last executing test programs: 3.789817349s ago: executing program 0 (id=21): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r1, 0xfffff789) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03002cbd70000e0000000200000008000100", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x50) setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) 2.909217757s ago: executing program 0 (id=32): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x4000800) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) prlimit64(r2, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x8000005}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2.909016692s ago: executing program 0 (id=33): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000030000000000000800450000240100000000d9907800000000e000002100004e000010907862c0000180000000c344390eb0d9830763e4e5b7ec6ecbd2bb7544e001ffffffffffffff16860cec82bcbe49f3fe6099f630cafe90d37f8b4864c3ef99c7b3f322bb726753f800000000c0938d148a5a98305040cc0b6d85976f387faf936748d658fe0ff7367f45b2fb7677110950c34b26537de308639b1e8d3dc35d00"/181], 0x0) 2.829615887s ago: executing program 0 (id=34): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x20000008, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x100000001, {0x0, 0x2, 0x1, 0x4, 0x6, 0xf0, {0x405, 0x10001, 0x1ffffffffffd, 0xd, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x4000, 0xb7a, r5, r6, 0x7, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000905000000000000000000000500010007000000100007800c0001800800014038fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f00000002c0)={[{@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {@subsystem='cpu'}, {@pids_localevents}, {@pids_localevents}, {@memory_hugetlb_accounting}, {@memory_localevents}, {}, {@memory_recursiveprot}], [{@euid_eq={'euid', 0x3d, r5}}, {@fowner_gt={'fowner>', r7}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) acct(&(0x7f0000000040)='./file0\x00') 2.777408892s ago: executing program 0 (id=35): r0 = socket$kcm(0x29, 0x7, 0x0) sync_file_range(r0, 0x700000, 0x7ff, 0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x5, 0x80000, r0}) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000040)) getsockname$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) ioctl$KDADDIO(r1, 0x4b34, 0x5) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000140)={0x10, 0x8}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x8, 0x8204, 0x3, 0x3ff, 0x80000000, 0x200, 0x9, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x5, 0x99, 0x6, 0x1, 0x5, 0x5, r2}, &(0x7f0000000240)=0x20) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_init) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000380)={r4, &(0x7f0000000300)=""/81}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000003c0)={{0x7, 0x80000000}, {0x8, 0x8}, 0x1b9c, 0x1}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000891}, 0x4485) ioctl$TCSBRK(r1, 0x5409, 0x8) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x514240, 0x2, 0x27}, 0x18) write(r5, &(0x7f0000000580)="e35afacded4da40834a66cc478e6bca1660ba2388c671c5ceb902301f66790a7fb0c3ca273678c548e0ecaf88cacd3a2329d62a1a0d3acb27a47d9dc854ecbca1d3c1f105284c55ebd168e37765440897ad5d3e281e93993c2177616c0f0d30b27efbe8d12cc5d8da5fe27b1ce6e5e22baac44a11d5f070472b0b63cf56581d743423c6258bb9a85b06694ad8455aa21a8af01fd561e0c4473c59d6b32f7b4f46856e1d74582cd723b0f815ab3098ad9a806ec6eba6523ece0f556d78aea67b92ba5ac83979d5832de2ca88c09e50d0c09f2443f5003e4cd417fe1651fab3dacce50", 0xe2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000680), 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r3, 0x8, 0x8}, &(0x7f0000000700)=0xc) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r7, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f00000007c0)=[0xffffffffffffff81], 0x84}}, 0x30) fcntl$getflags(r8, 0x408) fchdir(0xffffffffffffffff) unlink(&(0x7f0000000840)='./file0\x00') mount(&(0x7f0000000880)=@sr0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='incremental-fs\x00', 0x20040, &(0x7f0000000940)='\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000980)={r6, 0x8}, &(0x7f00000009c0)=0x8) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000a00)={0x7ff, 0x1, 0x40, 0x200, 0x2}) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000a40)={'custom1\x00'}) mount_setattr(r5, &(0x7f0000000b80)='./file0\x00', 0x8000, &(0x7f0000000bc0)={0x100094, 0x1, 0x100000, {r1}}, 0x20) 2.776968594s ago: executing program 0 (id=37): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './mnt\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") (async) ioctl(r2, 0xc138fd0c, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "60fc6fa82ada942e", "9b6bf515848b0837e02d2ae9d2c08218c5b3f45a46e1e60cce31f5113ea1e7fd", "61b5fb0e", "43c87093e21bc0ca"}, 0x38) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1300000065ffff002010001a"], 0x13) (async) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) (async) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) ioctl$FIOCLEX(r6, 0x5451) (async, rerun: 64) mkdirat(r2, &(0x7f0000003000)='\x00', 0xde) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10}, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x830490, &(0x7f0000005000)='ufstype=sun\x00') 1.598676707s ago: executing program 1 (id=53): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000380)="ab374195bf73f0c3bf84f665e77456b4b6193bd1243a9bff000000000000005ea5ef0d670a5e78e8d60bd05db67b32fcb7764a8247565bd920791d3bd7455a893c2bc02770007889e9fe000000008128b3c5bb4af2e02206b5fbbb", 0x0, 0x5b}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x125, 0x9}) 1.484012283s ago: executing program 1 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e9b3d0007e03cd65193a1e93daca63c86dd", 0x12}, {&(0x7f00000001c0)="d78d31402b512b3ead7c3bfa33d1853aa5b677db45ff1ee865a083dc64cc43d1be7a1e6e7109511d2fc5", 0x658}], 0x2) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1ff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004084) landlock_restrict_self(r2, 0x8) socket$inet6(0xa, 0x5, 0x3) 1.289127743s ago: executing program 3 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061111400000000009500000800000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async, rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) ioctl$SG_IO(r3, 0x2285, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x400c}, {r3}], 0x2, &(0x7f0000000380), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='\x17#*(\xa4)%^+\x00', 0x220b80, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x800]}, {0x0, 0x1, 0x9, 0x3}}, 0xffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x7}) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r10, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x2002010}, 0x20000000) (async) r11 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) (async) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async) sendmsg$inet6(r12, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0xff00) (async) ppoll(&(0x7f0000000000)=[{r11, 0x2}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r11, 0x2289, &(0x7f0000000ac0)) (async, rerun: 64) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x2, 0x7, 0x7, 0x4}, {0x6dd5, 0xd0, 0x5, 0x7}, {0x5819, 0x5, 0x7, 0x80000000}, {0x1, 0x8, 0x9, 0xfa}, {0x9, 0x6, 0x2, 0x4}, {0x10, 0x3, 0x4, 0x5}, {0x7, 0x9d, 0x8, 0x7}, {0x5, 0x7c, 0x9, 0x7}]}) (rerun: 64) 1.217807186s ago: executing program 1 (id=61): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000040)={@private, @local, @local}, &(0x7f0000000080)=0xc) r2 = dup(r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x6, 0x2, 0x4, {0x1, @win={{0x4ab, 0x24, 0xffff, 0x8ed}, 0x0, 0x3, &(0x7f00000000c0)={{0x3ff, 0x3, 0x2, 0x10}}, 0x81, &(0x7f0000000100)="0854fc0762fce504a914954245f0bc80e9faeb70f1a12a4c1368597e319fe3289a8140b26041212d1ad6a50d9176b2f3498c5aed17775c7ac98e99273f73a30db5a1eabc8891541a384c"}}, 0x487}) sendto$inet(r2, &(0x7f0000000280)="752b9bab8e114ef3f9fa1bbb69004cf4f5bd4f76272a99b97af1b4f4e84b960c48fda93a2df00f5d631cef16ecbe3fac8a547819617cd9b354", 0x39, 0x10, &(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xfffffff7}}, './file0\x00'}) ftruncate(r0, 0xffff) r4 = pidfd_getfd(r2, r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@remote, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @local, @mcast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, &(0x7f00000003c0)={0x1, 0x3, [0x51a, 0x7fc, 0xc1, 0xea0]}) setsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f0000000400)="1866806c2c46389be5dca4d2374ef32584be36a1e3530560efcec340d5da013decc17b192bb0f20e9f5bef", 0x2b) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000440)=0x8de, 0x4) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) r5 = syz_clone(0x45200000, &(0x7f0000000480)="b51ad5e1af63a568227b00276f5bf81c5458cb89c60a0ccbd482026c7340deebd188b99acc7302eba9e8ea3d953f718f6f169297d3b05c92bbd07e7313e5cea879b332bde5757ef10727d49487f2f4976dfa8ade0a5b176e2fddd57281f139162140d0e82327c35238207c5d4f5d085ef43f229cbf981118aa8b305413f1a79ee35b38b789630157f99a255b983b37774f8d97ed3ea0b83cf808bac703", 0x9d, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="633cff4c5fc0646b22ee69976af31bfc544b734e51bb31962e5ffc2a365f25117a1488bead928792e9dedc8fdf66d6cbc2d78e6eec1abc4a4235f438521cd2c6acbed65f6fb6171d831df8c5041d58a9c5d7491e4b5afbe11cbbc4a1c0") fcntl$lock(r0, 0x7, &(0x7f0000000640)={0x2, 0x0, 0x2, 0x7, r5}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) r7 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000006c0), 0x2, 0x0) pwrite64(r7, &(0x7f0000000700)="7a41106816200bd676b9aba51da9178cd3d09ee60fd0ccdac6171c18a133d75d85d24aa36fdd9dd31b016097c63f550077695e164c40d8dd251147ecf859ccbfa21cacd4374d7eb550d094b501bcc823ebdf3aba369c14b06a05a21de0ccc22012c747ccc96674ee548a5467c9264568cefbe42a3e6a1e43d459793a14d8715d96021990ff2ba601286ef3b279ffb1cba4371d18ee5623b961a93218f3242163bfd4ae3f151a340e4b343f98cd6014f6430f4c931d045ebc6b12bf510b3d67bab26ff3ff25cc0dada523b08bf21ec009b9411e48089bd377a50ec05a4007a2e4924f1feac532507089795af2af34d6b481b6db77d22e12cbf180f8f9bb688c33536bc1b8606194b055ba7d004c4697f0e19db16113c493c91e23a7cf66c78f6def811294dacec2c933c74482234691a1d49f05904024f872b4ca650500e9bb5628e6c45733a098a366ec1c53b8ccdcce2c165d8ac009d5384f1c4396a0aaa4b261811eab4aa6b3a6473db6ffb09c9c419325ac16754219a6ac3a00d258d14d1afd56eed8c2ac65a821deb490a844b647cf18f453a6216c76e94b96b705b11f2e28f4952576e3954556204243309eb051b7d3c555ddf8756dc6d59841efc6fa3952db4a830a6c91f6aaaab3778d03462182b696506362cc590d65881baee0875774ac5d1b9d540f21c9603f5689a004cc1af1753165d9ba0e1e1b00ecdc8d116594e88ca63aa9bc81b80b3d423bf15dc4856f3e88651f38f4200bd29a84693e5df5fef55a26eb0eb214781e89ec218b302e537c48808add2aeeb6622a6220a0e4559650461edb834d758689260e86fb4d430e95cddba56d0ad06c8ddab35de4570f3d7e73aacbdf4bf1fbc16040b7367883ff682e7b16817abe6456573287f92113dec91bf3131635a80dd2c612aed1c5835c6d3a189a898ab968cbadea740458637bed2ca025d6bc477d009773ced50b0e62afcbc28b93004bf93e230ff3bec218fea08fbb51e7caf71a3c6167352fc935360689ee28af664f24e4c850fe60dd249b47967c0a64f4c70118011b60ab2c8f91c44c71c10d71cbfb78327baa03c4a1c9308a4b9ae806435eb4ce4cf0845575e07baaab99662793775d487fa2ac1033786f645572cdde17d097c4b84473f79e1346fef5fa62b3c0d5d35f918e061e804d3e417ad0fb67a348a9115f38d5219a300e227431a674ce6d7f458f9bb94eb905c7f52f6f55c2c54d6dd9204a4ec5f4c19e92383e94fe6f99ca2728d02526fa959442fd3ee0b44203e67a9ec429cec1196f0a3fec86cb000e13d2b0ce04faab47b3a1dab13ef077d6bb8379c643306ec006ae35765d26d98a14a0411781378c2d0ef9727531db3d01f8eebfac3452e8c41416d1d5f89304f7ec9532b54f2c1f230ec83553d1d14504b48c0c064530f518eeeeb7e8814d3f5eb81eb33b8ed32124b63b2f070764920e3ea9d12cfbba98661e0e82c107afdbdb9fa494462ad630c06386163d9011d147eeea4bc6c32ec7cac9d2c621cbdb449fec45a5409ce8a4fc2ee453051c2b13ff2c5dff965b210ff57fa31b35df1a83a435859e709e690927d749cc31b25e800bafba37ed603fbef78e2c15676376ce97e8f1435fa743c3ea1bc57d46f0a9778e22b649b401537a76de14cddb68ce6ba42e499a3ea87e64115f8ee5c33afc518a352258ac1b470940148e4648bc0e5c04b06fe05e1d536eed33b17915c24f219beb555878900436f55c8a10f3f0f03f93582b76b9ce4831b1df0829e80aa1a0d6beff43047ad2888d5d2763bfde8a3910b19f01105ea8ace3448e148ea5c8cb40f52bec89469d36d0f078c6c307525dd0314e9c90ef14b938f6d960698bfec9183d07d9c310600c374951afc6a3e035b60f3ee9aca3e8c90e6145dd2a1593dc5ca107a5516d2c796948a0a56077e8268c32a707025afcea407fcb3e043b22783772827522c5134985d182e3335946d5dd532f5de3fd94b82d5be39ee2457b47655ca136b65746570ae811c0dffab17f4bedb4444fd281a1b8b859e5c8420c1714b68d82706043af7234d4bf8b370869d1cfc4bd12fad44cd03643fe9c0a815ccaded1b92e2312140c806cef0e1431e8ebc213267d9e8a9acb375ac8f0a832f3260ef7ef9f878f61a0bc1ff5b0b30aafb4a96ecd48fe261a3c2e38d8a1af5661f5942b654441cd69b2917a0572b47f52e0e136436ec0d3cb44ca63eef89e445356bff1fbd1e2d7d8ce4ec8af59fd8ff6b6ae6fbc28f02f841bff7fa58097e9e4ea421b452fdd9901b8fd192e5e7855f1957b544334258e5130a477a7acc509f6653503d403bdf363084f028c45b317fe18dc07c8a0f9f6d4ad0be8bf73442b8dc4c89ff62112c55f810022046abd891a33aa01e1d39efb4386ee3b17dc0b0db0aba9ec4a9f71e177205cd48ec4e3c6b04c9954fd20da696a86bc010671e9b814198c07b21e51b9ccdafc4cab6112d81844bc21316172e7fc2fd2fdb2e0b88cbf0ba10cc727d1190178e0043631bf13d7226fa835981eeba1c12ea1e22fac0494e5d6021ae89008672fca748094b00c5a126474898397afba9d630b8fc7c1d51a3e3639afd472f7c927cfda56dfe9ddd8ac8135aac9191389b8d778b0b9fb9e66b4b5f17437fb78bce242623e840bd1f99689432ca3d8897d454711a7d3274396e7c168dd8ad15b5f41a96b3aaefe22da28b3d293c318772c59e2b06b18447c303b1fb6cbd901052d1effbaae63537ae19c03b24c9909dbd4c0c6dd4c1afe9ae6bb3b50534f0018648b26949c8ec43199e352b1efa59c5b22f7eb9bd8cae75cfe23ce0f77c33424ee3b089f345fb8bf966849e9eab0b209e628be9b2ef1dd5a3e74e5f3d788a8c9f1e54092ddac9237d7adbfe65c99a972d1b9d2c5cd793dd7278daff11995dbce5ed696ed2d1a3816d664aa931415bddcd89e72c9118b160cd738e41ea3ad96abbb3a09531aa3f9a9c1dd515cb74d5e0dc2008297cbfe12dc03e6a370d532597ab445d8cd2863c3ab520f22833a735e15b4eb1a1b04eeda6cc78dc2ef876d70413c0ebf4c835c527a24771e04d69d5e9da02aa49864d9f35278991aaea3769af0467a21910969a83a33deabdcdfbb0885212d9da53b464c386423b848e129330a93d1d9f53cc470ef2f62107e8478de51480903cd406197bb96cfe626b4ad98ff6471f978e08be2e574da2a97b070ba08d1fa24c812798a45845f073f0afc75128ae64ac306ec7af78ee976c7c77583eb4fe020576ee8ba43e2819a0986cd7b20922e8d608ab03fee23c0e2ad12f3ff45541ad79c5f17d24c30626b5cb266ce8ab7d5ea1e2b24642e5193591580159492db8e38bc34d230b8b463e9188488665f86a205b8c88b12e9ff728fd909f41efb3ce3e6bafdd467579028113c6cca7bc6447f609bb0b4fa357f2b024c731f1c2bdfa01a4f1345326db85ab1cdd8489527c56f05fb774db6cbfef9cfc478bd8a24a91ef3d14a04070eeee8d01f14da34c5676490dc29471846cfee67e4ecbab3b050dbe381c9630806d6f0caee0856d43e92f2753e7c3f8472e44aa17aeacc25c45847226590240812209490f670b176e727d1b5d22b66f46ce2871153d914d849d251c497dd048761b3c939c917c78ee8777574bde6331a542635328aae22299e187ec9662b710c3d11f2d059714618ee815db90cfc17d669b4794b550c646fb4b27670190f087ea2a33787319d29df85771c201668c60a0866744945b22dfa38195868d23106623976ae64a96fe4c27cd1d2d014d535ea3ebb3abc265129a75364b7497126c7c1d16d634aa5f909cad866e8f334f30deef34a09b7681b375657274707d0fa892abab2a26aa4f7d2383f6981eb1b340eaf5a1e106c0a9372f0e9b1828094ca03b3dfd491deef515dfbefbe102767de1bdd2c7ef4f5a08c67f37468378ad9176f91fc0cfef845f184bd6c3f7ad92bcf395f3cf1cb7070b279369815c476f019779e59909ad0f37d0c1f6c1bac47005c4ef4b6c3c448be41f518d6f27a43b51e7defb1230d5ce63747218d1012f6aaf20d5680183c8a80ca2b4fe9e8a525cc86875d5bc8bcb956528276fa9bfd3977068a000c8b1afe4ea721142e6598748fff2309ed89007dd0132d4e8d67a7b8f38271f586f9595b769d6e2a1797a86e302ba7821ba026966e8c1fb35f294fd574968af61265c778cbbb8d9ca5669ea4270723c6a35633223bf08297dcfa2c00d05c0c73292d417b739915cd7422503ce8f09c663f83304dd8d40e393469111d3149c438320bd6dd510e6d88da8fd9603bac108996872fc2cee9218eb8e46d330226ce3a90f6dbc371037ca8678a324b2430d6484d24c1eb854ae63f9efca5a1a03731bd6e47f77ebcad31bc6f47ff2e10646454caa78db251141533abc967b9bff4a3f0d3fbc58846b35d0b7ad5327787cffb207715a932fb31411376bb9e7851327af33fe2da10926a2bcc494c5f94177b8decb4d6c5e31616350a8ca4da555ac219772f22bb8a2cf23ccb660b310de4648eae0778cab2ccbdb55dac7451b56b4802113794ec7ca3d3fbd466d59a69e57c142d9949ecf915f49a1313c286b50dee112b2c18a079d568ebbab03463ff32d7be45ead791eaea585b929e47f364111ddbda21793f569f017c629eecb28344f80a96a695557cd75bd946efc3830d53489b04d3a03e97dd063f78b600ec3e2d8c5188ed326180ba433bbb12e8754e8032df31665e91cc7ef73acff0207c396ba4eb10910026e7cf19a9207b806e660c2b4291d2bf9d2e3fb8088a9be35341d02f869ffcd2f40b79cb71c94bf4ae5d46c12e3711428519e47568d9283b328f92c8d1d383d9b2ce8e9f8a97e7f69360f0656f44af781e83250b2e0cfc06e88f74d8b1ca9b3d7fa2c27314cadb7802db00f1bb0fc744034a7df80d9f46529a1e3bf2a65ddaf44e42cf254af66f630e116f6f7d21b9b3483ba03709c979ac3615b430f7ffb42c95708d03b6782257ed5681a3cc443f433308885883722947b6238fb9a0f67b4810aee2bfb5db8cedc12619cfee1cfb6e0e203764f77fac8e67ab15770e3f5b07c279885f9d1b73e201bd9a3a007ab52eadd419d010b0dd62255d3f1c981fb497ac69a18d316f39023ead8230dd1e1b68dd77f63da284b054e0aa131cb5d81902816b176046c16f091656689e6a1696d796650ef574d9537e40d28d1d097c5cd22e0a63cbb406d5cddcd2c7c386401b7b576f7cbf5cf9dfe724a3c455ba3aeb3d2b6f983b3edad564bfa88417c885c660c5c6561f7f8f9f0df08aabfb1132247077ff7bbe0b845ae4cbeb51b6e5e53fb404e0adfaf19443cff7258cfd5b31f77e975e51d541956d530290d8cea827216fb6c263c9ce1d845465d1ba1052d4bd09f600c53db52fe77bfd216c91cad88b67c5b382de931bb02657a6a32dfc8866e8672315d2770b413343759926a33a57fb8098e2731a4d4fd6e233945880ea524719972d7462aff7d0c6367b1af7ba99f3ed4b6a1df0cf5beb8582a68dc683b471e4b4d3cf849148346233f2af21887857995f7156d9fcc25b4844e3b9275748f75751a849b186c1c8ccc0046d4e70dbed9ead029e9ba52752074876b3d418404262278826dfd8794d4e31cf06e68dfa896b6a28a0c5dabd29a590d70bb7c458ba6c3e91c7e9cb844d6b364bda332375aa895b74e39833bf8d735db4228969bef28392803792d98ad62fe88afc410ba91502bd697fe13e9c55e376688a994364a11278357794aa96863065c376201918c15473f8d3dcfc82", 0x1000, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000001740)='\x00', 0x0, r0) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000001780)=0x7) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f00000017c0)=0x7, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000001900)={r4, &(0x7f0000001800)=':\x00', 0xd0000, &(0x7f0000001840)={@_ha_fsid={[0x6, 0x8]}, {0x0, 0xb21, 0x5, 0x235}}, 0x0, &(0x7f0000001880)={@_ha_fsid}, &(0x7f00000018c0)=0xb355}) bind$rds(r6, &(0x7f0000001940)={0x2, 0x4e24, @remote}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001980)={0x2710, 0x1, 0xeeee8000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000019c0)={0x0, @rand_addr=0x64010100, @broadcast}, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001a00)={{0x87, @local, 0x4e20, 0x0, 'lc\x00', 0xa, 0x97b5, 0x40}, {@multicast2, 0x4e23, 0x3, 0x4, 0x8, 0x1}}, 0x44) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x38, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x400) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000001c00)={0x2, 0x0, '\x00', @zc_export={r1}}, 0x0) 1.217191335s ago: executing program 3 (id=62): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) fstat(r1, &(0x7f0000003200)) 1.216403286s ago: executing program 3 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x22, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x8000) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/filesystems\x00', 0x0, 0x0) read(r5, &(0x7f0000001140)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.10873197s ago: executing program 1 (id=65): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0xf, 0x1, 0x6}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0xa}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaac87be69708990800460c003000000000ffff9078ac1414bbe00000010100000000004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002ffff9078000002041c00"], 0x0) 1.108445232s ago: executing program 3 (id=66): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x5, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a", 0x259}], 0x4}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)='3', 0x1) 938.200054ms ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000000030000080000b37f5d4d0088be86ddffff100000000100000000000000080022eb0000"], 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3b59a7b1", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250100000004000180100002800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x4044084}, 0x4) syz_io_uring_setup(0x720b, &(0x7f0000000040)={0x0, 0x3efc, 0x100, 0x2, 0x23f}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xa00, 0x0, 0x5, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = socket(0x11, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @mcast2, 0x9}, {0xa, 0x4e23, 0x61, @loopback, 0x7}, 0x0, {[0x100, 0x100, 0xd19, 0xea, 0x100, 0x3, 0x8, 0x6]}}, 0x5c) r4 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x8200, 0x0) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) openat(r2, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x7b) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x3f, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 937.91012ms ago: executing program 3 (id=68): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x40000118}]}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000000c0)={&(0x7f0000000080)=[r1], 0x2, 0x1, 0x2}) 760.208973ms ago: executing program 3 (id=69): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x776b5000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x9, 0x3}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x8402) 296.554544ms ago: executing program 2 (id=70): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000058001a00060000000200000004000480"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf25000074004e0cbded6303377e381ccaed73ff0e38c7a7e783ff6fd0efa5658d3cc264e2474d5068e1de4b8e7da23f5d50fa638dc1596414c38c43b2e3e1c476735e6f0f7ee035af5d4cdd32a53265b8e98b42dd0af047c0a92b6e33403091f36a35d9b7ebd3ec4d4918a0dae9b20d77d14f2eaa7a2b15bd97f8b6cab42c01e0e543e7ea9c", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002c0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 296.122336ms ago: executing program 2 (id=71): write(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_ublk_setup_io_uring(0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000480)=@ublk_start_user_recovery_sqe={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x3}) syz_ublk_setup_io_uring(0x1e61, &(0x7f0000000340)={0x0, 0x6814, 0x1000, 0x3, 0x8000033f, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) syz_ublk_add_dev(r1, r5, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x91}}}, 0x0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000010401040000000000000000e40010050500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x3400c080) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)={[&(0x7f0000000080)='devtmpfs\x00', &(0x7f00000000c0)='devtmpfs\x00', &(0x7f0000000140)='^1..\x00', &(0x7f0000000180)='!\\/\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='zonefs\x00', &(0x7f00000003c0)='devtmpfs\x00']}, &(0x7f0000000780)={[&(0x7f0000000580)='devtmpfs\x00', &(0x7f00000005c0)='-,\x00', &(0x7f0000000600)='zonefs\x00', &(0x7f0000000640)='$\\%\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='devtmpfs\x00', &(0x7f0000000700)='zonefs\x00', &(0x7f0000000740)='r^\x00']}, 0x400) 229.084716ms ago: executing program 1 (id=72): io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x6) shutdown(r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 227.140367ms ago: executing program 2 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000100)=""/111, &(0x7f0000000000)="70140b12db0751f32469af4df10249f805f7edcf208656810d7a5248d23cde7926d204a94c8a5528c52d74c995afe0364ec71641850c5aeeee6d9f31c06d126926f89e63dea4d23aa464", &(0x7f0000000080)="2fe9fa03be33f1281a761c62262878f15fc929db23cdd6927ba548b4261b5320b6719fd95e09a41e387d788c7d9f8f52d3b0967e32ac093e530f5602580c58cdec47c4c66859a04187c62476df4eda4317252a249b358f7053b0019923ec3d49b6982de1014b074a362ebcebdeb2337b1915261a1fb1", 0x80, r0, 0x0, 0x7}, 0xfffffffffffffe0a) 218.590807ms ago: executing program 2 (id=74): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1}, 0x20) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) 150.284738ms ago: executing program 2 (id=75): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183842, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @broadcast}, 0x10) listen(r1, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r3 = accept(r1, 0x0, 0x0) write(r3, &(0x7f0000000340)="00000080fe534d424000000000000000000001000100000000000000000000000000000000000000000000000000009e000000000000000000000000000000000000000041000100000300000000000000000000000000413100000000000000000000001000000010000000100000000000008600000000000000000000800000000000", 0x84) read(r0, &(0x7f0000000000)=""/1000, 0x3e8) write$sndseq(r0, &(0x7f0000000440), 0x0) 0s ago: executing program 1 (id=76): socket$unix(0x1, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'geneve0\x00', 0x4}, 0x18) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5378' (ED25519) to the list of known hosts. [ 41.862174][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 41.862185][ T42] audit: type=1400 audit(1787376598.784:141): avc: denied { mounton } for pid=5706 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.872044][ T42] audit: type=1400 audit(1787376598.794:142): avc: denied { mount } for pid=5706 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.874967][ T5706] cgroup: Unknown subsys name 'net' [ 41.882438][ T42] audit: type=1400 audit(1787376598.804:143): avc: denied { unmount } for pid=5706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.031444][ T5706] cgroup: Unknown subsys name 'cpuset' [ 42.037980][ T5706] cgroup: Unknown subsys name 'rlimit' [ 42.204148][ T42] audit: type=1400 audit(1787376599.124:144): avc: denied { setattr } for pid=5706 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.211221][ T42] audit: type=1400 audit(1787376599.124:145): avc: denied { create } for pid=5706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.217578][ T42] audit: type=1400 audit(1787376599.124:146): avc: denied { write } for pid=5706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.223691][ T42] audit: type=1400 audit(1787376599.124:147): avc: denied { read } for pid=5706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.231759][ T42] audit: type=1400 audit(1787376599.154:148): avc: denied { read } for pid=5433 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.239631][ T42] audit: type=1400 audit(1787376599.154:149): avc: denied { read } for pid=5433 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.247231][ T42] audit: type=1400 audit(1787376599.154:150): avc: denied { open } for pid=5433 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.248758][ T5713] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.905200][ T5706] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.141196][ T5723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.144948][ T5723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.151915][ T5723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.154569][ T5723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.156208][ T5727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.160259][ T5727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.162859][ T5727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.165152][ T5727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.166628][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.167973][ T5727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.171019][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.173386][ T5727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.175451][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.177163][ T5727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.180833][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.182093][ T5727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.185102][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.186429][ T5731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.186553][ T5727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.193635][ T5731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.688374][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.690951][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.693441][ T5732] bridge_slave_0: entered allmulticast mode [ 46.696329][ T5732] bridge_slave_0: entered promiscuous mode [ 46.700112][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.702403][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.704714][ T5732] bridge_slave_1: entered allmulticast mode [ 46.709333][ T5732] bridge_slave_1: entered promiscuous mode [ 46.715574][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.717863][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.720101][ T5729] bridge_slave_0: entered allmulticast mode [ 46.722694][ T5729] bridge_slave_0: entered promiscuous mode [ 46.725725][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.730511][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.732663][ T5729] bridge_slave_1: entered allmulticast mode [ 46.735173][ T5729] bridge_slave_1: entered promiscuous mode [ 46.779343][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.792608][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.801747][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.805561][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.821200][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.823578][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.825885][ T5721] bridge_slave_0: entered allmulticast mode [ 46.828485][ T5721] bridge_slave_0: entered promiscuous mode [ 46.850270][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.852533][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.854807][ T5721] bridge_slave_1: entered allmulticast mode [ 46.857544][ T5721] bridge_slave_1: entered promiscuous mode [ 46.867035][ T5732] team0: Port device team_slave_0 added [ 46.869849][ T5729] team0: Port device team_slave_0 added [ 46.884676][ T5732] team0: Port device team_slave_1 added [ 46.888218][ T5729] team0: Port device team_slave_1 added [ 46.890080][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.892426][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.894870][ T5720] bridge_slave_0: entered allmulticast mode [ 46.897527][ T5720] bridge_slave_0: entered promiscuous mode [ 46.900688][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.902983][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.905198][ T5720] bridge_slave_1: entered allmulticast mode [ 46.908131][ T5720] bridge_slave_1: entered promiscuous mode [ 46.923318][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.947767][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.950633][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.961223][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.974689][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.989759][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.991978][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.002546][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.006809][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.008879][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.016567][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.020689][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.022866][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.030674][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.035571][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.057183][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.060801][ T5721] team0: Port device team_slave_0 added [ 47.064014][ T5721] team0: Port device team_slave_1 added [ 47.087307][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.089499][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.097370][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.101605][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.103718][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.111633][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.137621][ T5720] team0: Port device team_slave_0 added [ 47.145762][ T5720] team0: Port device team_slave_1 added [ 47.161792][ T5732] hsr_slave_0: entered promiscuous mode [ 47.164066][ T5732] hsr_slave_1: entered promiscuous mode [ 47.168958][ T5729] hsr_slave_0: entered promiscuous mode [ 47.171462][ T5729] hsr_slave_1: entered promiscuous mode [ 47.173604][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.175411][ T5729] Cannot create hsr debugfs directory [ 47.188846][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.191013][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.198901][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.224103][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.226294][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.234002][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.240086][ T5721] hsr_slave_0: entered promiscuous mode [ 47.242237][ T5721] hsr_slave_1: entered promiscuous mode [ 47.244154][ T5721] debugfs: 'hsr0' already exists in 'hsr' [ 47.245942][ T5721] Cannot create hsr debugfs directory [ 47.316821][ T5720] hsr_slave_0: entered promiscuous mode [ 47.318986][ T5720] hsr_slave_1: entered promiscuous mode [ 47.321003][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 47.322787][ T5720] Cannot create hsr debugfs directory [ 47.501591][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.508964][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.526569][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.530224][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.541128][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.544918][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.552620][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.556041][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.588940][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.596537][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.599193][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.602883][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.605641][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.611807][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.615435][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.621490][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.674511][ T5721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.679037][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.681923][ T5721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.685316][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.688362][ T5721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.692763][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.695785][ T5721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.699483][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.768603][ T5720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.772739][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.775406][ T5720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.779130][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.781636][ T5720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.785139][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.788249][ T5720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.791627][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.800528][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.830369][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.836932][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.842700][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.845197][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.855218][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.857509][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.878172][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.883174][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.890128][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.892953][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.909614][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.911815][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.922226][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.934708][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.936983][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.943543][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.946245][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.993183][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.029846][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.041118][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.047816][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.050039][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.057839][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.060645][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.100608][ T5720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.212329][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.228290][ T5731] Bluetooth: hci2: command tx timeout [ 48.230416][ T5731] Bluetooth: hci3: command tx timeout [ 48.232528][ T5725] Bluetooth: hci1: command tx timeout [ 48.233330][ T5735] Bluetooth: hci0: command tx timeout [ 48.249932][ T5729] veth0_vlan: entered promiscuous mode [ 48.259429][ T5729] veth1_vlan: entered promiscuous mode [ 48.286498][ T5729] veth0_macvtap: entered promiscuous mode [ 48.292364][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.297131][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.300307][ T5729] veth1_macvtap: entered promiscuous mode [ 48.315372][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.322763][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.349168][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.353195][ T5732] veth0_vlan: entered promiscuous mode [ 48.390322][ T5721] veth0_vlan: entered promiscuous mode [ 48.393996][ T5732] veth1_vlan: entered promiscuous mode [ 48.413216][ T5721] veth1_vlan: entered promiscuous mode [ 48.426038][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.427105][ T5720] veth0_vlan: entered promiscuous mode [ 48.430201][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.441148][ T5732] veth0_macvtap: entered promiscuous mode [ 48.444389][ T5720] veth1_vlan: entered promiscuous mode [ 48.456382][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459845][ T5732] veth1_macvtap: entered promiscuous mode [ 48.470121][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.472654][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.474174][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.480546][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 48.480554][ T42] audit: type=1400 audit(1787376605.404:168): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.489833][ T42] audit: type=1400 audit(1787376605.404:169): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.HUO6WG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.497536][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.497821][ T42] audit: type=1400 audit(1787376605.404:170): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.505517][ T5721] veth0_macvtap: entered promiscuous mode [ 48.507019][ T42] audit: type=1400 audit(1787376605.404:171): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.HUO6WG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.514003][ T5721] veth1_macvtap: entered promiscuous mode [ 48.517236][ T42] audit: type=1400 audit(1787376605.404:172): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.HUO6WG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.526937][ T42] audit: type=1400 audit(1787376605.414:173): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.529821][ T5720] veth0_macvtap: entered promiscuous mode [ 48.532871][ T42] audit: type=1400 audit(1787376605.424:174): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.541921][ T42] audit: type=1400 audit(1787376605.424:175): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="gadgetfs" ino=9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 48.546330][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.549393][ T42] audit: type=1400 audit(1787376605.424:176): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.552788][ T5720] veth1_macvtap: entered promiscuous mode [ 48.558580][ T42] audit: type=1400 audit(1787376605.424:177): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.572744][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.573778][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.588092][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.599934][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.604193][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.616966][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.645180][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.649837][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.669164][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.671885][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.721169][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.726002][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.756474][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.759559][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.762727][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.766916][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.800982][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.803653][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.805103][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.806373][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.826400][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.830007][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.846438][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.849384][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.852088][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.854794][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.897109][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.900701][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.903523][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.906782][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.909567][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.930699][ T5896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.934111][ T5897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.943950][ T5901] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.947729][ T5901] ata1.00: invalid service action 19 [ 49.125597][ T5924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 49.151178][ T5926] jffs2: notice: (5926) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.246835][ T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.409151][ T62] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.413564][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.417247][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.421311][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 49.424834][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.434157][ T62] usb 8-1: config 0 descriptor?? [ 49.582585][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 49.641918][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 49.644756][ T5948] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 49.647405][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 49.653284][ T5948] geneve2: entered promiscuous mode [ 49.655223][ T5948] geneve2: entered allmulticast mode [ 49.854351][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.857846][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.868522][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 49.871134][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 49.881506][ T62] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 50.017291][ T5959] cgroup: Unknown subsys name 'fsuuid' [ 50.017828][ T5960] 9pnet_virtio: no channels available for device syz [ 50.249759][ T5966] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 50.260174][ T5966] team0: Device wg2 is of different type [ 50.306234][ T5735] Bluetooth: hci0: command tx timeout [ 50.306274][ T5725] Bluetooth: hci3: command tx timeout [ 50.309820][ T5731] Bluetooth: hci2: command tx timeout [ 50.390012][ T5976] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 50.454851][ T5980] Zero length message leads to an empty skb [ 50.536776][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.640926][ T5997] overlayfs: failed to resolve './file0': -2 [ 50.700413][ T5725] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 50.700451][ T5725] Bluetooth: hci0: Malformed LE Event: 0x02 [ 50.844856][ T6007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.869614][ T62] usb 6-1: unable to get BOS descriptor or descriptor too short [ 50.872030][ T62] usb 6-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 50.875518][ T62] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 50.878432][ T62] usb 6-1: can't read configurations, error -71 [ 50.927601][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 51.207283][ T5831] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 51.426554][ T5731] Bluetooth: hci1: command tx timeout [ 51.647742][ T6049] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.747888][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 51.799976][ T6063] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 52.382631][ T24] usb 8-1: USB disconnect, device number 2 [ 52.386309][ T5725] Bluetooth: hci0: command tx timeout [ 52.386659][ T5731] Bluetooth: hci2: command tx timeout [ 52.424320][ T6105] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 52.464802][ T6105] netlink: 6 bytes leftover after parsing attributes in process `syz.2.67'. [ 53.002351][ T6112] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 53.006969][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 53.151951][ T6127] CIFS: Attempting to mount //127.0.0.1/share [ 53.156364][ T6127] CIFS: VFS: Error connecting to socket. Aborting operation. [ 53.159270][ T6127] CIFS: VFS: cifs_mount failed w/return code = -111 [ 53.350099][ T6130] [ 53.350909][ T6130] ====================================================== [ 53.353361][ T6130] WARNING: possible circular locking dependency detected [ 53.355517][ T6130] syzkaller #0 Tainted: G L [ 53.357444][ T6130] ------------------------------------------------------ [ 53.359588][ T6130] syz.1.76/6130 is trying to acquire lock: [ 53.361368][ T6130] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 53.364211][ T6130] [ 53.364211][ T6130] but task is already holding lock: [ 53.366472][ T6130] ffff8880272d6100 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 53.369283][ T6130] [ 53.369283][ T6130] which lock already depends on the new lock. [ 53.369283][ T6130] [ 53.372410][ T6130] [ 53.372410][ T6130] the existing dependency chain (in reverse order) is: [ 53.375138][ T6130] [ 53.375138][ T6130] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 53.377475][ T6130] lock_acquire+0x1b9/0x370 [ 53.379178][ T6130] __mutex_lock+0x1a4/0x1bc0 [ 53.380754][ T6130] blkcg_activate_policy+0x34f/0xbf0 [ 53.382554][ T6130] blk_throtl_init+0x39a/0x5b0 [ 53.384217][ T6130] tg_set_conf.isra.0+0x252/0x500 [ 53.386501][ T6130] cgroup_file_write+0x1e6/0x8a0 [ 53.388549][ T6130] kernfs_fop_write_iter+0x3e0/0x5f0 [ 53.390798][ T6130] vfs_write+0x6af/0x1050 [ 53.392759][ T6130] ksys_write+0x12a/0x250 [ 53.394726][ T6130] do_syscall_64+0x123/0x790 [ 53.396847][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.399474][ T6130] [ 53.399474][ T6130] -> #1 (&q->q_usage_counter(io)#2){++++}-{0:0}: [ 53.402691][ T6130] lock_acquire+0x1b9/0x370 [ 53.404685][ T6130] blk_alloc_queue+0x610/0x790 [ 53.406899][ T6130] __blk_alloc_disk+0xa0/0x170 [ 53.409084][ T6130] brd_alloc.isra.0+0x41a/0x820 [ 53.411339][ T6130] brd_init+0x167/0x190 [ 53.413319][ T6130] do_one_initcall+0x11c/0x6f0 [ 53.415525][ T6130] kernel_init_freeable+0x6ea/0x7b0 [ 53.417912][ T6130] kernel_init+0x21/0x1e0 [ 53.419951][ T6130] ret_from_fork+0x730/0xd60 [ 53.422100][ T6130] ret_from_fork_asm+0x1a/0x30 [ 53.424201][ T6130] [ 53.424201][ T6130] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 53.427065][ T6130] check_prev_add+0xeb/0xe60 [ 53.429150][ T6130] __lock_acquire+0x1492/0x1ec0 [ 53.431299][ T6130] lock_acquire+0x1b9/0x370 [ 53.433396][ T6130] fs_reclaim_acquire+0xc4/0x100 [ 53.435664][ T6130] kmem_cache_alloc_noprof+0x63/0x6a0 [ 53.438110][ T6130] __radix_tree_preload+0x333/0x820 [ 53.440431][ T6130] blkg_conf_prep+0x489/0xf10 [ 53.442604][ T6130] tg_set_conf.isra.0+0x1ed/0x500 [ 53.444896][ T6130] cgroup_file_write+0x1e6/0x8a0 [ 53.446922][ T6130] kernfs_fop_write_iter+0x3e0/0x5f0 [ 53.449177][ T6130] vfs_write+0x6af/0x1050 [ 53.450694][ T6130] ksys_write+0x12a/0x250 [ 53.452227][ T6130] do_syscall_64+0x123/0x790 [ 53.453800][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.455780][ T6130] [ 53.455780][ T6130] other info that might help us debug this: [ 53.455780][ T6130] [ 53.458989][ T6130] Chain exists of: [ 53.458989][ T6130] fs_reclaim --> &q->q_usage_counter(io)#2 --> &q->blkcg_mutex [ 53.458989][ T6130] [ 53.463217][ T6130] Possible unsafe locking scenario: [ 53.463217][ T6130] [ 53.465494][ T6130] CPU0 CPU1 [ 53.467102][ T6130] ---- ---- [ 53.468938][ T6130] lock(&q->blkcg_mutex); [ 53.470336][ T6130] lock(&q->q_usage_counter(io)#2); [ 53.472784][ T6130] lock(&q->blkcg_mutex); [ 53.474886][ T6130] lock(fs_reclaim); [ 53.476126][ T6130] [ 53.476126][ T6130] *** DEADLOCK *** [ 53.476126][ T6130] [ 53.478815][ T6130] locks held by syz.1.76/6130: 6, last CPU#2: [ 53.480707][ T6130] #0: ffff8880383ffeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 53.483541][ T6130] #1: ffff888026cae460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 53.486715][ T6130] #2: ffff888038101880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 53.490301][ T6130] #3: ffff88805ce51788 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 53.493352][ T6130] #4: ffff8880272d5f80 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 53.496781][ T6130] #5: ffff8880272d6100 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 53.500294][ T6130] [ 53.500294][ T6130] stack backtrace: [ 53.502779][ T6130] CPU: 2 UID: 0 PID: 6130 Comm: syz.1.76 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.502807][ T6130] Tainted: [L]=SOFTLOCKUP [ 53.502814][ T6130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.502825][ T6130] Call Trace: [ 53.502832][ T6130] [ 53.502839][ T6130] dump_stack_lvl+0x100/0x190 [ 53.502867][ T6130] print_circular_bug.cold+0x178/0x1be [ 53.502897][ T6130] check_noncircular+0x146/0x160 [ 53.502934][ T6130] check_prev_add+0xeb/0xe60 [ 53.502959][ T6130] ? check_noncircular+0x97/0x160 [ 53.502984][ T6130] __lock_acquire+0x1492/0x1ec0 [ 53.503015][ T6130] lock_acquire+0x1b9/0x370 [ 53.503040][ T6130] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 53.503069][ T6130] fs_reclaim_acquire+0xc4/0x100 [ 53.503096][ T6130] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 53.503120][ T6130] kmem_cache_alloc_noprof+0x63/0x6a0 [ 53.503145][ T6130] ? find_held_lock+0x2b/0x80 [ 53.503165][ T6130] ? __radix_tree_preload+0x2f4/0x820 [ 53.503194][ T6130] ? __radix_tree_preload+0x333/0x820 [ 53.503222][ T6130] __radix_tree_preload+0x333/0x820 [ 53.503251][ T6130] blkg_conf_prep+0x489/0xf10 [ 53.503273][ T6130] tg_set_conf.isra.0+0x1ed/0x500 [ 53.503296][ T6130] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 53.503322][ T6130] ? kernfs_root+0xf8/0x2a0 [ 53.503340][ T6130] cgroup_file_write+0x1e6/0x8a0 [ 53.503359][ T6130] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 53.503382][ T6130] ? __pfx_cgroup_file_write+0x10/0x10 [ 53.503403][ T6130] kernfs_fop_write_iter+0x3e0/0x5f0 [ 53.503424][ T6130] ? __pfx_cgroup_file_write+0x10/0x10 [ 53.503444][ T6130] vfs_write+0x6af/0x1050 [ 53.503468][ T6130] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 53.503492][ T6130] ? __pfx_vfs_write+0x10/0x10 [ 53.503513][ T6130] ? find_held_lock+0x2b/0x80 [ 53.503541][ T6130] ksys_write+0x12a/0x250 [ 53.503564][ T6130] ? __pfx_ksys_write+0x10/0x10 [ 53.503585][ T6130] ? trace_syscall_enter+0xd6/0x100 [ 53.503605][ T6130] do_syscall_64+0x123/0x790 [ 53.503626][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.503645][ T6130] RIP: 0033:0x7f774219e0d9 [ 53.503660][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.503679][ T6130] RSP: 002b:00007f77430b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.503697][ T6130] RAX: ffffffffffffffda RBX: 00007f7742425fa0 RCX: 00007f774219e0d9 [ 53.503710][ T6130] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000007 [ 53.503722][ T6130] RBP: 00007f7742235024 R08: 0000000000000000 R09: 0000000000000000 [ 53.503735][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.503747][ T6130] R13: 00007f7742426038 R14: 00007f7742425fa0 R15: 00007ffcddbb1238 [ 53.503765][ T6130] [ 53.536127][ T5731] Bluetooth: hci1: command tx timeout [ 54.466428][ T5731] Bluetooth: hci2: command tx timeout [ 54.466468][ T5725] Bluetooth: hci0: command tx timeout