last executing test programs: 1m23.700031562s ago: executing program 3 (id=20): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x7}, 0x1c) get_robust_list(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x802}, 0xe) listen(r4, 0x1) r5 = inotify_init() add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f00000010c0)="44c5b6c2d2bdde06c86ceb0b3c9444eae7ba50a829330f9991277d73626fbfcd137e9bd171c7eb82f4e40b4a558f5c543d206671f928cbb148109e07706d3ffaf8086bfd7e93f0321c6c3974c499ab8aaa0cd0793bed610b0abe0eaba57f510c16a2c6530e79ef1ae8e3c5080ff719caa057171c0e1ac01fd49230e3af1e6ccf23d7ae0b1d613f62c6a9aa2dc974b4543cf0a12839ef14d1e7854ac0c569337f419029c8c3b887ee7b59c3d86b05431157e2aa7209011e50074acd55bd9f0c126e319ef518f12c05c7cce752a5d58189fe8162b9b92c5cd871aaa4b1586f1cc5343cedaadbc30b79ad9cd0b1847142c2dd5fe4e3247298f8cee16c8467f0ee93e5ff4538e522b4ada33d1f9f9d15f5832d2007ded8185e8ec69b1cb8a5ff9d9d0b6bfe32747041c2c8d56d40a94beb2f2822437cdae9ea2a048bc7ddbd9631aeca7f3cc29a0499696908fbaa57e276e36d70da1d1e0a9d1494dce589cee3a43a91814bb2607b1b0e52ca10796e6534d22c1243ea479da4761953f3afb7d9f13f333d1c34e228d413cc473626dd32e0094259702e2ea861c84c88a0bed94af2840208462623fe151a392f8f22e6318c63ca345bc844716ba0e9d94ee48b43ae9dfcda11c8a17f3891f84837fe9a481fe93ca4050e7a92d49c89e78ad32b7829214900e3b134c59c17856d94290869f1e891692d154eee8c0be8cc70d8e59b9d9996402f0ec000b823d193da0bd2dc64f1d9d0570d9be927ece61a5c141f87ded7d24ea2d906f7805f5c19e464c9163075cd06ebfbaab9b0f8fd3fd8acf16170759eaf886d3f3773cd24d16382b1b4fea7cb4846825097fc01225ab550b19ca72ca6402eb823e7778820d1712a74b59ef4e2bab55b4cf2a39982b539cf4782e4cfa49eda2e6c3c82b0c16fe35004f5f958b02c65e8e52a39731b3db47621d53b4c07c1ed61614a4ac73486fd655784d49c90d2828214840a20d947db34a2383da30590886941348b5483afe25ddba50e4ff413f61fe2619e0d23292be71c061743c0eaaf236fbaf49a4634155348dfcd6512eb291ca04896849dcf2d5a933be93379ba32f1ced5dc0865aba5dcdd28adf47c40b2390fdf50c06d9ee898abdfeed32278c670ffc8eeeeb9ce6d01eaa010dc5835075c0663d0f20901cb3cd4e5db64b2bab0c6bfb5335d94cef05c1534234dd58392acdfd73041af9155ca72a047e4a610802ca50444a03f41f95366a620d54dad1e06d182763d243d8a162a1153a960e1ed29cb8eb46b6feff5e31b32b10cf2e71bb4175767863b884c739409effe87aade00ed7e94a27b17e80c5897b9a9bce1de0c6cfe5fdea41a10cb48fcbe651ddc85e2fe30935ceae9c04a99d60a6ab6497acf07e6aaa5a7775f9936cde4418c1147d848b7756b545a4f0919fd105a9d3118decbd0824123e7f2ee9e3a64cf6e59124c1ab663cfb32cf2148c209eb367d48377623a75c6e2b390311f8cc5aacf8d0853b848704908a59c83e0cbc92a7827864102d46577d643a1987a13c25add3ce73b21a27a555f9e2ad3a6c5ce6dcedfd0feb54bc11b2a05a6d5f8b3cdba8d049152ad97fa01d4899d28a7d79121b5fe1e1c15ccf02bba9b5618da447ef223f08724fe52e1d35708a1532d5a8720b04cdc98e27b86b2aa4794e7458ca84fbb7a555aec8a258b589e0afd55e4dc6e0c1e6f3e97e980b6fd30679aa800c45fe9ea9a02f4e3867fb015458481e6f1a120d237d2d5a1c9161124b908cc7da5af089077e70c8a966b148bc7638e3026956df1f92d03812a90a809d071de5449171b8b9379281598b7c7204c4a7372d6f5a2f1db26d124d63c168e60944cc9c3a443ef3ec4abed8ef875c4106cd62edbbabec5acebb557569372348cb989f70e8a15274af5fbf66fabaceb97eaf9be0f8ff84700d09ed4915326c7cfe184fea6a74afa403ea132fe57689fbd21480896abb3997b6e1de403bba9f9289d41b9eb21d7282a4c8d87ce44ebd42245753908bf39db60129b4e15d91b809ba4aa1b68d9d2fb4d2634321ccbd41dae687d9d9cc9837e8d4a1543dc89bff8f684cd41c8d5110d07f16c856b21abbc3a2c6f96d49051820efc0260890d39060708d53b7e8a979724448f3f7311d1f4612cad9831f4fe825cf1e6ac9724a6a79115290998fd05f8fa98ff7887f43dd1d7ec954632d8f4d128d4d9566481c126d7d8fa6a57347aedbebf45ab55923670d45e4739ba6f67cc069ef4a32ac2abeec23da6b69951acbb2d0616c67e3892929eda3524dd17e72d5752733ee786da4417a186deae43601cab7733d94a5736d957000111c35177d80393f6eaa247600e3c400213d1c023db20bd71f2497b91ec9bc018557b45ff130f666e2f0224a48afff6eb3b08768d18ab5fc7e70f31032027709d5de923678264a0d3cc2d1ea05ebad610552fbd7e819da95fe13308445b4f0f5e12bfbbf902942cf0be673e79b35d8e59c91df5409d5fa6df7ee73bb7819bef4d61e3ce4512ec7e301a65ff6970ff5e819275a0011cf29a89d02c4e21d70f2bbe29cdf8e7f093fd8ce3fe07a452165b6d7c37d4f8c608faa97a207b93e6dfdfa57810063c0a65a6ccd041c1a7c13737ec776050dd59c634a176cebb6bb4be341bfaffb16d374ea72e2b5e35ffb2dee84ea8fbd2bad9097e249814239d68a5abed4fa25286505a7022206743cdfaeac4d72fed7e0f3c84ef494e4136ba949bf5c9fa225bd64b2616b86861f5277d84853960ce508b056c96ea26561b483184bd057a334f9f8ee94a34593b35f9d302ac6e4405331da7c006d2d12496bd5d8003dea600e257faefbb8e639ddd016cf890c8493497e3244e21b4be0353139bf8d3c8628956d0a1b0fbf4f55702bc5326450ab63b61a1933820b14de63a1c17d97dfc1d5bf81e8f6707dd655aec46185bdc6c86ffdf05eee1ff82f804aac3df7f86f1420c895707c20b5b328859819beeb51a2302a89d614ff4e63fe113b608eee5d01e6c5ed2394bade0389a7462fccae83db4f805aa67d04e1fb6209b07d79e742f8080efa3e2ade2d48819d64975419f1644831c404510a01b78b39eb3a15831fe919f544b16db79937311ec247cd141ab634ccf1703513cdc37a0f387c558b9aa1678b67ee358dfd5d1ac305f60d20a9bb3bd946c4a061d237eb1710f51d304be32957c0b213ab7f1751984a4fa9e8217af6724bd77b761add8de2fca9d2d10e6448f33abf38abd51b7e2a7de1292e40ed0d9176f7b0178e204265a23e4c3c3a3f4d9a2e406340cedde6b8698d7eee9d22bdbda79bb39c6e8116d9f479627b9ef2c42f8e19a1bd1beea367e5e216dd9500e374d26b6ada289426e40da1c8a3b17fef147ba89df800f4c3f4b84b6666f7846be6d7bc4d4d47e0d87bc4c712788120bacdff53d645c311ebec4ee1e320bf0675479b6acdc565df404adbc2955e617264bc026a5ecdc705d3a5a5fead945a95ee17cae124a7def612e7ca0e3b1ed3cab15b90766ab7f683b6ca0a566aea661a5e8328f87617c77eaf44a99050bc05a3d0644e4c6bb293d8bc17e6bfa15aa34abb1a5b99010840632abd3183fef687c390b3d6fe38e70c90ecd06ac4e226670b4941a39178a74e3a8d22bd963cf975f422078a559c535d11d3a202d26913207a927f749a50d06de117429e418dbcc8fd30e32d46976c72a85ef6f0b4027f00323c3251c30bcd090c13d491a57f5353bd96507efd7b1a297e0452b93016295f1526093dbf3aa91cdf5865b625d33638dd43eddfce3ccb13ad8f9cdd4a74e940e11ebb2ced73ce75436c881a36da4244dfcf0ab8179b73889e54d8549aade700a19cee821759ad31c5171f1624dcfaa6415bdb4b6f9bf2bb68ad691796acbefa134b1bf21d7b4ca3688d7747743dade27e2948c143d6a350591c03dc0daa52205de59468af566d7a1f129741fc42c133cd300fdbc950aa3f8171ed050e9809bcbc9092341c0206ba7690155cc0408cc7ce86a12fd91f65f4690d8328cac6e6b4b1cd68cc3ab76e9b4828f4a71012b4f649d253318845dfe7cf7951823829bf27cf7f7ccaa8cca249f08b4b90c39510d3492576e19a7ed0d8773691b5cac3b030515f0d483f04f94a7be3a690f56c4068acaf444990fff976f397c1e33514706b7e1aeb89936a9b5c3a8774164fc613dc0510acd4ceaa8fad18bb426a31147f433854a17622e1b407bf82528a2d4e6f66ffb61897201f5a91f5b9cf5a7c9bd47f0238338798ace3d383d462203a1f2ddfa4e14a7fc8634e6e9f44dc692aa4fca457b5c4b38f194c729093f7c6716c1bc48519f80ec77d1d635dc4b885ff90ad5", 0xbfc, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x540b, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x6, 0x5, 0x18, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x1, 0x7, 0xfffff000}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x29, r6}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0fd00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005a000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x0, 0x10, &(0x7f0000001080), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc939fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000005]}}) 1m23.650146478s ago: executing program 3 (id=21): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x5c) r1 = syz_io_uring_setup(0x738a, &(0x7f0000000000)={0x0, 0x5ce7, 0x1000, 0x0, 0x378}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000180)={0x0, 0x46fa, 0x40, 0x2, 0x35b, 0x0, r1}, 0x1) write(r0, &(0x7f0000000200)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) 1m23.647998107s ago: executing program 3 (id=22): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delnexthop={0x38, 0x69, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x21be, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x44040044) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002142, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 1m23.540874052s ago: executing program 3 (id=23): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000540)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x4000000000000000, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) chdir(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file1\x00') mknod$loop(&(0x7f0000000700)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000001c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000003c80)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000003d00)="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", 0x2000, &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005dc0)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000005e00)='./file0\x00', 0x80101, 0x101) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000005e40)={0x0, 0x0, 0x5, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="c223e1e60336d2c70c870ef565844f721084aef5268cc4196357da3dd981bb3f2c1d1bd3bf4d80230d296990555fba960fac049ea4af378e6824b0a2136e66a2fa", @ANYBLOB="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", @ANYRES16=r3], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x3}, [@NHA_OIF={0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000280)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f0000000340)=0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x1000}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000400)={r10, 0xfff5}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f00000000c0)}, 0x20) 1m20.400608953s ago: executing program 3 (id=41): syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x4, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x3ff, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x2, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x1, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x1000000, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x82000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0xfffffff7, 0x7e, 0x100, 0xca9, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x14, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m20.051092876s ago: executing program 3 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000180)={r4, 0x0, 0xfffffffffffff000, 0x1000000}) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x1, {0x0, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x378, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xf}, {0xfff1, 0xffff}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x17}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_basic={{0xa}, {0x338, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}, @TCA_BASIC_ACT={0x128, 0x3, [@m_mpls={0x124, 0x15, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0xac, 0x4, 0x0, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0xa, 0x4, 0x3, 0xc98b}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x1, 0x4, 0xc54f}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}]}, {0x7b, 0x6, "e86d31b8758f4e8331c0a6c829573f43c2dfac0695b4fc7a2b5f75422eda3e88b24494ce91e00f0873b1677ad604692d8f10a79beef6116d0bce9ab0623959ab775064980b6d709ab12679e6e5d06e117376ed4a3781b85f2e2da4bb61654971cfd5fd6b52ce429fc6089f43f22f034c778d22e3adf3fb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x1f8, 0x3, [@m_skbedit={0xfce6, 0x12, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0xb, 0x2, 0x6, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x29, 0xb, 0xba, 0xc000000}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x8, 0x1, 0x97}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xf}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x154, 0x11, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @rand_addr=0x64010101}]}, {0xce, 0x6, "191c89405b7154d4afe8a3aac59611b0d6eecb4c9b85f561adc0902b704a2939dc48ec08b99ebbf883395f17a1d4a1ab62024e8d0973ce6413053f43dde07c4f82334f598ebd4687ebd6946665185189c6eb9ceb61d79ebd12611db41e2eee4a121fd8bc8af8106e24d066d322c167cebc97cb73b54643a6c86790e4d52947537d847977fccfcca0bf57a2d4f012c7978b53d2f43fedd9004b59b6805712b5408f43f3e909357abd6917ca72f8e5a4cca0292fe0158ace9b863d081ac2454f6a2af51db39e685500d4e8"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x378}, 0x1, 0xf0ffffffffffff, 0x0, 0x40881}, 0x24040055) 1m20.015453382s ago: executing program 32 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000180)={r4, 0x0, 0xfffffffffffff000, 0x1000000}) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x1, {0x0, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x378, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xf}, {0xfff1, 0xffff}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x17}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_basic={{0xa}, {0x338, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}, @TCA_BASIC_ACT={0x128, 0x3, [@m_mpls={0x124, 0x15, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0xac, 0x4, 0x0, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0xa, 0x4, 0x3, 0xc98b}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x1, 0x4, 0xc54f}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}]}, {0x7b, 0x6, "e86d31b8758f4e8331c0a6c829573f43c2dfac0695b4fc7a2b5f75422eda3e88b24494ce91e00f0873b1677ad604692d8f10a79beef6116d0bce9ab0623959ab775064980b6d709ab12679e6e5d06e117376ed4a3781b85f2e2da4bb61654971cfd5fd6b52ce429fc6089f43f22f034c778d22e3adf3fb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x1f8, 0x3, [@m_skbedit={0xfce6, 0x12, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0xb, 0x2, 0x6, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x29, 0xb, 0xba, 0xc000000}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x8, 0x1, 0x97}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xf}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x154, 0x11, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @rand_addr=0x64010101}]}, {0xce, 0x6, "191c89405b7154d4afe8a3aac59611b0d6eecb4c9b85f561adc0902b704a2939dc48ec08b99ebbf883395f17a1d4a1ab62024e8d0973ce6413053f43dde07c4f82334f598ebd4687ebd6946665185189c6eb9ceb61d79ebd12611db41e2eee4a121fd8bc8af8106e24d066d322c167cebc97cb73b54643a6c86790e4d52947537d847977fccfcca0bf57a2d4f012c7978b53d2f43fedd9004b59b6805712b5408f43f3e909357abd6917ca72f8e5a4cca0292fe0158ace9b863d081ac2454f6a2af51db39e685500d4e8"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x378}, 0x1, 0xf0ffffffffffff, 0x0, 0x40881}, 0x24040055) 1m18.137278791s ago: executing program 4 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0xb0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_IFACE={0x14, 0x17, 'gretap0\x00'}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8b91}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000054) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) (async) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) (async) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000680)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffe) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 1m17.810881369s ago: executing program 4 (id=63): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/17, 0x11}], 0x1, 0x1, 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0b4a4d3912005765100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000802000000000008001d00c70e0000"], 0x28}}, 0x0) 1m17.810300053s ago: executing program 4 (id=64): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="080000000100000002"], 0x80) 1m16.938235419s ago: executing program 4 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000041000100fcff870004000000010000000400488014000180100010800400058008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3fe}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x440b0) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)='}', 0xffffffd5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) chroot(&(0x7f0000000440)='./file0/../file0\x00') mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2a1d804, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/../file0\x00') (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m16.310763447s ago: executing program 4 (id=74): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b000000000000c300", 0x12, 0x48840, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f0000001800)=""/150, 0x96}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/4105, 0x1009}, {&(0x7f0000001600)=""/122, 0x7a}], 0x7}, 0x10001}], 0x1, 0x40010160, 0x0) recvfrom(r0, &(0x7f0000001680)=""/228, 0xe4, 0x10102, &(0x7f0000001780)=@pppoe={0x18, 0x0, {0x3, @multicast, 'ip6_vti0\x00'}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1m14.120294089s ago: executing program 4 (id=92): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x804, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)="8a14", 0x2, 0x40000100, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0xff}, 0x20) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f00000001c0)={0x4, {"0dbad908ff002484000100", "3dfab043e15fad27a639f1050400f977", "a7000000ff4a70f300"}, 0x7}) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000300)=""/1, 0x1}], 0x1, 0x1, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.054125586s ago: executing program 33 (id=92): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x804, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)="8a14", 0x2, 0x40000100, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0xff}, 0x20) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f00000001c0)={0x4, {"0dbad908ff002484000100", "3dfab043e15fad27a639f1050400f977", "a7000000ff4a70f300"}, 0x7}) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000300)=""/1, 0x1}], 0x1, 0x1, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) 56.970690226s ago: executing program 1 (id=241): socket(0xb, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x40}}}, 0xa) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe82c2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000740)='./file0\x00') creat(&(0x7f0000000780)='./bus\x00', 0x24) r1 = socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000980)='./file0\x00') unlink(&(0x7f00000009c0)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x4, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x80840) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000800)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000840)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1001}}}}}}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) 56.120625631s ago: executing program 1 (id=251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000a40)={0x5, &(0x7f0000000a80)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b40)={'pimreg0\x00', 0x7c2}) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x14) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_permission\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 55.530867403s ago: executing program 1 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000180)={0x4000000, 0x1f, 0x0, 0x0, 0x80000000}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8, 0x0, r0}) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) 55.530549003s ago: executing program 1 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x950d3, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) 55.434638206s ago: executing program 1 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x100}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 55.170902423s ago: executing program 1 (id=258): syz_open_procfs(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000300)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x38) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@dyn}]}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x2008834, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@xino_on}]}) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x800000, 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x800000, 0x0) 55.144380438s ago: executing program 34 (id=258): syz_open_procfs(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000300)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x38) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@dyn}]}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x2008834, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@xino_on}]}) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x800000, 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x800000, 0x0) 34.980546408s ago: executing program 2 (id=474): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1001}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x2}}]}}, 0x11) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000300)=[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xe305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x40000, 0x0, 0x70, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f3, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000001, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e3f95f9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffdc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0xb6, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000], 0x1, 0x400, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000001300)={@hyper, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000001340)=@filename='mtd0\x00', &(0x7f0000001380)='./mnt\x00', &(0x7f00000013c0)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/fillfile\x00', 0x42, 0x9f) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_conf_req={{0x4, 0x3, 0xf}, {0x40, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0xa, 0x3, 0x64, 0x3e8, 0x2a0}}]}}]}}, 0x1e) 34.383762864s ago: executing program 2 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r1, &(0x7f0000000480)) r2 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x22380, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0xf, &(0x7f0000000300)=[0x0, 0xfffffffb, 0x6, 0xb, 0x661, 0xfffffff9, 0x1c4, 0xffffffd7, 0x9, 0xf5, 0x1, 0x2, 0xffffffff, 0x105, 0x86], 0x0, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000100000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0xfffd, 0x1) 34.30065677s ago: executing program 2 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000600)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000640)={0x0, 0x40, 0x2, 0x0, 0x10, 0xfffffed8, 0x10, 0xfffffed8, 0x20, 0x1, 0x20, 0x1, &(0x7f00000006c0)=[0x0], 0x1, 0x0}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x37}]}) r5 = io_uring_setup(0x524, &(0x7f0000000240)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000340)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source', 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000800)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, 0x0, &(0x7f0000000880)) io_uring_enter(r5, 0x7b2, 0x93ad, 0x50, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020200011800e000100636f6e6e6c696d69740000000c000280080001400000000014000000100a"], 0xa4}}, 0x4) 34.13013546s ago: executing program 2 (id=487): r0 = open$dir(&(0x7f0000000040)='./sys\x00', 0x400000, 0x40) mkdirat(r0, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000020280)='sysfs\x00', 0x7930dfd3b444738a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)={0x84b01, 0x35, 0x5a}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)={0x800, 0x0, 0x1}, 0x18) renameat2(r2, &(0x7f00000000c0)='./sys/bus/serio/devices/serio0/drvctl\x00', r2, &(0x7f0000000180)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f00000202c0)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='r', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}}], 0x2, 0x8050) r5 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) bind$tipc(r5, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x8000}, 0x4}}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) write(r3, &(0x7f0000020300)='atkbd', 0x5) 34.128061652s ago: executing program 2 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000004c0)=""/181) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x8042, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={0x0, 0x2, 0x0, [0xffffffffffffffff, 0x1eb, 0xfffffffffffffffe, 0x9, 0x3], [0x2, 0x2, 0x8, 0xfffffefffffffffe, 0x4, 0xfffffffffffffffa, 0x6, 0x1, 0xfffffffffffffffb, 0xc68, 0x5, 0xf, 0xfffffffffffffff8, 0x2494, 0xb, 0xfd, 0x2, 0x5faf, 0x200000000093a, 0x200, 0x5, 0x2, 0x100000001, 0x4, 0x400, 0x7fffffff, 0x7, 0x3, 0x5, 0xfffffffffffffff4, 0x4, 0x4000000009, 0xffffffffffdffffc, 0x8000180000, 0xffff, 0x1cf5, 0x800000000eb, 0x10000, 0x2, 0x800000000000000, 0xe559, 0x6, 0x5, 0x5, 0x92, 0x0, 0x5fc, 0x1001, 0x3, 0xfc6, 0x85, 0xcb14, 0x4005, 0x480000001, 0x8008000000000001, 0x40000000000756, 0x3, 0x5, 0x4, 0x8, 0xc2d8, 0x7, 0x4, 0xd, 0xf, 0x100000003, 0x400000020200, 0xb7, 0x1, 0x9, 0x6, 0x1000002a, 0x19, 0x40000000000002, 0x2, 0x400000000000001, 0xfffffffffffff001, 0x8, 0x1e, 0x80000000, 0x2, 0x0, 0x2000000004, 0x5, 0x3a56, 0x7ff, 0x8, 0xd, 0x5, 0x1, 0x7, 0x2a, 0x8, 0x1d, 0x1000000000000145, 0x7, 0xe518, 0x8, 0x14, 0xffffffffffff81fb, 0x8000000000000, 0x8000000000000001, 0x402, 0xf, 0x5, 0xe, 0x80003, 0xfffffffffffffff7, 0x38f9, 0x4, 0x1, 0x40a, 0x200200000000c, 0x43a, 0x3b, 0x6b, 0x4000000ffcf, 0x100000400, 0x7, 0x2, 0x7fff]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00), 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000a80)={0x28, 0x4, 0x0, {0x0, 0xc2}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc/sys/vm/nr_hugepages\x00', 0x1, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x565) write(r6, &(0x7f0000000bc0)='0', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 34.040068596s ago: executing program 2 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf80714eb56960942}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x89}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf80714eb56960942}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x89}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) (async) 18.973975157s ago: executing program 35 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf80714eb56960942}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x89}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf80714eb56960942}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x89}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) (async) 14.1578072s ago: executing program 0 (id=656): openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 14.070525951s ago: executing program 0 (id=657): r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x200000000004, 0x301600) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000380)={0x40, 0x9, 0x4, 0xe000, 0x412, {0x0, 0x2710}, {0x2, 0x8, 0x1, 0xa, 0x2, 0x0, "5aa4540f"}, 0x1, 0x4, {}, 0x3, 0x0, r0}) (async) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x3, 0x1) (async) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x100) getdents(r3, &(0x7f0000000240)=""/161, 0xa1) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'bind', '=static'}}}]}) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2902040063a807001c00128009000100036ac2e0a60f4b5dd96c4c53626f6e6400000040"], 0x3c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 14.000609633s ago: executing program 0 (id=658): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1001}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x2}}]}}, 0x11) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000001340)=@filename='mtd0\x00', &(0x7f0000001380)='./mnt\x00', &(0x7f00000013c0)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/fillfile\x00', 0x42, 0x9f) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_conf_req={{0x4, 0x3, 0xf}, {0x40, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0xa, 0x3, 0x64, 0x3e8, 0x2a0}}]}}]}}, 0x1e) 13.364046025s ago: executing program 0 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)='\'', 0x1}], 0x1}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) 13.248965983s ago: executing program 0 (id=672): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x20, 0x2f, 0x1d, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a801800048014000580"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a310000000048000000090a01040000000000000000010000000900010073797a31000000000900020073797a310000000008000540000000040c000980080001400000000608000a400000000114000000110001"], 0x90}}, 0xd0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x10, 0x0) socket$kcm(0x29, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) pwritev2(r6, &(0x7f0000000200)=[{&(0x7f0000000240)="92ee7bcb", 0x4}], 0x1, 0x4, 0x9, 0x15) syz_clone(0x100000, &(0x7f0000000540)="8edd77bbe6eb324946b9f9776fb1c0f184c31bf7538a2fc332b2ae29e50030bd9081a99d7a62511583cb890cde2e02e57428424dbe43b85173d3e3b26a3bca0ab985d61e18ceb933133716ad389bf25a4545c94f7872238d0a446185fc7b9aace607d3b2bdc81aa910c316ab98fcb1f25a6bb1119e45d25b3d4f199c89826cfea3ebc4d7507ff1798307f2c0f7383337d254d63def126ac9017adf559d6f79e2040217202e786eb881c058e6298c12bf1e664389a77cbe3dc929b237aae7cdafb1", 0xc1, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="d8f0da188af16148e023777e9a3731b8291446c3610efe45fbb8c3dfe86a95e0023ec9e7be58bd7594179cd3a22c50fca2832e74c95f9511c56bf72b0695f4a6d42aa8c01995c57260dc0f9353f6fee059b82358656d6bf4b0404117d48210a8b50319a50f11da2b5ec74b1341d53b5f650c8372891601f5dfb83e86c5761f654b7fcf7b955453f29eee2db63e5b98bdb3051331d63ba8d55107c212086197c62eff5dbceea6b60f1b412a83888f6d73d01a48a5b874ee584f5df9b128f06000fd98470e36f3d79c71fb") r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000002c0)="29000000010001", 0x7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r6) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a40)={0x37c, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb60}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xfffffedd, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x802}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ae1a5cd5ac189b9e515e0ed565ad8e9335caafdc4359"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "90cfd8ea30dba7b6bb3deef884a5fb354c33e8f1393d2720eb8be5e6"}}, @TIPC_NLA_NODE_ID={0x74, 0x3, "06a1832a522479153a9daa08eda0611a04a2caa307c01dc1ff05ad17bf04aa5d6357cb0cc66ee8b38c81a97b4a4bb21f4c7f9821ec01801594cc90d5e1bf0283f3106fd6698a2b84a28303ba65120b6661d1b1ddf0a98c8a0744707b64e8a2f6fa0adbf5147dc37ddbbfbddc6f5c63c8"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0xfffffffffffffcaf, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2461}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d71fc8ff57776009a0064538b34df0d06e87541e"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8e7979512f140e999521fc488d598f835e8d98812bdb16cad661a239ca38b611280a"}}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40010}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x321}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x61}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1fb9a9e7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x140}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x2404c005}, 0x48084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 13.168228145s ago: executing program 0 (id=675): syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000d80)=0x10000b, 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000380)={@id={0x2, 0x0, @d}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$alg(r1, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000e80)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000f00)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000001000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) 2.920215186s ago: executing program 6 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x19e) (async) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x18, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/profile\x00', 0x0, 0x102) (rerun: 64) read$char_usb(r0, &(0x7f0000000100)=""/187, 0xbb) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) (async) r2 = syz_open_dev$vbi(&(0x7f0000001180), 0x2, 0x2) splice(r1, &(0x7f00000002c0)=0x7dc, r0, &(0x7f0000000300)=0x8, 0x7f, 0x0) (async, rerun: 32) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x1fffffe, 0x4, 0x0, 0x2, 0xac, 0xfff, 0x2}) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async, rerun: 32) r4 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) bind$inet(r4, &(0x7f0000000700)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000740)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) close(r4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x7, 0xfffff800, 0x96542ae, 0x217, 0x44dc, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sec/tomoyo/profile\x00', 0x81, 0x8) (rerun: 32) 2.80015887s ago: executing program 6 (id=779): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00030000a26b0ba210b619258d099f7a2200d745b659036a6112d310c3754369272154c42d40fb26054d", @ANYRES16=r1, @ANYBLOB="000326bd7000fcdbdf25050000000c000400050000000000000005000a00000000000c00020005000000000000000c00030005000000000000000800010000000000080001000000000005000a00210000000c00020009000000000000000c00050001010000000000000c0008007000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x2040050}, 0x8000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000640)=0x4, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000540)={0x1, 0x1, 0x0, r7, 0x24a4}, 0xc) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {0x0, 0x3}, {0x7, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r11}, &(0x7f0000000740), &(0x7f0000000780)=r10}, 0x20) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005500e50100000000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00000000ff010000000900000000000186dd000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) 2.791615809s ago: executing program 6 (id=780): io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/107, 0x6b, 0x0, 0x0, 0x0) (async) recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/107, 0x6b, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000c0942000000000000000000711009000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000380)="0c97304e37ffac00dc8b86000014000000000084b6934a4a006e61fee1f611ba5dfb333476b540a212b6df307112911b7890d670fd893983", 0x38) (async) write(r2, &(0x7f0000000380)="0c97304e37ffac00dc8b86000014000000000084b6934a4a006e61fee1f611ba5dfb333476b540a212b6df307112911b7890d670fd893983", 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000940)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000940)={'pimreg0\x00', 0x7c2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x67) mount(0x0, 0x0, &(0x7f00000009c0)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, 0x0, &(0x7f00000009c0)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000a00), 0x0, 0x2000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0xe2200, 0x0) dup(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x8a000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000780)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x40042, 0x40) close(0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f00000003c0)=0xffffffffffffffff) (async) ioctl$int_in(r6, 0x5452, &(0x7f00000003c0)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000440)="8b", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000440)="8b", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1}, 0x1c) 2.140210319s ago: executing program 7 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xffe6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6002420}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c}, 0x40091) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002700010002000000ffdbdf250200"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.131065498s ago: executing program 6 (id=787): mkdir(&(0x7f00000000c0)='./ms\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./ms\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f00000014c0)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f00000038c0)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r3, r4, 0x0, 0x0, 0x1000000}}}, 0x78) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f0000003940)='./ms/fs/ocfs2/cluster_stack\x00') r5 = open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000749000/0x18000)=nil, &(0x7f00000015c0)=[@text32={0x20, &(0x7f0000003980)="66baa100ed0fbb84e563591e14b83b250000ba000000000f300fc7750766baa100b800000000efb9b20300000f32c7442400603a0000c7442402cf460000c7442406000000000f011c2466baf80cb8e0f44184ef66bafc0cb83f000000efb8010000000f01d90f01c3f30fc77332", 0x6e}], 0x1, 0x0, &(0x7f0000001580)=[@cstype0={0x4, 0xd}], 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000340)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000380)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_route(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)=@can_newroute={0x134, 0x18, 0x100, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x23, 0x2c, 0x11, 0x1, 0x40, "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", 0x1, "c1af1ead31ffacf136a86ca1d3acf9a51a441ae1"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x24000014}, 0x4810) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r7, 0x0, 0x0, 0x10002, &(0x7f0000001800)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000001540)={0x8, 0x8749, 0xe69ff09, 0x0, 0x10}) write(r5, &(0x7f0000000280)="99", 0x1) fcntl$dupfd(r5, 0x406, r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) write$binfmt_script(r6, &(0x7f0000000480)={'#! ', './ms', [{0x20, '{('}, {0x20, 'encrypted\x00'}], 0xa, "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"}, 0x1016) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) mount(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r8, &(0x7f0000000000)=""/112, 0x70) syz_emit_ethernet(0x32, &(0x7f0000001500)={@random="7199dab04c5b", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "43e2b052"}}}}}}, 0x0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 2.129035159s ago: executing program 6 (id=789): mount(&(0x7f0000006480)=@sg0, &(0x7f00000064c0)='./debug\x00', &(0x7f0000006500)='gfs2\x00', 0x200000, &(0x7f0000006540)='data=writeback') 2.049317851s ago: executing program 6 (id=791): r0 = syz_ublk_setup_io_uring(0x34cd, &(0x7f0000000040)={0x0, 0x731, 0x100, 0x4000008, 0x3b5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000c40)={0x7ff, 0x80000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000c80)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000cc0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000d00)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000d40)=ANY=[@ANYBLOB="aa"], 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r8 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) syz_ublk_setup_queues(r8, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x24b, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87ffff, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1837d, 0x400, 0x2, 0x22e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d6d, 0x8c, 0x20000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x40000, 0x3, 0x9d7b}, 0xffffffffffffffff}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r10 = syz_usb_connect(0x0, 0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000a80)=0x0) syz_ublk_add_dev(r9, r1, 0x0, r11, &(0x7f0000000800)={0x2e, 0x7e, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1b9}}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 2.049159624s ago: executing program 7 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x98, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.974711264s ago: executing program 7 (id=794): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x2d401c, &(0x7f0000001640)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d667363616368652c646f80de5f686173682c736d61636b6673726f6f743d687462002c00"]) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x1, 0x7, 0x7]}, &(0x7f0000000040)=0x78) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffdac5971c", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001480), 0x40080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000016c0)={0x0, 0x7ff, 0x0, 'queue1\x00'}) r6 = syz_open_dev$dri(&(0x7f0000001500), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000018c0)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x100000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000001780)={0x0, 0x80, 0x1, 'queue1\x00', 0x101}) fsopen(0x0, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB='W\x00\x00\x00\a'], 0x50) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000001880)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f00000018c0), 0xd) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000014c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7}, {0x3, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') lseek(r9, 0x80006, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000001340)={{r10, 0x8, 0x800, 0x7, 0x6, 0x8, 0x62, 0x200, 0x6, 0x6, 0x1, 0x4, 0x80, 0x1, 0x8000000000000000}}) (async) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfe, &(0x7f0000000140)) 1.720019153s ago: executing program 7 (id=798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x13c) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0xf7, 0x3, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x20, 0x20, 0x60d, 0x401}}) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000004c0)='bpf_lsm_inode_listxattr\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x18, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x0, 0x3, 0xa, 0x6, 0xfffffffffffffffc, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @exit], &(0x7f0000000240)='GPL\x00', 0x8, 0xcb, &(0x7f0000000280)=""/203, 0x40f00, 0x1, '\x00', r1, @xdp, r0, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x0, 0x1, 0xfff}, 0x10, r2, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0xf}, {0x1, 0x1, 0x9, 0xb}, {0x1, 0x3, 0xa, 0x8}, {0x1, 0x4, 0x0, 0x1}, {0x3, 0x3, 0xd, 0x6}, {0x3, 0x1, 0xa, 0x7}, {0x0, 0x5, 0xe}], 0x10, 0x3}, 0x94) write$char_usb(r0, &(0x7f0000000640)="19d04c19f4c73e30b608681348ed6e25525fb7ab9d047255e427ae726fd134b4ba9cf2c2eae65ad706178675cb476b", 0x2f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x82000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r5) timer_create(0x6, &(0x7f0000000840)={0x0, 0x20, 0x2, @thr={&(0x7f0000000700)="66ff68cf1472a2265780f8ddc466aa4a6c6e0115772f90241d55ec3298c14495b2e17cfa1f5cf06d9f41ad7dd55dcd2fad57bc44b5813a34d563b97569e50f5c192d659bc4c3cc26979212f4c0e5f5935ed8278a1ce094e2d5389dd859a014ef01f83339c3f667e848c83ba25a44b9ee5afb301d307796b7bd0bade5465916f3644a4ccef9652d", &(0x7f00000007c0)="548a45bb367987d535eb3b6187824a72825e997fee3dea6de45f8df751008b9d079be9902e22d43b611c670245d56d125bde740375ec174a0ab0a6ef64404f73eb9e65"}}, &(0x7f0000000880)=0x0) timer_delete(r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}]}, 0x40}}, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r9 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x8000, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000b80)='bpf_lsm_tun_dev_attach_queue\x00') sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf15, 0x0, 0x0, 0x0, 0x9}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000d40)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000d80)=""/4096, 0x41000, 0x59, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000001d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001dc0)={0x1, 0x8, 0x7, 0x1aa}, 0x10, 0x2a9e2, r5, 0x3, &(0x7f0000001e00)=[0xffffffffffffffff, r5, r5, r5, r5], &(0x7f0000001e40)=[{0x4, 0x3, 0xb, 0x6}, {0x0, 0x4, 0x6, 0x7}, {0x5, 0x3, 0xe, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f40)={0x9}, 0x8) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001fc0)={0x0, 0x81}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000002040)=@sack_info={r12, 0x7, 0x9}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002080)={r10, r3, 0x7, 0x0, @void}, 0x10) read$FUSE(r11, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = syz_clone(0xe000000, &(0x7f0000004100)="0607bb7bfa38625f5aa6788a0fc8525eca4c58d7f4dbad8dd1f1e5c4d08496da0a4b350e9e3f4d", 0x27, &(0x7f0000004140), &(0x7f0000004180), &(0x7f00000041c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004240)={r0, r1, 0x25, 0x12, @val=@iter={&(0x7f0000004200)=@task={r13, r14, r5}, 0x10}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004500)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000046c0)=@bpf_ext={0x1c, 0x14, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x0, 0xf, 0x1, 0x9, 0x8f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004340)='syzkaller\x00', 0x1, 0xd7, &(0x7f0000004380)=""/215, 0x41100, 0x6c, '\x00', r1, 0x0, r11, 0x8, &(0x7f0000004480)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000044c0)={0x0, 0x8, 0x9, 0x7f}, 0x10, 0x17fb4, r11, 0x2, &(0x7f0000004640)=[r15, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r0, r4], &(0x7f0000004680)=[{0x2, 0x1, 0xe, 0x3}, {0x3, 0x2, 0x0, 0x9}], 0x10, 0x7}, 0x94) 1.369735192s ago: executing program 7 (id=801): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001500)='/dev/comedi0\x00', 0x8001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001540)={'comedi_parport\x00', [0x100, 0xc1, 0x7ff, 0xe1, 0xe, 0x1, 0x69, 0x10010000, 0x8, 0xfffffffc, 0x9, 0x5, 0x7, 0x1, 0x1, 0xfd, 0x3, 0x107ff, 0x0, 0x4, 0x88, 0x7ff, 0x80000, 0x20001e58, 0x801, 0xf39d, 0x6, 0x8, 0xa4b5, 0x0, 0x3]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000001600)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000001640)=@assoc_value={0x0}, &(0x7f0000001680)=0x8) sendto$inet6(r3, &(0x7f00000016c0)="8e", 0x1, 0x10040000, &(0x7f0000001700)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001740)={r5, 0xf20, 0x2, "2017"}, 0xa) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000001780)=r5, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r2, &(0x7f0000000300)="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", &(0x7f0000001300)=""/228, 0x4}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x4}, @l2cap_disconn_req={{0x6, 0x4b}, {0x8, 0x8}}}}, 0xf) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@arena={0x21, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, 0x1, '\x00', r6, r7, 0x1, 0x2, 0x4}, 0x50) 237.029071ms ago: executing program 5 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x98, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 235.465035ms ago: executing program 5 (id=813): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) write$selinux_load(r0, &(0x7f0000000780)=ANY=[], 0x190f3) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x8, &(0x7f00000004c0)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000500)='syzkaller\x00', 0xbc9d501, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0xfffff1e7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x2, 0x2, 0x6, 0x4}, {0x0, 0x1, 0x3, 0x2}, {0x1, 0x2, 0xf, 0x5}, {0x3, 0x3, 0xf, 0xb}, {0x4, 0x4, 0x2, 0x3}, {0x2, 0x4, 0x9, 0x1}], 0x10, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'veth1_to_hsr\x00', 'syzkaller0\x00', {}, {0xff}, 0xc, 0x2, 0x1}, 0x3202, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x68f, 0x6, 0x101, '\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffdae) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 150.664555ms ago: executing program 5 (id=814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = fsopen(&(0x7f0000000800)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000840)='crush_location\x00', &(0x7f0000000880)='rack:foo\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="280027bd7000fcdbdf25100000000800040009000000f4ff050019000000435b7869d6dacf6611518885dfbfce70f30f90494cf84441539df6c2304f586d04ac7066641a796564b9a4fa45e911a14521401b0ba855f469c08732c84c99db6a0ae59c63551f775d85b7043dd9b58b3dae1742c3e9b5bb9dff84b1c7bc8cfb8a9cf76a2e962f559b2d7236908a03314419d19cfb3814b5fd28dc611167a9b052fbc5a8c7202f9e63f553aec9c3a08e9cf71c41f5a030a29888bbbf3320675d486b855893"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x100000, 0x0) flock(r5, 0x1) semtimedop(0x0, &(0x7f00000008c0)=[{0x2, 0x0, 0x800}], 0x1, &(0x7f0000000900)={0x77359400}) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f00000003c0)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) r9 = socket(0x2, 0x80805, 0x7) sendmmsg$inet(r9, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\a', 0x1}], 0x1}}], 0x1, 0x800) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r7, 0x4}, 0x8) syz_emit_ethernet(0x26, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344"}}}}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$setsig(r10, 0xa, 0x2b) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000006c0)={r12, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x82, 0x2, 0x2, 0x3, 0xd, 0x7, 0xfffff001, 'syz0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) ioctl$GIO_UNIMAP(r10, 0x4b66, &(0x7f00000002c0)={0x400000000000027c, &(0x7f0000000300)}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7, 0x9}, &(0x7f0000000280)=0x8) write(r4, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) 80.704014ms ago: executing program 5 (id=815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x8, 0xcaf2bf515f91f432, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000480)={r2, 0xffff, 0x23}, 0x66) lseek(r1, 0x8, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x168, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x3, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x30e) 80.091107ms ago: executing program 5 (id=816): syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f00000003c0)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f00000004c0)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) 251.235µs ago: executing program 5 (id=817): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0x0}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, {0xa, 0x4e20, 0x65fac30c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000001}, 0xffffffffffffffff, 0x3e6}}, 0x48) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@other={0x20300002000006a7, 0x0}) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x3, 0x200, "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", 0x2, 0xb, 0xa, 0x1, 0xf, 0x80, 0x8, 0x1}, r1}}, 0x120) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000340)={&(0x7f0000000380)=[r6], 0x0, 0x5, 0x1, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000500)={&(0x7f0000000540)=[r7], 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000005c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000600)={&(0x7f0000000640)=[r9], 0x0, 0x0, 0x1, 0xd}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={0x0}) r12 = syz_open_dev$dri(&(0x7f0000000700), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f0000000740)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f0000000780)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r12, 0xc02064cc, &(0x7f00000007c0)={r13, r14, 0x0, 0x8, 0x2}) r15 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r15, 0xc00864bf, &(0x7f0000000840)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r15, 0xc00864bf, &(0x7f0000000880)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r15, 0xc02064cc, &(0x7f00000008c0)={r16, r17, 0x8000000, 0x8, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f00000009c0)={&(0x7f0000000940)=[r7, r9, r10, r16, r11, r16, r17, r18], &(0x7f0000000980), 0x239e2b8c54144c19}) r19 = fsmount(0xffffffffffffffff, 0x1, 0x8a) read$midi(r19, &(0x7f0000000000)=""/3, 0x3) 0s ago: executing program 7 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000740)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='proc_dir\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001840), 0x0, 0x80840) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000001880)=ANY=[], 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000018c0)={0xdc, 0x6, 0x6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r2, 0xc0085508, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='proc_dir/scsi/scsi\x00', 0x42, 0x183) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r3, &(0x7f0000000840)="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", 0x1000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000600)={{r1, &(0x7f0000000340)='\x00', 0x0, &(0x7f00000003c0)={@_ha_fsid={[0x2, 0xffffff02]}, {0x5, 0xb3, 0xffffffff, 0x1}}, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4}, 0x2, &(0x7f00000005c0)=[{0x2, 0x7, &(0x7f00000004c0)='\\.%-y\x90\x00', &(0x7f0000000500)="6037f3cac2bef49040c0caf5f60f9d9229ebd15cd00113ec26860b365772c1ca4c7cf481d34a3318c89a", 0x2a, 0x30}, {0x3, 0x0, &(0x7f0000000540)='time\x00', &(0x7f0000000580)="a5812dc60124a6868751465a222825ed73733d35166be898ce02d34833cce19710429e5c96283fc534a1210c54e39f", 0x2f, 0x8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f00000006c0)={'wlan1\x00', @random="010000000002"}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000700)={0x2000}) kernel console output (not intermixed with test programs): c0000 [ 86.003393][ T43] audit: type=1326 audit(1791764130.412:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.2.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041b9e1d9 code=0x7ffc0000 [ 86.003511][ T43] audit: type=1326 audit(1791764130.412:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.2.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041b9e1d9 code=0x7ffc0000 [ 86.003856][ T43] audit: type=1326 audit(1791764130.412:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.2.329" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe041b9e1d9 code=0x7ffc0000 [ 86.005471][ T7434] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 86.276367][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 86.301329][ T7445] jffs2: notice: (7445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 86.307666][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 86.307990][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 86.665701][ T1174] raw-gadget.0 gadget.0: failed to queue suspend event [ 86.741147][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 86.762264][ T1174] raw-gadget.0 gadget.0: failed to queue suspend event [ 86.831070][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 86.854342][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 86.934999][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 86.952142][ T6336] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.031807][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 87.071836][ T6336] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.152905][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 87.173633][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.217073][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217083][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217124][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217128][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217166][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217171][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217209][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217214][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217252][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217257][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217296][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217300][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217338][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217342][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.217381][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.217385][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218590][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218596][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218640][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218644][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218683][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218687][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218725][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218729][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218768][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218772][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218811][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218815][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218858][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218862][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218900][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218904][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218943][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218947][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.218986][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.218990][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219028][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219032][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219070][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219074][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219112][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219116][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219155][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219159][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219197][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219202][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219273][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219278][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219318][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219322][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219361][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219366][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219404][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219408][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219446][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219450][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219488][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219492][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219531][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219535][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219574][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219578][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.219615][ T7454] binder: BINDER_SET_CONTEXT_MGR already set [ 87.219619][ T7454] binder: 7453:7454 ioctl 4018620d 200000000140 returned -16 [ 87.225792][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.225839][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.225886][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.225929][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.225973][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226016][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226059][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226112][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226154][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226196][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226238][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226281][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226343][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226388][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226429][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226472][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226514][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226556][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226598][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226640][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226682][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226724][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226766][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226809][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226856][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.226965][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227008][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227109][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227153][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227196][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227238][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227283][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227325][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227369][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227411][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227454][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227496][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227538][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227581][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227624][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227667][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227709][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227752][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227795][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227837][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227884][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.227926][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228043][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228089][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228131][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228173][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228217][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228258][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228301][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228343][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228385][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228427][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228469][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228511][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228568][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228610][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228651][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228693][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228744][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.228785][ T7455] binder: 7453:7455 ioctl c0306201 200000000380 returned -14 [ 87.243655][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 87.264527][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.351135][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 87.396419][ T6336] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.471412][ T7360] raw-gadget.0 gadget.0: failed to queue resume event [ 87.481355][ T5744] Bluetooth: hci3: command tx timeout [ 87.506815][ T1172] raw-gadget.0 gadget.0: failed to queue suspend event [ 87.518923][ T7360] raw-gadget.0 gadget.0: failed to queue disconnect event [ 87.525973][ T25] usb 5-1: USB disconnect, device number 7 [ 87.566213][ T7476] jffs2: notice: (7476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 87.624042][ T5744] Bluetooth: Frame is too long (len 25, expected len 23) [ 87.652746][ T7360] can0 (unregistered): slcan off ttyS3. [ 87.788959][ T7498] tipc: Started in network mode [ 87.788977][ T7498] tipc: Node identity 1001001, cluster identity 4711 [ 87.788988][ T7498] tipc: Node number set to 16781313 [ 87.789764][ T7498] tipc: Enabled bearer , priority 10 [ 87.804969][ T7504] tipc: Enabling of bearer rejected, already enabled [ 87.964802][ T7510] FAULT_INJECTION: forcing a failure. [ 87.964802][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.964823][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT(full) [ 87.964835][ T7510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.964842][ T7510] Call Trace: [ 87.964846][ T7510] [ 87.964851][ T7510] dump_stack_lvl+0x100/0x190 [ 87.964878][ T7510] should_fail_ex.cold+0x5/0xa [ 87.964894][ T7510] _copy_from_user+0x2e/0xd0 [ 87.964911][ T7510] __sys_bpf+0x2f5/0x4a30 [ 87.964934][ T7510] ? __pfx___sys_bpf+0x10/0x10 [ 87.964945][ T7510] ? find_held_lock+0x2b/0x80 [ 87.964961][ T7510] ? futex_wake+0x4ea/0x5e0 [ 87.964982][ T7510] ? rcu_read_lock_any_held+0x6a/0x90 [ 87.964993][ T7510] ? find_held_lock+0x2b/0x80 [ 87.965009][ T7510] ? ksys_write+0x190/0x250 [ 87.965023][ T7510] ? ksys_write+0x190/0x250 [ 87.965044][ T7510] ? __x64_sys_futex+0x34f/0x4d0 [ 87.965060][ T7510] ? __x64_sys_futex+0x358/0x4d0 [ 87.965078][ T7510] ? xfd_validate_state+0x129/0x190 [ 87.965092][ T7510] ? __x64_sys_bpf+0xce/0x140 [ 87.965103][ T7510] __x64_sys_bpf+0xce/0x140 [ 87.965116][ T7510] ? do_syscall_64+0xae/0x790 [ 87.965133][ T7510] do_syscall_64+0x123/0x790 [ 87.965150][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.965161][ T7510] RIP: 0033:0x7f9e3d59e1d9 [ 87.965171][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.965181][ T7510] RSP: 002b:00007f9e3e4e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.965192][ T7510] RAX: ffffffffffffffda RBX: 00007f9e3d825fa0 RCX: 00007f9e3d59e1d9 [ 87.965199][ T7510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 87.965206][ T7510] RBP: 00007f9e3d635888 R08: 0000000000000000 R09: 0000000000000000 [ 87.965212][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.965218][ T7510] R13: 00007f9e3d826038 R14: 00007f9e3d825fa0 R15: 00007ffeaf520fc8 [ 87.965233][ T7510] [ 88.159280][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 88.187949][ T7530] netlink: 'syz.5.355': attribute type 4 has an invalid length. [ 88.195089][ T7530] netlink: 'syz.5.355': attribute type 4 has an invalid length. [ 88.196855][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 88.226806][ T7532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7532 comm=syz.0.356 [ 88.372722][ T7552] jffs2: notice: (7552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 88.404585][ T7548] openvswitch: netlink: Message has 8 unknown bytes. [ 88.712612][ T7571] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 88.712932][ T7572] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 88.749331][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.996752][ T7583] netlink: 'syz.5.370': attribute type 1 has an invalid length. [ 89.008945][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.905928][ T7605] jffs2: notice: (7605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 90.412118][ T7614] input: syz1 as /devices/virtual/input/input9 [ 90.482932][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 90.482944][ T43] audit: type=1400 audit(1791764134.892:1096): avc: denied { write } for pid=7620 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.504661][ T43] audit: type=1400 audit(1791764134.912:1097): avc: denied { unmount } for pid=6380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.638686][ T7630] lo speed is unknown, defaulting to 1000 [ 90.888383][ T43] audit: type=1400 audit(1791764135.292:1098): avc: denied { write } for pid=7636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.903930][ T7641] netlink: 9 bytes leftover after parsing attributes in process `syz.5.390'. [ 90.908707][ T7641] netlink: 9 bytes leftover after parsing attributes in process `syz.5.390'. [ 90.939324][ T43] audit: type=1400 audit(1791764135.342:1099): avc: denied { write } for pid=7643 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.028823][ T7647] jffs2: notice: (7647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 91.030204][ T43] audit: type=1400 audit(1791764135.432:1100): avc: denied { write } for pid=7646 comm="syz.5.391" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.325784][ T7545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.360389][ T7650] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 91.375654][ T43] audit: type=1400 audit(1791764135.782:1101): avc: denied { write } for pid=7651 comm="syz.6.393" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.419723][ T7656] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 91.552118][ T43] audit: type=1400 audit(1791764135.962:1102): avc: denied { write } for pid=7663 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.552675][ T43] audit: type=1400 audit(1791764135.962:1103): avc: denied { read } for pid=7663 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.564642][ T5744] Bluetooth: hci3: command 0x2016 tx timeout [ 91.821458][ T852] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 91.854799][ T6336] IPVS: starting estimator thread 0... [ 91.878807][ T43] audit: type=1400 audit(1791764136.282:1104): avc: denied { getopt } for pid=7693 comm="syz.5.402" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.955329][ T7692] IPVS: using max 38 ests per chain, 91200 per kthread [ 91.990107][ T43] audit: type=1400 audit(1791764136.392:1105): avc: denied { write } for pid=7703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.998846][ T852] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 91.999731][ T852] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.999745][ T852] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 91.999763][ T852] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.017581][ T852] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 92.028306][ T852] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 92.112877][ T7715] jffs2: notice: (7715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 92.219192][ T7672] EXT4-fs: Conflicting test_dummy_encryption options [ 92.666648][ T7734] CIFS: Attempting to mount //127.0.0.1/share [ 92.900704][ T7740] ip_tables: iptables: counters copy to user failed while replacing table [ 92.938034][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'. [ 93.494965][ T7734] CIFS: VFS: Error connecting to socket. Aborting operation. [ 93.495023][ T7734] CIFS: VFS: cifs_mount failed w/return code = -4 [ 93.545504][ T7749] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.545516][ T7749] use the actual size instead. [ 93.579959][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 93.636894][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 93.651181][ T5744] Bluetooth: hci3: command 0x2016 tx timeout [ 93.972810][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 93.982778][ T7766] jffs2: notice: (7766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 93.988124][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 93.988214][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 94.576142][ T25] usb 11-1: USB disconnect, device number 2 [ 94.597305][ T25] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 94.598710][ T25] spcp8x5 11-1:1.0: device disconnected [ 94.682797][ T5845] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.727685][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 94.775753][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 94.776372][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 94.832104][ T5845] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 94.833044][ T5845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.833063][ T5845] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.835730][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.835750][ T5845] usb 5-1: Product: syz [ 94.835760][ T5845] usb 5-1: Manufacturer: syz [ 94.843781][ T5845] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 94.846917][ T5845] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 95.044188][ T7769] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode 0 is invalid [ 95.044859][ T5845] usb 5-1: USB disconnect, device number 8 [ 95.063965][ T5845] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 95.064410][ T5845] iuu_phoenix 5-1:1.0: device disconnected [ 95.334873][ T7794] netlink: 48 bytes leftover after parsing attributes in process `'. [ 95.570179][ T7805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.431'. [ 95.647490][ T7814] netlink: 'syz.0.432': attribute type 20 has an invalid length. [ 95.687038][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 95.687057][ T43] audit: type=1400 audit(1791764140.092:1118): avc: denied { write } for pid=7820 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.689746][ T43] audit: type=1400 audit(1791764140.092:1119): avc: denied { create } for pid=7820 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.714187][ T7825] netlink: 'syz.2.437': attribute type 29 has an invalid length. [ 95.982551][ T7834] netlink: 'syz.6.439': attribute type 21 has an invalid length. [ 95.982565][ T7834] netlink: 128 bytes leftover after parsing attributes in process `syz.6.439'. [ 95.982602][ T7834] netlink: 'syz.6.439': attribute type 4 has an invalid length. [ 95.982609][ T7834] netlink: 'syz.6.439': attribute type 5 has an invalid length. [ 95.982641][ T7834] netlink: 3 bytes leftover after parsing attributes in process `syz.6.439'. [ 96.075493][ T43] audit: type=1400 audit(1791764140.482:1120): avc: denied { getopt } for pid=7835 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.078788][ T43] audit: type=1400 audit(1791764140.482:1121): avc: denied { read } for pid=7835 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.409583][ T43] audit: type=1400 audit(1791764140.812:1122): avc: denied { create } for pid=7840 comm="syz.2.442" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.418105][ T43] audit: type=1400 audit(1791764140.822:1123): avc: denied { mounton } for pid=7840 comm="syz.2.442" path="/118/loop0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.433403][ T7841] XFS (nbd2): SB validate failed with error -5. [ 96.474118][ T5100] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 96.474209][ T7841] XFS (nbd2): io_pages changed from 0 to 1024, not restoring. [ 96.474221][ T7841] XFS (nbd2): ra_pages changed from 0 to 64, not restoring. [ 96.493881][ T43] audit: type=1400 audit(1791764140.902:1124): avc: denied { unlink } for pid=5734 comm="syz-executor" name="loop0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.512934][ T43] audit: type=1400 audit(1791764140.922:1125): avc: denied { setopt } for pid=7847 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.712878][ T7867] cgroup: fork rejected by pids controller in /syz2 [ 96.787239][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.448'. [ 97.201071][ T5866] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 97.361072][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 97.361858][ T5866] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 97.362510][ T5866] usb 10-1: config 0 has no interfaces? [ 97.364492][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.364511][ T5866] usb 10-1: Product: syz [ 97.364524][ T5866] usb 10-1: Manufacturer: syz [ 97.364536][ T5866] usb 10-1: SerialNumber: syz [ 97.368977][ T5866] usb 10-1: config 0 descriptor?? [ 97.629623][ T43] audit: type=1400 audit(1791764142.032:1126): avc: denied { audit_write } for pid=7979 comm="syz.0.454" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.678127][ T43] audit: type=1400 audit(1791764142.082:1127): avc: denied { getopt } for pid=7984 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.726184][ T7990] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.726200][ T7990] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.727845][ T7990] batman_adv: batadv0: Interface activated: syzkaller0 [ 97.729441][ T7987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=7987 comm=syz.6.457 [ 97.729932][ T7987] netlink: 112 bytes leftover after parsing attributes in process `syz.6.457'. [ 97.745923][ T7989] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 97.764932][ T7989] batman_adv: batadv0: Removing interface: syzkaller0 [ 97.809519][ T25] usb 10-1: USB disconnect, device number 11 [ 97.925727][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.6.460'. [ 97.930013][ T7994] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.044008][ T8002] kvm: user requested TSC rate below hardware speed [ 98.631345][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.783710][ T25] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 98.783745][ T25] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 98.786562][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.786583][ T25] usb 5-1: config 1 has no interface number 0 [ 98.787536][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.787554][ T25] usb 5-1: config 1 has no interface number 0 [ 98.788547][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.788564][ T25] usb 5-1: config 1 has no interface number 0 [ 98.789512][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.789529][ T25] usb 5-1: config 1 has no interface number 0 [ 98.790471][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.790489][ T25] usb 5-1: config 1 has no interface number 0 [ 98.799575][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.799596][ T25] usb 5-1: config 1 has no interface number 0 [ 98.800590][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.800604][ T25] usb 5-1: config 1 has no interface number 0 [ 98.802480][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.802495][ T25] usb 5-1: config 1 has no interface number 0 [ 98.804428][ T25] usb 5-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 98.804443][ T25] usb 5-1: Product: syz [ 98.804453][ T25] usb 5-1: Manufacturer: syz [ 98.804462][ T25] usb 5-1: SerialNumber: syz [ 98.824373][ T25] usb 5-1: 3:0 : does not exist [ 98.824393][ T25] usb 5-1: 3:0 : does not exist [ 99.031578][ T7247] usb 5-1: USB disconnect, device number 9 [ 99.250871][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 99.260235][ T8038] jffs2: notice: (8038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 99.269989][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 99.270018][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 99.344811][ T8041] __nla_validate_parse: 2 callbacks suppressed [ 99.344823][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.475'. [ 99.570284][ T8047] sctp: [Deprecated]: syz.0.477 (pid 8047) Use of int in max_burst socket option deprecated. [ 99.570284][ T8047] Use struct sctp_assoc_value instead [ 99.681027][ T5845] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 99.719416][ T8058] nft_compat: unsupported protocol 5 [ 99.841501][ T5845] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 99.842286][ T5845] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.842301][ T5845] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.843388][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.843399][ T5845] usb 10-1: Product: syz [ 99.843406][ T5845] usb 10-1: Manufacturer: syz [ 99.848770][ T5845] iuu_phoenix 10-1:1.0: iuu_phoenix converter detected [ 99.872157][ T5845] usb 10-1: iuu_phoenix converter now attached to ttyUSB0 [ 99.900802][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 99.950014][ T8070] can0: slcan on ttynull. [ 100.021445][ T8069] can0 (unregistered): slcan off ttynull. [ 100.047335][ T10] usb 10-1: USB disconnect, device number 12 [ 100.058856][ T10] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 100.059364][ T10] iuu_phoenix 10-1:1.0: device disconnected [ 100.470800][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.494'. [ 100.623259][ T8101] cgroup: Need name or subsystem set [ 100.703290][ T8111] netlink: 36 bytes leftover after parsing attributes in process `syz.6.500'. [ 100.847198][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 100.847216][ T43] audit: type=1326 audit(1791764145.252:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.504" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x0 [ 100.910664][ T8126] binder: 8125:8126 ioctl c0306201 2000000005c0 returned -14 [ 100.910781][ T8126] binder: 8125:8126 ioctl c0306201 200000000640 returned -14 [ 100.911334][ T8126] ip_tables: iptables: counters copy to user failed while replacing table [ 100.920123][ T8128] binder: 8125:8128 ioctl c0306201 2000000005c0 returned -14 [ 100.920511][ T8129] ip_tables: iptables: counters copy to user failed while replacing table [ 100.921115][ T8126] binder: BINDER_SET_CONTEXT_MGR already set [ 100.921122][ T8126] binder: 8125:8126 ioctl 4018620d 200000000540 returned -16 [ 100.921309][ T8127] binder: 8125:8127 ioctl c0306201 200000000640 returned -14 [ 100.981580][ T43] audit: type=1400 audit(1791764145.392:1144): avc: denied { ioctl } for pid=8134 comm="syz.6.507" path="socket:[23155]" dev="sockfs" ino=23155 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.026585][ T8138] syzkaller0: entered promiscuous mode [ 101.026607][ T8138] syzkaller0: entered allmulticast mode [ 101.096706][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 101.175161][ T8149] ovs-system: entered promiscuous mode [ 101.221179][ T8153] binder: BINDER_SET_CONTEXT_MGR already set [ 101.221192][ T8153] binder: 8152:8153 ioctl 4018620d 200000000380 returned -16 [ 101.223028][ T8156] FAULT_INJECTION: forcing a failure. [ 101.223028][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 101.223049][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.6.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.223063][ T8156] Tainted: [L]=SOFTLOCKUP [ 101.223067][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.223074][ T8156] Call Trace: [ 101.223078][ T8156] [ 101.223083][ T8156] dump_stack_lvl+0x100/0x190 [ 101.223115][ T8156] should_fail_ex.cold+0x5/0xa [ 101.223132][ T8156] should_failslab+0xc2/0x120 [ 101.223153][ T8156] kmem_cache_alloc_noprof+0x92/0x6a0 [ 101.223168][ T8156] ? do_getname+0x35/0x390 [ 101.223181][ T8156] do_getname+0x35/0x390 [ 101.223194][ T8156] do_sys_openat2+0xc7/0x1e0 [ 101.223206][ T8156] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.223218][ T8156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.223242][ T8156] __x64_sys_openat+0x12d/0x210 [ 101.223253][ T8156] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.223269][ T8156] do_syscall_64+0x123/0x790 [ 101.223286][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.223298][ T8156] RIP: 0033:0x7f385f19e1d9 [ 101.223307][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.223317][ T8156] RSP: 002b:00007f3860095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.223329][ T8156] RAX: ffffffffffffffda RBX: 00007f385f425fa0 RCX: 00007f385f19e1d9 [ 101.223337][ T8156] RDX: 0000000000000080 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 101.223344][ T8156] RBP: 00007f385f235888 R08: 0000000000000000 R09: 0000000000000000 [ 101.223351][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.223358][ T8156] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 101.223372][ T8156] [ 101.268049][ T8160] FAULT_INJECTION: forcing a failure. [ 101.268049][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 101.268070][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.0.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.268085][ T8160] Tainted: [L]=SOFTLOCKUP [ 101.268093][ T8160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.268100][ T8160] Call Trace: [ 101.268104][ T8160] [ 101.268109][ T8160] dump_stack_lvl+0x100/0x190 [ 101.268130][ T8160] should_fail_ex.cold+0x5/0xa [ 101.268148][ T8160] should_failslab+0xc2/0x120 [ 101.268166][ T8160] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 101.268181][ T8160] ? lock_acquire+0x1d1/0x380 [ 101.268194][ T8160] ? kstrdup_const+0x63/0x80 [ 101.268208][ T8160] kstrdup+0x51/0xe0 [ 101.268220][ T8160] kstrdup_const+0x63/0x80 [ 101.268232][ T8160] alloc_vfsmnt+0x19e/0x840 [ 101.268247][ T8160] path_mount+0x21ff/0x2850 [ 101.268263][ T8160] ? __pfx_path_mount+0x10/0x10 [ 101.268274][ T8160] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.268292][ T8160] ? putname+0xb1/0x110 [ 101.268300][ T8160] ? kmem_cache_free+0x127/0x6c0 [ 101.268316][ T8160] ? __x64_sys_mount+0x293/0x310 [ 101.268327][ T8160] __x64_sys_mount+0x293/0x310 [ 101.268338][ T8160] ? __pfx___x64_sys_mount+0x10/0x10 [ 101.268354][ T8160] do_syscall_64+0x123/0x790 [ 101.268371][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.268382][ T8160] RIP: 0033:0x7f9e3d59e1d9 [ 101.268391][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.268402][ T8160] RSP: 002b:00007f9e3e4e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.268413][ T8160] RAX: ffffffffffffffda RBX: 00007f9e3d825fa0 RCX: 00007f9e3d59e1d9 [ 101.268420][ T8160] RDX: 0000200000000580 RSI: 0000200000000180 RDI: 00002000000000c0 [ 101.268427][ T8160] RBP: 00007f9e3d635888 R08: 0000000000000000 R09: 0000000000000000 [ 101.268433][ T8160] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 101.268440][ T8160] R13: 00007f9e3d826038 R14: 00007f9e3d825fa0 R15: 00007ffeaf520fc8 [ 101.268456][ T8160] [ 101.382416][ T8168] digital: digital_start_poll: Unknown protocol [ 101.487965][ T8169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.614154][ T8176] rnbd_client L213: map_device: Parameters missing [ 101.770845][ T8182] binder: 8179:8182 ioctl c0306201 2000000008c0 returned -14 [ 101.825028][ T43] audit: type=1400 audit(1791764146.232:1145): avc: denied { write } for pid=8183 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.497974][ T43] audit: type=1400 audit(1791764146.902:1146): avc: denied { setopt } for pid=8194 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.533507][ T8195] FAULT_INJECTION: forcing a failure. [ 102.533507][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 102.533531][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.0.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.533546][ T8195] Tainted: [L]=SOFTLOCKUP [ 102.533550][ T8195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.533556][ T8195] Call Trace: [ 102.533560][ T8195] [ 102.533565][ T8195] dump_stack_lvl+0x100/0x190 [ 102.533586][ T8195] should_fail_ex.cold+0x5/0xa [ 102.533603][ T8195] should_failslab+0xc2/0x120 [ 102.533621][ T8195] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.533634][ T8195] ? __pfx_map_id_range_down+0x10/0x10 [ 102.533648][ T8195] ? rcu_is_watching+0x13/0xc0 [ 102.533664][ T8195] ? security_inode_alloc+0x3b/0x2c0 [ 102.533681][ T8195] security_inode_alloc+0x3b/0x2c0 [ 102.533696][ T8195] inode_init_always_gfp+0xc6f/0xfb0 [ 102.533714][ T8195] alloc_inode+0x8e/0x250 [ 102.533727][ T8195] sock_alloc+0x44/0x280 [ 102.533745][ T8195] ? security_socket_create+0x7f/0x250 [ 102.533761][ T8195] __sock_create+0xc2/0x860 [ 102.533777][ T8195] __sys_socket+0x14d/0x260 [ 102.533793][ T8195] ? __pfx___sys_socket+0x10/0x10 [ 102.533812][ T8195] __x64_sys_socket+0x72/0xb0 [ 102.533827][ T8195] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.533843][ T8195] do_syscall_64+0x123/0x790 [ 102.533860][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.533872][ T8195] RIP: 0033:0x7f9e3d59e1d9 [ 102.533881][ T8195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.533891][ T8195] RSP: 002b:00007f9e3e4e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.533902][ T8195] RAX: ffffffffffffffda RBX: 00007f9e3d825fa0 RCX: 00007f9e3d59e1d9 [ 102.533909][ T8195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 102.533915][ T8195] RBP: 00007f9e3d635888 R08: 0000000000000000 R09: 0000000000000000 [ 102.533922][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.533928][ T8195] R13: 00007f9e3d826038 R14: 00007f9e3d825fa0 R15: 00007ffeaf520fc8 [ 102.533942][ T8195] [ 102.533954][ T8195] socket: no more sockets [ 102.582109][ T8195] XFS (loop0): SB validate failed with error -5. [ 102.660209][ T5100] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 102.684005][ T8205] netlink: 'syz.6.526': attribute type 1 has an invalid length. [ 102.704391][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.526'. [ 102.722095][ T8208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.731231][ T43] audit: type=1326 audit(1791764147.132:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.731262][ T43] audit: type=1326 audit(1791764147.132:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.731282][ T43] audit: type=1326 audit(1791764147.132:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.731302][ T43] audit: type=1326 audit(1791764147.132:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.731322][ T43] audit: type=1326 audit(1791764147.132:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.731342][ T43] audit: type=1326 audit(1791764147.132:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8154d9e1d9 code=0x50000 [ 102.804545][ T8215] jffs2: notice: (8215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 102.807131][ T8210] tun0: tun_chr_ioctl cmd 1074025675 [ 102.807143][ T8210] tun0: persist enabled [ 102.807187][ T8211] tun0: tun_chr_ioctl cmd 1074025675 [ 102.807202][ T8211] tun0: persist disabled [ 103.118266][ T8233] netlink: 'syz.6.533': attribute type 11 has an invalid length. [ 103.134989][ T8234] sctp: [Deprecated]: syz.0.532 (pid 8234) Use of int in max_burst socket option deprecated. [ 103.134989][ T8234] Use struct sctp_assoc_value instead [ 103.254870][ T8231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.277421][ T8233] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 103.277438][ T8233] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 103.343740][ T8233] netlink: 'syz.6.533': attribute type 10 has an invalid length. [ 104.162902][ T8246] syzkaller0: entered promiscuous mode [ 104.162916][ T8246] syzkaller0: entered allmulticast mode [ 104.169436][ T8246] netlink: 'syz.6.537': attribute type 2 has an invalid length. [ 104.487338][ T8086] syz.2.489 (8086) used greatest stack depth: 17160 bytes left [ 104.614197][ T8257] tmpfs: Unknown parameter '\a' [ 104.796525][ T8269] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 104.825389][ T8272] netlink: 'syz.6.547': attribute type 10 has an invalid length. [ 104.941423][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.982720][ T8279] FAULT_INJECTION: forcing a failure. [ 104.982720][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.982742][ T8279] CPU: 2 UID: 0 PID: 8279 Comm: syz.6.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.982757][ T8279] Tainted: [L]=SOFTLOCKUP [ 104.982761][ T8279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.982767][ T8279] Call Trace: [ 104.982772][ T8279] [ 104.982776][ T8279] dump_stack_lvl+0x100/0x190 [ 104.982797][ T8279] should_fail_ex.cold+0x5/0xa [ 104.982815][ T8279] _copy_from_user+0x2e/0xd0 [ 104.982831][ T8279] ucma_connect+0x10e/0x400 [ 104.982843][ T8279] ? __pfx_ucma_connect+0x10/0x10 [ 104.982855][ T8279] ? __pfx__kstrtoull+0x10/0x10 [ 104.982883][ T8279] ? __pfx_ucma_connect+0x10/0x10 [ 104.982895][ T8279] ucma_write+0x1fb/0x330 [ 104.982912][ T8279] ? __pfx_ucma_write+0x10/0x10 [ 104.982928][ T8279] ? bpf_lsm_file_permission+0x9/0x10 [ 104.982945][ T8279] ? security_file_permission+0x76/0x210 [ 104.982962][ T8279] ? rw_verify_area+0xce/0x6d0 [ 104.982977][ T8279] vfs_write+0x2aa/0x1050 [ 104.982991][ T8279] ? __pfx_ucma_write+0x10/0x10 [ 104.983007][ T8279] ? lock_acquire+0x1d1/0x380 [ 104.983020][ T8279] ? __fget_files+0x34/0x3d0 [ 104.983036][ T8279] ? __pfx_vfs_write+0x10/0x10 [ 104.983048][ T8279] ? find_held_lock+0x2b/0x80 [ 104.983064][ T8279] ? __fget_files+0x215/0x3d0 [ 104.983079][ T8279] ? __fget_files+0x215/0x3d0 [ 104.983097][ T8279] ? __fget_files+0x21f/0x3d0 [ 104.983117][ T8279] ksys_write+0x1f8/0x250 [ 104.983144][ T8279] ? __pfx_ksys_write+0x10/0x10 [ 104.983162][ T8279] do_syscall_64+0x123/0x790 [ 104.983180][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.983192][ T8279] RIP: 0033:0x7f385f19e1d9 [ 104.983201][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.983212][ T8279] RSP: 002b:00007f3860095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.983223][ T8279] RAX: ffffffffffffffda RBX: 00007f385f425fa0 RCX: 00007f385f19e1d9 [ 104.983230][ T8279] RDX: 0000000000000120 RSI: 00002000000003c0 RDI: 0000000000000003 [ 104.983236][ T8279] RBP: 00007f3860095090 R08: 0000000000000000 R09: 0000000000000000 [ 104.983243][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.983249][ T8279] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 104.983264][ T8279] [ 105.102932][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.105097][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.105119][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 105.121480][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.121502][ T10] usb 5-1: Product: syz [ 105.121514][ T10] usb 5-1: Manufacturer: syz [ 105.121526][ T10] usb 5-1: SerialNumber: syz [ 105.132202][ T8282] netlink: 'syz.6.551': attribute type 1 has an invalid length. [ 105.132290][ T10] cdc_mbim 5-1:1.0: skipping garbage [ 105.338881][ T8261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.781171][ T64] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 105.931565][ T64] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 105.931590][ T64] usb 11-1: too many configurations: 102, using maximum allowed: 8 [ 105.932406][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.932418][ T64] usb 11-1: config 1 has no interface number 0 [ 105.933185][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.933196][ T64] usb 11-1: config 1 has no interface number 0 [ 105.933959][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.933970][ T64] usb 11-1: config 1 has no interface number 0 [ 105.934712][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.934723][ T64] usb 11-1: config 1 has no interface number 0 [ 105.935478][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.935490][ T64] usb 11-1: config 1 has no interface number 0 [ 105.936225][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.936237][ T64] usb 11-1: config 1 has no interface number 0 [ 105.936945][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.936956][ T64] usb 11-1: config 1 has no interface number 0 [ 105.938542][ T64] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.938556][ T64] usb 11-1: config 1 has no interface number 0 [ 105.941361][ T64] usb 11-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 105.941374][ T64] usb 11-1: Product: syz [ 105.941382][ T64] usb 11-1: Manufacturer: syz [ 105.941389][ T64] usb 11-1: SerialNumber: syz [ 105.944044][ T8261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.944963][ T10] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 105.949964][ T10] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 105.951875][ T64] usb 11-1: 3:0 : does not exist [ 105.951892][ T64] usb 11-1: 3:0 : does not exist [ 105.954905][ T10] wwan wwan0: port wwan0mbim0 attached [ 105.992627][ T10] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2e:9b:a3:29:e4:2c [ 106.036477][ T43] kauditd_printk_skb: 23788 callbacks suppressed [ 106.036493][ T43] audit: type=1400 audit(1791764150.442:24941): avc: denied { read } for pid=5445 comm="dhcpcd" name="n51" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.036529][ T43] audit: type=1400 audit(1791764150.442:24942): avc: denied { open } for pid=5445 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.036566][ T43] audit: type=1400 audit(1791764150.442:24943): avc: denied { getattr } for pid=5445 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.146646][ T43] audit: type=1400 audit(1791764150.552:24944): avc: denied { read write } for pid=8260 comm="syz.0.543" name="cdc-wdm0" dev="devtmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 106.146856][ T43] audit: type=1400 audit(1791764150.552:24945): avc: denied { open } for pid=8260 comm="syz.0.543" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 106.149448][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.149530][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.149762][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.149780][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.149978][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.149992][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.150199][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.150215][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.150461][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.150477][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.150716][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.150732][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.151012][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.151028][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.151243][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.151258][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.151466][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.151478][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.151681][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 106.151696][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 106.185736][ T10] usb 11-1: USB disconnect, device number 3 [ 106.352812][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 106.354507][ T7247] usb 5-1: USB disconnect, device number 10 [ 106.355339][ T7247] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 106.427072][ T7247] wwan wwan0: port wwan0mbim0 disconnected [ 106.828376][ T43] audit: type=1400 audit(1791764151.232:24946): avc: denied { read write } for pid=8303 comm="syz.6.557" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.828690][ T43] audit: type=1400 audit(1791764151.232:24947): avc: denied { open } for pid=8303 comm="syz.6.557" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.872348][ T43] audit: type=1400 audit(1791764151.282:24948): avc: denied { recv } for pid=5718 comm="syz-executor" saddr=127.0.0.1 src=43318 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 106.984546][ T8312] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 108.860183][ T8296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.864491][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 108.939018][ T43] audit: type=1400 audit(1791764153.342:24949): avc: denied { transfer } for pid=8321 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 108.968239][ T43] audit: type=1400 audit(1791764153.372:24950): avc: denied { write } for pid=8316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.972007][ T8318] sctp: [Deprecated]: syz.6.560 (pid 8318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.972007][ T8318] Use struct sctp_sack_info instead [ 108.988233][ T8327] cramfs: checking physical address 0x0000000101340000 for linear cramfs image [ 108.988336][ T8327] cramfs: wrong magic [ 108.988419][ T8327] mtd0: Can't lookup blockdev [ 109.065346][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 109.065366][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 109.065386][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 109.065399][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 109.099816][ T8336] overlayfs: statfs failed on './file0' [ 109.212467][ T8349] binder: 8348:8349 ioctl c0306201 200000000200 returned -14 [ 109.731031][ T852] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 109.882064][ T852] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 109.882904][ T852] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.095564][ T852] cdc_acm 11-1:1.0: ttyACM0: USB ACM device [ 110.691711][ T5845] usb 11-1: USB disconnect, device number 4 [ 111.021203][ T8405] FAULT_INJECTION: forcing a failure. [ 111.021203][ T8405] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.021237][ T8405] CPU: 2 UID: 0 PID: 8405 Comm: syz.0.582 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.021260][ T8405] Tainted: [L]=SOFTLOCKUP [ 111.021264][ T8405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.021271][ T8405] Call Trace: [ 111.021275][ T8405] [ 111.021280][ T8405] dump_stack_lvl+0x100/0x190 [ 111.021310][ T8405] should_fail_ex.cold+0x5/0xa [ 111.021326][ T8405] get_futex_key+0x1d0/0x14f0 [ 111.021344][ T8405] ? __pfx_get_futex_key+0x10/0x10 [ 111.021364][ T8405] futex_wait_setup+0x91/0x540 [ 111.021381][ T8405] __futex_wait+0x19f/0x300 [ 111.021394][ T8405] ? __pfx___futex_wait+0x10/0x10 [ 111.021405][ T8405] ? futex_hash+0x311/0x400 [ 111.021421][ T8405] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.021435][ T8405] ? __pfx_futex_hash+0x10/0x10 [ 111.021450][ T8405] ? putname+0xb1/0x110 [ 111.021463][ T8405] ? kasan_save_stack+0x3f/0x50 [ 111.021481][ T8405] futex_wait+0xe6/0x370 [ 111.021493][ T8405] ? __pfx_futex_wait+0x10/0x10 [ 111.021512][ T8405] do_futex+0x265/0x440 [ 111.021529][ T8405] ? __pfx_do_futex+0x10/0x10 [ 111.021549][ T8405] __x64_sys_futex+0x34f/0x4d0 [ 111.021566][ T8405] ? fdget_pos+0x2c0/0x380 [ 111.021577][ T8405] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.021593][ T8405] ? ksys_write+0x1ac/0x250 [ 111.021607][ T8405] ? __pfx_ksys_write+0x10/0x10 [ 111.021624][ T8405] do_syscall_64+0x123/0x790 [ 111.021645][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.021656][ T8405] RIP: 0033:0x7f9e3d59e1d9 [ 111.021665][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.021676][ T8405] RSP: 002b:00007f9e3e4e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.021687][ T8405] RAX: ffffffffffffffda RBX: 00007f9e3d825fa8 RCX: 00007f9e3d59e1d9 [ 111.021694][ T8405] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e3d825fa8 [ 111.021701][ T8405] RBP: 00007f9e3d825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.021707][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.021713][ T8405] R13: 00007f9e3d826038 R14: 00007ffeaf520ee0 R15: 00007ffeaf520fc8 [ 111.021728][ T8405] [ 111.026671][ T8405] FAULT_INJECTION: forcing a failure. [ 111.026671][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 111.026690][ T8405] CPU: 2 UID: 0 PID: 8405 Comm: syz.0.582 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.026705][ T8405] Tainted: [L]=SOFTLOCKUP [ 111.026709][ T8405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.026716][ T8405] Call Trace: [ 111.026720][ T8405] [ 111.026724][ T8405] dump_stack_lvl+0x100/0x190 [ 111.026744][ T8405] should_fail_ex.cold+0x5/0xa [ 111.026760][ T8405] should_failslab+0xc2/0x120 [ 111.026778][ T8405] __kmalloc_cache_noprof+0x91/0x6d0 [ 111.026791][ T8405] ? __alloc_workqueue+0x155/0x1950 [ 111.026808][ T8405] __alloc_workqueue+0x155/0x1950 [ 111.026822][ T8405] ? __pfx_vsnprintf+0x10/0x10 [ 111.026850][ T8405] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 111.026865][ T8405] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.026881][ T8405] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.026898][ T8405] alloc_workqueue_noprof+0xc7/0x130 [ 111.026913][ T8405] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 111.026931][ T8405] ? __pfx___debug_object_init+0x10/0x10 [ 111.026952][ T8405] nci_register_device+0x394/0xb80 [ 111.026967][ T8405] ? __pfx_nci_register_device+0x10/0x10 [ 111.026983][ T8405] ? lockdep_init_map_type+0x5c/0x250 [ 111.026999][ T8405] virtual_ncidev_open+0x141/0x220 [ 111.027013][ T8405] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 111.027025][ T8405] misc_open+0x26d/0x450 [ 111.027040][ T8405] ? __pfx_misc_open+0x10/0x10 [ 111.027055][ T8405] chrdev_open+0x234/0x6a0 [ 111.027071][ T8405] ? __pfx_chrdev_open+0x10/0x10 [ 111.027088][ T8405] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 111.027104][ T8405] do_dentry_open+0x6ab/0x14d0 [ 111.027118][ T8405] ? __pfx_chrdev_open+0x10/0x10 [ 111.027136][ T8405] vfs_open+0x82/0x3f0 [ 111.027156][ T8405] path_openat+0x19fa/0x2440 [ 111.027174][ T8405] ? __pfx_path_openat+0x10/0x10 [ 111.027195][ T8405] do_file_open+0x20e/0x430 [ 111.027213][ T8405] ? __pfx_do_file_open+0x10/0x10 [ 111.027240][ T8405] ? _raw_spin_unlock+0x28/0x50 [ 111.027259][ T8405] ? alloc_fd+0x471/0x7a0 [ 111.027280][ T8405] do_sys_openat2+0x10f/0x1e0 [ 111.027290][ T8405] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.027301][ T8405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.027322][ T8405] __x64_sys_openat+0x12d/0x210 [ 111.027334][ T8405] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.027350][ T8405] do_syscall_64+0x123/0x790 [ 111.027372][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.027388][ T8405] RIP: 0033:0x7f9e3d59e1d9 [ 111.027400][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.027414][ T8405] RSP: 002b:00007f9e3e4e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.027430][ T8405] RAX: ffffffffffffffda RBX: 00007f9e3d825fa0 RCX: 00007f9e3d59e1d9 [ 111.027442][ T8405] RDX: 0000000000000002 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 111.027449][ T8405] RBP: 00007f9e3d635888 R08: 0000000000000000 R09: 0000000000000000 [ 111.027455][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.027462][ T8405] R13: 00007f9e3d826038 R14: 00007f9e3d825fa0 R15: 00007ffeaf520fc8 [ 111.027478][ T8405] [ 111.064399][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 111.064416][ T43] audit: type=1400 audit(1791764155.472:24971): avc: denied { write } for pid=8403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.113977][ T43] audit: type=1400 audit(1791764155.522:24972): avc: denied { write } for pid=8413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.221682][ T43] audit: type=1400 audit(1791764155.622:24973): avc: denied { write } for pid=8415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.281378][ T64] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 111.290681][ T43] audit: type=1400 audit(1791764155.692:24974): avc: denied { write } for pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.411342][ T64] usb 5-1: device descriptor read/64, error -71 [ 111.437141][ T43] audit: type=1400 audit(1791764155.842:24975): avc: denied { write } for pid=8423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.498272][ T43] audit: type=1400 audit(1791764155.902:24976): avc: denied { setopt } for pid=8428 comm="syz.6.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.499053][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.585'. [ 111.518499][ T43] audit: type=1400 audit(1791764155.922:24977): avc: denied { write } for pid=8426 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.519801][ T8430] mmap: syz.5.584 (8430) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.567654][ T43] audit: type=1400 audit(1791764155.972:24978): avc: denied { map } for pid=8433 comm="syz.5.586" path="socket:[26654]" dev="sockfs" ino=26654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.567702][ T43] audit: type=1400 audit(1791764155.972:24979): avc: denied { read } for pid=8433 comm="syz.5.586" path="socket:[26654]" dev="sockfs" ino=26654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.613265][ T43] audit: type=1400 audit(1791764156.022:24980): avc: denied { write } for pid=8435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.661523][ T64] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 111.783261][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d81b000: rx timeout, send abort [ 111.791488][ T64] usb 5-1: device descriptor read/64, error -71 [ 111.911361][ T64] usb usb5-port1: attempt power cycle [ 112.262526][ T64] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 112.282672][ T64] usb 5-1: device descriptor read/8, error -71 [ 112.283392][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d818400: rx timeout, send abort [ 112.284738][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d81b000: abort rx timeout. Force session deactivation [ 112.318605][ T8452] ip_tables: iptables: counters copy to user failed while replacing table [ 112.319029][ T8452] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 112.500387][ T8462] FAULT_INJECTION: forcing a failure. [ 112.500387][ T8462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.500411][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.6.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.500426][ T8462] Tainted: [L]=SOFTLOCKUP [ 112.500430][ T8462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.500436][ T8462] Call Trace: [ 112.500440][ T8462] [ 112.500445][ T8462] dump_stack_lvl+0x100/0x190 [ 112.500466][ T8462] should_fail_ex.cold+0x5/0xa [ 112.500483][ T8462] _copy_from_user+0x2e/0xd0 [ 112.500500][ T8462] __sys_bpf+0x2f5/0x4a30 [ 112.500517][ T8462] ? __pfx___sys_bpf+0x10/0x10 [ 112.500528][ T8462] ? find_held_lock+0x2b/0x80 [ 112.500556][ T8462] ? futex_wake+0x4ea/0x5e0 [ 112.500578][ T8462] ? rcu_read_lock_any_held+0x6a/0x90 [ 112.500590][ T8462] ? find_held_lock+0x2b/0x80 [ 112.500607][ T8462] ? ksys_write+0x190/0x250 [ 112.500621][ T8462] ? ksys_write+0x190/0x250 [ 112.500644][ T8462] ? __x64_sys_futex+0x34f/0x4d0 [ 112.500661][ T8462] ? __x64_sys_futex+0x358/0x4d0 [ 112.500680][ T8462] ? xfd_validate_state+0x129/0x190 [ 112.500694][ T8462] ? __x64_sys_bpf+0xce/0x140 [ 112.500705][ T8462] __x64_sys_bpf+0xce/0x140 [ 112.500718][ T8462] ? do_syscall_64+0xae/0x790 [ 112.500735][ T8462] do_syscall_64+0x123/0x790 [ 112.500753][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.500767][ T8462] RIP: 0033:0x7f385f19e1d9 [ 112.500778][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.500789][ T8462] RSP: 002b:00007f3860095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.500802][ T8462] RAX: ffffffffffffffda RBX: 00007f385f425fa0 RCX: 00007f385f19e1d9 [ 112.500809][ T8462] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012 [ 112.500816][ T8462] RBP: 00007f385f235888 R08: 0000000000000000 R09: 0000000000000000 [ 112.500843][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.500850][ T8462] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 112.500866][ T8462] [ 112.552338][ T64] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 112.579139][ T64] usb 5-1: device descriptor read/8, error -71 [ 112.691888][ T64] usb usb5-port1: unable to enumerate USB device [ 112.783491][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d818400: abort rx timeout. Force session deactivation [ 112.881023][ T1481] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 113.031958][ T1481] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 113.034836][ T1481] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.034854][ T1481] usb 11-1: Product: syz [ 113.034865][ T1481] usb 11-1: Manufacturer: syz [ 113.034876][ T1481] usb 11-1: SerialNumber: syz [ 113.037273][ T1481] usb 11-1: config 0 descriptor?? [ 113.223554][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 113.223790][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 113.223803][ T8470] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 113.223810][ T8470] UDF-fs: Scanning with blocksize 512 failed [ 113.224728][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 113.224806][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 113.224817][ T8470] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 113.224824][ T8470] UDF-fs: Scanning with blocksize 1024 failed [ 113.225125][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 113.225173][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 113.225183][ T8470] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 113.225190][ T8470] UDF-fs: Scanning with blocksize 2048 failed [ 113.225494][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 113.225563][ T8470] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 113.225579][ T8470] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 113.225589][ T8470] UDF-fs: Scanning with blocksize 4096 failed [ 113.225596][ T8470] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 113.248552][ T10] usb 11-1: USB disconnect, device number 5 [ 113.541121][ T852] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 113.692674][ T852] usb 10-1: not running at top speed; connect to a high speed hub [ 113.692693][ T852] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 113.693469][ T852] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.693491][ T852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.693503][ T852] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.693522][ T852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.699359][ T852] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 113.700850][ T852] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 113.730848][ T852] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 113.732092][ T852] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 113.732175][ T852] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 113.741333][ T852] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 113.899422][ T852] usb 10-1: USB disconnect, device number 13 [ 113.905685][ T852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 113.911586][ T852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 113.912265][ T852] keyspan 10-1:1.0: device disconnected [ 114.069321][ T8486] ip_tables: iptables: counters copy to user failed while replacing table [ 114.069738][ T8486] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 114.138201][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 114.154388][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 114.154413][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 114.565289][ T8501] ptrace attach of "/syz-executor exec"[6380] was attempted by "/syz-executor exec"[8501] [ 115.185017][ T8519] bond0: (slave macsec0): Error: Device can not be enslaved while up [ 115.351738][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.358965][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.360029][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.370302][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.375439][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.386364][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 115.567748][ T8526] lo speed is unknown, defaulting to 1000 [ 115.612185][ T6133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.612217][ T6133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.620567][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.620'. [ 115.670492][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670527][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670555][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670582][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670609][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670635][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670662][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670689][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670716][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670742][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670769][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670795][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670822][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670848][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670874][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.670901][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678423][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678497][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678526][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678577][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678627][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678677][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678726][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678776][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678825][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678875][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678929][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.678981][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679033][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679082][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679131][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679182][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679235][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679286][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679336][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679385][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679434][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679484][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679533][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679583][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679632][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679681][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679730][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679780][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679830][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679879][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679930][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.679979][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680029][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680078][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680126][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680176][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680230][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680280][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680334][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680384][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680435][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680486][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680535][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680646][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680702][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680730][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680779][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.680829][ T5732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.747378][ T6133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.747399][ T6133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.812926][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.812971][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.814893][ T8526] bridge_slave_0: entered allmulticast mode [ 115.815615][ T8526] bridge_slave_0: entered promiscuous mode [ 115.817738][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.817778][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.817830][ T8526] bridge_slave_1: entered allmulticast mode [ 115.818572][ T8526] bridge_slave_1: entered promiscuous mode [ 115.848893][ T6133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.848926][ T6133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.863230][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.865913][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.886643][ T8526] team0: Port device team_slave_0 added [ 115.896031][ T8526] team0: Port device team_slave_1 added [ 115.923742][ T6133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.923764][ T6133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.927137][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.927149][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.927167][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.928071][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.928079][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.928092][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.960882][ T8526] hsr_slave_0: entered promiscuous mode [ 115.961797][ T8526] hsr_slave_1: entered promiscuous mode [ 115.962406][ T8526] debugfs: 'hsr0' already exists in 'hsr' [ 115.962424][ T8526] Cannot create hsr debugfs directory [ 116.113199][ T6133] dvmrp6: left allmulticast mode [ 116.236865][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.239190][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.240435][ T6133] bond0 (unregistering): Released all slaves [ 116.250715][ T6133] bond1 (unregistering): (slave veth3): Releasing backup interface [ 116.255012][ T6133] bond1 (unregistering): (slave dummy0): Removing an active aggregator [ 116.255703][ T6133] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 116.257238][ T6133] bond1 (unregistering): Released all slaves [ 116.332111][ T8526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 116.343030][ T8526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.367149][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 116.367162][ T43] audit: type=1400 audit(1791764160.772:25010): avc: denied { write } for pid=8588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.371564][ T8526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.381916][ T8526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.382326][ T5866] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 116.382406][ T8526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.385754][ T8526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.396622][ T8526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.398702][ T8526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.423655][ T43] audit: type=1400 audit(1791764160.832:25011): avc: denied { write } for pid=8593 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.447714][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.479201][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 116.488745][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.492333][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.492397][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.496400][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.496468][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.542765][ T5866] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 116.543651][ T5866] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.543674][ T5866] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 116.543688][ T5866] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.543707][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.567175][ T43] audit: type=1400 audit(1791764160.972:25012): avc: denied { write } for pid=8602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.625832][ T43] audit: type=1400 audit(1791764161.032:25013): avc: denied { write } for pid=8607 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.660202][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 116.747671][ T6133] hsr_slave_0: left promiscuous mode [ 116.748919][ T6133] hsr_slave_1: left promiscuous mode [ 116.749961][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.749975][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.752119][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.752136][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.759857][ T43] audit: type=1400 audit(1791764161.162:25014): avc: denied { write } for pid=8613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.777520][ T6133] veth1_macvtap: left promiscuous mode [ 116.777543][ T6133] veth0_macvtap: left promiscuous mode [ 116.777586][ T6133] veth1_vlan: left promiscuous mode [ 116.777618][ T6133] veth0_vlan: left promiscuous mode [ 116.810038][ T43] audit: type=1400 audit(1791764161.212:25015): avc: denied { write } for pid=8618 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.943350][ T8622] binder_alloc: binder_alloc_mmap_handler: 8621 200000ffe000-200001000000 already mapped failed -16 [ 116.961453][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 116.970374][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 116.980067][ T43] audit: type=1400 audit(1791764161.382:25016): avc: denied { ioctl } for pid=8579 comm="syz.5.626" path="socket:[25082]" dev="sockfs" ino=25082 ioctlcmd=0x6153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 117.033027][ T1164] smc: removing ib device syz0 [ 117.073596][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 117.080063][ T7247] infiniband syz0: ib_query_port failed (-19) [ 117.082791][ T1164] smbdirect: ib_dev[syz0] removed [ 117.084731][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.106018][ T43] audit: type=1400 audit(1791764161.512:25017): avc: denied { listen } for pid=8624 comm="syz.6.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 117.138025][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.214133][ T43] audit: type=1400 audit(1791764161.622:25018): avc: denied { write } for pid=8636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.219700][ T43] audit: type=1400 audit(1791764161.622:25019): avc: denied { read } for pid=8624 comm="syz.6.629" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 117.227858][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.242810][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.247106][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.247266][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.247420][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.248308][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.248505][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 117.309034][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 117.412679][ T8526] veth0_vlan: entered promiscuous mode [ 117.423777][ T8526] veth1_vlan: entered promiscuous mode [ 117.447612][ T8526] veth0_macvtap: entered promiscuous mode [ 117.455717][ T8526] veth1_macvtap: entered promiscuous mode [ 117.467618][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.470664][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.481511][ T5744] Bluetooth: hci4: command tx timeout [ 117.528751][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.529042][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.529390][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.529419][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.605407][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.605421][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.627887][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.627901][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.693389][ T5744] Bluetooth: Frame is too long (len 25, expected len 23) [ 118.186207][ T8666] /dev/sg0: Can't lookup blockdev [ 118.190607][ T8664] syz_tun: entered allmulticast mode [ 118.281240][ T5744] Bluetooth: hci3: command 0x2016 tx timeout [ 118.308467][ T8674] Cache volume key already in use (9p,syz,) [ 118.722249][ T5845] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 118.842290][ T5866] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 118.842303][ T5866] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 118.846742][ T5866] cxacru 10-1:1.0: probe with driver cxacru failed with error -104 [ 118.881803][ T5845] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 118.882693][ T5845] usb 12-1: config 0 has an invalid interface number: 50 but max is 0 [ 118.882713][ T5845] usb 12-1: config 0 has no interface number 0 [ 118.882741][ T5845] usb 12-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.884613][ T5845] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.884632][ T5845] usb 12-1: Product: syz [ 118.884642][ T5845] usb 12-1: Manufacturer: syz [ 118.884654][ T5845] usb 12-1: SerialNumber: syz [ 118.887519][ T5845] usb 12-1: config 0 descriptor?? [ 118.903995][ T8710] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 118.903995][ T8710] program syz.0.643 not setting count and/or reply_len properly [ 118.905214][ T5845] yurex 12-1:0.50: USB YUREX device now attached to Yurex #0 [ 119.010575][ T8713] evm: overlay not supported [ 119.044180][ T5866] usb 10-1: USB disconnect, device number 14 [ 119.149225][ T8722] FAULT_INJECTION: forcing a failure. [ 119.149225][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 119.149255][ T8722] CPU: 2 UID: 0 PID: 8722 Comm: syz.7.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.149272][ T8722] Tainted: [L]=SOFTLOCKUP [ 119.149276][ T8722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.149282][ T8722] Call Trace: [ 119.149286][ T8722] [ 119.149291][ T8722] dump_stack_lvl+0x100/0x190 [ 119.149321][ T8722] should_fail_ex.cold+0x5/0xa [ 119.149339][ T8722] should_failslab+0xc2/0x120 [ 119.149360][ T8722] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.149375][ T8722] ? do_getname+0x35/0x390 [ 119.149389][ T8722] do_getname+0x35/0x390 [ 119.149402][ T8722] user_path_at+0x26/0x60 [ 119.149416][ T8722] __x64_sys_mount+0x1fb/0x310 [ 119.149431][ T8722] ? __pfx___x64_sys_mount+0x10/0x10 [ 119.149447][ T8722] do_syscall_64+0x123/0x790 [ 119.149467][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.149479][ T8722] RIP: 0033:0x7effe499e1d9 [ 119.149488][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.149498][ T8722] RSP: 002b:00007effe589d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.149510][ T8722] RAX: ffffffffffffffda RBX: 00007effe4c26090 RCX: 00007effe499e1d9 [ 119.149518][ T8722] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000140 [ 119.149525][ T8722] RBP: 00007effe4a35888 R08: 0000000000000000 R09: 0000000000000000 [ 119.149532][ T8722] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 119.149539][ T8722] R13: 00007effe4c26128 R14: 00007effe4c26090 R15: 00007ffe795ab5b8 [ 119.149554][ T8722] [ 119.181844][ T8723] FAULT_INJECTION: forcing a failure. [ 119.181844][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 119.181882][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.6.648 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.181907][ T8723] Tainted: [L]=SOFTLOCKUP [ 119.181914][ T8723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.181923][ T8723] Call Trace: [ 119.181929][ T8723] [ 119.181938][ T8723] dump_stack_lvl+0x100/0x190 [ 119.181969][ T8723] should_fail_ex.cold+0x5/0xa [ 119.181996][ T8723] should_failslab+0xc2/0x120 [ 119.182022][ T8723] __kvmalloc_node_noprof+0x113/0x9b0 [ 119.182048][ T8723] ? bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 119.182073][ T8723] bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 119.182092][ T8723] ? __pfx_jit_fill_hole+0x10/0x10 [ 119.182116][ T8723] bpf_int_jit_compile+0x526/0x1820 [ 119.182149][ T8723] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 119.182207][ T8723] __bpf_prog_select_runtime+0x8c3/0xc60 [ 119.182227][ T8723] ? __asan_memcpy+0x3c/0x60 [ 119.182250][ T8723] bpf_prepare_filter+0xd32/0x11e0 [ 119.182281][ T8723] ? __pfx_seccomp_check_filter+0x10/0x10 [ 119.182311][ T8723] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 119.182333][ T8723] ? __asan_memcpy+0x3c/0x60 [ 119.182352][ T8723] ? kmemdup_noprof+0x49/0x60 [ 119.182376][ T8723] bpf_prog_create_from_user+0x1df/0x2e0 [ 119.182397][ T8723] ? __pfx_seccomp_check_filter+0x10/0x10 [ 119.182424][ T8723] do_seccomp+0x870/0x27c0 [ 119.182441][ T8723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.182471][ T8723] ? __pfx_do_seccomp+0x10/0x10 [ 119.182487][ T8723] ? __x64_sys_openat+0x12d/0x210 [ 119.182508][ T8723] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.182531][ T8723] ? ksys_write+0x1ac/0x250 [ 119.182559][ T8723] do_syscall_64+0x123/0x790 [ 119.182585][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.182605][ T8723] RIP: 0033:0x7f385f19e1d9 [ 119.182619][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.182636][ T8723] RSP: 002b:00007f3860095028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 119.182653][ T8723] RAX: ffffffffffffffda RBX: 00007f385f425fa0 RCX: 00007f385f19e1d9 [ 119.182665][ T8723] RDX: 0000200000002640 RSI: 0000000000000000 RDI: 0000000000000001 [ 119.182675][ T8723] RBP: 00007f385f235888 R08: 0000000000000000 R09: 0000000000000000 [ 119.182684][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.182694][ T8723] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 119.182718][ T8723] [ 119.561506][ T5732] Bluetooth: hci4: command tx timeout [ 119.660662][ T8730] program syz.5.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.817877][ T8737] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 119.818850][ T8737] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 119.819968][ T8737] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 120.162895][ T8752] tmpfs: Bad value for 'mpol' [ 120.163123][ T8752] tmpfs: Bad value for 'mpol' [ 120.163346][ T8752] tmpfs: Bad value for 'mpol' [ 120.163559][ T8752] tmpfs: Bad value for 'mpol' [ 120.163777][ T8752] tmpfs: Bad value for 'mpol' [ 120.163990][ T8752] tmpfs: Bad value for 'mpol' [ 120.164208][ T8752] tmpfs: Bad value for 'mpol' [ 120.164425][ T8752] tmpfs: Bad value for 'mpol' [ 120.164638][ T8752] tmpfs: Bad value for 'mpol' [ 120.164926][ T8752] tmpfs: Bad value for 'mpol' [ 120.165143][ T8752] tmpfs: Bad value for 'mpol' [ 120.165358][ T8752] tmpfs: Bad value for 'mpol' [ 120.165571][ T8752] tmpfs: Bad value for 'mpol' [ 120.165781][ T8752] tmpfs: Bad value for 'mpol' [ 120.165994][ T8752] tmpfs: Bad value for 'mpol' [ 120.166229][ T8752] tmpfs: Bad value for 'mpol' [ 120.166451][ T8752] tmpfs: Bad value for 'mpol' [ 120.166664][ T8752] tmpfs: Bad value for 'mpol' [ 120.166878][ T8752] tmpfs: Bad value for 'mpol' [ 120.167090][ T8752] tmpfs: Bad value for 'mpol' [ 120.167309][ T8752] tmpfs: Bad value for 'mpol' [ 120.167521][ T8752] tmpfs: Bad value for 'mpol' [ 120.167735][ T8752] tmpfs: Bad value for 'mpol' [ 120.167947][ T8752] tmpfs: Bad value for 'mpol' [ 120.168160][ T8752] tmpfs: Bad value for 'mpol' [ 120.168379][ T8752] tmpfs: Bad value for 'mpol' [ 120.168594][ T8752] tmpfs: Bad value for 'mpol' [ 120.168797][ T8752] tmpfs: Bad value for 'mpol' [ 120.169017][ T8752] tmpfs: Bad value for 'mpol' [ 120.169230][ T8752] tmpfs: Bad value for 'mpol' [ 120.169451][ T8752] tmpfs: Bad value for 'mpol' [ 120.169664][ T8752] tmpfs: Bad value for 'mpol' [ 120.169893][ T8752] tmpfs: Bad value for 'mpol' [ 120.233141][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 120.244895][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 120.244957][ T5732] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 120.399409][ T8759] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 120.503551][ T8766] ipt_REJECT: TCP_RESET invalid for non-tcp [ 120.874547][ T8787] syzkaller0: entered promiscuous mode [ 120.874567][ T8787] syzkaller0: entered allmulticast mode [ 121.016242][ T8790] netlink: 'syz.0.672': attribute type 11 has an invalid length. [ 121.164276][ C1] usb 12-1: yurex_control_callback - control failed: -2 [ 121.170418][ T7215] usb 12-1: USB disconnect, device number 2 [ 121.173806][ T7215] yurex 12-1:0.50: USB YUREX #0 now disconnected [ 121.291193][ T8802] __nla_validate_parse: 62 callbacks suppressed [ 121.291205][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 121.291219][ T8802] netlink: 312 bytes leftover after parsing attributes in process `syz.5.677'. [ 121.646254][ T5732] Bluetooth: hci4: command tx timeout [ 121.892521][ T8843] CIFS: Attempting to mount //127.0.0.1/share [ 121.910880][ T8848] vcan0: tx address claim with broadcast sa [ 121.974730][ T8843] CIFS: VFS: cifs_mount failed w/return code = -112 [ 122.426006][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.688'. [ 122.554501][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.566229][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.566254][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.614130][ T8883] netlink: 'syz.7.693': attribute type 21 has an invalid length. [ 122.614218][ T8883] netlink: 'syz.7.693': attribute type 3 has an invalid length. [ 122.614227][ T8883] netlink: 144 bytes leftover after parsing attributes in process `syz.7.693'. [ 123.323143][ T8908] FAULT_INJECTION: forcing a failure. [ 123.323143][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 123.323167][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.6.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.323182][ T8908] Tainted: [L]=SOFTLOCKUP [ 123.323185][ T8908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.323192][ T8908] Call Trace: [ 123.323196][ T8908] [ 123.323201][ T8908] dump_stack_lvl+0x100/0x190 [ 123.323222][ T8908] should_fail_ex.cold+0x5/0xa [ 123.323238][ T8908] should_failslab+0xc2/0x120 [ 123.323254][ T8908] __kmalloc_node_noprof+0xff/0x880 [ 123.323269][ T8908] ? __kmalloc_noprof+0x350/0x840 [ 123.323285][ T8908] ? get_callchain_buffers+0x1e5/0x380 [ 123.323302][ T8908] get_callchain_buffers+0x1e5/0x380 [ 123.323315][ T8908] ? security_capable+0x80/0x260 [ 123.323329][ T8908] stack_map_alloc+0x316/0x610 [ 123.323342][ T8908] map_create+0x874/0x30d0 [ 123.323353][ T8908] ? find_held_lock+0x2b/0x80 [ 123.323384][ T8908] ? avc_has_perm_noaudit+0x11e/0x470 [ 123.323398][ T8908] ? avc_has_perm_noaudit+0x11e/0x470 [ 123.323415][ T8908] ? __pfx_map_create+0x10/0x10 [ 123.323425][ T8908] ? avc_has_perm+0x135/0x1e0 [ 123.323438][ T8908] ? __pfx_avc_has_perm+0x10/0x10 [ 123.323449][ T8908] ? __might_fault+0xc5/0x140 [ 123.323463][ T8908] ? __might_fault+0xc5/0x140 [ 123.323477][ T8908] ? selinux_bpf+0xfb/0x150 [ 123.323492][ T8908] __sys_bpf+0x12a0/0x4a30 [ 123.323509][ T8908] ? __pfx___sys_bpf+0x10/0x10 [ 123.323521][ T8908] ? find_held_lock+0x2b/0x80 [ 123.323536][ T8908] ? futex_wake+0x4ea/0x5e0 [ 123.323558][ T8908] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.323568][ T8908] ? find_held_lock+0x2b/0x80 [ 123.323584][ T8908] ? ksys_write+0x190/0x250 [ 123.323597][ T8908] ? ksys_write+0x190/0x250 [ 123.323619][ T8908] ? __x64_sys_futex+0x34f/0x4d0 [ 123.323635][ T8908] ? __x64_sys_futex+0x358/0x4d0 [ 123.323652][ T8908] ? fput+0x7c/0x100 [ 123.323667][ T8908] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.323683][ T8908] ? ksys_write+0x1ac/0x250 [ 123.323697][ T8908] ? __x64_sys_bpf+0xce/0x140 [ 123.323709][ T8908] __x64_sys_bpf+0xce/0x140 [ 123.323722][ T8908] ? do_syscall_64+0xae/0x790 [ 123.323738][ T8908] do_syscall_64+0x123/0x790 [ 123.323755][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.323767][ T8908] RIP: 0033:0x7f385f19e1d9 [ 123.323782][ T8908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.323793][ T8908] RSP: 002b:00007f3860095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.323806][ T8908] RAX: ffffffffffffffda RBX: 00007f385f425fa0 RCX: 00007f385f19e1d9 [ 123.323813][ T8908] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000000 [ 123.323821][ T8908] RBP: 00007f385f235888 R08: 0000000000000000 R09: 0000000000000000 [ 123.323828][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.323834][ T8908] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 123.323851][ T8908] [ 123.528329][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 123.528349][ T43] audit: type=1400 audit(1791764167.932:25039): avc: denied { read write } for pid=8915 comm="syz.6.704" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 123.528392][ T43] audit: type=1400 audit(1791764167.932:25040): avc: denied { ioctl open } for pid=8915 comm="syz.6.704" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 123.619001][ T8919] syz.5.705: attempt to access beyond end of device [ 123.619001][ T8919] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 123.619031][ T8919] gfs2: error -5 reading superblock [ 123.671280][ T50] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 123.732203][ T5732] Bluetooth: hci4: command tx timeout [ 123.831570][ T50] usb 12-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 123.835721][ T50] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 123.835740][ T50] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 123.837350][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.837363][ T50] usb 12-1: Product: syz [ 123.837371][ T50] usb 12-1: Manufacturer: syz [ 123.837379][ T50] usb 12-1: SerialNumber: syz [ 123.839303][ T8897] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 123.839356][ T8897] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 123.841775][ T50] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 123.841785][ T50] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 123.841803][ T50] usbserial_generic 12-1:1.0: generic converter detected [ 123.852492][ T50] usb 12-1: generic converter now attached to ttyUSB0 [ 124.046238][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046591][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046638][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046786][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046831][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046963][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.046987][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047115][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047139][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047272][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047295][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047579][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047613][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047749][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047787][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047930][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.047972][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.048095][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.048137][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.048278][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 124.056600][ T50] usb 12-1: USB disconnect, device number 3 [ 124.073989][ T50] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 124.074288][ T50] usbserial_generic 12-1:1.0: device disconnected [ 124.428682][ T43] audit: type=1400 audit(1791764168.832:25041): avc: denied { listen } for pid=8945 comm="syz.6.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.790470][ T8956] IPVS: set_ctl: invalid protocol: 135 172.30.1.6:20000 [ 124.835262][ T8960] CIFS: Attempting to mount //127.0.0.1/share [ 124.843954][ T8958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8958 comm=syz.5.720 [ 124.844848][ T43] audit: type=1400 audit(1791764169.252:25042): avc: denied { append } for pid=8957 comm="syz.5.720" name="uprobe_events" dev="tracefs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 124.896909][ T8960] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 124.896959][ T8960] CIFS: VFS: cifs_mount failed w/return code = -11 [ 125.584648][ T43] audit: type=1400 audit(1791764169.992:25043): avc: denied { read } for pid=8967 comm="syz.6.722" dev="nsfs" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.584704][ T43] audit: type=1400 audit(1791764169.992:25044): avc: denied { open } for pid=8967 comm="syz.6.722" path="net:[4026533033]" dev="nsfs" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.813273][ T8980] ip6t_hbh: Not strict - not implemented [ 126.288343][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 126.293994][ T9001] xfrm1: entered promiscuous mode [ 126.294012][ T9001] xfrm1: entered allmulticast mode [ 126.320190][ T9001] bond3 (unregistering): Released all slaves [ 126.508724][ T9007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9007 comm=syz.6.731 [ 126.508751][ T9007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9007 comm=syz.6.731 [ 126.552792][ T9007] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.570836][ T9012] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.573759][ T43] audit: type=1400 audit(1791764170.982:25045): avc: denied { bind } for pid=9011 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.578441][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 126.578472][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 126.587509][ T43] audit: type=1400 audit(1791764170.992:25046): avc: denied { bind } for pid=9013 comm="syz.7.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.737423][ T43] audit: type=1400 audit(1791764171.142:25047): avc: denied { write } for pid=9019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.795973][ T43] audit: type=1400 audit(1791764171.202:25048): avc: denied { write } for pid=9026 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.855595][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.444805][ T9038] loop2: detected capacity change from 0 to 7 [ 127.459315][ T9038] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 127.459340][ T9038] loop2: partition table partially beyond EOD, truncated [ 127.459494][ T9038] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 127.498047][ T5748] udevd[5748]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 127.555997][ T50] lg-g15 0003:046D:0A07.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 127.557947][ T50] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input10 [ 127.613662][ T9044] fido_id[9044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.670781][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.744'. [ 127.759995][ T9060] capability: warning: `syz.7.747' uses 32-bit capabilities (legacy support in use) [ 127.811632][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.748'. [ 127.904628][ T9077] netlink: 'syz.7.750': attribute type 10 has an invalid length. [ 127.936995][ T9077] team0 (unregistering): Port device team_slave_0 removed [ 127.942813][ T9077] team0 (unregistering): Port device team_slave_1 removed [ 128.048437][ T9089] FAULT_INJECTION: forcing a failure. [ 128.048437][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.048469][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.6.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.048494][ T9089] Tainted: [L]=SOFTLOCKUP [ 128.048501][ T9089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.048511][ T9089] Call Trace: [ 128.048517][ T9089] [ 128.048524][ T9089] dump_stack_lvl+0x100/0x190 [ 128.048566][ T9089] should_fail_ex.cold+0x5/0xa [ 128.048594][ T9089] _copy_from_iter+0x1f4/0x1690 [ 128.048629][ T9089] ? kmalloc_reserve+0xf9/0x350 [ 128.048659][ T9089] ? __pfx__copy_from_iter+0x10/0x10 [ 128.048686][ T9089] ? __alloc_skb+0x4e9/0x710 [ 128.048710][ T9089] ? __alloc_skb+0x5b7/0x710 [ 128.048725][ T9089] ? __pfx___alloc_skb+0x10/0x10 [ 128.048741][ T9089] ? selinux_file_permission+0x8f/0x6d0 [ 128.048791][ T9089] vhci_write+0x150/0x490 [ 128.048814][ T9089] vfs_write+0x6af/0x1050 [ 128.048837][ T9089] ? __pfx_vhci_write+0x10/0x10 [ 128.048856][ T9089] ? __fget_files+0x34/0x3d0 [ 128.048883][ T9089] ? __pfx_vfs_write+0x10/0x10 [ 128.048903][ T9089] ? find_held_lock+0x2b/0x80 [ 128.048948][ T9089] ksys_write+0x12a/0x250 [ 128.048970][ T9089] ? __pfx_ksys_write+0x10/0x10 [ 128.049000][ T9089] do_syscall_64+0x123/0x790 [ 128.049036][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.049055][ T9089] RIP: 0033:0x7f385f15ea0e [ 128.049070][ T9089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.049088][ T9089] RSP: 002b:00007f3860094fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.049107][ T9089] RAX: ffffffffffffffda RBX: 00007f38600956c0 RCX: 00007f385f15ea0e [ 128.049119][ T9089] RDX: 000000000000000e RSI: 0000200000000a00 RDI: 00000000000000ca [ 128.049131][ T9089] RBP: 00007f385f235888 R08: 0000000000000000 R09: 0000000000000000 [ 128.049142][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.049153][ T9089] R13: 00007f385f426038 R14: 00007f385f425fa0 R15: 00007ffe1a3d2558 [ 128.049179][ T9089] [ 128.248708][ T64] kernel read not supported for file /swaps (pid: 64 comm: kworker/2:2) [ 128.531508][ T43] kauditd_printk_skb: 4629 callbacks suppressed [ 128.531521][ T43] audit: type=1326 audit(1791764172.932:29678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531545][ T43] audit: type=1326 audit(1791764172.932:29679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531566][ T43] audit: type=1326 audit(1791764172.932:29680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531586][ T43] audit: type=1326 audit(1791764172.932:29681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531605][ T43] audit: type=1326 audit(1791764172.932:29682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531625][ T43] audit: type=1326 audit(1791764172.932:29683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531645][ T43] audit: type=1326 audit(1791764172.932:29684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531665][ T43] audit: type=1326 audit(1791764172.932:29685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531684][ T43] audit: type=1326 audit(1791764172.932:29686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.531704][ T43] audit: type=1326 audit(1791764172.932:29687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.6.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385f19e1d9 code=0x50000 [ 128.584775][ T9115] netlink: 'syz.5.764': attribute type 9 has an invalid length. [ 128.944140][ T5809] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x5 [ 129.036357][ T62] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 129.305734][ T5810] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 129.815529][ T5810] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 130.285787][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'. [ 130.417231][ T9170] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 130.438626][ T9170] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZgǽ7@ZI [ 130.992440][ T9177] nbd0: detected capacity change from 0 to 1 [ 131.002920][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.002944][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.002971][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.002993][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003007][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003014][ T5748] ldm_validate_partition_table(): Disk read failed. [ 131.003027][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003041][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003054][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003067][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003075][ T5748] Dev nbd0: unable to read RDB block 0 [ 131.003087][ T5748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.003109][ T5748] nbd0: unable to read partition table [ 131.003195][ T5748] nbd0: partition table beyond EOD, truncated [ 131.015348][ T9177] netlink: 'syz.5.776': attribute type 2 has an invalid length. [ 131.015365][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 131.034858][ T67] block nbd0: Receive control failed (result -32) [ 131.095610][ T9184] can0: slcan on ttynull. [ 131.184040][ T9183] can0 (unregistered): slcan off ttynull. [ 131.343273][ T9196] xt_socket: unknown flags 0x4c [ 131.343542][ T9196] xt_socket: unknown flags 0x4c [ 131.343628][ T9196] xt_socket: unknown flags 0x4c [ 131.343712][ T9196] xt_socket: unknown flags 0x4c [ 131.343815][ T9196] xt_socket: unknown flags 0x4c [ 131.343897][ T9196] xt_socket: unknown flags 0x4c [ 131.343984][ T9196] xt_socket: unknown flags 0x4c [ 131.344069][ T9196] xt_socket: unknown flags 0x4c [ 131.344149][ T9196] xt_socket: unknown flags 0x4c [ 131.344231][ T9196] xt_socket: unknown flags 0x4c [ 131.497998][ T6105] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 131.699625][ T9244] netlink: 25 bytes leftover after parsing attributes in process `syz.5.782'. [ 131.700307][ T9244] eql: entered promiscuous mode [ 131.701989][ T9244] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.782'. [ 131.703729][ T9244] 0XD: renamed from eql [ 131.716702][ T9244] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 131.716730][ T9244] 0XD: left promiscuous mode [ 131.716745][ T9244] 0XD: entered allmulticast mode [ 132.010026][ T9134] ceph: No mds server is up or the cluster is laggy [ 132.100279][ T9261] CUSE: info not properly terminated [ 132.188495][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 132.240198][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 132.242930][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.794'. [ 132.332134][ T6105] input: syz0 as /devices/virtual/misc/uhid/00FF:1B1C:0003.0003/input/input11 [ 132.346833][ T6105] hid-generic 00FF:1B1C:0003.0003: input,hidraw1: HID v0.00 Device [syz0] on syz0 [ 132.390188][ T9295] fido_id[9295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.511237][ T5845] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 132.525498][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.525547][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.579253][ T9302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 132.661617][ T5845] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 132.662705][ T5845] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.663663][ T5845] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.667017][ T5845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.667036][ T5845] usb 11-1: Product: syz [ 132.667047][ T5845] usb 11-1: Manufacturer: syz [ 132.667058][ T5845] usb 11-1: SerialNumber: syz [ 132.697658][ T5845] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 132.706912][ T5845] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 132.715291][ T5845] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 132.830907][ T9310] 9pnet_virtio: no channels available for device syz [ 132.930439][ T5732] Bluetooth: Frame is too long (len 10, expected len 8) [ 132.930463][ T5732] Bluetooth: Wrong link type (-71) [ 133.043427][ T9318] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 133.290645][ T9332] misc userio: No port type given on /dev/userio [ 133.297351][ T9332] /dev/md0: Can't lookup blockdev [ 133.531443][ T9336] xt_IDLETIMER: timeout value is zero [ 133.726978][ T9355] netlink: 'syz.5.809': attribute type 9 has an invalid length. [ 133.865999][ T9368] FAULT_INJECTION: forcing a failure. [ 133.865999][ T9368] name fail_futex, interval 1, probability 0, space 0, times 0 [ 133.866022][ T9368] CPU: 1 UID: 0 PID: 9368 Comm: syz.5.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.866037][ T9368] Tainted: [L]=SOFTLOCKUP [ 133.866041][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.866047][ T9368] Call Trace: [ 133.866051][ T9368] [ 133.866056][ T9368] dump_stack_lvl+0x100/0x190 [ 133.866087][ T9368] should_fail_ex.cold+0x5/0xa [ 133.866129][ T9368] get_futex_key+0x1d0/0x14f0 [ 133.866148][ T9368] ? __pfx_get_futex_key+0x10/0x10 [ 133.866166][ T9368] ? __mutex_unlock_slowpath+0x35d/0x930 [ 133.866190][ T9368] futex_wake+0xf4/0x5e0 [ 133.866204][ T9368] ? __pfx_futex_wake+0x10/0x10 [ 133.866217][ T9368] ? lock_acquire+0x1d1/0x380 [ 133.866230][ T9368] ? detach_task_ctx_data+0x83/0x490 [ 133.866247][ T9368] do_futex+0x2b2/0x440 [ 133.866264][ T9368] ? __pfx_do_futex+0x10/0x10 [ 133.866279][ T9368] ? __might_fault+0xc5/0x140 [ 133.866294][ T9368] mm_exit_exec_release+0x256/0x2f0 [ 133.866308][ T9368] do_exit+0x707/0x2a50 [ 133.866325][ T9368] ? __pfx_do_exit+0x10/0x10 [ 133.866340][ T9368] ? do_raw_spin_lock+0x128/0x260 [ 133.866354][ T9368] ? find_held_lock+0x2b/0x80 [ 133.866370][ T9368] ? get_signal+0x7e0/0x21e0 [ 133.866384][ T9368] do_group_exit+0xd5/0x2a0 [ 133.866400][ T9368] get_signal+0x1ec7/0x21e0 [ 133.866416][ T9368] ? putname+0xb1/0x110 [ 133.866426][ T9368] ? __pfx_get_signal+0x10/0x10 [ 133.866440][ T9368] ? do_futex+0x190/0x440 [ 133.866458][ T9368] arch_do_signal_or_restart+0x91/0x7e0 [ 133.866475][ T9368] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 133.866496][ T9368] ? fput+0x7c/0x100 [ 133.866515][ T9368] exit_to_user_mode_loop+0x139/0x700 [ 133.866530][ T9368] ? rcu_is_watching+0x13/0xc0 [ 133.866547][ T9368] do_syscall_64+0x661/0x790 [ 133.866565][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.866576][ T9368] RIP: 0033:0x7f8154d9e1d9 [ 133.866586][ T9368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.866596][ T9368] RSP: 002b:00007f8155c2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.866608][ T9368] RAX: fffffffffffffe00 RBX: 00007f8155026188 RCX: 00007f8154d9e1d9 [ 133.866615][ T9368] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8155026188 [ 133.866622][ T9368] RBP: 00007f8155026180 R08: 0000000000000000 R09: 0000000000000000 [ 133.866628][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.866635][ T9368] R13: 00007f8155026218 R14: 00007ffc9ea6b0a0 R15: 00007ffc9ea6b188 [ 133.866649][ T9368] [ 134.049810][ T9376] SELinux: policydb magic number 0x6d695f78 does not match expected magic number 0xf97cff8c [ 134.049838][ T9376] SELinux: failed to load policy [ 134.160160][ T9383] ipt_REJECT: ECHOREPLY no longer supported. [ 134.279056][ T9387] ------------[ cut here ]------------ [ 134.279069][ T9387] 1 [ 134.279075][ T9387] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#2: syz.5.817/9387 [ 134.289048][ T9387] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.291153][ T9387] CPU: 2 UID: 0 PID: 9387 Comm: syz.5.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.295574][ T9387] Tainted: [L]=SOFTLOCKUP [ 134.297376][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.302299][ T9387] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.305493][ T9387] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 6f a7 ba 0f 00 0f 85 9d e2 ff ff c6 05 62 a7 ba 0f 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 134.312279][ T9387] RSP: 0018:ffffc9000370f6e8 EFLAGS: 00010246 [ 134.314078][ T9387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.316914][ T9387] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 134.320228][ T9387] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009 [ 134.323949][ T9387] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 134.327234][ T9387] R13: 1ffff920006e1f39 R14: 0000000000000000 R15: 1ffff920006e1ef7 [ 134.331164][ T9387] FS: 00007f8155c706c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 134.335522][ T9387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.338757][ T9387] CR2: 000000110c297c3f CR3: 00000001283dc000 CR4: 0000000000352ef0 [ 134.342246][ T9387] Call Trace: [ 134.343669][ T9387] [ 134.344957][ T9387] ? unwind_next_frame+0xbd/0x2090 [ 134.347049][ T9387] ? lock_acquire+0x1d1/0x380 [ 134.348779][ T9387] ? is_bpf_text_address+0x25/0x1a0 [ 134.350840][ T9387] ? find_held_lock+0x2b/0x80 [ 134.352838][ T9387] ? is_bpf_text_address+0x8a/0x1a0 [ 134.355023][ T9387] ? is_bpf_text_address+0x8a/0x1a0 [ 134.357127][ T9387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.359712][ T9387] ? is_bpf_text_address+0x94/0x1a0 [ 134.362231][ T9387] ? kernel_text_address+0x8d/0x100 [ 134.364493][ T9387] ? __kernel_text_address+0xd/0x30 [ 134.366601][ T9387] ? unwind_get_return_address+0x59/0xa0 [ 134.368635][ T9387] ? arch_stack_walk+0xa6/0xf0 [ 134.370146][ T9387] ? tomoyo_path_number_perm+0x46d/0x580 [ 134.372061][ T9387] ? stack_trace_save+0x8e/0xc0 [ 134.373526][ T9387] ? __pfx_stack_trace_save+0x10/0x10 [ 134.375162][ T9387] ? stack_depot_save_flags+0x27/0x9f0 [ 134.376778][ T9387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.378711][ T9387] ? policy_nodemask+0xed/0x4f0 [ 134.380240][ T9387] alloc_pages_mpol+0x201/0x550 [ 134.381795][ T9387] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 134.383440][ T9387] ___kmalloc_large_node+0xe8/0x130 [ 134.385004][ T9387] __kmalloc_large_node_noprof+0x1c/0x70 [ 134.386707][ T9387] __kmalloc_noprof+0x5a8/0x840 [ 134.388136][ T9387] ? avc_has_extended_perms+0x484/0x1080 [ 134.390156][ T9387] ? drm_syncobj_array_find+0x34/0x3a0 [ 134.392200][ T9387] drm_syncobj_array_find+0x34/0x3a0 [ 134.393943][ T9387] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 134.395943][ T9387] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 134.398115][ T9387] ? drm_dev_enter+0x53/0x170 [ 134.399651][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.401871][ T9387] ? drm_dev_exit+0x41/0x60 [ 134.403386][ T9387] ? drm_dev_exit+0x41/0x60 [ 134.404810][ T9387] drm_ioctl_kernel+0x1f3/0x3e0 [ 134.406393][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.408537][ T9387] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 134.410255][ T9387] drm_ioctl+0x5e6/0xc60 [ 134.411748][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.413941][ T9387] ? __pfx_drm_ioctl+0x10/0x10 [ 134.415509][ T9387] ? __fget_files+0x34/0x3d0 [ 134.417012][ T9387] ? selinux_file_ioctl+0x13b/0x290 [ 134.418730][ T9387] ? selinux_file_ioctl+0xb6/0x290 [ 134.420385][ T9387] ? __pfx_drm_ioctl+0x10/0x10 [ 134.422230][ T9387] __x64_sys_ioctl+0x18e/0x210 [ 134.423798][ T9387] do_syscall_64+0x123/0x790 [ 134.425234][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.427121][ T9387] RIP: 0033:0x7f8154d9e1d9 [ 134.428591][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.434698][ T9387] RSP: 002b:00007f8155c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.437250][ T9387] RAX: ffffffffffffffda RBX: 00007f8155025fa0 RCX: 00007f8154d9e1d9 [ 134.439774][ T9387] RDX: 00002000000009c0 RSI: 00000000c01864cd RDI: 0000000000000007 [ 134.442661][ T9387] RBP: 00007f8154e35888 R08: 0000000000000000 R09: 0000000000000000 [ 134.445196][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.447738][ T9387] R13: 00007f8155026038 R14: 00007f8155025fa0 R15: 00007ffc9ea6b188 [ 134.450436][ T9387] [ 134.451685][ T9387] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.454057][ T9387] CPU: 2 UID: 0 PID: 9387 Comm: syz.5.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.457432][ T9387] Tainted: [L]=SOFTLOCKUP [ 134.458975][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.462174][ T9387] Call Trace: [ 134.463263][ T9387] [ 134.464289][ T9387] dump_stack_lvl+0x100/0x190 [ 134.465796][ T9387] vpanic+0x553/0x970 [ 134.467142][ T9387] ? __pfx_vpanic+0x10/0x10 [ 134.468678][ T9387] panic+0xd1/0xe0 [ 134.470157][ T9387] ? __pfx_panic+0x10/0x10 [ 134.471595][ T9387] check_panic_on_warn.cold+0x19/0x34 [ 134.473336][ T9387] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.475290][ T9387] __warn.cold+0x191/0x318 [ 134.476749][ T9387] __report_bug+0x30f/0x440 [ 134.478265][ T9387] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.480256][ T9387] ? __pfx___report_bug+0x10/0x10 [ 134.481880][ T9387] ? bpf_ksym_find+0x128/0x1c0 [ 134.483463][ T9387] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.485448][ T9387] ? __lock_acquire+0x5c0/0x1f40 [ 134.487079][ T9387] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.489124][ T9387] report_bug+0xb3/0x220 [ 134.490513][ T9387] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.492379][ T9387] handle_bug+0x16a/0x2a0 [ 134.493826][ T9387] exc_invalid_op+0x17/0x50 [ 134.495296][ T9387] asm_exc_invalid_op+0x1a/0x20 [ 134.496859][ T9387] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 134.499167][ T9387] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 6f a7 ba 0f 00 0f 85 9d e2 ff ff c6 05 62 a7 ba 0f 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 134.505379][ T9387] RSP: 0018:ffffc9000370f6e8 EFLAGS: 00010246 [ 134.507306][ T9387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.509950][ T9387] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 134.512461][ T9387] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009 [ 134.514977][ T9387] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 134.517408][ T9387] R13: 1ffff920006e1f39 R14: 0000000000000000 R15: 1ffff920006e1ef7 [ 134.519928][ T9387] ? unwind_next_frame+0xbd/0x2090 [ 134.521530][ T9387] ? lock_acquire+0x1d1/0x380 [ 134.523061][ T9387] ? is_bpf_text_address+0x25/0x1a0 [ 134.524746][ T9387] ? find_held_lock+0x2b/0x80 [ 134.526222][ T9387] ? is_bpf_text_address+0x8a/0x1a0 [ 134.527851][ T9387] ? is_bpf_text_address+0x8a/0x1a0 [ 134.529564][ T9387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.531565][ T9387] ? is_bpf_text_address+0x94/0x1a0 [ 134.533228][ T9387] ? kernel_text_address+0x8d/0x100 [ 134.534892][ T9387] ? __kernel_text_address+0xd/0x30 [ 134.536515][ T9387] ? unwind_get_return_address+0x59/0xa0 [ 134.538307][ T9387] ? arch_stack_walk+0xa6/0xf0 [ 134.539930][ T9387] ? tomoyo_path_number_perm+0x46d/0x580 [ 134.541692][ T9387] ? stack_trace_save+0x8e/0xc0 [ 134.543341][ T9387] ? __pfx_stack_trace_save+0x10/0x10 [ 134.545095][ T9387] ? stack_depot_save_flags+0x27/0x9f0 [ 134.546860][ T9387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.548809][ T9387] ? policy_nodemask+0xed/0x4f0 [ 134.550357][ T9387] alloc_pages_mpol+0x201/0x550 [ 134.551899][ T9387] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 134.553649][ T9387] ___kmalloc_large_node+0xe8/0x130 [ 134.555355][ T9387] __kmalloc_large_node_noprof+0x1c/0x70 [ 134.557177][ T9387] __kmalloc_noprof+0x5a8/0x840 [ 134.558790][ T9387] ? avc_has_extended_perms+0x484/0x1080 [ 134.560530][ T9387] ? drm_syncobj_array_find+0x34/0x3a0 [ 134.562276][ T9387] drm_syncobj_array_find+0x34/0x3a0 [ 134.564081][ T9387] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 134.566067][ T9387] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 134.568155][ T9387] ? drm_dev_enter+0x53/0x170 [ 134.569874][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.572067][ T9387] ? drm_dev_exit+0x41/0x60 [ 134.573553][ T9387] ? drm_dev_exit+0x41/0x60 [ 134.575086][ T9387] drm_ioctl_kernel+0x1f3/0x3e0 [ 134.576624][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.579106][ T9387] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 134.580909][ T9387] drm_ioctl+0x5e6/0xc60 [ 134.582275][ T9387] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 134.584456][ T9387] ? __pfx_drm_ioctl+0x10/0x10 [ 134.585986][ T9387] ? __fget_files+0x34/0x3d0 [ 134.587509][ T9387] ? selinux_file_ioctl+0x13b/0x290 [ 134.589323][ T9387] ? selinux_file_ioctl+0xb6/0x290 [ 134.591453][ T9387] ? __pfx_drm_ioctl+0x10/0x10 [ 134.593475][ T9387] __x64_sys_ioctl+0x18e/0x210 [ 134.595519][ T9387] do_syscall_64+0x123/0x790 [ 134.597194][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.599287][ T9387] RIP: 0033:0x7f8154d9e1d9 [ 134.601188][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.609128][ T9387] RSP: 002b:00007f8155c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.612621][ T9387] RAX: ffffffffffffffda RBX: 00007f8155025fa0 RCX: 00007f8154d9e1d9 [ 134.615926][ T9387] RDX: 00002000000009c0 RSI: 00000000c01864cd RDI: 0000000000000007 [ 134.619212][ T9387] RBP: 00007f8154e35888 R08: 0000000000000000 R09: 0000000000000000 [ 134.622493][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.625787][ T9387] R13: 00007f8155026038 R14: 00007f8155025fa0 R15: 00007ffc9ea6b188 [ 134.629121][ T9387] [ 134.631116][ T9387] Kernel Offset: disabled [ 134.632954][ T9387] Rebooting in 86400 seconds..