last executing test programs: 1m22.599504457s ago: executing program 1 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x10000000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1m22.470273566s ago: executing program 1 (id=1051): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x81) (async) r3 = fsmount(r2, 0x0, 0x81) fchdir(r3) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) (async) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa4af}, @btf_id={0x18, 0x13, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x36000, 0x18, &(0x7f0000000280)=""/24, 0x1b5fd9068202ba1e, 0x44, '\x00', r1, 0x0, r3, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000380)=[{0x5, 0x2, 0x10, 0xa}], 0x10, 0xad54}, 0x94) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f80), 0xc080, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff6}]}, &(0x7f00000005c0)='GPL\x00', 0x9, 0xb2, &(0x7f0000000600)=""/178, 0x41000, 0x21, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x1, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r4, r3, r3, r3, r3, r3], &(0x7f0000000780)=[{0x1, 0x5, 0x7, 0x8}, {0x3, 0x1, 0x7}, {0x3, 0x5, 0x7, 0xa}, {0x3, 0x2, 0x6, 0x6}], 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x33}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x0, 0x5, 0x10, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x7, 0xe3, &(0x7f0000000980)=""/227, 0x40f00, 0x50, '\x00', r1, @fallback=0x1e, r3, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000ac0)=[r3, r3, r3, r3], &(0x7f0000000b00)=[{0x5, 0x5, 0x7, 0xc}, {0x1, 0x5, 0xe, 0xa}, {0x1, 0x1, 0xe, 0xb}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x33}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x0, 0x5, 0x10, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x7, 0xe3, &(0x7f0000000980)=""/227, 0x40f00, 0x50, '\x00', r1, @fallback=0x1e, r3, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000ac0)=[r3, r3, r3, r3], &(0x7f0000000b00)=[{0x5, 0x5, 0x7, 0xc}, {0x1, 0x5, 0xe, 0xa}, {0x1, 0x1, 0xe, 0xb}], 0x10, 0x8}, 0x94) sendto$inet6(r7, &(0x7f0000000cc0)="98a9738024388ba4fc5b2b33b705241d18ec20c1c3cedf5dbcabe9bdccd599384502fbb9c30b4bc2f94dbbcb5e999c2c5c795afb50d9f1690b47d9debcc605703c0b351a4d38bf49b91ef135ec092ae0644173f0881330d0a99313a23b9b124d19ff1a1f7ac7c1b32c673373e9f16326c67dc333f40c63f554456c007e5ae6770fa50b4c5578f00306228a10bc644139828174473f174ecdf35f7ca57aa324aca19b9ce666e18c576a8f98621568c189be8453561726e6e772203a561b1d50e8", 0xc0, 0x20000010, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=@bridge_getneigh={0x1a8, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x3811, 0x682}, [@IFLA_GROUP={0x8, 0x1b, 0x60}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7bffffff}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_AF_SPEC={0xf8, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfc}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x63}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x30}, {0x8, 0x7, 0x0, 0x0, 0x5}, {0x8, 0x17, 0x0, 0x0, 0x1ff}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, @IFLA_PHYS_SWITCH_ID={0x22, 0x24, "68308f3d086bdab39aeffb4bd9c9b4e75dd3bfa4a677b66dfb6c23f13afd"}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b2882dbced78922ffe0a53ebd8ecf1b"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m22.370477894s ago: executing program 1 (id=1052): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@frag={{0x30}, {[0x1, 0xc000], 0x401, 0x2, 0x1}}, @common=@rt={{0x138}, {0x9, [0x2], 0xffffffff, 0x30, 0x2, [@mcast1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local, @private1, @private1={0xfc, 0x1, '\x00', 0x6}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) write(r2, &(0x7f0000000140)='sessname=s+ device_path=/', 0x19) 1m22.37025117s ago: executing program 1 (id=1054): recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2100, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (fail_nth: 12) 1m22.300519741s ago: executing program 1 (id=1056): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000001c0)={0x0}) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x2, 0x1, 0x1, 0x10001, r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) close_range(r2, r2, 0x0) 1m22.233730674s ago: executing program 1 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x10002) (async) ptrace$pokeuser(0x6, r3, 0x358, 0x10002) ptrace$pokeuser(0x6, r3, 0x388, 0xffffffffffffff81) setxattr$system_posix_acl(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100000000000000040001000000000010000200000000081500030000000000"], 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x53f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6650}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x53f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6650}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 1m13.680198834s ago: executing program 0 (id=1174): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, 0x0, 0x600) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfd, &(0x7f0000001480)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x1, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000004180)="efee0d4b83d05176f89facd925dab80e08f32e7c520897b698f4d81968665df1d057c2a25859a797a27ff446db09899843d77db086d52211717bbaf3a235441919dbb9b5caab91a87e8e84d2cc372a92b6850368731d99ddb0b2b7d8558ae733b0dddeae74ca9c73433deb773042642d156fe6384ada6d3e3d40f02d1af42f2f188341decc91997b0f2bec27f2036428ecbef2f8faaf9c02cd6aafea6d37e53683e89b6baf6c0373292ac5c0ab3e18e2d97025ca8db782fe67e5dc304be69319d1bc14d5fd7c779268ff477953d55af5bbcdec5c1f044e3922a7e8acf3b0e3724851a130b1b3ed467a7ba92465bfde9bbfcdd6c6408650cf0d7fb4b050d223e2d11679d3c624a802c8c0075391991b158a6d6396e16ec6fbfcc9cd2427b0da19248d373155bcff93ba8b3878bdf3fe9325eaa0abb09e835f97c5ddd9da414011915d18e8194fc183c95f9f4e4f4d60ed0b5e6a1e45189086e63504e38d3305ab7c09aaceb09102c33a8f769871b235742f41b7d805713d100a42e14bdc28a37dbfe4149ae48312ecf665106550366b23442393211f520e7775fd5d45992242ae89f93eb30f11fcb00468d2a8d9ad2305a663b673b5debeee7b424a2350e58d83e829c6490946bef60513e2df5c4763f6e9b743e57b28e19fb37171a83d6e3e2cb9f1a91467cef3fbc2939fa4826fefdfe64a1678783ce057a82fc9e5927b4ae47891f474815087404a22d08899b24478fc1366615b717ac6771f41b57d49573f2900c9383920d6a67415d44a19c6115e64ad2a2ab007923de8dac7a1d16517717c1a4cb34ca83f81f09411788d5a4daaac955b8630ac0f618892957e0f4dbe4fdb19aaedee968f8826920e2abd46420e9faa85fdd647479ab812a8dfffcfa406cbf2e30f32ad08df8ffe88bd5566c0e7553c949b6f07958467b159b29a944f84fefed95dccb1fa8d05f9d0297dc3b4f9338c62b1d0a8eeac62bc402733c1e0d4e285122b3d5252022b67ba7b65b413a3f3ce6210247685fb36f641fcd48b777c7a2a950f7714a3f1cba09963aca2962bebabe9a4c403d1c066717e0ddc67a573c881b6c6e57bb009826eef7423aa5e23549e5c812b044eee2627521b6e2ccc163511e864ded204e2c5be98958bd83f130d165ce83c875af84e5cc2c8fafd3859af05dedbdd9e4d0cb991fe2c60b000d63e52e18c399c784d00a544614bb13d1ec0266821abd8aed8228fe527182b6248bd3eb08b5bb5928b52f4b736da985f669bd7dcdab9d6db0226f08b66d3fd62c9f06b9d94aeb60c9fa56dd862fe967752456d25aeeb308a5fe306ffa800fb825be3691c1e765c38e0c30adc5d5c826f3002dd5a1343d26c293cd954b2da693510159a5e189d7a625c440cb297a30932d2870769479437637b61465b91333fafbb9f0d4cb461858c18ef28e63285ee502025295ff9b6c0b3d528381a57bbff6c4cd67ff46ba5a4692c4ccc913f5ab12e464d1be766c8e9fa53020907af63d223b6cd78f6648cbf72b7543766d503c905f805b72bc4b72f831c8cee014437e9dd1fa4c67e5618bef5f63c837791a8aa94796833c663ddc0ddc36fd12dde14902939312787c393259f25f763456370706b8c488677e9ac315c06a1273ed1fdecf6c414c5018ce14c13c4dced915dccea6fdee33c1ee93ced37fd34b6e565bd4c4024e7a0f4565afb9112f179850ff6be4b5d758d560bb405e55e72d1349aa39e900edb87da315b8a6d243be5b954817e6f0102f9aa90c5a55af25bcdca07fd63f0870f1ca2d84e29bcca2cbaf9f52582c4aeba796b19655c139212bf5163f63ae783ac87db2fa1a56d169169604d199cd44fd2e9aa32bdf7a695930647f7f46d542115b02b0cdc4de531494306db3bda4e9de063876e7830b03d58ee9a13779af4f0a4ee5befc789efea8e0afbddabdd5ca5a05a8d64d2c8c777642bf89a3c06cee917c5b4f2672baf04ebc2ed9c0ae1a65f4b1a8b6596970865e48ff8d03baf8378a3a56fb371062aaa6363f038ce3646a5caf2a0df2b2e59cd56db1af20dccc1ae31c5c95886b53a38a278183117fa6a014b50c29f2e09d3b4a2d7a09d3b5907089c2519b2c0479138522a080f3203052ce5b7619407368d9315c74c8c52e4475f6c9f8d5847d245ff5f3330c89d74b636f535ca8d09d9889fd12c63f9f0a8dda717d697e1759d3cd69cef1daee5656ae961079a1e020ecea9efe61b3bb64eaceaea300147ad1f53eba2459dea002740dc287ef7c0443fc84677a4d4391aea96eeaa2d17e9f305499f663e212001c8bb191903e812b07a5e1823a862b6dd1829332495c532093cf41344f56b524b6a4d1c04ff2b7ddc627fb20ef271516f2d9774d7427e1825094f5d9c4b65fc9940a7882fce6a26e3f523b69864a72822ab55ea6c4849b89d20249550cd6cc29ca2462ae1f728a7196479a90ad0572cc141349c28d21355c4ce2fca17e73a100da6e5508f140fc5e41c4d326090fb05fb28c819f1e74443e11bfa6a81a7241877c1c32b9c8b89ca457ecf79b64599ed15de989dd6e98b24889bec7a19573b59b83c0652356ee24ce75bfbafa8d089c14c767445713c39f5a96f330a8ea83a9dba2550afe394c1c6ed0712aeb86c4d9a4ef1ae4ff8cb5746e9000af500719afabbdf99516815467d4507975b5fb7a1175ae94c68a1f43289b71d91f08184f57b53b168fb1ccfc88229b0d188198ced60bfa08b62cc300c07cbc193c9f514cdac2cbecb78d75fb0f748d547a84b375edd978e314c778abe31afd2dfb1c1944253057e51f544f9ad1b81659889c14867a8c86b8b5def96ea90d3c969646bf76d620d68a07fb6b438aaedcd33135a10b876bf911e89f6fec781cc0ec7b09650c8c93c41ce920c92c76f723ae850459b9932e4386ff4f165e4107f80b772f2ce77b0e87fdfe4ee9889ba2d5c4f8e52b9f477b3bf44a3784f20a29378944ed9b0dfbbc552a259fdd3d1412c370348d1da358d810285bd4f70ed0898330772e1e835eb0e0527a484c359601f72a0dc21646b8ba39986b027fff7bc1b82dd334a7d66877cc5d3ad6f3b13349885c781d79dbfaccaff9b522c1e1675a27d9b74cdb676ed87ff7db4e1c3f0504794070b6eca4de897c3ad75a5ef48a3fc9175ade66c5760a552a74a4f5f9c6eac0eeb0359234b1f6c2fb2758b0a2bb6577678dd7e2c9ab31215878f5d1a13c6f2527b7756dd49dd8fa5dc77c134cc5db33d2acf5ec00d52b7671a4d576024aa76f0c55f153d79ea75912b3adb554b659096d0391db25d36d42a6250ec190cfd74f82ac14349fa39f11c1b08b601ee4e885c2667768cca021d9910d4b7881504bfe1abf4ded4b6dbe48d6c94414116b25c27a185f0f6f3ac4e442e2148d83a328768adbdb87ad64acaa7a2fd8e10e8e2fc0bedb9335dbe24c7a9ecbc1f0a4cde1717318603d43eb3fdf00b44eaa931bda4cb8f552a123b7ad21aae7ee7ede4047db52b54e11b51c5de364f75803809da505189087c08c508c83014158beb6d8eab93edd5658884b24af1bb493f82e9548b3dfe6c874f9e9ed1d42ace44538d546629fe92696b8c5a549e7854c06922de87851c718b2489759b5b1db4d7722c1533fbe57607bd9da5e0e8b392d81591d47d56a286f358917f69c68770348871ccca29209181855b26a25f8852e6d6a9e0c6dd5c96b9b0ab08a1919cd2bdefacdc1bbb7081782e0389943b2206d27e09e11387924145a79ef21cb31f782609b088ed4577e7208a28d7e5bd391f872de8bab33fdaa08b2f2bbecaaa8b909617ca163e4c9a3f7328d471e30c4c640b40addf57ac650b36e3900405a04a0817bbea5ef4a81461305f9fbd7c57d7feefd4f67d3785270d3d16075fca05dad439d999294cf12eaa6ce89468a24fe13c1583a7881088c63852cb0f01781d9f2a8553b781d953bed50a47fc689e6d2756ec5bc930d2029dcc48e059145ad1525917b0ba6a728e908a3cd80d213849d1c2a3201628a7a9a8cbe25f1e43f8883303f175843ee2685afcaa3f77fdae1b3b127b5f3fc84342069ebe1c386e3c29efe56cf99c9c324255b373028d3bad7e095e06894d6019468bcf418580bbf1ae887966f72980d2d9e6a77fbe92138448eefbce716e401fbd7f95997ec1fc02470e2539942a5db3dd001dea86681cdae6b242928465527365b310cc3d2bf10af4e003ec20446cc102a044e0edbf749171348c492e6d4785962d0457240bed02aa791fd62a077ee5e442df881361d1076d0368e421bc96353aab61082a0c5b118e0b01466161bf9f420eca0c917e0df1836189d4b7105b4d69a9e8e745c1ce824dec0f44d15f47e5fd567fe799a6374aaa47d392218a0bbbfc960d9301e1d5524c5e5cad10aec1bc947e0d5467126834b3d17385dbc9107be0d5e14b48dd49d2d8ea806608b4a5f141d46f0a4b778d0cb47daf4f8fd823214fb4e0d8fd782997ca33e1d0329e815bffbc938dde2a61a4a440618ff8cba7d67460daff103efbd90bb922833f3d38693f4f001af4a4635c8b9af4fbe374f13b1073bace968f0aae76b86f323f61800ee3e62b3fd0c7bf2c2cfab282f60258f45344e6eb7fe0db27b1ea5a95f9b75b8dfd7d4d8e7ffcf0ab3bc9004cbfe4babdc085ce0eb4d12c7b93fe9980ae38fbe2cf791e8adc9cf0685ef31741f341b86b054d45ae9c9584ad3c8b7945be15050361cad94886023d25594bdbe43b4f97cc0c0b9496eef9703d247e80ad2b4ad7fceaa603f5276a8324338974df5599be4a83ccd0d963688a86d4de56c63c5da3633ab6df2847b17bb6f92fd7dc2f3986a88f0d1d50645fd15e5f0d956009f94bb2b1d9f0b9e51eb073688cd601e65b452a04cb9ff2ab2222e9d8a832d61336ad1030700a19770dec17151d3581c208807b6fde0d1d5362e08d4b7107ee977fa73490c4e7bc5cd23c89b8d5bef9809f7bc79ab227b1c08bb86db5a561aaac76d432dafac3a57d92642415acb9cb0339d6180c9216cb507cff38b9600394771d9898bede6f5577d0ac122dd6911ee501ab6095e0455bb5cda6e44861e038866002bb0b492e336d1127f5e1c9d5a7b3059a9b306621fe547404e89e792105ebb9357c0feb94a7f7c001de408d62a269c17f11a74bae2e01837b123034cfd641143900594ed96158705a0de85eb20dd798aa0c0c239e24ea1534c8a20874a93b761e84ff0ef5b7f69ca97ba532a0b7ea14b54749bf6cf29abb71fdd2c43ae7afa717daa9111f06041457d6bb4b2d0e9f23b28ee512bc53f7c1dfc50295833e3668f9c24fdfe95994e16f940bfbc196c7bba0f6e8719ce435866907bc9aa5f19801fb7a832d3f06dc21305dad16355975534d4992b5fad3e3796c6fde3830f9093ca316680dad0b6fb3d88ad3ae5ce6096958a80b78ad05e4817f23ca9d09d17f66108e47c120162274fad2defbe4d63ade5455fff235ad144938d8e03c5fce5e0e9398187ef5a1fa451f3fb29fc6e1eaa676f501ddfa4879233b94ddda0d11da65a44f8ac5d58bcaf2ebd9064775c317f97f3e4e9efc75f7dc1e969961a37023dc9c0bd7e66b2526283b8d147eecaff8d2422a9093a4e4b066d9cefa26dfcb02c1109fee4cb4945c1ee0a48746a48f806ef19aa77aeb826e8e9a2bb412116a6b4287ec45c43a03047277d9f5d972b377bc1089d06d2f4eb8663fcea2a15bca90126d52cfd92a8203e6f9d194929b8b4dde2cff452320eb28fe0b0805e0ec488f23637eb99ccf71e1cf90818d13baf3018ab712f5752a016e504024fcda9cf465b09de96cf33509d7200a38f889978971fa2dab416f73e0a1dae1b07840a5904d0f102f50c297b23f786e4e859908620835279f2b2f49451df97ed9a0b5343efe833e34d4703371192536696b6ff9f31285c63930d0218a5970d6343be67ffb231ab48b887cd26a871ed100606e095676be77cd72f8e4bf992b10da073584d8692d4e5216243a9ca4b2451a5c5cc8498d82d2b8eb9d7ab617d73110d9561ce5a3b96f4ae980dc43f3c89c82896620e803164f930fe3e92519383b1ae26983ad2995411098c52425ea62e2e501425845df455ab6113ccbc53d74e3cb96ce7a4b3265b8d511642924ff7fd5c75333ee8c6c41b1499075f0c632c09493171151f05bfb4c07f2dfcebfe3dde44c1fbd7163af05a6865a08d76a8f4028c6d29d7b2f8a6c75b1d981754f02d2388fc7ad991be39a58a3e44b967a2cace84c86b692119eab4c8fadd93ab9f8f6835187fd9b3da7572b4aad817517f2994900067440795923140dfb50e643fe5443b52f1fbdbada7770b47dbd2ae6b4bff7b23cbf3d686409568f4b679ade04b96bc379ce176f7fdf23502f106db4c0e04722f5696ea3af31d15d7ec02845a903b137584f1934df23f8bde9e5f6d31f115f36e42cd743c49f21267a7a08104d55c64f99cf197b806cc0d1a33daad58cc330dc0be10e5a07f0e54803c6d127e41d196b113a5efab924006050fce798b39aab89d9659e5acff42ef60ecb79f439aa9a896d89c5c9ad6c841c74222d872622ab87ed7b8801761d58765f858bdb508911bc596e29c80eb66cbad4f96c9e4e0eda3d6fb4f6293e47181240b40900000000000000a9939c56be4205d7daa809391a802b23f101ed4540983de28b4d38fdd141899efdb17487ce557d6e31881ee004bbf5d5af0acaeba7c1761470695e230e7d4c4422459d8ca981be95acb8d782920b78ad0c15f2be14f7c0638186daf649b292ee5d8129756b012e9f4b82b67f37ed1ed74b3d4e94ae803abb507df1f111c0a4ed834e013c6d941f5e3aa23b5d2fce851da782a9cfbed6f6deda4f87d2de8d39d42b9cdcdaa8d0e67e7de9ff152df2c12e2002b4296ee9e12c40da60501c34f0f94ea1701f873ddaf7f0922d75c57cf3f037ef5eef7c1de2984817ea0807adca45c16747d0d469b32a4bc84f3454a78ad3b95b2dc68c7d1ffe1e6c1e23d52e705e40636bef91a987307aef38df504588b231058fe95db121d397be85ee853a3d9d87a10794cb9ba1154c1b8d60c3a4df05cd881ee939a7d6f3bd335b566fcb698ff093a5228e8c0c0c8f9c16476f9533de56c1f1ea1b565af94fa4ae5bd3190814ebb46c1e08c179367a741f23f75027d267b6a43d83675215e24ad6f935670ddc9225b5bf482c3e64a1053de8a34e7fe255e85858ccb8fbba3d3e5ba620a99c9d8d2762cc1feee663929a2fcef5d3f6a777dacdae3826910fc326ecb14d8541db620025ace658cfd8ff5fecc0860061c73d1341924501b8e2073de8f3c45e4b0c6cb75b1ec0205a8c6ed4db1ae4138ed8a0c8572d19d83084512fe5699f66e2e9ce73802e27dc7a0696d106c9acaf940fb8105799e69f740024b39ad269bdce4d7bdf711306d1d34f5bbde0317672b6c59efebf5f0b2a212cf19ca49f1c1d1208cedb3f8aa30da143910b423594df7f60b92edbbe34ce40c983da5943bdd0d6dc72f217b02c202e35a259ddc9dbff3dfa15d9f9adb646a40483b271f16581ee2583db3e729200d6839e012adbb52b3cbde75c115c80bf41aece00284c66ef92a127f37402d98b4ea77214c1eeb29957a9b27fe576c4e05168ea6c91788187c15328a05039b066c5dd9179a5249e6b5d8d18b194d42d21131f56f151fe802beee5163e4fae266560f285429b17c24a7cf38f15871af5b7fe34dcf5a7baa81ee7b9747ca300fd0056ad6d5044135b619402eb829cef170808bae1f72123fe9ca9e2b0282fdfd7c096659352285f4f5cad063cd9ceee30e86a1b6745c5e8de40b8772de6cf93c9be556cf540d1f847a7f1cb64fba2cb08c30bbfafb02e1864053ec0c4241d6c67bcfebab9bcb9a989458208e101db74614ef4c6f327486304199cc49b1c6ec448585cf01f111235954586bcada2c4771a69f393b7f9589aa61ebb2c508c7fa0e88dcbd04be44898e299cee96219dd8f5834849d4b21709508baad425d1f9dee383e16ccdc0a9089c9a859290accded3a0027ca8276873db8bab47f0b3cd71dd006b86b52594daf44c000d43cd6e961b67211f9d31e1e8bbc15ee7091af1e2a609db1b91cf0bc49c8d9ec55f93422bdb278f0f1ad35a0191999d3cf703112f8347e6e1081acdb7a8246064e6f5f2ba75e190a29da27b46edbe9b6919bd98f88f0e8b75d8f04260aafb6c19583f8413e96cf942a69bdbaa705f2990bf3fe429caa883c9a290b57adbc8f814f6d01bbe030bdbbd236e538e22665893fde75315e245349e4f83d459bed6bade3bc35a7b79ef6a844d8dc4b12e53a84d5498ec2c6885bbad859ff92fed7a267f745a2c4ab46f28564faaa4280668b87641db79c90ab0876a26f729eb4b9445b4c21c56cd5435dc439a7e4efbf50ab8cedd05493f71d477851baa52432807c7682f4cc42af19c411a54b64de040e4dfa13537427070a6b5c892b2f3cf9a5418089a880068a7865b4405fe618446234ff2edffe37cdb42ed6ca194797ea0fdf72a55a997e55da45b0537f96bcb38d312467a2544a0e0db418328e03d9308383a8ef82f45b2ed460cbf51ce97fd08c8e2258dd5e38510e9c2a7b0f7e0ee05d1f32c7c42dbd441d3b03daa99b2d8787771dac51f00fb96c3a240517597b3dd7e145ecfd7b54146cbaf50059549bc37fe8e310b2192ee453745d6798e5ebcf8d64474b2503bb8352b917a5c35ce1293f2b8e743997898b2716ee30f0c644db14cebc05843b7ed2a59a44d5d4e3f8cef65310a50df8a1b16ac91cd63ac9183913b91747b7fcac05adac80a3d1403ecea47c2f4b9bbcc65127e68126539ffe6c2dab3c8044e14d1c9a52b5314b32288d755025b65ba26eea1e59d2721108eea4def7d78fdbaddb71dddbe95940a08540a4c45e7dd231a75e5c82a112acbd4601738e15613e9bc600802fadfb509c9f954672044a9e911ebbcc9619e8f5d92348aa78e41b9d000beaca0f9dd7a0bf97188a30eeb2f8d725e1b27b4b95877515bfdd9db58cfb7da76dc26663fe3ccbc857179e72e1c67d0444fd141874148f6f3b7a417e77190347b5a3e7aeb715438cf1b226604b3977a0560b8f5330b12afa9da8c06afb85f577ca48d2e9251639a86b409dfe9a8ab5999335ff7f4d032a7fe63aa436ccdab5b030b8031df5b275ec0d63988e60c68ac324515874eaa3643f06711c6364fe50680d43bd5b8bd0a61054e7b50f5a47e171f82510f524b3d9f6e1d1d0ac577bc877a237e2937a66f0c84f505bd5b7d46fa4e8c9463d940e64d305bd2b47434a24d0c1127e37fc878ac1445f7da168d565a2d06beca8d91a8d9644e6d6fbbcda952b971180e679cf0e1d858da9a7c419d4ddb00990c9a72f38a9a6e7fce6494c773cf03762debb3c343892f0f1f567d1458bb511ea98f202060c4bdac07e05d611abd8b5c919255d845febc9acaa5bc541645641de62ae351433ea10f4fe3468e6bbbd811f59fccbeeb28214b66cccfb85aed4046ce7f08e9167804c867afc05ded9f65e2b0fd891aeedffcf1db4f8e5f99a03a5056aa6dbae357961bad3b374720e15ed690e4847849d7e220f80acfc77eb8f1421ee4c4215713523a3ca8385b6c4279269e6da08aca8ed34f275aa401d89d27b54b8ce438f39dbf877a38da47075429559fa0ee43d338781ec66e300007608b7a3949b9c75e6feef8bfdf64a22823d23212de41b331b1ba50c8d475f398f39f0f402f772adb2ec8d55397371f556ab9bf2fa0a47a4894e6b467ac87ae3c59982e8857b787245bc20f65333f3a7460bd4cfd5e98e919b42bdef0b1ca6f4cd787edfa20f0e80dd0a64adc8376bd13c2e65dfb6036ddc3cbe2affa7f70b9ec87e38cca4e171d19e802fda33683a92f3714a686b14cc46e88f1ecf6841690a23c71a66af1457f0ea68314d84de0c3daf4dfb53cc8ffa689ff79fd1f60d3b14d8099540a9cf634222364e9cfb0692743224620d470475fa70c1d3123e45492f59fa2701a6f9f48882d3917bcf4060005e31e5894a7b342f8c9d7486d87a1867a4c6ab1a349d732333a493e5415543781dc9b6032f6531bcdadeb3fee635d7cc1aa75e1845d1ce0224ecec4154091fd6ebb72c846e79e84afd1348531d1dd316ee1ff1d997087f2aaa4669b289b4ed4bb4e807bad50d0639c69529c26f28999677b1e87d98e07714d68229b99be5b1c28beef95549611d1c165aa40c71d20c499145cf2f86d54c077324bb0148f47e388effd10787d115ba648f82253214adb648055be36a6d2ac882c34f9cc54e5314e2d990238c0c98a7eca404dba95a2f6093f12c5df201a43e52a0fc9e066ef3e6d25918ff3d65ae25c436fcab59f69c4148369159fdc595ed8acd485e1e44241315a82526ea4898e27851f15664a549fa040347403026196998fe58583a4cfc168d923fb9628c2200a165a424923ddd2f0721eba45f617ab2e1fe727e726bfc9bf3ad0134f25e8e76ff59df61fba42699a9570bd542a1f91216e59aebe0b19e48698379ebd88b35a2a22c32d09599c563546c8bac567172fd38a62117b8b94b1bd3aad30661a42382307b8ea700eb1f310c8cd2fc4ccc1ed00893bfdd7fe3c752f52d38b939de79d545de6b25c9b3e843c201d86672f0536b668585d55935cbf3c22cd521dce8fec61b40a25ab97c33108d61a942328a8d75a24151cd03052b5b9ef9d0d2616fdde0fc7da0949511fdcc550b15cdd0bf374ca5f411301394898fb292aefc7eca0c8e6ca98cb09f774e57ea300ed43b3249734aa9af862470d2f9480f5713d02a8ea96138c04e657561c41012d2d978c5ce4436e002af3b24a20f53693f32b8d56bfb74c510b0c3cb9b46961abeb83ee6d7115a80c59eb25ba474db9ed0464076d175bf9b7c6355f929431f049dbe895bae795746117435d901d32d0a7fbb01882e5dcbec95075d908565c321c328e82fb6486f1ccce2b010c20ae82901416635071be340e6cceb52fab572e706dfb1a8f9242bbf80f4eab70f9d3bd9ccbd63893a19f08057e50df2dc43a5aa9a6e12440dd548350a3e406b4ecf0f76c6f2b34fa6a3c0565dc3af1f4ebc915e2957a7bd674105a77ee999035a7cbc36029d9ef669abcc28195344c14ad1950e76095999929f41bc3651fee28c31218a539ad0d3ea26275f7548d053e176ea646d59158468d15a5dc6d6ad595c441d3902104f26eb928b239b6c95d765fa45e4c33d085eb2e6b8cd132ef4e7eea0fecb4198f0c7c94f634bd73a43fc55b87822df007c59e06a7407e3b6b0420fa6d55ebdf03abb5c5fef0b7ab3b20308090518becf1c8c3b105c4e6b17734a3c7912c466b5776696a5a24e7eb886d6ba7b51f40e53f35f472e017e3cc78e799b5438ecd2df6af75bab505e80168ea02a5409b776132ee67662b021a810ae591ebfee88b0fc1245c63e50d6ec0b296f9c4b4be27303ced22faf378023cda7767233e9da1753361182ad2f70dd48ad71572c8e949c859df251d031520d728910b50cfe6a3042f2586fbdefe416ffde32030992dacc86256e499c77792c885e0bbf7060cb36ceb8f365555efaf26bf8ab15b15f32f6d2df866391869c53aef12f572", 0x2000, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x4, 0xa100489, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x1000000000ffff, {0x7, 0x29, 0x20007, 0x1021900, 0x5e9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@random={'security.', '\x00'}) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d415934c78faef32be1fdd9e387ee5629e1e306c1d5e64eb4a77a86a2b665aa0ebb5b3b89cb2dc29389356da93ff0e21cb6859baccf698e6e867c176ac7a31f7", 0x40}, 0x48, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x8, 0xb, 0xfffff024}, {0x6, 0xfe, 0x0, 0x2000000}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m13.626750249s ago: executing program 0 (id=1178): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0xa80c00, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000300)=[{0x8000000, 0x0, {}, 0x1000000}]}, 0x2}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x3, 0x0, 0x1900}}) 1m13.549404125s ago: executing program 0 (id=1179): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x30}}, 0x0) 1m13.548731916s ago: executing program 0 (id=1181): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="980000000001ff0300000000000000000a0000000400018014001980080002000000000008000200a00a00005c0002800c001280050001000100000006000340000400002c00ec7f14000300ff01000000000000000000000000000114000400fe880000000000000000000000000101060003400002000006000340000200000600034000040000100005800a000100512e39333100000056b0a4c97d100df2bbd12924f9bce51d1dd26944d786af5b8cbbb96b28d124a0605a774d008a31425d353e96e731c3de35d40834ec72e0b2cf269b849683a9ccb45c23db4eb68d3de1cd83d873a96ced91affdbc3a66bddadd65eb17df5c7577cbb6695f55a961be9dbf2628841437a24f0c78e195a7a9e0345fe7d5f6b592ee22b0f4e72f5e60e2dc4561f2db867af5da793e0f56519775a707aa2095d77b240e7e450eeaa3a3d82aaf748eaf014c7c45496e467a6301f325dac7a10e316b5a5d21ca46fd8ab7a61048f3cb67849bbf9e412634914d54a8523f0b303ab3728cd19fa2c6707b7d8fc29f9efd4aa73101e38551682a83b24a423c8b42c9eace6e51beac3237b11a96d22e2727217f2f1b842e560668f8c1bd30"], 0x98}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004f00), 0x1, 0x4004044) 1m13.548532356s ago: executing program 0 (id=1182): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x3, 0xa401) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r1, 0x8000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000000)) write$fault_inject(r1, &(0x7f0000000180)='1\x00', 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001500)={0x5, 0x0, [{0x200000, 0xca, &(0x7f0000000200)=""/202}, {0x30000, 0x8f, &(0x7f0000000300)=""/143}, {0x8080000, 0x7e, &(0x7f00000003c0)=""/126}, {0x3b3be802, 0x1000, &(0x7f0000000440)=""/4096}, {0x3ff8, 0x9c, &(0x7f0000001440)=""/156}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 1m13.307366364s ago: executing program 0 (id=1185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async, rerun: 32) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='FREEZING\x00', 0x9) (async, rerun: 32) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async, rerun: 32) write$cgroup_freezer_state(r4, &(0x7f0000000180)='FREEZING\x00', 0x9) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0x0, r6, {0xfb1, 0x0, 0x101, 0x4}}, 0x20) r7 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='\x03\x00\xdd', &(0x7f0000000000)='\xe2\xday\xf1\xf6xV|\xf7\xee', 0x0) 1m7.104620531s ago: executing program 32 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x10002) (async) ptrace$pokeuser(0x6, r3, 0x358, 0x10002) ptrace$pokeuser(0x6, r3, 0x388, 0xffffffffffffff81) setxattr$system_posix_acl(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100000000000000040001000000000010000200000000081500030000000000"], 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x53f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6650}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x53f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6650}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 1m3.359644754s ago: executing program 2 (id=1289): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x3d}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x3, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x6, 0xffffffff}]}) write$P9_RSTATu(r0, 0x0, 0x6e) (async) write$P9_RSTATu(r0, 0x0, 0x6e) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) getsockname$l2tp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x10) (async) getsockname$l2tp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r2 = socket(0x10, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) (async) timer_create(0x3, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) clock_gettime(0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1c8e}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4d, 0x0, 0x32dd, 0x101, 0xfff}, {0xff, 0x0, 0x5, 0x2, 0xe, 0x1}, 0x1, 0xdda, 0x73}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1c8e}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4d, 0x0, 0x32dd, 0x101, 0xfff}, {0xff, 0x0, 0x5, 0x2, 0xe, 0x1}, 0x1, 0xdda, 0x73}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="1b0b2ab57000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, &(0x7f0000000480)) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc/mtrr\x00', &(0x7f0000000010)='proc\x00', 0x1080001, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000700)={@nl=@kern={0x10, 0x0, 0x0, 0x40000}, {&(0x7f00000005c0)=""/215, 0xd7}, &(0x7f00000006c0), 0x11}, 0xa0) getsockname$unix(r2, &(0x7f0000000200), 0x0) (async) getsockname$unix(r2, &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) ioctl(r8, 0x400c4d05, &(0x7f0000000040)) 1m3.299905736s ago: executing program 2 (id=1292): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x5, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x50) 1m3.210370754s ago: executing program 2 (id=1294): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cramfs\x00', 0x408, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000140)={'macsec0\x00', {0x2, 0x0, @broadcast}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000540)={0xf, 0x1, 0x1e}) 1m3.160097885s ago: executing program 2 (id=1296): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x64}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\'\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) close(r3) (async, rerun: 32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5b4cc51e86ebecb9a622cbdca5213b390d172563b3c9f3972227868ff8dd85d1a0205100839f888091d9b77a71cb9faaa957cfb9ecf8435c22dbb0deca2a587cb59e5eb555c6b1578d0e6d872c5dca42f98b508271907544fabc65da15d0cf3b1a71331f21e61052f92dc12eb0cdc37ceedea4001ee7f2e1b7b41edc697062a8dfee94f653f628b6376d583bf1137c4af66fa2db77e4bffd466053b1a4b46100707fcf995fe4da", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00aa0a000008000b00040000000600010005000000"], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000040)="d9b604") (async, rerun: 32) close(r2) (async, rerun: 32) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01f54743eaca791a1de1230018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x20) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000580)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000640)={&(0x7f00000005c0), 0x0, r10}) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r11, 0x80207509, &(0x7f0000000500)={0x0, 0xffff, 0x70, &(0x7f0000000480)={0x70}}) (async, rerun: 64) listen(r8, 0xc) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) 1m3.077556813s ago: executing program 2 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x41d1, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)="805029a08c9f09e1ac6d2a6bbdf2b5342ecba269b8988c11da581afb67ad30629b2dfff369cd87c7277fc98c5d038fc5abe3898f3aee18b573c5432638596dad716ce781fca83da9a78f70272c19b95deec8cbce7b3f4890005cad2ba88fd945c1d812ff9227f470c25691803ce4c2d5771f15585537d9e86cd12f0e55e8f72d93baf19a263c458d14493e294a5da484bbe408717a916f37e5f2e7d56b0dd8f09865b4870fb8ea008f56d37657328c9c38c9ef605ea37cffdc9f1cfaf9d9e25d0b2713243770d59395a4e6fc2d6ef4a6c185e91a41c6e93f4fa829240e7813a1166b536b8c6add1cfb1007a55abe1800000000001da480b99902c82776d77cda670f5d21f515cfde0fc36ac8823102334a0c3213605a3c7e655dfe9731963e2ad3e40d1273667b7925340e214cac1942ad4e03000000aeeebac310b98f6346981cab56ab0c6ebb2c62f06a61642488cde5472ba1d138e127fbf1f3a619ba1f3b913d1a797503b126ca29d4f48d4a004cfeee2eab0c07d650302b131a23157d1646492256bceb1164b23a9ad7806076f7832c75257a7b3b97d32f417e9d91a681eb28abbbacd776451711b202d0bc50fff714541c43a10278d3d035c34b7ffdd00ada044fbb91dddbd0927cc9e2b8fe4649f2927d58e2a57420ab8a1d57853ee9c1eb8976fb1c2635a8a5ecc8f76891fe551494408c6f156271cdc35c7278032a558ae45f06a5f8664f4f3a016d4cf2bcfa56cc160976663ea6ccf21db36a5a0b56187062b061d48a186dd5f638ac779dd8d01bf51fb91f9e2c42948668eef29e5aab3ea6ccfa499911a23f6e7d14a203a59098b09c1b0c138ca9027ef457ef91668a9d1a2bc69948bd3c7ea28f042d58f9e6aee2de", 0x275) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9a) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) fchown(r4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000000)=0x81, 0x9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@delchain={0x1074, 0x64, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xffff}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1034, 0x2, [@TCA_ROUTE4_POLICE={0x1028, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x3, 0x3, 0xe, 0xfffffc00, 0x10001, 0x1, 0x40, 0x5, 0x5, 0xfffffffe, 0x2, 0x6, 0x5, 0x2, 0x1, 0x1ff, 0xffa, 0x0, 0x4, 0x3ff, 0xffffff80, 0x9, 0x6bd, 0xcadc, 0x4, 0x10, 0xfff, 0x6, 0xfdc, 0x81, 0x80000, 0xe, 0xfffffff9, 0x400, 0x5, 0x1, 0x4, 0x1, 0x400, 0xf2, 0x4, 0x3, 0x1, 0x7fff, 0x8000, 0x0, 0x2, 0x8, 0x0, 0x7ff, 0x4a8, 0x6, 0x9, 0xda, 0xd, 0x6, 0x7, 0x9, 0x8, 0x8, 0x2, 0x8, 0x6, 0x6, 0x208, 0xf5, 0x9, 0x5, 0x8, 0xbe2, 0x8, 0x6, 0x7, 0x1, 0x7, 0x3, 0x0, 0x0, 0x9aa, 0xfffffff7, 0x8001, 0x7, 0x1, 0x8, 0x4, 0x8, 0x10001, 0x180ec0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x9, 0x722cfd35, 0x0, 0x7fffffff, 0x2, 0x6, 0x101, 0x0, 0xfffffff9, 0xe, 0x7, 0x9, 0x10001, 0x7ff, 0x3, 0x100, 0x6, 0x101, 0xf, 0x401, 0x1, 0x515f, 0x1, 0x4, 0x3, 0x7fffffff, 0x40, 0x1, 0x1, 0x5, 0x2, 0x4, 0x7f, 0xfffffffc, 0x4, 0x9, 0xa9f, 0x2, 0x8, 0xbb, 0x4, 0x400, 0x6, 0xa, 0xffff, 0x7ff, 0x1, 0xd, 0x605, 0x2, 0xcaa7, 0x35, 0xffff7fff, 0x9be, 0xd8d4, 0x4f15, 0x2, 0x4, 0x8, 0x4, 0x10000, 0x800, 0x10001, 0x4, 0x7, 0x16e5, 0x6, 0x200, 0x178a, 0x8, 0x9, 0x1ff, 0x608, 0x21140, 0x5, 0x7, 0xffffc967, 0x2, 0xe, 0x6, 0xe9, 0x4, 0xe5f4, 0x1, 0x1eb, 0x1b4, 0x5, 0x7, 0xf, 0x35af, 0x5, 0x8000, 0x3, 0x7, 0x8000, 0xfffff734, 0x6, 0x2, 0x1, 0x4, 0x4587, 0x8, 0x128, 0x8001, 0x7, 0x40, 0xb1, 0x1c, 0x40, 0x8, 0xd, 0x3, 0xf0dd, 0x46d0, 0x7, 0x40, 0x6, 0x1, 0x7fffffff, 0x60000000, 0x7, 0x49d9, 0x7, 0x7c1, 0x8, 0x0, 0x7, 0x6, 0x2, 0x40, 0x81, 0xa, 0x4, 0x0, 0xff, 0xb5, 0x8, 0x0, 0xfff, 0x100, 0x9, 0x80, 0xfff, 0xafd, 0x16fa, 0x4, 0xb3a, 0x0, 0x0, 0x100, 0x854, 0x0, 0x2, 0xfffffff8, 0x3, 0x0, 0x9, 0x5, 0xffffffff, 0x48, 0xb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb1, 0x9, 0x5, 0xffffffff, 0x0, 0xe, 0xf0, 0x1ff, 0x200, 0x16f3, 0x1000, 0x6dd5, 0x80000000, 0x10001, 0x3, 0xf57a, 0x5, 0x1000, 0x9, 0x9, 0x5, 0x0, 0xf35, 0x5, 0x3, 0x7, 0x6, 0x80000000, 0x4, 0x3, 0x1, 0x4, 0x6, 0x40, 0x212, 0x7, 0xe7, 0x80000000, 0x1, 0x5, 0x3, 0xffffffff, 0x2, 0x0, 0xfff, 0x7, 0x71, 0x4, 0xd, 0x8, 0x4, 0x7, 0x3, 0x8, 0x2, 0x0, 0x4, 0xfffffc01, 0x5, 0x3, 0x5, 0x3, 0x10001, 0x5, 0xca, 0x6, 0x1ff, 0x80, 0x4, 0xe, 0xf, 0x6, 0x3, 0x3404, 0xe94, 0xb55, 0x7, 0xd, 0x1ff, 0x62e, 0x5, 0x5, 0xfffffff1, 0xffffffff, 0x7, 0x5, 0x1, 0x6d70, 0x2, 0x7, 0x5e693fd8, 0x0, 0x5, 0x1, 0xfa3, 0xfffffffb, 0xff, 0xc, 0x1, 0x2, 0x3, 0x7, 0xffffffff, 0x5, 0x800, 0x5, 0x5, 0xb6c, 0x2, 0x7, 0x4, 0x5, 0x8, 0x5, 0x6, 0x7f, 0xea9d, 0x81, 0x5, 0x9, 0x1, 0x1, 0xb8f0, 0x1, 0x94, 0x4, 0x1, 0x64, 0x7, 0x9, 0x3, 0x393400f5, 0x3, 0x2c07, 0x74, 0x80, 0xec73, 0x80000000, 0x6, 0x7, 0x9, 0x40, 0x0, 0x3, 0x7f, 0x4311, 0x5, 0x7, 0x63, 0x1ff, 0x4, 0x7, 0x6, 0x7, 0x2, 0x80, 0x7ff, 0xb, 0x4, 0x1, 0x5, 0xfffffc34, 0x5, 0x3, 0x9, 0x8, 0x9, 0x7, 0x4, 0xf1b6, 0x9, 0x5, 0x3, 0xa, 0x7fff, 0x4, 0x5, 0x3, 0xee, 0x10, 0x2, 0x3, 0x1, 0x31, 0x3, 0xffffffff, 0xc, 0x2, 0xffe00000, 0x3, 0x10001, 0x402, 0x1, 0x9a5, 0x9, 0x80, 0xd09, 0x8, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0xb95, 0x8, 0x8, 0x2, 0x3, 0x0, 0x8, 0x0, 0x3, 0x5, 0x9, 0xb, 0x6, 0x4, 0x8, 0xfffffff5, 0x1, 0x0, 0xce, 0x6, 0x9, 0x2, 0x5932, 0x6, 0xea, 0xc939, 0x1, 0x6, 0x81, 0x5553f813, 0x5, 0x55, 0x7, 0x4, 0x5f, 0x4, 0x6, 0x5, 0x3, 0xa1a2, 0x3, 0x8, 0x6, 0xaa14209, 0xfffffff9, 0x3, 0x0, 0x40, 0x4, 0xf, 0x2, 0xc2, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_RATE={0x404, 0x2, [0xdb36, 0x6, 0x400f, 0x8, 0x6, 0x4, 0x80000001, 0x6, 0x3, 0xffffffff, 0x1, 0x2, 0x8001, 0x800, 0xfffffff9, 0x6, 0x3, 0x5, 0x3de, 0x8, 0x1, 0x8, 0x6, 0x401, 0x7, 0xeb5, 0x4b6fc9c, 0x0, 0x2, 0x2, 0x4000, 0x1, 0x1, 0x1, 0x7, 0x10000, 0x6, 0x100, 0xf, 0x2, 0x5, 0x7518000, 0x0, 0x8, 0x2, 0x6, 0x900000, 0x3a63, 0x54e839d7, 0x0, 0x6, 0x8, 0x5, 0xc0, 0x0, 0x8, 0x4, 0xb, 0x4, 0x6, 0xb, 0xfffffffa, 0x4, 0x3, 0xb, 0x800, 0x0, 0xe, 0x84b, 0x10000, 0x9, 0xd5b, 0x5a, 0x6, 0x38c4, 0x7, 0x6, 0x101, 0x101, 0x1, 0x5, 0xfffffff4, 0x0, 0xb, 0x5, 0xbf5d, 0x7, 0x4, 0xa00, 0x8001, 0x4, 0x8, 0x9, 0x9, 0x4, 0x7, 0xfffffffe, 0x1, 0x3, 0x6, 0xffffffff, 0x3, 0x5, 0x6, 0x9, 0x81, 0x1, 0x0, 0x4, 0x4, 0x10001, 0x2, 0xfb, 0x3, 0x4, 0x6, 0xe0c, 0x40, 0x809, 0x9, 0x2, 0x5, 0x2, 0x1, 0x800, 0x5, 0x4, 0x8, 0x0, 0x0, 0x9, 0x2, 0x0, 0x7, 0x0, 0x7, 0x5, 0x5, 0x5, 0x5, 0x3, 0x6, 0xaf7, 0x9, 0x85, 0x70, 0x8001, 0xe, 0xc959, 0x2f7, 0x4, 0xab, 0x401, 0x1, 0x7f, 0x1, 0x8, 0x8, 0x7f, 0xb43, 0xffffff7f, 0xfffffff9, 0x0, 0x1ff, 0x4, 0x7fff, 0xe, 0x2, 0xffff, 0xfffffffa, 0x4, 0x6, 0x4, 0x6, 0x27, 0x5, 0x6, 0x8d, 0xef6, 0xf674, 0x58, 0x3, 0x1, 0x10, 0x0, 0x172, 0x53, 0x100, 0x1, 0x0, 0x202, 0xd8000000, 0x6, 0x101, 0x5, 0x3, 0xed, 0xc7, 0x4, 0x98, 0x10001, 0xa21, 0xfffffffd, 0x8000, 0xfffffffa, 0x3, 0x4, 0x9, 0x8001, 0x5a8a, 0x4, 0xffffffff, 0x9, 0x8, 0x100, 0x5, 0x1, 0x0, 0x3, 0x5, 0x40, 0xff, 0x7f, 0x4, 0x1ff, 0x28, 0x3, 0x1, 0x80000001, 0x8, 0x4, 0x9c06, 0xba, 0x4, 0x5, 0x0, 0x0, 0x2, 0x7eb, 0x2, 0x3, 0x80, 0x9, 0x4, 0x401, 0x1, 0x9, 0x2, 0x7, 0x8, 0xb7a, 0x1, 0x7, 0x4, 0x97, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7fffffff, 0x5, 0x7, 0x3f, 0xf, 0x7, 0xbd, 0x8, 0x80000000, 0xc, 0x9, 0x1, 0x2, 0x3, 0x10000, 0x8, 0x2, 0x2, 0xab, 0x0, 0xcb20, 0xfffffeff, 0x8, 0xa5b3, 0x1, 0x10001, 0xa, 0x10, 0x8, 0xf44, 0xfffffffe, 0x6e, 0x1, 0x43203ce, 0x6, 0xffffffff, 0x5, 0x3, 0xfffff801, 0x800, 0xb, 0x4, 0x1, 0x2, 0xb80, 0x2, 0xde5833c, 0x5, 0x101, 0xfffffffc, 0x0, 0x23, 0x9, 0xffffffff, 0xfffffffe, 0x2aa, 0x120000, 0x6, 0x240000, 0x2, 0x5, 0x3, 0xfffffc01, 0x0, 0x5, 0x3, 0x8003, 0x0, 0x7, 0xa, 0x1, 0x9e1, 0xe7, 0x35c2, 0x6, 0x6, 0x5, 0x1, 0x4, 0x8, 0x73e2, 0x8, 0xb278, 0x38, 0x7, 0xd, 0x3, 0x7ff, 0xfffffffd, 0x0, 0x2, 0x9, 0x0, 0x10001, 0x5, 0x9, 0x9, 0x101, 0x1, 0x8001, 0xf, 0x322b, 0xffffcead, 0x4, 0x13d, 0x2, 0xd, 0x3, 0x6, 0x3, 0x3f, 0x9, 0x1d0, 0x3, 0x800, 0xfffffffd, 0xae, 0x7, 0x1ff, 0x9, 0x5c, 0x8, 0xfffffff9, 0x5, 0xfffffc0c, 0x6, 0x9, 0x471003d0, 0x7, 0x0, 0x9, 0x10, 0x3, 0x2, 0x1, 0x6, 0x7, 0x48f, 0xf, 0xa20, 0x8, 0xb, 0x8, 0x3, 0x6, 0x7fffffff, 0xbe, 0x81, 0xa8, 0x5, 0x6, 0x7f, 0x0, 0x2e, 0xcc, 0x7, 0x0, 0x0, 0x7, 0x5, 0x3, 0x1, 0xe, 0x9, 0x81, 0x9, 0x6, 0xb, 0x8, 0x1980000, 0x7fffffff, 0x7fff, 0xfffffffb, 0xfffffff7, 0x4, 0x80000001, 0xe, 0xfff, 0x9, 0x6, 0x4, 0x9, 0x9, 0x0, 0x5, 0xfff, 0x4, 0x2, 0x5, 0x69, 0x4, 0x4, 0xb, 0x6, 0x3, 0xf, 0x2, 0x12e5, 0x7f, 0xfffffffc, 0xa5, 0x7116df7d, 0x4, 0x101, 0x2, 0x0, 0xffffffff, 0x9, 0x67e9, 0x6, 0x81, 0xdc, 0x80000000, 0x0, 0x8, 0x49, 0x2, 0xa, 0x4995bc89, 0x10000, 0x8000, 0x8, 0x1a, 0xb, 0x6, 0x1, 0xe02, 0x1ff, 0x9, 0x401, 0x5, 0x4, 0x5, 0x8000, 0xd, 0x0, 0x5, 0x66, 0x8, 0xb5, 0x8, 0x2, 0x54, 0x195, 0x2, 0x7, 0xffffffff, 0x6, 0x8, 0x7, 0x7, 0xfffff800, 0x6, 0x2, 0x3]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) wait4(r9, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r9, 0x350, 0x10000) ptrace$pokeuser(0x6, r9, 0x388, 0x503fffc) 1m3.063212993s ago: executing program 2 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80000) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000390000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, &(0x7f0000000080)={0x968f, 0x1, [{0x1, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@deltclass={0x60, 0x29, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x9}, {0x6, 0xe}, {0x7, 0x2}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x261}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4d}}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xebd1bea7}]}}]}, 0x60}}, 0x0) 58.341124476s ago: executing program 33 (id=1185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async, rerun: 32) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='FREEZING\x00', 0x9) (async, rerun: 32) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async, rerun: 32) write$cgroup_freezer_state(r4, &(0x7f0000000180)='FREEZING\x00', 0x9) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0x0, r6, {0xfb1, 0x0, 0x101, 0x4}}, 0x20) r7 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='\x03\x00\xdd', &(0x7f0000000000)='\xe2\xday\xf1\xf6xV|\xf7\xee', 0x0) 48.037060387s ago: executing program 34 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80000) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000390000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, &(0x7f0000000080)={0x968f, 0x1, [{0x1, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@deltclass={0x60, 0x29, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x9}, {0x6, 0xe}, {0x7, 0x2}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x261}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4d}}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xebd1bea7}]}}]}, 0x60}}, 0x0) 22.929490732s ago: executing program 6 (id=1822): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000040c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x60, 0x0, 0x3, {{0x3, 0x7, 0xffffffffffffffff, 0x100000000000008, 0x3, 0x2084, 0x5, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0xffffffff, 0x5, 0x800000800000, 0x6, 0xfff, 0x7}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0x3, 0x9, 0xa, 0x0, 0x0, [{{r0}, 0x401}, {{r0}, 0x28f}, {{r0}, 0x7fff}, {{r1}, 0x2}, {{r1}, 0x10000}, {{r0}, 0x5}, {{r0}, 0x9}, {{r1}, 0x7}, {{r1}, 0x7}, {{r2}, 0x7}]}) 22.819919171s ago: executing program 6 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f0000000140)=0x3ff, 0x61, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000080)='\x00', 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(0xc9, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) 22.665693061s ago: executing program 6 (id=1831): getitimer(0x1, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/bonding/bond0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000002c0)) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x37, 0x0, 0x3}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r7, 0x0, r9, &(0x7f00000008c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r10, 0x0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x4, 0x24040871}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) pread64(r5, &(0x7f00000003c0)=""/128, 0x80, 0x9) preadv(r2, &(0x7f0000000240), 0x0, 0x5c, 0x65a) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r11 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x7637, 0x3000, 0x0, 0x19a}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0x3b7, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x1c0}}}, 0x0) setuid(0xee01) 22.130229874s ago: executing program 6 (id=1840): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r1, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x50) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_delroute={0x7c, 0x19, 0x100, 0x70bd26, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x0, 0xff, 0x3, 0xc8, 0x9, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_METRICS={0x3c, 0x8, 0x0, 0x1, "eb6b317940a2fb8e3ac134cf8a3bfb5c971eaa9fa7278e5310dc3a2786a17e9b1020c985ad2bfe56911205a21d9edf23e9785c074e60c17f"}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_METRICS={0xc, 0x8, 0x0, 0x1, "0168f3da8512c4ed"}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x55) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000640)) close_range(r0, r0, 0x0) 22.05886035s ago: executing program 6 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) getrlimit(0x0, &(0x7f0000000240)) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x300000b, 0x2010, 0xffffffffffffffff, 0x42797000) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001900)={&(0x7f0000000900)=[0x6, 0x3, 0x0, 0x7ff, 0x7, 0x3a9, 0xb0000, 0x4, 0x3af4, 0x5, 0xf, 0x5d, 0x9, 0xc5, 0x2e8b, 0x3, 0x80, 0x1, 0x6, 0x80000001, 0x8, 0x5, 0x200, 0x8, 0xfffffffb, 0x1, 0xe20, 0x1, 0x11, 0x5, 0x2, 0xfe, 0x81, 0x8000, 0x10, 0x1, 0x68f, 0x1, 0x8, 0xf9fb, 0xfffffeff, 0x0, 0x1c000, 0x80000000, 0xff, 0x0, 0x2, 0x6, 0x3, 0x618c84df, 0xfffffffb, 0x5, 0x9, 0x1, 0x3e0863b0, 0x8, 0x35f, 0x0, 0x52508bf3, 0xfffffffd, 0x9, 0x0, 0x0, 0x8, 0x0, 0x75ad83f5, 0x1, 0xa480, 0x4, 0x2, 0x0, 0x3, 0x80000001, 0x3, 0x4, 0x9477, 0x20000, 0x52, 0xc, 0x4005, 0x70, 0x10, 0x8, 0x7, 0xfffffff4, 0x7, 0x8, 0x8ccf, 0x7, 0xfffffffd, 0xd, 0x6e3774a1, 0x9, 0x2, 0x8, 0x2, 0x7, 0x2, 0x3, 0x5, 0x9, 0x0, 0x8, 0x0, 0x5, 0x10000, 0x80000d, 0x8001, 0x48, 0x9, 0x9, 0xfffffe01, 0x40, 0x5, 0x401, 0x8, 0x5, 0x7, 0x6, 0xffff0995, 0x7, 0xb, 0x1, 0xfffffff9, 0x10, 0x3, 0x8, 0x9, 0x6, 0x4, 0x26, 0x9, 0x3, 0x7, 0x80, 0x0, 0x7, 0x1, 0x1b7, 0x2, 0x8, 0x5, 0x4, 0x800, 0x7, 0x6, 0x1000, 0x1000, 0x8, 0x1, 0x98, 0x7, 0x6, 0x3, 0x3ff, 0x5, 0x0, 0x9, 0xeaab, 0x100, 0x3, 0x1ff, 0x6efc6ae, 0x4, 0x400, 0xa, 0x4, 0x6, 0x8, 0xb, 0x0, 0x9, 0x4, 0x9, 0x9, 0x4, 0x0, 0x3, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x0, 0x20000000, 0x4, 0x9, 0x5, 0xcf9, 0x6, 0x6, 0x8, 0x4, 0x1000, 0x6, 0xd, 0xff, 0x7, 0x6, 0x9, 0x8, 0x3, 0x5, 0xfd, 0x7, 0x7fff, 0x5, 0x7ff, 0x7, 0x3, 0x1cab, 0x401, 0x8, 0x1, 0x9, 0x3, 0x3108, 0xf9f, 0x0, 0x6, 0xf, 0xd913, 0x7f, 0xffff, 0x9, 0xd, 0x1c30dc6f, 0xdc, 0x1, 0x80000000, 0x5, 0x8a9, 0x10001, 0x5, 0x7, 0x6, 0x8, 0x1, 0x2, 0xffff, 0x4042, 0x9, 0x80, 0x9, 0x3, 0x3, 0x315, 0xf96, 0x5, 0x5, 0x114c1896, 0x5, 0x7, 0x6, 0x0, 0x6fca243e, 0x4, 0x3, 0x7, 0x3, 0x800, 0x0, 0x4, 0x4, 0x7, 0x5e, 0x3, 0x8001, 0x8, 0x8, 0xf6a, 0x989b, 0x7, 0x10, 0x6, 0x6, 0x7, 0xbc1d, 0x6, 0x3, 0xd85e, 0x7473a3ba, 0x80000001, 0xffffffff, 0x3ff, 0x6, 0x9, 0x81, 0x401, 0x8, 0x1c737565, 0x80000000, 0x0, 0x1, 0xfff, 0x7, 0x31ee, 0x5, 0x3, 0x9, 0x1, 0x87cd, 0x803, 0x1, 0x70e3, 0x84, 0x81, 0x8, 0x0, 0x0, 0x10000000, 0x7, 0x7, 0x492a, 0x9627, 0x7, 0x7, 0x6, 0x0, 0x6, 0x0, 0x5a, 0x8, 0x100, 0x2, 0xf7, 0x47, 0x9, 0x7, 0x5, 0xbb0, 0x5, 0x5, 0x8, 0x2, 0x2, 0x5, 0xfffffffc, 0xffffb810, 0xa44, 0x7, 0x0, 0xc, 0xffffffff, 0x8, 0xd6d9, 0x7fffffff, 0x3, 0x7fff, 0x81, 0x1, 0x5, 0x3c, 0xb7, 0x1000, 0x6, 0x3, 0x0, 0x3, 0x7, 0x76, 0x3, 0xf, 0x3, 0x5, 0x10000, 0xff, 0x9, 0x4, 0xfffffffc, 0x8, 0x1b800, 0x9, 0x8, 0x9, 0x10001, 0x9, 0x74, 0x6, 0x5, 0x2, 0x80000000, 0x480, 0x7f, 0xea, 0x1, 0x1, 0x0, 0x3b9f, 0x6, 0x1, 0x4, 0x2, 0x462, 0x1, 0x3, 0x9, 0xc94, 0x4, 0xd34, 0x5, 0x4, 0x9, 0xdd, 0x2, 0x3, 0xa4, 0x0, 0x4, 0x3fe, 0xf6f8, 0x6, 0x2, 0x6a4, 0xc85e, 0xfd, 0x7, 0xe, 0x4, 0x3, 0x8, 0xfffffbff, 0x0, 0x2000, 0x6, 0x8000, 0x80000000, 0x2a42e6e1, 0x489b, 0x3, 0x7, 0x10, 0x0, 0x9, 0x2, 0x7fff, 0x0, 0x3, 0x2, 0x27, 0x8, 0x2, 0xe282, 0x10000, 0xf18, 0x13, 0x862e, 0xdd6, 0xfffff800, 0x8001, 0xffffffff, 0x2, 0x3, 0x4, 0x6, 0x0, 0x8, 0x0, 0xa, 0x3, 0xfff, 0x400, 0x2, 0x8, 0xe000, 0x2, 0x1, 0x7, 0x7, 0x2, 0x9, 0x6, 0x101, 0x59, 0x8, 0x9, 0xc875, 0x1, 0xfffffff7, 0x0, 0x7, 0x9, 0x0, 0x587, 0x1000, 0x3, 0x6, 0x7fff, 0x2, 0x2, 0x800, 0x1, 0xf, 0x2ed6, 0xc, 0xc, 0x80, 0x5, 0x5, 0xffff8000, 0x10000, 0x3c, 0x5, 0x2, 0x3, 0xa0, 0x3ff, 0x7, 0x9, 0x6, 0x0, 0x7, 0x8, 0x8001, 0x100, 0x10000, 0x5b9, 0x4, 0x4, 0x1, 0x4, 0x7, 0x4, 0x8, 0x7, 0xe2, 0x7, 0x1, 0x3, 0x400, 0x2, 0x0, 0xc, 0x3, 0x6, 0x2, 0xff, 0x3, 0x70000000, 0x6, 0x89b, 0x5f741940, 0x7, 0x200, 0x8, 0x8, 0xb, 0x0, 0x10001, 0x40, 0xffff, 0x6, 0x7, 0xa, 0x8c, 0x7, 0x370e, 0x2, 0x8, 0x3, 0x3, 0x68e0c01a, 0x1f, 0x10000, 0x9, 0x1, 0x7, 0x3, 0x4, 0xf, 0x5, 0xa27, 0x8, 0x3, 0x81, 0x81, 0x9, 0x4, 0x5, 0x7ff, 0x5, 0x2, 0x7, 0x100, 0x0, 0x1, 0x8, 0x4, 0x8, 0x0, 0x80000000, 0xffffffff, 0x21f6, 0x13fe, 0x3, 0x7, 0xa65d, 0x100, 0x200, 0xfffff000, 0x7, 0x4a, 0x1, 0x4, 0x2, 0xfff, 0xd983, 0x10001, 0x8, 0x18a, 0x4, 0x1, 0x7, 0x31be, 0x0, 0x85, 0x6, 0x4, 0xfffffff9, 0x0, 0xfff, 0x5, 0x9, 0x6, 0x3, 0x6, 0x1, 0x1, 0xa31d, 0x3, 0x4, 0x401, 0x10000, 0xffffffff, 0x2, 0x9, 0x101, 0x6, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x40, 0x9, 0x7, 0x6, 0x80000000, 0x3, 0x2f8c, 0x0, 0x94be, 0x5, 0x3, 0x7b41, 0x9, 0x4, 0x8, 0x6, 0x101, 0x2, 0x7, 0x5, 0x5, 0xffffff00, 0x6, 0x4, 0x1, 0x2, 0x6, 0x9, 0x3, 0xffff, 0x802b, 0x7fffffff, 0x3, 0x37, 0x7, 0x3, 0x8, 0x3, 0x1e4, 0x2, 0x2, 0x2, 0xb30, 0x5, 0x2, 0x7, 0xc, 0x0, 0x800, 0x5, 0x1, 0x2, 0x9, 0x1b, 0xb, 0x8, 0x0, 0x2, 0xd1, 0xfffffffd, 0x3, 0x660, 0xffff, 0x8, 0x5, 0x5bc1, 0x37, 0x8, 0x6, 0x2, 0x6, 0xffffffff, 0x10000000, 0xfffffffb, 0x7fff, 0x3, 0xd2f, 0x9, 0x401, 0x7, 0x7fff, 0x4, 0x9, 0xe, 0x2, 0x7, 0x7f, 0xc4e, 0x0, 0x200, 0x2, 0x800, 0x7, 0x7, 0x10000, 0xf6, 0x5, 0x4, 0x5, 0x7, 0xa, 0x561, 0x7, 0x5, 0x7fffffff, 0x7, 0x8000, 0x1, 0x4, 0x4, 0xeb2a, 0x2, 0x0, 0x8d1e, 0x6, 0x3, 0x7, 0xfffffffe, 0xfffffff9, 0x80000001, 0x10, 0x3, 0x7, 0xfffffeff, 0x1, 0x3, 0x2, 0x4, 0x5, 0x3, 0x3, 0x8, 0xfff, 0x4, 0x1, 0x6, 0x40, 0x9, 0x4e2e, 0xffffefcd, 0x800, 0x8, 0x8, 0x7, 0x5, 0x3, 0x3ff, 0xae8a, 0x1, 0x6, 0x3, 0x6, 0x3014, 0x0, 0x6, 0x1, 0x46a, 0x200, 0x8, 0x7, 0x0, 0x6, 0x5, 0x6, 0x59b63461, 0xe, 0x1, 0x7, 0x1, 0x4, 0x400, 0x8, 0x1, 0x4, 0xffffff01, 0x8, 0x5, 0x5, 0x40, 0x2, 0x4, 0x10000, 0x4a9, 0x9, 0x1, 0x8, 0x100, 0x1, 0x6, 0x8001, 0x8, 0x6, 0x0, 0x1, 0x0, 0x5, 0x14b2, 0xff, 0x5, 0x1, 0x0, 0x8, 0x5, 0x2, 0xffffffff, 0x400, 0x4, 0xffffffff, 0xa0a1, 0x1, 0x80000001, 0x3, 0x4e, 0x2, 0xf, 0x4, 0x848, 0x6, 0xc6e7, 0x6, 0x1, 0x6c, 0x8, 0x2, 0xff, 0x24000, 0x61b51ba7, 0x9, 0x5, 0x0, 0x80000001, 0x7, 0x9, 0xd56c, 0x2, 0x1, 0xffff, 0x7ff, 0xffffffff, 0x3e94, 0x401, 0x86, 0x5, 0x7f, 0x3, 0x3, 0x9, 0x1, 0x7, 0x66c, 0x6, 0x8, 0x4, 0x4, 0xfffffff3, 0x7, 0x5, 0x2379, 0x0, 0x6, 0x3ff, 0x3, 0x9, 0xf95, 0x1, 0x986, 0x6, 0x6000000, 0xffffff33, 0x7ab9, 0xe0, 0x4, 0x2, 0x8, 0x800, 0x7, 0x7, 0x4, 0x7, 0x2, 0xffffffff, 0x7fffffff, 0x1, 0x6, 0x4, 0x1000, 0x5, 0x9, 0x5, 0x9, 0x5, 0xc, 0x5, 0x8, 0x8c, 0xa9, 0x4, 0xd, 0x6, 0xff, 0x101, 0xfff, 0x800, 0x3, 0x800, 0x0, 0x5, 0x7fff, 0x5, 0x1, 0x2, 0x10000, 0x2, 0x6, 0x1, 0x9, 0xe, 0x31, 0xfffffffe, 0x3, 0x77f4, 0x3, 0x5, 0x5, 0x0, 0xe000, 0xffffffff, 0xf, 0x10, 0x2, 0x1, 0x0, 0x8ef, 0xffffffff, 0x8, 0x6, 0xfff, 0x0, 0xffffffff, 0x7fffffff, 0x97b8, 0xdc, 0xffff, 0xfffffffa, 0xfffffff8, 0xffff, 0x0, 0x3, 0xffffff11, 0x800, 0xffffffff, 0x0, 0x7, 0x6, 0x80, 0x7, 0x806, 0xff, 0x1, 0x8, 0xfffffff7, 0xc, 0x2, 0x80, 0x0, 0x9, 0xfff, 0x5, 0x0, 0x12, 0xffffffff, 0x0, 0x1ff, 0x4, 0x80000, 0x10001, 0x10000, 0x8], 0x2, 0x400, 0xff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'gre0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) write(r0, &(0x7f0000000140)='sessname=s+ device_path=/', 0x19) 21.650276293s ago: executing program 6 (id=1852): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r1, 0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_delroute={0x7c, 0x19, 0x100, 0x70bd26, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x0, 0xff, 0x3, 0xc8, 0x9, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_METRICS={0x3c, 0x8, 0x0, 0x1, "eb6b317940a2fb8e3ac134cf8a3bfb5c971eaa9fa7278e5310dc3a2786a17e9b1020c985ad2bfe56911205a21d9edf23e9785c074e60c17f"}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_METRICS={0xc, 0x8, 0x0, 0x1, "0168f3da8512c4ed"}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x55) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000640)) close_range(r0, r0, 0x0) 12.854722051s ago: executing program 3 (id=1939): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}, 0x1, 0x200000000000000}, 0x0) 12.787611403s ago: executing program 3 (id=1940): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x200000, 0x800, 0x2, 0x3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200}}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x4b}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107524, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) 12.787281347s ago: executing program 3 (id=1941): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 12.729811077s ago: executing program 3 (id=1943): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x25d}, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3, &(0x7f00000000c0)={0x0, 0x6e41, 0x1, 0x3, 0x358, 0x0, r1}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r4 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 12.659598362s ago: executing program 3 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r1, 0x5, 0xc00, 0x3, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0xa}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, @random=0x590a, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xa, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x39db77227c63720c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 12.37954381s ago: executing program 3 (id=1946): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = timerfd_create(0x3, 0x40800) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, &(0x7f0000001000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0xb, 0xfffffffffffffe49) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f15a0499d3"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x800, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff67, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c39200b0c9b472c8080ab8f4f725b67b68a68416c73a9d7c0c05c96252411f5179a4fe1e54fffafa28aec9759dad9c7fd5ede1be70b7eb16b9df2e804364a7a37968608b750d516c895fc011b31c2949d68392cb60c3c90bbed70ce36e2297e3e38236375184917f69edf75e214112743bf33023d45f49cc3aa22d3c98fc97d5ac4b87c3016bd92c6aa7ccf3a9a9eb663ee54c23712da45317afcb1ab9e19b704c9f16805854b134d39324ff2eed757299c886117c403e9714c94a15011462987dc821970ba6b943d62bb50a197e9c", @ANYRES32=r4, @ANYBLOB="14001d8010000080060005000e00000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf2564000000080001000d00000008000300", @ANYRES32=0x0, @ANYBLOB="bd35e10e582c4a60c3ef2033fd48a8292cd68059793b6d9ff66a6c79c131fd78476783fd"], 0x24}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfa, 0xef4}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchownat(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0, 0x0) write$tcp_mem(r0, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) 12.270757484s ago: executing program 35 (id=1946): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = timerfd_create(0x3, 0x40800) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, &(0x7f0000001000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0xb, 0xfffffffffffffe49) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f15a0499d3"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x800, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff67, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c39200b0c9b472c8080ab8f4f725b67b68a68416c73a9d7c0c05c96252411f5179a4fe1e54fffafa28aec9759dad9c7fd5ede1be70b7eb16b9df2e804364a7a37968608b750d516c895fc011b31c2949d68392cb60c3c90bbed70ce36e2297e3e38236375184917f69edf75e214112743bf33023d45f49cc3aa22d3c98fc97d5ac4b87c3016bd92c6aa7ccf3a9a9eb663ee54c23712da45317afcb1ab9e19b704c9f16805854b134d39324ff2eed757299c886117c403e9714c94a15011462987dc821970ba6b943d62bb50a197e9c", @ANYRES32=r4, @ANYBLOB="14001d8010000080060005000e00000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf2564000000080001000d00000008000300", @ANYRES32=0x0, @ANYBLOB="bd35e10e582c4a60c3ef2033fd48a8292cd68059793b6d9ff66a6c79c131fd78476783fd"], 0x24}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfa, 0xef4}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchownat(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0, 0x0) write$tcp_mem(r0, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) 6.547417643s ago: executing program 36 (id=1852): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r1, 0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_delroute={0x7c, 0x19, 0x100, 0x70bd26, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x0, 0xff, 0x3, 0xc8, 0x9, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_METRICS={0x3c, 0x8, 0x0, 0x1, "eb6b317940a2fb8e3ac134cf8a3bfb5c971eaa9fa7278e5310dc3a2786a17e9b1020c985ad2bfe56911205a21d9edf23e9785c074e60c17f"}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_METRICS={0xc, 0x8, 0x0, 0x1, "0168f3da8512c4ed"}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x55) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000640)) close_range(r0, r0, 0x0) 2.739911949s ago: executing program 4 (id=2038): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20004090) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = syz_io_uring_complete(r5, r6) close(r8) 2.689953956s ago: executing program 4 (id=2040): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0x2a, "b5902596750f8814017ff3877412bd0026a09d1d0ce9dccad4c830f0c77829c7439a9120c1f654b4a2bc"}}, 0x30) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000040)={0x6, 0xe, 0x44, 0x5}) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000240)={'lo\x00', {0x2, 0x4e24, @rand_addr=0xff}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MAP={0x24, 0xe, {0x2, 0x8, 0x9, 0xe, 0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) fstat(r2, 0x0) close_range(r0, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$unix(0x1, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000080000000000000000000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d6ca66495a0000012bbd7000fedbdf25fc08000100040000080001000400000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10000001) 2.567862685s ago: executing program 4 (id=2043): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x51, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000a18f900000000eaffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x22}, 0x94) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8100}, 0x4000080) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x2c, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 2.518346177s ago: executing program 4 (id=2044): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 2.518106678s ago: executing program 4 (id=2045): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x20803, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101d, 0xffffffffffffffff, 0x0, 0x0}) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x20803, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101d, 0xffffffffffffffff, 0x0, 0x0}) (async) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) (async) 2.459721687s ago: executing program 4 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = signalfd4(r4, &(0x7f0000000180)={[0x6]}, 0x8, 0x80000) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000010401000000000000000000020000000500010001000000f72f1eb8f690eab46272c62cd33e9c0df1a563988cc146dd0a9b9858c2500f96ad54bd7fb1acd299d00705a411b332ff26efad96ae7bd85e882a795f264352aa928006bb6fa5929d5a021585d27cd89b886730e7763c94d1925e21dd51846564b7c0e7b7070927d2dd2d29636c5e51122aae9855b2265320c216d23dcc4c522f26268b2d31e9f1bee1873d8e9f36b5988002211214c9c9a517044d736bd822b331ea2c5da5a0c040832a30b0c671042865be4df2e8651a4f9ca4487db2abfac916bc116dd53ea5932365d2750fea5c6e7c359e"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000010401000000000000064000000000a6dced62f21b73080004400000000706000640000700"/56], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540007007c07611950e8bf89d00eeb4accb8d630adfdff0dc5fdad5df0bfadba51ee4cbe2f20ab590cf99401c9339e1665cd4d5a0d41959110fbc7af42d3c99388d4411ec2dae302f77d76f5b59dfef83b6dfe424707ca62cd1a57a1baaba07f753f21ad15181b7cc6aa7f7209eb244f13d509dd1e825c74c0d34bb2dd2f26bf631dc55b2ced0a766a1c407717637827b247349c0e798d91ab4a5cc8dea690c488c8de39afc7d617471a01dcd9038d131902fec42bc3c28da931e5752fccaadec7552b90ec1b11d42bddbaf0031b98a7ee0f964f7a8fb05c2c1fac1531dad8d7a3619ac4b2cb786f0d867964de629a65e6", @ANYRES16=r8, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30000000002c0004001400010002007530ac1414aa00000000000000001400020002007530ac1414bb0000000000000000"], 0x54}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r9, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1234, 0x0, @loopback}, 0x1c) recvfrom(r9, 0x0, 0x0, 0x2040, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0!\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r12, @ANYBLOB="0500340000000000080026006c09000004002400"], 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 1.659583521s ago: executing program 8 (id=2068): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="05000000010001", 0x7) 1.659251065s ago: executing program 5 (id=2069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) r3 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x1c}}, 0x20000005) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2000, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast2, 0x80}, r8, 0x2}}, 0x48) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000140)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8461c39b9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x110, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240400b0}, 0x8080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.659115046s ago: executing program 8 (id=2070): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt(r0, 0x2, 0x0, &(0x7f0000000140)="8d8f56c54395960827c8dadacd022ef8861789051300dc264c62434a0bc5db267e63388eb06804f4be7bd238f7c5bbb6a2fc1332ecbdea", 0x37) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x20801) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000840)) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)=0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x672, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1002, 0x2, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x1, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.657082206s ago: executing program 5 (id=2071): mount$binder(0x0, 0x0, 0x0, 0x1020, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x205682, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x400000000000140, 0x24008050) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000280)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r7, 0x40047454, &(0x7f0000000100)) 1.569905439s ago: executing program 5 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) setns(0xc9, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 1.519881325s ago: executing program 5 (id=2073): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400050020a10700000600"/96, 0x60) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x1a, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.519708002s ago: executing program 8 (id=2074): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) set_mempolicy(0x3, 0x0, 0x3) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000002100)={0x1d, r4, 0x0, {0x2, 0xf0, 0x3}, 0x1}, 0x18) syz_usbip_server_init(0x1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x2085) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 1.450135279s ago: executing program 5 (id=2075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000180)={'wlan1\x00', @random="c5051f002200"}) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = getgid() chown(&(0x7f0000000040)='./file0\x00', 0x0, r3) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 938.798137ms ago: executing program 8 (id=2080): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0xeffdffff, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, 0x0) 880.165325ms ago: executing program 8 (id=2081): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) pselect6(0x40, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x100000000, 0x2, 0x5, 0x1c, 0x9}, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000000c0)}, 0x20) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x52424752, 0xf00, 0x870, 0x2, @discrete={0xb, 0x7}}) 579.279613ms ago: executing program 5 (id=2086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./cgroup/../file0\x00', &(0x7f0000000080)='ntfs\x00', 0x1186488, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@deltclass={0x34, 0x29, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0x5, 0x10}, {0x8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x3b}}]}, 0x34}}, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000b00)='./cgroup/../file0\x00', 0x0, 0x18}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000a40)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="20a94f2f9b987145c51d0e1774bc13ff3636f65a664250c806e6020212d326fb14799e796e1ccff740156669e8dedabc315f9ec71abd9145f456a96aa47a2f05dcdc1748c3038f55abbf3023e37123bdddd8fdf9d7025a8731225b4561c926260728e6669d337a87fa5ec699e8ec8ebe8ad473f41a79df6727354bdd2c8fead4493b56e8659b27370324d43034e479426a49afa172c30c", 0x97}, {&(0x7f0000000600)="94689e2cd69419b198ef7fbcf31e50019167f7e035c9cff453a3a25b0871999aa3e57d2eeecd606d83a4dcf1", 0x2c}, {&(0x7f0000000640)="2d4ae3a712d7f6e70bf2d20efdc298b9763218b5cfeacaac0da51426b3acd5dd7ab443bb0df1db2899dc2060ddbb7a02eda049a0c350b96c8f111d143fb5613851fd129034dd9b856f01c76df183e1a14dcbe9e75751d2d73619b2887b081ee93342d5c80fde8eb847650d130751cc59745c1a8074159289ccd6d5010bc737b4d339a5cab41ba946a309c726cde7f342a29c429ffa3337f2d3c907dfc2fc7732268ecc41a0eefb9c2ba2c8f0dfe1c3a464e21f9e08c0347318690b519b9a0af4a54041daf79d936c4fe20853d08bc97310790574265417c9f85c96dbcc", 0xdd}, {&(0x7f0000000740)="a14eab8a9df8a2f3ba3ba6f640f7baafffaa865dae076216f6cffa9d7aeab0fb7e0cb24e7b08eec21513e5c661b92e2c32cdf74c0ebd509e5dc5694e728e5999f6e1ef41c6cb38ec2255981b16be43d8b6862db39ac84166618e1f516c8902a462315de04940c1dda76ce60fba2452579830c69eb63d39221b0788c18f11346626dbf646d8b8aeebc166de31c000e934d86cc9232865f695602fdf1c616090c613cdaa588db82d613d76e3ec27c8a6ca4d85f87db24b3b5396d2a4609813ac1151b910feb3f9696ee92d304a308b035e3429a19f679b03753aa411e4bfd621d80bcecafd79c5f29311df84c8e2e08e61", 0xf0}, {&(0x7f0000000840)="bb0afd796f8398a50ce2263788a3335d7797e432f0c6f13499355374424ce6af75b1c300cada20d9d970c7f21875999273eb6d92378aebe9737de112e5475b38413850522919fe7881ed99bd53016301dbc55128994efe382d5a715e862d5e801b175ae4ea8511d4540e340f45691e7d0ee8649835ba04317a5ade229d4847af8bcf16a02e604c49d7fc92027fa17cd7d975ad244514ee15858427cbaa993f90c531a365bc91d58d92dd96de63e91b28d715038e8f728190bdd8db637e675c6e6da84625bc725a8a22a18801f7c860162d5a4dd1ab555d3f96e379b4fadc3ba1684f86d1", 0xe4}], 0x5, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}, 0x40000) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x27) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000b40)="9161f8a417087a512b5a2b5c3de6763ca78b58d4d14e685ec761285c8c9354fed5b0544af9ce98779fcd84e984c5b910a03916a8107f008d74d8ea04487c1f29b056b0378e681a1ea243cb9e8942d5e38f5ed4347a2eb2e4dbf2969f689cfd8e0cca8ec96f73e43b921be4d9785b319f15bcf1a692155e039f51a152ebaa17e04cfd043bf65e8e3fdf6b3d38671a7392427d37da62c8fe61f68221edb8cd34bd32f2", 0xa2, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) r6 = accept4(r4, 0x0, 0x0, 0x80000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r10, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) syz_io_uring_setup(0x2c91, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000a80)={0x1, 0x0, [{0x40000003}]}) write$cgroup_int(r0, &(0x7f0000000280)=0x10000, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) 506.895454ms ago: executing program 7 (id=2088): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x28, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 506.421015ms ago: executing program 7 (id=2089): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000004c0)) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000005000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYBLOB="0100000001000000000000fe00"], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003c40)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000003e40)={r4, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000480)={0x3, 0x100, 0x7}) ioctl(r5, 0x40104d05, &(0x7f0000000a00)) (async) ioctl(r5, 0x40104d05, &(0x7f0000000a00)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r9, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x3c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r9, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x3c}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xf, @private2, 0x2}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000000c0)="ae13c288147c39c29456c6a91cff9bd6dbd4a6f73f7d2f366ec0c05f87a7f61bbf906043acac7583ceabbf2151de11713be7a3d72c7d4ebf80cc9901bedeb4ba6e36a1cc5d3377cf13ee2818d0703132f9237f1045", 0x55}, {&(0x7f0000000180)="8597e289d41ac5f7b486fc78f57df9283709f9ca261e51f36d8b630d3fd766d3531cfaaf2c213115a73b7f979995c3f171056b023318019510420fdd7bf6059b888ccef92c87c7957553655a89a86e", 0x4f}, {&(0x7f0000000200)="497091a8e7eb6b87258d0e2c2658165e6de6de61cd49bb27ee435d0d5a08ec81056e30d37e38bb46d6531e2213b0e17699776ea234e3da9046752faa397c000abbcf5b0f26bc567adf74191bc32fbca3f1737fcc88e3fd955605b9dea90a9e", 0x5f}, {&(0x7f0000000280)="aca04b707fae871c95f70578e8d61768f1b55d5a630d421a2919272ea7a5684217fb96bc25b34879e33c2e2d689914c3af2abae57c28717b3888afc0640e29509c1d62ac7bf27a7b569960b8a11c448443a3c8938635a874c56fd23493098ed8421ba3385591ecc513d3c6b5295136395a4eb455ccb96d1b0383cd47b5b74ef3e4a7220d25b056a16dd69421e183767b9b9bc2f8bc884bd845a8e0811909b9341891d3a46e6e1ff50bea315dbc7411e116f723d5211fa6703b9989ffcb3a2f1dd8fb4694d5c3a0dcaf779995dea0ff35e74259cb391b", 0xd6}, {&(0x7f0000000700)="e5edacef03c44491121d8624dfc3bea711200b4e999bf56001b1622978aa3defa374af333263127e898294423c159fde9daf5b0e557ec3052c17f153b57f73efaf14c98a5f3c8e6a1986831cdcbcb2f31168726d601bcd2784452ccbafeb0cd354f46066464738fbd8d7db729f404de0e46f8ca655a83fad4f7311bf3e7a8ff88f5bf40f67c56083df7aa4682d2ce8f1f5a540f553681580393762c8b5d4997188579461e87388186bbff03d70919a9852434e144fb90dd198619044c67cb4d4e5a6a7100a9b46eccccebc1c3b99918896f86619fb938d4ede88872b6ae7147304126966b63e380068eb9060842de648a16ddc1cc5ea5b3e0910edd0545b397172680a9b4aa3334de9d8690d49f990d9f5807638befcf0cb59a793d9893a4c671599cb6a980a2d9d47ed1de94f06b96a15fc8a0da11941734bd33ebb308072ad39a59cdd13c4ae968465d33729089d960260f54024d6ab309ffd61136352ec5c2d8d697d292f76dd4d419ca6ab2405279684b00457b9c70483bbd571c9a4f92b8aef0e118d2c54e0f8c0f2bf475a1086fe0844cb26d0b716e13addb1ab48560119244ce65d96801117f55d16102eb8d5a0b5c02d75ac22b2d2513c19aeebc9224813a75c3d9f552a3444dd82bf42d24e359e47c3548edfeab46054f1c5b05f005bcb8b6fa7d4d5a9f116de19182ffae739ba3cba9df09986b5beb74acea0306915e922936ab9ce036017369e27f5c9100694498e11c63fce10e294f258213e39ba769980f1f214829ffd1601f97f45379972563f7c792125c11d0e3d8fbf4153f415c7c53dbef13dbae0a8025c0c2fe946ce843cdd48acf1f04f9fee4c0cf78284ae50f9056867be4e252141d721f9fd7c38dc02181e8f788faf6a1551e913a99b46b7e3686937508718fd1186698397dbe6fd6490503281f7ea14a73eba49c09bc792a308b43ad19d6456ba6d5d3b676a8c91ac012bbd045643c00d011c020cc9011b0675aea7fb89adc3dc5afcccae92d4b9fd057c4da59e45031bfd4e3a62aa2aadaf89b511bf6459c8811eaea254a59bc0dfd8bd540ee054de93eeb1a1833fcd1b242d25080546a6fb27dc683983ad64fd714d788a6764f15bfc1bdccaaeb6ada4532a58b20c9cccffd08ceaaad532208f95137f41f30a272980e90df24a4a02d90d7eb47a8a10527e936a7508e3c0d0318db099fdfb4da7b1fd5d967ea2515169cee0109695ca5a5de8e8dde6ed03fae70ef6f634c166e1ffab7b24890e9748a2740d46bcd766ad99b91b0b5328a5265358fcaadd8324c5d32e91f816bc3c77c410283fe7b6e6ca213eafdc504b219108b679b3e5dacffe78ba0c59b969f5d309bbdb78080b45f3ea6c31074398907a0673bf3cb32bb65f1e8c805428569ea0e6462a595d456690044a750ed5386aeef5d37f41cbf2f9410a73c975afbb78f1821d7658ce6b033e6aeec2a6874238fffb91d050d8da5683bfaa13a68b819654c13a11a2a3beab41741a3fed2aff4dfe71f9e20942676cf1bec481ebea06a0bd903769e8293309e94041b0e3f52b0486bd76fd183b2f48c89c4c349adf1ecce2649c467f9c5e128346d8f326a685369bdf7a941fdfa6785e4cb60a2716a0639d7bd9000b78d4be7ce3f92bc15b2381ed881eee2f6c7df574ea28795c5e473d6dec9117ede79763cdc7303bc1e15d8ac0b4a159d530d70685b96e4aa75fd5fa718a0e1fe1723300f03f4fdb055736a1d2d622da6bf198bbb0083c5544b1dfde485d6fddf78d3b43b470a5f503eb033d9b0476975cdb54307a374305bfce7000fd92fd87ba12695750fc78d005dc1a480a9d8348345c25afc44b6c0bc4b3514354057140784b62881a5f19a7e0541e565051c6b75e474103af5c72697950d42afaaefaaff4c9a7c03473dc7223408fa2619d68f4bef70987e77c2ff2526635f91faaeb9c051e82d543f079b56d1e8c82c954b114d0e6004f6d8061b4bdd55c32dbee0ad2462c7b72772fd9a0b5fc48c1f3328e5841fe83fbe8fccc071d0ba5255bfb07d369b97ccf7308549e813f1e186ffa9c2a14e8353f14ca25c6ba6332aef38e94b2ef6afa31636da24b319462cfe17f810454a2d814009cbb746514ef7e4447e46996435745546a2347a86d570632a15919bb7ab10016e3029d0cc0277b01ac2db57e12c11f51b8e720560bef0209b30cb16d95e168d00a08d2896fd2ee52c579fc513fa2189a317c744f5d44cb4ac8c5aef4a302c1a7a6e06ecf37f2be3c967c2015a4add108fad2803eb2bac21fce2d3c7be6c3e9caa83d5122dfb881247f13c0c329fb48f2d63fd57a949f34f5b17b3c75e0750595ee031f40efb5e143046553b78f9141c488bf4fdebd225ba3d5d11415ae986d313bb0c48abb9d06512a9b778175076c3b29adb0fd490f2ce3d1f81f0e9801456cc03cef7d9f0c007c0b411bc672fbb885edbe4b6c3f9ace8e6e23b49196e2597e1977c962d2f8ff4bba808c7c286154f8f9c77ccf8896dc06633613d51438cb2f7de380a5f0aac4f2c4b8470152de7fc8471ec37f694ae82fa30602e6551946d9bf038e7f2b05618d17d3ed23a095d2a820e60d29bf10a4c474a0e5ede9fb5221d686c1252f3c8c28b9a5bc3b2fe6b7324c9ce459d3748ec3b22dd8fb69d428094cff924eafb3b8551d56e84fe43e14e54278422e3d27c31fa8c7481de9d9c0935fe10488cbd8f43966f1f487d7688f65af95e3745e45053309bcc39bf893409e36f1399fb3e71c099e84c5ddbd6ecde00daed4041a5dfea3ba1f5a6e8bfceee96b1cff1732432fd7ce6efd3e906e4535e675a90d0a22d5542d201201c6c26939e7a27b20c97175bc98416ae10c095a8957b92cc5ab93eb32da13c28a00234951c400e58775aef1d80e369fcc52e4acd4831b65c0c3081abf8feecd303692f349ed0dd826b2183e77c455f66de1867cb37b0b3423e2fbe7e00e1b2890fcb5966f63944c22183e55eca9de3628452f4fbd451d2f2e7c356f2d82d36137ed30fd9a34eaa8a4814e763bf168acebbc8925e1f06c559e3eb1bc6c61cec37e304c0f1eee1402b1012b7a8999a41987c00173f110d33161cd9622bcff14e5978a990f36451d651a671d829caf29d16749ca9c3b71b730ec5a7507ea37dbffaca0a738761d5fd1b3bd9b817db77be3836ad4efc428409693b76638e0530ae3ddb39604333905b699c2eb65daba81d7a1930887f1f93681394324154b8eac57187a7a3a963a1c44e863b2e516ce519537916c5f73fe75fd2e96a291c2d02e4537ce97506d10739905ccc4852500abb4402bef18e007397a18c180a6ac9a79e68c503a05962b446e061be246a1619a9850f250ad8f36df64d4b8f545b822bcb34b61105ecda0c5c31fd9402833e6c9d5b3156cf844b9f76912ef697e1941f34e01040262e5e47fec81a49f3ed33f4ef2631303f52f05fc3ec2c2a6f0ef297e92038313234a77d1f8609d59bfdc62bb50157e41cb5cd22a76388ff6e135ca87253b3b72d3e83a0306e09f12ca2441202ae4eab48d7bee608d0fdb80bb2945ff98cc5d2a674ea62cc9616caba09fd24792bb4642fbb3c91c7a14dec81e6e967d1dd034d4a7bee332d63421602eb4cf538a1487485a47440e215e4562569f3628c021348055ca8ffe8c2f71c6796031ce6cd5a613cc36e2b980a427a219b34513ad7b039429ff82835a4389363d3fee055af395aac45d4f580a1a9a071420b5232498743ca272901c67d983a9cd53efc189052f0ee5e2e806858728f300b821b3fa0c4508b6e652911e1b2a2de0426e37612f8881b6ddf119a2cf7c8b804cef67dfee19aa7258c3521e5700179299cd60a7d732d3d06867a60074960d8741b0c3f23e457cdb00467bcff7870531d29d7672e1c46153c35590a144915b7e2bf3049e5b31f9d37b8ff1128f3a560a54ce5f8758ced01b7821d88e96f88f689fb3b8de1c54567841d12f37e2326165cd9868e4679ad10f1875141e31aa294a658fcfff2abcc0be77a616c2defac6e00e1a1aac2af523457e0b25924496aaa6cc6b14ac1f6bab47053c985243908c7cd3351db440848a86223603bd9d689f82cbec451ed46dcf40fe7994406ecd7f1de2724a5bb605d3afa1e88d4afd7b156c9e8134f9589c807bf555820b514bad190163d6f326fc5ee9be1fcca9df9bd1da7bbb55c3b16a8d17e2226020bdb1c22de1e788b8d13fc63aa9382726d74c45d0b45680ab09e891a0712e2bc6d9b5bf406e0b857708aa3dc094f8af8ebe61061e73c6ec7777e426463743421145e4d02fbe7ae667b25e2629d977ceb3d4352b4533d360620a6bf11a924a1a392cf0b86cca5b04cd5c5d20b24b6b4867c6d813962f55bda320d96eb9491b7bf4bd44754d8c85b9b4eadf493badd834259e5fb6f0260db3e609545c72ebabd587feef36497913fed0f261675e1122b7ad310caefb135152eee9142b486a540d37dffd9754521e765aa51cc817850d9bf385d0231f540a336b8f375a9e3e9f75bdbcc3f5759d6ced0a9f6c69b75eafd62633f365615f141152f6ba255d6c4179103316d911c8811648595b2eeb673a2c7abac4c5e3e2050c202c0ee239cac59f01aa801a99bf75e085db17cd738877b3b2efccb57862210692bd116124122616cbb9ec41488daa271b00f89b043850e5118ed1641d1f265ad5805cd17eec2b9625b4ecc7c512947a3895dd3c5a82394a8ed03978fa1c8e4e4212d83920f8c73b40efcc0ae634a6c79f67812c310fdabdbf8619c3a141902315e5e4b3c4cb9eeac360f46a0bbf85950cb5da70d594c3396c7f8d57d6fd31f21b2448daa830405a99e093717c937b35ba88ba2344bd7e733ee20848fce3221ea11665da40be9bcf7aee4cb0313a6eb65e61b37cd9a96431b953676ac1e1b2190d764ab36ff3f70119b6bf7039967cc851d7804147946fff1778d399a4fe0d9feab6289c2d65fb7a9a483ae2a7562d60c22600bd832158109d7dbfedb81af36f38225b93c2c80b8305fe9de5b6dc39152c8e1bfa1f44dfd0f6678ac6bd04e26ed8868e0f7d279870a3c251fe4504a7de2c1547967bb714526d71fabc7b1c923f8320267ead88ae002344907ae605a20656ed5099cd18a855faa1f5ea7dac201e3e838ec7647551ec02a35649811b28f7d6730b0d8c3b9952bff88c399ede1fe8a078a6f5021faefd655c38f9223101fe4f7845fb261478a82172f429a0d1511e5594f6746d60387231835756d4829dd608815fa08718f2c16ddaa43dd73fed55bfb3be2567847feb2fa88ab0e3d5e0820b6edda9c592aba5332565bb838ae96ab26602c9ab9ca1a7de140f27ebc2756845067e3f213a00ee006b6b5936b18999f0f9809efc229615cd6172358b2508fe0ea58c12f2719e32b6f963fe45caed8b0be7b4796761bdef040d409c8f3e1b2bc734b47976b854132b678734e14b10c80a3af78060415615fcee8c937bf1fd181b9bed9906243c60eff0f908dc080c35c3674e74acf42f730ee6e23e7827d33c1e371f9300b55a627ad3087468a776fe7832458afab7d1be06abc0514b3258577d7eb401783c693dcd9ed53216b17f441027b265f3ed50b897ed7cda5e4699f086d7c02883471df8f94b46f89764a6b2bbed34246c2602b6226244affc5cd4fa0a9a2393ba2bbdeb6bbd0060ae15c7fba7544986da05ec4486c797e24effc0a3f36d8947862a10e089e65d0c0b0de1167eaae1befdbd097add4d1c9d93a568e7faa3755a4861534f6935cc34173e3e15745958fb06e973b8e876699d", 0x1000}, {&(0x7f0000001700)="3f628c28fb0dd660d568d7a6e49a9dde05e1f0d0e1de7233ef5b654a2f8b0eabd3ee0bf87aa2b852f493bcdb45ad6f60363a762eb06212a7415e8cd6b0e4151d38c3de626eb88bc426db99ada0435b96abc2ac469cba9826fd25cbd24e780f85a213c0c8c1410f0a3f3000673c6edd72dc78a3fc6189263c8d815d18bc38b9b7d53161c1807e9c434a598dd8f9877e64d87414", 0x93}], 0x6, &(0x7f0000004e40)=ANY=[@ANYBLOB="c8000000000000002900470037000000042d00000000000002ae9be28d1c447472b18f26b26828234805b72392af131674ed4f6f9b52ae0eb6ee0e73bbe8a4a70ff3fa5d7a8594e1ab9aa6ae2af037b4a01d1637eae1f6a7bf9c4263e13c318ea9e3ea98de4b69d6f07f7754818af3dc81fa289ab8c9dddec74c83f8f4e5b009f7c14a8452031e8eb18fa7de4e31ed277e2c46a56556d498af7e3fe978ff92a70f05230c5f2ff21cde61335ac7be81e014a89bcd6faaf59c28ce1f5505f1676ab56d6fdbc789212101445e3ac28b1b7bd2a1291f7758c9d0767ac888000000000000002900000036"], 0x150}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000019c0)="89bed5ae6c52f57832c47e6d7000e614e673c1f327b208621ca5f5c21dd6ced411f4243e2653435ceb0b46fc33554f7e4d90a3edf812653ec4b7958da9d9d496355c9fd7cc02b78fd9a7a1d99831874fb17b04c2be4b83099cb3b841f95594c5d1f2699fcdd9dd247bf6156e753080", 0x6f}], 0x1, &(0x7f0000001a80)=[@rthdr={{0x28, 0x29, 0x39, {0x67, 0x2, 0x2, 0x66, 0x0, [@remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0xbd}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffc00000}]}}}], 0xb8}}, {{&(0x7f0000001b40)={0xa, 0x4e22, 0x9, @local, 0xe}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001b80)="db8bc2455dc69cd585e3e2558db8c2080141528ea13003a6169f152e07e6b8542b4a0be37cb259a0ef8ef939d4ebebdddc0facb7067d305630623800f65d7ac6f23c0bf52cd195772d93058271f47fd5ac6ec486c2ec65ef893c2e9ea92752dada0e878ce7258600a6d1df9f3664d3d52cddcde32605b88c1eb03b72e454e52171ed94f2b18366d28d63bd079b5750747bbea39426eeb552e4feeb32c0fb5cf91ce744d9e76656ef3d7430d289ad905f", 0xfffffffffffffebf}, {&(0x7f0000001c40)="0afe5a0a9525549c9bebf3e9627813b48373be621957f41e2e9cadbf0c6a41d4", 0x20}, {&(0x7f0000001c80)="5a0921a8baa374812c3bd243ff66f44f34cc5251409a3c987b0592879e0955b76a0c1c0c151f70355b9f6ca7e0dfdf70c77ea375e391bc58ce7531bca06ae02a3546ca221bb174e2beb46f6cf7c0fd7cf78cc737a0598c41a8446fa71dad0c9c2ab26abf0574020706211abb6d3216e7f456148571e4525b0a7b798cc6e38608dcd6a1302c2a899eb113b8d9daba143951a2f20f02b5ca", 0x97}], 0x3, &(0x7f0000001d80)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x4, 0x0, [@private2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x98}}, {{&(0x7f0000001e40)={0xa, 0x4e20, 0x4, @private0, 0x7ff}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001e80)="0e4810224a8b65d1e6cdc5d07646f193baf250263455a68c2a456d5bb67a82cf9715f2cf931c0daa76cc36b0ab0eab867e6fc12a08e6", 0x36}, {&(0x7f0000001ec0)="b4a528957bdfaa0c300663ad5ee4ac529a3cd03dcf33c858069c0c", 0x1b}, {&(0x7f0000001f00)="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", 0xff}, {&(0x7f0000002000)="8137e9904a39749c79773367298fa7f3c487251605d73cbc7b0a12d694020b5c6c0af30266789003560be61bcf01a92d2a6085b3414eaed1d2574261e33ac23ed6cac7bb7e3da3a7a6b14edf68a984d535fa9ca000161f4ccb66f8e1a4a79fe262c94b44c7eb752089906c52133054efdd565ce2fe5f381c051b25f9eda04e33484bfadc171977ac0e5cab0133794d79f812a52719964d99d92aa0555dfcaea63eb0ec5b332d9393c5850604e0944efb022bfd418b815afb04768e4fc6a36976aaf9d6a0c0b9ef271ec8", 0xca}, {&(0x7f0000002100)}], 0x5, &(0x7f00000021c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x15, 0x6, 0x1, 0x7, 0x0, [@local, @mcast1, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x90}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x4, @mcast1, 0xff}, 0x1a, &(0x7f0000002380)=[{&(0x7f00000022c0)="ddf466ec9fab890eb5baed611f3d9f99d46e51ae4a9e2ee43e79d7931cb502aeedf700c48013cc32b91c5ed353f50193ec5bded83604a146908d5d7aa60797ee4795a943b3d2bcdea1ca97791fc4a198bd2b360f6d2da99cc1796d3de92a314d2c372c4f3b5350f02b3b444035f93ee9f053b0ee9f80bd4648e55ca2345406c21e", 0x81}], 0x1}}, {{&(0x7f00000023c0)={0xa, 0x4e21, 0x15, @private0, 0x6}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000002400)="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", 0xfffffffffffffcf0}, {0x0}, {&(0x7f0000003400)="d52e9a0269b046677689477d4cab3ff9b75ad838338ba7bcc78127e1da1aa02c5f3aca7f0eab873e255625b1520b5c362e57e27bc13f59f0007a8393905883bba9bde48998f49f4fa08a5b6327d707e5e38d5521abecb937fcb2bb192b4bfaf65831f715188a3b7f8f0892cbaa4e9b5cb04bb965518e40c22daf580ec3577835d90f0f5260467fbcdb60ba8bb672546910d751425b6c63fb00aae4b01880d7ab5c59db3b54423c28711e4986b51b5330885c3d7dae93c02acdcf969a8a6976e2d2073a90f0da603388d00a3e7566be12bcd0a82258", 0xd5}, {&(0x7f0000003500)="94d4d4ec20c82b151be649ff8ab745fbdd5ca7235c7258421c81f077dc2c03082a924652ecc780dc34e96231b22c936b0cd4bc8e183494278ce43abd09dc2f33e6ef3834aa8da09e0a9872f1bd798d37de290e9f39246c63aa5ea121c3e4bfafe2773e3d7a4c12d5dba6dc2006d63cea17b019e74fedd53f73", 0x79}, {&(0x7f0000003580)="b3fe718206686298cd4782584ef7e0aa5de1bef4c89bca8952e75f1ad80b1726b32cd4afab40f5c12816b4a4dde03240454444e0f9aa92173d7d18cec0c883eb3971088ec2f8c8845fcfe11d80196a2efa3c6f49274dde6ff67d1a7b2b91628dc779e60639a09c3910a7f24551cc914328", 0x71}, {&(0x7f0000003600)="84a5195849adb8f5771432721c6a49fff30bcd6f913ef52250133958367314fbb2099164aade74c08446475423da8825edaccf2dedf3136dbffcf699a0f3a2df23a4fe5b27b21f61f35692b48384cb8c3e53c0e86e4c7061bc266f642300e5b0fd044fa2136fa39a92a47d36fa1e1fd21616d81dfab5559fbacca5c7822174a84b96f25612d646b15680e4700c739500ab2810bfb35cc3aa6e0dc94121f966e70b4ee6ae440d4039b2272f1435059e8575f07da5a4f214be55a28b26d13b6afa05d1f148cc854ce2fbc05cf37f9e34445b7c3d", 0xd3}, {&(0x7f0000003700)="38c28ba5511be0d9c1a8191d5cf05c66b4c4abd53b151ab3746cfce36709baf07472ac22a67b1703f8750ecb6c4787ac04a2910a32e2d26945a983ddb4ddb0c2e39104866692b89c272460ad9684e1e6a705f9a15594c5996f15a597b9a9e4828ad0195f829c965f02f9443632854941249bc9fd7aa52c611e6fafb93f88c59e94f2682ee7828ee4b7545d4891364e2c5e2d326449c72be2797985d2f1706b3e84bf81dba407ee4019fd2ebd39358f52f77220aa4481f485299f3a92e8de1d92", 0xc0}, {&(0x7f00000037c0)="b8b2979ca0dea2d468b729f447834f8fa9cbd21e502c4cd74383913ce5ab4bd22518ed8dc33c7caf8390b6ca1156be1df7c34f0a90ea4c71440e6c95df5b2788d8e162cabc894cf574638c104500ac896316041a525bc7117bb62938debf02bc8c8099f7d8a73d07c76cbaf1190b4c7ec34959a7ecb2a4b6048d955d3c50e282c34b7726164a3e5316f4f15ac990a35987729f04c12be91d2932", 0x9a}, {&(0x7f0000003880)="04281f64cf50d034e397628306b027fffdb5627bec4a167c663b9ae170432d3b8675675a40a327a934a314c81288367d930b069aa103edd7e3ab5f2ab82274434eae406bbd7f3b3fdd2c8316369b4fe0fe0805c92fc8e1766607aafeea2729a2bfb76e1743e47596654d4338ee10903cf3a6d22d6d351b682d1cf59550257664a94076fe0defd20301295127e69600e07f3ef0505c130bad96539388a18a6b1fb0108ac2bf45707e3836e3649a2142db90b1a86d48edd660bc3475063417e8d4f06eba", 0xc3}, {&(0x7f0000003980)="fd80396716f72afb367918722aeca0b59e955e1d2d846c10ad05d861ee0ae91a9512e6b875a74c5a1aaa1e4ca3dfb6ca155b5ba5bb9038", 0x37}], 0xa, &(0x7f0000003a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}], 0x6, 0x8000) 339.737346ms ago: executing program 7 (id=2090): unshare(0x2a020480) r0 = socket(0x9, 0x80000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltclass={0x58, 0x29, 0x426, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x10, 0xf}, {0xb, 0x6}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @TCA_RATE={0x6, 0x5, {0x45, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xb}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20008095}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000856) close(0x4) close(0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r13 = userfaultfd(0x80001) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 209.884215ms ago: executing program 7 (id=2091): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001140)='./proc/net/can/rcvlist_all\x00', &(0x7f0000001180)={0x42, 0x12, 0x2}, 0x18) mkdirat(r1, &(0x7f00000011c0)='./proc\x00', 0x181) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x40801) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) openat(r1, 0x0, 0x0, 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) read(r3, &(0x7f0000000100)=""/4096, 0x1000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') memfd_create(&(0x7f00000000c0)='proc\x00', 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) 128.171382ms ago: executing program 7 (id=2092): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x100) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xd) write(r3, &(0x7f0000000100)='655', 0x3) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0x9909cd, 0xcd82}) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @random="95000a1100", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x28, 0x6, 0x0, @mcast1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x6, 0x400, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6d84a22012be73afefa596f1a731aeae"}]}}}}}}}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 50.126696ms ago: executing program 7 (id=2093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) stat(&(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800) futex_waitv(&(0x7f0000002dc0)=[{0xe, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x200, 0x0}, {0x10, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7fff, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x57e6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xfff, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x7, &(0x7f0000002140)=0x8, 0x2}, {0x80, &(0x7f0000002180), 0x2}, {0x9, &(0x7f00000021c0)=0xe, 0x2}, {0x3, &(0x7f0000002200)=0x7cd1de08, 0x82}, {0xb8, &(0x7f0000002240)=0x7, 0x2}, {0x9, &(0x7f0000002280)=0x9ff, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0xfffffffffffffffd, 0x0, 0x86}, {0x769, &(0x7f0000002380)=0xffffffffffffffff, 0x2}, {0x1, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x82}, {0x2, &(0x7f00000025c0)=0x4, 0x2}, {0x5, &(0x7f0000002600)=0x4, 0x2}, {0x6c558f26, &(0x7f0000002680)=0x10001, 0x2}, {0x7, &(0x7f0000002700)=0x4, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x8, &(0x7f0000002840)=0xffff, 0x2}, {0x768d, 0x0, 0x82}, {0x265, 0x0, 0x2}, {0x7fffffff, &(0x7f0000002900)=0xa, 0x82}, {0x84, &(0x7f0000002940)=0xa60, 0x82}, {0x9, 0x0, 0xec5aba831a7e1e25}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xdef, &(0x7f0000002b00)=0x3, 0x80}, {0x6f, &(0x7f0000002b40)=0x5}, {0x100000001, &(0x7f0000002b80)=0x5, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000002c40)=0x200, 0x2}, {0x6, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000003680), 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2012101a}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x184, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa67d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x184}}, 0x81) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305600f3200180000010011", 0x18) 0s ago: executing program 8 (id=2094): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='252:0 ', 0x6) mmap(&(0x7f00005e8000/0x3000)=nil, 0x3000, 0x300000b, 0x810, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) creat(0x0, 0xd931d3864d39dcfb) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}}, 0x4044000) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x8, &(0x7f0000000100)=[{0x7, 0x5, 0xb9, 0x2}, {0x100, 0xfe, 0x5, 0x7}, {0x4, 0xf7, 0x1, 0xfffffffd}, {0x0, 0x8, 0x7, 0x9}, {0xfffb, 0x4, 0x3, 0x5}, {0x0, 0x2, 0x80, 0x1000}, {0xadeb, 0x1, 0x8, 0xb}, {0x4, 0x2, 0x9, 0xe}]}) syz_emit_ethernet(0x76, &(0x7f0000000880)=ANY=[@ANYBLOB="ffff1f000000bbbbbb01000000dd135ae96be70e801ef35fbb83affe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd53020033fffe800000000000000000000000000031fe8000000000000000000000000000aa2f0000000000000013d871"], 0x0) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 168.158090][T10384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.162435][T10384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.182961][T10384] team0: Port device team_slave_0 added [ 168.184583][T10384] team0: Port device team_slave_1 added [ 168.201804][T10384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.201819][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.201840][T10384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.204288][T10384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.204301][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.204324][T10384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.254528][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.254564][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.280832][T10384] hsr_slave_0: entered promiscuous mode [ 168.281571][T10384] hsr_slave_1: entered promiscuous mode [ 168.282218][T10384] debugfs: 'hsr0' already exists in 'hsr' [ 168.282236][T10384] Cannot create hsr debugfs directory [ 168.347047][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.347069][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.516941][T10422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=10422 comm=syz.4.1481 [ 168.517120][T10422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=10422 comm=syz.4.1481 [ 168.610449][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 168.675292][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 168.675345][ T13] ip6gre1 (unregistering): left promiscuous mode [ 168.715835][ T13] bond3 (unregistering): (slave geneve2): Releasing active interface [ 168.738683][ T13] bond0 (unregistering): Released all slaves [ 168.743257][ T13] bond1 (unregistering): Released all slaves [ 168.753428][ T13] bond2 (unregistering): Released all slaves [ 168.773107][ T13] bond3 (unregistering): Released all slaves [ 168.786719][T10436] FAULT_INJECTION: forcing a failure. [ 168.786719][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 168.786754][T10436] CPU: 3 UID: 0 PID: 10436 Comm: syz.4.1485 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.786781][T10436] Tainted: [L]=SOFTLOCKUP [ 168.786789][T10436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.786800][T10436] Call Trace: [ 168.786807][T10436] [ 168.786815][T10436] dump_stack_lvl+0x100/0x190 [ 168.786848][T10436] should_fail_ex.cold+0x5/0xa [ 168.786876][T10436] should_failslab+0xc2/0x120 [ 168.786904][T10436] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 168.786931][T10436] ? __alloc_skb+0x140/0x710 [ 168.786963][T10436] __alloc_skb+0x140/0x710 [ 168.786988][T10436] ? __alloc_skb+0x5b7/0x710 [ 168.787014][T10436] ? __pfx___alloc_skb+0x10/0x10 [ 168.787040][T10436] ? if_nlmsg_size+0x4b/0xdc0 [ 168.787066][T10436] rtmsg_ifinfo_build_skb+0x81/0x260 [ 168.787093][T10436] rtmsg_ifinfo+0xa4/0x1b0 [ 168.787119][T10436] netif_state_change+0x17f/0x380 [ 168.787141][T10436] ? __pfx_netif_state_change+0x10/0x10 [ 168.787164][T10436] ? netdev_work_dequeue+0x10a/0x310 [ 168.787184][T10436] ? __local_bh_enable_ip+0xa5/0x120 [ 168.787206][T10436] ? netdev_work_dequeue+0x10a/0x310 [ 168.787232][T10436] do_setlink.isra.0+0x31ce/0x3e60 [ 168.787259][T10436] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 168.787281][T10436] ? __lock_acquire+0x5c0/0x1f40 [ 168.787310][T10436] ? do_raw_spin_lock+0x128/0x260 [ 168.787336][T10436] ? find_held_lock+0x2b/0x80 [ 168.787364][T10436] ? debug_mutex_remove_waiter+0xa0/0x320 [ 168.787391][T10436] ? debug_mutex_remove_waiter+0xa0/0x320 [ 168.787423][T10436] ? mark_held_locks+0x40/0x70 [ 168.787444][T10436] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.787467][T10436] ? __mutex_lock+0x829/0x1bd0 [ 168.787490][T10436] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.787515][T10436] ? __mutex_lock+0x829/0x1bd0 [ 168.787539][T10436] ? __mutex_lock+0x26c/0x1bd0 [ 168.787563][T10436] ? rtnl_newlink+0xac3/0x2620 [ 168.787593][T10436] ? __pfx___mutex_lock+0x10/0x10 [ 168.787617][T10436] ? rcu_is_watching+0x13/0xc0 [ 168.787645][T10436] ? cap_capable+0x107/0x430 [ 168.787682][T10436] rtnl_newlink+0x1dc4/0x2620 [ 168.787709][T10436] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.787728][T10436] ? avc_has_perm_noaudit+0x56/0x470 [ 168.787747][T10436] ? find_held_lock+0x2b/0x80 [ 168.787773][T10436] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.787789][T10436] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.787821][T10436] ? __lock_acquire+0x5c0/0x1f40 [ 168.787854][T10436] ? lock_acquire+0x1d1/0x380 [ 168.787890][T10436] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 168.787909][T10436] ? find_held_lock+0x2b/0x80 [ 168.787931][T10436] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 168.787947][T10436] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 168.787967][T10436] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.787986][T10436] rtnetlink_rcv_msg+0x95e/0xe90 [ 168.788007][T10436] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.788033][T10436] ? ref_tracker_free+0x37e/0x6c0 [ 168.788055][T10436] netlink_rcv_skb+0x159/0x420 [ 168.788082][T10436] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.788103][T10436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.788139][T10436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 168.788170][T10436] netlink_unicast+0x585/0x850 [ 168.788200][T10436] ? __pfx_netlink_unicast+0x10/0x10 [ 168.788234][T10436] netlink_sendmsg+0x8b0/0xda0 [ 168.788265][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.788295][T10436] ? selinux_socket_sendmsg+0x198/0x2f0 [ 168.788323][T10436] ____sys_sendmsg+0xa4d/0xbe0 [ 168.788344][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.788373][T10436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.788401][T10436] ? lock_acquire+0x1d1/0x380 [ 168.788421][T10436] ? get_pid_task+0x2a/0x250 [ 168.788449][T10436] ___sys_sendmsg+0x190/0x1e0 [ 168.788473][T10436] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.788497][T10436] ? get_pid_task+0x106/0x250 [ 168.788546][T10436] ? find_held_lock+0x2b/0x80 [ 168.788597][T10436] __sys_sendmsg+0x160/0x210 [ 168.788626][T10436] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.788666][T10436] do_syscall_64+0x123/0x790 [ 168.788692][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.788709][T10436] RIP: 0033:0x7f52fab9e199 [ 168.788726][T10436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.788743][T10436] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.788761][T10436] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 168.788772][T10436] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 168.788784][T10436] RBP: 00007f52fba70090 R08: 0000000000000000 R09: 0000000000000000 [ 168.788795][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.788806][T10436] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 168.788833][T10436] [ 168.801904][T10384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.826480][T10384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.827153][T10384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.834510][T10384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.838132][T10384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.854122][T10384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.856963][T10384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.881126][T10384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.927878][ T13] tipc: Disabling bearer [ 168.951591][ T13] tipc: Left network mode [ 168.983198][T10384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.002720][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 169.031979][T10453] bond1: Invalid ad_actor_system MAC address. [ 169.032045][T10453] bond1: option ad_actor_system: invalid value (65541) [ 169.045057][T10453] bond1 (unregistering): Released all slaves [ 169.060591][T10384] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.099546][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.099593][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.109036][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.109122][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.142537][T10462] FAULT_INJECTION: forcing a failure. [ 169.142537][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.142559][T10462] CPU: 2 UID: 0 PID: 10462 Comm: syz.4.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.142575][T10462] Tainted: [L]=SOFTLOCKUP [ 169.142579][T10462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.142586][T10462] Call Trace: [ 169.142590][T10462] [ 169.142595][T10462] dump_stack_lvl+0x100/0x190 [ 169.142615][T10462] should_fail_ex.cold+0x5/0xa [ 169.142654][T10462] _copy_from_user+0x2e/0xd0 [ 169.142710][T10462] video_usercopy+0xe71/0x1730 [ 169.142724][T10462] ? __pfx___video_do_ioctl+0x10/0x10 [ 169.142737][T10462] ? __pfx_video_usercopy+0x10/0x10 [ 169.142759][T10462] v4l2_ioctl+0x1bd/0x250 [ 169.142771][T10462] ? __pfx_v4l2_ioctl+0x10/0x10 [ 169.142785][T10462] __x64_sys_ioctl+0x18e/0x210 [ 169.142800][T10462] do_syscall_64+0x123/0x790 [ 169.142817][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.142828][T10462] RIP: 0033:0x7f52fab9e199 [ 169.142838][T10462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.142849][T10462] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.142861][T10462] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 169.142868][T10462] RDX: 0000200000000080 RSI: 00000000c040565f RDI: 0000000000000003 [ 169.142875][T10462] RBP: 00007f52fba70090 R08: 0000000000000000 R09: 0000000000000000 [ 169.142882][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.142888][T10462] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 169.142903][T10462] [ 169.324087][ T13] hsr_slave_0: left promiscuous mode [ 169.324714][ T13] hsr_slave_1: left promiscuous mode [ 169.331796][ T13] veth1_macvtap: left promiscuous mode [ 169.331816][ T13] veth0_macvtap: left promiscuous mode [ 169.331860][ T13] veth1_vlan: left promiscuous mode [ 169.445703][ T13] team0 (unregistering): Port device vlan0 removed [ 169.680239][ T5095] Bluetooth: hci5: command tx timeout [ 169.719281][T10384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.920616][T10384] veth0_vlan: entered promiscuous mode [ 169.929342][T10384] veth1_vlan: entered promiscuous mode [ 169.941106][ T13] IPVS: stop unused estimator thread 0... [ 169.946834][T10384] veth0_macvtap: entered promiscuous mode [ 169.949080][T10384] veth1_macvtap: entered promiscuous mode [ 169.959571][T10384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.977239][T10384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.043281][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.043380][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.043411][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.043441][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.099295][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.099310][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.124898][ T6654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.124978][ T6654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.190778][T10494] FAULT_INJECTION: forcing a failure. [ 170.190778][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 170.190801][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.6.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.190816][T10494] Tainted: [L]=SOFTLOCKUP [ 170.190820][T10494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.190827][T10494] Call Trace: [ 170.190831][T10494] [ 170.190836][T10494] dump_stack_lvl+0x100/0x190 [ 170.190856][T10494] should_fail_ex.cold+0x5/0xa [ 170.190872][T10494] should_failslab+0xc2/0x120 [ 170.190888][T10494] __kmalloc_noprof+0xfc/0x840 [ 170.190903][T10494] ? lsm_blob_alloc+0x68/0x90 [ 170.190916][T10494] lsm_blob_alloc+0x68/0x90 [ 170.190926][T10494] security_key_alloc+0x34/0x310 [ 170.190942][T10494] key_alloc+0x876/0x1310 [ 170.190961][T10494] ? __kasan_kmalloc+0xaa/0xb0 [ 170.190976][T10494] ? __pfx_key_alloc+0x10/0x10 [ 170.190994][T10494] keyring_alloc+0x44/0xc0 [ 170.191012][T10494] install_session_keyring_to_cred+0x190/0x230 [ 170.191028][T10494] join_session_keyring+0x1bc/0x350 [ 170.191043][T10494] lookup_user_key+0xbf9/0x1300 [ 170.191058][T10494] ? __pfx_lookup_user_key+0x10/0x10 [ 170.191071][T10494] ? futex_wait+0x11e/0x370 [ 170.191086][T10494] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 170.191102][T10494] ? ksys_write+0x190/0x250 [ 170.191118][T10494] keyctl_get_persistent+0x197/0x940 [ 170.191136][T10494] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 170.191155][T10494] ? __x64_sys_futex+0x34f/0x4d0 [ 170.191171][T10494] ? __x64_sys_futex+0x358/0x4d0 [ 170.191188][T10494] ? xfd_validate_state+0x129/0x190 [ 170.191203][T10494] __do_sys_keyctl+0x3b2/0x5a0 [ 170.191225][T10494] do_syscall_64+0x123/0x790 [ 170.191241][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.191254][T10494] RIP: 0033:0x7fae1919e199 [ 170.191264][T10494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.191275][T10494] RSP: 002b:00007fae19fd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 170.191287][T10494] RAX: ffffffffffffffda RBX: 00007fae19425fa0 RCX: 00007fae1919e199 [ 170.191295][T10494] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 170.191302][T10494] RBP: 00007fae19235888 R08: 0000000000000000 R09: 0000000000000000 [ 170.191309][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.191316][T10494] R13: 00007fae19426038 R14: 00007fae19425fa0 R15: 00007ffd6e127898 [ 170.191331][T10494] [ 170.199353][T10494] team0 (unregistering): Port device team_slave_0 removed [ 170.207243][T10494] team0 (unregistering): Port device team_slave_1 removed [ 170.229915][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 170.235948][ T5845] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 170.278415][T10500] gfs2: path_lookup on 127.0.0.1:6789:/ returned error -2 [ 170.401320][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.402631][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.402648][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.402657][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.402677][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.403809][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.403821][ T9] usb 10-1: Product: syz [ 170.403872][ T9] usb 10-1: Manufacturer: syz [ 170.412182][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 170.412198][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 170.415674][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 170.415691][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 170.416639][T10506] fuse: Bad value for 'fd' [ 170.491234][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 170.612682][ T9189] usb 10-1: USB disconnect, device number 2 [ 170.658392][ T43] audit: type=1326 audit(2000000087.709:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.3.1503" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c41b9e199 code=0x0 [ 171.003920][ T5845] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.059996][ T9189] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 171.123263][T10496] ceph: No mds server is up or the cluster is laggy [ 171.182681][ T35] lg-g15 0003:046D:0A07.000F: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 171.183360][ T35] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input20 [ 171.237855][ T9189] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.238844][ T9189] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.238864][ T9189] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.238877][ T9189] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.238906][ T9189] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.257650][T10526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.268408][ T9189] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.268429][ T9189] usb 10-1: Product: syz [ 171.268440][ T9189] usb 10-1: Manufacturer: syz [ 171.273789][ T9189] cdc_wdm 10-1:1.0: skipping garbage [ 171.273803][ T9189] cdc_wdm 10-1:1.0: skipping garbage [ 171.276607][ T9189] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 171.276622][ T9189] cdc_wdm 10-1:1.0: Unknown control protocol ƶÿ[ 171.285097][T10524] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1505'. [ 171.308385][T10526] tipc: Enabling of bearer rejected, failed to enable media [ 171.451686][T10540] Lens B: ================= START STATUS ================= [ 171.451701][T10540] Lens B: Focus, Absolute: 0 [ 171.451713][T10540] Lens B: ================== END STATUS ================== [ 171.564495][T10558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.622693][T10558] tipc: Enabling of bearer rejected, failed to enable media [ 171.724052][ T43] audit: type=1400 audit(2000000088.779:1030): avc: denied { mount } for pid=10563 comm="syz.6.1519" name="/" dev="pstore" ino=3283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 171.735112][ T35] lg-g15 0003:046D:0A07.0010: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 171.736825][ T35] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0010/input/input22 [ 171.769862][ T5095] Bluetooth: hci5: command tx timeout [ 171.920543][ T5838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 172.080619][ T5838] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.081770][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.081795][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.081812][ T5838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.081845][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.083984][ T5838] usb 9-1: config 0 descriptor?? [ 172.434033][ T43] audit: type=1400 audit(2000000089.489:1031): avc: denied { search } for pid=10487 comm="syz.5.1496" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 172.434366][ T43] audit: type=1400 audit(2000000089.489:1032): avc: denied { write } for pid=10487 comm="syz.5.1496" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 172.434648][ T43] audit: type=1400 audit(2000000089.489:1033): avc: denied { open } for pid=10487 comm="syz.5.1496" path="/35/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 172.512164][ T5838] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 173.040682][ T1350] usb 9-1: USB disconnect, device number 2 [ 173.369230][ T43] audit: type=1400 audit(2000000090.419:1034): avc: denied { ioctl } for pid=10581 comm="syz.4.1523" path="socket:[33780]" dev="sockfs" ino=33780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.418934][ T43] audit: type=1400 audit(2000000090.469:1035): avc: denied { watch } for pid=10585 comm="syz.4.1527" path="/80/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 173.489714][ T43] audit: type=1400 audit(2000000090.539:1036): avc: denied { unmount } for pid=9689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 173.491766][ T6222] usb 10-1: USB disconnect, device number 3 [ 173.511399][ T43] audit: type=1400 audit(2000000090.569:1037): avc: denied { unmount } for pid=10030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 173.531085][T10599] ip_tables: iptables: counters copy to user failed while replacing table [ 173.539963][T10604] FAULT_INJECTION: forcing a failure. [ 173.539963][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 173.539991][T10604] CPU: 3 UID: 0 PID: 10604 Comm: syz.5.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.540012][T10604] Tainted: [L]=SOFTLOCKUP [ 173.540018][T10604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.540028][T10604] Call Trace: [ 173.540034][T10604] [ 173.540041][T10604] dump_stack_lvl+0x100/0x190 [ 173.540070][T10604] should_fail_ex.cold+0x5/0xa [ 173.540093][T10604] should_failslab+0xc2/0x120 [ 173.540115][T10604] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 173.540138][T10604] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.540160][T10604] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 173.540180][T10604] kmemdup_nul+0x49/0xd0 [ 173.540197][T10604] vfs_parse_fs_qstr+0x112/0x1c0 [ 173.540215][T10604] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 173.540241][T10604] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 173.540259][T10604] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 173.540273][T10604] vfs_parse_monolithic_sep+0x195/0x210 [ 173.540293][T10604] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 173.540310][T10604] ? v9fs_init_fs_context+0x465/0x5c0 [ 173.540330][T10604] ? alloc_fs_context+0x65a/0xf40 [ 173.540352][T10604] path_mount+0x77f/0x24c0 [ 173.540372][T10604] ? __pfx_path_mount+0x10/0x10 [ 173.540384][T10604] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.540407][T10604] ? putname+0xb1/0x110 [ 173.540430][T10604] ? kmem_cache_free+0x127/0x6c0 [ 173.540456][T10604] ? __x64_sys_mount+0x293/0x310 [ 173.540467][T10604] __x64_sys_mount+0x293/0x310 [ 173.540484][T10604] ? __pfx___x64_sys_mount+0x10/0x10 [ 173.540517][T10604] do_syscall_64+0x123/0x790 [ 173.540541][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.540558][T10604] RIP: 0033:0x7f00de39e199 [ 173.540568][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.540583][T10604] RSP: 002b:00007f00df331028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.540600][T10604] RAX: ffffffffffffffda RBX: 00007f00de625fa0 RCX: 00007f00de39e199 [ 173.540612][T10604] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 173.540622][T10604] RBP: 00007f00df331090 R08: 0000200000000c80 R09: 0000000000000000 [ 173.540632][T10604] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 173.540643][T10604] R13: 00007f00de626038 R14: 00007f00de625fa0 R15: 00007fff37cb8408 [ 173.540666][T10604] [ 173.805163][T10629] FAULT_INJECTION: forcing a failure. [ 173.805163][T10629] name failslab, interval 1, probability 0, space 0, times 0 [ 173.805186][T10629] CPU: 2 UID: 0 PID: 10629 Comm: syz.4.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.805201][T10629] Tainted: [L]=SOFTLOCKUP [ 173.805206][T10629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.805213][T10629] Call Trace: [ 173.805218][T10629] [ 173.805223][T10629] dump_stack_lvl+0x100/0x190 [ 173.805244][T10629] should_fail_ex.cold+0x5/0xa [ 173.805260][T10629] should_failslab+0xc2/0x120 [ 173.805279][T10629] __kmalloc_noprof+0xfc/0x840 [ 173.805294][T10629] ? __pfx_dynamic_dname+0x10/0x10 [ 173.805307][T10629] ? tomoyo_encode2+0xfb/0x3c0 [ 173.805328][T10629] tomoyo_encode2+0xfb/0x3c0 [ 173.805347][T10629] tomoyo_encode+0x29/0x50 [ 173.805362][T10629] tomoyo_realpath_from_path+0x18c/0x690 [ 173.805382][T10629] tomoyo_check_open_permission+0x2af/0x3c0 [ 173.805398][T10629] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 173.805416][T10629] ? hook_file_open+0x248/0x8e0 [ 173.805437][T10629] ? path_get+0x61/0x80 [ 173.805449][T10629] tomoyo_file_open+0x6b/0x90 [ 173.805461][T10629] security_file_open+0xb5/0x1e0 [ 173.805478][T10629] do_dentry_open+0x588/0x14d0 [ 173.805495][T10629] vfs_open+0x82/0x3f0 [ 173.805513][T10629] path_openat+0x19fa/0x2440 [ 173.805531][T10629] ? __pfx_path_openat+0x10/0x10 [ 173.805551][T10629] do_file_open+0x20e/0x430 [ 173.805568][T10629] ? __pfx_do_file_open+0x10/0x10 [ 173.805593][T10629] ? _raw_spin_unlock+0x28/0x50 [ 173.805607][T10629] ? alloc_fd+0x471/0x7a0 [ 173.805632][T10629] do_sys_openat2+0x10f/0x1e0 [ 173.805652][T10629] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.805671][T10629] ? fdget+0x18b/0x210 [ 173.805705][T10629] __x64_sys_openat+0x12d/0x210 [ 173.805718][T10629] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.805736][T10629] do_syscall_64+0x123/0x790 [ 173.805753][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.805766][T10629] RIP: 0033:0x7f52fab5e9ce [ 173.805778][T10629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.805789][T10629] RSP: 002b:00007f52fba6ff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.805801][T10629] RAX: ffffffffffffffda RBX: 00007f52fba706c0 RCX: 00007f52fab5e9ce [ 173.805808][T10629] RDX: 0000000000000000 RSI: 00007f52fac34fb6 RDI: ffffffffffffff9c [ 173.805815][T10629] RBP: 00007f52fac35888 R08: 0000000000000000 R09: 0000000000000000 [ 173.805822][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.805828][T10629] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 173.805844][T10629] [ 173.805880][T10629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.844802][ T5095] Bluetooth: hci5: command tx timeout [ 173.939157][ T43] audit: type=1400 audit(2000000090.989:1038): avc: denied { create } for pid=10635 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 173.979540][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1533'. [ 173.988688][T10607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.095237][T10648] No source specified [ 174.138455][T10652] fuse: fd is not a fuse device [ 174.213390][T10657] xt_hashlimit: size too large, truncated to 1048576 [ 174.220392][T10647] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 174.250686][T10664] bridge_slave_0: left allmulticast mode [ 174.250703][T10664] bridge_slave_0: left promiscuous mode [ 174.250816][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.253625][T10664] bridge_slave_1: left allmulticast mode [ 174.253640][T10664] bridge_slave_1: left promiscuous mode [ 174.253763][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.257834][T10664] bond0: (slave bond_slave_0): Releasing backup interface [ 174.261934][T10664] bond0: (slave bond_slave_1): Releasing backup interface [ 174.275546][T10664] team0: Port device team_slave_0 removed [ 174.278624][T10664] team0: Port device team_slave_1 removed [ 174.278960][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.278972][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.281588][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.281604][T10664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.284842][T10664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.302920][T10664] team0: Mode changed to "broadcast" [ 174.305916][T10664] vlan0: entered promiscuous mode [ 174.312613][T10664] team0: Port device vlan0 added [ 174.315744][T10664] tipc: Started in network mode [ 174.315758][T10664] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 174.315860][T10664] tipc: Enabled bearer , priority 0 [ 174.379013][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1553'. [ 174.379027][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 174.397559][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1553'. [ 174.397580][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 174.409867][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.409894][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.409912][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.409929][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.802199][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1554'. [ 174.821924][T10693] fuse: Bad value for 'group_id' [ 174.821944][T10693] fuse: Bad value for 'group_id' [ 174.899092][T10676] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 175.029923][ T9192] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 175.097786][T10703] overlayfs: failed to clone upperpath [ 175.171917][T10709] netlink: 'syz.3.1568': attribute type 12 has an invalid length. [ 175.190033][ T9192] usb 10-1: Using ep0 maxpacket: 8 [ 175.196718][ T9192] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.197908][ T9192] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.197928][ T9192] usb 10-1: config 0 has no interface number 0 [ 175.197955][ T9192] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.197972][ T9192] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.197992][ T9192] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.198011][ T9192] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.198043][ T9192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.201276][ T9192] usb 10-1: config 0 descriptor?? [ 175.215502][ T9192] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.310976][T10718] ip_tables: iptables: counters copy to user failed while replacing table [ 175.319939][ T9192] tipc: Node number set to 11578026 [ 175.418642][ T9192] usb 10-1: USB disconnect, device number 4 [ 175.423814][ T9192] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 175.537308][ T35] lg-g15 0003:046D:0A07.0012: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 175.537991][ T35] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0012/input/input23 [ 175.592587][T10724] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1573'. [ 175.643020][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1574'. [ 175.671200][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 175.671216][ T43] audit: type=1400 audit(2000000092.729:1041): avc: denied { listen } for pid=10727 comm="syz.4.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.672171][ T43] audit: type=1400 audit(2000000092.729:1042): avc: denied { read } for pid=10727 comm="syz.4.1575" path="socket:[32684]" dev="sockfs" ino=32684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.708729][T10726] netlink: 'syz.5.1574': attribute type 9 has an invalid length. [ 175.708743][T10726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1574'. [ 175.779968][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.780006][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.780033][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.780061][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.929889][ T5095] Bluetooth: hci5: command tx timeout [ 176.122931][T10753] uprobe: syz.3.1584:10753 failed to unregister, leaking uprobe [ 176.437359][T10768] FAULT_INJECTION: forcing a failure. [ 176.437359][T10768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.437393][T10768] CPU: 2 UID: 0 PID: 10768 Comm: syz.4.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.437419][T10768] Tainted: [L]=SOFTLOCKUP [ 176.437427][T10768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.437438][T10768] Call Trace: [ 176.437446][T10768] [ 176.437454][T10768] dump_stack_lvl+0x100/0x190 [ 176.437484][T10768] should_fail_ex.cold+0x5/0xa [ 176.437512][T10768] _copy_from_user+0x2e/0xd0 [ 176.437538][T10768] memdup_user+0x6b/0xe0 [ 176.437560][T10768] strndup_user+0x78/0xe0 [ 176.437580][T10768] __x64_sys_fsopen+0x9e/0x220 [ 176.437605][T10768] do_syscall_64+0x123/0x790 [ 176.437631][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.437650][T10768] RIP: 0033:0x7f52fab9e199 [ 176.437668][T10768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.437685][T10768] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 176.437705][T10768] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 176.437717][T10768] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 176.437730][T10768] RBP: 00007f52fba70090 R08: 0000000000000000 R09: 0000000000000000 [ 176.437741][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.437752][T10768] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 176.437778][T10768] [ 176.445833][T10770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.445843][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 176.468195][ T43] audit: type=1400 audit(2000000093.519:1043): avc: denied { accept } for pid=10771 comm="syz.6.1592" path="socket:[32720]" dev="sockfs" ino=32720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.514755][ T43] audit: type=1400 audit(2000000093.569:1044): avc: denied { write } for pid=10775 comm="syz.6.1593" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 176.519878][T10777] [ 176.542744][T10774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 176.736588][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1597'. [ 176.756191][T10797] xt_hashlimit: size too large, truncated to 1048576 [ 177.678264][T10833] tmpfs: Unknown parameter 'grpq‘Ïûªâaþ‹Ÿuota_block_h' [ 177.835197][ T43] audit: type=1400 audit(2000000094.889:1045): avc: denied { create } for pid=10846 comm="syz.5.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 177.879717][ T43] audit: type=1400 audit(2000000094.929:1046): avc: denied { create } for pid=10846 comm="syz.5.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 178.010860][T10869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10869 comm=syz.4.1621 [ 178.135132][T10874] kvm: MWAIT instruction emulated as NOP! [ 178.421568][T10886] fuse: Bad value for 'user_id' [ 178.421581][T10886] fuse: Bad value for 'user_id' [ 178.710262][T10904] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 178.710719][T10904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10904 comm=syz.3.1630 [ 179.223261][T10947] fuse: fd is not a fuse device [ 179.256039][ T43] audit: type=1400 audit(2000000096.309:1047): avc: denied { setopt } for pid=10938 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.369218][ T43] audit: type=1400 audit(2000000096.419:1048): avc: denied { name_bind } for pid=10960 comm="syz.3.1643" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 179.443254][ T43] audit: type=1400 audit(2000000096.499:1049): avc: denied { load_policy } for pid=10964 comm="syz.5.1645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.445118][T10966] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 179.445269][T10966] SELinux: failed to load policy [ 179.461641][ T43] audit: type=1400 audit(2000000096.519:1050): avc: denied { getopt } for pid=10960 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.466293][T10968] trusted_key: encrypted_key: insufficient parameters specified [ 179.693920][T10981] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 179.716026][T10981] /dev/sr0: Can't open blockdev [ 179.719611][T10979] MINIX-fs: blocksize too small for device [ 179.722079][T10981] __nla_validate_parse: 65 callbacks suppressed [ 179.722096][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 179.770986][T10979] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.925400][T10984] tipc: Enabled bearer , priority 10 [ 180.019826][ T1350] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 180.064773][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1655'. [ 180.064807][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1655'. [ 180.069648][T10991] erspan0: entered promiscuous mode [ 180.070843][T10991] gretap0: entered promiscuous mode [ 180.089310][ T5095] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 180.180177][ T1350] usb 9-1: Using ep0 maxpacket: 32 [ 180.181791][ T1350] usb 9-1: unable to get BOS descriptor or descriptor too short [ 180.181828][ T1350] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 180.182710][ T1350] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 180.182728][ T1350] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 180.182744][ T1350] usb 9-1: config 14 has no interface number 0 [ 180.182756][ T1350] usb 9-1: config 14 has no interface number 1 [ 180.182803][ T1350] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 180.182822][ T1350] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 180.182842][ T1350] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 180.182862][ T1350] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 180.182882][ T1350] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 180.182902][ T1350] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.182922][ T1350] usb 9-1: config 14 interface 57 has no altsetting 0 [ 180.182936][ T1350] usb 9-1: config 14 interface 228 has no altsetting 0 [ 180.184731][ T1350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.184750][ T1350] usb 9-1: Product: syz [ 180.184761][ T1350] usb 9-1: Manufacturer: syz [ 180.184773][ T1350] usb 9-1: SerialNumber: syz [ 180.287146][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 180.392838][T10986] bond0: entered allmulticast mode [ 180.518334][T11005] tipc: Enabling of bearer rejected, failed to enable media [ 180.601062][ T1350] legousbtower 9-1:14.57: interrupt endpoints not found [ 180.661632][T11013] Unsupported ieee802154 address type: 0 [ 181.002392][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 181.002404][ T43] audit: type=1400 audit(2000000098.059:1052): avc: denied { setattr } for pid=10985 comm="syz.4.1653" name="HIDP" dev="sockfs" ino=41026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.011560][T10986] geneve2: entered promiscuous mode [ 181.056385][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.056619][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.085697][ T1350] legousbtower 9-1:14.228: get version request failed: -71 [ 181.085769][ T1350] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 181.093171][ T1350] usb 9-1: USB disconnect, device number 3 [ 181.621830][T11040] netlink: 'syz.4.1673': attribute type 12 has an invalid length. [ 181.630227][T11040] befs: (nullb0): No write support. Marking filesystem read-only [ 181.630462][T11040] befs: (nullb0): invalid magic header [ 181.639978][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.640015][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.640034][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.640051][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.784631][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 181.896998][T11050] ±ÿ)”ëfl: renamed from lo [ 182.008471][T11056] fuse: fd is not a fuse device [ 182.034458][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88803c00cc00: rx timeout, send abort [ 182.042260][ T43] audit: type=1400 audit(2000000099.099:1053): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 182.042289][ T43] audit: type=1400 audit(2000000099.099:1054): avc: denied { search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.042309][ T43] audit: type=1400 audit(2000000099.099:1055): avc: denied { write search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.042329][ T43] audit: type=1400 audit(2000000099.099:1056): avc: denied { add_name } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.042348][ T43] audit: type=1400 audit(2000000099.099:1057): avc: denied { create } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.042368][ T43] audit: type=1400 audit(2000000099.099:1058): avc: denied { append open } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.042621][ T43] audit: type=1400 audit(2000000099.099:1059): avc: denied { getattr } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.343624][ T5824] lg-g15 0003:046D:0A07.0013: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 182.344818][ T5824] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0013/input/input24 [ 182.494017][T11067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11067 comm=syz.5.1686 [ 182.534555][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802854bc00: rx timeout, send abort [ 182.535875][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88803c00cc00: abort rx timeout. Force session deactivation [ 182.616810][T11071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11071 comm=syz.6.1687 [ 182.667113][T11080] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 182.667331][ T43] audit: type=1400 audit(2000000099.719:1060): avc: denied { relabelto } for pid=11079 comm="syz.4.1692" name="116" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 182.667525][ T43] audit: type=1400 audit(2000000099.719:1061): avc: denied { associate } for pid=11079 comm="syz.4.1692" name="116" dev="tmpfs" ino=644 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 182.695767][T11082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 182.697337][T11082] team0: No ports can be present during mode change [ 182.703208][ T6666] tipc: Resetting bearer [ 182.703959][T11082] tipc: Enabling of bearer rejected, already enabled [ 182.711974][ T6222] lg-g15 0003:046D:0A07.0014: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 182.714064][ T6222] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0014/input/input25 [ 182.943551][T11118] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 183.005767][ T6222] lg-g15 0003:046D:0A07.0015: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 183.006430][ T6222] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0015/input/input26 [ 183.034608][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802854bc00: abort rx timeout. Force session deactivation [ 183.067786][T11129] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 183.067822][T11129] rnbd_client L1256: Session s+ not found, and path parameter not given [ 183.218871][T11137] ip_tables: iptables: counters copy to user failed while replacing table [ 183.319539][T11140] nvme nvme0: rdma connection establishment failed (-104) [ 183.486556][ T1350] lg-g15 0003:046D:0A07.0016: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 183.487776][ T1350] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0016/input/input27 [ 183.559273][T11152] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1719'. [ 183.689817][T11165] ip_vti0: Master is either lo or non-ether device [ 183.692509][T11165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11165 comm=syz.3.1725 [ 183.693450][T11165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1725'. [ 183.693756][T11165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1725'. [ 183.706817][ T9] lg-g15 0003:046D:0A07.0017: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 183.707507][ T9] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0017/input/input28 [ 183.784030][T11163] FAULT_INJECTION: forcing a failure. [ 183.784030][T11163] name failslab, interval 1, probability 0, space 0, times 0 [ 183.784055][T11163] CPU: 2 UID: 0 PID: 11163 Comm: syz.5.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.784072][T11163] Tainted: [L]=SOFTLOCKUP [ 183.784076][T11163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.784083][T11163] Call Trace: [ 183.784093][T11163] [ 183.784098][T11163] dump_stack_lvl+0x100/0x190 [ 183.784126][T11163] should_fail_ex.cold+0x5/0xa [ 183.784144][T11163] should_failslab+0xc2/0x120 [ 183.784164][T11163] __kvmalloc_node_noprof+0x113/0x9b0 [ 183.784180][T11163] ? bpf_test_run_xdp_live+0x16f/0x760 [ 183.784201][T11163] bpf_test_run_xdp_live+0x16f/0x760 [ 183.784217][T11163] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 183.784233][T11163] ? lock_acquire+0x1d1/0x380 [ 183.784249][T11163] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 183.784263][T11163] ? find_held_lock+0x2b/0x80 [ 183.784280][T11163] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 183.784301][T11163] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 183.784316][T11163] ? 0xffffffffa04059c0 [ 183.784326][T11163] ? 0xffffffffa04059c0 [ 183.784336][T11163] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 183.784350][T11163] bpf_prog_test_run_xdp+0xd86/0x1670 [ 183.784371][T11163] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 183.784390][T11163] ? fput+0x7c/0x100 [ 183.784406][T11163] ? __bpf_prog_get+0x97/0x290 [ 183.784422][T11163] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 183.784438][T11163] __sys_bpf+0x2265/0x4a30 [ 183.784453][T11163] ? __pfx___sys_bpf+0x10/0x10 [ 183.784464][T11163] ? find_held_lock+0x2b/0x80 [ 183.784480][T11163] ? futex_wake+0x4ea/0x5e0 [ 183.784501][T11163] ? rcu_read_lock_any_held+0x6a/0x90 [ 183.784518][T11163] ? find_held_lock+0x2b/0x80 [ 183.784534][T11163] ? ksys_write+0x190/0x250 [ 183.784546][T11163] ? ksys_write+0x190/0x250 [ 183.784567][T11163] ? __x64_sys_futex+0x34f/0x4d0 [ 183.784583][T11163] ? __x64_sys_futex+0x358/0x4d0 [ 183.784600][T11163] ? xfd_validate_state+0x129/0x190 [ 183.784615][T11163] ? __x64_sys_bpf+0xce/0x140 [ 183.784627][T11163] __x64_sys_bpf+0xce/0x140 [ 183.784640][T11163] ? do_syscall_64+0xae/0x790 [ 183.784659][T11163] do_syscall_64+0x123/0x790 [ 183.784675][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.784688][T11163] RIP: 0033:0x7f00de39e199 [ 183.784698][T11163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.784709][T11163] RSP: 002b:00007f00df331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.784725][T11163] RAX: ffffffffffffffda RBX: 00007f00de625fa0 RCX: 00007f00de39e199 [ 183.784732][T11163] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 183.784739][T11163] RBP: 00007f00de435888 R08: 0000000000000000 R09: 0000000000000000 [ 183.784745][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.784752][T11163] R13: 00007f00de626038 R14: 00007f00de625fa0 R15: 00007fff37cb8408 [ 183.784766][T11163] [ 184.130988][T11192] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 184.131008][T11192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.162805][ T5095] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 184.162876][ T5095] Bluetooth: hci2: Injecting HCI hardware error event [ 184.166901][ T5095] Bluetooth: hci2: hardware error 0x00 [ 184.246069][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'. [ 184.247289][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'. [ 184.325773][ T5824] lg-g15 0003:046D:0A07.0018: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 184.326477][ T5824] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0018/input/input29 [ 184.382093][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 184.425100][ T65] Bluetooth: Frame is too long (len 10, expected len 4) [ 184.553491][ T9] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.559634][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.559656][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.559691][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.569968][ T9] usb 10-1: config 0 descriptor?? [ 184.573025][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 184.573301][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 184.587293][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 184.587795][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 184.587822][ T9] usb 10-1: media controller created [ 184.589097][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.596897][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 184.597011][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.598860][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input30 [ 184.603218][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 184.603229][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 184.696657][T11216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11216 comm=syz.6.1746 [ 184.763088][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 184.763121][ T9] dvb-usb: error while querying for an remote control event. [ 184.772287][T11192] tipc: Enabling of bearer rejected, failed to enable media [ 184.773898][T11192] __nla_validate_parse: 3 callbacks suppressed [ 184.773914][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 184.773927][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1735'. [ 184.795096][ T9] lg-g15 0003:046D:0A07.0019: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 184.795796][ T9] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0019/input/input31 [ 184.876180][ T57] usb 10-1: USB disconnect, device number 5 [ 184.989934][ T57] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 184.998861][T11237] batadv_slave_0: entered promiscuous mode [ 184.998876][T11237] batadv_slave_0: entered allmulticast mode [ 185.016398][T11235] syz.4.1753 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.016715][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 185.030609][ T5824] corsair-cpro 0003:1B1C:0C10.001A: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 185.093617][T11251] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1759'. [ 185.185294][T11256] tipc: Enabling of bearer rejected, already enabled [ 185.347343][ T5824] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -110 [ 186.204452][T11243] syz.6.1756 (11243): drop_caches: 3 [ 186.242479][ T5095] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 186.479929][ T5095] Bluetooth: hci4: command 0x2016 tx timeout [ 188.564035][ T5095] Bluetooth: hci4: command 0x2016 tx timeout [ 188.617877][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 188.698094][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 188.698108][ T43] audit: type=1400 audit(2000000105.749:1078): avc: denied { append } for pid=11325 comm="syz.5.1776" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 188.722345][ T43] audit: type=1400 audit(2000000105.779:1079): avc: denied { watch_reads } for pid=11328 comm="syz.4.1777" path="pipe:[39499]" dev="pipefs" ino=39499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.725902][ T43] audit: type=1400 audit(2000000105.779:1080): avc: denied { relabelfrom } for pid=11328 comm="syz.4.1777" name="" dev="pipefs" ino=42199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.773188][T11334] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 188.773920][T11334] ALSA: mixer_oss: invalid index 137438 ƶÿ[ 189.049932][T11346] Invalid source name [ 189.049948][T11346] UBIFS error (pid: 11346): cannot open "/dev/sg0", error -22 [ 189.095038][T11346] binder: BINDER_SET_CONTEXT_MGR already set [ 189.095049][T11346] binder: 11345:11346 ioctl 4018620d 200000004a80 returned -16 [ 189.698288][T11362] bridge_slave_0: left allmulticast mode [ 189.698316][T11362] bridge_slave_0: left promiscuous mode [ 189.698477][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.704329][T11362] bridge_slave_1: left allmulticast mode [ 189.704345][T11362] bridge_slave_1: left promiscuous mode [ 189.704437][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.716686][T11362] bond0: (slave bond_slave_0): Releasing backup interface [ 189.728494][T11362] bond0: (slave bond_slave_1): Releasing backup interface [ 189.738165][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.738186][T11362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.748777][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.748847][T11362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.761855][T11362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.767882][ T43] audit: type=1400 audit(2000000106.819:1081): avc: denied { block_suspend } for pid=11359 comm="syz.3.1790" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.834937][T11362] tipc: Enabling of bearer rejected, failed to enable media [ 190.062014][T11376] IPVS: Scheduler module ip_vs_ not found [ 190.287945][ T5823] hid-generic 1000:046D:0A07.001B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 190.916705][T11392] netlink: 'syz.6.1798': attribute type 15 has an invalid length. [ 191.043894][T11396] Invalid input. Must be >= 4608 [ 191.132150][T11399] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1801'. [ 191.142257][T11399] binder: BINDER_SET_CONTEXT_MGR already set [ 191.142266][T11399] binder: 11397:11399 ioctl 4018620d 200000004a80 returned -16 [ 191.142608][ T43] audit: type=1400 audit(2000000108.199:1082): avc: denied { write } for pid=11397 comm="syz.6.1801" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 191.142639][T11399] random: crng reseeded on system resumption [ 191.154791][T11399] binder: 11397:11399 ioctl c0306201 2000000001c0 returned -14 [ 191.961631][T11424] sg_write: data in/out 4/14 bytes for SCSI command 0x0-- guessing data in; [ 191.961631][T11424] program syz.4.1810 not setting count and/or reply_len properly [ 191.964130][T11424] Format for adding new port is "id [perm_addr]" (uint MAC). [ 192.016963][T11426] FAULT_INJECTION: forcing a failure. [ 192.016963][T11426] name failslab, interval 1, probability 0, space 0, times 0 [ 192.016986][T11426] CPU: 1 UID: 0 PID: 11426 Comm: syz.6.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.017001][T11426] Tainted: [L]=SOFTLOCKUP [ 192.017006][T11426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.017012][T11426] Call Trace: [ 192.017017][T11426] [ 192.017021][T11426] dump_stack_lvl+0x100/0x190 [ 192.017042][T11426] should_fail_ex.cold+0x5/0xa [ 192.017063][T11426] should_failslab+0xc2/0x120 [ 192.017081][T11426] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.017093][T11426] ? v9fs_get_tree+0x9c/0xb50 [ 192.017109][T11426] v9fs_get_tree+0x9c/0xb50 [ 192.017120][T11426] ? rcu_is_watching+0x13/0xc0 [ 192.017137][T11426] ? __pfx_v9fs_get_tree+0x10/0x10 [ 192.017151][T11426] ? bpf_lsm_capable+0x9/0x10 [ 192.017162][T11426] ? security_capable+0x80/0x260 [ 192.017176][T11426] vfs_get_tree+0x92/0x320 [ 192.017188][T11426] path_mount+0x7d0/0x24c0 [ 192.017202][T11426] ? __pfx_path_mount+0x10/0x10 [ 192.017213][T11426] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.017229][T11426] ? putname+0xb1/0x110 [ 192.017245][T11426] ? kmem_cache_free+0x127/0x6c0 [ 192.017261][T11426] ? __x64_sys_mount+0x293/0x310 [ 192.017272][T11426] __x64_sys_mount+0x293/0x310 [ 192.017283][T11426] ? __pfx___x64_sys_mount+0x10/0x10 [ 192.017299][T11426] do_syscall_64+0x123/0x790 [ 192.017315][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.017326][T11426] RIP: 0033:0x7fae1919e199 [ 192.017336][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.017347][T11426] RSP: 002b:00007fae19fd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.017358][T11426] RAX: ffffffffffffffda RBX: 00007fae19425fa0 RCX: 00007fae1919e199 [ 192.017365][T11426] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 192.017372][T11426] RBP: 00007fae19fd0090 R08: 0000200000000c80 R09: 0000000000000000 [ 192.017379][T11426] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 192.017385][T11426] R13: 00007fae19426038 R14: 00007fae19425fa0 R15: 00007ffd6e127898 [ 192.017400][T11426] [ 192.094082][T11430] ipt_REJECT: ECHOREPLY no longer supported. [ 192.095560][T11429] ipt_REJECT: ECHOREPLY no longer supported. [ 192.153321][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e45000: rx timeout, send abort [ 192.155234][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035f19c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.284700][ T9189] libceph: connect (1)[c::]:6789 error -101 [ 192.284875][ T9189] libceph: mon0 (1)[c::]:6789 connect error [ 192.295352][ T9189] libceph: connect (1)[c::]:6789 error -101 [ 192.295457][ T9189] libceph: mon0 (1)[c::]:6789 connect error [ 192.310945][T11435] ceph: No mds server is up or the cluster is laggy [ 192.455284][T11442] TCP: TCP_TX_DELAY enabled [ 192.545868][T11450] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 192.584167][ T57] lg-g15 0003:046D:0A07.001C: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 192.585295][ T57] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001C/input/input33 [ 192.653392][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e45000: abort rx timeout. Force session deactivation [ 192.682670][T11460] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 4294967295 (only 8 groups) [ 192.956606][ T9193] lg-g15 0003:046D:0A07.001D: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 192.958015][ T9193] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001D/input/input34 [ 193.033279][T11480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.034764][T11480] team0: No ports can be present during mode change [ 193.036247][T11480] tipc: Enabling of bearer rejected, already enabled [ 193.130202][T11485] ip_tables: iptables: counters copy to user failed while replacing table [ 193.131173][T11485] ip_tables: iptables: counters copy to user failed while replacing table [ 193.132788][ T43] audit: type=1400 audit(2000000110.189:1083): avc: denied { create } for pid=11484 comm="syz.5.1834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.133581][T11485] 8021q: VLANs not supported on ip6_vti0 [ 193.134257][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1834'. [ 193.264181][ T43] audit: type=1400 audit(2000000110.319:1084): avc: denied { unlink } for pid=10030 comm="syz-executor" name="file0" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.446752][ T57] lg-g15 0003:046D:0A07.001E: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 193.447670][ T57] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001E/input/input35 [ 193.834038][ T43] audit: type=1400 audit(2000000110.889:1085): avc: denied { watch } for pid=11538 comm="syz.4.1850" path=2F6D656D66643AB3AC2D5B51265B292D24272FC52729DA2D26202864656C6574656429 dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.867598][T11514] rnbd_client L213: map_device: Parameters missing [ 194.125926][ T43] audit: type=1400 audit(2000000111.179:1086): avc: denied { getopt } for pid=11548 comm="syz.4.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.331542][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.331572][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.336974][T11569] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 194.338161][T11569] bond3 (unregistering): Released all slaves [ 194.378591][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 194.378606][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 194.463433][ T43] audit: type=1326 audit(2000000111.519:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.3.1860" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c41b9e199 code=0x0 [ 194.619848][ T9189] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 194.801058][ T9189] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 194.803481][ T9189] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.803505][ T9189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.017112][ T9189] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device [ 195.030824][ T9189] wwan wwan0: port wwan0qmi0 attached [ 195.266851][T11584] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1859'. [ 195.387046][ T43] audit: type=1400 audit(2000000112.439:1088): avc: denied { read } for pid=11589 comm="syz.4.1865" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.504808][T11600] FAULT_INJECTION: forcing a failure. [ 195.504808][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 195.504854][T11600] CPU: 1 UID: 0 PID: 11600 Comm: syz.4.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.504903][T11600] Tainted: [L]=SOFTLOCKUP [ 195.504910][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.504922][T11600] Call Trace: [ 195.504929][T11600] [ 195.504937][T11600] dump_stack_lvl+0x100/0x190 [ 195.504971][T11600] should_fail_ex.cold+0x5/0xa [ 195.504999][T11600] should_failslab+0xc2/0x120 [ 195.505028][T11600] __kmalloc_noprof+0xfc/0x840 [ 195.505053][T11600] ? __reuseport_alloc+0x1d/0x90 [ 195.505086][T11600] __reuseport_alloc+0x1d/0x90 [ 195.505107][T11600] reuseport_alloc+0x1ed/0x420 [ 195.505131][T11600] udp_lib_get_port+0xbd5/0x1b50 [ 195.505161][T11600] ? __pfx_udp_lib_get_port+0x10/0x10 [ 195.505181][T11600] ? do_raw_spin_lock+0x128/0x260 [ 195.505208][T11600] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 195.505240][T11600] ? __local_bh_enable_ip+0xa5/0x120 [ 195.505266][T11600] __inet_bind+0x598/0xc60 [ 195.505294][T11600] inet_bind+0xdb/0x120 [ 195.505318][T11600] __sys_bind+0x1a9/0x260 [ 195.505344][T11600] ? __pfx___sys_bind+0x10/0x10 [ 195.505386][T11600] __x64_sys_bind+0x72/0xb0 [ 195.505408][T11600] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.505433][T11600] do_syscall_64+0x123/0x790 [ 195.505461][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.505482][T11600] RIP: 0033:0x7f52fab9e199 [ 195.505499][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.505516][T11600] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 195.505534][T11600] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 195.505548][T11600] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000008 [ 195.505561][T11600] RBP: 00007f52fac35888 R08: 0000000000000000 R09: 0000000000000000 [ 195.505571][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.505582][T11600] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 195.505609][T11600] [ 195.626372][T11604] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 195.689057][T11608] fuse: fd is not a fuse device [ 195.746335][ T5740] Bluetooth: Frame is too long (len 10, expected len 4) [ 195.749486][ T5740] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 196.327572][T11615] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1878'. [ 196.331738][T11615] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1878'. [ 196.374934][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.378874][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.385056][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.386551][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.387084][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.666747][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 196.904572][T11643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11643 comm=syz.4.1885 [ 196.906437][T11643] kvm: pic: level sensitive irq not supported [ 196.907292][T11643] kvm: pic: single mode not supported [ 196.907301][T11643] kvm: pic: level sensitive irq not supported [ 196.983838][T11616] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.983980][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.984082][T11616] bridge_slave_0: entered allmulticast mode [ 196.985486][T11616] bridge_slave_0: entered promiscuous mode [ 196.998569][T11616] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.998694][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.998768][T11616] bridge_slave_1: entered allmulticast mode [ 197.000776][T11616] bridge_slave_1: entered promiscuous mode [ 197.044283][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.051595][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.081821][T11616] team0: Port device team_slave_0 added [ 197.086765][T11616] team0: Port device team_slave_1 added [ 197.135055][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.135067][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.135080][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.135987][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.135995][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.136008][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.230857][T11616] hsr_slave_0: entered promiscuous mode [ 197.231297][T11616] hsr_slave_1: entered promiscuous mode [ 197.231583][T11616] debugfs: 'hsr0' already exists in 'hsr' [ 197.231594][T11616] Cannot create hsr debugfs directory [ 197.264145][ T43] audit: type=1400 audit(2000000114.319:1089): avc: denied { read } for pid=11651 comm="syz.4.1886" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 197.264487][ T43] audit: type=1400 audit(2000000114.319:1090): avc: denied { open } for pid=11651 comm="syz.4.1886" path="/173/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 197.299071][T11653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.299282][T11653] block device autoloading is deprecated and will be removed. [ 197.302054][ T43] audit: type=1400 audit(2000000114.359:1091): avc: denied { ioctl } for pid=11651 comm="syz.4.1886" path="/173/file0/file0" dev="fuse" ino=64 ioctlcmd=0x929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 197.571155][ T12] bond0 (unregistering): Released all slaves [ 197.589606][ T12] bond1 (unregistering): Released all slaves [ 197.602649][ T12] bond2 (unregistering): Released all slaves [ 197.623078][T11664] kvm: emulating exchange as write [ 197.771087][ T5740] Bluetooth: hci4: command 0x2016 tx timeout [ 197.792757][ T9189] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, fa:54:9c:5b:53:05 [ 197.797612][ T9189] usb 10-1: USB disconnect, device number 6 [ 197.805860][ T12] tipc: Left network mode [ 197.845832][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 197.869685][ T9189] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 197.870255][ T35] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 198.014403][ T9189] wwan wwan0: port wwan0qmi0 disconnected [ 198.239283][ T12] hsr_slave_0: left promiscuous mode [ 198.244239][ T12] hsr_slave_1: left promiscuous mode [ 198.399896][ T5095] Bluetooth: hci1: command tx timeout [ 198.963634][ T12] IPVS: stop unused estimator thread 0... [ 198.991497][T11616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.993411][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.993765][T11616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.006191][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.006620][T11616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.010695][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.011090][T11616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.022045][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.146107][T11616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.154747][T11616] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.165614][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.165706][T11298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.168899][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.168980][T11298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.394604][ T43] audit: type=1400 audit(2000000116.449:1092): avc: denied { relabelfrom } for pid=11684 comm="syz.4.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.394737][ T43] audit: type=1400 audit(2000000116.449:1093): avc: denied { relabelto } for pid=11684 comm="syz.4.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.564364][T11616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.593321][T11616] veth0_vlan: entered promiscuous mode [ 199.599176][T11616] veth1_vlan: entered promiscuous mode [ 199.617953][T11616] veth0_macvtap: entered promiscuous mode [ 199.623296][T11616] veth1_macvtap: entered promiscuous mode [ 199.632012][T11616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.636803][T11616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.663489][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.663516][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.663533][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.663551][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.750781][T11298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.750802][T11298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.777735][T11299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.777750][T11299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.850052][ T5095] Bluetooth: hci4: command 0x2016 tx timeout [ 200.480048][ T5095] Bluetooth: hci1: command tx timeout [ 200.509507][T11720] FAULT_INJECTION: forcing a failure. [ 200.509507][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.509530][T11720] CPU: 3 UID: 0 PID: 11720 Comm: syz.4.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.509546][T11720] Tainted: [L]=SOFTLOCKUP [ 200.509550][T11720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.509557][T11720] Call Trace: [ 200.509561][T11720] [ 200.509566][T11720] dump_stack_lvl+0x100/0x190 [ 200.509597][T11720] should_fail_ex.cold+0x5/0xa [ 200.509614][T11720] _copy_from_user+0x2e/0xd0 [ 200.509633][T11720] copy_msghdr_from_user+0x9f/0x4c0 [ 200.509652][T11720] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 200.509669][T11720] ? __lock_acquire+0x5c0/0x1f40 [ 200.509682][T11720] ? preempt_schedule_common+0x3c/0xb0 [ 200.509702][T11720] ___sys_recvmsg+0xdd/0x1a0 [ 200.509716][T11720] ? __pfx____sys_recvmsg+0x10/0x10 [ 200.509731][T11720] ? lock_acquire+0x1d1/0x380 [ 200.509768][T11720] do_recvmmsg+0x2f3/0x740 [ 200.509786][T11720] ? __pfx_do_recvmmsg+0x10/0x10 [ 200.509801][T11720] ? lock_acquire+0x1d1/0x380 [ 200.509815][T11720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.509837][T11720] __x64_sys_recvmmsg+0x22a/0x280 [ 200.509849][T11720] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 200.509864][T11720] do_syscall_64+0x123/0x790 [ 200.509881][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.509892][T11720] RIP: 0033:0x7f52fab9e199 [ 200.509902][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.509913][T11720] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 200.509924][T11720] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 200.509932][T11720] RDX: 0000000000000001 RSI: 00002000000070c0 RDI: 0000000000000004 [ 200.509938][T11720] RBP: 00007f52fba70090 R08: 0000000000000000 R09: 0000000000000000 [ 200.509945][T11720] R10: 0000000040012131 R11: 0000000000000246 R12: 0000000000000001 [ 200.509952][T11720] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 200.509966][T11720] [ 200.831743][ T43] audit: type=1400 audit(2000000117.889:1094): avc: denied { create } for pid=11726 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.832214][ T43] audit: type=1400 audit(2000000117.889:1095): avc: denied { ioctl } for pid=11726 comm="syz.5.1900" path="socket:[45274]" dev="sockfs" ino=45274 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.855080][ T43] audit: type=1400 audit(2000000117.899:1096): avc: denied { connect } for pid=11726 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.061055][T11746] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.100400][T11746] tipc: Enabling of bearer rejected, already enabled [ 201.127414][ T43] audit: type=1400 audit(2000000118.179:1097): avc: denied { setopt } for pid=11747 comm="syz.4.1908" lport=37550 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.127769][ T43] audit: type=1400 audit(2000000118.179:1098): avc: denied { getopt } for pid=11747 comm="syz.4.1908" lport=37550 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.365074][T11765] ip_tables: iptables: counters copy to user failed while replacing table [ 201.566147][T11775] FAULT_INJECTION: forcing a failure. [ 201.566147][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 201.566179][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.3.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.566203][T11775] Tainted: [L]=SOFTLOCKUP [ 201.566211][T11775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.566222][T11775] Call Trace: [ 201.566228][T11775] [ 201.566236][T11775] dump_stack_lvl+0x100/0x190 [ 201.566277][T11775] should_fail_ex.cold+0x5/0xa [ 201.566302][T11775] should_failslab+0xc2/0x120 [ 201.566332][T11775] __kmalloc_cache_noprof+0x91/0x6d0 [ 201.566353][T11775] ? p9_client_create+0xaf/0xd40 [ 201.566387][T11775] p9_client_create+0xaf/0xd40 [ 201.566413][T11775] ? __pfx_p9_client_create+0x10/0x10 [ 201.566445][T11775] ? lockdep_init_map_type+0x5c/0x250 [ 201.566468][T11775] ? __raw_spin_lock_init+0x3a/0x110 [ 201.566495][T11775] v9fs_session_init+0x3c/0xdd0 [ 201.566513][T11775] ? v9fs_get_tree+0x9c/0xb50 [ 201.566537][T11775] v9fs_get_tree+0xb8/0xb50 [ 201.566555][T11775] ? rcu_is_watching+0x13/0xc0 [ 201.566581][T11775] ? __pfx_v9fs_get_tree+0x10/0x10 [ 201.566604][T11775] ? bpf_lsm_capable+0x9/0x10 [ 201.566622][T11775] ? security_capable+0x80/0x260 [ 201.566646][T11775] vfs_get_tree+0x92/0x320 [ 201.566666][T11775] path_mount+0x7d0/0x24c0 [ 201.566690][T11775] ? __pfx_path_mount+0x10/0x10 [ 201.566708][T11775] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.566736][T11775] ? putname+0xb1/0x110 [ 201.566762][T11775] ? kmem_cache_free+0x127/0x6c0 [ 201.566791][T11775] ? __x64_sys_mount+0x293/0x310 [ 201.566810][T11775] __x64_sys_mount+0x293/0x310 [ 201.566853][T11775] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.566880][T11775] do_syscall_64+0x123/0x790 [ 201.566913][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.566932][T11775] RIP: 0033:0x7f371cd9e199 [ 201.566948][T11775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.566965][T11775] RSP: 002b:00007f371dcf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.566984][T11775] RAX: ffffffffffffffda RBX: 00007f371d025fa0 RCX: 00007f371cd9e199 [ 201.566997][T11775] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 201.567008][T11775] RBP: 00007f371dcf1090 R08: 0000200000000c80 R09: 0000000000000000 [ 201.567020][T11775] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 201.567031][T11775] R13: 00007f371d026038 R14: 00007f371d025fa0 R15: 00007ffc6e9f01d8 [ 201.567057][T11775] [ 201.661433][ T43] audit: type=1400 audit(2000000118.709:1099): avc: denied { link } for pid=11778 comm="syz.3.1921" name="#22" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.663374][ T43] audit: type=1400 audit(2000000118.719:1100): avc: denied { rename } for pid=11778 comm="syz.3.1921" name="#23" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.680589][T11783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11783 comm=syz.5.1923 [ 201.734151][T11787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.737874][T11787] tipc: Enabling of bearer rejected, already enabled [ 202.479556][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 202.565611][ T5095] Bluetooth: hci1: command tx timeout [ 202.609741][T11829] ip_tables: iptables: counters copy to user failed while replacing table [ 202.663753][T11829] xt_CT: No such helper "syz1" [ 202.965900][T11847] FAULT_INJECTION: forcing a failure. [ 202.965900][T11847] name failslab, interval 1, probability 0, space 0, times 0 [ 202.965924][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.4.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.965941][T11847] Tainted: [L]=SOFTLOCKUP [ 202.965946][T11847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.965954][T11847] Call Trace: [ 202.965959][T11847] [ 202.965965][T11847] dump_stack_lvl+0x100/0x190 [ 202.965992][T11847] should_fail_ex.cold+0x5/0xa [ 202.966008][T11847] should_failslab+0xc2/0x120 [ 202.966026][T11847] __kmalloc_cache_noprof+0x91/0x6d0 [ 202.966040][T11847] ? shrinker_alloc+0xf5/0xd00 [ 202.966054][T11847] shrinker_alloc+0xf5/0xd00 [ 202.966066][T11847] ? irqentry_exit+0x24d/0xa10 [ 202.966087][T11847] ? __pfx_shrinker_alloc+0x10/0x10 [ 202.966101][T11847] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 202.966115][T11847] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.966129][T11847] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 202.966148][T11847] xfs_init_buftarg+0x1dc/0x340 [ 202.966162][T11847] xfs_alloc_buftarg+0x2d8/0x3d0 [ 202.966174][T11847] xfs_open_devices+0x2a0/0x750 [ 202.966186][T11847] ? __pfx_xfs_open_devices+0x10/0x10 [ 202.966204][T11847] xfs_fs_fill_super+0x320/0x1f30 [ 202.966216][T11847] ? setup_bdev_super+0x4e8/0x770 [ 202.966232][T11847] get_tree_bdev_flags+0x38c/0x620 [ 202.966245][T11847] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 202.966258][T11847] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 202.966272][T11847] ? cap_capable+0x107/0x430 [ 202.966286][T11847] ? bpf_lsm_capable+0x9/0x10 [ 202.966296][T11847] ? security_capable+0x80/0x260 [ 202.966310][T11847] vfs_get_tree+0x92/0x320 [ 202.966321][T11847] path_mount+0x7d0/0x24c0 [ 202.966335][T11847] ? __pfx_path_mount+0x10/0x10 [ 202.966346][T11847] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.966361][T11847] ? putname+0xb1/0x110 [ 202.966377][T11847] ? kmem_cache_free+0x127/0x6c0 [ 202.966411][T11847] ? __x64_sys_mount+0x293/0x310 [ 202.966423][T11847] __x64_sys_mount+0x293/0x310 [ 202.966435][T11847] ? __pfx___x64_sys_mount+0x10/0x10 [ 202.966453][T11847] do_syscall_64+0x123/0x790 [ 202.966470][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.966483][T11847] RIP: 0033:0x7f52fab9e199 [ 202.966493][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.966504][T11847] RSP: 002b:00007f52fba4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.966515][T11847] RAX: ffffffffffffffda RBX: 00007f52fae26090 RCX: 00007f52fab9e199 [ 202.966522][T11847] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000140 [ 202.966529][T11847] RBP: 00007f52fac35888 R08: 0000000000000000 R09: 0000000000000000 [ 202.966536][T11847] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 202.966543][T11847] R13: 00007f52fae26128 R14: 00007f52fae26090 R15: 00007ffe080c04e8 [ 202.966558][T11847] [ 203.017875][T11847] geneve2: entered promiscuous mode [ 203.250578][ T5825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.315340][ T5825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.350837][T11851] batman_adv: batadv0: Adding interface: syzkaller0 [ 203.350849][T11851] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.350895][T11851] batman_adv: batadv0: Interface activated: syzkaller0 [ 203.352086][T11849] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 203.354368][T11852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11852 comm=syz.5.1948 [ 203.382245][T11849] batman_adv: batadv0: Removing interface: syzkaller0 [ 203.411457][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.415506][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.416068][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.416427][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.416790][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.424338][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 203.424787][T11854] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (12) [ 203.449550][ T5825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.559477][ T5825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.663074][T11877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11877 comm=syz.4.1957 [ 203.666625][T11877] kvm: pic: level sensitive irq not supported [ 203.667279][T11877] kvm: pic: single mode not supported [ 203.667286][T11877] kvm: pic: level sensitive irq not supported [ 203.669895][ T5825] bridge_slave_1: left allmulticast mode [ 203.669918][ T5825] bridge_slave_1: left promiscuous mode [ 203.672119][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.704154][ T5825] bridge_slave_0: left allmulticast mode [ 203.704172][ T5825] bridge_slave_0: left promiscuous mode [ 203.704863][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.792757][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1959'. [ 203.898750][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.910207][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.911527][ T5825] bond0 (unregistering): Released all slaves [ 203.983374][T11890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11890 comm=syz.4.1960 [ 204.291013][ T5825] hsr_slave_0: left promiscuous mode [ 204.291678][ T5825] hsr_slave_1: left promiscuous mode [ 204.294584][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.294641][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.295240][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.295252][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.304487][ T5825] veth1_macvtap: left promiscuous mode [ 204.304510][ T5825] veth0_macvtap: left promiscuous mode [ 204.304553][ T5825] veth1_vlan: left promiscuous mode [ 204.304584][ T5825] veth0_vlan: left promiscuous mode [ 204.467132][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 204.483889][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 204.568370][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.568419][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.568474][T11855] bridge_slave_0: entered allmulticast mode [ 204.569464][T11855] bridge_slave_0: entered promiscuous mode [ 204.580136][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.580205][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.580262][T11855] bridge_slave_1: entered allmulticast mode [ 204.581097][T11855] bridge_slave_1: entered promiscuous mode [ 204.603143][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.605755][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.628273][T11855] team0: Port device team_slave_0 added [ 204.629494][T11855] team0: Port device team_slave_1 added [ 204.648306][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.648317][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.648330][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.649151][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.649159][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.649172][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.693356][T11855] hsr_slave_0: entered promiscuous mode [ 204.693752][T11855] hsr_slave_1: entered promiscuous mode [ 204.694055][T11855] debugfs: 'hsr0' already exists in 'hsr' [ 204.694066][T11855] Cannot create hsr debugfs directory [ 205.519866][ T5740] Bluetooth: hci1: command tx timeout [ 205.556190][T11917] ip_tables: iptables: counters copy to user failed while replacing table [ 206.929210][T11889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.930689][T11855] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.947481][T11855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.947876][T11855] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 206.966718][T11855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.969602][T11855] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.992928][ T43] audit: type=1326 audit(2000000124.049:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.5.1968" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00de39e199 code=0x0 [ 206.993012][T11855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.993556][T11855] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.998783][T11855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.056274][T11855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.065186][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.067876][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.067948][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.071367][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.071410][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.080953][T11936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11936 comm=syz.4.1970 [ 207.082116][T11936] kvm: pic: level sensitive irq not supported [ 207.082909][T11936] kvm: pic: single mode not supported [ 207.082915][T11936] kvm: pic: level sensitive irq not supported [ 207.304020][T11855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.396955][T11955] netlink: 'syz.4.1971': attribute type 9 has an invalid length. [ 207.397536][ T5740] Bluetooth: Frame is too long (len 12, expected len 4) [ 207.436161][T11855] veth0_vlan: entered promiscuous mode [ 207.439614][T11855] veth1_vlan: entered promiscuous mode [ 207.455937][T11855] veth0_macvtap: entered promiscuous mode [ 207.458144][T11855] veth1_macvtap: entered promiscuous mode [ 207.465137][T11855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.468718][T11855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.472181][ T5825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.472257][ T5825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.472283][ T5825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.472301][ T5825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.560519][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.560533][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.574517][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.574530][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.600488][ T5740] Bluetooth: hci1: command tx timeout [ 207.805427][T11968] Format for adding new port is "id [perm_addr]" (uint MAC). [ 207.943879][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'. [ 207.975998][T11983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11983 comm=syz.5.1978 [ 208.088363][T11990] bond1: Removing last ns target with arp_interval on [ 208.179211][ T43] audit: type=1800 audit(2000000125.229:1102): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1984" name="nullb0" dev="tmpfs" ino=878 res=0 errno=0 [ 208.328966][T12011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12011 comm=syz.5.1989 [ 208.493042][T12026] FAULT_INJECTION: forcing a failure. [ 208.493042][T12026] name failslab, interval 1, probability 0, space 0, times 0 [ 208.493065][T12026] CPU: 2 UID: 0 PID: 12026 Comm: syz.4.1996 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.493080][T12026] Tainted: [L]=SOFTLOCKUP [ 208.493085][T12026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.493091][T12026] Call Trace: [ 208.493095][T12026] [ 208.493100][T12026] dump_stack_lvl+0x100/0x190 [ 208.493129][T12026] should_fail_ex.cold+0x5/0xa [ 208.493146][T12026] should_failslab+0xc2/0x120 [ 208.493166][T12026] __kmalloc_noprof+0xfc/0x840 [ 208.493180][T12026] ? slhc_init+0x3de/0x570 [ 208.493203][T12026] slhc_init+0x3de/0x570 [ 208.493222][T12026] ppp_ioctl+0xf8a/0x27b0 [ 208.493239][T12026] ? __fget_files+0x34/0x3d0 [ 208.493256][T12026] ? __pfx_ppp_ioctl+0x10/0x10 [ 208.493277][T12026] ? selinux_file_ioctl+0x13b/0x290 [ 208.493292][T12026] ? selinux_file_ioctl+0xb6/0x290 [ 208.493308][T12026] ? __pfx_ppp_ioctl+0x10/0x10 [ 208.493326][T12026] __x64_sys_ioctl+0x18e/0x210 [ 208.493343][T12026] do_syscall_64+0x123/0x790 [ 208.493365][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.493376][T12026] RIP: 0033:0x7f52fab9e199 [ 208.493386][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.493396][T12026] RSP: 002b:00007f52fba70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.493407][T12026] RAX: ffffffffffffffda RBX: 00007f52fae25fa0 RCX: 00007f52fab9e199 [ 208.493414][T12026] RDX: 0000200000000200 RSI: 0000000040047451 RDI: 0000000000000003 [ 208.493421][T12026] RBP: 00007f52fba70090 R08: 0000000000000000 R09: 0000000000000000 [ 208.493428][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.493434][T12026] R13: 00007f52fae26038 R14: 00007f52fae25fa0 R15: 00007ffe080c04e8 [ 208.493449][T12026] [ 208.495163][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1997'. [ 208.583343][T12033] can: request_module (can-proto-0) failed. [ 208.604979][T12035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12035 comm=syz.4.2000 [ 208.606375][T12035] kvm: pic: level sensitive irq not supported [ 208.606961][T12035] kvm: pic: single mode not supported [ 208.606967][T12035] kvm: pic: level sensitive irq not supported [ 208.790673][ T43] audit: type=1400 audit(2000000125.849:1103): avc: denied { mounton } for pid=12042 comm="syz.7.2003" path="/proc" dev="ramfs" ino=44015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 209.036489][ T43] audit: type=1400 audit(2000000126.089:1104): avc: denied { write } for pid=12055 comm="syz.7.2008" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 209.036730][T12056] device-mapper: ioctl: device name cannot contain '/' [ 209.036940][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2008'. [ 209.084894][T12058] netlink: 'syz.5.2010': attribute type 64 has an invalid length. [ 209.084908][T12058] netlink: 'syz.5.2010': attribute type 4 has an invalid length. [ 209.084915][T12058] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2010'. [ 209.125294][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.134868][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.136143][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.136778][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.137275][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 ƶÿ[ 209.176219][ T5095] Bluetooth: hci1: adv larger than maximum supported [ 209.190529][ T43] audit: type=1400 audit(2000000126.239:1105): avc: denied { write } for pid=12069 comm="syz.7.2013" name="sched" dev="tracefs" ino=10156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 209.190561][ T43] audit: type=1400 audit(2000000126.249:1106): avc: denied { add_name } for pid=12069 comm="syz.7.2013" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 209.190581][ T43] audit: type=1400 audit(2000000126.249:1107): avc: denied { create } for pid=12069 comm="syz.7.2013" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 209.249914][ T9192] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 209.405213][ T9192] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 209.406102][ T9192] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 209.406117][ T9192] usb 9-1: config 0 has no interface number 0 [ 209.406135][ T9192] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.406147][ T9192] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 209.406162][ T9192] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 209.406174][ T9192] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 209.406188][ T9192] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 209.406202][ T9192] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.406222][ T9192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.407480][ T9192] usb 9-1: config 0 descriptor?? [ 209.407958][T12054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.408009][T12054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.450200][ T9192] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 209.493548][ T5793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.493577][ T5793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.579214][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.579384][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.579465][T12062] bridge_slave_0: entered allmulticast mode [ 209.580676][T12062] bridge_slave_0: entered promiscuous mode [ 209.594588][ T5793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.594609][ T5793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.598688][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.598760][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.598822][T12062] bridge_slave_1: entered allmulticast mode [ 209.599601][T12062] bridge_slave_1: entered promiscuous mode [ 209.617961][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.620011][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.648463][ T5793] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.648485][ T5793] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.665187][T12062] team0: Port device team_slave_0 added [ 209.666482][T12062] team0: Port device team_slave_1 added [ 209.678653][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.678663][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.678676][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.679483][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.679491][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.679504][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.682622][ T5095] Bluetooth: hci1: command tx timeout [ 209.712453][T12062] hsr_slave_0: entered promiscuous mode [ 209.713041][T12062] hsr_slave_1: entered promiscuous mode [ 209.713351][T12062] debugfs: 'hsr0' already exists in 'hsr' [ 209.713362][T12062] Cannot create hsr debugfs directory [ 209.765143][ T5793] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.765168][ T5793] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.901841][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2017'. [ 210.094457][ T5793] bond0 (unregistering): Released all slaves [ 210.121205][T12062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.123087][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.123561][T12062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 210.126017][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.126561][T12062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.128425][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.128958][T12062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 210.134680][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.166129][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.166178][T12062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.166302][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.166347][T12062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.179418][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.188182][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.232216][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.243747][T12062] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.248570][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.248714][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.252972][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.253017][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.366885][ T5793] hsr_slave_0: left promiscuous mode [ 210.367394][ T5793] hsr_slave_1: left promiscuous mode [ 210.373342][ T5793] veth1_macvtap: left promiscuous mode [ 210.373372][ T5793] veth0_macvtap: left promiscuous mode [ 210.373427][ T5793] veth1_vlan: left promiscuous mode [ 210.373459][ T5793] veth0_vlan: left promiscuous mode [ 210.563423][ T43] audit: type=1400 audit(2000000127.619:1108): avc: denied { bind } for pid=12120 comm="syz.5.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.580071][T12120] process '/newroot/174/file0' started with executable stack [ 210.749494][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.885028][T12062] veth0_vlan: entered promiscuous mode [ 210.889543][T12062] veth1_vlan: entered promiscuous mode [ 210.903679][T12062] veth0_macvtap: entered promiscuous mode [ 210.905995][T12062] veth1_macvtap: entered promiscuous mode [ 210.914500][T12062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.920454][T12062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.985236][ T5825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.985276][ T5825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.985303][ T5825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.985333][ T5825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.200146][ T5095] Bluetooth: hci3: command tx timeout [ 211.680262][ T5095] Bluetooth: hci4: command 0x2016 tx timeout [ 211.684727][T12054] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 211.769978][ T5095] Bluetooth: hci1: command tx timeout [ 212.022825][T12054] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 212.027435][T12054] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 212.029108][T12054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.029155][T12054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.034501][T12054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.040545][T12054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.040592][T12054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.043267][T12054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.078892][ T6222] usb 9-1: USB disconnect, device number 4 [ 212.083595][ T6222] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 212.130317][T12147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.137810][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.137831][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.151561][T12147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12147 comm=syz.5.2030 [ 212.169556][T12147] tipc: Enabling of bearer rejected, already enabled [ 212.178115][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.178129][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.230823][T12153] FAULT_INJECTION: forcing a failure. [ 212.230823][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 212.230856][T12153] CPU: 1 UID: 0 PID: 12153 Comm: syz.7.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.230873][T12153] Tainted: [L]=SOFTLOCKUP [ 212.230879][T12153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.230887][T12153] Call Trace: [ 212.230893][T12153] [ 212.230898][T12153] dump_stack_lvl+0x100/0x190 [ 212.230918][T12153] should_fail_ex.cold+0x5/0xa [ 212.230935][T12153] should_failslab+0xc2/0x120 [ 212.230953][T12153] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 212.230970][T12153] ? __alloc_workqueue+0x107a/0x1950 [ 212.230987][T12153] __alloc_workqueue+0x107a/0x1950 [ 212.231006][T12153] alloc_workqueue_noprof+0xc7/0x130 [ 212.231021][T12153] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 212.231039][T12153] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.231054][T12153] ? _raw_spin_unlock+0x28/0x50 [ 212.231073][T12153] xfs_init_mount_workqueues+0x63/0x4f0 [ 212.231088][T12153] xfs_fs_fill_super+0x3d8/0x1f30 [ 212.231101][T12153] ? setup_bdev_super+0x4e8/0x770 [ 212.231117][T12153] get_tree_bdev_flags+0x38c/0x620 [ 212.231132][T12153] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 212.231145][T12153] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 212.231159][T12153] ? cap_capable+0x107/0x430 [ 212.231174][T12153] ? bpf_lsm_capable+0x9/0x10 [ 212.231185][T12153] ? security_capable+0x80/0x260 [ 212.231199][T12153] vfs_get_tree+0x92/0x320 [ 212.231211][T12153] path_mount+0x7d0/0x24c0 [ 212.231225][T12153] ? __pfx_path_mount+0x10/0x10 [ 212.231253][T12153] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.231272][T12153] ? putname+0xb1/0x110 [ 212.231289][T12153] ? kmem_cache_free+0x127/0x6c0 [ 212.231308][T12153] ? __x64_sys_mount+0x293/0x310 [ 212.231320][T12153] __x64_sys_mount+0x293/0x310 [ 212.231335][T12153] ? __pfx___x64_sys_mount+0x10/0x10 [ 212.231354][T12153] do_syscall_64+0x123/0x790 [ 212.231370][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.231381][T12153] RIP: 0033:0x7f0cd759e199 [ 212.231391][T12153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.231402][T12153] RSP: 002b:00007f0cd84d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.231414][T12153] RAX: ffffffffffffffda RBX: 00007f0cd7826090 RCX: 00007f0cd759e199 [ 212.231421][T12153] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000140 [ 212.231428][T12153] RBP: 00007f0cd7635888 R08: 0000000000000000 R09: 0000000000000000 [ 212.231434][T12153] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 212.231441][T12153] R13: 00007f0cd7826128 R14: 00007f0cd7826090 R15: 00007ffcf0058eb8 [ 212.231456][T12153] [ 212.292199][T12154] XFS (loop4): SB validate failed with error -5. [ 212.344712][ T5108] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 212.365704][ T43] audit: type=1400 audit(2000000129.419:1109): avc: denied { write } for pid=12166 comm="syz.8.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.365735][ T43] audit: type=1400 audit(2000000129.419:1110): avc: denied { listen } for pid=12166 comm="syz.8.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.559032][T12174] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.611558][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 212.681776][T12180] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2031'. [ 212.681797][T12180] netlink: 'syz.7.2031': attribute type 1 has an invalid length. [ 212.830703][T12198] pimreg3: entered allmulticast mode [ 212.933513][ T3275] lg-g15 0003:046D:0A07.0020: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 212.934271][ T3275] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0020/input/input36 [ 213.060288][ T43] audit: type=1326 audit(2000000130.119:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12209 comm="syz.7.2042" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cd759e199 code=0x0 [ 213.114981][ T43] audit: type=1400 audit(2000000130.169:1112): avc: denied { listen } for pid=12209 comm="syz.7.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.115229][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 213.139599][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 213.143952][T12226] overlayfs: failed to resolve './file7': -2 [ 213.217852][T12233] netlink: 'syz.7.2042': attribute type 21 has an invalid length. [ 213.217873][T12233] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2042'. [ 213.346602][T12245] fuse: Bad value for 'fd' [ 213.369839][ T3275] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 213.520869][ T3275] usb 9-1: Using ep0 maxpacket: 8 [ 213.521342][ T3275] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.524604][ T3275] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 213.524628][ T3275] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.524641][ T3275] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.524654][ T3275] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.524667][ T3275] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.524687][ T3275] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.527085][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12254 comm=syz.8.2060 [ 213.528499][T12254] kvm: pic: level sensitive irq not supported [ 213.529164][T12254] kvm: pic: single mode not supported [ 213.529170][T12254] kvm: pic: level sensitive irq not supported [ 213.735123][T12258] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 213.744501][ T3275] usb 9-1: usb_control_msg returned -32 [ 213.744540][ T3275] usbtmc 9-1:16.0: can't read capabilities [ 213.760389][ T5095] Bluetooth: hci4: command 0x2016 tx timeout [ 213.823889][T12270] ip_tables: iptables: counters copy to user failed while replacing table [ 213.862131][T12272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.863646][T12272] team0: No ports can be present during mode change [ 213.864940][T12272] tipc: Enabling of bearer rejected, already enabled [ 213.879213][ T43] audit: type=1400 audit(2000000130.929:1113): avc: denied { ioctl } for pid=12267 comm="syz.8.2064" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.920809][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.5.2069 [ 213.957451][ T43] audit: type=1400 audit(2000000131.009:1114): avc: denied { getopt } for pid=12282 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.065955][T12294] FAULT_INJECTION: forcing a failure. [ 214.065955][T12294] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.065978][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.8.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.065995][T12294] Tainted: [L]=SOFTLOCKUP [ 214.065999][T12294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.066006][T12294] Call Trace: [ 214.066010][T12294] [ 214.066016][T12294] dump_stack_lvl+0x100/0x190 [ 214.066048][T12294] should_fail_ex.cold+0x5/0xa [ 214.066066][T12294] get_futex_key+0x1d0/0x14f0 [ 214.066083][T12294] ? __pfx_get_futex_key+0x10/0x10 [ 214.066097][T12294] ? __lock_acquire+0x5c0/0x1f40 [ 214.066112][T12294] ? ref_tracker_alloc+0x307/0x590 [ 214.066130][T12294] futex_wake+0xf4/0x5e0 [ 214.066145][T12294] ? __pfx_futex_wake+0x10/0x10 [ 214.066156][T12294] ? j1939_sk_bind+0x2a3/0xdb0 [ 214.066173][T12294] ? j1939_sk_bind+0x2a3/0xdb0 [ 214.066187][T12294] ? __local_bh_enable_ip+0xa5/0x120 [ 214.066201][T12294] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.066220][T12294] ? j1939_sk_bind+0x2a3/0xdb0 [ 214.066234][T12294] do_futex+0x2b2/0x440 [ 214.066252][T12294] ? __pfx_do_futex+0x10/0x10 [ 214.066268][T12294] ? __sys_bind+0x1c7/0x260 [ 214.066286][T12294] __x64_sys_futex+0x34f/0x4d0 [ 214.066305][T12294] ? __pfx___x64_sys_futex+0x10/0x10 [ 214.066330][T12294] do_syscall_64+0x123/0x790 [ 214.066347][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.066359][T12294] RIP: 0033:0x7ffba0f9e199 [ 214.066369][T12294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.066380][T12294] RSP: 002b:00007ffba1f3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.066394][T12294] RAX: ffffffffffffffda RBX: 00007ffba1225fa8 RCX: 00007ffba0f9e199 [ 214.066401][T12294] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffba1225fac [ 214.066408][T12294] RBP: 00007ffba1225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 214.066415][T12294] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 214.066426][T12294] R13: 00007ffba1226038 R14: 00007ffcd40f6000 R15: 00007ffcd40f60e8 [ 214.066440][T12294] [ 214.079884][T12290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2073'. [ 214.079992][ T5095] Bluetooth: hci3: command 0x040f tx timeout [ 214.080014][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.080486][T12290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2073'. [ 214.080833][T12290] netlink: 'syz.5.2073': attribute type 32 has an invalid length. [ 214.080843][T12290] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2073'. [ 214.096894][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2047'. [ 214.099216][ T43] audit: type=1400 audit(2000000131.149:1115): avc: denied { shutdown } for pid=12223 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.100966][ T43] audit: type=1400 audit(2000000131.159:1116): avc: denied { read } for pid=12223 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.118915][T12298] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 214.120427][ T1173] IPVS: starting estimator thread 0... [ 214.121863][T12294] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 214.121878][T12294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.122480][T12294] vhci_hcd vhci_hcd.0: Device attached [ 214.125995][T12299] vhci_hcd: connection closed [ 214.126205][ T5825] vhci_hcd vhci_hcd.8: stop threads [ 214.126220][ T5825] vhci_hcd vhci_hcd.8: release socket [ 214.126230][ T5825] vhci_hcd vhci_hcd.8: disconnect device [ 214.209840][T12300] IPVS: using max 43 ests per chain, 103200 per kthread [ 214.673759][T12314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12314 comm=syz.7.2079 [ 214.934294][ T43] audit: type=1400 audit(2000000131.989:1117): avc: denied { watch } for pid=12327 comm="syz.7.2084" path="/31/bus" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.934531][ T43] audit: type=1400 audit(2000000131.989:1118): avc: denied { watch_sb watch_reads } for pid=12327 comm="syz.7.2084" path="/31/bus" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.985146][ T1166] IPVS: starting estimator thread 0... [ 214.995721][T12333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2086'. [ 215.022234][T12335] ip_tables: iptables: counters copy to user failed while replacing table [ 215.051387][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'. [ 215.069997][T12331] IPVS: using max 41 ests per chain, 98400 per kthread [ 215.088831][T12340] bond2 (unregistering): Released all slaves [ 215.130055][T12344] zero sized request [ 215.130107][T12345] zero sized request [ 215.132674][T12341] bond2 (unregistering): Released all slaves [ 215.535126][T12354] batman_adv: batadv0: Adding interface: syzkaller0 [ 215.535145][T12354] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.535173][T12354] batman_adv: batadv0: Interface activated: syzkaller0 [ 215.537250][T12353] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 215.554302][T12353] batman_adv: batadv0: Removing interface: syzkaller0 [ 215.614686][T12356] [ 215.615510][T12356] ====================================================== [ 215.617706][T12356] WARNING: possible circular locking dependency detected [ 215.619926][T12356] syzkaller #0 Tainted: G L [ 215.621903][T12356] ------------------------------------------------------ [ 215.624074][T12356] syz.8.2094/12356 is trying to acquire lock: [ 215.625990][T12356] ffffffff8ffcb140 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 215.628933][T12356] [ 215.628933][T12356] but task is already holding lock: [ 215.631451][T12356] ffff88802a15ea50 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 215.634358][T12356] [ 215.634358][T12356] which lock already depends on the new lock. [ 215.634358][T12356] [ 215.637617][T12356] [ 215.637617][T12356] the existing dependency chain (in reverse order) is: [ 215.640405][T12356] [ 215.640405][T12356] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 215.642806][T12356] lock_acquire+0x1d1/0x380 [ 215.644433][T12356] __mutex_lock+0x1a4/0x1bd0 [ 215.646098][T12356] blkcg_activate_policy+0x34f/0xbf0 [ 215.647971][T12356] blk_throtl_init+0x39a/0x5b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.649663][T12356] tg_set_conf.isra.0+0x252/0x500 [ 215.651712][T12356] cgroup_file_write+0x1e6/0x8a0 [ 215.657034][T12356] kernfs_fop_write_iter+0x3e0/0x5f0 [ 215.658872][T12356] vfs_write+0x6af/0x1050 [ 215.660396][T12356] ksys_write+0x12a/0x250 [ 215.662266][T12356] do_syscall_64+0x123/0x790 [ 215.663983][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.666127][T12356] [ 215.666127][T12356] -> #1 (&q->q_usage_counter(io)#65){++++}-{0:0}: [ 215.668931][T12356] lock_acquire+0x1d1/0x380 [ 215.670582][T12356] blk_alloc_queue+0x610/0x790 [ 215.672324][T12356] __blk_alloc_disk+0xa0/0x170 [ 215.674077][T12356] zram_add+0x1bf/0x5d0 [ 215.675701][T12356] zram_init+0x11c/0x160 [ 215.677316][T12356] do_one_initcall+0x11c/0x6f0 [ 215.679068][T12356] kernel_init_freeable+0x6ea/0x7b0 [ 215.680960][T12356] kernel_init+0x21/0x1e0 [ 215.682577][T12356] ret_from_fork+0x730/0xd60 [ 215.684266][T12356] ret_from_fork_asm+0x1a/0x30 [ 215.686110][T12356] [ 215.686110][T12356] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 215.688494][T12356] check_prev_add+0xeb/0xe60 [ 215.690175][T12356] __lock_acquire+0x1528/0x1f40 [ 215.691942][T12356] lock_acquire+0x1d1/0x380 [ 215.693631][T12356] fs_reclaim_acquire+0xc4/0x100 [ 215.695469][T12356] kmem_cache_alloc_noprof+0x63/0x6a0 [ 215.697424][T12356] __radix_tree_preload+0x333/0x820 [ 215.699251][T12356] blkg_conf_prep+0x489/0xf10 [ 215.700935][T12356] tg_set_conf.isra.0+0x1ed/0x500 [ 215.702705][T12356] cgroup_file_write+0x1e6/0x8a0 [ 215.704498][T12356] kernfs_fop_write_iter+0x3e0/0x5f0 [ 215.706503][T12356] vfs_write+0x6af/0x1050 [ 215.708087][T12356] ksys_write+0x12a/0x250 [ 215.709712][T12356] do_syscall_64+0x123/0x790 [ 215.711377][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.713450][T12356] [ 215.713450][T12356] other info that might help us debug this: [ 215.713450][T12356] [ 215.716796][T12356] Chain exists of: [ 215.716796][T12356] fs_reclaim --> &q->q_usage_counter(io)#65 --> &q->blkcg_mutex [ 215.716796][T12356] [ 215.721082][T12356] Possible unsafe locking scenario: [ 215.721082][T12356] [ 215.723445][T12356] CPU0 CPU1 [ 215.725229][T12356] ---- ---- [ 215.727016][T12356] lock(&q->blkcg_mutex); [ 215.728474][T12356] lock(&q->q_usage_counter(io)#65); [ 215.731026][T12356] lock(&q->blkcg_mutex); [ 215.733237][T12356] lock(fs_reclaim); [ 215.734602][T12356] [ 215.734602][T12356] *** DEADLOCK *** [ 215.734602][T12356] [ 215.737184][T12356] locks held by syz.8.2094/12356: 6, last CPU#2: [ 215.739242][T12356] #0: ffff8880370cb270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 215.742124][T12356] #1: ffff88802deb4460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 215.745188][T12356] #2: ffff8880245a0880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 215.748468][T12356] #3: ffff88803c0dd788 (kn->active#105){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 215.751692][T12356] #4: ffff88802a15e8d0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 215.754902][T12356] #5: ffff88802a15ea50 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 215.757895][T12356] [ 215.757895][T12356] stack backtrace: [ 215.759800][T12356] CPU: 2 UID: 0 PID: 12356 Comm: syz.8.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.763256][T12356] Tainted: [L]=SOFTLOCKUP [ 215.764662][T12356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.767868][T12356] Call Trace: [ 215.768994][T12356] [ 215.769961][T12356] dump_stack_lvl+0x100/0x190 [ 215.771496][T12356] print_circular_bug.cold+0x178/0x1be [ 215.773234][T12356] check_noncircular+0x146/0x160 [ 215.774915][T12356] check_prev_add+0xeb/0xe60 [ 215.776437][T12356] ? check_noncircular+0x97/0x160 [ 215.778064][T12356] __lock_acquire+0x1528/0x1f40 [ 215.779658][T12356] lock_acquire+0x1d1/0x380 [ 215.781116][T12356] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 215.782888][T12356] fs_reclaim_acquire+0xc4/0x100 [ 215.784501][T12356] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 215.786256][T12356] kmem_cache_alloc_noprof+0x63/0x6a0 [ 215.787977][T12356] ? __radix_tree_preload+0x2f4/0x820 [ 215.789733][T12356] ? __radix_tree_preload+0x333/0x820 [ 215.791460][T12356] __radix_tree_preload+0x333/0x820 [ 215.793120][T12356] blkg_conf_prep+0x489/0xf10 [ 215.794655][T12356] tg_set_conf.isra.0+0x1ed/0x500 [ 215.796255][T12356] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 215.798049][T12356] ? kernfs_root+0xf8/0x2a0 [ 215.799545][T12356] cgroup_file_write+0x1e6/0x8a0 [ 215.801127][T12356] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 215.802840][T12356] ? __pfx_cgroup_file_write+0x10/0x10 [ 215.804678][T12356] ? __kmalloc_noprof+0x350/0x840 [ 215.806294][T12356] kernfs_fop_write_iter+0x3e0/0x5f0 [ 215.807999][T12356] ? __pfx_cgroup_file_write+0x10/0x10 [ 215.809771][T12356] vfs_write+0x6af/0x1050 [ 215.811150][T12356] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 215.813016][T12356] ? __pfx_vfs_write+0x10/0x10 [ 215.814570][T12356] ? find_held_lock+0x2b/0x80 [ 215.816073][T12356] ksys_write+0x12a/0x250 [ 215.817503][T12356] ? __pfx_ksys_write+0x10/0x10 [ 215.819065][T12356] do_syscall_64+0x123/0x790 [ 215.820557][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.822454][T12356] RIP: 0033:0x7ffba0f9e199 [ 215.823878][T12356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.829954][T12356] RSP: 002b:00007ffba1f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.832580][T12356] RAX: ffffffffffffffda RBX: 00007ffba1225fa0 RCX: 00007ffba0f9e199 [ 215.835295][T12356] RDX: 0000000000000006 RSI: 0000200000000480 RDI: 0000000000000005 [ 215.837868][T12356] RBP: 00007ffba1035888 R08: 0000000000000000 R09: 0000000000000000 [ 215.840392][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.842883][T12356] R13: 00007ffba1226038 R14: 00007ffba1225fa0 R15: 00007ffcd40f60e8 [ 215.845404][T12356] [ 215.850018][ T5740] Bluetooth: hci4: command 0x2016 tx timeout [ 215.862901][ T5740] Bluetooth: hci3: unexpected event for opcode 0x204e [ 215.902268][T10030] tipc: Resetting bearer [ 215.936859][T10030] tipc: Disabling bearer [ 216.192682][ T9189] usb 9-1: USB disconnect, device number 5 [ 216.257192][ T5825] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.272849][ T5825] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.333903][ T5825] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.392753][ T5825] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.440901][ T5825] bridge_slave_1: left allmulticast mode [ 216.440916][ T5825] bridge_slave_1: left promiscuous mode [ 216.440995][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.444170][ T5825] bridge_slave_0: left allmulticast mode [ 216.444184][ T5825] bridge_slave_0: left promiscuous mode [ 216.444272][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.478772][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.482100][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.487456][ T5825] bond0 (unregistering): Released all slaves [ 216.488556][ T5825] bond1 (unregistering): Released all slaves [ 216.697184][ T5825] hsr_slave_0: left promiscuous mode [ 216.697569][ T5825] hsr_slave_1: left promiscuous mode [ 216.697958][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.697973][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.698388][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.698401][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.702340][ T5825] veth1_macvtap: left promiscuous mode [ 216.702362][ T5825] veth0_macvtap: left promiscuous mode [ 216.702392][ T5825] veth1_vlan: left promiscuous mode [ 216.702412][ T5825] veth0_vlan: left promiscuous mode [ 216.757867][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 216.761507][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 217.064015][ T5825] IPVS: stop unused estimator thread 0... [ 217.113372][ T5825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.113393][ T5825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.172752][ T5825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.172797][ T5825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.254447][ T5825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.254469][ T5825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.350996][ T5825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.351018][ T5825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.506158][ T5825] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.545857][ T5825] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.624639][ T5825] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.677072][ T5825] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.764405][ T5825] bridge_slave_1: left allmulticast mode [ 217.764422][ T5825] bridge_slave_1: left promiscuous mode [ 217.764532][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.765377][ T5825] bridge_slave_0: left allmulticast mode [ 217.765388][ T5825] bridge_slave_0: left promiscuous mode [ 217.765447][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.774559][ T5825] batman_adv: batadv0: Interface deactivated: gretap1 [ 217.805971][ T5825] erspan0 (unregistering): left promiscuous mode [ 217.807109][ T5825] gretap0 (unregistering): left promiscuous mode [ 217.809561][ T5825] batman_adv: batadv0: Removing interface: gretap1 [ 217.820480][ T5825] bond0 (unregistering): Released all slaves [ 217.821894][ T5825] bond1 (unregistering): Released all slaves [ 217.845929][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.846901][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.847565][ T5825] bond0 (unregistering): Released all slaves [ 217.902709][ T5825] tipc: Disabling bearer [ 217.904398][ T5825] tipc: Left network mode [ 218.305097][ T5825] hsr_slave_0: left promiscuous mode [ 218.305358][ T5825] hsr_slave_1: left promiscuous mode [ 218.307149][ T5825] hsr_slave_0: left promiscuous mode [ 218.307472][ T5825] hsr_slave_1: left promiscuous mode [ 218.307667][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.307677][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.308095][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.308104][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.311684][ T5825] veth1_macvtap: left promiscuous mode [ 218.311700][ T5825] veth0_macvtap: left promiscuous mode [ 218.311733][ T5825] veth1_vlan: left promiscuous mode [ 218.318749][ T5825] veth1_macvtap: left promiscuous mode [ 218.318764][ T5825] veth0_macvtap: left promiscuous mode [ 218.318799][ T5825] veth1_vlan: left promiscuous mode [ 218.318821][ T5825] veth0_vlan: left promiscuous mode [ 218.379469][ T5825] team0 (unregistering): Port device vlan0 removed [ 218.452215][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 218.454067][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 218.936346][ T5825] IPVS: stop unused estimator thread 0...