last executing test programs: 31.267784521s ago: executing program 0 (id=545): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) fchdir(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$9p(r1, &(0x7f0000000080)="169833dc12889724d39f90061eeba1fade638ffd5ef123150c4b7606707258c55806d52aefed3cab12b38c21510aa9d11a0a35bf761952e8851dfce54fa1bdf81968c944c35e25430bc6198a9d5dfab83bacd01d2bab1afe4d2406d6b7db93b025771e998a3d72d969062a69c9f56da911f1598d008742bdaf56fa5136", 0x7d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0xc0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe05}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9b6b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 30.858367152s ago: executing program 0 (id=553): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 30.739630829s ago: executing program 0 (id=554): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) preadv(r3, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0) close(r2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c683ce93d82e931eb9918e6c0c668b4f313e392aaf661be59d8827686e5920902e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f8672e739a0585b6e0bc2068bba61896d0c08ced479e3b82d5e4406007d86b4585b2c3f7ab12d261578e440cd3f4734fd37072a78ef479702144522dc0f3014e305525b6edcf7cdc6c257e0b38e488fcc99", 0x21e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x54004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000140)) fcntl$setstatus(r0, 0x4, 0x24400) syz_emit_ethernet(0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffff0300000008000700001d000000000000200000cf"], 0x0) (async) syz_emit_ethernet(0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffff0300000008000700001d000000000000200000cf"], 0x0) lseek(r0, 0xffffffffffffffff, 0x2) 30.739081224s ago: executing program 0 (id=555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6f6) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x125d, 0x200000000003) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x24040884) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r10}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r12, 0x0, 0x0}, 0x10) 30.510587209s ago: executing program 0 (id=556): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x63, 0xffffffffffffffff, 0x5f, 0x2, 0xfffffffffffffffd, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x1, 0xa]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) 30.019886284s ago: executing program 0 (id=559): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5, r5], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) close_range(r2, r0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r5, r6, 0x4, 0x5, 0x6}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="e38ab1371c37dc367d4018aea117d4bd5d9254507b1e9b25f9fdc7ceaa05f25ae32521e39b3505ff6c1f33e148aa4aa835e9f157f42eb8b292b07d926308e2cae254acd3b9f5a2650d18da0ebf7b6d72a33d77c42f4f9f47ad4d3a4d6ab418dbf62ba9ef4145cef9c3118c6d0d8cefbb5927f2fe628486f1e66d65326c81fc4273f2c17db175c6c2388b472236016db76a957a0f801e5f6a6d1f1d7f2b2ac45eb1e4c0ea03ef3a68a620bc1500262c416400eef8cb2486f65a31db9170f77697ac0b", 0xc2}, {&(0x7f00000000c0)="daf1723c1550f2555dd700ab1e0a6799a81bb17e90a5cc866d7070378a425d59c5bc979021e016fa2042a4bbd7", 0x2d}, {&(0x7f00000002c0)="8f209f1d9a62286cc29384d97f19ce76d35268ce7a4dea08fab67f816216a310db3125be706d94212d38d811b4dcb8270046706edf9c2658742234d004b2c1713843cb4b84b0c9e8d09deb031f32b719d7f5c4a26bdbac7a01aaa725ea90e33508363410607825413a2a4dfdfab182e681be02e2", 0x74}, {&(0x7f0000000540)="d6b34cb2e54c2c89449497b84727f084778a69d8e5228453a461815eefcebd167c749006a06ca48c5826f912587e5f199e33fb60db4a972d67fd979ad9c829f33bda907e358565b54efa95b86b57451b8e2abd2492f8b18e6e73aa3ca8f877c4b5dd4aa1312207302d181e94a1fad5a753df29c1c942d6f7259b2fe377060fb2d6e95cf835176bbb07bb2f78fe91938cabcffea2ba8b933b002352326906fdff7d611ef728463a3b7640cb0994854bc06d", 0xb1}], 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5, r5], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) (async) close_range(r2, r0, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r5, r6, 0x4, 0x5, 0x6}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="e38ab1371c37dc367d4018aea117d4bd5d9254507b1e9b25f9fdc7ceaa05f25ae32521e39b3505ff6c1f33e148aa4aa835e9f157f42eb8b292b07d926308e2cae254acd3b9f5a2650d18da0ebf7b6d72a33d77c42f4f9f47ad4d3a4d6ab418dbf62ba9ef4145cef9c3118c6d0d8cefbb5927f2fe628486f1e66d65326c81fc4273f2c17db175c6c2388b472236016db76a957a0f801e5f6a6d1f1d7f2b2ac45eb1e4c0ea03ef3a68a620bc1500262c416400eef8cb2486f65a31db9170f77697ac0b", 0xc2}, {&(0x7f00000000c0)="daf1723c1550f2555dd700ab1e0a6799a81bb17e90a5cc866d7070378a425d59c5bc979021e016fa2042a4bbd7", 0x2d}, {&(0x7f00000002c0)="8f209f1d9a62286cc29384d97f19ce76d35268ce7a4dea08fab67f816216a310db3125be706d94212d38d811b4dcb8270046706edf9c2658742234d004b2c1713843cb4b84b0c9e8d09deb031f32b719d7f5c4a26bdbac7a01aaa725ea90e33508363410607825413a2a4dfdfab182e681be02e2", 0x74}, {&(0x7f0000000540)="d6b34cb2e54c2c89449497b84727f084778a69d8e5228453a461815eefcebd167c749006a06ca48c5826f912587e5f199e33fb60db4a972d67fd979ad9c829f33bda907e358565b54efa95b86b57451b8e2abd2492f8b18e6e73aa3ca8f877c4b5dd4aa1312207302d181e94a1fad5a753df29c1c942d6f7259b2fe377060fb2d6e95cf835176bbb07bb2f78fe91938cabcffea2ba8b933b002352326906fdff7d611ef728463a3b7640cb0994854bc06d", 0xb1}], 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r2}) (async) 29.95493719s ago: executing program 32 (id=559): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5, r5], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) close_range(r2, r0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r5, r6, 0x4, 0x5, 0x6}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="e38ab1371c37dc367d4018aea117d4bd5d9254507b1e9b25f9fdc7ceaa05f25ae32521e39b3505ff6c1f33e148aa4aa835e9f157f42eb8b292b07d926308e2cae254acd3b9f5a2650d18da0ebf7b6d72a33d77c42f4f9f47ad4d3a4d6ab418dbf62ba9ef4145cef9c3118c6d0d8cefbb5927f2fe628486f1e66d65326c81fc4273f2c17db175c6c2388b472236016db76a957a0f801e5f6a6d1f1d7f2b2ac45eb1e4c0ea03ef3a68a620bc1500262c416400eef8cb2486f65a31db9170f77697ac0b", 0xc2}, {&(0x7f00000000c0)="daf1723c1550f2555dd700ab1e0a6799a81bb17e90a5cc866d7070378a425d59c5bc979021e016fa2042a4bbd7", 0x2d}, {&(0x7f00000002c0)="8f209f1d9a62286cc29384d97f19ce76d35268ce7a4dea08fab67f816216a310db3125be706d94212d38d811b4dcb8270046706edf9c2658742234d004b2c1713843cb4b84b0c9e8d09deb031f32b719d7f5c4a26bdbac7a01aaa725ea90e33508363410607825413a2a4dfdfab182e681be02e2", 0x74}, {&(0x7f0000000540)="d6b34cb2e54c2c89449497b84727f084778a69d8e5228453a461815eefcebd167c749006a06ca48c5826f912587e5f199e33fb60db4a972d67fd979ad9c829f33bda907e358565b54efa95b86b57451b8e2abd2492f8b18e6e73aa3ca8f877c4b5dd4aa1312207302d181e94a1fad5a753df29c1c942d6f7259b2fe377060fb2d6e95cf835176bbb07bb2f78fe91938cabcffea2ba8b933b002352326906fdff7d611ef728463a3b7640cb0994854bc06d", 0xb1}], 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5, r5], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) (async) close_range(r2, r0, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r5, r6, 0x4, 0x5, 0x6}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="e38ab1371c37dc367d4018aea117d4bd5d9254507b1e9b25f9fdc7ceaa05f25ae32521e39b3505ff6c1f33e148aa4aa835e9f157f42eb8b292b07d926308e2cae254acd3b9f5a2650d18da0ebf7b6d72a33d77c42f4f9f47ad4d3a4d6ab418dbf62ba9ef4145cef9c3118c6d0d8cefbb5927f2fe628486f1e66d65326c81fc4273f2c17db175c6c2388b472236016db76a957a0f801e5f6a6d1f1d7f2b2ac45eb1e4c0ea03ef3a68a620bc1500262c416400eef8cb2486f65a31db9170f77697ac0b", 0xc2}, {&(0x7f00000000c0)="daf1723c1550f2555dd700ab1e0a6799a81bb17e90a5cc866d7070378a425d59c5bc979021e016fa2042a4bbd7", 0x2d}, {&(0x7f00000002c0)="8f209f1d9a62286cc29384d97f19ce76d35268ce7a4dea08fab67f816216a310db3125be706d94212d38d811b4dcb8270046706edf9c2658742234d004b2c1713843cb4b84b0c9e8d09deb031f32b719d7f5c4a26bdbac7a01aaa725ea90e33508363410607825413a2a4dfdfab182e681be02e2", 0x74}, {&(0x7f0000000540)="d6b34cb2e54c2c89449497b84727f084778a69d8e5228453a461815eefcebd167c749006a06ca48c5826f912587e5f199e33fb60db4a972d67fd979ad9c829f33bda907e358565b54efa95b86b57451b8e2abd2492f8b18e6e73aa3ca8f877c4b5dd4aa1312207302d181e94a1fad5a753df29c1c942d6f7259b2fe377060fb2d6e95cf835176bbb07bb2f78fe91938cabcffea2ba8b933b002352326906fdff7d611ef728463a3b7640cb0994854bc06d", 0xb1}], 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r2}) (async) 21.840710819s ago: executing program 1 (id=654): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x2, '\x00', @value64=0x5}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r2 = dup(r1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffffffffffffde, 0xfa00, {0xffffffffffffffff, 0x8000004}}, 0xffcc) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0xa, @win={{0x2, 0x6, 0x9, 0xbff0}, 0x3, 0xd819, &(0x7f0000000140)={{0x5, 0x7, 0x9, 0x6}, &(0x7f0000000100)={{0xfffffffb, 0x6, 0x4, 0x4}, &(0x7f0000000000)={{0x3ff, 0x2, 0x1, 0x6}}}}, 0x19a, &(0x7f0000000180)="2df0fd17b653c3cec1cca45f95002b9994e8de6e050eb21cf3e84ef676003cbf6bf16479948a344963f46bc53c01bf10760ce5f83d7c7ceb853c6c771d5107f6b45f191c", 0x5}}) 20.970953821s ago: executing program 1 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0xf0ffff, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 20.969891347s ago: executing program 1 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x8, 0x0, "16fa889499991fd0bfa8afc55fb90d18bdede1e281c92e6c7b23542603c55c3103a9f4231a20670e859f68cf4cf586999627da9eef0ed14300a502decc702d4d2a2bbdeda7c0dcddada31ecd2e0a4e89"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000002a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000034000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc20000907800bce4bf2e88ee190000020000"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000034000040000006907864010101ac1414aa00006622", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc2000090780000080a00"/20], 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, &(0x7f0000000440)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) 20.819352725s ago: executing program 1 (id=657): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@remote, @default, @rose, @default, @null, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000100)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 20.810008035s ago: executing program 1 (id=658): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000920d780f140f929c409050b362fc712408cf208843b63ae72e71bf438e61fefa6db2e2775209c250ef3afa019535fa5d0f9aa50a535373d591cb7dfe0b5eea436a9c2683f71b97998f5575e158986d37d24815a0631487370098f3931c7c20be5bd0aa998dff53ecf95056978c83b4e40663114672ace7c84c1addecbea853b11f7414b6d"], 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181701, 0x0) 20.500291324s ago: executing program 1 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="9bb0935f21a0", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@x25={0x805, {0x2, 0xb, 0xf3, "2fffc3d29bf563772746ef2cf4f9bbc888424e2f72cc94e06f76fb725396ea2e85aa3592b15abb"}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x40, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="9bb0935f21a0", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@x25={0x805, {0x2, 0xb, 0xf3, "2fffc3d29bf563772746ef2cf4f9bbc888424e2f72cc94e06f76fb725396ea2e85aa3592b15abb"}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) (async) 20.427469013s ago: executing program 33 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="9bb0935f21a0", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@x25={0x805, {0x2, 0xb, 0xf3, "2fffc3d29bf563772746ef2cf4f9bbc888424e2f72cc94e06f76fb725396ea2e85aa3592b15abb"}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x40, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="9bb0935f21a0", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@x25={0x805, {0x2, 0xb, 0xf3, "2fffc3d29bf563772746ef2cf4f9bbc888424e2f72cc94e06f76fb725396ea2e85aa3592b15abb"}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) (async) 18.699526657s ago: executing program 4 (id=684): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x8, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1, 0x100000001}]) io_destroy(r3) syz_open_dev$evdev(0x0, 0x2, 0x862b01) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x80000001, 0x2002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 18.46062135s ago: executing program 4 (id=687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) setreuid(0xee00, 0x0) r4 = getuid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x2, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x2, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40024}, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0x2590f58a) (async) ptrace$pokeuser(0x6, r9, 0x388, 0x2590f58a) fstat(r2, &(0x7f0000000cc0)) (async) fstat(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r12 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) (async) sendmsg$netlink(r14, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="0544e27cf027f36b910b8b5c0f3805e9950f95b37b12fc2a6399f31523e3cdb0a31d4bdf86d1cb8227e1f6883f87b3063fcea3fabbfe9c111e70b84dc8e2", 0x3e}], 0x1, &(0x7f0000000d40)=[@rights={{0x28, 0x1, 0x1, [r5, r6, r8, r0, r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r4, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r13, r0, r5, r14]}}], 0x88, 0x4}, 0x40) syz_open_dev$tty20(0xc, 0x4, 0x1) 18.340526435s ago: executing program 4 (id=688): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x1b) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000080)={0x3, 0x1, 0x14, 0xd, 0x176, &(0x7f0000000200)}) 18.280407067s ago: executing program 4 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000010c0)='./file0/../file0\x00', &(0x7f0000003340)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = syz_pidfd_open(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000003380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000033c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000003240)='./file0/../file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000003280)=ANY=[@ANYRES16=r1, @ANYRES32=r2]) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000032c0)={[0x8000000, 0x3000, 0x26000, 0x70000], 0x7fff, 0x6, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="050029bd7000fedbdf253e00000008000300", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/93, 0x5d}], 0x1, &(0x7f0000000280)=""/246, 0xf6}, 0x10}, {{&(0x7f0000000380)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/76, 0x4c}, {&(0x7f0000003400)=""/139, 0x8b}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/149, 0x95}, {&(0x7f0000000880)=""/232, 0xe8}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000a00)=""/211, 0xd3}], 0x9, &(0x7f0000000bc0)=""/73, 0x49}, 0x5}, {{&(0x7f0000000c40)=@hci, 0x80, &(0x7f0000001040)=[{&(0x7f0000000cc0)=""/67, 0x43}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000d40)=""/11, 0xb}, {&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000e80)=""/12, 0xc}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/133, 0x85}, {&(0x7f0000001000)=""/40, 0x28}], 0x8, &(0x7f00000010c0)}, 0x8001}, {{&(0x7f0000001100)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001180)=""/185, 0xb9}, {&(0x7f0000001240)=""/75, 0x4b}, {&(0x7f00000012c0)=""/110, 0x6e}, {&(0x7f0000001340)=""/59, 0x3b}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/158, 0x9e}], 0x6, &(0x7f00000024c0)=""/99, 0x63}, 0xf}, {{&(0x7f0000002540)=@isdn, 0x80, &(0x7f0000002640)=[{&(0x7f00000034c0)=""/101, 0x65}], 0x1}, 0x400}, {{&(0x7f0000002680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002700)=""/37, 0x25}, {&(0x7f0000002740)=""/238, 0xee}], 0x2, &(0x7f0000002880)=""/201, 0xc9}, 0x7fff}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a00)=""/191, 0xbf}, {&(0x7f0000002ac0)=""/224, 0xe0}, {&(0x7f0000002bc0)=""/36, 0x24}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/190, 0xbe}], 0x5, &(0x7f0000002d80)=""/99, 0x63}, 0x4}, {{&(0x7f0000002e00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/15, 0xf}, {&(0x7f0000002ec0)=""/16, 0x10}, {&(0x7f0000002f00)=""/58, 0x3a}], 0x3, &(0x7f0000002f80)=""/185, 0xb9}, 0x3}], 0x8, 0x20000020, 0x0) 17.408344378s ago: executing program 4 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0xa1ffffff, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 17.138746785s ago: executing program 4 (id=696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) unshare(0x6a040000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0xc7, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0x2d}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x3}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) (async) unshare(0x6a040000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0xc7, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0x2d}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x3}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) 17.106115103s ago: executing program 34 (id=696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) unshare(0x6a040000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0xc7, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0x2d}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x3}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) (async) unshare(0x6a040000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0xc7, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0x2d}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x3}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) 6.150433701s ago: executing program 3 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0xa1ffffffffffffff, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.149789101s ago: executing program 3 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) 6.069161019s ago: executing program 3 (id=851): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x22, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0xc, 0xa, 0x9, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0xd521201a3e8f644, 0x5, 0x0, 0x50, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7933}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000580)=""/212, 0x41100, 0x20, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x1, 0x0, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000700)=[r0], &(0x7f00000007c0)=[{0x1, 0x2, 0x5, 0x9}, {0x3, 0x3, 0x10, 0xc}, {0x3, 0x3, 0x5, 0x1}, {0x1, 0x2, 0x2, 0x2}, {0x3, 0x4, 0x6, 0xa}, {0x5, 0x1, 0xf, 0x1}, {0x0, 0x2, 0x6, 0x9}, {0x2, 0x1, 0x8, 0x3}, {0x2, 0x2, 0x2, 0x1}, {0x2, 0x3, 0x10, 0xb}], 0x10, 0x1}, 0x94) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xf6ed5be5902ef976, 0x108) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.059549215s ago: executing program 3 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x884) 5.990397341s ago: executing program 3 (id=853): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0xe9d, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x9, 0xffffffff}, 0xd0, 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f00000002c0)="6089ffa3447563aa14c0c90866718c381b5aa15787e34a097e762bceff85435a402cc6b73b850ab1559b2455ff6b7b6a1e09aa0ef020fc593efbed8eea94686c697a28ed5a074157711086b3d193d98f9495076d87ed4a40ccd44fb9dbc50e8da1a0609b409c09f3", 0x68) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0xfffffff8, 0x10, 0x7, 0x4, 0x40, 0x3, 0x2, 0x9}}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x4000}, [@IFLA_IFNAME={0x0, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r7, &(0x7f0000000080)={@void, @val={0x2, 0x3, 0x8, 0x1, 0x19, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x27, 0x66, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "8b04ba06175fe851a81ecedc4a3308f7770fda"}}, 0x31) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.788896955s ago: executing program 3 (id=854): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x956, &(0x7f0000000040)={0x0, 0x203cac, 0x40, 0x5, 0x400003c9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) fsmount(r3, 0x0, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write$selinux_load(0xffffffffffffffff, &(0x7f0000000340)={0xf97cff8c, 0x8, 'SE Linux', "f83823906ae6d1e082bd321472869d33d7f7e4c4602ae7806e7717e075c3e5f419fd084f08e3a2c480118d1a6009c83ae9f81f89c97db5bdb4d8562dd0120208d30c449835828e49a91feadd0b610c858f696b2caa9f6833849932754408ba89d47b12e60c6dd34183d157a316b621ef862b80b5c427f39d1c53d83be90f168febff03f820165b75556cb55abb10f2f251490277fe05b0db819841e22f8530fb65b823e1df9e416046fd793a2cb37bc3e24d17d85947d3cb331a3e2c0098c27c486b78fbd1bfff0f026da5ccc47716b85e7d49457280e3a3bb96371b377fafe48fdd8f55055d349517ae3f8987de01dab70f07688f237d2e532aa34b34921a54e66ff217d465852f4ed150606ebc2eb634e5799786d5cef6e4f11a5bdc07a16a22966926dd8c9ee416a1e3b332e690344e4daf527d0ec6eb674a94afd73790a1c9c6314abfc19b2b22ae44ff267c3e4e42fa3ca6ddf6cb4e54d2dab6248be572449f08feed386274aa56b9f4c9c04ed086a94bb8c089943817972ddb83bf3f26a836e0a9686c6af4265d58ad39e2661caa096c5dd66397e1660ec48f85beebcd1e9107ccb8efea519a12bdf823f5b95ee13c12e540eafa9dbe4ffc4392350d42ee7e0d000521a6951e57975f6c8ffcdd3bd5639d367e2dfad6e4ed7095e9657cc7d948438fbd54048be5a0f0bd5757141105e6aa142e5efc31f6ea08b897d1d2112a29b679027a273d1bbd1839bc37f975a0ec77eeac683fe68cca96c2d6fb30f5db239d3e385594478c25acb46499a9f80638cabd67accfc9406dcd5b032484e155fd2f6854ecaeb50405b8f4c8f8c091c32b1c0d050e0bce3afff718c2f63786658ba68dafd74d0b86e64d3cc1bebd6929646928d4b9d0ecc1362fb7afb467ce8ff8539c634e1549a5b18de44cf9291ec7bfaa271e2a1ecd7d8a29c03ceb3928efa1a2df65ad410051ebcff191437a378abdb26b20226eeacd870100de7f8dd9f3221f52132b7e6e15f213f9b425936e6f33d228f8bec3e8f792806e831fe8dc3ecd83b492f382678b3fa98087dbb6c6c95147494099d59dccc8d076ed52bccd35e7c648558fa5faaa3117bb335ab31f280282fe4dcead427b47bdb0fb388064ee9bbe36eebc6aad8b598e0dd98e5aad3f21951d21dc112a7ea85c2b63492986875c3d27f1fcc37d09c9f4ab5ddedc93e8bd8c52e58240d858503a4a0e1ddf2f84daff8293345ddc1e9b6eb346792b1c00fd117b5ba6bb3e26e2c354dd2ce153d34f41f5c7b8cf71cf75691547e402b57ee17661624eb65fde5488c574edc2ef50127f6bc2494dcd117cb1a6fe8b2d3364957f99aab30113db070f5bd704881a4088abebcd94cdc4a4c151c24eae053724ace3a8e74c43169cf175d239dbcdc94e199c3e92ede52041a5cc62d4a0c9f1499ba3e74b735a902b1bc4676c55fa48cd950936339134e85ac5ecc52f4b34f9e01a27b043f34df4f7eec34cc97649322c2908a3a5e3ed04d9dab44dadd87455c78bd23d63e9924f9bfbee7772555533f682b053712667f7cb6f65b483785b2e6c32706c86ee2dba6812818c7c2fef06bd9f378fcc0dbf5b957189f68207937f1cfbc9abead31aeaa6b55d44af776e07409d3b4ad1efed4863d29628ee8624e88b9d0da8a1968210df9cd16c3accc558b2ad49cb4d1003ba65964951bd357f851a6c20847acd1888cc0894749c351293be0b232e70f8bf88fa2843d11a946db17ea9b17fa49e818efbd3790076b67d952f784946f7fc96e9c729d5c2cb62f99589f840ba69b1bb62ab6a65084d0ec9b992eb7b09948c74ab7cfb0d56abe78d85057f012a59a27c01705cc5ca44bc25271cff6c3bdcc26162e60ae878715ce4b865ff51016268cbe4975a49386c95b5b2234a3f6531e6511e8e447b7553291c1f853dccf0ed47c334bf9be553073f459016337bc6fb2be9d8eb7fceb5e7304e18093f9e845d7a4f3ba35321852f026b811bda32b8675580a54335c237d20924ae28d6ba5d26e2196cf0c0fdf971170cac44c9c5fea565138bd9d4472e4b1760ae153eff2f4d8ee95b0aa0e0576f9d64036019eeb4b8d7aa37233abcdaedc8521291d0867ed42c36e56abd7c21fefbe74101c09e78377410500464e9c0e4796bfb76a6daac94ad5c743d50ee4aaf8e5149a808640204b67eccde5c1164947b412d4e128426bc96a04fb38c56e55a3301cd0db16acfbf266720c3c11e14784af34ad4ffa8548720d8fd535cdd21533f2633d1013ee4ee47890d8a64bd1ed83686fe4ec7318bd88b777c3a52abe8cb4d71e9b48f74008221301ef9ab61149f3b3925aa3de3bfb94920e1c6afcc972b30627b4111e343684b7e291558a0cf5ea358330cee1896a2faa41ba131ad358c273d1b30d8292c838ed9e5db56758071cc4679dfb5364cecd31f7c9e5b60c45e3a1d1d4d4dcecc3d0de97fcc9497625f021c81ff2ac5d887d3c251ec817e6c515ccf93afcd1b576dc2749ab700e56ba723e473de0e69400eba84efedd6d1248ca9d11da8c07128bc9867c20a86a2ac7f2f146cb5c88cdecf1c3e4bd573d1ae9aa60f00397240f51e7b1e9a77f65e7079c8e58076bf300f6e40b563f43cc295cbf6df23c21d459f501e09a027291ea8844cd5af2c12bca796aaaa3478f06d0b2ca1ef19e9cad0c6184c37f37848a956cf58d27768b6b9cda2fe23a07bbf75a6d1c46355251779c0811bab07ecae283ef310e9c87a931245ac333016835e900c6513567c7d4c53497cf31933601da7015fa847c358fcc9177446c39981c1a97cc0b65c5cac5a7b3278d6ab0bfb6c1147f5ac52275cecd22c468c488cd2ee19c665cb83385b32e22d2d08780586afb85175760af7696a2a423a872f655ab5f95782b4cf283ca40c0fa522465ec334041c3bed58e75ca8f0bfb6a6f37263ebde1249e4327485a37c45b67a536285924ebe76edb8a0d1bff0152155618957f4175c6c6109e641143768837e90bac7ddfca70e36f156c99dc9da4dad9246f11674ce37d6967db79014c05e15768991895401876ecf3e2b6ef08c5cb89bea80cf2d038ad025e028d38678f40a1ee66299d4eef1c40f3754ce6b01e05a19ff63c9d07b7e1943bbcab877018d3541ba7a417c6842ec11a443afd82bd5f36f54860b05734ed092fc52ccfc4b39a465bd45e2d648b7fadc07999019357b98b772bbc8033c7757289438402f3a77c5b65ee472be7869befe902774c88427d2241a3734e54579b2913bd09396add1146d0bbbcf366b23c82eafde73f0f9e2c59ee4ba24f96257590aa6342b742dcd9f25c007fa4e3d146665329f4b7c041878cb40e304fe9f1a4580676dec175ed896ef18893d5fbf8050d4e7f5aa544622086d7d9099018951e0549a173bc58672b4709ccd94c3f4fd4b424c46446ee4dc9d604cfc6237eea7966f08b06c630f087a5213e1de40a7cb6f509ca058e2f4b8aa6d1222242f9fe4d0e8d2559a6ebc1feafb4029827254c853c96fcd86600dab386ab9aae84ca9093106fa6f1375f0780de7e89c2f62d4cb2147fbb20c9a9f495c44e07dbb89a80d1b4f021f13519b50269fa321e307f64d6120a3274b86dc6ea7db3abd747f238bbf3a7cdd7bbd447741068437de3544eec075ea379aaa0af494aeeecc644bf7218024da095aa568d08dd19a50cb6bee0faa8067920757baba162cf7af21c0b308989fc1658278aa0c917d51ef9c557416243de9d1972f52e507fb49ce8395e1735079118c02b9fa68686731b295b63c76a9c7b04207fa7b2d6627d388aba60cd930c0c8f0c389245e3000e6de4a21addb5f3640c8a08284646904aa07f83bac08d45692b1d7c06672496435f01fcc3dd6d627b26f1f74bb6ab131ed579d51a92b5ed180ffe146bf2222c1fc43fee9d317d970316960a0d2a813f767b7ca32eca4f10270ce39848fa96843a67a51aa7a6c1c53a4d18b1432f66926036cf15e8510901ceb5c9e4c1411af62567b3addc1109c647e2bb5a79238e7958c903c51841480bcc8b734e5e4ae5a52f3d0a3ad03f1fe88be6b238f200087ff8c635308e346383eb9a7c241cf807074106a6d992a720728c7352d07a07d30abb585d4e1cf27a85f0d7c684500675213b61904eeb9aaa1ff58847cfc9bbf074c2155acf70e95814ffcdbb735c81b52262ecdd6e9ba733e635f136cc7a19d2971e3ebddea3bf35cc7a42de0fe5a1a53828de867b7bbfdddbc4b3c051ee36fdfc7f4cff2a81d1d2a713eed35a6e770da4efe811a924ff46dab18c56ec6235c836fbe5e7aed906a86e1209ecc70a94dfb26d946f771fe5cf58da2c8b12d3d39177b65cba9f18f4b55efa83e3f48331cf1aa4f86de4627d9d900e971bcacf84c7b690c3ec7e3e7f31697d491a1a51f9f1fcf32bbf2101da55c7c6ed452d42f41f33acfae594bba1f4001a7d1bcbee047a02a216f6a4a554467db65042e9eaf775caa3185e99124e9ad830542f3727fe183b5e293ba18d08f9d9297a727723a951541df1b65fb1039cf7c08b22ae5cc2990a19cecc19a07b816e8e2033372efde474ad6508d89f1531200c8e18c17d4331a7b6180415101603045993c5c32e462169d51117d492b0b76ee484df600874bd6117989852f1fc7e5dab346e8b0d34d97add6aa27276b7fb5369bdb4e9324545c694d098028c9f0a0c7a9c02051d41251a52ed182a479d2b2873e7a89189f879d4c6b8498e7c86572075fc8b3fbb2e54dde02edd7877186ab5a00cbb87ccf1b0e77ac0b289bfac06347013432744e33978787fceedfb50fa8cc4aa759e17e98849ab52158d4b8d772e5d232e6eeb5496da39712cef05be6615237045142b05fd9b2266c63aba1c14e2bafbaea86aa66770f451fe53f2d504b654acc8d0c2194e8091183c868ed0fc28de72b424ae653291d04f0f4a5e13ff6cf90a44403f2605257b444e9b7fcf87bd936f5e82c9405decf0135621078a9c03ec201815d9a3775ccb6560036f4cd0acf73c54992bf8e98f767268193c5a016e1b66b7bb0cb2674c67aac93e29aaae3144908a3f0304ec540542bf3bb1c25b845f489bf7b6c2895df8e96893ea1568efec444996c877f4e921b5e2db604f2d6b1f5946f9a6b8c344c601d7f267cdf31c31f6e92dcd8528accd627f9b90581a183e6cda4dbc1495a70ce7e6dec3baa9c4b94fcd5971a9513e9665e13e81f0dc61a24127b1a0ba6f4bd297659f5c934e64ac4f4b14a8f2bc8e6f1ee4f4a9eb75922bc50600926c936a9cb382f03e589ccba3a9ca0bd4d15ceb7b86bcf83882e10695fa3ea2291867e4a8c6e3b4ae9491a5cd4bf42f47a4e0b84dd9dd50ea1a97c811c2968670e18bac163bc4e329f153c57e5ea74bbf2af7855e81b511070c34913819eaa16bb502f35e428c1894bdb89f9e5e9dd6b8e12714a1708368535adaaabf6d61f77244bc926c1967cf41c4c6b518151bca3de82c6e6f00be0b54a1845d74cba4420b85d91c81ca18d4c7de9cd8af7dd4442e703390bf68844eba63115cc9f6e02b63135bcd8d55650c2a9a6484b44061e79ed12ef89425022e6bfee32dbc61e14751fb8e27f6efe45db4d921525e3d80d2d005885f6aa01fdcb7c758fe6167c7081659da375f11a894a0a02ff5a56eec5af3cbd51bda5b917e4128d551762937d1f55d1b084d91140875bfa13e39c46929f6cff2a155d5b5f96304b9b52612601f253540131f1404877d0efd42b3c06af12ce852800e049fb7b82ea7a862473f7964fdbb98ad9b1843f203251303fc3e89069e56d3425d9cda2c842ab1a"}, 0x1010) mincore(&(0x7f0000046000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/240) 1.599311138s ago: executing program 6 (id=901): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3d, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x1, {0x0, r2}}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x6, "a56f624f37753a0a1af31f8000b4c1c0957d24c7a8f8f56bf9026bbd0aff686c", 0x3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fef000/0x11000)=nil, 0x11000, &(0x7f0000000140)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r5, r6) close_range(r3, r3, 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000002340)={0x10000, "287ba3ba1e18f195542044c378c4dbb326f2988fdb2838d2729b5204592a4542", 0x2, 0x1}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002380), 0x20000, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f00000023c0)={0xc1, 0x0, 0x2}) close_range(r3, r7, 0x2) fstat(r3, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, 0xffffffffffffffff, r8) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000024c0)={[0x3, 0x2, 0x0, 0x5, 0x5, 0xa, 0x7fffffff, 0x0, 0x8000000000000001, 0x3, 0xcc, 0x5, 0x7fffffff, 0x100000001, 0xe6, 0x7], 0x8000000, 0xa2400}) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r7) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x420100}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x64, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x30}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x8, 0x8}, @value=@ver_80211n={0x0, 0xb76, 0x1}}, 0x10, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xa}, @broadcast}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000002bc0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002780)={0x3d8, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2d}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @mcast1, 0xa9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private2}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa7c5163}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) msync(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002c00), 0x50000, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x100010, r11, 0x8d000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002c80)={0x7, &(0x7f0000002c40)=[{0x3, 0x81, 0x3, 0x6}, {0x5, 0x9, 0x4, 0x8000}, {0x40, 0x7, 0x9f, 0x800}, {0x80, 0x1, 0x7, 0x200}, {0x9, 0x1, 0x12, 0x4}, {0xff, 0x21, 0xa, 0x8f1}, {0xb, 0x4, 0x7, 0x6}]}) 1.52051653s ago: executing program 6 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r1, 0x7, 0x9, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000180c20000000000140012800b0001006c6f7770616e"], 0x60}}, 0x0) 1.457870385s ago: executing program 6 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) (async) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000040)={0x9, 0xf7ed, 0x8}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00') 1.457649327s ago: executing program 6 (id=904): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r2, 0x7, 0x40, "5d051f07a98d7451a1cc291985d58bb25af50be87f"}) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xb7, @any, 0x8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000006f80)=0x1, 0x4) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_u8={{0xfffffffffffffdd2, 0x0, 0x1, 0xff}}], 0x30, 0x4c00}, 0x4004885) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 1.378580329s ago: executing program 6 (id=905): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r0) 1.289875428s ago: executing program 6 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1a3002) syz_usb_disconnect(r3) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7c, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x99, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0x0, 0x5}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0) 1.105929544s ago: executing program 2 (id=913): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4107, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x6b000000, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa9, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0x1000003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'nat\x00', 0x0, 0x4, 0xd8, [0x100, 0x80000001, 0x887, 0x3, 0x4, 0x6], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/216}, &(0x7f0000000100)=0x78) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100008}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x6}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0x3) write$P9_RLOCK(r5, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.039973535s ago: executing program 2 (id=915): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffa}, &(0x7f0000000300), &(0x7f0000000280)) (async) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffa}, &(0x7f0000000300), &(0x7f0000000280)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r2, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000009c0)={{r0}, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"}) (async) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xa) close(r6) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000940)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f0000000940)={0x2020}, 0x2020) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000b3a000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x80dc000, 0x115000, 0x8}) pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r10, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0d0000001000030400d7d5fedf1c2ba79cc8a3dbb70cfe49c69b5a43b28607f58747bf02960496ac61931944e873dc7f8189e878c0e9c19e6f87b969307b2a19636f63afd1dc68", @ANYRES32=0x0, @ANYRESHEX=r9], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) 689.150477ms ago: executing program 2 (id=916): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xd3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x76, &(0x7f00000002c0)=""/118, 0x40f00, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x7ff, 0xe26}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x2, 0x3, 0x2}, {0x4, 0x3, 0x1, 0x7}, {0x1, 0x2, 0x0, 0x6}, {0x1, 0x4, 0x7, 0xb}, {0x1, 0x2, 0xa, 0x6}, {0x0, 0x5, 0x6, 0x9}, {0x4, 0x3, 0x8, 0x3}, {0x0, 0x1, 0x1, 0xa}, {0x4, 0x1, 0xf, 0xb}, {0x3, 0x1, 0x9, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x59f}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 688.866502ms ago: executing program 2 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x58, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x97d}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x1d4, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10a9b051}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37d89886}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f90cd76}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31e92840}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37a5bba8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x379d5157}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0xe0, 0xc, "0414e4ddae5b2ef444ab386ab14a1038c915dd8b8adfc4201d5d9f33eda819d262a55bd1afbe00c5d70a668735de93fcc91545130071efbea58df706f3ae79a38621e45bdeda38bed0de60a1e5b9e849051681431a4fe6af4f9eb7dfbf460c08d056ef29ca6d65da67c64cb68f8e5a217f93d31b9d63b594aae181b45c104244738c06f7dcea5fc0415148569948e8ce3c5609ee93ff797c46191a99a495d62c97a10a866d5612818a18270a77b5247192e5f1e118213bcc638c84f78afe91ce05e1610a66dabee9f5bbac4659d235facb76e64d7d3153a0e607fa64"}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb, 0x6, "8ea19d852354d5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x140, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x12, 0x6, "5ab6142ad7bc2e54ec74cee95eb3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x57, 0x6, "744e8e1b9f7b62838636a50876d2c525ead9dfb308d00d53bc1c3fc25745f4f6dfd8d37a2b88fb64a77d6bceaf8878f2244b7dbe0abb6dfba299ee159e66b114e43443a439f5bde1fb18265d5151d7c2b8c271"}, @NFTA_TABLE_USERDATA={0x8d, 0x6, "856b94f4a519e14f8e8373f48f4940faf3b7c23e8a9a9c5420a48bc98ec30822e3f9520822bb2a075ff2a87286925d8a14be270fc091303a4ea494e7a6ab8babd12e6c4a5c51e7308e165629095eebd6e69912f71af15508e07e5ed7625d2e5f00d29b42e36aee0de7133fc25db5b63681b95095abd4fdee8e8fd1610bc2e37414b908edd54d682851"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x530}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 600.257459ms ago: executing program 2 (id=918): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0203, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0xf}) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f", 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=0x0], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) socket$pppoe(0x18, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xea}, @in6={0xa, 0x4e23, 0xc6c, @local, 0x1800000}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0xd}, @in={0x2, 0xc7e5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0xfffffffb, @local, 0x9}], 0xbc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 378.600391ms ago: executing program 2 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000e5ffffff4d096c0f86fa805dc279429f52ab49aecb3c7d21b5f500ccbd9a98f803028fb3e7cd844fdc20af0766958b447c03d267229b405759e4cc0b7821e05d636de3f9550469b85e40842eb72e88c1531b855d060f6712563b6ea23fc6483c725f026b1322c09883aa81ba294ad63d3fbe09ab615a92e00a8d51d67ab45ac920d62dfa6ace90bd40fcd4ffa7159889e30bb3391b7d5c0d8a32a117115039a20912a374095b7b1749c07319aa7f0853c6f67156d959e222e60bdbdeccdd07bbba2e54214de1b3184529c9da78d529f17ff8c5519cc84a805a70be", @ANYRES16=r2, @ANYBLOB="01002cfd0300"/18, @ANYRES32=r1, @ANYBLOB="0c0099002200000026000000080026003c14000008809f0006f7000072cde2293163141cdecbe257dc885614327e050000000cc479ad9a02e4d489643ad5e019b67bf702d371d1346453d95b9024a3c604101a093570d9944f85077e0ebbb357064ed20e27f024f7aca62eba279ada39e7319892b050d32d61a60dda1cb4816d718339c425f4bc729202c4081b2fee39996392edaef55d8670758c4f6cb7d59125307e7fe199a119c4e3248231ce6e1b671a78a9a2b4a146a8eabb088a65ff360db74c"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 279.921403ms ago: executing program 5 (id=922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) (rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x126}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) sendmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x4010) 150.603122ms ago: executing program 5 (id=923): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x20) setrlimit(0xc, &(0x7f0000000000)={0x8, 0x1}) 147.921249ms ago: executing program 5 (id=924): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$CDROMPAUSE(r0, 0x5301) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x3d810686a7d95765, 0x70bd2d, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24044852) 50.030576ms ago: executing program 5 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 49.321816ms ago: executing program 5 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 32) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000900000000000000000043db7b4adb0ea09d887947baa63a9ac129851adb5fac1ec7ce604a03acd6197925fe373a7be35a2c1709b272a3f6761fa2ce952cdc2de4c24a78780101a9ddef989d6a1928712adf9f57354acb56db214322df861bdda9b9e77ff9ee0b12c2d0e02988b52648584d9e"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f00000000c0)=0xfffdfffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x28a202, 0x23456}) (async) io_uring_enter(r0, 0x47f9, 0x4db, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f00000002c0)) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getpeername$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000740)={0x0, @dev, @multicast2}, &(0x7f0000000780)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x98, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44}, 0x20000001) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (rerun: 32) ioctl$TIOCGPTPEER(r11, 0x80140912, 0x200000000005) (async) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r12, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000002200)={0x0, 0x0, "333b8811d3701a0d4ece2a804c4da9bf1508c4aebc735173aadcd9a3da57bfdb2db4c2db8b8784c14ad86a346670e21df4bec5f1c66cd54325df74811b86ff795f145ab7be437a7d3a66cf75efefb7fa13cb17ecf8735295232511c2c9e7e4999fdbb62e84fa67120410c4be4b632a28d923873c6b8a2242c47512e1bfdc1fc3f6dcfac193fc2d73ef5c9f5a4e970fb474f0016e57e0e229658aec47ddee28851754ee6db45d36064031a0915674360ecad8a3619e7a30edb6622eb9e7c8645c861a7dfcfe4df1fa7cf1e14ae477798e6baa00a49375e18ec2a5de461a81201341bfc0c1ce302a5deed9b57c7a51c2020725388036259360031bf536c8cdac0c", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000480)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000003200)={r13, r14, "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", "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"}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_move_chan_req={{0xe, 0x80, 0x3}, {0x8, 0x5}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0x59, 0x7, 0x804}}]}}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000000340)={{r14, 0x81, 0x6, 0x7, 0x10001, 0x8, 0x3ff, 0x8001, 0x80000000, 0x2, 0x90eb, 0x6, 0x1be4, 0xafbb, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 0s ago: executing program 5 (id=927): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x1, "a23cfa355c349d2900", '\x00', "02050201", "6afb45c5", ["408935a00f008000", "8e1500", "0c436d743c97c443084000", "ff81000000008000"]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@default, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084) (async) sendmsg$inet(r3, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) (async) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r7, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) (async) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x4040005}, 0x4800) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080)=0xffffaaab, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)=ANY=[@ANYBLOB="00fb5504f48b88923e5789aeb8a48b788388771daf7d03c9e02c2940815bbb1cb3e55d3dbb36dc03ff2918a6c5f907d667ceb89a216df527d75915373a2fc2a961acd3abf88fe4f20a5babf10f4a35fc7e71ed9d2da5"], 0x55, 0x2) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)=ANY=[@ANYBLOB="00fb5504f48b88923e5789aeb8a48b788388771daf7d03c9e02c2940815bbb1cb3e55d3dbb36dc03ff2918a6c5f907d667ceb89a216df527d75915373a2fc2a961acd3abf88fe4f20a5babf10f4a35fc7e71ed9d2da5"], 0x55, 0x2) 0s ago: executing program 6 (id=928): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0x9, {0xac54, 0x0, 0x9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 75.256106][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.268600][ T6018] usb 7-1: config 0 descriptor?? [ 75.275519][ T6018] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 75.282806][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.291381][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.304458][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.309419][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.312644][ T5938] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.316393][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.329388][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.338398][ T5328] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.391210][ T6777] FAULT_INJECTION: forcing a failure. [ 75.391210][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 75.398263][ T6777] CPU: 2 UID: 0 PID: 6777 Comm: syz.0.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.398289][ T6777] Tainted: [L]=SOFTLOCKUP [ 75.398293][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.398301][ T6777] Call Trace: [ 75.398306][ T6777] [ 75.398312][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 75.398337][ T6777] should_fail_ex+0x512/0x640 [ 75.398351][ T6777] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 75.398377][ T6777] should_failslab+0xc2/0x120 [ 75.398400][ T6777] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 75.398420][ T6777] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 75.398442][ T6777] ? kmemdup_nul+0x49/0xf0 [ 75.398457][ T6777] kmemdup_nul+0x49/0xf0 [ 75.398475][ T6777] vfs_parse_fs_qstr+0x112/0x1c0 [ 75.398492][ T6777] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 75.398517][ T6777] ? ovl_next_opt+0x143/0x1c0 [ 75.398543][ T6777] ? __pfx_ovl_next_opt+0x10/0x10 [ 75.398561][ T6777] vfs_parse_monolithic_sep+0x18d/0x210 [ 75.398581][ T6777] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 75.398600][ T6777] ? alloc_fs_context+0x677/0xf50 [ 75.398622][ T6777] path_mount+0x76e/0x23a0 [ 75.398638][ T6777] ? rcu_is_watching+0x12/0xc0 [ 75.398658][ T6777] ? __pfx_path_mount+0x10/0x10 [ 75.398675][ T6777] ? kmem_cache_free+0x2d8/0x770 [ 75.398692][ T6777] ? putname+0xf5/0x1a0 [ 75.398721][ T6777] ? putname+0xf5/0x1a0 [ 75.398743][ T6777] ? putname+0xf5/0x1a0 [ 75.398770][ T6777] ? __x64_sys_mount+0x293/0x310 [ 75.398785][ T6777] __x64_sys_mount+0x293/0x310 [ 75.398802][ T6777] ? __pfx___x64_sys_mount+0x10/0x10 [ 75.398827][ T6777] do_syscall_64+0xcd/0xf80 [ 75.398852][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.398869][ T6777] RIP: 0033:0x7f9012d8f7c9 [ 75.398883][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.398898][ T6777] RSP: 002b:00007f9013bcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.398915][ T6777] RAX: ffffffffffffffda RBX: 00007f9012fe5fa0 RCX: 00007f9012d8f7c9 [ 75.398925][ T6777] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 75.398935][ T6777] RBP: 00007f9013bcd090 R08: 00002000000004c0 R09: 0000000000000000 [ 75.398944][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.398953][ T6777] R13: 00007f9012fe6038 R14: 00007f9012fe5fa0 R15: 00007ffda9e69d68 [ 75.398977][ T6777] [ 75.410628][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.413884][ T851] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.426115][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.499081][ T6752] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 75.562202][ T54] usb 7-1: USB disconnect, device number 4 [ 75.778954][ T6804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.782791][ T6804] Cannot find add_set index 0 as target [ 75.808886][ T6800] CIFS mount error: No usable UNC path provided in device string! [ 75.808886][ T6800] [ 75.812952][ T6800] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 75.976433][ T6812] hfs: can't find a HFS filesystem on dev sr0 [ 76.112218][ T6827] loop4: detected capacity change from 0 to 7 [ 76.198958][ T6827] Dev loop4: unable to read RDB block 7 [ 76.200851][ T6827] loop4: unable to read partition table [ 76.203091][ T6827] loop4: partition table beyond EOD, truncated [ 76.206324][ T6827] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 76.268248][ T6841] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 76.276794][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.278894][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.287909][ T6841] __nla_validate_parse: 41 callbacks suppressed [ 76.287920][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 76.307101][ T6841] veth3: entered promiscuous mode [ 76.351440][ T6847] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.354402][ T6847] overlayfs: failed to set xattr on upper [ 76.356618][ T6847] overlayfs: ...falling back to redirect_dir=nofollow. [ 76.359251][ T6847] overlayfs: ...falling back to index=off. [ 76.361100][ T6847] overlayfs: ...falling back to uuid=null. [ 76.369665][ T6847] kAFS: unable to lookup cell '(,' [ 76.374334][ T6847] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 76.552990][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 76.616680][ T3979] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.829096][ T6871] ======================================================= [ 76.829096][ T6871] WARNING: The mand mount option has been deprecated and [ 76.829096][ T6871] and is ignored by this kernel. Remove the mand [ 76.829096][ T6871] option from the mount to silence this warning. [ 76.829096][ T6871] ======================================================= [ 77.221001][ T6881] program syz.0.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.471177][ T6892] capability: warning: `syz.0.278' uses 32-bit capabilities (legacy support in use) [ 77.490805][ T6892] capability: warning: `syz.0.278' uses deprecated v2 capabilities in a way that may be insecure [ 77.617056][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 77.617068][ T40] audit: type=1400 audit(1768898219.147:418): avc: denied { create } for pid=6900 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.636346][ T40] audit: type=1400 audit(1768898219.147:419): avc: denied { connect } for pid=6900 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.644097][ T40] audit: type=1400 audit(1768898219.147:420): avc: denied { getopt } for pid=6900 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.650759][ T40] audit: type=1400 audit(1768898219.147:421): avc: denied { setopt } for pid=6900 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.670489][ T40] audit: type=1400 audit(1768898219.197:422): avc: denied { write } for pid=6908 comm="syz.2.284" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 77.679211][ T40] audit: type=1400 audit(1768898219.197:423): avc: denied { append } for pid=6908 comm="syz.2.284" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.719150][ T40] audit: type=1400 audit(1768898219.247:424): avc: denied { read write } for pid=6906 comm="syz.0.283" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.724204][ T6907] orangefs: client-core tried to read wrong size [ 77.735380][ T40] audit: type=1400 audit(1768898219.247:425): avc: denied { open } for pid=6906 comm="syz.0.283" path="/66/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.743399][ T40] audit: type=1400 audit(1768898219.267:426): avc: denied { append } for pid=6906 comm="syz.0.283" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.750841][ T40] audit: type=1400 audit(1768898219.267:427): avc: denied { setopt } for pid=6906 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.765187][ T6906] delete_channel: no stack [ 77.874490][ T6923] program syz.0.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.885465][ T6924] process 'syz.1.289' launched '/dev/fd/4' with NULL argv: empty string added [ 77.915406][ T6926] netlink: 'syz.0.290': attribute type 18 has an invalid length. [ 77.918113][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 77.922741][ T6926] netlink: 'syz.0.290': attribute type 18 has an invalid length. [ 77.925672][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 78.080128][ T6938] batman_adv: batadv0: Adding interface: macsec1 [ 78.082239][ T6938] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.091455][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.096573][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.100641][ T6938] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 78.146979][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 78.234362][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 78.250587][ T6954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.377159][ T6959] EXT4-fs (nbd1): unable to read superblock [ 78.414968][ T6959] syzkaller1: entered promiscuous mode [ 78.417312][ T6959] syzkaller1: entered allmulticast mode [ 78.594203][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 78.631605][ T6985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 78.636673][ T6985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 78.638291][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 79.022657][ T851] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.032883][ T7014] overlayfs: unescaped trailing colons in lowerdir mount option. [ 79.194642][ T851] usb 8-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 79.198853][ T851] usb 8-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.204504][ T851] usb 8-1: config 1 interface 0 has no altsetting 0 [ 79.210921][ T851] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.214972][ T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.218247][ T851] usb 8-1: SerialNumber: syz [ 79.231063][ T851] cdc_ether 8-1:1.0: skipping garbage [ 79.233444][ T851] cdc_ether 8-1:1.0: skipping garbage [ 79.235648][ T851] usb 8-1: bad CDC descriptors [ 79.556528][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 79.723308][ T851] usb 8-1: USB disconnect, device number 7 [ 79.754539][ T7032] MINIX-fs: unable to read superblock [ 79.760436][ T7034] MINIX-fs: unable to read superblock [ 79.792474][ T6018] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.859091][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 79.899459][ T7039] syz.2.329 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.976217][ T6018] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.982473][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.986491][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.989681][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.003789][ T6018] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.007484][ T6018] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.010522][ T6018] usb 6-1: Manufacturer: syz [ 80.014437][ T6018] usb 6-1: config 0 descriptor?? [ 80.189369][ T7065] futex_wake_op: syz.2.338 tries to shift op by 32; fix this program [ 80.423664][ T6018] hid_parser_main: 8 callbacks suppressed [ 80.423680][ T6018] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 80.441000][ T7078] FAULT_INJECTION: forcing a failure. [ 80.441000][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 80.446178][ T6018] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 80.450176][ T7078] CPU: 3 UID: 0 PID: 7078 Comm: syz.2.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.450193][ T7078] Tainted: [L]=SOFTLOCKUP [ 80.450196][ T7078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.450202][ T7078] Call Trace: [ 80.450206][ T7078] [ 80.450210][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 80.450256][ T7078] should_fail_ex+0x512/0x640 [ 80.450271][ T7078] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 80.450287][ T7078] should_failslab+0xc2/0x120 [ 80.450301][ T7078] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 80.450313][ T7078] ? kasan_quarantine_put+0x10a/0x240 [ 80.450324][ T7078] ? ovl_do_parse_layer+0x33/0x1290 [ 80.450340][ T7078] ? kstrdup+0x53/0x100 [ 80.450349][ T7078] kstrdup+0x53/0x100 [ 80.450359][ T7078] ovl_do_parse_layer+0x33/0x1290 [ 80.450372][ T7078] ? ovl_mount_dir+0x15a/0x1f0 [ 80.450385][ T7078] ovl_parse_param+0xdd9/0x15a0 [ 80.450400][ T7078] ? __pfx_ovl_parse_param+0x10/0x10 [ 80.450412][ T7078] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 80.450426][ T7078] ? static_key_count+0x5a/0x70 [ 80.450438][ T7078] ? __pfx_ovl_parse_param+0x10/0x10 [ 80.450451][ T7078] vfs_parse_fs_param+0x20b/0x3c0 [ 80.450462][ T7078] vfs_parse_fs_qstr+0x138/0x1c0 [ 80.450472][ T7078] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 80.450486][ T7078] ? ovl_next_opt+0x143/0x1c0 [ 80.450499][ T7078] ? __pfx_ovl_next_opt+0x10/0x10 [ 80.450510][ T7078] vfs_parse_monolithic_sep+0x18d/0x210 [ 80.450522][ T7078] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 80.450533][ T7078] ? alloc_fs_context+0x677/0xf50 [ 80.450546][ T7078] path_mount+0x76e/0x23a0 [ 80.450555][ T7078] ? rcu_is_watching+0x12/0xc0 [ 80.450568][ T7078] ? __pfx_path_mount+0x10/0x10 [ 80.450578][ T7078] ? kmem_cache_free+0x2d8/0x770 [ 80.450588][ T7078] ? putname+0xf5/0x1a0 [ 80.450605][ T7078] ? putname+0xf5/0x1a0 [ 80.450619][ T7078] ? putname+0xf5/0x1a0 [ 80.450635][ T7078] ? __x64_sys_mount+0x293/0x310 [ 80.450645][ T7078] __x64_sys_mount+0x293/0x310 [ 80.450654][ T7078] ? __pfx___x64_sys_mount+0x10/0x10 [ 80.450668][ T7078] do_syscall_64+0xcd/0xf80 [ 80.450683][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.450694][ T7078] RIP: 0033:0x7ff98978f7c9 [ 80.450703][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.450712][ T7078] RSP: 002b:00007ff98a571038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.450722][ T7078] RAX: ffffffffffffffda RBX: 00007ff9899e5fa0 RCX: 00007ff98978f7c9 [ 80.450728][ T7078] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 80.450734][ T7078] RBP: 00007ff98a571090 R08: 00002000000004c0 R09: 0000000000000000 [ 80.450739][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.450745][ T7078] R13: 00007ff9899e6038 R14: 00007ff9899e5fa0 R15: 00007ffc29adba68 [ 80.450758][ T7078] [ 80.515949][ T7076] mmap: syz.0.342 (7076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.573767][ T7082] ip6t_srh: unknown srh match flags 4000 [ 80.739058][ T7090] block nbd0: not configured, cannot reconfigure [ 80.836006][ T7101] 9pnet_virtio: no channels available for device 127.0.0.1 [ 80.840935][ T7101] faux_driver vkms: [drm] Unknown color mode 2147483648; guessing buffer size. [ 81.039709][ T7109] IPv6: sit1: Disabled Multicast RS [ 81.042264][ T7109] sit1: entered allmulticast mode [ 81.082874][ T7111] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 81.474805][ T7121] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.546831][ T6018] IPVS: starting estimator thread 0... [ 81.569391][ T9] cfg80211: failed to load regulatory.db [ 81.642591][ T7126] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.658889][ T7132] (syz.0.361,7132,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 82.446127][ T54] usb 6-1: USB disconnect, device number 2 [ 82.478202][ T7145] batadv_slave_1: entered promiscuous mode [ 82.486366][ T7143] batadv_slave_1: left promiscuous mode [ 82.650289][ T7162] mac80211_hwsim hwsim4 : renamed from wlan1 (while UP) [ 82.737197][ T7165] __nla_validate_parse: 6 callbacks suppressed [ 82.737211][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 82.783802][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 82.783812][ T40] audit: type=1400 audit(1768898224.317:468): avc: denied { getopt } for pid=7168 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.834065][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 83.061148][ T40] audit: type=1400 audit(1768898224.587:469): avc: denied { mount } for pid=7182 comm="syz.0.377" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.071258][ T40] audit: type=1400 audit(1768898224.597:470): avc: denied { remount } for pid=7182 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.097703][ T7189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7189 comm=syz.1.378 [ 83.104177][ T7183] 9p: Could not find request transport: virtio, priority 0 [ 83.349619][ T40] audit: type=1400 audit(1768898224.877:473): avc: denied { execute_no_trans } for pid=7196 comm="syz.0.381" path="/108/file1" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.425694][ T40] audit: type=1400 audit(1768898224.957:474): avc: denied { create } for pid=7206 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.435493][ T40] audit: type=1400 audit(1768898224.967:475): avc: denied { write } for pid=7206 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.497201][ T40] audit: type=1400 audit(1768898225.027:476): avc: denied { accept } for pid=7211 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.555609][ T7220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.390'. [ 83.560513][ T7221] netlink: 72 bytes leftover after parsing attributes in process `syz.1.390'. [ 83.597044][ T40] audit: type=1400 audit(1768898225.127:477): avc: denied { map } for pid=7222 comm="syz.1.391" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.613513][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.653372][ T7223] team0: Port device team_slave_0 removed [ 83.676838][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.680365][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.742516][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.811163][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 83.863667][ T7234] netlink: 'syz.1.393': attribute type 3 has an invalid length. [ 83.866656][ T7234] netlink: 'syz.1.393': attribute type 3 has an invalid length. [ 83.894268][ T9] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 83.897664][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.901823][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.906119][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.908901][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.911435][ T9] usb 8-1: Product: syz [ 83.913291][ T9] usb 8-1: Manufacturer: syz [ 83.914773][ T9] usb 8-1: SerialNumber: syz [ 83.917593][ T9] usb 8-1: config 0 descriptor?? [ 83.922569][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 83.924741][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 83.929964][ T9] usb 8-1: selecting invalid altsetting 0 [ 84.222881][ T7259] FAULT_INJECTION: forcing a failure. [ 84.222881][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 84.233554][ T7259] CPU: 2 UID: 0 PID: 7259 Comm: syz.2.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.233573][ T7259] Tainted: [L]=SOFTLOCKUP [ 84.233576][ T7259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.233582][ T7259] Call Trace: [ 84.233585][ T7259] [ 84.233590][ T7259] dump_stack_lvl+0x16c/0x1f0 [ 84.233609][ T7259] should_fail_ex+0x512/0x640 [ 84.233620][ T7259] ? __kmalloc_noprof+0xca/0x910 [ 84.233631][ T7259] should_failslab+0xc2/0x120 [ 84.233646][ T7259] __kmalloc_noprof+0xeb/0x910 [ 84.233655][ T7259] ? lsm_blob_alloc+0x68/0x90 [ 84.233668][ T7259] ? lsm_blob_alloc+0x68/0x90 [ 84.233676][ T7259] lsm_blob_alloc+0x68/0x90 [ 84.233686][ T7259] security_sb_alloc+0x27/0x230 [ 84.233699][ T7259] alloc_super+0x24c/0xd00 [ 84.233711][ T7259] ? sget_fc+0xd3/0xc20 [ 84.233726][ T7259] sget_fc+0x116/0xc20 [ 84.233738][ T7259] ? __pfx_set_anon_super_fc+0x10/0x10 [ 84.233750][ T7259] ? __pfx_ovl_fill_super+0x10/0x10 [ 84.233763][ T7259] get_tree_nodev+0x28/0x190 [ 84.233777][ T7259] vfs_get_tree+0x8e/0x330 [ 84.233787][ T7259] path_mount+0x7bf/0x23a0 [ 84.233797][ T7259] ? rcu_is_watching+0x12/0xc0 [ 84.233810][ T7259] ? __pfx_path_mount+0x10/0x10 [ 84.233820][ T7259] ? kmem_cache_free+0x2d8/0x770 [ 84.233831][ T7259] ? putname+0xf5/0x1a0 [ 84.233848][ T7259] ? putname+0xf5/0x1a0 [ 84.233861][ T7259] ? putname+0xf5/0x1a0 [ 84.233878][ T7259] ? __x64_sys_mount+0x293/0x310 [ 84.233887][ T7259] __x64_sys_mount+0x293/0x310 [ 84.233897][ T7259] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.233911][ T7259] do_syscall_64+0xcd/0xf80 [ 84.233926][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.233936][ T7259] RIP: 0033:0x7ff98978f7c9 [ 84.233945][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.233954][ T7259] RSP: 002b:00007ff98a571038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.233964][ T7259] RAX: ffffffffffffffda RBX: 00007ff9899e5fa0 RCX: 00007ff98978f7c9 [ 84.233970][ T7259] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 84.233976][ T7259] RBP: 00007ff98a571090 R08: 00002000000004c0 R09: 0000000000000000 [ 84.233981][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.233986][ T7259] R13: 00007ff9899e6038 R14: 00007ff9899e5fa0 R15: 00007ffc29adba68 [ 84.234000][ T7259] [ 84.339052][ T54] usb 8-1: USB disconnect, device number 8 [ 84.444746][ T9] tipc: Node number set to 11578026 [ 84.704277][ T7293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7293 comm=syz.1.412 [ 84.802665][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.873910][ T7311] x_tables: ip_tables: osf match: only valid for protocol 6 [ 84.948576][ T7316] fuse: blksize only supported for fuseblk [ 84.962478][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 84.966499][ T55] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 84.970229][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.979634][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 84.982805][ T55] pvrusb2: ********** [ 84.984481][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 84.988546][ T55] pvrusb2: Important functionality might not be entirely working. [ 84.991680][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 84.996574][ T55] pvrusb2: ********** [ 85.002513][ T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.154868][ T54] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.159006][ T54] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.162948][ T54] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.166656][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.174571][ T7297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.180254][ T54] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.183051][ T2489] pvrusb2: Invalid write control endpoint [ 85.222686][ T5974] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.231713][ T2489] pvrusb2: Invalid write control endpoint [ 85.235984][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 85.240125][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 85.243483][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 85.248730][ T2489] pvrusb2: Device being rendered inoperable [ 85.253530][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 85.257009][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 85.263801][ T2489] pvrusb2: Attached sub-driver cx25840 [ 85.266289][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 85.270546][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 85.372454][ T5974] usb 8-1: Using ep0 maxpacket: 32 [ 85.376316][ T5974] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 85.380515][ T5974] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.385779][ T7285] pvrusb2: Attempted to execute control transfer when device not ok [ 85.388530][ T55] usb 7-1: USB disconnect, device number 5 [ 85.394034][ T5974] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.400232][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.406867][ T5974] usb 8-1: Product: ⠊ [ 85.410134][ T5974] usb 8-1: Manufacturer: 掓୦賎튇蠬ꎑꂨ㨢묳촭渚 [ 85.416817][ T5974] usb 8-1: SerialNumber: syz [ 85.634902][ T7318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=7318 comm=syz.3.421 [ 85.650360][ T5974] usb 8-1: 0:2 : does not exist [ 85.658284][ T5974] usb 8-1: USB disconnect, device number 9 [ 85.675410][ T7238] udevd[7238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.726632][ T7313] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 85.872628][ T7332] 9p: Bad value for 'rfdno' [ 85.880470][ T7332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7332 comm=syz.1.424 [ 85.913474][ T7334] FAULT_INJECTION: forcing a failure. [ 85.913474][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 85.917328][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.1.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.917344][ T7334] Tainted: [L]=SOFTLOCKUP [ 85.917347][ T7334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.917353][ T7334] Call Trace: [ 85.917358][ T7334] [ 85.917362][ T7334] dump_stack_lvl+0x16c/0x1f0 [ 85.917381][ T7334] should_fail_ex+0x512/0x640 [ 85.917391][ T7334] ? __kmalloc_cache_noprof+0x5f/0x800 [ 85.917403][ T7334] should_failslab+0xc2/0x120 [ 85.917419][ T7334] __kmalloc_cache_noprof+0x80/0x800 [ 85.917429][ T7334] ? __mutex_unlock_slowpath+0x161/0x790 [ 85.917444][ T7334] ? shrinker_alloc+0xf5/0xbf0 [ 85.917457][ T7334] ? shrinker_alloc+0xf5/0xbf0 [ 85.917467][ T7334] shrinker_alloc+0xf5/0xbf0 [ 85.917478][ T7334] ? mark_held_locks+0x49/0x80 [ 85.917490][ T7334] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 85.917501][ T7334] ? __percpu_init_rwsem+0x2d/0x160 [ 85.917516][ T7334] ? __pfx_shrinker_alloc+0x10/0x10 [ 85.917529][ T7334] ? lockdep_init_map_type+0x5c/0x270 [ 85.917541][ T7334] ? __raw_spin_lock_init+0x3a/0x110 [ 85.917555][ T7334] ? __init_rwsem+0x12d/0x1b0 [ 85.917569][ T7334] alloc_super+0x7d7/0xd00 [ 85.917585][ T7334] sget_fc+0x116/0xc20 [ 85.917598][ T7334] ? __pfx_set_anon_super_fc+0x10/0x10 [ 85.917610][ T7334] ? __pfx_ovl_fill_super+0x10/0x10 [ 85.917622][ T7334] get_tree_nodev+0x28/0x190 [ 85.917636][ T7334] vfs_get_tree+0x8e/0x330 [ 85.917646][ T7334] path_mount+0x7bf/0x23a0 [ 85.917656][ T7334] ? rcu_is_watching+0x12/0xc0 [ 85.917668][ T7334] ? __pfx_path_mount+0x10/0x10 [ 85.917677][ T7334] ? kmem_cache_free+0x2d8/0x770 [ 85.917688][ T7334] ? putname+0xf5/0x1a0 [ 85.917705][ T7334] ? putname+0xf5/0x1a0 [ 85.917719][ T7334] ? putname+0xf5/0x1a0 [ 85.917735][ T7334] ? __x64_sys_mount+0x293/0x310 [ 85.917744][ T7334] __x64_sys_mount+0x293/0x310 [ 85.917754][ T7334] ? __pfx___x64_sys_mount+0x10/0x10 [ 85.917768][ T7334] do_syscall_64+0xcd/0xf80 [ 85.917784][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.917795][ T7334] RIP: 0033:0x7f8ecf18f7c9 [ 85.917803][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.917812][ T7334] RSP: 002b:00007f8ecffd8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.917822][ T7334] RAX: ffffffffffffffda RBX: 00007f8ecf3e5fa0 RCX: 00007f8ecf18f7c9 [ 85.917828][ T7334] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 85.917834][ T7334] RBP: 00007f8ecffd8090 R08: 00002000000004c0 R09: 0000000000000000 [ 85.917839][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.917845][ T7334] R13: 00007f8ecf3e6038 R14: 00007f8ecf3e5fa0 R15: 00007ffec00e9478 [ 85.917858][ T7334] [ 86.145213][ T7341] Can't find a SQUASHFS superblock on nullb0 [ 86.189534][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.193528][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.197641][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.202286][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.214063][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.217994][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.221464][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.226607][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.230166][ T7351] overlay: filesystem on ./file0 not supported as upperdir [ 86.271807][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 86.275335][ T7359] netlink: 'syz.1.432': attribute type 30 has an invalid length. [ 86.282757][ T3979] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.287231][ T3979] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.290122][ T3979] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.298117][ T3979] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.359405][ T7367] FAT-fs (nullb0): bogus number of reserved sectors [ 86.363806][ T7367] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 86.472988][ T7384] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 86.477896][ T7386] xt_hashlimit: size too large, truncated to 1048576 [ 86.483673][ T7382] futex_wake_op: syz.1.442 tries to shift op by -1; fix this program [ 86.488167][ T7382] netlink: 'syz.1.442': attribute type 15 has an invalid length. [ 86.536631][ T7391] netlink: 'syz.1.442': attribute type 15 has an invalid length. [ 86.540822][ T7381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7381 comm=syz.1.442 [ 86.605832][ T7397] 9pnet_fd: p9_fd_create_tcp (7397): problem binding to privport [ 86.689645][ T7412] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 86.894660][ T7440] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 86.929117][ T5942] Bluetooth: hci0: command 0x0401 tx timeout [ 86.966872][ T7444] macvlan2: entered promiscuous mode [ 86.969686][ T7444] macvlan2: entered allmulticast mode [ 86.976036][ T7444] bond4: (slave macvlan2): Opening slave failed [ 86.995517][ T7453] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 86.999092][ T7453] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 87.004286][ T7453] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.008500][ T7453] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 87.146701][ T7468] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 87.148509][ T7470] FAULT_INJECTION: forcing a failure. [ 87.148509][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 87.150020][ T7468] nbd: error processing sock list [ 87.156658][ T7470] CPU: 3 UID: 0 PID: 7470 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.156674][ T7470] Tainted: [L]=SOFTLOCKUP [ 87.156677][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.156683][ T7470] Call Trace: [ 87.156687][ T7470] [ 87.156691][ T7470] dump_stack_lvl+0x16c/0x1f0 [ 87.156710][ T7470] should_fail_ex+0x512/0x640 [ 87.156720][ T7470] ? __kmalloc_noprof+0xca/0x910 [ 87.156731][ T7470] should_failslab+0xc2/0x120 [ 87.156745][ T7470] __kmalloc_noprof+0xeb/0x910 [ 87.156754][ T7470] ? lsm_blob_alloc+0x68/0x90 [ 87.156768][ T7470] ? lsm_blob_alloc+0x68/0x90 [ 87.156776][ T7470] lsm_blob_alloc+0x68/0x90 [ 87.156786][ T7470] security_prepare_creds+0x2f/0x270 [ 87.156803][ T7470] prepare_creds+0x5d6/0x940 [ 87.156819][ T7470] ? __pfx_ovl_fill_super+0x10/0x10 [ 87.156832][ T7470] ovl_fill_super+0x752/0x6b30 [ 87.156846][ T7470] ? __mutex_unlock_slowpath+0x161/0x790 [ 87.156864][ T7470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.156880][ T7470] ? lockdep_init_map_type+0x5c/0x270 [ 87.156894][ T7470] ? __pfx_ovl_fill_super+0x10/0x10 [ 87.156905][ T7470] ? __init_swait_queue_head+0xca/0x150 [ 87.156922][ T7470] ? shrinker_register+0x1a8/0x260 [ 87.156934][ T7470] ? sget_fc+0x808/0xc20 [ 87.156947][ T7470] ? __pfx_set_anon_super_fc+0x10/0x10 [ 87.156959][ T7470] ? __pfx_ovl_fill_super+0x10/0x10 [ 87.156970][ T7470] get_tree_nodev+0xdd/0x190 [ 87.156984][ T7470] vfs_get_tree+0x8e/0x330 [ 87.156995][ T7470] path_mount+0x7bf/0x23a0 [ 87.157005][ T7470] ? rcu_is_watching+0x12/0xc0 [ 87.157016][ T7470] ? __pfx_path_mount+0x10/0x10 [ 87.157026][ T7470] ? kmem_cache_free+0x2d8/0x770 [ 87.157037][ T7470] ? putname+0xf5/0x1a0 [ 87.157054][ T7470] ? putname+0xf5/0x1a0 [ 87.157067][ T7470] ? putname+0xf5/0x1a0 [ 87.157084][ T7470] ? __x64_sys_mount+0x293/0x310 [ 87.157093][ T7470] __x64_sys_mount+0x293/0x310 [ 87.157105][ T7470] ? __pfx___x64_sys_mount+0x10/0x10 [ 87.157118][ T7470] do_syscall_64+0xcd/0xf80 [ 87.157134][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.157144][ T7470] RIP: 0033:0x7fc44dd8f7c9 [ 87.157153][ T7470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.157162][ T7470] RSP: 002b:00007fc44ec01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.157172][ T7470] RAX: ffffffffffffffda RBX: 00007fc44dfe5fa0 RCX: 00007fc44dd8f7c9 [ 87.157178][ T7470] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 87.157183][ T7470] RBP: 00007fc44ec01090 R08: 00002000000004c0 R09: 0000000000000000 [ 87.157189][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.157194][ T7470] R13: 00007fc44dfe6038 R14: 00007fc44dfe5fa0 R15: 00007ffd969ef508 [ 87.157208][ T7470] [ 87.302231][ T7475] binder: BINDER_SET_CONTEXT_MGR already set [ 87.303995][ T7473] xt_l2tp: v2 doesn't support IP mode [ 87.306363][ T7475] binder: 7474:7475 ioctl 4018620d 200000000100 returned -16 [ 87.307832][ T7478] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.487634][ T7487] binder: 7486:7487 ioctl c018620c 200000000000 returned -1 [ 87.572888][ T54] usb 5-1: USB disconnect, device number 2 [ 87.755550][ T7512] __nla_validate_parse: 5 callbacks suppressed [ 87.755562][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 87.797045][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 87.797056][ T40] audit: type=1400 audit(1768898229.327:510): avc: denied { getopt } for pid=7517 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.808461][ T7518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 87.835583][ T40] audit: type=1400 audit(1768898229.367:511): avc: denied { mount } for pid=7517 comm="syz.0.477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 87.873843][ T7509] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 87.919387][ T40] audit: type=1400 audit(1768898229.447:512): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 87.989591][ T7536] vcan1: entered allmulticast mode [ 87.996306][ T7536] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.480'. [ 88.001643][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.0.480 [ 88.037296][ T7540] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 88.043214][ T7540] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 88.049945][ T7540] binder: BC_ATTEMPT_ACQUIRE not supported [ 88.052191][ T7540] binder: 7539:7540 ioctl c0306201 2000000004c0 returned -22 [ 88.098110][ T7546] netlink: 55 bytes leftover after parsing attributes in process `syz.0.482'. [ 88.418531][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 88.524979][ T7588] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 88.527241][ T7588] ALSA: mixer_oss: invalid OSS volume 'IM' [ 88.647244][ T7593] openvswitch: netlink: IP tunnel dst address not specified [ 88.811368][ T7605] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 88.966522][ T40] audit: type=1400 audit(1768898230.497:513): avc: denied { connect } for pid=7596 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.062427][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.082648][ T7606] BIDI support in bsg has been removed. [ 89.130616][ T7626] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.140448][ T7626] bond1: (slave lo): speed changed to 0 on port 1 [ 89.148524][ T7626] bond1: (slave lo): Enslaving as a backup interface with an up link [ 89.153611][ T7626] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 89.222422][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 89.233751][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.238072][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.241428][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.253878][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.256755][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.285509][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 89.288821][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 89.291413][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 89.299715][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 89.301429][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 89.309545][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 89.430822][ T40] audit: type=1400 audit(1768898230.957:514): avc: denied { create } for pid=7641 comm="syz.0.503" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.476911][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.479741][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.482876][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.486145][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.489305][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.492154][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.495204][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.498026][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.498698][ T7644] validate_nla: 2 callbacks suppressed [ 89.498712][ T7644] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 89.500910][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.509459][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.513296][ T7644] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 89.622585][ T851] usb 7-1: USB disconnect, device number 6 [ 89.645501][ T7646] binder: 7645:7646 ioctl c018620c 200000000000 returned -1 [ 89.689979][ T7648] bond1: ARP target 4.0.0.0 is already present [ 89.692982][ T7648] bond1: option arp_ip_target: invalid value (4) [ 89.698116][ T7648] bond1 (unregistering): Released all slaves [ 90.137672][ T7659] comedi comedi3: bad chanlist[0]=0x00000007 chan=7 range length=4 [ 90.238265][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 90.278328][ T7673] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 90.281962][ T7673] netlink: 152 bytes leftover after parsing attributes in process `syz.3.511'. [ 90.290493][ T7673] .`: renamed from bond0 (while UP) [ 90.314777][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 90.342062][ T7683] ipt_REJECT: ECHOREPLY no longer supported. [ 90.378661][ T40] audit: type=1400 audit(1768898231.907:515): avc: denied { map } for pid=7687 comm="syz.0.515" path="/127/file0/cgroup.kill" dev="9p" ino=71827959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.403843][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 90.405936][ T7688] netfs: Couldn't get user pages (rc=-14) [ 90.423446][ T40] audit: type=1400 audit(1768898231.957:516): avc: denied { write } for pid=7668 comm="syz.1.510" path="socket:[20568]" dev="sockfs" ino=20568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.443135][ T5974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.457004][ T40] audit: type=1400 audit(1768898231.987:517): avc: denied { mounton } for pid=7693 comm="syz.3.518" path="/117/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 90.529320][ T7697] comedi comedi3: dac02: I/O port conflict (0x8,8) [ 90.533315][ T7697] tmpfs: Unknown parameter 'grpquota' [ 90.541067][ T40] audit: type=1400 audit(1768898232.067:518): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.589207][ T7703] FAULT_INJECTION: forcing a failure. [ 90.589207][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 90.595109][ T7703] CPU: 2 UID: 0 PID: 7703 Comm: syz.0.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.595135][ T7703] Tainted: [L]=SOFTLOCKUP [ 90.595159][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.595169][ T7703] Call Trace: [ 90.595175][ T7703] [ 90.595180][ T7703] dump_stack_lvl+0x16c/0x1f0 [ 90.595230][ T7703] should_fail_ex+0x512/0x640 [ 90.595249][ T7703] ? kmem_cache_alloc_noprof+0x62/0x770 [ 90.595265][ T7703] should_failslab+0xc2/0x120 [ 90.595283][ T7703] kmem_cache_alloc_noprof+0x83/0x770 [ 90.595297][ T7703] ? alloc_vfsmnt+0x23/0x6b0 [ 90.595314][ T7703] ? alloc_vfsmnt+0x23/0x6b0 [ 90.595327][ T7703] alloc_vfsmnt+0x23/0x6b0 [ 90.595341][ T7703] clone_mnt+0x4b/0x930 [ 90.595356][ T7703] ? is_subdir+0x1a8/0x3e0 [ 90.595371][ T7703] clone_private_mount+0x3cc/0x4f0 [ 90.595395][ T7703] ovl_fill_super+0x950/0x6b30 [ 90.595422][ T7703] ? lockdep_init_map_type+0x5c/0x270 [ 90.595440][ T7703] ? __pfx_ovl_fill_super+0x10/0x10 [ 90.595455][ T7703] ? __init_swait_queue_head+0xca/0x150 [ 90.595474][ T7703] ? shrinker_register+0x1a8/0x260 [ 90.595490][ T7703] ? sget_fc+0x808/0xc20 [ 90.595505][ T7703] ? __pfx_set_anon_super_fc+0x10/0x10 [ 90.595521][ T7703] ? __pfx_ovl_fill_super+0x10/0x10 [ 90.595549][ T7703] get_tree_nodev+0xdd/0x190 [ 90.595566][ T7703] vfs_get_tree+0x8e/0x330 [ 90.595580][ T7703] path_mount+0x7bf/0x23a0 [ 90.595592][ T7703] ? rcu_is_watching+0x12/0xc0 [ 90.595607][ T7703] ? __pfx_path_mount+0x10/0x10 [ 90.595619][ T7703] ? kmem_cache_free+0x2d8/0x770 [ 90.595633][ T7703] ? putname+0xf5/0x1a0 [ 90.595655][ T7703] ? putname+0xf5/0x1a0 [ 90.595671][ T7703] ? putname+0xf5/0x1a0 [ 90.595691][ T7703] ? __x64_sys_mount+0x293/0x310 [ 90.595701][ T7703] __x64_sys_mount+0x293/0x310 [ 90.595714][ T7703] ? __pfx___x64_sys_mount+0x10/0x10 [ 90.595732][ T7703] do_syscall_64+0xcd/0xf80 [ 90.595751][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.595763][ T7703] RIP: 0033:0x7f9012d8f7c9 [ 90.595774][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.595786][ T7703] RSP: 002b:00007f9013bcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.595798][ T7703] RAX: ffffffffffffffda RBX: 00007f9012fe5fa0 RCX: 00007f9012d8f7c9 [ 90.595806][ T7703] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 90.595814][ T7703] RBP: 00007f9013bcd090 R08: 00002000000004c0 R09: 0000000000000000 [ 90.595821][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.595828][ T7703] R13: 00007f9012fe6038 R14: 00007f9012fe5fa0 R15: 00007ffda9e69d68 [ 90.595847][ T7703] [ 90.595923][ T7703] overlayfs: failed to clone upperpath [ 90.603242][ T5974] usb 7-1: Using ep0 maxpacket: 8 [ 90.692230][ T5974] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 90.695492][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.706276][ T5974] pvrusb2: Hardware description: Terratec Grabster AV400 [ 90.708671][ T5974] pvrusb2: ********** [ 90.709990][ T5974] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 90.719372][ T5974] pvrusb2: Important functionality might not be entirely working. [ 90.722162][ T5974] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 90.726161][ T5974] pvrusb2: ********** [ 90.781425][ T7709] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 90.902020][ T2489] pvrusb2: Invalid write control endpoint [ 90.935029][ T2489] pvrusb2: Invalid write control endpoint [ 90.937461][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 90.941172][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 90.944273][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 90.947838][ T2489] pvrusb2: Device being rendered inoperable [ 90.950344][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 90.953655][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 90.957447][ T2489] pvrusb2: Attached sub-driver cx25840 [ 90.959565][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 90.962485][ T6018] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 90.963380][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.022804][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.092485][ T6018] usb 8-1: device descriptor read/64, error -71 [ 91.103854][ T6116] usb 7-1: USB disconnect, device number 7 [ 91.172594][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 91.176362][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 91.179741][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.184687][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.188828][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.193671][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.199460][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.204633][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.332467][ T6018] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 91.372477][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.414772][ T9] usb 5-1: usb_control_msg returned -32 [ 91.416641][ T9] usbtmc 5-1:16.0: can't read capabilities [ 91.462533][ T6018] usb 8-1: device descriptor read/64, error -71 [ 91.542431][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 91.546125][ T54] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 91.549700][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.559738][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 91.562908][ T54] pvrusb2: ********** [ 91.564656][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 91.568649][ T54] pvrusb2: Important functionality might not be entirely working. [ 91.571918][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 91.573389][ T6018] usb usb8-port1: attempt power cycle [ 91.578580][ T54] pvrusb2: ********** [ 91.656624][ T7716] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 91.755894][ T40] audit: type=1400 audit(1768898233.287:519): avc: denied { connect } for pid=7719 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.765037][ T2489] pvrusb2: Invalid write control endpoint [ 91.787201][ T54] usb 6-1: USB disconnect, device number 3 [ 91.853534][ T2489] pvrusb2: Invalid write control endpoint [ 91.855958][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 91.859512][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 91.882564][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 91.892727][ T2489] pvrusb2: Device being rendered inoperable [ 91.902535][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 91.911495][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 91.913497][ T6018] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 91.921030][ T2489] pvrusb2: Attached sub-driver cx25840 [ 91.933980][ T6018] usb 8-1: device descriptor read/8, error -71 [ 91.934997][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.941025][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.957614][ T7726] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 91.964433][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 91.977667][ T6021] usb 5-1: USB disconnect, device number 3 [ 92.069742][ T7741] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 92.160263][ T7746] gre1: entered promiscuous mode [ 92.174516][ T6018] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 92.193945][ T6018] usb 8-1: device descriptor read/8, error -71 [ 92.197477][ T7750] fuseblk: Bad value for 'group_id' [ 92.199653][ T7750] fuseblk: Bad value for 'group_id' [ 92.203957][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'. [ 92.302782][ T6018] usb usb8-port1: unable to enumerate USB device [ 92.459288][ T7761] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 92.464895][ T7761] team0: Device ipvlan1 failed to register rx_handler [ 92.550916][ T7765] 9pnet_fd: Insufficient options for proto=fd [ 92.574595][ T7765] (syz.1.541,7765,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 92.578390][ T7765] (syz.1.541,7765,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 92.704285][ T7780] rtc_cmos 00:05: Alarms can be up to one day in the future [ 92.887660][ T5942] block nbd2: Receive control failed (result -32) [ 92.888758][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 92.888772][ T40] audit: type=1400 audit(1768898234.417:524): avc: denied { write } for pid=7789 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.902279][ T40] audit: type=1400 audit(1768898234.427:525): avc: denied { listen } for pid=7798 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.916625][ T7802] block nbd1: not configured, cannot reconfigure [ 92.921104][ T7797] block nbd2: shutting down sockets [ 93.032969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.230152][ T40] audit: type=1400 audit(1768898234.757:526): avc: denied { read } for pid=7812 comm="syz.0.555" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.244694][ T40] audit: type=1400 audit(1768898234.767:527): avc: denied { open } for pid=7812 comm="syz.0.555" path="/135/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.263071][ T7814] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.267423][ T7814] block device autoloading is deprecated and will be removed. [ 93.271344][ T40] audit: type=1400 audit(1768898234.797:528): avc: denied { ioctl } for pid=7812 comm="syz.0.555" path="/135/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.282620][ T6018] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.454395][ T6018] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.459082][ T6018] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.465376][ T6018] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.468856][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.486128][ T7805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.496168][ T6018] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.700134][ T7805] __nla_validate_parse: 1 callbacks suppressed [ 93.700209][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'. [ 93.787873][ T6018] usb 7-1: USB disconnect, device number 8 [ 93.929677][ T40] audit: type=1400 audit(1768898235.457:529): avc: denied { execute } for pid=7826 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 93.938805][ T40] audit: type=1400 audit(1768898235.457:530): avc: denied { execute_no_trans } for pid=7826 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 93.991179][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.995365][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.998079][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.000887][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.003769][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.126102][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 94.130136][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 94.135431][ T7840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 94.139136][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 94.144506][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 94.162572][ T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 94.221763][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.225165][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.228347][ T7830] bridge_slave_0: entered allmulticast mode [ 94.232105][ T7830] bridge_slave_0: entered promiscuous mode [ 94.237419][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.240630][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.244118][ T7830] bridge_slave_1: entered allmulticast mode [ 94.248015][ T7830] bridge_slave_1: entered promiscuous mode [ 94.331397][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.335386][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 94.341755][ T54] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 94.346663][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.351397][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.362074][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.373132][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.376715][ T7857] netlink: 'syz.2.567': attribute type 9 has an invalid length. [ 94.377394][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.380123][ T7857] netlink: 'syz.2.567': attribute type 11 has an invalid length. [ 94.389623][ T7857] netlink: 'syz.2.567': attribute type 12 has an invalid length. [ 94.393174][ T7857] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.567'. [ 94.396200][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 94.410107][ T7830] team0: Port device team_slave_0 added [ 94.412937][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.416742][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.421748][ T7830] team0: Port device team_slave_1 added [ 94.445183][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.448001][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.457449][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.463425][ T7862] overlayfs: cannot append lower layer [ 94.466601][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.469433][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.480005][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.510612][ T7830] hsr_slave_0: entered promiscuous mode [ 94.513591][ T7830] hsr_slave_1: entered promiscuous mode [ 94.516836][ T7830] debugfs: 'hsr0' already exists in 'hsr' [ 94.519303][ T7830] Cannot create hsr debugfs directory [ 94.634953][ T54] usb 8-1: usb_control_msg returned -32 [ 94.636782][ T54] usbtmc 8-1:16.0: can't read capabilities [ 94.680987][ T7830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.682633][ T6116] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 94.688298][ T7830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.694161][ T7830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.699344][ T7830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.716957][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.719302][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.722624][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.722632][ T5974] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.727644][ T7830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.758336][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.766475][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.769536][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.779533][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.786219][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.788513][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.795597][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.797884][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.812794][ T6116] usb 6-1: device descriptor read/64, error -71 [ 94.875048][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.879770][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.885349][ T5974] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 94.888969][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.896446][ T5974] usb 7-1: config 0 descriptor?? [ 94.928543][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.063072][ T6116] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 95.068868][ T7830] veth0_vlan: entered promiscuous mode [ 95.074576][ T7830] veth1_vlan: entered promiscuous mode [ 95.091757][ T7830] veth0_macvtap: entered promiscuous mode [ 95.096723][ T7830] veth1_macvtap: entered promiscuous mode [ 95.168173][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 95.196892][ T7877] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 95.202465][ T6116] usb 6-1: device descriptor read/64, error -71 [ 95.204785][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.208398][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.306038][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.316711][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.323221][ T6116] usb usb6-port1: attempt power cycle [ 95.463332][ T3979] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.464406][ T55] usb 8-1: USB disconnect, device number 14 [ 95.466418][ T3979] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.469970][ T5974] usbhid 7-1:0.0: can't add hid device: -71 [ 95.471357][ T3979] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.478531][ T5974] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 95.481506][ T3979] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.486670][ T5974] usb 7-1: USB disconnect, device number 9 [ 95.487027][ T3979] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.492147][ T3979] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.499023][ T3979] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.505129][ T3979] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.510461][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.516775][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.524973][ T5000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.528941][ T5000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.531826][ T5000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.535609][ T5000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.577690][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.580208][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.596146][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.598994][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.613804][ T40] audit: type=1400 audit(1768898237.137:531): avc: denied { mounton } for pid=7830 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 95.622164][ T40] audit: type=1400 audit(1768898237.147:532): avc: denied { mounton } for pid=7830 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 95.692772][ T6116] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 95.724389][ T6116] usb 6-1: device descriptor read/8, error -71 [ 95.728834][ T7886] binder: 7884:7886 ioctl 4008941a 200000000180 returned -22 [ 95.941846][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 95.982990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.992720][ T6116] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 96.023216][ T6116] usb 6-1: device descriptor read/8, error -71 [ 96.041554][ T5942] Bluetooth: hci0: command tx timeout [ 96.102180][ T7904] pim6reg: entered allmulticast mode [ 96.143178][ T6116] usb usb6-port1: unable to enumerate USB device [ 96.265557][ T7915] TCP: TCP_TX_DELAY enabled [ 96.281912][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 96.323891][ T6002] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.474261][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.478476][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.481608][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.486825][ T6002] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.490536][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.502800][ T6002] usb 7-1: config 0 descriptor?? [ 96.524957][ T7923] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 96.529991][ T40] audit: type=1400 audit(1768898238.057:533): avc: denied { module_load } for pid=7922 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.080249][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.087151][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.091454][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.095160][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.098422][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.101637][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.105011][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.108272][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.111596][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.115436][ T6002] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 97.129466][ T6002] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.439565][ T7939] geneve2: entered promiscuous mode [ 97.442347][ T7939] geneve2: entered allmulticast mode [ 97.449260][ T7936] netlink: 'syz.1.582': attribute type 13 has an invalid length. [ 97.452679][ T7936] netlink: 'syz.1.582': attribute type 17 has an invalid length. [ 97.489777][ T7936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.497529][ T7941] xt_l2tp: v2 doesn't support IP mode [ 97.503932][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.534535][ T7943] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 98.113574][ T5942] Bluetooth: hci0: command tx timeout [ 98.450799][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 98.450810][ T40] audit: type=1400 audit(1768898239.977:535): avc: denied { setopt } for pid=7962 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.502803][ T6002] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 98.768834][ T7980] loop4: detected capacity change from 0 to 7 [ 98.871475][ T7982] tmpfs: Cannot disable swap on remount [ 98.882058][ T7980] Dev loop4: unable to read RDB block 7 [ 98.884773][ T7980] loop4: unable to read partition table [ 98.886705][ T7980] loop4: partition table beyond EOD, truncated [ 98.888853][ T7980] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 98.894410][ C1] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 98.897619][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 99.025959][ T7990] tmpfs: User quota inode hardlimit too large. [ 99.035223][ T7991] tmpfs: User quota inode hardlimit too large. [ 99.322279][ T8013] 9p: Bad value for 'port' [ 99.354864][ T40] audit: type=1400 audit(1768898240.887:536): avc: denied { bind } for pid=8014 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.458429][ T40] audit: type=1400 audit(1768898240.987:537): avc: denied { mounton } for pid=8021 comm="syz.1.608" path="/proc/497/cgroup" dev="proc" ino=22125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 99.465842][ T40] audit: type=1400 audit(1768898240.987:538): avc: denied { remount } for pid=8021 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 99.563976][ T40] audit: type=1400 audit(1768898241.097:539): avc: denied { create } for pid=8030 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.582743][ T40] audit: type=1400 audit(1768898241.097:540): avc: denied { bind } for pid=8030 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.595783][ T40] audit: type=1400 audit(1768898241.127:541): avc: denied { ioctl } for pid=8032 comm="syz.1.612" path="socket:[21154]" dev="sockfs" ino=21154 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.631429][ T8036] __nla_validate_parse: 1 callbacks suppressed [ 99.631439][ T8036] netlink: 52 bytes leftover after parsing attributes in process `syz.1.613'. [ 99.663434][ T8038] XFS (nullb0): Invalid superblock magic number [ 99.863618][ T6018] usb 7-1: USB disconnect, device number 10 [ 99.887158][ T8056] batadv_slave_1: entered promiscuous mode [ 99.893708][ T8055] batadv_slave_1: left promiscuous mode [ 99.947894][ T8061] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 100.009890][ T8066] syz_tun: entered allmulticast mode [ 100.167118][ T8075] fuse: Bad value for 'user_id' [ 100.168749][ T8075] fuse: Bad value for 'user_id' [ 100.170429][ T8076] NILFS (nullb0): couldn't find nilfs on the device [ 100.170514][ T8077] fuse: Bad value for 'user_id' [ 100.174664][ T8077] fuse: Bad value for 'user_id' [ 100.199084][ T8079] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 100.202149][ T8079] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 100.202556][ T8080] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 100.206890][ T8079] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 100.209865][ T5942] Bluetooth: hci0: command tx timeout [ 100.212660][ T8080] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 100.212680][ T8080] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 100.527921][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 100.552876][ T8097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8097 comm=syz.2.631 [ 100.573107][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.836634][ T40] audit: type=1400 audit(1768898242.367:542): avc: denied { remount } for pid=8126 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 100.846949][ T40] audit: type=1400 audit(1768898242.367:543): avc: denied { getopt } for pid=8126 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.862459][ T40] audit: type=1400 audit(1768898242.377:544): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 100.935454][ T8135] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.939530][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.644'. [ 100.991774][ T8138] syz.2.646 (8138): drop_caches: 0 [ 100.994983][ T8138] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.039456][ T8146] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 101.046004][ T8146] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 102.272601][ T5942] Bluetooth: hci0: command tx timeout [ 103.529026][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.533137][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.536108][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.539300][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.542229][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.663882][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 103.724739][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.727122][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.729409][ T8211] bridge_slave_0: entered allmulticast mode [ 103.733094][ T8211] bridge_slave_0: entered promiscuous mode [ 103.736429][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.738757][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.741337][ T8211] bridge_slave_1: entered allmulticast mode [ 103.745100][ T8211] bridge_slave_1: entered promiscuous mode [ 103.764288][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.769139][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.785597][ T8211] team0: Port device team_slave_0 added [ 103.789305][ T8211] team0: Port device team_slave_1 added [ 103.804584][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.806768][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.814818][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.819262][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.821521][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.829751][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.853516][ T8211] hsr_slave_0: entered promiscuous mode [ 103.855787][ T8211] hsr_slave_1: entered promiscuous mode [ 103.857892][ T8211] debugfs: 'hsr0' already exists in 'hsr' [ 103.859979][ T8211] Cannot create hsr debugfs directory [ 103.973578][ T8211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.979315][ T8211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.988380][ T8211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.014963][ T8211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.046205][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.049278][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.052462][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.055413][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.060877][ T8238] overlayfs: invalid origin (0000) [ 104.105462][ T235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.108838][ T235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.125423][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 104.135339][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.137704][ T8240] 9p: Bad value for 'version' [ 104.140608][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 104.145059][ T3979] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.149057][ T3979] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.161156][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.171594][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.174153][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.194048][ T235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.197331][ T235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.200844][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 104.200853][ T40] audit: type=1400 audit(1768898245.727:547): avc: denied { mount } for pid=8241 comm="syz.3.666" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.203293][ T8242] comedi comedi3: comedi_config --init_data is deprecated [ 104.219313][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.221576][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.234744][ T40] audit: type=1400 audit(1768898245.767:548): avc: denied { connect } for pid=8243 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.248191][ T8244] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 104.255435][ T40] audit: type=1400 audit(1768898245.787:549): avc: denied { write } for pid=8243 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.281936][ T235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.285559][ T235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.288676][ T40] audit: type=1400 audit(1768898245.817:550): avc: denied { mounton } for pid=8249 comm="syz.3.668" path="/166/bus" dev="tmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 104.290314][ T8250] Mount JFS Failure: -22 [ 104.299305][ T40] audit: type=1400 audit(1768898245.827:551): avc: denied { module_request } for pid=8211 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.362159][ T235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.365848][ T235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.380107][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 104.391440][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.461528][ T8267] overlayfs: invalid origin (0000) [ 104.523572][ T235] bridge_slave_1: left allmulticast mode [ 104.526168][ T235] bridge_slave_1: left promiscuous mode [ 104.529512][ T235] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.535868][ T235] bridge_slave_0: left allmulticast mode [ 104.537691][ T235] bridge_slave_0: left promiscuous mode [ 104.539608][ T235] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.568635][ T40] audit: type=1400 audit(1768898246.097:552): avc: denied { bpf } for pid=8278 comm="syz.3.675" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.577900][ T40] audit: type=1400 audit(1768898246.097:553): avc: denied { perfmon } for pid=8278 comm="syz.3.675" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.817963][ T8289] netlink: 182812 bytes leftover after parsing attributes in process `syz.4.677'. [ 104.890150][ T8293] netlink: 68 bytes leftover after parsing attributes in process `syz.4.679'. [ 104.899705][ T8294] qnx4: no qnx4 filesystem (no root dir). [ 104.948472][ T8298] overlayfs: invalid origin (0000) [ 105.132522][ T235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.138528][ T235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.143709][ T235] bond0 (unregistering): Released all slaves [ 105.151628][ T235] bond1 (unregistering): (slave lo): Releasing backup interface [ 105.156977][ T235] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 105.163630][ T235] bond1 (unregistering): Released all slaves [ 105.174631][ T235] bond2 (unregistering): Released all slaves [ 105.197841][ T8283] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 105.202161][ T8283] netlink: 'syz.3.676': attribute type 2 has an invalid length. [ 105.240735][ T8211] veth0_vlan: entered promiscuous mode [ 105.247730][ T8211] veth1_vlan: entered promiscuous mode [ 105.283182][ T8211] veth0_macvtap: entered promiscuous mode [ 105.296020][ T8211] veth1_macvtap: entered promiscuous mode [ 105.334891][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.346231][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.357784][ T1182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.360783][ T1182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.374134][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.379707][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.487589][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.490028][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.519698][ T40] audit: type=1400 audit(1768898247.047:554): avc: granted { setsecparam } for pid=8332 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 105.520116][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.545516][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.649183][ T5942] Bluetooth: hci2: command tx timeout [ 105.650491][ T40] audit: type=1400 audit(1768898247.177:555): avc: denied { read } for pid=8344 comm="syz.5.660" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.661670][ T40] audit: type=1400 audit(1768898247.177:556): avc: denied { open } for pid=8344 comm="syz.5.660" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.700765][ T235] hsr_slave_0: left promiscuous mode [ 105.711675][ T235] hsr_slave_1: left promiscuous mode [ 105.719274][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'. [ 105.724601][ T235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.727373][ T235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.731651][ T235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.736486][ T235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.739425][ T235] batman_adv: batadv0: Removing interface: macsec1 [ 105.749533][ T235] veth1_macvtap: left promiscuous mode [ 105.751532][ T235] veth0_macvtap: left promiscuous mode [ 105.753774][ T235] veth1_vlan: left promiscuous mode [ 106.076088][ T235] team0 (unregistering): Port device team_slave_1 removed [ 106.432925][ T8352] bridge0: entered promiscuous mode [ 106.434930][ T8352] macsec1: entered allmulticast mode [ 106.436690][ T8352] bridge0: entered allmulticast mode [ 106.439228][ T8352] bridge0: port 3(macsec1) entered blocking state [ 106.441571][ T8352] bridge0: port 3(macsec1) entered disabled state [ 106.446573][ T8352] bridge0: left allmulticast mode [ 106.448860][ T8352] bridge0: left promiscuous mode [ 106.833681][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.838148][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.842416][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.852119][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.855438][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.698'. [ 106.856491][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.862600][ T9] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 106.864743][ T8377] macvlan2: entered promiscuous mode [ 106.867953][ T8377] macvlan2: entered allmulticast mode [ 106.903567][ T8379] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.906930][ T8379] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.014216][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.022598][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.026373][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 107.051331][ T8373] chnl_net:caif_netlink_parms(): no params data found [ 107.054853][ T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.058089][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.062568][ T8367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.066146][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 107.070110][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 107.073048][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 107.075557][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 107.079541][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 107.082108][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 107.136845][ T235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.190668][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.195867][ T8397] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.703'. [ 107.197096][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.201790][ T8373] bridge_slave_0: entered allmulticast mode [ 107.205096][ T8373] bridge_slave_0: entered promiscuous mode [ 107.209707][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.212196][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.227179][ T8373] bridge_slave_1: entered allmulticast mode [ 107.230858][ T8373] bridge_slave_1: entered promiscuous mode [ 107.264419][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.268637][ T8399] tap0: tun_chr_ioctl cmd 1074025672 [ 107.270431][ T8399] tap0: ignored: set checksum disabled [ 107.275337][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.298544][ T235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.334138][ T8373] team0: Port device team_slave_0 added [ 107.338864][ T8373] team0: Port device team_slave_1 added [ 107.353328][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.356020][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.365980][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.383778][ T235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.390300][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.393624][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.403070][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.450492][ T8373] hsr_slave_0: entered promiscuous mode [ 107.453261][ T8373] hsr_slave_1: entered promiscuous mode [ 107.455508][ T8373] debugfs: 'hsr0' already exists in 'hsr' [ 107.457437][ T8373] Cannot create hsr debugfs directory [ 107.481563][ T235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.623056][ T6207] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 107.712585][ T5293] Bluetooth: hci2: command tx timeout [ 107.718016][ T8364] usb 8-1: reset full-speed USB device number 15 using dummy_hcd [ 107.744551][ T235] bridge_slave_1: left allmulticast mode [ 107.746425][ T235] bridge_slave_1: left promiscuous mode [ 107.748411][ T235] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.753752][ T235] bridge_slave_0: left allmulticast mode [ 107.755633][ T235] bridge_slave_0: left promiscuous mode [ 107.757523][ T235] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.875975][ T8367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.907383][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 107.914872][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 107.917659][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 107.920327][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 107.930608][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 107.934041][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 107.936704][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 108.017772][ T235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.024115][ T235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.027828][ T235] bond0 (unregistering): Released all slaves [ 108.045542][ T8373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.052279][ T8373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.059841][ T8373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.065392][ T8373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.081824][ T8364] zonefs (loop3) ERROR: Not a zoned block device [ 108.172289][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.185461][ T851] usb 8-1: USB disconnect, device number 15 [ 108.186528][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.195130][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.197409][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.208788][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.211075][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.294394][ T235] hsr_slave_0: left promiscuous mode [ 108.296563][ T235] hsr_slave_1: left promiscuous mode [ 108.298654][ T235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.301003][ T235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.313663][ T235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.317259][ T235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.330378][ T235] veth1_macvtap: left promiscuous mode [ 108.332161][ T235] veth0_macvtap: left promiscuous mode [ 108.334511][ T235] veth1_vlan: left promiscuous mode [ 108.336399][ T235] veth0_vlan: left promiscuous mode [ 108.631299][ T235] team0 (unregistering): Port device team_slave_1 removed [ 108.658952][ T235] team0 (unregistering): Port device team_slave_0 removed [ 108.883153][ T8436] netlink: 3900 bytes leftover after parsing attributes in process `syz.3.710'. [ 108.922494][ T5293] Bluetooth: hci0: command tx timeout [ 108.956464][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.711'. [ 109.049661][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.246480][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 109.246491][ T40] audit: type=1400 audit(1768898250.777:562): avc: denied { bind } for pid=8461 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.262115][ T40] audit: type=1400 audit(1768898250.787:563): avc: denied { name_bind } for pid=8461 comm="syz.3.714" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 109.272248][ T40] audit: type=1400 audit(1768898250.787:564): avc: denied { node_bind } for pid=8461 comm="syz.3.714" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 109.284845][ T8373] veth0_vlan: entered promiscuous mode [ 109.291593][ T8465] overlayfs: missing 'lowerdir' [ 109.297540][ T8373] veth1_vlan: entered promiscuous mode [ 109.330781][ T8373] veth0_macvtap: entered promiscuous mode [ 109.336910][ T8373] veth1_macvtap: entered promiscuous mode [ 109.349940][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.368371][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.383633][ T1182] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.387796][ T40] audit: type=1400 audit(1768898250.917:565): avc: denied { load_policy } for pid=8475 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.394495][ T1182] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.398210][ T8478] SELinux: failed to load policy [ 109.399126][ T1182] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.438081][ T1182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.493995][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.496672][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.516771][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.520002][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.534671][ T40] audit: type=1400 audit(1768898251.067:566): avc: denied { unmount } for pid=8211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.559090][ T40] audit: type=1400 audit(1768898251.087:567): avc: denied { mounton } for pid=8493 comm="syz.3.723" path="/190/file0" dev="9p" ino=71827665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.571666][ T8494] overlayfs: missing 'lowerdir' [ 109.593503][ T40] audit: type=1400 audit(1768898251.127:568): avc: denied { setattr } for pid=8493 comm="syz.3.723" name="/" dev="9p" ino=71827665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.613815][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.5.724'. [ 109.625243][ T40] audit: type=1400 audit(1768898251.157:569): avc: denied { append } for pid=8504 comm="syz.6.726" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.643394][ T40] audit: type=1400 audit(1768898251.167:570): avc: denied { listen } for pid=8504 comm="syz.6.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.649506][ T40] audit: type=1400 audit(1768898251.177:571): avc: denied { connect } for pid=8504 comm="syz.6.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.733162][ T8515] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 109.735865][ T8515] netlink: 228 bytes leftover after parsing attributes in process `syz.5.729'. [ 109.767349][ T8523] ntfs3(loop6): try to read out of volume at offset 0x0 [ 109.793697][ T5293] Bluetooth: hci2: command tx timeout [ 110.057392][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 110.286024][ T8569] syzkaller0: entered promiscuous mode [ 110.287982][ T8569] syzkaller0: entered allmulticast mode [ 110.371513][ T8574] netlink: 'syz.6.744': attribute type 5 has an invalid length. [ 110.412215][ T8580] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 110.456740][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.747'. [ 110.495959][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.749'. [ 110.694728][ T8594] bridge_slave_0: invalid flags given to default FDB implementation [ 110.708658][ T8595] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 110.760321][ T5293] Bluetooth: Wrong link type (-71) [ 110.773947][ T8602] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 110.849465][ T8606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.893185][ T8609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8609 comm=syz.5.754 [ 110.908834][ T8609] netlink: 'syz.5.754': attribute type 10 has an invalid length. [ 110.909792][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.914016][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.917798][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.917848][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.924408][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.924458][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.926591][ T8609] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.035620][ T8620] openvswitch: netlink: Unknown key attributes 2 [ 111.150786][ T8637] netlink: 68 bytes leftover after parsing attributes in process `syz.3.763'. [ 111.381428][ T8657] netlink: 'syz.3.769': attribute type 153 has an invalid length. [ 111.384623][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 111.573284][ T6116] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 111.666361][ T61] syzkaller0: tun_net_xmit 76 [ 111.668337][ T61] syzkaller0: tun_net_xmit 48 [ 111.668855][ T8674] syzkaller0: create flow: hash 60743843 index 1 [ 111.692196][ T8673] syzkaller0: delete flow: hash 60743843 index 1 [ 111.725011][ T6116] usb 11-1: config 0 has no interfaces? [ 111.728813][ T6116] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 111.733300][ T6116] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.743988][ T6116] usb 11-1: config 0 descriptor?? [ 111.873202][ T5293] Bluetooth: hci2: command tx timeout [ 111.973126][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'. [ 111.980258][ T6021] usb 11-1: USB disconnect, device number 2 [ 112.433138][ T5293] Bluetooth: hci0: command tx timeout [ 112.978706][ T8696] macvlan2: entered promiscuous mode [ 113.109107][ T8708] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 113.254342][ T8728] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 113.579468][ T8738] usb usb8: usbfs: process 8738 (syz.6.793) did not claim interface 0 before use [ 113.613766][ T8740] ip6t_srh: unknown srh invflags 51E8 [ 113.716140][ T8747] ipvlan0: entered promiscuous mode [ 113.718331][ T8747] ipvlan0: entered allmulticast mode [ 113.720486][ T8747] veth0_vlan: entered allmulticast mode [ 114.144372][ T8760] pim6reg: entered allmulticast mode [ 114.164262][ T8760] pim6reg: left allmulticast mode [ 114.276899][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 114.276922][ T40] audit: type=1400 audit(1768898255.807:693): avc: denied { unmount } for pid=8211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.317882][ T40] audit: type=1400 audit(1768898255.847:694): avc: denied { create } for pid=8761 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.324690][ T40] audit: type=1400 audit(1768898255.847:695): avc: denied { setopt } for pid=8761 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.331050][ T40] audit: type=1400 audit(1768898255.847:696): avc: denied { allowed } for pid=8761 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.338713][ T40] audit: type=1400 audit(1768898255.867:697): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.422178][ T40] audit: type=1400 audit(1768898255.947:698): avc: denied { write } for pid=8761 comm="syz.5.802" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.519082][ T8765] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 114.551609][ T40] audit: type=1400 audit(1768898256.077:699): avc: denied { read } for pid=8773 comm="syz.6.804" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.569665][ T40] audit: type=1400 audit(1768898256.077:700): avc: denied { open } for pid=8773 comm="syz.6.804" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.569715][ T8776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.577617][ T40] audit: type=1400 audit(1768898256.077:701): avc: denied { ioctl } for pid=8773 comm="syz.6.804" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.579722][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.587877][ T40] audit: type=1400 audit(1768898256.077:702): avc: denied { name_bind } for pid=8773 comm="syz.6.804" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 114.591831][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 114.619857][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.624519][ T8785] ip6t_REJECT: ECHOREPLY is not supported [ 114.674185][ T8792] XFS (nbd5): SB validate failed with error -5. [ 114.822634][ T2300] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 114.852442][ T6021] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 115.012425][ T6021] usb 7-1: Using ep0 maxpacket: 16 [ 115.015848][ T6021] usb 7-1: too many configurations: 60, using maximum allowed: 8 [ 115.019704][ T6021] usb 7-1: config 0 has no interfaces? [ 115.023076][ T6021] usb 7-1: config 0 has no interfaces? [ 115.025833][ T6021] usb 7-1: config 0 has no interfaces? [ 115.029141][ T6021] usb 7-1: config 0 has no interfaces? [ 115.033009][ T6021] usb 7-1: config 0 has no interfaces? [ 115.040211][ T6021] usb 7-1: config 0 has no interfaces? [ 115.043656][ T6021] usb 7-1: config 0 has no interfaces? [ 115.046763][ T6021] usb 7-1: config 0 has no interfaces? [ 115.054915][ T6021] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 115.058728][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 115.062110][ T6021] usb 7-1: Product: syz [ 115.064651][ T6021] usb 7-1: Manufacturer: syz [ 115.066612][ T6021] usb 7-1: SerialNumber: syz [ 115.068777][ T6021] usb 7-1: config 0 descriptor?? [ 115.176567][ T8812] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 115.179579][ T8812] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 115.188085][ T8812] netlink: 'syz.5.817': attribute type 10 has an invalid length. [ 115.199986][ T8812] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 115.203066][ T8812] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 115.210005][ T8812] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.269651][ T8813] MTD: Couldn't look up '/dev/sg0': -15 [ 115.272077][ T8813] /dev/sg0: Can't lookup blockdev [ 115.274281][ T8814] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 115.274295][ T8814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.275772][ T8814] vhci_hcd vhci_hcd.0: Device attached [ 115.275802][ T8777] usbip_core: unknown command [ 115.275810][ T8777] vhci_hcd: unknown pdu 256 [ 115.275815][ T8777] usbip_core: unknown command [ 115.275953][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.277680][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.279810][ T61] vhci_hcd vhci_hcd.2: stop threads [ 115.290168][ T8815] vhci_hcd: connection closed [ 115.290659][ T6116] usb 7-1: USB disconnect, device number 11 [ 115.291921][ T61] vhci_hcd vhci_hcd.2: release socket [ 115.300447][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 115.303707][ T61] vhci_hcd vhci_hcd.2: stop threads [ 115.305761][ T61] vhci_hcd vhci_hcd.2: release socket [ 115.308093][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 115.353359][ T2300] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 116.201004][ T8839] 9p: Bad value for 'wfdno' [ 116.210563][ T8839] 9p: Bad value for 'debug' [ 116.405009][ T8854] EXT4-fs (nbd6): unable to read superblock [ 116.464048][ T8858] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.831'. [ 116.504806][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.833'. [ 116.515694][ T8864] vivid-000: disconnect [ 116.518792][ T8861] vivid-000: reconnect [ 116.584156][ T2300] libceph: connect (1)[c::]:6789 error -101 [ 116.589879][ T2300] libceph: mon0 (1)[c::]:6789 connect error [ 116.598701][ T55] libceph: connect (1)[c::]:6789 error -101 [ 116.600729][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 116.828306][ T8883] netem: change failed [ 116.830592][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.836'. [ 116.837749][ T8883] bond0: entered promiscuous mode [ 116.839625][ T8883] bond_slave_0: entered promiscuous mode [ 116.841672][ T8883] bond_slave_1: entered promiscuous mode [ 116.844895][ T8883] gretap0: entered promiscuous mode [ 116.847682][ T8883] hsr1: entered promiscuous mode [ 116.850035][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.836'. [ 116.865647][ T55] libceph: connect (1)[c::]:6789 error -101 [ 116.867701][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 116.872694][ T6021] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 117.043632][ T6021] usb 7-1: too many configurations: 220, using maximum allowed: 8 [ 117.048066][ T6021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 117.051064][ T6021] usb 7-1: can't read configurations, error -61 [ 117.183900][ T6021] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 117.197319][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.841'. [ 117.200176][ T8903] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 117.253054][ T8905] openvswitch: netlink: Key type 51 is out of range max 32 [ 117.342940][ T6021] usb 7-1: too many configurations: 220, using maximum allowed: 8 [ 117.354469][ T6021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 117.357191][ T6021] usb 7-1: can't read configurations, error -61 [ 117.370010][ T6021] usb usb7-port1: attempt power cycle [ 117.375958][ T6116] libceph: connect (1)[c::]:6789 error -101 [ 117.383289][ T6116] libceph: mon0 (1)[c::]:6789 connect error [ 117.394180][ T8870] ceph: No mds server is up or the cluster is laggy [ 117.539390][ T8932] netlink: 'syz.5.846': attribute type 1 has an invalid length. [ 117.712464][ T6021] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 117.733284][ T6021] usb 7-1: too many configurations: 220, using maximum allowed: 8 [ 117.737638][ T6021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 117.740069][ T6021] usb 7-1: can't read configurations, error -61 [ 117.868521][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.853'. [ 117.874392][ T6021] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 117.884872][ T8955] JFS: charset not found [ 117.886975][ T8955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.853'. [ 117.893964][ T6021] usb 7-1: too many configurations: 220, using maximum allowed: 8 [ 117.899639][ T6021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 117.904187][ T6021] usb 7-1: can't read configurations, error -61 [ 117.907493][ T6021] usb usb7-port1: unable to enumerate USB device [ 118.598449][ T8966] netlink: 'syz.5.856': attribute type 1 has an invalid length. [ 118.617249][ T8966] bond1: entered promiscuous mode [ 118.619780][ T8966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.635614][ T8966] bond1: (slave bridge1): making interface the new active one [ 118.638760][ T8966] bridge1: entered promiscuous mode [ 118.643965][ T8966] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 118.698969][ T8969] bond0: (slave bridge0): Releasing backup interface [ 118.704186][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.707341][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.717342][ T8969] bridge_slave_0: left allmulticast mode [ 118.719636][ T8969] bridge_slave_0: left promiscuous mode [ 118.722059][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.728702][ T8969] bridge_slave_1: left allmulticast mode [ 118.730878][ T8969] bridge_slave_1: left promiscuous mode [ 118.735292][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.741758][ T8969] bond0: (slave bond_slave_0): Releasing backup interface [ 118.752303][ T8969] bond0: (slave bond_slave_1): Releasing backup interface [ 118.763939][ T8969] team0: Port device team_slave_0 removed [ 118.769794][ T8969] team0: Port device team_slave_1 removed [ 118.772621][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.775692][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.780297][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.783665][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.788546][ T8969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.799711][ T8971] vlan0: entered promiscuous mode [ 118.806683][ T8970] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 118.811266][ T8970] qnx6: wrong signature (magic) in superblock #1. [ 118.811468][ T8971] team0: Port device vlan0 added [ 118.816017][ T8970] qnx6: unable to read the first superblock [ 118.821153][ T8969] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 118.826242][ T8969] qnx6: wrong signature (magic) in superblock #1. [ 118.828922][ T8969] qnx6: unable to read the first superblock [ 119.172181][ T8984] fuse: Unknown parameter 'sd' [ 119.240856][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.863'. [ 119.280394][ T8987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.297407][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 119.297424][ T40] audit: type=1400 audit(119.239:795): avc: denied { execute_no_trans } for pid=8986 comm="syz.5.863" path="/60/file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.311297][ T40] audit: type=1400 audit(119.249:796): avc: denied { remount } for pid=8986 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.361883][ T8987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.497688][ T8987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.578013][ T8987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.686741][ T40] audit: type=1400 audit(119.629:797): avc: denied { write } for pid=8991 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.692745][ T1153] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.707191][ T1147] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.717068][ T1147] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.726246][ T1147] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.925455][ T40] audit: type=1400 audit(119.869:798): avc: denied { watch watch_reads } for pid=9001 comm="syz.2.866" path="/192/file0" dev="9p" ino=71827665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.929983][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 119.935385][ T40] audit: type=1400 audit(119.869:799): avc: denied { getattr } for pid=9001 comm="syz.2.866" name="/" dev="9p" ino=71827665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.935426][ T40] audit: type=1400 audit(119.869:800): avc: denied { watch } for pid=9001 comm="syz.2.866" path="/192/file0/file0" dev="9p" ino=71827719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.958808][ T40] audit: type=1400 audit(119.899:801): avc: denied { map } for pid=9001 comm="syz.2.866" path="/192/file0/cgroup.controllers" dev="9p" ino=71827967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.972516][ T40] audit: type=1400 audit(119.899:802): avc: denied { execute } for pid=9001 comm="syz.2.866" path="/192/file0/cgroup.controllers" dev="9p" ino=71827967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.153245][ T40] audit: type=1400 audit(120.099:803): avc: denied { read } for pid=9007 comm="syz.5.868" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.166441][ T40] audit: type=1400 audit(120.099:804): avc: denied { open } for pid=9007 comm="syz.5.868" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.369346][ T9030] sg_read: process 578 (syz.2.873) changed security contexts after opening file descriptor, this is not allowed. [ 120.451660][ T9032] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 120.827691][ T9054] hpfs: Bad magic ... probably not HPFS [ 120.933113][ T851] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 121.064479][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.883'. [ 121.067357][ T9061] tipc: Enabling of bearer rejected, failed to enable media [ 121.070291][ T9061] tc_dump_action: action bad kind [ 121.083620][ T851] usb 11-1: Using ep0 maxpacket: 8 [ 121.086804][ T851] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.090036][ T851] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.093624][ T851] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.096891][ T851] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.101871][ T851] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.105063][ T851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.311844][ T851] usb 11-1: GET_CAPABILITIES returned 0 [ 121.314717][ T851] usbtmc 11-1:16.0: can't read capabilities [ 121.342055][ T9076] xfs: Unknown parameter 'norecoveryapability' [ 121.344858][ T9076] sctp: [Deprecated]: syz.2.887 (pid 9076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.344858][ T9076] Use struct sctp_sack_info instead [ 121.446569][ T9078] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 121.474851][ T9078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.514204][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.517119][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.524621][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'. [ 121.532000][ T851] usb 11-1: USB disconnect, device number 3 [ 121.558694][ T9078] vlan2: entered allmulticast mode [ 121.560914][ T9078] bond5: entered allmulticast mode [ 121.877351][ T9106] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.896'. [ 121.881049][ T9106] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.896'. [ 121.886686][ T9107] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.896'. [ 121.890306][ T9107] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.896'. [ 121.906479][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.896'. [ 122.071988][ T9110] Bluetooth: MGMT ver 1.23 [ 122.100475][ T9110] bond1: option xmit_hash_policy: invalid value (6) [ 122.105981][ T9110] bond1 (unregistering): Released all slaves [ 122.129252][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.897'. [ 122.132177][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.897'. [ 122.249609][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.6.900'. [ 122.333516][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.6.902'. [ 122.669015][ T9158] fuse: Bad value for 'user_id' [ 122.670603][ T9158] fuse: Bad value for 'user_id' [ 122.783846][ T9172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.794617][ T9174] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 123.002492][ T829] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 123.163998][ T829] usb 11-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.172401][ T829] usb 11-1: config 1 interface 0 has no altsetting 0 [ 123.175554][ T829] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.183661][ T829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.187200][ T829] usb 11-1: SerialNumber: syz [ 123.216834][ T9182] netlink: 'syz.2.917': attribute type 2 has an invalid length. [ 123.220156][ T9182] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 123.262227][ T9184] random: crng reseeded on system resumption [ 123.411888][ T829] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 123.418351][ T829] usb 11-1: USB disconnect, device number 4 [ 123.945603][ T9209] veth1_macvtap: left promiscuous mode [ 123.964469][ T9210] [ 123.965312][ T9210] ====================================================== [ 123.967546][ T9210] WARNING: possible circular locking dependency detected [ 123.969763][ T9210] syzkaller #0 Tainted: G L [ 123.972276][ T9210] ------------------------------------------------------ [ 123.974821][ T9210] syz.6.928/9210 is trying to acquire lock: [ 123.976758][ T9210] ffff888106841328 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x19e/0x500 [ 123.980058][ T9210] [ 123.980058][ T9210] but task is already holding lock: [ 123.982350][ T9210] ffff88803285fac8 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 123.985062][ T9210] [ 123.985062][ T9210] which lock already depends on the new lock. [ 123.985062][ T9210] [ 123.988269][ T9210] [ 123.988269][ T9210] the existing dependency chain (in reverse order) is: [ 123.991111][ T9210] [ 123.991111][ T9210] -> #2 (vm_lock){++++}-{0:0}: [ 123.993598][ T9210] __vma_enter_locked+0x260/0x770 [ 123.995563][ T9210] __vma_start_write+0x21/0x160 [ 123.997284][ T9210] mprotect_fixup+0x4e3/0xb80 [ 123.999212][ T9210] setup_arg_pages+0x4a2/0xbb0 [ 124.001294][ T9210] load_elf_binary+0xb5b/0x4fe0 [ 124.003485][ T9210] bprm_execve+0x8c2/0x1620 [ 124.005569][ T9210] kernel_execve+0x2ef/0x3b0 [ 124.007870][ T9210] kernel_init+0x14a/0x2b0 [ 124.009974][ T9210] ret_from_fork+0x983/0xb10 [ 124.012092][ T9210] ret_from_fork_asm+0x1a/0x30 [ 124.014311][ T9210] [ 124.014311][ T9210] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 124.017512][ T9210] __might_fault+0x113/0x190 [ 124.019712][ T9210] _copy_to_iter+0x1c2/0x1710 [ 124.021932][ T9210] copy_page_to_iter+0x12a/0x1e0 [ 124.024267][ T9210] filemap_read+0x6b1/0xe40 [ 124.026298][ T9210] blkdev_read_iter+0x1ac/0x500 [ 124.028501][ T9210] vfs_read+0x8bf/0xcf0 [ 124.030501][ T9210] ksys_read+0x12a/0x250 [ 124.032590][ T9210] do_syscall_64+0xcd/0xf80 [ 124.034689][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.037395][ T9210] [ 124.037395][ T9210] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{4:4}: [ 124.041078][ T9210] __lock_acquire+0x1669/0x2890 [ 124.043397][ T9210] lock_acquire+0x179/0x330 [ 124.045555][ T9210] down_read+0x9b/0x460 [ 124.047610][ T9210] blkdev_read_iter+0x19e/0x500 [ 124.049922][ T9210] __kernel_read+0x3f3/0xbf0 [ 124.052092][ T9210] freader_fetch+0x1d7/0x9d0 [ 124.054272][ T9210] __build_id_parse.isra.0+0xdd/0x6c0 [ 124.056777][ T9210] do_procmap_query+0xb0e/0x1080 [ 124.059061][ T9210] procfs_procmap_ioctl+0x9d/0xe0 [ 124.061137][ T9210] __x64_sys_ioctl+0x18e/0x210 [ 124.063192][ T9210] do_syscall_64+0xcd/0xf80 [ 124.065092][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.067492][ T9210] [ 124.067492][ T9210] other info that might help us debug this: [ 124.067492][ T9210] [ 124.071263][ T9210] Chain exists of: [ 124.071263][ T9210] &sb->s_type->i_mutex_key#8 --> &mm->mmap_lock --> vm_lock [ 124.071263][ T9210] [ 124.075605][ T9210] Possible unsafe locking scenario: [ 124.075605][ T9210] [ 124.077958][ T9210] CPU0 CPU1 [ 124.079830][ T9210] ---- ---- [ 124.081854][ T9210] rlock(vm_lock); [ 124.083239][ T9210] lock(&mm->mmap_lock); [ 124.085403][ T9210] lock(vm_lock); [ 124.087410][ T9210] rlock(&sb->s_type->i_mutex_key#8); [ 124.089132][ T9210] [ 124.089132][ T9210] *** DEADLOCK *** [ 124.089132][ T9210] [ 124.091697][ T9210] 1 lock held by syz.6.928/9210: [ 124.093314][ T9210] #0: ffff88803285fac8 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 124.096126][ T9210] [ 124.096126][ T9210] stack backtrace: [ 124.098013][ T9210] CPU: 3 UID: 0 PID: 9210 Comm: syz.6.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.098029][ T9210] Tainted: [L]=SOFTLOCKUP [ 124.098033][ T9210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.098039][ T9210] Call Trace: [ 124.098044][ T9210] [ 124.098049][ T9210] dump_stack_lvl+0x116/0x1f0 [ 124.098065][ T9210] print_circular_bug+0x275/0x340 [ 124.098078][ T9210] check_noncircular+0x146/0x160 [ 124.098090][ T9210] __lock_acquire+0x1669/0x2890 [ 124.098104][ T9210] lock_acquire+0x179/0x330 [ 124.098115][ T9210] ? blkdev_read_iter+0x19e/0x500 [ 124.098126][ T9210] ? __pfx___might_resched+0x10/0x10 [ 124.098136][ T9210] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 124.098149][ T9210] down_read+0x9b/0x460 [ 124.098158][ T9210] ? blkdev_read_iter+0x19e/0x500 [ 124.098167][ T9210] ? register_lock_class+0x41/0x4b0 [ 124.098179][ T9210] ? __pfx_down_read+0x10/0x10 [ 124.098189][ T9210] blkdev_read_iter+0x19e/0x500 [ 124.098200][ T9210] __kernel_read+0x3f3/0xbf0 [ 124.098214][ T9210] ? __pfx___kernel_read+0x10/0x10 [ 124.098229][ T9210] ? __pfx_vma_start_read+0x10/0x10 [ 124.098245][ T9210] freader_fetch+0x1d7/0x9d0 [ 124.098257][ T9210] ? reacquire_held_locks+0xcd/0x1f0 [ 124.098268][ T9210] ? lock_next_vma+0x10e/0xed0 [ 124.098283][ T9210] ? __pfx_freader_fetch+0x10/0x10 [ 124.098296][ T9210] ? __asan_memset+0x23/0x50 [ 124.098307][ T9210] __build_id_parse.isra.0+0xdd/0x6c0 [ 124.098319][ T9210] ? query_matching_vma+0x48e/0x7d0 [ 124.098331][ T9210] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 124.098349][ T9210] do_procmap_query+0xb0e/0x1080 [ 124.098361][ T9210] ? __pfx_do_procmap_query+0x10/0x10 [ 124.098373][ T9210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.098385][ T9210] ? do_vfs_ioctl+0x128/0x14f0 [ 124.098398][ T9210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.098417][ T9210] ? selinux_file_ioctl+0x180/0x270 [ 124.098430][ T9210] ? selinux_file_ioctl+0xb4/0x270 [ 124.098444][ T9210] procfs_procmap_ioctl+0x9d/0xe0 [ 124.098455][ T9210] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 124.098466][ T9210] __x64_sys_ioctl+0x18e/0x210 [ 124.098478][ T9210] do_syscall_64+0xcd/0xf80 [ 124.098492][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.098503][ T9210] RIP: 0033:0x7ff16918f7c9 [ 124.098511][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.098521][ T9210] RSP: 002b:00007ff169f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.098530][ T9210] RAX: ffffffffffffffda RBX: 00007ff1693e6090 RCX: 00007ff16918f7c9 [ 124.098536][ T9210] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000008 [ 124.098542][ T9210] RBP: 00007ff169213f91 R08: 0000000000000000 R09: 0000000000000000 [ 124.098548][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.098553][ T9210] R13: 00007ff1693e6128 R14: 00007ff1693e6090 R15: 00007fff181514d8 [ 124.098563][ T9210]