSP: 002b:00007f55704e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.522031][ T9518] RAX: ffffffffffffffda RBX: 00007f556f825fa0 RCX: 00007f556f59f559 [ 138.522039][ T9518] RDX: 0000200000000740 RSI: 00000000c08c5332 RDI: 0000000000000004 [ 138.522046][ T9518] RBP: 00007f556f636b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.522059][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.522066][ T9518] R13: 00007f556f826038 R14: 00007f556f825fa0 R15: 00007fff78d55428 [ 138.522080][ T9518] [ 138.705106][ T9530] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 138.822368][ T9384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.976387][ T9384] veth0_vlan: entered promiscuous mode [ 138.982536][ T9384] veth1_vlan: entered promiscuous mode [ 139.011046][ T9384] veth0_macvtap: entered promiscuous mode [ 139.014721][ T9384] veth1_macvtap: entered promiscuous mode [ 139.026676][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.042644][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.107735][ T5802] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.108096][ T5802] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.108416][ T5802] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.126107][ T5542] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.173161][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.173182][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.213051][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.213072][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.275131][ T9564] Console: switching to colour dummy device 80x25 [ 139.380673][ T1067] Bluetooth: hci3: Frame reassembly failed (-84) [ 139.553857][ T9586] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 139.699884][ T9574] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 139.721880][ T9595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.721928][ T9574] pci 0000:00:00.0: Adding to iommu group 0 [ 139.726026][ T9595] __nla_validate_parse: 6 callbacks suppressed [ 139.726053][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 139.726055][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 139.757746][ T9598] serio: Serial port ptm1 [ 139.758721][ T9574] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 139.763753][ T9574] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref] [ 139.763938][ T9574] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 139.764011][ T9574] pci 0000:00:01.0: BAR 4 [mem 0xfeaf6000-0xfeaf6fff] [ 139.764135][ T9574] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 139.764623][ T9574] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 139.811058][ T9574] pci 0000:00:01.0: Adding to iommu group 1 [ 139.827249][ T9574] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 139.827264][ T9574] pci 0000:00:01.0: vgaarb: bridge control possible [ 139.827272][ T9574] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 139.837346][ T9574] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 139.838136][ T9574] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 139.852623][ T9574] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 139.891835][ T9606] smc: net device vlan1 applied user defined pnetid SYZ2 [ 139.922176][ T9606] FAULT_INJECTION: forcing a failure. [ 139.922176][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 139.922218][ T9606] CPU: 2 UID: 0 PID: 9606 Comm: syz.2.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.922245][ T9606] Tainted: [L]=SOFTLOCKUP [ 139.922252][ T9606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.922272][ T9606] Call Trace: [ 139.922285][ T9606] [ 139.922292][ T9606] dump_stack_lvl+0x100/0x190 [ 139.922400][ T9606] should_fail_ex.cold+0x5/0xa [ 139.922438][ T9606] should_failslab+0xc2/0x120 [ 139.922503][ T9606] __kmalloc_cache_noprof+0x91/0x6d0 [ 139.922535][ T9606] ? call_usermodehelper_setup+0xaf/0x360 [ 139.922576][ T9606] ? __pfx_free_modprobe_argv+0x10/0x10 [ 139.922605][ T9606] call_usermodehelper_setup+0xaf/0x360 [ 139.922641][ T9606] __request_module+0x3c7/0x6a0 [ 139.922669][ T9606] ? __pfx___request_module+0x10/0x10 [ 139.922693][ T9606] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 139.922741][ T9606] ? rcu_is_watching+0x13/0xc0 [ 139.922767][ T9606] ? cap_capable+0x107/0x430 [ 139.922808][ T9606] ? __pfx_ioctl_standard_call+0x10/0x10 [ 139.922874][ T9606] dev_load+0x204/0x240 [ 139.922920][ T9606] wext_ioctl_dispatch.constprop.0+0x9e/0x3d0 [ 139.922946][ T9606] wext_handle_ioctl+0x105/0x1b0 [ 139.922968][ T9606] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 139.922989][ T9606] ? do_vfs_ioctl+0x226/0x13e0 [ 139.923022][ T9606] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.923044][ T9606] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 139.923080][ T9606] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 139.923115][ T9606] sock_ioctl+0x2d4/0x6b0 [ 139.923145][ T9606] ? __pfx_sock_ioctl+0x10/0x10 [ 139.923172][ T9606] ? selinux_file_ioctl+0x1e0/0x290 [ 139.923202][ T9606] ? selinux_file_ioctl+0x1e7/0x290 [ 139.923232][ T9606] ? __pfx_sock_ioctl+0x10/0x10 [ 139.923254][ T9606] __x64_sys_ioctl+0x18e/0x210 [ 139.923278][ T9606] do_syscall_64+0x123/0x790 [ 139.923338][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.923357][ T9606] RIP: 0033:0x7fa62b99f559 [ 139.923373][ T9606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.923390][ T9606] RSP: 002b:00007fa62c876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.923410][ T9606] RAX: ffffffffffffffda RBX: 00007fa62bc26090 RCX: 00007fa62b99f559 [ 139.923422][ T9606] RDX: 0000200000000140 RSI: 0000000000008b1a RDI: 0000000000000005 [ 139.923434][ T9606] RBP: 00007fa62ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 139.923446][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.923457][ T9606] R13: 00007fa62bc26128 R14: 00007fa62bc26090 R15: 00007ffd78314348 [ 139.923481][ T9606] [ 139.942282][ T9574] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 139.942450][ T9574] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 139.943978][ T9574] [drm] features: -virgl +edid -resource_blob -host_visible [ 139.943989][ T9574] [drm] features: -context_init -blob_alignment [ 139.970687][ T9574] [drm] number of scanouts: 1 [ 139.970735][ T9574] [drm] number of cap sets: 0 [ 140.036766][ T9574] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 140.101952][ T9606] device-mapper: table: 248:4: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 140.101972][ T9606] device-mapper: ioctl: error adding target to table [ 140.151451][ T9574] Console: switching to colour frame buffer device 160x50 [ 140.194005][ T9574] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 140.351968][ T9638] hashlimit_mt_check_common: 2 callbacks suppressed [ 140.351981][ T9638] xt_hashlimit: size too large, truncated to 1048576 [ 140.463863][ T9644] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1057'. [ 140.463883][ T9644] tipc: Invalid UDP bearer configuration [ 140.463917][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 141.006353][ T9671] overlayfs: failed to resolve './file2': -2 [ 141.045592][ T9676] ip_tables: iptables: counters copy to user failed while replacing table [ 141.099664][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 141.099695][ T42] audit: type=1400 audit(1792704314.701:811): avc: denied { write } for pid=9675 comm="syz.2.1067" name="/" dev="9p" ino=78905365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.114942][ T42] audit: type=1400 audit(1792704314.711:812): avc: denied { append } for pid=9675 comm="syz.2.1067" path="/293/file0/memory.events" dev="9p" ino=78905491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.151748][ T42] audit: type=1400 audit(1792704314.751:813): avc: denied { map } for pid=9675 comm="syz.2.1067" path="/293/file0/memory.events" dev="9p" ino=78905491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.179097][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1068'. [ 141.179262][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1068'. [ 141.212698][ T42] audit: type=1400 audit(1792704314.811:814): avc: denied { watch } for pid=9688 comm="syz.5.1071" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=32625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.213115][ T42] audit: type=1400 audit(1792704314.811:815): avc: denied { execute } for pid=9688 comm="syz.5.1071" dev="hugetlbfs" ino=32625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.213718][ T42] audit: type=1400 audit(1792704314.811:816): avc: denied { execute_no_trans } for pid=9688 comm="syz.5.1071" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=32625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.215039][ T42] audit: type=1400 audit(1792704314.811:817): avc: denied { search } for pid=9686 comm="syz.6.1070" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 141.215065][ T42] audit: type=1400 audit(1792704314.811:818): avc: denied { read write } for pid=9686 comm="syz.6.1070" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 141.215142][ T42] audit: type=1400 audit(1792704314.811:819): avc: denied { open } for pid=9686 comm="syz.6.1070" path="/35/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 141.271012][ T42] audit: type=1400 audit(1792704314.871:820): avc: denied { mount } for pid=9688 comm="syz.5.1071" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 141.276721][ T9687] NFSD: Failed to start, no listeners configured. [ 141.278966][ T9688] ima: policy update failed [ 141.355769][ T5743] Bluetooth: hci0: command tx timeout [ 141.367571][ T9695] IPVS: set_ctl: invalid protocol: 58 172.20.20.57:20004 [ 141.435837][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 141.435962][ T5743] Bluetooth: hci3: command 0x1003 tx timeout [ 141.438726][ T9708] comedi comedi1: comedi_config --init_data is deprecated [ 141.520723][ T1306] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 60 seconds [ 141.520774][ T1306] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 60 seconds [ 141.582497][ T9703] 9pnet_virtio: no channels available for device syz [ 141.582745][ T9703] 9pnet_virtio: no channels available for device syz [ 141.582994][ T9703] 9pnet_virtio: no channels available for device syz [ 141.583273][ T9703] 9pnet_virtio: no channels available for device syz [ 141.583486][ T9703] 9pnet_virtio: no channels available for device syz [ 141.583719][ T9703] 9pnet_virtio: no channels available for device syz [ 141.583930][ T9703] 9pnet_virtio: no channels available for device syz [ 141.584129][ T9703] 9pnet_virtio: no channels available for device syz [ 141.584354][ T9703] 9pnet_virtio: no channels available for device syz [ 141.584576][ T9703] 9pnet_virtio: no channels available for device syz [ 141.584782][ T9703] 9pnet_virtio: no channels available for device syz [ 141.584990][ T9703] 9pnet_virtio: no channels available for device syz [ 141.585190][ T9703] 9pnet_virtio: no channels available for device syz [ 141.586497][ T9703] 9pnet_virtio: no channels available for device syz [ 141.586706][ T9703] 9pnet_virtio: no channels available for device syz [ 141.586914][ T9703] 9pnet_virtio: no channels available for device syz [ 141.587121][ T9703] 9pnet_virtio: no channels available for device syz [ 141.587325][ T9703] 9pnet_virtio: no channels available for device syz [ 141.587615][ T9703] 9pnet_virtio: no channels available for device syz [ 141.587823][ T9703] 9pnet_virtio: no channels available for device syz [ 141.588029][ T9703] 9pnet_virtio: no channels available for device syz [ 141.588238][ T9703] 9pnet_virtio: no channels available for device syz [ 141.589347][ T9703] 9pnet_virtio: no channels available for device syz [ 141.589585][ T9703] 9pnet_virtio: no channels available for device syz [ 141.589812][ T9703] 9pnet_virtio: no channels available for device syz [ 141.590101][ T9703] 9pnet_virtio: no channels available for device syz [ 141.590335][ T9703] 9pnet_virtio: no channels available for device syz [ 141.590586][ T9703] 9pnet_virtio: no channels available for device syz [ 141.590821][ T9703] 9pnet_virtio: no channels available for device syz [ 141.591068][ T9703] 9pnet_virtio: no channels available for device syz [ 141.591315][ T9703] 9pnet_virtio: no channels available for device syz [ 141.591546][ T9703] 9pnet_virtio: no channels available for device syz [ 141.711203][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1076'. [ 141.994800][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.994827][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.994893][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.994909][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.994963][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.994978][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995031][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995046][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995114][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995129][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995184][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995199][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995360][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995377][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995440][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995450][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995513][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995528][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995581][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995596][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995648][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995663][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995724][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995738][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995793][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995808][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995861][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995876][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.995935][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.995950][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996010][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996021][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996080][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996095][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996147][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996162][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996219][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996273][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996354][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996370][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996424][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996438][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996499][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996508][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996569][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996583][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996635][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996651][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996702][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996716][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.996776][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.996786][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.999670][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.999683][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.999745][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.999759][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.999833][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.999848][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.999906][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.999921][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 141.999983][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 141.999997][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000052][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000066][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000128][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000142][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000205][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000215][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000342][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000358][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000418][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000430][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000494][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000508][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000564][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000579][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000640][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000654][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000714][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000724][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000785][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000800][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000853][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000868][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.000927][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.000943][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001005][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001014][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001077][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001091][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001145][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001161][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001227][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001291][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001349][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001363][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001425][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001439][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001493][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001507][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001562][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001575][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001636][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001650][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.001704][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.001719][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.007949][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.007965][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008006][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008015][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008050][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008059][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008095][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008104][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008139][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008147][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008183][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008192][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008225][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008462][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008616][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008627][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008663][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008672][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008708][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008716][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008751][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008760][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.008794][ T5744] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 142.008803][ T5744] Bluetooth: hci1: unexpected event for opcode 0x206e [ 142.040651][ T9741] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 142.040672][ T9741] overlayfs: overlapping lowerdir path [ 142.050811][ T9739] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.050825][ T9739] block device autoloading is deprecated and will be removed. [ 142.093433][ T9752] netlink: 'syz.7.1084': attribute type 12 has an invalid length. [ 142.421130][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1089'. [ 142.439938][ T6570] Bluetooth: hci3: Frame reassembly failed (-84) [ 142.439980][ T6570] Bluetooth: hci3: Frame reassembly failed (-84) [ 142.440008][ T6570] Bluetooth: hci3: Frame reassembly failed (-84) [ 142.440035][ T6570] Bluetooth: hci3: Frame reassembly failed (-84) [ 142.440063][ T6570] Bluetooth: hci3: Frame reassembly failed (-84) [ 142.504411][ T9770] binder: BINDER_SET_CONTEXT_MGR already set [ 142.504426][ T9770] binder: 9766:9770 ioctl 4018620d 200000000080 returned -16 [ 142.599497][ T9777] erofs (device loop2): cannot find valid erofs superblock [ 142.601303][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 142.649654][ T9782] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 142.908200][ T9787] jffs2: notice: (9787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 142.963092][ T9792] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1097'. [ 143.016936][ T9793] FAULT_INJECTION: forcing a failure. [ 143.016936][ T9793] name failslab, interval 1, probability 0, space 0, times 0 [ 143.016969][ T9793] CPU: 3 UID: 0 PID: 9793 Comm: syz.7.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.016995][ T9793] Tainted: [L]=SOFTLOCKUP [ 143.017002][ T9793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.017022][ T9793] Call Trace: [ 143.017038][ T9793] [ 143.017046][ T9793] dump_stack_lvl+0x100/0x190 [ 143.017114][ T9793] should_fail_ex.cold+0x5/0xa [ 143.017149][ T9793] should_failslab+0xc2/0x120 [ 143.017198][ T9793] __kmalloc_noprof+0xfc/0x840 [ 143.017223][ T9793] ? lockdep_init_map_type+0x5c/0x250 [ 143.017251][ T9793] ? ops_init+0x77/0x5f0 [ 143.017302][ T9793] ops_init+0x77/0x5f0 [ 143.017331][ T9793] setup_net+0x118/0x3a0 [ 143.017352][ T9793] ? __pfx_setup_net+0x10/0x10 [ 143.017378][ T9793] ? bpf_lsm_namespace_init+0x9/0x10 [ 143.017411][ T9793] copy_net_ns+0x340/0x7a0 [ 143.017430][ T9793] create_new_namespaces+0x3ea/0xac0 [ 143.017468][ T9793] unshare_nsproxy_namespaces+0xf6/0x210 [ 143.017493][ T9793] ksys_unshare+0x44f/0x980 [ 143.017514][ T9793] ? __pfx_ksys_unshare+0x10/0x10 [ 143.017533][ T9793] ? fput+0x7c/0x100 [ 143.017568][ T9793] ? ksys_write+0x1ac/0x250 [ 143.017599][ T9793] __x64_sys_unshare+0x31/0x40 [ 143.017618][ T9793] do_syscall_64+0x123/0x790 [ 143.017652][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.017671][ T9793] RIP: 0033:0x7f63dcb9f559 [ 143.017689][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.017704][ T9793] RSP: 002b:00007f63dda7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.017724][ T9793] RAX: ffffffffffffffda RBX: 00007f63dce26090 RCX: 00007f63dcb9f559 [ 143.017735][ T9793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 143.017747][ T9793] RBP: 00007f63dcc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 143.017757][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.017763][ T9793] R13: 00007f63dce26128 R14: 00007f63dce26090 R15: 00007ffd16dba378 [ 143.017788][ T9793] [ 143.223382][ T9799] netlink: 'syz.2.1099': attribute type 8 has an invalid length. [ 143.223952][ T9799] SET target dimension over the limit! [ 143.381173][ T9806] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 143.381188][ T9806] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1102'. [ 143.445654][ T5743] Bluetooth: hci0: command tx timeout [ 143.590074][ T6571] nvmet: connect request for invalid subsystem testsubsys! [ 143.590191][ T9809] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 143.834079][ T9817] Cannot find add_set index 0 as target [ 144.016207][ T9824] 9p: Bad value for 'rfdno' [ 144.389662][ T9862] UBIFS error (pid: 9862): cannot open "ubi0:testvol", error -19 [ 144.393128][ T9862] lo: entered allmulticast mode [ 144.475423][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 144.475933][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 144.639656][ T9872] key id 00000004 not found [ 144.648872][ T5884] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.652806][ T5884] usb 7-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 144.652830][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 144.654756][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.654789][ T5884] usb 7-1: Product: syz [ 144.654802][ T5884] usb 7-1: Manufacturer: syz [ 144.654815][ T5884] usb 7-1: SerialNumber: syz [ 144.660029][ T5884] usb 7-1: config 0 descriptor?? [ 144.704999][ T5884] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 144.721929][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.018722][ T9895] netlink: 'syz.6.1122': attribute type 30 has an invalid length. [ 145.030939][ T9895] bond1: option arp_missed_max: invalid value (0) [ 145.030956][ T9895] bond1: option arp_missed_max: allowed values 1 - 255 [ 145.032118][ T9895] bond1 (unregistering): Released all slaves [ 145.220149][ T9861] lo: left allmulticast mode [ 145.235365][ T1037] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 145.368810][ T1037] usb 10-1: device descriptor read/64, error -71 [ 145.469741][ T9908] openvswitch: netlink: Invalid VLAN frame [ 145.469745][ T9909] openvswitch: netlink: Invalid VLAN frame [ 145.615468][ T1037] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 145.623682][ T9913] syzkaller0: entered promiscuous mode [ 145.623702][ T9913] syzkaller0: entered allmulticast mode [ 145.634821][ T9913] netlink: 'syz.6.1126': attribute type 5 has an invalid length. [ 145.757200][ T1037] usb 10-1: device descriptor read/64, error -71 [ 145.795077][ T9921] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.865918][ T1037] usb usb10-port1: attempt power cycle [ 146.215394][ T1037] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 146.245971][ T1037] usb 10-1: device descriptor read/8, error -71 [ 146.262156][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1131'. [ 146.275117][ T6571] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.505332][ T1037] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 146.526521][ T1037] usb 10-1: device descriptor read/8, error -71 [ 146.636903][ T5741] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 146.636957][ T5741] Bluetooth: hci1: Injecting HCI hardware error event [ 146.638137][ T1037] usb usb10-port1: unable to enumerate USB device [ 146.641677][ T5092] Bluetooth: hci1: hardware error 0x00 [ 147.278374][ T5827] usb 7-1: USB disconnect, device number 10 [ 148.040989][ T7225] IPVS: starting estimator thread 0... [ 148.049065][ T9937] tipc: Started in network mode [ 148.049087][ T9937] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 148.049335][ T9937] tipc: Enabled bearer , priority 0 [ 148.049510][ T9939] tipc: Enabling of bearer rejected, already enabled [ 148.050196][ T9936] 0x000000000000-0x000000020000 : "" [ 148.069272][ T9936] ftl_cs: FTL header not found. [ 148.075458][ T5741] Bluetooth: hci3: command 0x1003 tx timeout [ 148.076711][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 148.135400][ T9938] IPVS: using max 43 ests per chain, 103200 per kthread [ 148.144121][ T9942] netlink: 'syz.6.1134': attribute type 3 has an invalid length. [ 148.161587][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 148.161614][ T42] audit: type=1400 audit(1792704321.761:849): avc: denied { read } for pid=9944 comm="syz.5.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.183068][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 148.227522][ T9958] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 148.229556][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1139'. [ 148.229568][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 148.229596][ T9959] netlink: 'syz.5.1139': attribute type 18 has an invalid length. [ 148.247406][ T9955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.249340][ T9955] bond3: (slave bond4): making interface the new active one [ 148.249675][ T9955] bond3: (slave bond4): Enslaving as an active interface with an up link [ 148.265379][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 18432 - 0 [ 148.275357][ T5542] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 18432 - 0 [ 148.275392][ T5542] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 18432 - 0 [ 148.275408][ T5542] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 18432 - 0 [ 148.315352][ T5743] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.315387][ T5741] Bluetooth: hci5: command 0x1003 tx timeout [ 148.372264][ T9966] lo: entered promiscuous mode [ 148.372305][ T9966] lo: entered allmulticast mode [ 148.390721][ T9966] bond0: entered promiscuous mode [ 148.390742][ T9966] bond0: entered allmulticast mode [ 148.391801][ T9966] dummy0: entered promiscuous mode [ 148.391816][ T9966] dummy0: entered allmulticast mode [ 148.403047][ T9966] eql: entered promiscuous mode [ 148.403066][ T9966] eql: entered allmulticast mode [ 148.407130][ T9966] ifb0: entered promiscuous mode [ 148.407147][ T9966] ifb0: entered allmulticast mode [ 148.413756][ T9966] ifb1: entered promiscuous mode [ 148.413772][ T9966] ifb1: entered allmulticast mode [ 148.429992][ T42] audit: type=1400 audit(1792704322.031:850): avc: denied { write } for pid=9970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.485927][ T42] audit: type=1400 audit(1792704322.091:851): avc: denied { write } for pid=9975 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.627146][ T9966] e1000 0000:00:07.0 eth0: entered promiscuous mode [ 148.627171][ T9966] e1000 0000:00:07.0 eth0: entered allmulticast mode [ 148.645208][ T9966] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 148.716102][ T5092] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 148.740654][ T9966] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 148.853986][ T9981] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 148.880344][ T9966] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 148.883142][ T9966] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 148.883161][ T9966] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 148.896038][ T9983] FAULT_INJECTION: forcing a failure. [ 148.896038][ T9983] name failslab, interval 1, probability 0, space 0, times 0 [ 148.896058][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.7.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.896073][ T9983] Tainted: [L]=SOFTLOCKUP [ 148.896077][ T9983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.896090][ T9983] Call Trace: [ 148.896101][ T9983] [ 148.896106][ T9983] dump_stack_lvl+0x100/0x190 [ 148.896155][ T9983] should_fail_ex.cold+0x5/0xa [ 148.896178][ T9983] should_failslab+0xc2/0x120 [ 148.896212][ T9983] kmem_cache_alloc_noprof+0x92/0x6a0 [ 148.896234][ T9983] ? security_file_alloc+0x34/0x2c0 [ 148.896297][ T9983] security_file_alloc+0x34/0x2c0 [ 148.896316][ T9983] init_file+0x95/0x480 [ 148.896340][ T9983] alloc_empty_file+0x79/0x1c0 [ 148.896351][ T9983] dentry_open+0x46/0xd0 [ 148.896367][ T9983] ovl_path_open+0x181/0x1d0 [ 148.896446][ T9983] ovl_check_d_type_supported+0xa4/0x240 [ 148.896460][ T9983] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 148.896474][ T9983] ? __pfx_wake_up_var+0x10/0x10 [ 148.896496][ T9983] ? __pfx_ovl_check_d_type+0x10/0x10 [ 148.896512][ T9983] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.896526][ T9983] ? _raw_spin_unlock+0x28/0x50 [ 148.896556][ T9983] ovl_fill_super+0xf7d/0x5d30 [ 148.896583][ T9983] ? __pfx_ovl_fill_super+0x10/0x10 [ 148.896598][ T9983] ? __pfx_sget_fc+0x10/0x10 [ 148.896614][ T9983] ? rcu_is_watching+0x13/0xc0 [ 148.896630][ T9983] ? cap_capable+0x107/0x430 [ 148.896646][ T9983] ? __pfx_ovl_fill_super+0x10/0x10 [ 148.896660][ T9983] get_tree_nodev+0xdd/0x190 [ 148.896674][ T9983] vfs_get_tree+0x92/0x320 [ 148.896686][ T9983] path_mount+0x7d0/0x2850 [ 148.896715][ T9983] ? __pfx_path_mount+0x10/0x10 [ 148.896727][ T9983] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.896742][ T9983] ? putname+0xb1/0x110 [ 148.896752][ T9983] ? kmem_cache_free+0x127/0x6c0 [ 148.896769][ T9983] ? __x64_sys_mount+0x293/0x310 [ 148.896781][ T9983] __x64_sys_mount+0x293/0x310 [ 148.896793][ T9983] ? __pfx___x64_sys_mount+0x10/0x10 [ 148.896810][ T9983] do_syscall_64+0x123/0x790 [ 148.896825][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.896837][ T9983] RIP: 0033:0x7f63dcb9f559 [ 148.896847][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.896857][ T9983] RSP: 002b:00007f63dda9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.896868][ T9983] RAX: ffffffffffffffda RBX: 00007f63dce25fa0 RCX: 00007f63dcb9f559 [ 148.896875][ T9983] RDX: 0000200000000e40 RSI: 0000200000000e00 RDI: 0000000000000000 [ 148.896882][ T9983] RBP: 00007f63dcc36b20 R08: 0000200000000e80 R09: 0000000000000000 [ 148.896888][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.896894][ T9983] R13: 00007f63dce26038 R14: 00007f63dce25fa0 R15: 00007ffd16dba378 [ 148.896909][ T9983] [ 148.918922][ T9979] bond1: entered promiscuous mode [ 148.952292][ T9982] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 148.954185][ T42] audit: type=1400 audit(1792704322.551:852): avc: denied { write } for pid=9985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.008836][ T42] audit: type=1400 audit(1792704322.611:853): avc: denied { write } for pid=9990 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.065780][ T42] audit: type=1400 audit(1792704322.671:854): avc: denied { write } for pid=10004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.111279][ T42] audit: type=1400 audit(1792704322.711:855): avc: denied { write } for pid=10009 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.175391][ T5589] tipc: Node number set to 11578026 [ 149.178488][ T42] audit: type=1400 audit(1792704322.781:856): avc: denied { write } for pid=10011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.220086][ T42] audit: type=1400 audit(1792704322.821:857): avc: denied { write } for pid=10014 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.281539][ T42] audit: type=1400 audit(1792704322.881:858): avc: denied { write } for pid=10016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.862862][ T5141] udevd[5141]: worker [5981] /devices/virtual/block/nbd2 is taking a long time [ 171.600207][ T1306] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 90 seconds [ 171.600269][ T1306] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 90 seconds [ 194.636813][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.677281][ T5086] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 120 seconds [ 201.677307][ T5086] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 120 seconds [ 231.756072][ T5086] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 150 seconds [ 231.756107][ T5086] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 150 seconds [ 253.045414][ T5092] Bluetooth: hci4: command 0x0406 tx timeout [ 256.077374][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.835667][ T5086] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 180 seconds [ 261.835702][ T5086] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 180 seconds [ 262.069744][ T5141] udevd[5141]: worker [5981] /devices/virtual/block/nbd2 timeout; kill it [ 262.073365][ T5141] udevd[5141]: seq 11685 '/devices/virtual/block/nbd2' killed [ 291.917305][ T5086] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 210 seconds [ 291.917344][ T5086] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 210 seconds [ 317.516045][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.995940][ T5086] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 240 seconds [ 321.995966][ T5086] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 240 seconds [ 352.076256][ T25] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 270 seconds [ 352.076292][ T25] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 270 seconds [ 378.957523][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.155557][ T25] block nbd2: Possible stuck request ffff88802a3e7000: control (read@0,1024B). Runtime 300 seconds [ 382.155588][ T25] block nbd2: Possible stuck request ffff88802a3e71c0: control (read@1024,3072B). Runtime 300 seconds [ 410.955457][ T45] INFO: task udevd:5981 blocked in I/O wait for more than 143 seconds. [ 410.955475][ T45] Tainted: G L syzkaller #0 [ 410.955481][ T45] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.955486][ T45] task:udevd state:D stack:24008 pid:5981 tgid:5981 ppid:5141 task_flags:0x400140 flags:0x00080002 [ 410.955516][ T45] Call Trace: [ 410.955520][ T45] [ 410.955528][ T45] __schedule+0x125e/0x6990 [ 410.955545][ T45] ? __lock_acquire+0x5c0/0x1f40 [ 410.955566][ T45] ? __pfx___schedule+0x10/0x10 [ 410.955576][ T45] ? find_held_lock+0x2b/0x80 [ 410.955591][ T45] ? schedule+0x225/0x2c0 [ 410.955604][ T45] schedule+0xdd/0x2c0 [ 410.955614][ T45] io_schedule+0x8a/0xf0 [ 410.955625][ T45] folio_wait_bit_common+0x418/0xad0 [ 410.955657][ T45] ? folio_wait_bit_common+0x2a0/0xad0 [ 410.955675][ T45] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 410.955694][ T45] ? __pfx_wake_page_function+0x10/0x10 [ 410.955709][ T45] ? __filemap_get_folio_mpol+0x364/0x1280 [ 410.955729][ T45] do_read_cache_folio+0x3bc/0x6b0 [ 410.955746][ T45] ? __pfx_blkdev_read_folio+0x10/0x10 [ 410.955781][ T45] read_part_sector+0xd1/0x370 [ 410.955809][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 410.955827][ T45] adfspart_check_POWERTEC+0x8a/0x630 [ 410.955846][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 410.955862][ T45] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 410.955875][ T45] ? bdev_disk_changed+0x52e/0x1260 [ 410.955891][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 410.955909][ T45] bdev_disk_changed+0x7b1/0x1260 [ 410.955928][ T45] ? nbd_open+0x320/0x700 [ 410.955976][ T45] ? __pfx_bdev_disk_changed+0x10/0x10 [ 410.956008][ T45] blkdev_get_whole+0x187/0x290 [ 410.956035][ T45] bdev_open+0x2c7/0xe40 [ 410.956068][ T45] blkdev_open+0x34e/0x4f0 [ 410.956093][ T45] do_dentry_open+0x674/0x1470 [ 410.956108][ T45] ? __pfx_blkdev_open+0x10/0x10 [ 410.956127][ T45] vfs_open_consume+0xcc/0x460 [ 410.956147][ T45] path_openat+0x1547/0x23f0 [ 410.956166][ T45] ? __pfx_path_openat+0x10/0x10 [ 410.956186][ T45] do_file_open+0x20e/0x430 [ 410.956204][ T45] ? __pfx_do_file_open+0x10/0x10 [ 410.956230][ T45] ? _raw_spin_unlock+0x28/0x50 [ 410.956246][ T45] ? alloc_fd+0x471/0x7a0 [ 410.956267][ T45] do_sys_openat2+0x163/0x1d0 [ 410.956285][ T45] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.956309][ T45] __x64_sys_openat+0x12d/0x210 [ 410.956321][ T45] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.956337][ T45] do_syscall_64+0x123/0x790 [ 410.956350][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.956364][ T45] RIP: 0033:0x7f6394ca7407 [ 410.956374][ T45] RSP: 002b:00007ffcde079300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 410.956385][ T45] RAX: ffffffffffffffda RBX: 00007f63953fb880 RCX: 00007f6394ca7407 [ 410.956393][ T45] RDX: 00000000000a0800 RSI: 000055e9cf28fe80 RDI: ffffffffffffff9c [ 410.956400][ T45] RBP: 000055e9cf0432c0 R08: 0000000000000000 R09: 0000000000000000 [ 410.956407][ T45] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e9cf2850c0 [ 410.956413][ T45] R13: 000055e9cf27e8d0 R14: 0000000000000000 R15: 000055e9cf2850c0 [ 410.956428][ T45] [ 410.956466][ T45] [ 410.956466][ T45] Showing all locks held in the system: [ 410.956483][ T45] locks held by khungtaskd/45: 1, last CPU#3: [ 410.956491][ T45] #0: ffffffff8fdeb2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 410.956576][ T45] locks held by getty/5534: 2, on CPU#2: [ 410.956584][ T45] #0: ffff888029e5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 410.956625][ T45] #1: ffffc9000338b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 410.956659][ T45] locks held by udevd/5981: 1, on CPU#3: [ 410.956666][ T45] #0: ffff88802a33a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 410.956703][ T45] [ 410.956706][ T45] ============================================= [ 410.956706][ T45] [ 410.956711][ T45] NMI backtrace for cpu 3 [ 410.956720][ T45] CPU: 3 UID: 0 PID: 45 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 410.956734][ T45] Tainted: [L]=SOFTLOCKUP [ 410.956738][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.956744][ T45] Call Trace: [ 410.956749][ T45] [ 410.956753][ T45] dump_stack_lvl+0x100/0x190 [ 410.956771][ T45] nmi_cpu_backtrace.cold+0x12d/0x151 [ 410.956789][ T45] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.956807][ T45] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 410.956827][ T45] sys_info+0x141/0x190 [ 410.956841][ T45] watchdog+0xcb1/0x1030 [ 410.956864][ T45] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.956875][ T45] ? __pfx_watchdog+0x10/0x10 [ 410.956889][ T45] ? __kthread_parkme+0x18f/0x230 [ 410.956902][ T45] ? kthread+0x13a/0x450 [ 410.956915][ T45] ? __pfx_watchdog+0x10/0x10 [ 410.956927][ T45] kthread+0x373/0x450 [ 410.956940][ T45] ? __pfx_kthread+0x10/0x10 [ 410.956955][ T45] ret_from_fork+0x730/0xd60 [ 410.956969][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 410.956982][ T45] ? __switch_to+0x800/0x10e0 [ 410.956998][ T45] ? __pfx_kthread+0x10/0x10 [ 410.957013][ T45] ret_from_fork_asm+0x1a/0x30 [ 410.957031][ T45] [ 410.957035][ T45] Sending NMI from CPU 3 to CPUs 0-2: [ 410.957087][ C0] NMI backtrace for cpu 0 [ 410.957107][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.957132][ C0] Tainted: [L]=SOFTLOCKUP [ 410.957138][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.957147][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.957168][ C0] Code: 27 94 02 e9 83 55 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 5a 14 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.957182][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000202 [ 410.957196][ C0] RAX: 000000000054f73b RBX: ffffffff8fa91580 RCX: ffffffff8bd76325 [ 410.957207][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e95f7 RDI: ffffffff8c628780 [ 410.957233][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed100d406825 [ 410.957242][ C0] R10: ffff88806a03412b R11: 0000000000000000 R12: 0000000000000000 [ 410.957250][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 410.957261][ C0] FS: 0000000000000000(0000) GS:ffff8880d472b000(0000) knlGS:0000000000000000 [ 410.957292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.957305][ C0] CR2: 000055afec5d9168 CR3: 000000000fb98000 CR4: 0000000000352ef0 [ 410.957317][ C0] Call Trace: [ 410.957322][ C0] [ 410.957328][ C0] default_idle+0x9/0x10 [ 410.957348][ C0] default_idle_call+0x6c/0xb0 [ 410.957365][ C0] do_idle+0x3ae/0x5b0 [ 410.957384][ C0] ? __pfx_do_idle+0x10/0x10 [ 410.957406][ C0] cpu_startup_entry+0x4f/0x60 [ 410.957425][ C0] rest_init+0x2d3/0x2e0 [ 410.957444][ C0] ? __pfx_rest_init+0x10/0x10 [ 410.957468][ C0] ? __pfx_kernel_init+0x10/0x10 [ 410.957486][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 410.957525][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 410.957549][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 410.957580][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 410.957599][ C0] start_kernel+0x48e/0x490 [ 410.957619][ C0] x86_64_start_reservations+0x24/0x30 [ 410.957637][ C0] x86_64_start_kernel+0x12b/0x130 [ 410.957657][ C0] common_startup_64+0x13e/0x158 [ 410.957684][ C0] [ 410.957703][ C1] NMI backtrace for cpu 1 [ 410.957732][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.957747][ C1] Tainted: [L]=SOFTLOCKUP [ 410.957750][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.957756][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.957769][ C1] Code: 27 94 02 e9 83 55 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 5a 14 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.957779][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000206 [ 410.957787][ C1] RAX: 000000000012e84d RBX: ffff88801fee2580 RCX: ffffffff8bd76325 [ 410.957793][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e95f7 RDI: ffffffff8c628780 [ 410.957799][ C1] RBP: ffffed1003fdc4b0 R08: 0000000000000001 R09: ffffed100d426825 [ 410.957805][ C1] R10: ffff88806a13412b R11: 0000000000000000 R12: 0000000000000000 [ 410.957811][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 410.957817][ C1] FS: 0000000000000000(0000) GS:ffff8880d482b000(0000) knlGS:0000000000000000 [ 410.957838][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.957847][ C1] CR2: 000055afec5d9168 CR3: 000000000fb98000 CR4: 0000000000352ef0 [ 410.957853][ C1] Call Trace: [ 410.957857][ C1] [ 410.957860][ C1] default_idle+0x9/0x10 [ 410.957872][ C1] default_idle_call+0x6c/0xb0 [ 410.957884][ C1] do_idle+0x3ae/0x5b0 [ 410.957896][ C1] ? __pfx_do_idle+0x10/0x10 [ 410.957906][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 410.957919][ C1] cpu_startup_entry+0x4f/0x60 [ 410.957931][ C1] start_secondary+0x21d/0x2d0 [ 410.957942][ C1] ? __pfx_start_secondary+0x10/0x10 [ 410.957954][ C1] common_startup_64+0x13e/0x158 [ 410.957970][ C1] [ 410.957988][ C2] NMI backtrace for cpu 2 [ 410.958000][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.958026][ C2] Tainted: [L]=SOFTLOCKUP [ 410.958030][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.958036][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.958049][ C2] Code: 27 94 02 e9 83 55 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 5a 14 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.958058][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 410.958066][ C2] RAX: 00000000002204cb RBX: ffff8880202ccb00 RCX: ffffffff8bd76325 [ 410.958072][ C2] RDX: 0000000000000001 RSI: ffffffff8e3e95f7 RDI: ffffffff8c628780 [ 410.958078][ C2] RBP: ffffed1004059960 R08: 0000000000000001 R09: ffffed100d446825 [ 410.958084][ C2] R10: ffff88806a23412b R11: 0000000000000001 R12: 0000000000000000 [ 410.958090][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 410.958096][ C2] FS: 0000000000000000(0000) GS:ffff8880d492b000(0000) knlGS:0000000000000000 [ 410.958117][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.958126][ C2] CR2: 00007f959311d708 CR3: 000000000fb98000 CR4: 0000000000352ef0 [ 410.958132][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000a [ 410.958137][ C2] DR3: 0000000000000800 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 410.958144][ C2] Call Trace: [ 410.958149][ C2] [ 410.958152][ C2] default_idle+0x9/0x10 [ 410.958164][ C2] default_idle_call+0x6c/0xb0 [ 410.958176][ C2] do_idle+0x3ae/0x5b0 [ 410.958187][ C2] ? __pfx_do_idle+0x10/0x10 [ 410.958199][ C2] ? do_idle+0x38f/0x5b0 [ 410.958211][ C2] cpu_startup_entry+0x4f/0x60 [ 410.958223][ C2] start_secondary+0x21d/0x2d0 [ 410.958234][ C2] ? __pfx_start_secondary+0x10/0x10 [ 410.958246][ C2] common_startup_64+0x13e/0x158 [ 410.958262][ C2] [ 410.959075][ T45] Kernel panic - not syncing: hung_task: blocked tasks [ 411.313088][ T45] CPU: 3 UID: 0 PID: 45 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 411.316372][ T45] Tainted: [L]=SOFTLOCKUP [ 411.317722][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.320794][ T45] Call Trace: [ 411.321814][ T45] [ 411.322750][ T45] dump_stack_lvl+0x100/0x190 [ 411.324243][ T45] vpanic+0x553/0x970 [ 411.325500][ T45] ? __pfx_vpanic+0x10/0x10 [ 411.326932][ T45] panic+0xd1/0xe0 [ 411.328136][ T45] ? __pfx_panic+0x10/0x10 [ 411.329548][ T45] ? wq_watchdog_touch+0xec/0x1a0 [ 411.331135][ T45] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 411.333012][ T45] ? watchdog.cold+0x1ec/0x234 [ 411.334519][ T45] watchdog.cold+0x1fd/0x234 [ 411.335984][ T45] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.337791][ T45] ? __pfx_watchdog+0x10/0x10 [ 411.339287][ T45] ? __kthread_parkme+0x18f/0x230 [ 411.340871][ T45] ? kthread+0x13a/0x450 [ 411.342206][ T45] ? __pfx_watchdog+0x10/0x10 [ 411.343688][ T45] kthread+0x373/0x450 [ 411.344980][ T45] ? __pfx_kthread+0x10/0x10 [ 411.346432][ T45] ret_from_fork+0x730/0xd60 [ 411.347923][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 411.349561][ T45] ? __switch_to+0x800/0x10e0 [ 411.351045][ T45] ? __pfx_kthread+0x10/0x10 [ 411.352521][ T45] ret_from_fork_asm+0x1a/0x30 [ 411.354039][ T45] [ 411.355645][ T45] Kernel Offset: disabled [ 411.357003][ T45] Rebooting in 86400 seconds..