last executing test programs: 7m48.786095023s ago: executing program 1 (id=92): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000004440)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004140}, 0x4008010) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) sendto$inet6(r0, &(0x7f0000000340)="3ea34a0d88305ad308f332fa69b2b9050c1e90181a0558c1c00a49f74a2745c66ea757311f20fb09d4161a888e1b18afe6cdb0f3bb0e704a0fa97fc095b72960d78eac80319353e765bdf8af355585cf73f03997aed3b642d38cca1277958d758ed3363e31aa871da9877839c4599b42ea61fde4a32bff4c43b30e462a91a44445035ee54b1ae1b13b17fe4710cd032deeb79ce85183fddb71deab0aa0374b57", 0xa0, 0x48000, &(0x7f0000000400)={0xa, 0x4e21, 0x4, @mcast1, 0x3}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xda, "7777ccfdfa21cf7132317236e3d2722550646f45d003afed6c3b50a83d986805200b04f8541caaf90f51aa83e03003bccddbb6d2e63f8ff174563966145b1beca35f46e61e2ac7adcfd48657505f6b1e25109205e15a409c71fce0f22d82485fb072766ebf78d1052617a9eaf90432c15de55e4745f138f3ad531183773b818668ec06b50fa40caf9dec4d2e053e124dcd5568720d34847d6fb7b1b64f99c84d53782f620495ec6a83e90890189857a287ed29ce009362c08319dd42155880c469d016f1c9e0606f05ea468e6df016983f67df919ca8428a3ba1"}, &(0x7f00000001c0)=0xe2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r5, 0xb5d}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd1341"], 0x1000f) 7m48.422146921s ago: executing program 1 (id=93): syz_emit_ethernet(0x87a2f, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) r2 = dup(r0) write$sysctl(r2, &(0x7f0000000400)='0\x00', 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001021, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m48.302102722s ago: executing program 1 (id=94): syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x42, 0x95, 0x33, 0x8, 0x1430, 0x6cdc, 0x85cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x7, 0x80, 0x5, "", [{{0x9, 0x4, 0xc6, 0x0, 0x1, 0xff, 0x5d, 0x1, 0x4, [], [{{0x9, 0x5, 0xa, 0xb, 0x3ff, 0x1c, 0x3, 0x6}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x4000, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x80}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0) 7m46.637286272s ago: executing program 1 (id=108): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x5, 0x0, &(0x7f0000000100)) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x1ff, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x81000, {0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r1, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000001c0)={'trans=xen,', {[{@version_u}, {@cachetag={'cachetag', 0x3d, '}-'}}, {@privport}, {@noxattr}, {@cachetag}, {@debug={'debug', 0x3d, 0xe6a1}}], [{@euid_eq={'euid', 0x3d, r1}}, {@flag='sync'}, {@fsname={'fsname', 0x3d, ']#['}}, {@seclabel}, {@dont_appraise}, {@permit_directio}, {@audit}, {@subj_user={'subj_user', 0x3d, 'Y-,//[\''}}]}}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') 7m45.612372865s ago: executing program 1 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098", 0x38}], 0x1}], 0x1, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) 7m44.483073823s ago: executing program 1 (id=122): socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f00000040c0), 0x7, 0x8000004, 0x0, 0x0, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x80, 0x0, 0x0, 0x1}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m44.282552364s ago: executing program 32 (id=122): socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f00000040c0), 0x7, 0x8000004, 0x0, 0x0, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x80, 0x0, 0x0, 0x1}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m57.27495343s ago: executing program 2 (id=730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x26) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="430325bd7000fcffffff0c00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x85) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2a10, r8}, 0x0) landlock_restrict_self(r7, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES8=r7, @ANYBLOB="0000000200000000280012000c000100766574689985af80f3a8639938c68a24b111c514f024a16936659ce297d2e8cf4c3915091a2ea5ebfa418ad6ea43df5f0b3c59b8f99be3ddf7814e464b33683d012a4d7a9781eef81c967c4570023edd07407b95a3b658d6bcc12908c65c69cf481517c6e15b9820ef03a1b640ec048ae960468b05d8c89fb02a34933130aaaba7b7c5d45d2e5f7c31e58f267445659b6c9a115107895ceee1b37dc1"], 0x48}}, 0x44051) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @empty, 0x4}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newqdisc={0x140, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xf554}]}}]}, 0x140}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 5m56.796830282s ago: executing program 2 (id=732): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01bf6200000c0000000c000000020000000000000000000004", @ANYRES64=r5, @ANYRES64=r4], 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r10, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x8, 0xfffffffffffffdef, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0x10}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}]}}]}, 0x48}}, 0x20044040) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="019989b7cc0c7e3f46a65301ec433e5b8c98b5be8f768ab9307b4e6f766eb86f4b1c3c0c26510a06cbc8f73e16f610bb68f58e64c9946ba8995e5898fe06b3450e775cb1c00bd19b0a0d9cbb0012c0eaa6b3da69c9597a4ac71b24ed36b1dc1c86ea973c4b1801f8cfb5e54870524ce63fe48bd0473f111069c0470bb1e5fdaa37b4d9b3d9f1326abf181eb589bc197fbfae86e4ef", 0x95}], 0x1}, 0x24044050) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001c800000000000001c00000000000000151abb925960510aadb911756b51722932d5eb7ca8d39416d0f6df3ee6212fc4666404e8fc58435dcb1d7effe25a6318ee84de34073c"]) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x3, r14, 'id0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r15, 0x3b86, &(0x7f0000000180)={0x18, r16, 0xfffffffffffffffd, 0x332e00000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 5m55.393852269s ago: executing program 2 (id=747): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003200)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2d, 0xb, 0x1010022, 0xa, 0x6, 0x101, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x2000c084) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f0000000240)='P', 0x0}, 0x20) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000300)) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x7, 0x0, 0x1, {0x9, @sliced={0x3, [0x3, 0x47, 0x8, 0xc800, 0x5, 0x2, 0x7, 0xffff, 0x7ff, 0x8000, 0x9, 0xa, 0x1b0, 0x0, 0x400, 0x2, 0x7, 0x8000, 0x8, 0x1, 0x2, 0x1, 0x4, 0x6, 0x6, 0x6, 0x6, 0x0, 0xd89, 0xfff, 0x80, 0xeb4, 0x40, 0x100, 0xa, 0xcf69, 0xee, 0x2, 0x3, 0x716, 0x9, 0x0, 0x100, 0xfdee, 0x5, 0x6, 0x0, 0x1ff], 0x8a}}, 0x81e2}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x4000002, {0x0, 0x0, 0x3}}, 0x79) sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 5m49.735776073s ago: executing program 2 (id=778): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x83) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 5m49.586639649s ago: executing program 2 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) (async) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x3218, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf250e0000000d000100c88d90a5"], 0x1c}, 0x1, 0x0, 0x0, 0x2000a010}, 0x20000010) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000100)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) (async, rerun: 64) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r12, 0x1, 0x70bf2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040000) 5m46.945026332s ago: executing program 2 (id=797): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000440)="8f", 0x1}], 0x1, 0x6) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000600)={{0x3, 0x200, 0x67f, 0x7}, 0x97, [0x80, 0xb077, 0xfffffffc, 0x5, 0x359da81b, 0x7f, 0x6, 0xfff, 0x9, 0x0, 0x2, 0xe83, 0x1, 0x56b8, 0x2, 0x4, 0x8, 0x9, 0x81, 0x0, 0x60c4fcea, 0x0, 0x4, 0x7, 0x4, 0x7ff, 0x1, 0x1, 0x7f, 0x8d7c, 0x40, 0xfffffff8, 0x3, 0x8, 0xfea2, 0x7f, 0x1, 0x1, 0x1000, 0x7f, 0x7fff, 0x100, 0xa90, 0x1551, 0x8, 0x34f9, 0x80000001, 0x4, 0x2, 0x2, 0x9, 0x0, 0x6, 0x7, 0x6, 0xea, 0x7, 0x401, 0x6, 0x101, 0xa24d, 0x1699d99e, 0x0, 0x1, 0x6, 0x6, 0xd8, 0x3, 0x7fffffff, 0xff, 0x9, 0x9, 0x1, 0x1, 0x853, 0x7562a8a0, 0x7b17, 0x0, 0xe0, 0x3, 0x6d08, 0x6, 0x7fff, 0x0, 0x5, 0x401, 0x0, 0x1, 0x10, 0x8000, 0x10000, 0x1, 0xfffffffa, 0x9, 0x7ff, 0xff, 0x40, 0xb466, 0x1, 0x262, 0x7, 0x4, 0x1, 0x3, 0xf, 0x3a53, 0xa, 0x84, 0x7ff, 0x2d64, 0x10, 0xfffffffa, 0x79, 0x4, 0x10001, 0x0, 0x1, 0x6, 0x0, 0x3, 0xb0, 0xffffff55, 0x1, 0x5, 0x5a89, 0xe411, 0xffffffff, 0x8001, 0x8, 0x101, 0x2f02, 0x4, 0x4, 0x40, 0x1, 0x5, 0x10000, 0xfffffff9, 0x7, 0x8, 0x9, 0x90aa, 0x2, 0x4, 0x0, 0x7fff, 0x6, 0x9, 0x8, 0x0, 0xf0b4, 0x2000, 0x7d4b, 0x8, 0xf, 0x40000000, 0x4, 0x6, 0xff, 0x4, 0x3, 0xe00, 0x5, 0x4, 0x2, 0x3, 0x4f1c, 0x3, 0x3, 0x7af81e43, 0x3, 0x45aa, 0x8, 0xff, 0xffffff81, 0x81, 0xf8, 0xd7f3, 0x101, 0xa7e9, 0x10, 0x9, 0x5898, 0xfffffffa, 0xfffff801, 0x1, 0x0, 0x6, 0x7, 0xfffffffa, 0x8, 0x8, 0x406839b0, 0x6, 0x101, 0x5a44, 0x9, 0x5, 0x4, 0x7, 0xfffffffa, 0x1, 0x7, 0xb2, 0x9cb, 0x6, 0x48, 0xc2af, 0xfffffffa, 0x5, 0x3, 0x7c7, 0x1, 0x659, 0xfffff39c, 0xd, 0x5, 0xfffffff9, 0x6, 0x4, 0x9, 0x4, 0x2, 0x1, 0x9, 0x8, 0x6, 0x3, 0x7fffffff, 0x9, 0x18000000, 0x8, 0x5, 0x8, 0x8, 0xffffffff, 0xffffffff, 0x9c, 0x5, 0x1000, 0xfffffffe, 0x7, 0x0, 0x8, 0x7, 0x2, 0x874, 0x9, 0x4, 0x0, 0x1, 0xfffffffc, 0xb2, 0x101, 0x9, 0x8, 0x0, 0x8, 0xfffffff0, 0x8, 0x891, 0x6855, 0x4, 0x4, 0x0, 0x8fa0, 0x93ec, 0x200, 0x8001, 0x6, 0x3, 0x7, 0xb, 0x9, 0x6, 0xc744, 0x8, 0xffff, 0x6, 0xffff8001, 0x10, 0x5, 0xbef, 0x4, 0x3ff, 0xff, 0x94, 0x9, 0x4, 0xfffffff8, 0x5, 0x4, 0x4, 0x7, 0x6, 0x9, 0x8, 0x2, 0x5, 0xfffffeed, 0x100, 0xae, 0x6, 0x7, 0xc9, 0x9, 0xff, 0x6, 0x3, 0x8, 0x80, 0x9, 0xfffffffc, 0xe0000, 0x3, 0x0, 0x7fff, 0x4, 0x80, 0xfffffff8, 0x496f59a7, 0x6, 0x2, 0x6, 0x81, 0x4, 0xff, 0xfffffff7, 0x8, 0xa8, 0x7, 0x8, 0xe1, 0x1000, 0xfffffff7, 0x4, 0x7f, 0xc67, 0x4000000, 0x961, 0x5, 0x3, 0x7, 0x400, 0x8c, 0x1d, 0x7, 0x26, 0x8, 0x2, 0x6, 0x2, 0xa, 0x3, 0x9, 0x3, 0xfffffff9, 0x4, 0xfffffffe, 0xb2, 0x3, 0xe5, 0x7, 0x1b, 0x5, 0x80, 0x8, 0x8, 0x9, 0xf06, 0x9, 0x80000001, 0xfffffff6, 0x4, 0x5, 0xb5b, 0xf88c, 0x7, 0x80000000, 0x6, 0x1, 0x108, 0x1, 0x4ba, 0x2, 0x3ff, 0x9, 0x6, 0x9, 0x793, 0x0, 0x4, 0x0, 0x9, 0x8, 0x8, 0x10001, 0x40, 0x3, 0x8, 0x2, 0x9c, 0x3, 0x6, 0x1ff, 0x0, 0x240, 0x9, 0x3, 0xfffffff7, 0x6, 0x8, 0xfffffffd, 0x10000, 0x80000001, 0x59f9aab5, 0x205e81d0, 0x0, 0x2, 0x2, 0x200, 0xd, 0x8, 0x5, 0x0, 0x2, 0x4, 0x9, 0x40a2, 0x6, 0x1, 0x67, 0x3, 0x200, 0x7, 0x3, 0x9, 0x7, 0x10000, 0x0, 0x401, 0x8, 0x101, 0x1000, 0x7, 0x7fe000, 0x2, 0x3a, 0xff, 0x3, 0x8, 0x2, 0x4aa, 0x7, 0x9, 0xf20b, 0x4, 0x2, 0x1, 0x31, 0x5, 0x401, 0x0, 0x807d, 0x1, 0x5, 0x3, 0x9, 0x7, 0xfffffff9, 0x7, 0x4e19, 0xfffffffd, 0x6, 0x1, 0x7, 0x10, 0x10000, 0x6, 0x10000, 0x1a, 0xf, 0x6e, 0x1ff, 0x1, 0x5, 0x10000, 0x6, 0xfffffff9, 0xfffffffb, 0x2, 0x1000, 0xfffffffc, 0x1, 0x81, 0x8, 0x36a, 0x3fd, 0x6, 0x0, 0x0, 0x6, 0x0, 0xbc, 0x7f, 0xd6c, 0x7, 0x4, 0x2, 0x4, 0x10001, 0x0, 0x7, 0xfffffff4, 0x9, 0x5, 0xc, 0x3, 0x8000, 0x6, 0x9, 0x10000, 0xff, 0x8001, 0xd, 0x1ff, 0x5, 0x5, 0x8, 0x8, 0x3, 0x400, 0xfffffd99, 0x6, 0x2, 0x80000001, 0x8, 0x1, 0x40, 0x8000, 0x8, 0x6, 0x400, 0x1, 0x2, 0x3, 0x200, 0x0, 0x8, 0x8, 0x800, 0x9, 0x4, 0x4, 0x5, 0xfffffff8, 0x46d3, 0x1ff, 0x3, 0x9, 0x4, 0x1ff, 0x5, 0x4, 0x0, 0x5, 0x4, 0xfffffa5e, 0x8, 0x2, 0x3ff, 0x80000000, 0x600, 0x6, 0xdf, 0x918, 0x10000, 0x1, 0x8, 0x80000001, 0x1, 0xd, 0x3, 0x1, 0x45, 0xb, 0x7, 0x3ff, 0x6, 0x3, 0x200, 0x7, 0x4, 0x8, 0x3, 0xfb, 0x3, 0x4, 0xa01d, 0x32ba, 0x7, 0x32c1, 0x8, 0x5, 0x10001, 0x5, 0x2, 0x5, 0x4, 0x1, 0xfffffe01, 0x200, 0x6, 0x8, 0xfffffff4, 0x0, 0x80000001, 0xd, 0x5e, 0x4, 0xfffffffc, 0x5, 0xf, 0x35, 0x1f, 0x5, 0xb, 0x88, 0x3, 0xfffffffa, 0x5, 0x0, 0x1, 0x9, 0x80, 0x6, 0x9, 0x0, 0x8001, 0x56d, 0x3, 0x8, 0x4, 0x1, 0x4, 0xfff, 0x4, 0x5, 0x2, 0x9, 0x9, 0x1, 0x5, 0x2, 0x6, 0xd7, 0xa7, 0x4, 0x5, 0x1, 0xfffffff7, 0x3d0, 0xffff48f6, 0xffffffff, 0x9, 0x5, 0xd70, 0x0, 0x3, 0x6bbb3d7d, 0x832d, 0x7fffffff, 0x5, 0x3, 0x1ff, 0xfff, 0x4, 0x1, 0x0, 0x401, 0x5, 0x2, 0x4, 0xc, 0x2, 0x9, 0x200, 0x8, 0x9, 0x3b7, 0x7, 0x6, 0x8, 0x3, 0x4, 0xc, 0x5, 0x200, 0x2657, 0x5, 0xcd5, 0x81, 0x6, 0xff, 0x43c80000, 0x6, 0x9, 0x8, 0xd, 0x8001, 0x7fffffff, 0xb, 0x7, 0x8, 0x8000, 0x7, 0xffff, 0xd8, 0x1, 0xb, 0x101, 0x7fffffff, 0xffff, 0x4, 0x9, 0x0, 0xffffffff, 0x9, 0x9, 0x5b3, 0x1ff, 0x0, 0x892, 0x5, 0x4, 0x100, 0xd, 0x9, 0x6, 0xf4, 0x7, 0x1000, 0x4, 0xfffffffe, 0x6, 0x8, 0xffff, 0xfffffffc, 0x7b54, 0x6, 0x7, 0x4, 0x0, 0x80000001, 0x2, 0x8000, 0x1, 0x8, 0xffffffff, 0x10001, 0x6, 0x4, 0x0, 0x7fff, 0x100, 0x3, 0x5, 0xc, 0xd000000, 0xb, 0x8, 0x10001, 0x9, 0xfffffeff, 0x10, 0x1, 0x7, 0x2, 0x3ff, 0x8, 0x3, 0x4, 0x8000, 0x6f, 0x1, 0x10, 0x5, 0x6, 0xfff, 0x7fff, 0x7, 0x7ff, 0x7fff, 0x80000001, 0x6, 0x800, 0x8, 0xfffffff7, 0x200, 0x5, 0x2, 0xffff, 0x8, 0x1, 0x7, 0x2, 0x3ff, 0x6, 0x6226, 0x9, 0x6, 0xe, 0x18628b46, 0xfff, 0x1, 0x6, 0x6, 0x2, 0x7fffffff, 0x81, 0x80, 0x6, 0x5, 0x1, 0xffffffff, 0x80000000, 0x3, 0x0, 0x2, 0x8000, 0xb, 0x3, 0x400, 0x5, 0x70, 0x10000, 0x5, 0x2, 0x8, 0x0, 0x55f, 0x5000000, 0x8, 0x0, 0x800, 0x0, 0x2, 0x6, 0x7, 0x7f, 0x0, 0x344, 0x3582ad11, 0x4, 0x4, 0x7, 0x10, 0x3, 0x7, 0x81e7, 0xffffffdc, 0x5, 0x0, 0x9, 0x3, 0xe7, 0x3, 0x4, 0xd, 0x9b, 0xfffffa79, 0x8000, 0x2, 0x1000, 0x7, 0x7, 0x5, 0x0, 0x6, 0x1, 0x3, 0x7, 0x4, 0x3, 0xec, 0x2, 0x1, 0x6, 0x40c, 0x8000, 0xe, 0xe9, 0x1, 0xd7e, 0xf, 0xffffffff, 0x2, 0x7, 0x4, 0xae, 0xe, 0x7, 0x40, 0x3, 0xffffffff, 0x2, 0x40000, 0x100, 0xfffffffa, 0x7fffffff, 0x4bc, 0x7, 0x7102, 0xfffffffe, 0x100, 0x9, 0xfffffffd, 0x284, 0x5, 0x5cc, 0x1, 0x0, 0x1, 0x7fff, 0x6417, 0x1, 0x3, 0x0, 0x4, 0x4, 0x40, 0x8, 0x0, 0x8, 0x4, 0x5f0, 0x7248, 0x137, 0x0, 0x5, 0x0, 0x548f, 0x2, 0x10000, 0x6, 0x81, 0x0, 0x4, 0x7fff, 0x3, 0x1, 0x0, 0xfffffffc, 0x49, 0x2, 0x6, 0x8, 0x6998, 0x2, 0x4, 0x1, 0x0, 0x1, 0x4, 0x6, 0x8, 0x7, 0x80, 0x9, 0x4, 0x563b, 0x1000, 0xffff396f, 0x7, 0xfff, 0xffff, 0x7ff, 0xffffff00, 0x7ff, 0x5, 0x6, 0x7, 0x400, 0x4, 0x1, 0x400, 0x400, 0x1ff, 0x7, 0x35e, 0x5573, 0xe42, 0x5, 0x80, 0x0, 0x5, 0x734, 0x5, 0x4, 0x3, 0xd, 0x6, 0xab9, 0x6, 0x7fffffff, 0x3a0b, 0xfe, 0x80, 0x8, 0x6, 0x9, 0x6, 0x800, 0x3, 0xb, 0x4, 0x3a, 0x400, 0x4, 0x800, 0x1, 0x5, 0x3, 0x1]}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0xa9, 0x6, 0x5, 0xff, 0x6, 0x4, 0xa, 0x0, 0x4, 0x0, 0x1, 0x3f, 0x9, 0xc9}, 0xe) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3ff, 0x0, 0xff6f}}}}}}}, 0x0) 5m46.742707323s ago: executing program 33 (id=797): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000440)="8f", 0x1}], 0x1, 0x6) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000600)={{0x3, 0x200, 0x67f, 0x7}, 0x97, [0x80, 0xb077, 0xfffffffc, 0x5, 0x359da81b, 0x7f, 0x6, 0xfff, 0x9, 0x0, 0x2, 0xe83, 0x1, 0x56b8, 0x2, 0x4, 0x8, 0x9, 0x81, 0x0, 0x60c4fcea, 0x0, 0x4, 0x7, 0x4, 0x7ff, 0x1, 0x1, 0x7f, 0x8d7c, 0x40, 0xfffffff8, 0x3, 0x8, 0xfea2, 0x7f, 0x1, 0x1, 0x1000, 0x7f, 0x7fff, 0x100, 0xa90, 0x1551, 0x8, 0x34f9, 0x80000001, 0x4, 0x2, 0x2, 0x9, 0x0, 0x6, 0x7, 0x6, 0xea, 0x7, 0x401, 0x6, 0x101, 0xa24d, 0x1699d99e, 0x0, 0x1, 0x6, 0x6, 0xd8, 0x3, 0x7fffffff, 0xff, 0x9, 0x9, 0x1, 0x1, 0x853, 0x7562a8a0, 0x7b17, 0x0, 0xe0, 0x3, 0x6d08, 0x6, 0x7fff, 0x0, 0x5, 0x401, 0x0, 0x1, 0x10, 0x8000, 0x10000, 0x1, 0xfffffffa, 0x9, 0x7ff, 0xff, 0x40, 0xb466, 0x1, 0x262, 0x7, 0x4, 0x1, 0x3, 0xf, 0x3a53, 0xa, 0x84, 0x7ff, 0x2d64, 0x10, 0xfffffffa, 0x79, 0x4, 0x10001, 0x0, 0x1, 0x6, 0x0, 0x3, 0xb0, 0xffffff55, 0x1, 0x5, 0x5a89, 0xe411, 0xffffffff, 0x8001, 0x8, 0x101, 0x2f02, 0x4, 0x4, 0x40, 0x1, 0x5, 0x10000, 0xfffffff9, 0x7, 0x8, 0x9, 0x90aa, 0x2, 0x4, 0x0, 0x7fff, 0x6, 0x9, 0x8, 0x0, 0xf0b4, 0x2000, 0x7d4b, 0x8, 0xf, 0x40000000, 0x4, 0x6, 0xff, 0x4, 0x3, 0xe00, 0x5, 0x4, 0x2, 0x3, 0x4f1c, 0x3, 0x3, 0x7af81e43, 0x3, 0x45aa, 0x8, 0xff, 0xffffff81, 0x81, 0xf8, 0xd7f3, 0x101, 0xa7e9, 0x10, 0x9, 0x5898, 0xfffffffa, 0xfffff801, 0x1, 0x0, 0x6, 0x7, 0xfffffffa, 0x8, 0x8, 0x406839b0, 0x6, 0x101, 0x5a44, 0x9, 0x5, 0x4, 0x7, 0xfffffffa, 0x1, 0x7, 0xb2, 0x9cb, 0x6, 0x48, 0xc2af, 0xfffffffa, 0x5, 0x3, 0x7c7, 0x1, 0x659, 0xfffff39c, 0xd, 0x5, 0xfffffff9, 0x6, 0x4, 0x9, 0x4, 0x2, 0x1, 0x9, 0x8, 0x6, 0x3, 0x7fffffff, 0x9, 0x18000000, 0x8, 0x5, 0x8, 0x8, 0xffffffff, 0xffffffff, 0x9c, 0x5, 0x1000, 0xfffffffe, 0x7, 0x0, 0x8, 0x7, 0x2, 0x874, 0x9, 0x4, 0x0, 0x1, 0xfffffffc, 0xb2, 0x101, 0x9, 0x8, 0x0, 0x8, 0xfffffff0, 0x8, 0x891, 0x6855, 0x4, 0x4, 0x0, 0x8fa0, 0x93ec, 0x200, 0x8001, 0x6, 0x3, 0x7, 0xb, 0x9, 0x6, 0xc744, 0x8, 0xffff, 0x6, 0xffff8001, 0x10, 0x5, 0xbef, 0x4, 0x3ff, 0xff, 0x94, 0x9, 0x4, 0xfffffff8, 0x5, 0x4, 0x4, 0x7, 0x6, 0x9, 0x8, 0x2, 0x5, 0xfffffeed, 0x100, 0xae, 0x6, 0x7, 0xc9, 0x9, 0xff, 0x6, 0x3, 0x8, 0x80, 0x9, 0xfffffffc, 0xe0000, 0x3, 0x0, 0x7fff, 0x4, 0x80, 0xfffffff8, 0x496f59a7, 0x6, 0x2, 0x6, 0x81, 0x4, 0xff, 0xfffffff7, 0x8, 0xa8, 0x7, 0x8, 0xe1, 0x1000, 0xfffffff7, 0x4, 0x7f, 0xc67, 0x4000000, 0x961, 0x5, 0x3, 0x7, 0x400, 0x8c, 0x1d, 0x7, 0x26, 0x8, 0x2, 0x6, 0x2, 0xa, 0x3, 0x9, 0x3, 0xfffffff9, 0x4, 0xfffffffe, 0xb2, 0x3, 0xe5, 0x7, 0x1b, 0x5, 0x80, 0x8, 0x8, 0x9, 0xf06, 0x9, 0x80000001, 0xfffffff6, 0x4, 0x5, 0xb5b, 0xf88c, 0x7, 0x80000000, 0x6, 0x1, 0x108, 0x1, 0x4ba, 0x2, 0x3ff, 0x9, 0x6, 0x9, 0x793, 0x0, 0x4, 0x0, 0x9, 0x8, 0x8, 0x10001, 0x40, 0x3, 0x8, 0x2, 0x9c, 0x3, 0x6, 0x1ff, 0x0, 0x240, 0x9, 0x3, 0xfffffff7, 0x6, 0x8, 0xfffffffd, 0x10000, 0x80000001, 0x59f9aab5, 0x205e81d0, 0x0, 0x2, 0x2, 0x200, 0xd, 0x8, 0x5, 0x0, 0x2, 0x4, 0x9, 0x40a2, 0x6, 0x1, 0x67, 0x3, 0x200, 0x7, 0x3, 0x9, 0x7, 0x10000, 0x0, 0x401, 0x8, 0x101, 0x1000, 0x7, 0x7fe000, 0x2, 0x3a, 0xff, 0x3, 0x8, 0x2, 0x4aa, 0x7, 0x9, 0xf20b, 0x4, 0x2, 0x1, 0x31, 0x5, 0x401, 0x0, 0x807d, 0x1, 0x5, 0x3, 0x9, 0x7, 0xfffffff9, 0x7, 0x4e19, 0xfffffffd, 0x6, 0x1, 0x7, 0x10, 0x10000, 0x6, 0x10000, 0x1a, 0xf, 0x6e, 0x1ff, 0x1, 0x5, 0x10000, 0x6, 0xfffffff9, 0xfffffffb, 0x2, 0x1000, 0xfffffffc, 0x1, 0x81, 0x8, 0x36a, 0x3fd, 0x6, 0x0, 0x0, 0x6, 0x0, 0xbc, 0x7f, 0xd6c, 0x7, 0x4, 0x2, 0x4, 0x10001, 0x0, 0x7, 0xfffffff4, 0x9, 0x5, 0xc, 0x3, 0x8000, 0x6, 0x9, 0x10000, 0xff, 0x8001, 0xd, 0x1ff, 0x5, 0x5, 0x8, 0x8, 0x3, 0x400, 0xfffffd99, 0x6, 0x2, 0x80000001, 0x8, 0x1, 0x40, 0x8000, 0x8, 0x6, 0x400, 0x1, 0x2, 0x3, 0x200, 0x0, 0x8, 0x8, 0x800, 0x9, 0x4, 0x4, 0x5, 0xfffffff8, 0x46d3, 0x1ff, 0x3, 0x9, 0x4, 0x1ff, 0x5, 0x4, 0x0, 0x5, 0x4, 0xfffffa5e, 0x8, 0x2, 0x3ff, 0x80000000, 0x600, 0x6, 0xdf, 0x918, 0x10000, 0x1, 0x8, 0x80000001, 0x1, 0xd, 0x3, 0x1, 0x45, 0xb, 0x7, 0x3ff, 0x6, 0x3, 0x200, 0x7, 0x4, 0x8, 0x3, 0xfb, 0x3, 0x4, 0xa01d, 0x32ba, 0x7, 0x32c1, 0x8, 0x5, 0x10001, 0x5, 0x2, 0x5, 0x4, 0x1, 0xfffffe01, 0x200, 0x6, 0x8, 0xfffffff4, 0x0, 0x80000001, 0xd, 0x5e, 0x4, 0xfffffffc, 0x5, 0xf, 0x35, 0x1f, 0x5, 0xb, 0x88, 0x3, 0xfffffffa, 0x5, 0x0, 0x1, 0x9, 0x80, 0x6, 0x9, 0x0, 0x8001, 0x56d, 0x3, 0x8, 0x4, 0x1, 0x4, 0xfff, 0x4, 0x5, 0x2, 0x9, 0x9, 0x1, 0x5, 0x2, 0x6, 0xd7, 0xa7, 0x4, 0x5, 0x1, 0xfffffff7, 0x3d0, 0xffff48f6, 0xffffffff, 0x9, 0x5, 0xd70, 0x0, 0x3, 0x6bbb3d7d, 0x832d, 0x7fffffff, 0x5, 0x3, 0x1ff, 0xfff, 0x4, 0x1, 0x0, 0x401, 0x5, 0x2, 0x4, 0xc, 0x2, 0x9, 0x200, 0x8, 0x9, 0x3b7, 0x7, 0x6, 0x8, 0x3, 0x4, 0xc, 0x5, 0x200, 0x2657, 0x5, 0xcd5, 0x81, 0x6, 0xff, 0x43c80000, 0x6, 0x9, 0x8, 0xd, 0x8001, 0x7fffffff, 0xb, 0x7, 0x8, 0x8000, 0x7, 0xffff, 0xd8, 0x1, 0xb, 0x101, 0x7fffffff, 0xffff, 0x4, 0x9, 0x0, 0xffffffff, 0x9, 0x9, 0x5b3, 0x1ff, 0x0, 0x892, 0x5, 0x4, 0x100, 0xd, 0x9, 0x6, 0xf4, 0x7, 0x1000, 0x4, 0xfffffffe, 0x6, 0x8, 0xffff, 0xfffffffc, 0x7b54, 0x6, 0x7, 0x4, 0x0, 0x80000001, 0x2, 0x8000, 0x1, 0x8, 0xffffffff, 0x10001, 0x6, 0x4, 0x0, 0x7fff, 0x100, 0x3, 0x5, 0xc, 0xd000000, 0xb, 0x8, 0x10001, 0x9, 0xfffffeff, 0x10, 0x1, 0x7, 0x2, 0x3ff, 0x8, 0x3, 0x4, 0x8000, 0x6f, 0x1, 0x10, 0x5, 0x6, 0xfff, 0x7fff, 0x7, 0x7ff, 0x7fff, 0x80000001, 0x6, 0x800, 0x8, 0xfffffff7, 0x200, 0x5, 0x2, 0xffff, 0x8, 0x1, 0x7, 0x2, 0x3ff, 0x6, 0x6226, 0x9, 0x6, 0xe, 0x18628b46, 0xfff, 0x1, 0x6, 0x6, 0x2, 0x7fffffff, 0x81, 0x80, 0x6, 0x5, 0x1, 0xffffffff, 0x80000000, 0x3, 0x0, 0x2, 0x8000, 0xb, 0x3, 0x400, 0x5, 0x70, 0x10000, 0x5, 0x2, 0x8, 0x0, 0x55f, 0x5000000, 0x8, 0x0, 0x800, 0x0, 0x2, 0x6, 0x7, 0x7f, 0x0, 0x344, 0x3582ad11, 0x4, 0x4, 0x7, 0x10, 0x3, 0x7, 0x81e7, 0xffffffdc, 0x5, 0x0, 0x9, 0x3, 0xe7, 0x3, 0x4, 0xd, 0x9b, 0xfffffa79, 0x8000, 0x2, 0x1000, 0x7, 0x7, 0x5, 0x0, 0x6, 0x1, 0x3, 0x7, 0x4, 0x3, 0xec, 0x2, 0x1, 0x6, 0x40c, 0x8000, 0xe, 0xe9, 0x1, 0xd7e, 0xf, 0xffffffff, 0x2, 0x7, 0x4, 0xae, 0xe, 0x7, 0x40, 0x3, 0xffffffff, 0x2, 0x40000, 0x100, 0xfffffffa, 0x7fffffff, 0x4bc, 0x7, 0x7102, 0xfffffffe, 0x100, 0x9, 0xfffffffd, 0x284, 0x5, 0x5cc, 0x1, 0x0, 0x1, 0x7fff, 0x6417, 0x1, 0x3, 0x0, 0x4, 0x4, 0x40, 0x8, 0x0, 0x8, 0x4, 0x5f0, 0x7248, 0x137, 0x0, 0x5, 0x0, 0x548f, 0x2, 0x10000, 0x6, 0x81, 0x0, 0x4, 0x7fff, 0x3, 0x1, 0x0, 0xfffffffc, 0x49, 0x2, 0x6, 0x8, 0x6998, 0x2, 0x4, 0x1, 0x0, 0x1, 0x4, 0x6, 0x8, 0x7, 0x80, 0x9, 0x4, 0x563b, 0x1000, 0xffff396f, 0x7, 0xfff, 0xffff, 0x7ff, 0xffffff00, 0x7ff, 0x5, 0x6, 0x7, 0x400, 0x4, 0x1, 0x400, 0x400, 0x1ff, 0x7, 0x35e, 0x5573, 0xe42, 0x5, 0x80, 0x0, 0x5, 0x734, 0x5, 0x4, 0x3, 0xd, 0x6, 0xab9, 0x6, 0x7fffffff, 0x3a0b, 0xfe, 0x80, 0x8, 0x6, 0x9, 0x6, 0x800, 0x3, 0xb, 0x4, 0x3a, 0x400, 0x4, 0x800, 0x1, 0x5, 0x3, 0x1]}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0xa9, 0x6, 0x5, 0xff, 0x6, 0x4, 0xa, 0x0, 0x4, 0x0, 0x1, 0x3f, 0x9, 0xc9}, 0xe) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3ff, 0x0, 0xff6f}}}}}}}, 0x0) 3.67905765s ago: executing program 3 (id=3007): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x237c, &(0x7f0000001580)={[{0x62, 0x4e00, "fe149afd031cd51151e7550840d354b9574bb0573f85038367c13f5b48c4529e378bf71f89bd3cd32aefb7221652501538218ce1ab7476854605f7627cdc61a1657456870fab6e79a9dd03b04e410fb24b2af196510647e611b45e710848e1123240"}, {0x1000, 0x4e00, "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"}, {0xa4, 0x4e00, "1a371c0c60542ccac592117c13ffb6fc7820544a49ce233d82e4c4d24b96a88759c82810c344ab4485839b2c838ef15a1c9b20fe5c84a312f720852799cd96d1b80af38e3a6b4e1434a3c028e35af1824fcaf5a5e93ca836305aaecec9dd629b49931e61733731a208ff7c198a8d3ef6ddec8041f2f365d8392c7aedb307f9316130fa5367a64ab02b25fffd633fd2d167815f07b6af0da9d63cf905dc2d97af897faa33"}, {0x5f, 0x4e00, "4552a653d0bdf80201f084e818f81b5b15a3fa491631cfcee6a0d06e0718847093ae6094e33a9750021e867ecd2e351f5df2762bfc842771152e16d9bf3028cccac326cfa5256aa2dadb76bd9c6eefa9359b9f03fa57174efc80b003df2188"}, {0x45, 0x4e00, "73a101c17eadb73ca16d5205131c9d9cd4e91e7b87c74c8b6c4fdc07ddc1ff975000fa7583811f8a9b2d2387fd9c4caf6e2d3500f0db70c838d2cae59b7db55d9e66417891"}, {0xcd, 0x4e00, "2a360c67da82eedab186b46a56b1c58657f1aa06224e6a819172a0fe3a089fc047f31b8ed07817f424ff252d6d57660eb04f56e43344ce6656324fb592356a43d93f152cd182385cd5e496b90f480f99ac7a8eb6bac5d443a66bb9a97e5d1c200704cd8cfb8ecdd7cb3f4d157c357976c6d04d77379167d737e34f8482b28e5ad9639e9af030ba993db110a39c566025635cca696f41c9bedbbd672232fda4ab8eb4512d524a6a99826488f09b2adec9a937fee01d523064d403f59230c9d0af99746f07ed25541eaa6b198a01"}, {0x1000, 0x4e00, "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"}, {0xb4, 0x4e00, "5b658c71b85f50a4717d1179fcc43bc9a17b3b4741e63c4a28657f371a605d667442b35bcc9bdf6d6f90d6443ac765435bbbad370cd42e9fc01091ada73c99f1b88ea8d51a0f1c401018b10871d7904868128a30d7db350047624b2e1a12e7caf897543b16b6ad663629aa2077826ad4d315d8fdba529e2ab75706f6f63a06244c6603810792955f323cbba4401ce8cde3adf4a0b46a213c02728503c9be759b040c498d23a3b40143aa60d8275b8cc0728fa126"}, {0x23, 0x4e00, "cfc4e72429dbcc214ac99e1fe8350efedf03945a41b1f8beb53582a5bca731192943b4"}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x5, @loopback, 0x39}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="65154ce4735f5290a4916b7f4a707e66010737ddc26d130ef5d79f2d21eeae", 0x1f}, {&(0x7f00000002c0)="2fd0fe606100ad3a04c075ccc1d9a156aced494a5f7e7c2acc625d0fd62fd2c249845d4d8321dd80b0b1bf616c78ca56ccf190ae0c0cf0fa4fc90c3ecc54f0479a7f6469f50e0c616bb85595798ff07554dda4a17b2edcf346decd154e7705ef0fdb9afe989f22b20acac254ce81d3d129d9b4cdaa0d36ff8cea4e6f0a1259414ae13e28048bcbabddfc5c2c3443d08d466f6874ef67e41fc4b849a1f3354810c28517632a2ae9db403763db63d1ad4b64f0f354c1c203de1c27887a56", 0xbd}], 0x2, &(0x7f00000003c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts={{0xb8, 0x29, 0x36, {0x5c, 0x13, '\x00', [@ra={0x5, 0x2, 0x6}, @generic={0xb, 0x8b, "31e962885b06b85e547e770daa5538d4d2002687de58ace574842542f6194fe2f7b663c4a7e48ac2c0319fb084712c2e9cff1360e2ab538f6cd4ceee243d12587c53b179b445b7cd7c6db525f3ab7e5a6b4603909c2e6fb130b2fbefce7c4afc5d22aba5a53bc67d9f3757acb8c9b30e2fa69280ed14e4bbcc72c6965f2210bce5b2e4252b07aa3550be7b"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x8, 0x5, "4aff109f72"}, @pad1]}}}], 0xd0}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, 0x0, &(0x7f0000001540)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) syz_usb_connect$uac1(0x0, 0x113, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x40, 0x81, 0x5, 0x40, 0x8}, 0xac, &(0x7f00000006c0)={0x5, 0xf, 0xac, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb, 0xf7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x93, 0x1, 0x8, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0xd7a666e5a71746e, 0x42, 0x2, 0x7, 0xc8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9c, 0x7, 0x7}, @generic={0x7a, 0x10, 0x1, "7f7ea3c8015310942a3a9e86cafc08a72c87e421365b25abbf7fbba2a1ac5926f38a4ed9b4d1d65eebd317b7229a0f5531a2828869cccdf2c49e733487e4121938a53a4e801bfcde2666a6decd366b23120acc13869ab1b7d8cfeea368bf6fb7172263229025acfc7ec06cc578aa13815c0a4c41d818af"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x415}}, {0x86, &(0x7f00000007c0)=@string={0x86, 0x3, "49bc67a06b2c70d51836c0bd817be0cd09add914e20baaba01dfc1521fddc7c23b1a40d66585481043cda01a49f7a1e56e442fc54c0fc0c509b7651bb315324fa634bd42e3222127770402c2d5fdfc140fa584425939689c30bcc1bbd710a7840ee3b8a22dc8b4bcb9b5d49e93a70f465c4b5b55ba2062e500"/132}}, {0x9c, &(0x7f0000000c00)=@string={0x9c, 0x3, "60f13a7b548fe2a521e5bde5e125ba1c7ce0c40706c10562018fca1d21b691d3458c8567762809ded33a61b30221d4a68d052e2d164c1dcc13c1942012f4308f798d94df06334f4130631a4f3abdd38192dc6a60a7baac613d65b1c33e783829ba775fda88e73c1ecbad2d4515f4e7b25318b70f4606eac53bc54fb23280088119fff3f9916f67b382413eb0055710ffe466fecf72525ab506de"}}, {0x7d, &(0x7f0000000940)=ANY=[@ANYBLOB="7d03c40a3d84537eb7e14b2dbd0316927983d91eb2fb7eddf660a52268453627a6fe11dac9032875851becf0467a25a5128848e281a182f162847c316bc9a7f6b2615edf655c3b650c722f9013ff58f019455540fb6e5417a522505e8f15c8779a8ecd2659e27c3f61bf08004c1b1aa2177a0e52cecc5e44b540b706f7"]}, {0xe5, &(0x7f00000009c0)=ANY=[@ANYBLOB="e5030f2cc4af3414f277eea25547c1ace92eb4c3b56ee5955e2e6bcc0486ff8b883513d0f605b9e284a363ecd63f4702a7977142610d1283ce35a251c58d54eec087d0893909f145c8f00787e925307fe119e582e06bea29619c0df42a99015dcd1681c1a84a5a92cf6fb6922e89ed266608ec9433389834e0ef83b06067a456e424466a0778089c86d9f467beb64cdea8fe4f33c155a6b7a04707f7393bc48257f22eeda00e06ca1fcf795572086750093dec5a2d108dd78dcfd75490b1a7957b2bbe089f031c63bf6c3256464dd452b1d5c06a712c1e77804c4995155b0f9bbdba609e37"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x449}}]}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ptrace(0x10, r6) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "2584475a", {0x1, 0x7f, 0x7, 0x8, 0x3}}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r6, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/128, 0x80}) syz_open_procfs(r6, &(0x7f0000000180)='schedstat\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb000008000300000000000a0001"], 0x5c}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "26a13496", {0x3, 0x1, 0x0, 0x3, 0xf7fb, 0x3, 0x9}}) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000080)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0x9, 0x2}, @const={0x1da4, {0x6, 0xc000, 0x5, 0x4}}}) 3.089874103s ago: executing program 5 (id=3018): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000005c0), 0x0, 0x73, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), 0x0, 0x0, 0xba, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = dup3(r0, r0, 0x80000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r3, 0x0, 0xe, 0x1000f1) sendfile(r3, r3, 0x0, 0x800000a1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000c000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000182a0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0xa, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x6e, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r3], 0x0, 0x10, 0xbd}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e20, @remote}, 0x2, 0x9800, 0xfffffffd, 0x1}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000180)=0x3842) 3.008248448s ago: executing program 5 (id=3022): r0 = socket(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) accept4$netrom(r0, 0x0, 0x0, 0x80000) 2.919455629s ago: executing program 5 (id=3026): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036546e6c00002c000280140003002001000000ff863c0e03092f21ef000114000200fc02000000000000000000e9ff000000"], 0x5c}}, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x7, 0x8a, 0x67a7, 0x1, 0x3, 0x7}) 2.669618413s ago: executing program 5 (id=3028): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0xe00, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 2.609956529s ago: executing program 5 (id=3031): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000005c0), 0x0, 0x73, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), 0x0, 0x0, 0xba, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = dup3(r0, r0, 0x80000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r3, 0x0, 0xe, 0x1000f1) sendfile(r3, r3, 0x0, 0x800000a1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000c000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000182a0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0xa, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x6e, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r3], 0x0, 0x10, 0xbd}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e20, @remote}, 0x2, 0x9800, 0xfffffffd, 0x1}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000180)=0x3842) 2.529888271s ago: executing program 5 (id=3034): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) getgroups(0x9, &(0x7f0000000140)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1100009, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@nodevmap}, {@access_any}, {@cache_none}, {@uname={'uname', 0x3d, '\x00'}}, {@cache_readahead}, {@noxattr}], [{@dont_measure}]}}) syz_usb_connect(0x3, 0x4f3, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x62, 0x9f, 0x5a, 0xff, 0x4e8, 0x6630, 0x1979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e1, 0x3, 0x1, 0x80, 0x0, 0x9, "", [{{0x9, 0x4, 0xbe, 0xf2, 0xd, 0x27, 0x49, 0xb2, 0x5, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x69, 0x5, 0x8, [@generic={0x3c, 0xd, "8f9e7ea6bc3956555903bc2473cef77488c8cc2bbea583cf4ccccb18864156dbc3b0eb15e37aac2e402abc5fe55d699624f3f2a0e3fa74da3632"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x7, 0x7, 0x40}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x80, 0xfe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc0, 0xa7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x1f301b3ee1392a02, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1000}]}}, {{0x9, 0x5, 0x8d, 0x10, 0x8, 0x2, 0x77, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x14}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x433c}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0x5, 0xfa, [@generic={0x5d, 0x4, "ab204092168267962c844c0b5b73f2a532eefc85cf3ca8e6801512eb49852cb73d7be9f612ca83cf7268c6f8f86cc9ecdd060f97cbb0260d27a5aa971971c2609bf75b357a741812a5c7ddb5c131c527b936c5083840240c5d8093"}, @generic={0x67, 0x24, "71faea452b578d0f6968138da47ce8faf5b8b7db2f5f1c8a62d95bd897b6efe4a3be5e5bacd4bf091032bcfebfe8643b5665c2c278f1c0db99f7b18fdd7462cc6e379c8752439b932849ad8c0a0d6dcce1744b5f67873f814b140f14da9bac064f5707df71"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0x1, 0x7, [@generic={0x4e, 0x8, "85ff15e165cf223580eecdffa9bec512e14597bbcabd923318bbb92ff50a3c872c25ca03f3c795c948ff36aa21f89d331d6e49e13daaee09fc030946027d54215e932353dcdb7219f82d07c3"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x4, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3ff}, @generic={0xe8, 0x30, "7d87730cbbc1fa9c525e2e24785f7c9564ae7e6fe23f7aaa5f5bcfc74015843a292db8f6847b356be97a7f1790e565dd01911c91ca3bb3d5a7d5f7bc5508e7fa43aa6f74b09b4cca98cddf8c0aece46457742e019e4ae91dc0ff4b2f59473e3766d97ce9009d26331d7dd4b19244e7f5386722140829d8e5e51ad674d79de6e4119a96cae39e16f8fb84f8740487cae47e6f0f7dd50a98e944a2f0a8e2988939192372f5c1e1b14b4940c4b744e13160829027d334221dfb6be2fae0335691fa7d16388ee791696659461a8cce3da19922038fee68c31d6856f63a0f87dca7d5300d59b8d74d"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x2, 0x6, 0x0, [@generic={0x1c, 0x30, "2e141dfee5ae4657e54d6b05288be77a596dc5ef288689bd0959"}, @generic={0x69, 0x22, "0441b52d97dff10b6db8b5405d251f408850d00a713b8124e5321d6822de4df15ddf6c8e7791b5a45ab9dcf2dad90235f319ae68cc5f4c2ce6dccda906a723d8a708f1fd2e1c0998db45ad71e53c2eaf90b0512d4c308ecce4d6801b98c17e128803b51148b07f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}, @generic={0xa4, 0x5, "b07d5fdd620a252f57b86bf89acc6786690750b662cca348eb279937e4f5be8af99e5724f5e3cd4cef891ac7c9237669810b144aeccd6bbc6905fa5bdf1726f9d82e5f8dd0ad391e7cb9b884c9bccc169a779df775179b52060cd97a382a4777418314821cdb42194242bbd8a1a5919d3a9e7213c017757f19856e32faa66172d977ede0d14c7bb48bddde72602f3413cd1b4d06380c8855510bfe05c2601bb47945"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x40, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x77, 0xc1, 0x7, 0x76, 0x23, 0x29, 0x6, [], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x3d7, 0x3, 0x1, 0x3, [@generic={0x34, 0x6, "4147cdd87c568608ac8dbd8b0527b4ca4cd80131ae9d1cec96212e143943f543105a6d0303cb18facff012b14d367df4beb7"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x0, 0xc, 0x0, [@generic={0x17, 0xb, "4e54a96292915fb447d32f9c7921529517fec6c55d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xd, 0xaf, 0x4c}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0xfffd}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7f, 0x6f, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x2, 0xb1, 0x76, 0xbc, 0x5, [], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0xc4, 0x8a, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfb, 0x10}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x10, 0xe, 0xf3}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0xf3, 0x9, 0x6, 0x40, 0x80}, 0x53, &(0x7f0000000780)={0x5, 0xf, 0x53, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "82a4fa3a486b9e70252a6146cdf79562"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x0, 0x5646}, @generic={0x1c, 0x10, 0x0, "42e441603773f63117f6d086d04a0322ae63c9e54e134e419f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x8, 0x7, 0xfff9, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x0, 0x0, 0x9}]}, 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x430}}, {0xf3, &(0x7f0000000880)=@string={0xf3, 0x3, "d687d894b8aaf92e16af5f7da026447e8b47afb677b01f97f8a63d2e973edbe31878c67d1a4fea713357e3fa4ed1868d2a702a26890da0a75c4068991c4fe6003601cefb752153df8dca651e1f62a30008603afa1e8c6dee69f06b0ad96921ee46622940ff91d224cf72c2eafedbab3f3f9e82d7486223c3739af318113eed5d5e7f5cd40cce1aaeb7947f3cfecba658b0ba3a8d7fca9f00a63b4b15c685b948f38a9804783883ee265d9686eb7f5ee2a4cd8477b882a7d3b922ff8ccfe37429fb69e76da5e11add5e8904c42c8e4665d604ba7dc3bc0e2a866b4bf8275257b5f45509d1b299ef441d5ccca96fc960e140"}}, {0xb0, &(0x7f0000000980)=@string={0xb0, 0x3, "6db5dbf498a33a33940549ca9dc5f20cacfbbbca9c7528c2a6250602fdc13a97757332a8a6f0ab7ff43cc516dd5f433e22479f8b65e95b67c42d10d9bc5f9914e951ee4df2cebca2f2f9f2bea485aa0e000b65d7791fd7eaf907845d8d0e5efa82483fb4f64e21561f13336851e16d27c7882770d3df9ae47f6906265f8c944f9514cf87cb4f60319819659b0f95a8ffacb2ddd63a4d405af0acd71d08551882f2442670d34966b04162dac1ea54"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x801}}]}) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) (async) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 1.81037151s ago: executing program 0 (id=3041): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 1.809228466s ago: executing program 0 (id=3042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000005c0), 0x0, 0x73, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), 0x0, 0x0, 0xba, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = dup3(r0, r0, 0x80000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r3, 0x0, 0xe, 0x1000f1) sendfile(r3, r3, 0x0, 0x800000a1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000c000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000182a0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0xa, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x6e, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r3], 0x0, 0x10, 0xbd}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e20, @remote}, 0x2, 0x9800, 0xfffffffd, 0x1}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000180)=0x3842) 1.710105488s ago: executing program 0 (id=3043): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x100000, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) (async) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="070006000000010000000200000000018006000100"], 0x28}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xbeffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffbffffc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x49}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x4048840) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r10, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x8001, 0x4) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x40025b0c, &(0x7f0000000040)) (async) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) (async) dup(0xffffffffffffffff) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x100}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x74b91bf7abe2d3e1}, 0xc850) 1.269933349s ago: executing program 4 (id=3045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)={0x34, r7, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x34}}, 0x8040) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 1.123416031s ago: executing program 4 (id=3046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20008084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x40088c6) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) write$selinux_context(r5, &(0x7f00000000c0)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) bind(0xffffffffffffffff, &(0x7f00000003c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x80) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x39, 0x1a, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r7, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0xc802) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) listen(r8, 0x3) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x600e00, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r9, 0x40285107) 1.069014768s ago: executing program 4 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRESDEC], 0x44}}, 0x22000800) r3 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$alg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000a00), 0x0, 0x20040850}, 0x4000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="01000000010040", 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x12, r11, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x609, 0x8c, 0x0, &(0x7f0000000540)="7e7a73148787c0912f9e59e8f92d543a89e42b77e00510cd050051c4a349613b1b0300000000000000842f6f0ad8ffff10cd5b4ffa62281dcf72e49c825ea26aa345b625f9562aae02778b0cd7cbe21b97a39b6ff39f0c94c4ffc976ffff000438e4b29ce19708bfab6c75d9183898815f0000000000000009a98da730202437c0bd54f184b9b25ddf36dc9b1006493f04304424", 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0}, 0x50) r12 = getpgid(0x0) fcntl$lock(r2, 0x5, &(0x7f00000009c0)={0x2, 0x0, 0x3, 0x9, r12}) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0xffaf) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c00028008000240000000081400000011000188e2000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.06868013s ago: executing program 0 (id=3048): syz_clone(0x420011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003cd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xfc40d000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000300)={0x10, 0x80000}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x703981, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 960.099643ms ago: executing program 0 (id=3049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0xa4000970) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x3, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x6, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r4, &(0x7f00000020c0)={0xa, 0x4e24, 0x8000, @remote, 0xe}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 959.845818ms ago: executing program 4 (id=3050): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4622, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 678.603256ms ago: executing program 0 (id=3051): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f047b931904"], 0x7) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4811}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 678.143059ms ago: executing program 3 (id=3052): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f0000001180)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24040040) 609.473615ms ago: executing program 3 (id=3053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x1770, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 500.351981ms ago: executing program 3 (id=3054): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, 0x0, &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 498.124758ms ago: executing program 3 (id=3055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ip6_vti0\x00', 0x7f}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 319.668835ms ago: executing program 3 (id=3056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2f, &(0x7f0000000040)=0x79b, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) r7 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) writev(r2, &(0x7f00000024c0)=[{&(0x7f00000002c0)="e34dd7f285681c5dd1b406b24aeae44a85ef5a75beb771b0dba1b7660dd44ebacf3b01cce75d6eae00b33afad66e04581c18071815b2240cc3f661d38a2d2207607ff21807c65ec718d97f32b6901d90f5eb1de0d1580c31f6944b0d280a57cf70be5e7d624d20109230f07d21f77b5816a68f36e609dae5939e750dd0de157ce1e8c6aa0028fafc9e502e6d253233a17aa0d4e7", 0x94}, {&(0x7f0000000380)="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", 0x515}], 0x2) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @broadcast, @rand_addr=0x64010100, @empty, @broadcast}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 59.234079ms ago: executing program 4 (id=3057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5ffd3c02079f56f6356a18bf85453b833446e13ff964ec5fd9b2fe55f66c69896735976ada2ec0f18d53e9cc47210e96fba30640af7f4ece111399b4dd1d9c7ca24e2eb94f0af2507e183c180e069da6448b14f62ee4b38575e66b3d3945616896d4a014352f523219f6e31c13b3912a0abcfd7ba8b41172a749300eea453ca982ac6213f58df1d390ffee850923e49f037ed875bd1a6a82dd675dfdb3f0eeb93b9c8add7047335375398b2d1b34bd0f65584a6fb28a0121d373758025459be2b05a85a9864abe1b2bcd8bbcae6b5a1a1d082757da551872817c044981e3e4250aaa9bea066def4a6897c690897a70f368dbad8bba46fd7132356203a9493beed9b34f550a5c0d0871c7e21d1039b28e48949ff626b100141fc0d219c5aee10e2f834dac282f8fea2f1b3012246b07b29d7529e832d4dd4faa3affa2907b9032d937eb7c150a46d23bab1f6af212c9e4edb17f8b38eb1cbca8fad2e37cbe2577c1fc4f830c00baf6aba40c100612089b7e7279f964bc74b9df39af60fb0f235ce402d41425af9e013b4338ae31e50b9978d7a5fd0d774bf3ea47293b79750753b660cf07495c0f4d507f02c0dde932667820e0c603339198b528cadee3a8f1180679162e74eb93c6896d6146999a007798a7a732781ad235bae95ba3f923ce800dfcd5f644177e7502341048fcfe113f989fe84b272bb62ff1bc2fadce02732511617d2998e61fe776a94e623c85914c40638416603d224281802fe117dae3a2ffce0a6411f339690cc244fd9c750be575d24e6d6e52138d2e64fec68044dbd07d043e732e99af4e848c5ea37fa48f63e412ce02ac94dd35f9e7a293945bdf28e22ab4872b8ee15126c0b95828b8415abea33c49e8f85f94a9aaf9037d709b70d116dc542825ad020dc905f6820aa61effeb428393747db015d5f815cccd62ade7a691f508ffc7c90c275f3841171b4bdfca57feecfde28434bbbc3c063f52c83a193516f55665aa8e9844de9274d2fbd403f5bee3855e3b10ba7c4b8cd5448323fbbb9cc069ed6234a86e64c6dec2d1fee6719211af9a5cdc6032c438eab74cdc227d58935a7f2b697ce94be28b11d87e5cd12fb49a08f25aec2973a7d86741a6c60c0a611f594d100d3ddd4d72f401aa2625e5b92965bbe5100cc6e0809b159010bc54da5e9c7b24f5f48740f03844ac2a8ff9b92c0be283e78f07edbb9369173368d95eb99d4ffcdb05b3cc46ea28bd8120da392ba20111f9da7f060ac771dd0b50657878e28fb0dabc1e6e842238e5fbff0f290675573c0c6b9672123c8055eb68588ed947b95b343fea2896b24f5f6732c9e024bb70c4df0adcf6668edd482e4e63fea7f38e2840ccc34e0fdbd13ab41299d2691045e33df940eeb5d1b7fda8171b6d81879a7f4869ae31976ebc5ac9f8c8140c5cd8aa5ee3e8dacd327931ceeebaef20fdeadcdf2110ae6a50306dbde8808c24f23454335accf3d3a41751948b461b48609260bc32c20ea84f00e94df98524335413376bb036001bf202fd801d69fd389f68f0f65908c5f2c033b4785ce480918d8d3854a3c289b3164aa6295428dfd913828bd249cc8d7e07d3cd9c4ac91680fc1fcf2cbc1c8db0e8e9f6c7e632ce7294afc356f676f512f03c442c78bfb78b0511f3aea03c624a55a03d246e2da9d954f9e49ab0eb3a0276219324ed14ed6c0f40a0fdc7d44508bf957913ef5d57c275e2307e37339538c14d818478365c5e3b9c3822434933ea7face717093bbf806b1d0fe9347b4a94d3d0a3402caa8feb319c6f775d357c93455662ebbe00c8dcd669ff0a9625fff619114389cddbb7d2a431a5981b274f00338b49a3d3ded7f2ce81cd9912ed40c6cf791b46536ecb7984704cdc08be98522b72fba4eab9ee129689bca6d07614c3ecf1e96e122e1997957cc822ba91f37c3f9c5632d1f03effbdf609219f854e9a8c95a6775909c2e8cc6e6eb545f0a4f5bfad9ad9a7abe86fce0d2c0c090a8f82b1930f1bada05b332e7ac0cf1cd7f69027804d0181531d53072906e835e02d9b8e01cacc1d2859b4bcd8e074a29da6cd6b8d54fbfd4cce8abb0c1ca6b1941b30307c169aee2888fac486db0afe3e3d5caa9f58d1e9f0ae3eeeeb77f540b2ce562365a8e626324134d7a82a7a7fa78d871429bc0b99ba84d7a48dd1af6186cc2ee2a4bd94b49f25844c9a480ae78d8c8ed4614091eccc82ab60cd71715c6a372ad16d405c3ca647e738b1bec7d900a3117dcd223361c1f0531303b8b58a3955060e853cf46dffc64bea41e8a08eab44473c1ec0d728024e1681715bea3269fc44adac593eb35e143134112a64ed9359f3b2dd2a31bd7452227a2c2aa1785399f3f5a8fb935ecbdf3d830678dc4309258184af142d85aad8fa9c1e7019d8e1c9b6c4dcf8a9e501e5aae13f7eaaabbf9444e5342b1ff5fd016d3648aa2941301bada1392a9fc514cdcba98b38d9c33e4504192644fdccbc9b1da988dcd280f3502e98eecbd190a07cb44fe29a1731a3fd23f6608a1614cf0b962dbc43db65baa904a8a74eaa2086269417448b9983a78e8bc45cb7adf20c619a667c18803d7cc64ddc55e6b8c8482bbe4899f0b5ba9054b6d7b9854997fb26b305479bf342249477e2210e4edef1ac21ef827b16eb06cc9a5c7171faf536db9cb4e94c7fc58ea15e587fa78db3e0d4f347270a761181692fcff64f2d1d8a51e3b201ab3c522e59286ccd247d9f89eed692c609326010a5c466f14de54d4ddd76c73fac485358cc11736d1d265b9e416d7664402babcb5e08531a0eca992401a3a1eb611d2ff95a20d98bac8428b7e5cddca5fdf01ae525db5a3b12d14aad849cd8d69842e352c0f7982942f19d27f0c9976a57f9a9778478aee6ef4c25adf484de56cad0f75f3e8b25c12da73e6e84c86f0d30e6780b871592fda3"}, 0xc31) 0s ago: executing program 4 (id=3058): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) (fail_nth: 25) kernel console output (not intermixed with test programs): hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.829775][ T6042] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.837186][ T6042] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.843989][ T6042] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.848552][ T6042] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.851830][ T6042] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 467.889911][ T6042] hid-generic 0006:0004:0009.0018: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 467.957824][T13394] fido_id[13394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 468.959322][ T40] audit: type=1400 audit(1776783740.738:971): avc: denied { accept } for pid=13406 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 469.357701][ T6037] hid-generic 0006:0004:0009.0019: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 469.523717][T13428] fido_id[13428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 470.169696][T13441] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2211'. [ 471.018129][T13457] devpts: Bad value for 'max' [ 471.678214][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2231'. [ 471.784603][T13481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2232'. [ 471.998865][T13486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2234'. [ 472.409202][ T6042] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 472.621367][ T6042] usb 8-1: Using ep0 maxpacket: 16 [ 472.625882][ T6042] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 472.637982][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.644541][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.651278][ T6042] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 472.657897][ T6042] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 472.667340][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.681723][ T6042] usb 8-1: config 0 descriptor?? [ 472.705438][T13512] FAULT_INJECTION: forcing a failure. [ 472.705438][T13512] name failslab, interval 1, probability 0, space 0, times 0 [ 472.713040][T13512] CPU: 2 UID: 0 PID: 13512 Comm: syz.5.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.713076][T13512] Tainted: [L]=SOFTLOCKUP [ 472.713084][T13512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.713098][T13512] Call Trace: [ 472.713107][T13512] [ 472.713116][T13512] dump_stack_lvl+0x100/0x190 [ 472.713152][T13512] should_fail_ex.cold+0x5/0xa [ 472.713186][T13512] should_failslab+0xc2/0x120 [ 472.713211][T13512] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 472.713246][T13512] ? __alloc_skb+0x140/0x710 [ 472.713275][T13512] ? __alloc_skb+0x5b7/0x710 [ 472.713307][T13512] __alloc_skb+0x140/0x710 [ 472.713334][T13512] ? __alloc_skb+0x5b7/0x710 [ 472.713360][T13512] ? __pfx___alloc_skb+0x10/0x10 [ 472.713397][T13512] netlink_alloc_large_skb+0x69/0x150 [ 472.713550][T13512] netlink_sendmsg+0x680/0xda0 [ 472.713580][T13512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.713603][T13512] ? __might_fault+0x30/0x140 [ 472.713643][T13512] ____sys_sendmsg+0x9e1/0xb70 [ 472.713664][T13512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.713690][T13512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.713736][T13512] ___sys_sendmsg+0x190/0x1e0 [ 472.713762][T13512] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.713822][T13512] __sys_sendmsg+0x170/0x220 [ 472.713853][T13512] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.713894][T13512] ? rcu_is_watching+0x12/0xc0 [ 472.713930][T13512] do_syscall_64+0x10b/0xf80 [ 472.713958][T13512] ? clear_bhb_loop+0x40/0x90 [ 472.713985][T13512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.714010][T13512] RIP: 0033:0x7f055799c819 [ 472.714030][T13512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.714051][T13512] RSP: 002b:00007f0555bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.714075][T13512] RAX: ffffffffffffffda RBX: 00007f0557c15fa0 RCX: 00007f055799c819 [ 472.714091][T13512] RDX: 0000000004000014 RSI: 0000200000002600 RDI: 0000000000000003 [ 472.714104][T13512] RBP: 00007f0555bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.714117][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.714129][T13512] R13: 00007f0557c16038 R14: 00007f0557c15fa0 R15: 00007fff00b9ca78 [ 472.714159][T13512] [ 473.168672][ T6042] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.001A/input/input30 [ 473.375638][ T6042] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.001A/input/input31 [ 473.544886][ T6042] kye 0003:0458:5013.001A: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 473.621107][ T40] audit: type=1400 audit(1776783745.428:972): avc: denied { append } for pid=13520 comm="syz.0.2247" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 473.942904][ T6036] usb 8-1: USB disconnect, device number 27 [ 474.543385][T13550] FAULT_INJECTION: forcing a failure. [ 474.543385][T13550] name failslab, interval 1, probability 0, space 0, times 0 [ 474.554811][T13550] CPU: 3 UID: 0 PID: 13550 Comm: syz.0.2254 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.554840][T13550] Tainted: [L]=SOFTLOCKUP [ 474.554846][T13550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.554856][T13550] Call Trace: [ 474.554862][T13550] [ 474.554869][T13550] dump_stack_lvl+0x100/0x190 [ 474.554897][T13550] should_fail_ex.cold+0x5/0xa [ 474.554929][T13550] should_failslab+0xc2/0x120 [ 474.554948][T13550] __kmalloc_cache_noprof+0x7a/0x6f0 [ 474.554968][T13550] ? io_uring_setup.cold+0x6c/0x1cde [ 474.555119][T13550] io_uring_setup.cold+0x6c/0x1cde [ 474.555139][T13550] ? __pfx_io_uring_setup+0x10/0x10 [ 474.555166][T13550] ? find_held_lock+0x2b/0x80 [ 474.555182][T13550] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 474.555205][T13550] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 474.555241][T13550] ? ksys_write+0x1ac/0x250 [ 474.555259][T13550] ? __pfx_ksys_write+0x10/0x10 [ 474.555280][T13550] __x64_sys_io_uring_setup+0xc2/0x170 [ 474.555305][T13550] do_syscall_64+0x10b/0xf80 [ 474.555325][T13550] ? clear_bhb_loop+0x40/0x90 [ 474.555346][T13550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.555363][T13550] RIP: 0033:0x7f665859c819 [ 474.555379][T13550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.555396][T13550] RSP: 002b:00007f6659454fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 474.555413][T13550] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f665859c819 [ 474.555423][T13550] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 474.555433][T13550] RBP: 00007f6659455090 R08: 0000000000000000 R09: 0000000000000101 [ 474.555443][T13550] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 474.555453][T13550] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffcce3b90b8 [ 474.555473][T13550] [ 475.244422][T13568] tipc: Enabled bearer , priority 0 [ 475.256154][T13568] tipc: Resetting bearer [ 475.271295][T13564] tipc: Disabling bearer [ 476.006828][ T6042] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 476.215807][ T6042] usb 8-1: Using ep0 maxpacket: 16 [ 476.340461][ T6042] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 476.360116][T13592] tipc: Started in network mode [ 476.360394][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.364067][T13592] tipc: Node identity 160309ef3c1f, cluster identity 4711 [ 476.364244][T13592] tipc: Enabled bearer , priority 0 [ 476.402675][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.410152][ T6042] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 476.418506][T13592] tipc: Resetting bearer [ 476.475618][ T6042] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 476.479518][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.507331][T13590] tipc: Disabling bearer [ 476.577701][ T6042] usb 8-1: config 0 descriptor?? [ 477.023427][T13605] FAULT_INJECTION: forcing a failure. [ 477.023427][T13605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.048161][T13605] CPU: 2 UID: 0 PID: 13605 Comm: syz.4.2274 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.048194][T13605] Tainted: [L]=SOFTLOCKUP [ 477.048200][T13605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.048212][T13605] Call Trace: [ 477.048219][T13605] [ 477.048228][T13605] dump_stack_lvl+0x100/0x190 [ 477.048261][T13605] should_fail_ex.cold+0x5/0xa [ 477.048289][T13605] _copy_from_user+0x2e/0xd0 [ 477.048315][T13605] copy_msghdr_from_user+0x9f/0x4f0 [ 477.048338][T13605] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 477.048363][T13605] ? __pfx__kstrtoull+0x10/0x10 [ 477.048395][T13605] ___sys_sendmsg+0x106/0x1e0 [ 477.048417][T13605] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.048450][T13605] ? find_held_lock+0x2b/0x80 [ 477.048485][T13605] __sys_sendmmsg+0x205/0x430 [ 477.048513][T13605] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.048547][T13605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.048585][T13605] ? fput+0x79/0x100 [ 477.048610][T13605] ? ksys_write+0x1ac/0x250 [ 477.048631][T13605] ? __pfx_ksys_write+0x10/0x10 [ 477.048655][T13605] __x64_sys_sendmmsg+0x9c/0x100 [ 477.048680][T13605] ? lockdep_hardirqs_on+0x78/0x100 [ 477.048704][T13605] do_syscall_64+0x10b/0xf80 [ 477.048726][T13605] ? clear_bhb_loop+0x40/0x90 [ 477.048748][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.048767][T13605] RIP: 0033:0x7f5893d9c819 [ 477.048785][T13605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.048803][T13605] RSP: 002b:00007f5894ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.048822][T13605] RAX: ffffffffffffffda RBX: 00007f5894015fa0 RCX: 00007f5893d9c819 [ 477.048834][T13605] RDX: 0000000000000002 RSI: 0000200000003140 RDI: 0000000000000003 [ 477.048845][T13605] RBP: 00007f5894ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.048855][T13605] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000001 [ 477.048866][T13605] R13: 00007f5894016038 R14: 00007f5894015fa0 R15: 00007ffcf53f0da8 [ 477.048891][T13605] [ 477.112008][ T6042] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.001B/input/input34 [ 477.526790][ T6042] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.001B/input/input35 [ 477.691741][ T6042] kye 0003:0458:5013.001B: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 477.741986][ T6042] usb 8-1: USB disconnect, device number 28 [ 477.975948][T13622] fido_id[13622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 478.280263][T13630] binder: BINDER_SET_CONTEXT_MGR already set [ 478.296875][T13630] binder: 13629:13630 ioctl 4018620d 200000000040 returned -16 [ 478.354253][T13630] fuse: Bad value for 'user_id' [ 478.357094][T13630] fuse: Bad value for 'user_id' [ 478.440049][T13633] tipc: Enabled bearer , priority 0 [ 478.448576][T13633] tipc: Disabling bearer [ 478.807663][ T40] audit: type=1400 audit(1776783750.628:973): avc: denied { getopt } for pid=13641 comm="syz.5.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 478.826218][T13643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 479.123029][T13656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2292'. [ 479.417073][T13662] tipc: Enabled bearer , priority 0 [ 479.496262][T13661] tipc: Disabling bearer [ 479.695714][ T40] audit: type=1400 audit(1776783751.518:974): avc: denied { mounton } for pid=13668 comm="syz.3.2296" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 480.288702][T13687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.383706][T13687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.410479][T13687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.517139][ T40] audit: type=1400 audit(1776783752.328:975): avc: denied { mounton } for pid=13686 comm="syz.4.2301" path="/syzcgroup/net/syz4/devices.allow" dev="cgroup" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 480.545360][T13687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.565447][T13687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.568800][T13688] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.728256][T13683] gretap0 speed is unknown, defaulting to 1000 [ 481.354120][T13683] chnl_net:caif_netlink_parms(): no params data found [ 481.681857][T13683] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.721521][T13683] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.740049][T13683] bridge_slave_0: entered allmulticast mode [ 481.745916][T13683] bridge_slave_0: entered promiscuous mode [ 481.764944][T13683] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.769148][T13683] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.774616][T13683] bridge_slave_1: entered allmulticast mode [ 481.779249][T13683] bridge_slave_1: entered promiscuous mode [ 482.167779][T13683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.237163][T13683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.278574][T13683] team0: Port device team_slave_0 added [ 482.285430][T13683] team0: Port device team_slave_1 added [ 482.319163][T13683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.323891][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.338547][T13683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.375776][T13730] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.414329][T13683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.417153][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.468408][T13683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.683136][ T217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.731237][T13687] Bluetooth: hci4: command tx timeout [ 482.804688][T13683] hsr_slave_0: entered promiscuous mode [ 482.814074][T13683] hsr_slave_1: entered promiscuous mode [ 482.817286][T13683] debugfs: 'hsr0' already exists in 'hsr' [ 482.833603][T13683] Cannot create hsr debugfs directory [ 483.164768][ T217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.438009][ T217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.487874][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2320'. [ 483.991944][ T217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.032422][T13766] tipc: Enabled bearer , priority 0 [ 484.090114][T13763] tipc: Disabling bearer [ 484.380502][T13783] netlink: 'syz.5.2329': attribute type 21 has an invalid length. [ 484.830732][T13687] Bluetooth: hci4: command tx timeout [ 485.151666][ T217] bridge_slave_1: left allmulticast mode [ 485.154197][ T217] bridge_slave_1: left promiscuous mode [ 485.156981][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.209497][ T217] bridge_slave_0: left allmulticast mode [ 485.216370][ T217] bridge_slave_0: left promiscuous mode [ 485.219405][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.288623][T13808] FAULT_INJECTION: forcing a failure. [ 485.288623][T13808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.295334][T13808] CPU: 2 UID: 0 PID: 13808 Comm: syz.5.2335 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.295361][T13808] Tainted: [L]=SOFTLOCKUP [ 485.295365][T13808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.295375][T13808] Call Trace: [ 485.295381][T13808] [ 485.295387][T13808] dump_stack_lvl+0x100/0x190 [ 485.295409][T13808] should_fail_ex.cold+0x5/0xa [ 485.295426][T13808] _copy_from_iter+0x1f4/0x1690 [ 485.295444][T13808] ? __asan_memset+0x23/0x50 [ 485.295461][T13808] ? __pfx__copy_from_iter+0x10/0x10 [ 485.295474][T13808] ? __pfx___alloc_skb+0x10/0x10 [ 485.295493][T13808] netlink_sendmsg+0x808/0xda0 [ 485.295508][T13808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.295518][T13808] ? __might_fault+0x30/0x140 [ 485.295538][T13808] ____sys_sendmsg+0x9e1/0xb70 [ 485.295549][T13808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.295561][T13808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.295577][T13808] ___sys_sendmsg+0x190/0x1e0 [ 485.295589][T13808] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.295614][T13808] __sys_sendmsg+0x170/0x220 [ 485.295631][T13808] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.295651][T13808] ? rcu_is_watching+0x12/0xc0 [ 485.295672][T13808] do_syscall_64+0x10b/0xf80 [ 485.295687][T13808] ? clear_bhb_loop+0x40/0x90 [ 485.295701][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.295712][T13808] RIP: 0033:0x7f055799c819 [ 485.295724][T13808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.295734][T13808] RSP: 002b:00007f0555bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.295746][T13808] RAX: ffffffffffffffda RBX: 00007f0557c16090 RCX: 00007f055799c819 [ 485.295753][T13808] RDX: 0000000004000014 RSI: 0000200000002600 RDI: 0000000000000003 [ 485.295759][T13808] RBP: 00007f0555bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 485.295765][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.295771][T13808] R13: 00007f0557c16128 R14: 00007f0557c16090 R15: 00007fff00b9ca78 [ 485.295784][T13808] [ 486.313062][ T217] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 486.339652][ T217] bridge2 (unregistering): left promiscuous mode [ 486.633287][ T217] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 486.659032][ T217] bridge5 (unregistering): left allmulticast mode [ 486.730660][ T217] bond1 (unregistering): Released all slaves [ 486.763919][ T217] bond2 (unregistering): Released all slaves [ 486.847810][ T217] bond0 (unregistering): Released all slaves [ 486.875191][ T217] bond3 (unregistering): Released all slaves [ 486.891374][T13687] Bluetooth: hci4: command tx timeout [ 486.895887][ T217] bond4 (unregistering): (slave veth3): Releasing backup interface [ 486.907830][ T217] veth3: left promiscuous mode [ 486.922733][ T217] bond4 (unregistering): Released all slaves [ 487.008355][ T217] bond5 (unregistering): Released all slaves [ 487.064155][ T5616] 8021q: adding VLAN 0 to HW filter on device eth10 [ 487.482150][ T217] : left promiscuous mode [ 487.838142][ T217] tipc: Left network mode [ 488.664861][T13840] netlink: 'syz.5.2341': attribute type 2 has an invalid length. [ 488.741729][T13840] netlink: 'syz.5.2341': attribute type 2 has an invalid length. [ 489.007186][T13687] Bluetooth: hci4: command tx timeout [ 489.546555][T13853] tipc: Enabled bearer , priority 0 [ 490.370660][ T217] hsr_slave_0: left promiscuous mode [ 490.391817][ T217] hsr_slave_1: left promiscuous mode [ 490.418740][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.423382][ T217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.439953][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.444089][ T217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.568231][ T217] veth1_macvtap: left promiscuous mode [ 490.570739][ T217] veth0_macvtap: left promiscuous mode [ 490.583724][ T217] veth1_vlan: left promiscuous mode [ 491.265283][T13887] loop5: detected capacity change from 0 to 7 [ 491.339747][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.346308][ C2] buffer_io_error: 25 callbacks suppressed [ 491.346328][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.396316][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.417900][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.423949][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.447971][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.474868][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.482769][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.491434][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.497753][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.505672][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.513013][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.535552][T13887] ldm_validate_partition_table(): Disk read failed. [ 491.539113][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.543436][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.550125][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.559277][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.574716][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.582427][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.601344][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.619482][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 491.640740][T13887] Dev loop5: unable to read RDB block 0 [ 491.675044][ T217] team0 (unregistering): Port device team_slave_1 removed [ 491.681584][T13887] loop5: unable to read partition table [ 491.686367][T13887] loop5: partition table beyond EOD, truncated [ 491.709778][ T217] team0 (unregistering): Port device team_slave_0 removed [ 491.711509][T13887] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 491.831832][T13888] ldm_validate_partition_table(): Disk read failed. [ 491.837457][T13888] Dev loop5: unable to read RDB block 0 [ 491.854088][T13888] loop5: unable to read partition table [ 491.859020][T13888] loop5: partition table beyond EOD, truncated [ 492.502993][T13899] tipc: Enabling of bearer rejected, already enabled [ 492.519276][T13683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.611501][T13683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.640777][T13683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 492.719965][T13683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.764082][T13908] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 492.770858][T13683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 492.821340][T13683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.831927][T13683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.904633][T13683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.332512][T13683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.364912][T13683] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.451916][T13929] netlink: 'syz.3.2361': attribute type 2 has an invalid length. [ 493.457742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.458959][T13929] netlink: 'syz.3.2361': attribute type 2 has an invalid length. [ 493.463396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.524553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.530069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.576271][T13683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.595628][T13683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.040271][T13683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.150040][T13683] veth0_vlan: entered promiscuous mode [ 494.177106][T13683] veth1_vlan: entered promiscuous mode [ 494.231886][T13683] veth0_macvtap: entered promiscuous mode [ 494.239761][T13683] veth1_macvtap: entered promiscuous mode [ 494.306347][T13683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.338701][T13683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.367960][ T3740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.376782][ T3740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.381611][ T3740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.392152][ T3740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.005886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.018382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.161270][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.185920][T13949] tipc: Enabling of bearer rejected, already enabled [ 495.190099][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.251549][T13953] 9pnet_virtio: no channels available for device syz [ 495.314103][T13953] tipc: Enabled bearer , priority 0 [ 495.360716][T13953] tipc: Disabling bearer [ 496.309499][T13969] netlink: 'syz.0.2373': attribute type 2 has an invalid length. [ 496.335057][T13969] netlink: 'syz.0.2373': attribute type 2 has an invalid length. [ 498.202972][T14000] FAULT_INJECTION: forcing a failure. [ 498.202972][T14000] name failslab, interval 1, probability 0, space 0, times 0 [ 498.221165][T14000] CPU: 1 UID: 0 PID: 14000 Comm: syz.3.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.221197][T14000] Tainted: [L]=SOFTLOCKUP [ 498.221203][T14000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.221212][T14000] Call Trace: [ 498.221219][T14000] [ 498.221226][T14000] dump_stack_lvl+0x100/0x190 [ 498.221260][T14000] should_fail_ex.cold+0x5/0xa [ 498.221283][T14000] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 498.221307][T14000] should_failslab+0xc2/0x120 [ 498.221328][T14000] __kmalloc_noprof+0xe0/0x850 [ 498.221357][T14000] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 498.221382][T14000] genl_family_rcv_msg_doit+0xc7/0x300 [ 498.221402][T14000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.221440][T14000] ? bpf_lsm_capable+0x9/0x10 [ 498.221561][T14000] ? security_capable+0x80/0x260 [ 498.221745][T14000] ? ns_capable+0xd2/0xf0 [ 498.221874][T14000] genl_rcv_msg+0x560/0x800 [ 498.221903][T14000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.221923][T14000] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 498.222033][T14000] ? __pfx_nl80211_probe_mesh_link+0x10/0x10 [ 498.222060][T14000] ? __pfx_nl80211_post_doit+0x10/0x10 [ 498.222093][T14000] netlink_rcv_skb+0x159/0x420 [ 498.222112][T14000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.222135][T14000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.222165][T14000] ? netlink_deliver_tap+0x1ae/0xcc0 [ 498.222401][T14000] genl_rcv+0x28/0x40 [ 498.222422][T14000] netlink_unicast+0x585/0x850 [ 498.222445][T14000] ? __pfx_netlink_unicast+0x10/0x10 [ 498.222468][T14000] netlink_sendmsg+0x8b0/0xda0 [ 498.222489][T14000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.222516][T14000] ? __might_fault+0x30/0x140 [ 498.222548][T14000] ____sys_sendmsg+0x9e1/0xb70 [ 498.222564][T14000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.222582][T14000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.222608][T14000] ___sys_sendmsg+0x190/0x1e0 [ 498.222628][T14000] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.222672][T14000] __sys_sendmsg+0x170/0x220 [ 498.222695][T14000] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.222727][T14000] ? rcu_is_watching+0x12/0xc0 [ 498.222756][T14000] do_syscall_64+0x10b/0xf80 [ 498.222778][T14000] ? clear_bhb_loop+0x40/0x90 [ 498.222798][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.222815][T14000] RIP: 0033:0x7fb26d99c819 [ 498.222832][T14000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.222849][T14000] RSP: 002b:00007fb26bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.222867][T14000] RAX: ffffffffffffffda RBX: 00007fb26dc15fa0 RCX: 00007fb26d99c819 [ 498.222878][T14000] RDX: 0000000004000014 RSI: 0000200000002600 RDI: 0000000000000003 [ 498.222887][T14000] RBP: 00007fb26bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 498.222896][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.222906][T14000] R13: 00007fb26dc16038 R14: 00007fb26dc15fa0 R15: 00007fffed8d4b68 [ 498.222928][T14000] [ 500.841758][T14009] netlink: 'syz.4.2386': attribute type 2 has an invalid length. [ 500.846773][T14009] netlink: 'syz.4.2386': attribute type 2 has an invalid length. [ 501.245477][T14020] tipc: Started in network mode [ 501.265969][T14020] tipc: Node identity 321ed52da336, cluster identity 4711 [ 501.269700][T14020] tipc: Enabled bearer , priority 0 [ 501.279112][T14020] tipc: Disabling bearer [ 501.732919][T14036] netem: change failed [ 501.752541][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2399'. [ 501.765031][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2399'. [ 501.851074][ T40] audit: type=1400 audit(1776783773.668:976): avc: denied { append } for pid=14038 comm="syz.0.2398" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 502.378707][T14046] ip6t_srh: unknown srh invflags 51E8 [ 502.737885][ T40] audit: type=1804 audit(1776783774.548:977): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2408" name="/newroot/13/file1" dev="tmpfs" ino=85 res=1 errno=0 [ 503.445206][T14071] netlink: 'syz.5.2411': attribute type 32 has an invalid length. [ 505.184863][T14056] tipc: Enabling of bearer rejected, already enabled [ 505.218946][T14086] netlink: 'syz.5.2414': attribute type 2 has an invalid length. [ 505.244574][T14086] netlink: 'syz.5.2414': attribute type 2 has an invalid length. [ 507.101167][T14111] tipc: Enabling of bearer rejected, already enabled [ 507.340294][T14116] tipc: New replicast peer: 255.255.255.255 [ 507.344750][T14116] tipc: Enabled bearer , priority 10 [ 507.508082][T14125] FAULT_INJECTION: forcing a failure. [ 507.508082][T14125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.523289][T14125] CPU: 3 UID: 0 PID: 14125 Comm: syz.3.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.523319][T14125] Tainted: [L]=SOFTLOCKUP [ 507.523325][T14125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 507.523335][T14125] Call Trace: [ 507.523342][T14125] [ 507.523349][T14125] dump_stack_lvl+0x100/0x190 [ 507.523384][T14125] should_fail_ex.cold+0x5/0xa [ 507.523409][T14125] _copy_from_user+0x2e/0xd0 [ 507.523434][T14125] copy_msghdr_from_user+0x9f/0x4f0 [ 507.523455][T14125] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 507.523483][T14125] ___sys_sendmsg+0x106/0x1e0 [ 507.523512][T14125] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.523557][T14125] __sys_sendmsg+0x170/0x220 [ 507.523583][T14125] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.523616][T14125] ? rcu_is_watching+0x12/0xc0 [ 507.523646][T14125] do_syscall_64+0x10b/0xf80 [ 507.523668][T14125] ? clear_bhb_loop+0x40/0x90 [ 507.523690][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.523706][T14125] RIP: 0033:0x7fb26d99c819 [ 507.523723][T14125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.523737][T14125] RSP: 002b:00007fb26bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.523754][T14125] RAX: ffffffffffffffda RBX: 00007fb26dc15fa0 RCX: 00007fb26d99c819 [ 507.523765][T14125] RDX: 0000000004004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 507.523775][T14125] RBP: 00007fb26bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.523784][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.523793][T14125] R13: 00007fb26dc16038 R14: 00007fb26dc15fa0 R15: 00007fffed8d4b68 [ 507.523816][T14125] [ 507.775129][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.504987][T14152] FAULT_INJECTION: forcing a failure. [ 508.504987][T14152] name failslab, interval 1, probability 0, space 0, times 0 [ 508.547738][T14152] CPU: 0 UID: 0 PID: 14152 Comm: syz.5.2438 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.547782][T14152] Tainted: [L]=SOFTLOCKUP [ 508.547790][T14152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 508.547804][T14152] Call Trace: [ 508.547813][T14152] [ 508.547823][T14152] dump_stack_lvl+0x100/0x190 [ 508.547857][T14152] should_fail_ex.cold+0x5/0xa [ 508.547890][T14152] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 508.547919][T14152] should_failslab+0xc2/0x120 [ 508.547946][T14152] __kmalloc_noprof+0xe0/0x850 [ 508.547986][T14152] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 508.548022][T14152] genl_family_rcv_msg_doit+0xc7/0x300 [ 508.548051][T14152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.548089][T14152] ? bpf_lsm_capable+0x9/0x10 [ 508.548112][T14152] ? security_capable+0x80/0x260 [ 508.548149][T14152] ? ns_capable+0xd2/0xf0 [ 508.548184][T14152] genl_rcv_msg+0x560/0x800 [ 508.548243][T14152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.548273][T14152] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 508.548303][T14152] ? __pfx_nl80211_probe_mesh_link+0x10/0x10 [ 508.548333][T14152] ? __pfx_nl80211_post_doit+0x10/0x10 [ 508.548375][T14152] netlink_rcv_skb+0x159/0x420 [ 508.548398][T14152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.548426][T14152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.548462][T14152] ? netlink_deliver_tap+0x1ae/0xcc0 [ 508.548501][T14152] genl_rcv+0x28/0x40 [ 508.548523][T14152] netlink_unicast+0x585/0x850 [ 508.548550][T14152] ? __pfx_netlink_unicast+0x10/0x10 [ 508.548580][T14152] netlink_sendmsg+0x8b0/0xda0 [ 508.548606][T14152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.548626][T14152] ? __might_fault+0x30/0x140 [ 508.548667][T14152] ____sys_sendmsg+0x9e1/0xb70 [ 508.548689][T14152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.548713][T14152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.548757][T14152] ___sys_sendmsg+0x190/0x1e0 [ 508.548784][T14152] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.548847][T14152] __sys_sendmsg+0x170/0x220 [ 508.548878][T14152] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.548920][T14152] ? rcu_is_watching+0x12/0xc0 [ 508.548956][T14152] do_syscall_64+0x10b/0xf80 [ 508.548983][T14152] ? clear_bhb_loop+0x40/0x90 [ 508.549009][T14152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.549031][T14152] RIP: 0033:0x7f055799c819 [ 508.549051][T14152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.549070][T14152] RSP: 002b:00007f0555bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.549093][T14152] RAX: ffffffffffffffda RBX: 00007f0557c15fa0 RCX: 00007f055799c819 [ 508.549105][T14152] RDX: 0000000004000014 RSI: 0000200000002600 RDI: 0000000000000003 [ 508.549117][T14152] RBP: 00007f0555bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.549129][T14152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.549142][T14152] R13: 00007f0557c16038 R14: 00007f0557c15fa0 R15: 00007fff00b9ca78 [ 508.549173][T14152] [ 509.178321][T14168] erofs (device loop3): cannot find valid erofs superblock [ 509.267286][T14168] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 509.275141][T14168] netlink: 'syz.3.2444': attribute type 4 has an invalid length. [ 509.299159][T14168] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2444'. [ 509.524830][T14176] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 509.826772][T14186] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 510.012774][T14195] 9pnet_virtio: no channels available for device syz [ 510.739827][T14211] erofs (device loop0): cannot find valid erofs superblock [ 510.787739][T14211] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 510.801776][T14211] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 510.823855][T14211] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2458'. [ 510.863272][T14213] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2460'. [ 512.627173][T14251] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2471'. [ 513.139394][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 513.733370][ T5957] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 513.842360][T14270] netlink: 'syz.5.2478': attribute type 1 has an invalid length. [ 513.871294][T14270] netlink: 'syz.5.2478': attribute type 4 has an invalid length. [ 513.890653][T14270] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2478'. [ 514.230040][T14276] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2480'. [ 515.462556][T14302] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2488'. [ 516.560253][T14324] tipc: Enabled bearer , priority 0 [ 516.849737][T14321] tipc: Disabling bearer [ 517.581129][T14344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2504'. [ 518.819796][T14366] netlink: 'syz.3.2509': attribute type 2 has an invalid length. [ 518.830641][T14366] netlink: 'syz.3.2509': attribute type 2 has an invalid length. [ 519.873959][T14395] Cannot find set identified by id 0 to match [ 520.146449][T14405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14405 comm=syz.0.2526 [ 521.370004][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2538'. [ 522.423944][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2547'. [ 522.633030][T14468] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2550'. [ 522.923235][T14478] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 522.958365][T14478] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 523.051155][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 523.107012][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 523.128027][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 523.154963][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 523.213232][T14480] block nbd0: server does not support multiple connections per device. [ 523.249321][T14480] block nbd0: shutting down sockets [ 523.264698][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.668311][T14480] nbd: socks must be embedded in a SOCK_ITEM attr [ 524.297349][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.314211][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.336741][ T40] audit: type=1400 audit(1776783796.158:978): avc: denied { setopt } for pid=14504 comm="syz.0.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 524.404128][T14482] gretap0 speed is unknown, defaulting to 1000 [ 524.673151][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.716657][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.032929][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.053810][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.305109][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.310393][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.676430][T13687] Bluetooth: hci0: command tx timeout [ 525.820385][T14482] chnl_net:caif_netlink_parms(): no params data found [ 526.240985][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.245275][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.253992][T14482] bridge_slave_0: entered allmulticast mode [ 526.283861][T14482] bridge_slave_0: entered promiscuous mode [ 526.298167][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.312742][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.330286][T14482] bridge_slave_1: entered allmulticast mode [ 526.342468][T14482] bridge_slave_1: entered promiscuous mode [ 526.505745][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.600779][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.757813][ T12] bridge_slave_1: left allmulticast mode [ 526.760397][ T12] bridge_slave_1: left promiscuous mode [ 526.767015][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.790045][ T12] bridge_slave_0: left allmulticast mode [ 526.792750][ T12] bridge_slave_0: left promiscuous mode [ 526.795741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.712004][T13687] Bluetooth: hci0: command tx timeout [ 527.832435][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 527.874122][T12632] smbdirect: ib_dev[syz2] removed [ 528.031673][T14551] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 528.064558][ T40] audit: type=1400 audit(1776783799.848:979): avc: denied { relabelto } for pid=14550 comm="syz.5.2572" name="473" dev="tmpfs" ino=2452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 528.106454][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 528.107032][ T40] audit: type=1400 audit(1776783799.928:980): avc: denied { associate } for pid=14550 comm="syz.5.2572" name="473" dev="tmpfs" ino=2452 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 528.114306][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2572'. [ 528.228131][ T12] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 528.236414][ T12] bridge1 (unregistering): left promiscuous mode [ 528.257111][ T12] bridge1 (unregistering): left allmulticast mode [ 528.432530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.492910][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.532393][ T12] bond0 (unregistering): Released all slaves [ 528.558879][ T12] bond1 (unregistering): Released all slaves [ 528.580730][ T12] bond2 (unregistering): Released all slaves [ 528.619245][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 528.667910][ T12] bond3 (unregistering): Released all slaves [ 528.699855][ T12] bond4 (unregistering): Released all slaves [ 528.755469][ T12] bond5 (unregistering): Released all slaves [ 528.863112][ T5616] 8021q: adding VLAN 0 to HW filter on device eth10 [ 528.881857][ T6029] gretap0 speed is unknown, defaulting to 1000 [ 528.951121][ T40] audit: type=1400 audit(1776783800.758:981): avc: denied { remove_name } for pid=9027 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 528.957488][ T6029] infiniband syz2: ib_query_port failed (-19) [ 528.996106][T14482] team0: Port device team_slave_0 added [ 529.033817][ T40] audit: type=1400 audit(1776783800.758:982): avc: denied { rmdir } for pid=9027 comm="syz-executor" name="473" dev="tmpfs" ino=2452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 529.073369][T14482] team0: Port device team_slave_1 added [ 529.259662][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.269850][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.294281][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.319406][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.327469][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.356143][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.552528][T14482] hsr_slave_0: entered promiscuous mode [ 529.557995][T14482] hsr_slave_1: entered promiscuous mode [ 529.570125][T14482] debugfs: 'hsr0' already exists in 'hsr' [ 529.573859][T14482] Cannot create hsr debugfs directory [ 529.588050][T13687] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 529.663758][ T12] tipc: Disabling bearer [ 529.730219][ T12] tipc: Disabling bearer [ 529.734942][ T12] tipc: Left network mode [ 529.795728][T13687] Bluetooth: hci0: command tx timeout [ 530.148978][ T40] audit: type=1400 audit(1776783801.968:983): avc: denied { setopt } for pid=14580 comm="syz.5.2583" lport=35714 faddr=::ffff:172.30.0.6 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 530.709202][T14595] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 530.743017][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 530.899929][ T5616] 8021q: adding VLAN 0 to HW filter on device eth11 [ 531.347463][T14599] netlink: 'syz.0.2587': attribute type 2 has an invalid length. [ 531.362651][T14599] netlink: 'syz.0.2587': attribute type 2 has an invalid length. [ 531.851229][T13687] Bluetooth: hci0: command tx timeout [ 532.098457][T14613] Bluetooth: MGMT ver 1.23 [ 532.141445][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 532.153132][T14627] netlink: 'syz.0.2592': attribute type 30 has an invalid length. [ 532.339983][T14608] syzkaller0: entered promiscuous mode [ 532.348623][T14608] syzkaller0: entered allmulticast mode [ 540.957032][ T217] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.960641][ T217] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.050369][ T217] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.170289][ T217] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.839470][ T12] hsr_slave_0: left promiscuous mode [ 541.847192][ T12] hsr_slave_1: left promiscuous mode [ 541.853120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.857921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.891928][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.895456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.011882][ T12] veth1_macvtap: left promiscuous mode [ 542.023659][ T12] veth0_macvtap: left promiscuous mode [ 542.196442][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2599'. [ 542.511447][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2601'. [ 542.857818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 542.975241][ T12] team0 (unregistering): Port device team_slave_0 removed [ 543.767351][T14482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.829818][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.834653][T14482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.847507][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.905093][T14482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.949869][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.954930][T14482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.963860][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.260028][T14482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.295383][T14482] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.315865][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.336818][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.398982][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.401839][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.483108][T14482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.493686][T14482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.135884][T14482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.228009][T14482] veth0_vlan: entered promiscuous mode [ 545.259051][T14482] veth1_vlan: entered promiscuous mode [ 545.314759][T14482] veth0_macvtap: entered promiscuous mode [ 545.330270][T14482] veth1_macvtap: entered promiscuous mode [ 545.381754][T14482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.415382][T14482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.429484][ T3740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.444123][ T3740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.536520][ T3740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.557323][ T3740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.971990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.980233][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.155032][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.158675][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.442084][T14729] tipc: Enabled bearer , priority 0 [ 546.500381][T14725] tipc: Disabling bearer [ 546.800224][T14736] netlink: 'syz.3.2617': attribute type 2 has an invalid length. [ 546.804295][T14736] netlink: 'syz.3.2617': attribute type 2 has an invalid length. [ 547.449941][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 547.494485][ T6029] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 547.540788][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 547.616737][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 547.682196][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 547.686941][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 547.732931][ T6029] usb 5-1: Using ep0 maxpacket: 16 [ 547.738370][ T6029] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 547.745890][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.751636][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.758511][ T6029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 547.767781][ T6029] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 547.774323][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.805189][ T6029] usb 5-1: config 0 descriptor?? [ 548.673475][ T6029] usbhid 5-1:0.0: can't add hid device: -71 [ 548.728728][ T6029] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 548.763614][ T6029] usb 5-1: USB disconnect, device number 25 [ 548.859979][T14768] tipc: Enabling of bearer rejected, already enabled [ 549.318405][T14776] netlink: 'syz.5.2627': attribute type 2 has an invalid length. [ 549.340634][T14776] netlink: 'syz.5.2627': attribute type 2 has an invalid length. [ 549.400190][T14751] chnl_net:caif_netlink_parms(): no params data found [ 550.011694][T13687] Bluetooth: hci3: command tx timeout [ 550.044311][T14751] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.057764][T14751] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.107711][T14751] bridge_slave_0: entered allmulticast mode [ 550.111329][T14751] bridge_slave_0: entered promiscuous mode [ 550.122650][T14751] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.128593][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.133183][T14751] bridge_slave_1: entered allmulticast mode [ 550.158020][T14751] bridge_slave_1: entered promiscuous mode [ 550.233800][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.275240][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.345920][T14796] tipc: Started in network mode [ 550.365825][T14796] tipc: Node identity 16fcfb235349, cluster identity 4711 [ 550.369239][T14796] tipc: Enabled bearer , priority 0 [ 550.408033][T14751] team0: Port device team_slave_0 added [ 550.426520][T14751] team0: Port device team_slave_1 added [ 550.465583][T14807] netlink: 'syz.0.2637': attribute type 2 has an invalid length. [ 550.486588][T14807] netlink: 'syz.0.2637': attribute type 2 has an invalid length. [ 550.571028][T14796] tipc: Disabling bearer [ 550.778799][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.785999][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.834878][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.907577][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.910803][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.933209][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.285718][T14819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2643'. [ 551.614343][T14751] hsr_slave_0: entered promiscuous mode [ 551.620078][T14751] hsr_slave_1: entered promiscuous mode [ 551.696808][T14832] FAULT_INJECTION: forcing a failure. [ 551.696808][T14832] name failslab, interval 1, probability 0, space 0, times 0 [ 551.712365][T14832] CPU: 0 UID: 0 PID: 14832 Comm: syz.5.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.712400][T14832] Tainted: [L]=SOFTLOCKUP [ 551.712408][T14832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.712421][T14832] Call Trace: [ 551.712429][T14832] [ 551.712437][T14832] dump_stack_lvl+0x100/0x190 [ 551.712479][T14832] should_fail_ex.cold+0x5/0xa [ 551.712506][T14832] should_failslab+0xc2/0x120 [ 551.712526][T14832] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 551.712555][T14832] ? __alloc_skb+0x140/0x710 [ 551.712585][T14832] ? __alloc_skb+0x5b7/0x710 [ 551.712621][T14832] __alloc_skb+0x140/0x710 [ 551.712642][T14832] ? __alloc_skb+0x5b7/0x710 [ 551.712664][T14832] ? __pfx___alloc_skb+0x10/0x10 [ 551.712693][T14832] netlink_ack+0x117/0xb80 [ 551.712713][T14832] ? __lock_acquire+0x4a5/0x2630 [ 551.712742][T14832] rdma_nl_rcv_skb.constprop.0.isra.0+0x32b/0x410 [ 551.713093][T14832] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 551.713129][T14832] ? netlink_deliver_tap+0x1ae/0xcc0 [ 551.713169][T14832] netlink_unicast+0x585/0x850 [ 551.713191][T14832] ? __pfx_netlink_unicast+0x10/0x10 [ 551.713215][T14832] netlink_sendmsg+0x8b0/0xda0 [ 551.713237][T14832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.713253][T14832] ? __might_fault+0x30/0x140 [ 551.713287][T14832] ____sys_sendmsg+0x9e1/0xb70 [ 551.713327][T14832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.713347][T14832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.713375][T14832] ___sys_sendmsg+0x190/0x1e0 [ 551.713395][T14832] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.713442][T14832] __sys_sendmsg+0x170/0x220 [ 551.713468][T14832] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.713502][T14832] ? rcu_is_watching+0x12/0xc0 [ 551.713531][T14832] do_syscall_64+0x10b/0xf80 [ 551.713550][T14832] ? clear_bhb_loop+0x40/0x90 [ 551.713570][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.713585][T14832] RIP: 0033:0x7f055799c819 [ 551.713604][T14832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.713618][T14832] RSP: 002b:00007f0555bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.713636][T14832] RAX: ffffffffffffffda RBX: 00007f0557c15fa0 RCX: 00007f055799c819 [ 551.713648][T14832] RDX: 0000000004004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 551.713657][T14832] RBP: 00007f0555bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.713666][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.713674][T14832] R13: 00007f0557c16038 R14: 00007f0557c15fa0 R15: 00007fff00b9ca78 [ 551.713694][T14832] [ 552.091287][T13687] Bluetooth: hci3: command tx timeout [ 552.823251][ T13] smc: removing ib device sy‡1 [ 552.885545][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 552.924739][ T3740] bond0 (unregistering): Released all slaves [ 552.933779][ T3740] bond1 (unregistering): Released all slaves [ 552.968445][ T3740] bond2 (unregistering): Released all slaves [ 553.070352][ T5616] 8021q: adding VLAN 0 to HW filter on device eth10 [ 553.149673][T14851] xfrm1: entered promiscuous mode [ 553.166928][T14851] xfrm1: entered allmulticast mode [ 553.422933][ T13] smbdirect: ib_dev[sy‡1] removed [ 553.435531][T14855] FAULT_INJECTION: forcing a failure. [ 553.435531][T14855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.523246][T14855] CPU: 3 UID: 0 PID: 14855 Comm: syz.3.2654 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.523284][T14855] Tainted: [L]=SOFTLOCKUP [ 553.523292][T14855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 553.523306][T14855] Call Trace: [ 553.523314][T14855] [ 553.523324][T14855] dump_stack_lvl+0x100/0x190 [ 553.523360][T14855] should_fail_ex.cold+0x5/0xa [ 553.523395][T14855] _copy_to_user+0x32/0xd0 [ 553.523430][T14855] simple_read_from_buffer+0xcb/0x170 [ 553.523466][T14855] proc_fail_nth_read+0x1af/0x230 [ 553.523605][T14855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.523646][T14855] ? rw_verify_area+0xce/0x6d0 [ 553.523683][T14855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.523721][T14855] vfs_read+0x1e4/0xb30 [ 553.523750][T14855] ? __pfx_vfs_read+0x10/0x10 [ 553.523773][T14855] ? __fget_files+0x215/0x3d0 [ 553.523809][T14855] ? __fget_files+0x21f/0x3d0 [ 553.523847][T14855] ksys_read+0x12a/0x250 [ 553.523871][T14855] ? __pfx_ksys_read+0x10/0x10 [ 553.523898][T14855] ? rcu_is_watching+0x12/0xc0 [ 553.523939][T14855] do_syscall_64+0x10b/0xf80 [ 553.523969][T14855] ? clear_bhb_loop+0x40/0x90 [ 553.523998][T14855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.524022][T14855] RIP: 0033:0x7f907095d04e [ 553.524043][T14855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 553.524076][T14855] RSP: 002b:00007f90717affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.524100][T14855] RAX: ffffffffffffffda RBX: 00007f90717b06c0 RCX: 00007f907095d04e [ 553.524115][T14855] RDX: 000000000000000f RSI: 00007f90717b00a0 RDI: 0000000000000005 [ 553.524128][T14855] RBP: 00007f90717b0090 R08: 0000000000000000 R09: 0000000000000000 [ 553.524142][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.524154][T14855] R13: 00007f9070c16038 R14: 00007f9070c15fa0 R15: 00007fff371d67c8 [ 553.524187][T14855] [ 554.177738][T13687] Bluetooth: hci3: command tx timeout [ 554.488164][T14868] ucma_write: process 1417 (syz.5.2658) changed security contexts after opening file descriptor, this is not allowed. [ 555.059260][ T5616] 8021q: adding VLAN 0 to HW filter on device eth11 [ 555.220832][T14878] FAULT_INJECTION: forcing a failure. [ 555.220832][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 555.251414][T14878] CPU: 1 UID: 0 PID: 14878 Comm: syz.5.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.251445][T14878] Tainted: [L]=SOFTLOCKUP [ 555.251451][T14878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.251462][T14878] Call Trace: [ 555.251469][T14878] [ 555.251476][T14878] dump_stack_lvl+0x100/0x190 [ 555.251506][T14878] should_fail_ex.cold+0x5/0xa [ 555.251531][T14878] should_failslab+0xc2/0x120 [ 555.251552][T14878] __kvmalloc_node_noprof+0xfa/0xa00 [ 555.251578][T14878] ? io_alloc_cache_init+0x38/0x170 [ 555.251607][T14878] ? io_alloc_cache_init+0x38/0x170 [ 555.251629][T14878] io_alloc_cache_init+0x38/0x170 [ 555.251648][T14878] io_rsrc_cache_init+0x26/0x50 [ 555.251664][T14878] io_uring_setup.cold+0x43d/0x1cde [ 555.251687][T14878] ? __pfx_io_uring_setup+0x10/0x10 [ 555.251712][T14878] ? find_held_lock+0x2b/0x80 [ 555.251728][T14878] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 555.251752][T14878] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 555.251790][T14878] ? ksys_write+0x1ac/0x250 [ 555.251809][T14878] ? __pfx_ksys_write+0x10/0x10 [ 555.251832][T14878] __x64_sys_io_uring_setup+0xc2/0x170 [ 555.251857][T14878] do_syscall_64+0x10b/0xf80 [ 555.251878][T14878] ? clear_bhb_loop+0x40/0x90 [ 555.251898][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.251915][T14878] RIP: 0033:0x7f055799c819 [ 555.251930][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.251945][T14878] RSP: 002b:00007f0555bd4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 555.251962][T14878] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f055799c819 [ 555.251972][T14878] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 555.251982][T14878] RBP: 00007f0555bd5090 R08: 0000000000000000 R09: 0000000000000101 [ 555.251992][T14878] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 555.252001][T14878] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007fff00b9ca78 [ 555.252024][T14878] [ 556.258731][T13687] Bluetooth: hci3: command tx timeout [ 557.475157][T14924] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2675'. [ 557.979286][ T3740] tipc: Left network mode [ 558.192205][T14941] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 558.218665][T14945] netlink: 868 bytes leftover after parsing attributes in process `syz.3.2679'. [ 558.387423][T13687] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 558.515696][T14946] bond1: entered promiscuous mode [ 558.673835][T14946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 558.998199][T14946] bond1: left promiscuous mode [ 559.072766][ T3740] IPVS: stopping backup sync thread 7238 ... [ 559.249520][T14751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.331646][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.357973][T14751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.464729][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.519058][T14958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2681'. [ 559.543222][T14958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2681'. [ 559.603578][T14940] syz.5.2678 (14940): drop_caches: 2 [ 559.731737][T14751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.732656][T14964] netlink: 'syz.3.2684': attribute type 2 has an invalid length. [ 559.787970][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.820509][T14964] netlink: 'syz.3.2684': attribute type 2 has an invalid length. [ 559.854184][T14751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.954787][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 559.982320][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.070451][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 560.079397][T14973] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2687'. [ 560.377532][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 560.463679][T14983] syz_tun: entered promiscuous mode [ 560.469552][T14983] syz_tun: refused to change device tx_queue_len [ 560.728855][ T3740] hsr_slave_0: left promiscuous mode [ 560.752774][ T3740] hsr_slave_1: left promiscuous mode [ 562.196632][T15011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2697'. [ 562.309108][T14998] tipc: Enabling of bearer rejected, already enabled [ 562.315204][T15005] netlink: 'syz.3.2695': attribute type 2 has an invalid length. [ 562.322079][T15005] netlink: 'syz.3.2695': attribute type 2 has an invalid length. [ 562.414465][T14751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.484388][T14751] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.580681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.584941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.608520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.612947][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.940643][T15022] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 563.344305][T14751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.734912][T15037] tipc: Enabled bearer , priority 0 [ 563.745088][T15037] tipc: Disabling bearer [ 563.902266][T14751] veth0_vlan: entered promiscuous mode [ 563.989575][T14751] veth1_vlan: entered promiscuous mode [ 564.068369][T14751] veth0_macvtap: entered promiscuous mode [ 564.104994][T14751] veth1_macvtap: entered promiscuous mode [ 564.156997][T14751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.172415][T15047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2708'. [ 564.205679][T14751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.258285][ T3740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.263113][ T3740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.301912][T12636] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.306043][T12636] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.473331][T15055] netlink: 'syz.3.2706': attribute type 2 has an invalid length. [ 564.485341][T15055] netlink: 'syz.3.2706': attribute type 2 has an invalid length. [ 564.492206][T15053] FAULT_INJECTION: forcing a failure. [ 564.492206][T15053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.528686][T15053] CPU: 2 UID: 0 PID: 15053 Comm: syz.0.2709 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.528813][T15053] Tainted: [L]=SOFTLOCKUP [ 564.528820][T15053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 564.528831][T15053] Call Trace: [ 564.528918][T15053] [ 564.528927][T15053] dump_stack_lvl+0x100/0x190 [ 564.529519][T15053] should_fail_ex.cold+0x5/0xa [ 564.530015][T15053] _copy_to_user+0x32/0xd0 [ 564.530368][T15053] simple_read_from_buffer+0xcb/0x170 [ 564.530613][T15053] proc_fail_nth_read+0x1af/0x230 [ 564.530713][T15053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.530747][T15053] ? rw_verify_area+0xce/0x6d0 [ 564.530846][T15053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.531732][T15053] vfs_read+0x1e4/0xb30 [ 564.531763][T15053] ? __pfx_vfs_read+0x10/0x10 [ 564.531785][T15053] ? __fget_files+0x215/0x3d0 [ 564.531819][T15053] ? __fget_files+0x21f/0x3d0 [ 564.531855][T15053] ksys_read+0x12a/0x250 [ 564.531877][T15053] ? __pfx_ksys_read+0x10/0x10 [ 564.531902][T15053] ? rcu_is_watching+0x12/0xc0 [ 564.532097][T15053] do_syscall_64+0x10b/0xf80 [ 564.532242][T15053] ? clear_bhb_loop+0x40/0x90 [ 564.532272][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.532294][T15053] RIP: 0033:0x7f0d2c55d04e [ 564.532315][T15053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.532335][T15053] RSP: 002b:00007f0d2d522fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.532446][T15053] RAX: ffffffffffffffda RBX: 00007f0d2d5236c0 RCX: 00007f0d2c55d04e [ 564.532460][T15053] RDX: 000000000000000f RSI: 00007f0d2d5230a0 RDI: 0000000000000004 [ 564.532473][T15053] RBP: 00007f0d2d523090 R08: 0000000000000000 R09: 0000000000000000 [ 564.532487][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.532500][T15053] R13: 00007f0d2c816038 R14: 00007f0d2c815fa0 R15: 00007ffcfff93e08 [ 564.532531][T15053] [ 564.693139][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 564.821445][T15050] syzkaller1: entered promiscuous mode [ 564.833254][T15050] syzkaller1: entered allmulticast mode [ 565.535165][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.546469][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.580033][T15063] syzkaller0: entered promiscuous mode [ 565.582599][T15063] syzkaller0: entered allmulticast mode [ 566.092497][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.143335][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.308469][T15075] tipc: Enabling of bearer rejected, already enabled [ 566.454434][T15085] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 566.643639][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 567.186979][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'. [ 567.397729][T15112] overlayfs: conflicting options: userxattr,metacopy=on [ 567.466768][ T40] audit: type=1400 audit(1776783839.278:984): avc: denied { write } for pid=15113 comm="syz.3.2723" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 567.530528][T15111] input: syz1 as /devices/virtual/input/input36 [ 568.622597][ T40] audit: type=1400 audit(1776783840.448:985): avc: denied { append } for pid=15135 comm="syz.0.2731" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 568.628810][T15136] netlink: 'syz.0.2731': attribute type 21 has an invalid length. [ 568.650612][T15136] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.662864][T15136] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 568.679791][T15136] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2731'. [ 568.809387][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'. [ 569.065532][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.983526][T15192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2753'. [ 569.987683][T15192] unsupported nlmsg_type 40 [ 570.027493][T15194] Cannot find set identified by id 0 to match [ 570.251590][T15199] syzkaller0: entered promiscuous mode [ 570.253712][T15199] syzkaller0: entered allmulticast mode [ 570.618575][ T40] audit: type=1400 audit(1776783842.438:986): avc: denied { setopt } for pid=15207 comm="syz.4.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 570.736832][T15215] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 571.067799][ T40] audit: type=1400 audit(1776783842.888:987): avc: denied { ioctl } for pid=15223 comm="syz.4.2766" path="socket:[62852]" dev="sockfs" ino=62852 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 571.067998][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 571.213890][T15225] openvswitch: netlink: Missing key (keys=40, expected=80) [ 571.246905][ T40] audit: type=1400 audit(1776783843.068:988): avc: denied { getopt } for pid=15223 comm="syz.4.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 571.653974][T15242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2771'. [ 572.487758][T15261] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 572.999398][T15275] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 573.042998][T15279] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2777'. [ 573.132033][ T40] audit: type=1400 audit(1776783844.908:989): avc: denied { read } for pid=15274 comm="syz.4.2783" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 573.165597][ T40] audit: type=1400 audit(1776783844.948:990): avc: denied { open } for pid=15274 comm="syz.4.2783" path="/18/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 573.446633][ T5957] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 573.527813][T15289] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 573.735821][T15300] FAULT_INJECTION: forcing a failure. [ 573.735821][T15300] name failslab, interval 1, probability 0, space 0, times 0 [ 573.744636][T15300] CPU: 1 UID: 0 PID: 15300 Comm: syz.4.2790 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.744667][T15300] Tainted: [L]=SOFTLOCKUP [ 573.744674][T15300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.744685][T15300] Call Trace: [ 573.744768][T15300] [ 573.744777][T15300] dump_stack_lvl+0x100/0x190 [ 573.745327][T15300] should_fail_ex.cold+0x5/0xa [ 573.745483][T15300] should_failslab+0xc2/0x120 [ 573.745816][T15300] __kmalloc_cache_noprof+0x7a/0x6f0 [ 573.777703][T15300] ? rdma_resolve_addr+0x4bd/0x20e0 [ 573.778243][T15300] ? mark_held_locks+0x40/0x70 [ 573.778544][T15300] rdma_resolve_addr+0x4bd/0x20e0 [ 573.778576][T15300] ? xa_load+0x153/0x2c0 [ 573.778682][T15300] ? __pfx_xa_load+0x10/0x10 [ 573.778718][T15300] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 573.778755][T15300] ? __pfx_ucma_get_ctx+0x10/0x10 [ 573.778783][T15300] ? ucma_resolve_ip+0x161/0x220 [ 573.778802][T15300] ucma_resolve_ip+0x161/0x220 [ 573.778821][T15300] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 573.778849][T15300] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 573.778866][T15300] ucma_write+0x1fb/0x330 [ 573.778899][T15300] ? __pfx_ucma_write+0x10/0x10 [ 573.778933][T15300] ? bpf_lsm_file_permission+0x9/0x10 [ 573.779034][T15300] ? security_file_permission+0x76/0x210 [ 573.779339][T15300] ? rw_verify_area+0xce/0x6d0 [ 573.779469][T15300] vfs_write+0x2aa/0x1070 [ 573.779495][T15300] ? __pfx_ucma_write+0x10/0x10 [ 573.779531][T15300] ? __pfx_vfs_write+0x10/0x10 [ 573.779552][T15300] ? find_held_lock+0x2b/0x80 [ 573.779572][T15300] ? __fget_files+0x215/0x3d0 [ 573.779660][T15300] ? __fget_files+0x215/0x3d0 [ 573.779691][T15300] ? __fget_files+0x21f/0x3d0 [ 573.779727][T15300] ksys_write+0x1f8/0x250 [ 573.779750][T15300] ? __pfx_ksys_write+0x10/0x10 [ 573.779776][T15300] ? rcu_is_watching+0x12/0xc0 [ 573.779870][T15300] do_syscall_64+0x10b/0xf80 [ 573.779895][T15300] ? clear_bhb_loop+0x40/0x90 [ 573.779921][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.779942][T15300] RIP: 0033:0x7f616759c819 [ 573.779964][T15300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.779986][T15300] RSP: 002b:00007f61683f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.780089][T15300] RAX: ffffffffffffffda RBX: 00007f6167815fa0 RCX: 00007f616759c819 [ 573.780103][T15300] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000003 [ 573.780116][T15300] RBP: 00007f61683f1090 R08: 0000000000000000 R09: 0000000000000000 [ 573.780130][T15300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.780142][T15300] R13: 00007f6167816038 R14: 00007f6167815fa0 R15: 00007ffd09fd6e08 [ 573.780173][T15300] [ 574.200051][T15309] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 574.523694][ T5957] Bluetooth: hci0: unexpected event for opcode 0x0019 [ 574.557809][T15324] netlink: 'syz.4.2798': attribute type 2 has an invalid length. [ 574.564650][T15324] netlink: 'syz.4.2798': attribute type 2 has an invalid length. [ 574.839770][ T5957] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 574.845509][ T5957] Bluetooth: hci3: Injecting HCI hardware error event [ 574.912694][ T5957] Bluetooth: hci3: hardware error 0x00 [ 575.098783][ T40] audit: type=1400 audit(1776783846.908:991): avc: denied { bind } for pid=15336 comm="syz.5.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 575.132512][T13687] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 575.140805][ T5964] Bluetooth: hci0: link tx timeout [ 575.186754][ T5964] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 575.424957][T15355] syz_tun: entered allmulticast mode [ 575.428025][T15357] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2805'. [ 575.443833][T15355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2807'. [ 575.471189][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 575.527697][T15350] "syz.3.2805" (15350) uses obsolete ecb(arc4) skcipher [ 575.698591][T15355] syz_tun (unregistering): left allmulticast mode [ 576.148400][T15373] netlink: 'syz.4.2810': attribute type 2 has an invalid length. [ 576.161487][T15373] netlink: 'syz.4.2810': attribute type 2 has an invalid length. [ 576.444310][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2813'. [ 576.593810][ T5964] Bluetooth: hci3: unexpected event for opcode 0x0019 [ 576.799674][ T40] audit: type=1400 audit(1776783848.618:992): avc: denied { mounton } for pid=15381 comm="syz.5.2814" path="/549/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 576.833475][ T1038] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 576.983194][ T1038] usb 5-1: device descriptor read/64, error -71 [ 577.142982][ T5957] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 577.271228][ T1038] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 577.323221][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 577.404066][ T1038] usb 5-1: device descriptor read/64, error -71 [ 577.461477][T15342] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 577.485392][T15342] Bluetooth: hci4: Injecting HCI hardware error event [ 577.501162][ T5957] Bluetooth: hci4: hardware error 0x00 [ 577.515518][ T1038] usb usb5-port1: attempt power cycle [ 577.882303][ T1038] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 577.930761][T15401] dummy0: entered allmulticast mode [ 577.934725][T15400] dummy0: left allmulticast mode [ 577.947974][ T1038] usb 5-1: device descriptor read/8, error -71 [ 578.216978][ T1038] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 578.261813][ T1038] usb 5-1: device descriptor read/8, error -71 [ 578.371610][ T1038] usb usb5-port1: unable to enumerate USB device [ 578.695961][T15422] FAULT_INJECTION: forcing a failure. [ 578.695961][T15422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.713007][T15422] CPU: 3 UID: 0 PID: 15422 Comm: syz.4.2827 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.713040][T15422] Tainted: [L]=SOFTLOCKUP [ 578.713046][T15422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.713057][T15422] Call Trace: [ 578.713066][T15422] [ 578.713077][T15422] dump_stack_lvl+0x100/0x190 [ 578.713111][T15422] should_fail_ex.cold+0x5/0xa [ 578.713150][T15422] _copy_to_user+0x32/0xd0 [ 578.713410][T15422] simple_read_from_buffer+0xcb/0x170 [ 578.713437][T15422] proc_fail_nth_read+0x1af/0x230 [ 578.713558][T15422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.713590][T15422] ? rw_verify_area+0xce/0x6d0 [ 578.713618][T15422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.713648][T15422] vfs_read+0x1e4/0xb30 [ 578.713767][T15422] ? __pfx_vfs_read+0x10/0x10 [ 578.713783][T15422] ? __fget_files+0x215/0x3d0 [ 578.713808][T15422] ? __fget_files+0x21f/0x3d0 [ 578.713869][T15422] ksys_read+0x12a/0x250 [ 578.713886][T15422] ? __pfx_ksys_read+0x10/0x10 [ 578.713904][T15422] ? rcu_is_watching+0x12/0xc0 [ 578.713933][T15422] do_syscall_64+0x10b/0xf80 [ 578.713956][T15422] ? clear_bhb_loop+0x40/0x90 [ 578.713976][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.713993][T15422] RIP: 0033:0x7f616755d04e [ 578.714009][T15422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.714025][T15422] RSP: 002b:00007f61683f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.714042][T15422] RAX: ffffffffffffffda RBX: 00007f61683f16c0 RCX: 00007f616755d04e [ 578.714052][T15422] RDX: 000000000000000f RSI: 00007f61683f10a0 RDI: 0000000000000004 [ 578.714062][T15422] RBP: 00007f61683f1090 R08: 0000000000000000 R09: 0000000000000000 [ 578.714071][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.714081][T15422] R13: 00007f6167816038 R14: 00007f6167815fa0 R15: 00007ffd09fd6e08 [ 578.714103][T15422] [ 579.108709][ T40] audit: type=1400 audit(1776783850.928:993): avc: denied { connect } for pid=15428 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 579.277296][ T40] audit: type=1400 audit(1776783851.098:994): avc: denied { read } for pid=15428 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 579.727342][ T5957] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 579.747342][T15437] FAULT_INJECTION: forcing a failure. [ 579.747342][T15437] name failslab, interval 1, probability 0, space 0, times 0 [ 579.788585][T15437] CPU: 0 UID: 0 PID: 15437 Comm: syz.0.2831 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.788616][T15437] Tainted: [L]=SOFTLOCKUP [ 579.788622][T15437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.788632][T15437] Call Trace: [ 579.788639][T15437] [ 579.788646][T15437] dump_stack_lvl+0x100/0x190 [ 579.788676][T15437] should_fail_ex.cold+0x5/0xa [ 579.788703][T15437] should_failslab+0xc2/0x120 [ 579.788722][T15437] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 579.788749][T15437] ? __alloc_skb+0x140/0x710 [ 579.788890][T15437] __alloc_skb+0x140/0x710 [ 579.788911][T15437] ? __alloc_skb+0x5b7/0x710 [ 579.788933][T15437] ? __pfx___alloc_skb+0x10/0x10 [ 579.788963][T15437] _sctp_make_chunk+0x51/0x270 [ 579.789081][T15437] sctp_make_control+0x2f/0x2d0 [ 579.789106][T15437] sctp_make_heartbeat+0xad/0x2f0 [ 579.789130][T15437] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 579.789159][T15437] ? is_bpf_text_address+0x94/0x1a0 [ 579.789266][T15437] ? sctp_sm_lookup_event+0x10e/0x520 [ 579.789384][T15437] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 579.789409][T15437] ? __pfx_sctp_pname+0x10/0x10 [ 579.789434][T15437] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 579.789456][T15437] ? __pfx_sctp_pname+0x10/0x10 [ 579.789479][T15437] sctp_do_sm+0x17a/0x5be0 [ 579.789502][T15437] ? __pfx_stack_trace_save+0x10/0x10 [ 579.789591][T15437] ? stack_depot_save_flags+0x27/0x9d0 [ 579.789691][T15437] ? _parse_integer_limit+0x17f/0x1d0 [ 579.789721][T15437] ? __pfx_sctp_do_sm+0x10/0x10 [ 579.789740][T15437] ? kasan_save_stack+0x30/0x50 [ 579.789766][T15437] ? kasan_save_track+0x14/0x30 [ 579.789790][T15437] ? __kasan_kmalloc+0xaa/0xb0 [ 579.789853][T15437] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 579.789882][T15437] ? sctp_setsockopt+0x511/0xb370 [ 579.789936][T15437] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 579.789962][T15437] sctp_apply_peer_addr_params+0x110/0x3690 [ 579.789999][T15437] sctp_setsockopt+0x28d6/0xb370 [ 579.790026][T15437] ? __pfx_sctp_setsockopt+0x10/0x10 [ 579.790047][T15437] ? __fget_files+0x215/0x3d0 [ 579.790074][T15437] ? selinux_socket_setsockopt+0x6a/0x80 [ 579.790093][T15437] ? sock_common_setsockopt+0x2e/0xf0 [ 579.790125][T15437] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 579.790165][T15437] do_sock_setsockopt+0xf3/0x1d0 [ 579.790199][T15437] __sys_setsockopt+0x195/0x220 [ 579.790228][T15437] __x64_sys_setsockopt+0xbd/0x160 [ 579.790249][T15437] ? do_syscall_64+0x90/0xf80 [ 579.790271][T15437] ? lockdep_hardirqs_on+0x78/0x100 [ 579.790379][T15437] do_syscall_64+0x10b/0xf80 [ 579.790401][T15437] ? clear_bhb_loop+0x40/0x90 [ 579.790426][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.790444][T15437] RIP: 0033:0x7f0d2c59c819 [ 579.790463][T15437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.790480][T15437] RSP: 002b:00007f0d2d523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.790499][T15437] RAX: ffffffffffffffda RBX: 00007f0d2c815fa0 RCX: 00007f0d2c59c819 [ 579.790511][T15437] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 579.790523][T15437] RBP: 00007f0d2d523090 R08: 000000000000009c R09: 0000000000000000 [ 579.790533][T15437] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 579.790542][T15437] R13: 00007f0d2c816038 R14: 00007f0d2c815fa0 R15: 00007ffcfff93e08 [ 579.790595][T15437] [ 580.502163][T15454] netlink: 'syz.4.2838': attribute type 2 has an invalid length. [ 580.518121][T15454] netlink: 'syz.4.2838': attribute type 2 has an invalid length. [ 580.581586][T15456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2839'. [ 580.747864][ T40] audit: type=1400 audit(1776783852.568:995): avc: denied { mounton } for pid=15461 comm="syz.3.2842" path="/70/file1/file0" dev="autofs" ino=61331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 581.376650][T15479] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 581.492460][T15484] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 581.495499][T15484] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 581.670869][T15490] fuse: blksize only supported for fuseblk [ 581.911126][ T40] audit: type=1400 audit(1776783853.728:996): avc: denied { ioctl } for pid=15498 comm="syz.0.2855" path="socket:[64573]" dev="sockfs" ino=64573 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 582.501352][T15514] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 582.899014][T15526] tipc: Enabled bearer , priority 0 [ 583.056558][T15521] tipc: Disabling bearer [ 583.275317][T15534] xt_hashlimit: size too large, truncated to 1048576 [ 583.322598][T15536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2868'. [ 583.354674][T15537] Mount JFS Failure: -5 [ 583.357263][T15537] jfs_mount failed w/return code = -5 [ 583.584263][T15544] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 583.641731][T15543] hpfs: Bad magic ... probably not HPFS [ 583.673853][T15539] hpfs: Bad magic ... probably not HPFS [ 584.263521][T15562] fuse: Bad value for 'fd' [ 585.222716][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 585.261302][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 585.269056][T15579] netlink: 'syz.4.2882': attribute type 12 has an invalid length. [ 585.846976][T15594] FAULT_INJECTION: forcing a failure. [ 585.846976][T15594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.848258][T15597] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 585.872035][T15594] CPU: 3 UID: 0 PID: 15594 Comm: syz.3.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.872073][T15594] Tainted: [L]=SOFTLOCKUP [ 585.872082][T15594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 585.872095][T15594] Call Trace: [ 585.872104][T15594] [ 585.872112][T15594] dump_stack_lvl+0x100/0x190 [ 585.872158][T15594] should_fail_ex.cold+0x5/0xa [ 585.872191][T15594] _copy_to_user+0x32/0xd0 [ 585.872222][T15594] io_uring_setup.cold+0x14be/0x1cde [ 585.872363][T15594] ? __pfx_io_uring_setup+0x10/0x10 [ 585.872394][T15594] ? find_held_lock+0x2b/0x80 [ 585.872438][T15594] ? ksys_write+0x1ac/0x250 [ 585.872469][T15594] ? __pfx_ksys_write+0x10/0x10 [ 585.872498][T15594] __x64_sys_io_uring_setup+0xc2/0x170 [ 585.872531][T15594] do_syscall_64+0x10b/0xf80 [ 585.872558][T15594] ? clear_bhb_loop+0x40/0x90 [ 585.872586][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.872609][T15594] RIP: 0033:0x7f907099c819 [ 585.872630][T15594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.872649][T15594] RSP: 002b:00007f907178efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 585.872669][T15594] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f907099c819 [ 585.872680][T15594] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 585.872691][T15594] RBP: 00007f907178f090 R08: 0000000000000000 R09: 0000000000000101 [ 585.872700][T15594] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 585.872711][T15594] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007fff371d67c8 [ 585.872735][T15594] [ 586.022824][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2889'. [ 586.226555][T15604] FAULT_INJECTION: forcing a failure. [ 586.226555][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 586.252859][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.0.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.252897][T15604] Tainted: [L]=SOFTLOCKUP [ 586.252904][T15604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 586.252918][T15604] Call Trace: [ 586.252927][T15604] [ 586.252936][T15604] dump_stack_lvl+0x100/0x190 [ 586.252971][T15604] should_fail_ex.cold+0x5/0xa [ 586.253003][T15604] should_failslab+0xc2/0x120 [ 586.253027][T15604] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 586.253058][T15604] ? sctp_chunkify+0x51/0x2f0 [ 586.253085][T15604] ? __pfx___alloc_skb+0x10/0x10 [ 586.253117][T15604] sctp_chunkify+0x51/0x2f0 [ 586.253145][T15604] _sctp_make_chunk+0x148/0x270 [ 586.253173][T15604] sctp_make_control+0x2f/0x2d0 [ 586.253201][T15604] sctp_make_heartbeat+0xad/0x2f0 [ 586.253238][T15604] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 586.253265][T15604] ? is_bpf_text_address+0x94/0x1a0 [ 586.253299][T15604] ? sctp_sm_lookup_event+0x10e/0x520 [ 586.253328][T15604] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 586.253358][T15604] ? __pfx_sctp_pname+0x10/0x10 [ 586.253386][T15604] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 586.253411][T15604] ? __pfx_sctp_pname+0x10/0x10 [ 586.253437][T15604] sctp_do_sm+0x17a/0x5be0 [ 586.253463][T15604] ? __pfx_stack_trace_save+0x10/0x10 [ 586.253487][T15604] ? stack_depot_save_flags+0x27/0x9d0 [ 586.253517][T15604] ? _parse_integer_limit+0x17f/0x1d0 [ 586.253553][T15604] ? __pfx_sctp_do_sm+0x10/0x10 [ 586.253577][T15604] ? kasan_save_stack+0x30/0x50 [ 586.253608][T15604] ? kasan_save_track+0x14/0x30 [ 586.253637][T15604] ? __kasan_kmalloc+0xaa/0xb0 [ 586.253666][T15604] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 586.253697][T15604] ? sctp_setsockopt+0x511/0xb370 [ 586.253760][T15604] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 586.253823][T15604] sctp_apply_peer_addr_params+0x110/0x3690 [ 586.253865][T15604] sctp_setsockopt+0x28d6/0xb370 [ 586.253896][T15604] ? __pfx_sctp_setsockopt+0x10/0x10 [ 586.253919][T15604] ? __fget_files+0x215/0x3d0 [ 586.253949][T15604] ? selinux_socket_setsockopt+0x6a/0x80 [ 586.253971][T15604] ? sock_common_setsockopt+0x2e/0xf0 [ 586.254004][T15604] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 586.254040][T15604] do_sock_setsockopt+0xf3/0x1d0 [ 586.254077][T15604] __sys_setsockopt+0x195/0x220 [ 586.254111][T15604] __x64_sys_setsockopt+0xbd/0x160 [ 586.254137][T15604] ? do_syscall_64+0x90/0xf80 [ 586.254163][T15604] ? lockdep_hardirqs_on+0x78/0x100 [ 586.254190][T15604] do_syscall_64+0x10b/0xf80 [ 586.254219][T15604] ? clear_bhb_loop+0x40/0x90 [ 586.254246][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.254267][T15604] RIP: 0033:0x7f0d2c59c819 [ 586.254287][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.254306][T15604] RSP: 002b:00007f0d2d523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 586.254324][T15604] RAX: ffffffffffffffda RBX: 00007f0d2c815fa0 RCX: 00007f0d2c59c819 [ 586.254335][T15604] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 586.254344][T15604] RBP: 00007f0d2d523090 R08: 000000000000009c R09: 0000000000000000 [ 586.254355][T15604] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 586.254365][T15604] R13: 00007f0d2c816038 R14: 00007f0d2c815fa0 R15: 00007ffcfff93e08 [ 586.254391][T15604] [ 586.533168][ T40] audit: type=1400 audit(1776783858.218:997): avc: denied { append } for pid=15609 comm="syz.3.2892" path="socket:[66591]" dev="sockfs" ino=66591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.456356][T15637] tipc: Enabled bearer , priority 0 [ 587.520247][T15637] tipc: Disabling bearer [ 587.621957][T15646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2903'. [ 588.123701][ T40] audit: type=1400 audit(1776783859.948:998): avc: denied { append } for pid=15656 comm="syz.3.2906" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 588.203696][T15658] efs: device does not support 512 byte blocks [ 588.211728][T15658] device does not support 512 byte blocks [ 588.211728][T15658] [ 588.743236][T15671] bridge_slave_1: left allmulticast mode [ 588.748747][T15671] bridge_slave_1: left promiscuous mode [ 588.772991][T15671] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.794418][T15671] bridge_slave_0: left allmulticast mode [ 588.835851][T15671] bridge_slave_0: left promiscuous mode [ 588.873621][T15671] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.945562][ T40] audit: type=1804 audit(1776783860.738:999): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2910" name="/newroot/60/file0/file0" dev="9p" ino=72876143 res=1 errno=0 [ 589.306254][T15680] tipc: Cannot configure node identity twice [ 589.327879][T15680] binder: 15678:15680 ioctl c0bc5351 2000000001c0 returned -22 [ 589.338303][T15680] binder_alloc: 15678: binder_alloc_buf, no vma [ 589.870374][T15694] ip6erspan0: entered promiscuous mode [ 590.026830][T15699] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 590.206263][ T40] audit: type=1400 audit(1776783862.018:1000): avc: denied { accept } for pid=15698 comm="syz.5.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 590.215757][T15699] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 590.405532][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 590.451476][T15704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 590.899360][ T40] audit: type=1400 audit(1776783862.718:1001): avc: denied { mounton } for pid=15713 comm="syz.3.2927" path="/88/file3" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 590.899373][T15714] cgroup: Invalid name [ 591.229978][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 591.402381][T15735] tmpfs: Too few inodes for current use [ 591.468439][T15742] binder_alloc: 15741: binder_alloc_buf, no vma [ 591.582203][T15749] gfs2: error -5 reading superblock [ 592.398018][T15771] tipc: Started in network mode [ 592.402386][T15771] tipc: Node identity 4eace1d3991a, cluster identity 4711 [ 592.406261][T15771] tipc: Enabled bearer , priority 0 [ 592.419240][T15771] tipc: Disabling bearer [ 592.725882][T15792] Cannot find set identified by id 0 to match [ 592.903344][T12636] wlan1: Trigger new scan to find an IBSS to join [ 592.984860][T15810] binder: BINDER_SET_CONTEXT_MGR already set [ 592.996011][T15810] binder: 15808:15810 ioctl 4018620d 200000000100 returned -16 [ 593.115380][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2960'. [ 593.498797][ T40] audit: type=1400 audit(1776783865.318:1002): avc: denied { getopt } for pid=15824 comm="syz.5.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 593.729871][T15831] bond1 (unregistering): Released all slaves [ 593.739627][T15833] FAULT_INJECTION: forcing a failure. [ 593.739627][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 593.745211][T15833] CPU: 3 UID: 0 PID: 15833 Comm: syz.5.2963 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.745232][T15833] Tainted: [L]=SOFTLOCKUP [ 593.745236][T15833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.745244][T15833] Call Trace: [ 593.745396][T15833] [ 593.745402][T15833] dump_stack_lvl+0x100/0x190 [ 593.746410][T15833] should_fail_ex.cold+0x5/0xa [ 593.746613][T15833] should_failslab+0xc2/0x120 [ 593.746900][T15833] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 593.747073][T15833] ? alloc_inode+0x183/0x250 [ 593.747185][T15833] alloc_inode+0x183/0x250 [ 593.747195][T15833] alloc_anon_inode+0x2a/0x3e0 [ 593.747213][T15833] anon_inode_make_secure_inode+0x2f/0x140 [ 593.747362][T15833] __anon_inode_getfile+0x1cf/0x280 [ 593.747382][T15833] ? _copy_to_user+0xaf/0xd0 [ 593.747783][T15833] io_uring_setup.cold+0x19c9/0x1cde [ 593.747851][T15833] ? __pfx_io_uring_setup+0x10/0x10 [ 593.747869][T15833] ? find_held_lock+0x2b/0x80 [ 593.748008][T15833] ? ksys_write+0x1ac/0x250 [ 593.748112][T15833] ? __pfx_ksys_write+0x10/0x10 [ 593.748126][T15833] __x64_sys_io_uring_setup+0xc2/0x170 [ 593.748143][T15833] do_syscall_64+0x10b/0xf80 [ 593.748248][T15833] ? clear_bhb_loop+0x40/0x90 [ 593.748273][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.748290][T15833] RIP: 0033:0x7f055799c819 [ 593.748378][T15833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.748389][T15833] RSP: 002b:00007f0555bd4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 593.748497][T15833] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f055799c819 [ 593.748504][T15833] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 593.748510][T15833] RBP: 00007f0555bd5090 R08: 0000000000000000 R09: 0000000000000101 [ 593.748516][T15833] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 593.748523][T15833] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007fff00b9ca78 [ 593.748537][T15833] [ 594.014294][T15843] FAULT_INJECTION: forcing a failure. [ 594.014294][T15843] name failslab, interval 1, probability 0, space 0, times 0 [ 594.018995][T15843] CPU: 2 UID: 0 PID: 15843 Comm: syz.3.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.019014][T15843] Tainted: [L]=SOFTLOCKUP [ 594.019021][T15843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 594.019028][T15843] Call Trace: [ 594.019032][T15843] [ 594.019037][T15843] dump_stack_lvl+0x100/0x190 [ 594.019058][T15843] should_fail_ex.cold+0x5/0xa [ 594.019075][T15843] should_failslab+0xc2/0x120 [ 594.019088][T15843] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 594.019105][T15843] ? __alloc_skb+0x140/0x710 [ 594.019395][T15843] __alloc_skb+0x140/0x710 [ 594.019416][T15843] ? __alloc_skb+0x5b7/0x710 [ 594.019435][T15843] ? __pfx___alloc_skb+0x10/0x10 [ 594.019457][T15843] ? __lock_acquire+0x4a5/0x2630 [ 594.019479][T15843] sctp_packet_transmit+0x1d3/0x3060 [ 594.019589][T15843] ? sctp_outq_flush+0xb11/0x3350 [ 594.019608][T15843] ? sctp_outq_flush+0xb11/0x3350 [ 594.019630][T15843] sctp_outq_flush+0xb2b/0x3350 [ 594.019652][T15843] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 594.019670][T15843] ? is_bpf_text_address+0x94/0x1a0 [ 594.019754][T15843] ? __pfx_sctp_outq_flush+0x10/0x10 [ 594.019768][T15843] ? __asan_memcpy+0x3c/0x60 [ 594.019790][T15843] ? sctp_do_8_2_transport_strike.isra.0+0x89e/0xcd0 [ 594.019911][T15843] sctp_do_sm+0xce1/0x5be0 [ 594.019940][T15843] ? __pfx_sctp_do_sm+0x10/0x10 [ 594.019956][T15843] ? kasan_save_stack+0x30/0x50 [ 594.019974][T15843] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 594.019992][T15843] ? sctp_setsockopt+0x511/0xb370 [ 594.020020][T15843] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 594.020035][T15843] sctp_apply_peer_addr_params+0x110/0x3690 [ 594.020055][T15843] sctp_setsockopt+0x28d6/0xb370 [ 594.020070][T15843] ? __pfx_sctp_setsockopt+0x10/0x10 [ 594.020082][T15843] ? __fget_files+0x215/0x3d0 [ 594.020097][T15843] ? selinux_socket_setsockopt+0x6a/0x80 [ 594.020249][T15843] ? sock_common_setsockopt+0x2e/0xf0 [ 594.020267][T15843] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 594.020285][T15843] do_sock_setsockopt+0xf3/0x1d0 [ 594.020304][T15843] __sys_setsockopt+0x195/0x220 [ 594.020321][T15843] __x64_sys_setsockopt+0xbd/0x160 [ 594.020335][T15843] ? do_syscall_64+0x90/0xf80 [ 594.020349][T15843] ? lockdep_hardirqs_on+0x78/0x100 [ 594.020436][T15843] do_syscall_64+0x10b/0xf80 [ 594.020448][T15843] ? clear_bhb_loop+0x40/0x90 [ 594.020463][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.020474][T15843] RIP: 0033:0x7f907099c819 [ 594.020486][T15843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.020497][T15843] RSP: 002b:00007f90717b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 594.020509][T15843] RAX: ffffffffffffffda RBX: 00007f9070c15fa0 RCX: 00007f907099c819 [ 594.020516][T15843] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 594.020522][T15843] RBP: 00007f90717b0090 R08: 000000000000009c R09: 0000000000000000 [ 594.020529][T15843] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 594.020535][T15843] R13: 00007f9070c16038 R14: 00007f9070c15fa0 R15: 00007fff371d67c8 [ 594.020549][T15843] [ 594.077992][ T40] audit: type=1400 audit(1776783865.898:1003): avc: denied { accept } for pid=15844 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 594.271768][T15854] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 594.290988][T15854] CPU: 3 UID: 0 PID: 15854 Comm: syz.3.2970 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.291023][T15854] Tainted: [L]=SOFTLOCKUP [ 594.291028][T15854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 594.291036][T15854] Call Trace: [ 594.291042][T15854] [ 594.291049][T15854] dump_stack_lvl+0x100/0x190 [ 594.291071][T15854] sysfs_warn_dup.cold+0x1c/0x28 [ 594.291177][T15854] sysfs_do_create_link_sd+0x113/0x140 [ 594.291263][T15854] sysfs_create_link+0x61/0xc0 [ 594.291279][T15854] device_add+0x675/0x1950 [ 594.291610][T15854] ? __pfx_device_add+0x10/0x10 [ 594.291629][T15854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.291709][T15854] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 594.291732][T15854] wiphy_register+0x1edd/0x2d90 [ 594.291747][T15854] ? __rtnl_unlock+0xb9/0xf0 [ 594.291849][T15854] ? __pfx_wiphy_register+0x10/0x10 [ 594.291863][T15854] ? __asan_memset+0x23/0x50 [ 594.291882][T15854] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 594.291972][T15854] ieee80211_register_hw+0x3055/0x4570 [ 594.292064][T15854] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 594.292081][T15854] ? __pfx___debug_object_init+0x10/0x10 [ 594.292188][T15854] ? find_held_lock+0x2b/0x80 [ 594.292203][T15854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.292218][T15854] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 594.292432][T15854] ? __hrtimer_setup+0x208/0x330 [ 594.292507][T15854] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 594.292539][T15854] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 594.292561][T15854] ? __asan_memcpy+0x3c/0x60 [ 594.292582][T15854] hwsim_new_radio_nl+0xc5f/0x1370 [ 594.292602][T15854] ? rcu_is_watching+0x12/0xc0 [ 594.292691][T15854] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 594.292716][T15854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 594.292794][T15854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 594.292814][T15854] genl_family_rcv_msg_doit+0x214/0x300 [ 594.292832][T15854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 594.292853][T15854] ? bpf_lsm_capable+0x9/0x10 [ 594.292921][T15854] ? security_capable+0x80/0x260 [ 594.292999][T15854] ? ns_capable+0xd2/0xf0 [ 594.293137][T15854] genl_rcv_msg+0x560/0x800 [ 594.293180][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 594.293204][T15854] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 594.293236][T15854] netlink_rcv_skb+0x159/0x420 [ 594.293255][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 594.293275][T15854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.293299][T15854] ? netlink_deliver_tap+0x1ae/0xcc0 [ 594.293406][T15854] genl_rcv+0x28/0x40 [ 594.293430][T15854] netlink_unicast+0x585/0x850 [ 594.293450][T15854] ? __pfx_netlink_unicast+0x10/0x10 [ 594.293473][T15854] netlink_sendmsg+0x8b0/0xda0 [ 594.293493][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.293578][T15854] ? __might_fault+0x30/0x140 [ 594.293612][T15854] ____sys_sendmsg+0x9e1/0xb70 [ 594.293631][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.293650][T15854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.293666][T15854] ? preempt_schedule_thunk+0x16/0x30 [ 594.293699][T15854] ? try_to_wake_up+0x5f6/0x1900 [ 594.293720][T15854] ___sys_sendmsg+0x190/0x1e0 [ 594.293775][T15854] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.293799][T15854] ? futex_private_hash_put+0x107/0x1c0 [ 594.293853][T15854] __sys_sendmsg+0x170/0x220 [ 594.293883][T15854] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.293904][T15854] ? __x64_sys_futex+0x34f/0x4d0 [ 594.293938][T15854] ? rcu_is_watching+0x12/0xc0 [ 594.293969][T15854] do_syscall_64+0x10b/0xf80 [ 594.293992][T15854] ? clear_bhb_loop+0x40/0x90 [ 594.294015][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.294034][T15854] RIP: 0033:0x7f907099c819 [ 594.294053][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.294072][T15854] RSP: 002b:00007f907176e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.294093][T15854] RAX: ffffffffffffffda RBX: 00007f9070c16180 RCX: 00007f907099c819 [ 594.294104][T15854] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 594.294115][T15854] RBP: 00007f9070a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 594.294125][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.294136][T15854] R13: 00007f9070c16218 R14: 00007f9070c16180 R15: 00007fff371d67c8 [ 594.294163][T15854] [ 594.550564][ T40] audit: type=1400 audit(1776783866.368:1004): avc: denied { read } for pid=15869 comm="syz.4.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 594.719816][T15879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15879 comm=syz.4.2981 [ 594.918543][ T40] audit: type=1804 audit(1776783866.738:1005): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2987" name="file0" dev="ramfs" ino=66238 res=1 errno=0 [ 595.013978][T15898] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2988'. [ 595.018487][T15898] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2988'. [ 595.022732][T15899] FAULT_INJECTION: forcing a failure. [ 595.022732][T15899] name failslab, interval 1, probability 0, space 0, times 0 [ 595.022768][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.4.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.022792][T15899] Tainted: [L]=SOFTLOCKUP [ 595.022798][T15899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 595.022809][T15899] Call Trace: [ 595.022815][T15899] [ 595.022823][T15899] dump_stack_lvl+0x100/0x190 [ 595.022852][T15899] should_fail_ex.cold+0x5/0xa [ 595.022879][T15899] should_failslab+0xc2/0x120 [ 595.022898][T15899] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 595.022924][T15899] ? alloc_empty_file+0x5b/0x1c0 [ 595.022955][T15899] alloc_empty_file+0x5b/0x1c0 [ 595.022980][T15899] alloc_file_pseudo+0x13a/0x230 [ 595.023006][T15899] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 595.023032][T15899] ? security_inode_init_security_anon+0x7b/0x230 [ 595.023089][T15899] __anon_inode_getfile+0xe8/0x280 [ 595.023119][T15899] ? _copy_to_user+0xaf/0xd0 [ 595.023141][T15899] io_uring_setup.cold+0x19c9/0x1cde [ 595.023162][T15899] ? __pfx_io_uring_setup+0x10/0x10 [ 595.023186][T15899] ? find_held_lock+0x2b/0x80 [ 595.023221][T15899] ? ksys_write+0x1ac/0x250 [ 595.023238][T15899] ? __pfx_ksys_write+0x10/0x10 [ 595.023260][T15899] __x64_sys_io_uring_setup+0xc2/0x170 [ 595.023286][T15899] do_syscall_64+0x10b/0xf80 [ 595.023308][T15899] ? clear_bhb_loop+0x40/0x90 [ 595.023336][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.023356][T15899] RIP: 0033:0x7f616759c819 [ 595.023372][T15899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.023389][T15899] RSP: 002b:00007f61683cffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 595.023407][T15899] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f616759c819 [ 595.023418][T15899] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 595.023429][T15899] RBP: 00007f61683d0090 R08: 0000000000000000 R09: 0000000000000101 [ 595.023439][T15899] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 595.023449][T15899] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffd09fd6e08 [ 595.023475][T15899] [ 595.248607][T15909] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 596.221262][T15929] tipc: Enabling of bearer rejected, already enabled [ 596.400382][ T40] audit: type=1400 audit(1776783868.218:1006): avc: denied { create } for pid=15939 comm="syz.3.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 596.410070][ T40] audit: type=1400 audit(1776783868.228:1007): avc: denied { write } for pid=15939 comm="syz.3.3003" path="socket:[66986]" dev="sockfs" ino=66986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 596.474101][T15945] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 596.911364][ T50] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 597.052309][ T50] usb 8-1: device descriptor read/64, error -71 [ 597.088268][T15961] tmpfs: Bad value for 'mpol' [ 597.291095][ T50] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 597.375200][T15991] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 597.383282][ T40] audit: type=1400 audit(1776783869.208:1008): avc: denied { accept } for pid=15988 comm="syz.5.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 597.390106][T15991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.398838][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 597.403491][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 597.421033][ T50] usb 8-1: device descriptor read/64, error -71 [ 597.479361][ T1344] libceph: connect (1)[c::]:6789 error -101 [ 597.483285][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 597.495228][T16004] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3025'. [ 597.508118][ T1344] libceph: connect (1)[c::]:6789 error -101 [ 597.520344][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 597.521526][T15999] ceph: No mds server is up or the cluster is laggy [ 597.533035][ T50] usb usb8-port1: attempt power cycle [ 597.535761][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 597.539951][ T40] audit: type=1400 audit(1776783869.358:1009): avc: denied { accept } for pid=15990 comm="syz.0.3023" path="socket:[67633]" dev="sockfs" ino=67633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 597.552706][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'. [ 597.655120][T16012] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 597.795577][T16027] hugetlbfs: Unknown parameter 'huge' [ 597.849284][T16031] FAULT_INJECTION: forcing a failure. [ 597.849284][T16031] name failslab, interval 1, probability 0, space 0, times 0 [ 597.853871][ T107] wlan1: Trigger new scan to find an IBSS to join [ 597.859028][T16031] CPU: 2 UID: 0 PID: 16031 Comm: syz.4.3030 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.859049][T16031] Tainted: [L]=SOFTLOCKUP [ 597.859053][T16031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 597.859061][T16031] Call Trace: [ 597.859066][T16031] [ 597.859071][T16031] dump_stack_lvl+0x100/0x190 [ 597.859092][T16031] should_fail_ex.cold+0x5/0xa [ 597.859115][T16031] should_failslab+0xc2/0x120 [ 597.859129][T16031] __kmalloc_cache_noprof+0x7a/0x6f0 [ 597.859146][T16031] ? io_uring_alloc_task_context+0x1a3/0x51f [ 597.859162][T16031] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 597.859271][T16031] io_uring_alloc_task_context+0x1a3/0x51f [ 597.859296][T16031] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 597.859317][T16031] ? alloc_file_pseudo+0x1a5/0x230 [ 597.859337][T16031] __io_uring_add_tctx_node.cold+0x15/0x171 [ 597.859349][T16031] ? security_inode_init_security_anon+0x7b/0x230 [ 597.859364][T16031] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 597.859380][T16031] ? __anon_inode_getfile+0x17c/0x280 [ 597.859402][T16031] io_uring_setup.cold+0x1a0b/0x1cde [ 597.859416][T16031] ? __pfx_io_uring_setup+0x10/0x10 [ 597.859433][T16031] ? find_held_lock+0x2b/0x80 [ 597.859455][T16031] ? ksys_write+0x1ac/0x250 [ 597.859466][T16031] ? __pfx_ksys_write+0x10/0x10 [ 597.859480][T16031] __x64_sys_io_uring_setup+0xc2/0x170 [ 597.859498][T16031] do_syscall_64+0x10b/0xf80 [ 597.859514][T16031] ? clear_bhb_loop+0x40/0x90 [ 597.859529][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.859541][T16031] RIP: 0033:0x7f616759c819 [ 597.859553][T16031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.859564][T16031] RSP: 002b:00007f61683cffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 597.859577][T16031] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f616759c819 [ 597.859585][T16031] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 597.859592][T16031] RBP: 00007f61683d0090 R08: 0000000000000000 R09: 0000000000000101 [ 597.859599][T16031] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 597.859606][T16031] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffd09fd6e08 [ 597.859620][T16031] [ 597.891073][ T50] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 597.971815][ T50] usb 8-1: device descriptor read/8, error -71 [ 598.017857][T16033] infiniband syz2: set down [ 598.020087][T16033] infiniband syz2: added ipvlan1 [ 598.031172][T16033] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 598.036944][T16033] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 598.043790][T16033] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 598.071772][T16033] RDS/IB: syz2: added [ 598.073686][T16033] smc: adding ib device syz2 with port count 1 [ 598.076528][T16033] smc: ib device syz2 port 1 has no pnetid [ 598.101235][ T1344] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 598.221155][ T50] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 598.231426][ T1344] usb 10-1: device descriptor read/64, error -71 [ 598.251579][ T50] usb 8-1: device descriptor read/8, error -71 [ 598.361403][ T50] usb usb8-port1: unable to enumerate USB device [ 598.501513][ T1344] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 598.641196][ T1344] usb 10-1: device descriptor read/64, error -71 [ 598.761477][ T1344] usb usb10-port1: attempt power cycle [ 598.816790][ T3740] wlan1: Creating new IBSS network, BSSID 82:55:ca:ea:26:56 [ 598.881003][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 599.043125][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.048190][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.054671][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.058502][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.101144][ T1344] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 599.121626][ T1344] usb 10-1: device descriptor read/8, error -71 [ 599.279164][ T9] usb 5-1: usb_control_msg returned -32 [ 599.282179][ T9] usbtmc 5-1:16.0: can't read capabilities [ 599.302603][ T9] usb 5-1: USB disconnect, device number 30 [ 599.336907][T16068] sctp: [Deprecated]: syz.4.3047 (pid 16068) Use of int in maxseg socket option. [ 599.336907][T16068] Use struct sctp_assoc_value instead [ 599.353667][ T40] audit: type=1400 audit(1776783871.178:1010): avc: denied { execute } for pid=16066 comm="syz.4.3047" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 599.361182][ T1344] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 599.365324][ T40] audit: type=1400 audit(1776783871.188:1011): avc: denied { lock } for pid=16066 comm="syz.4.3047" path="socket:[65354]" dev="sockfs" ino=65354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 599.365975][T16068] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 599.384899][T16068] SELinux: failed to load policy [ 599.401662][ T1344] usb 10-1: device descriptor read/8, error -71 [ 599.448987][T16075] kvm: pic: non byte write [ 599.455905][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 599.459343][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 599.494335][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 599.497843][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 599.511363][ T1344] usb usb10-port1: unable to enumerate USB device [ 599.546063][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 600.473153][T16104] FAULT_INJECTION: forcing a failure. [ 600.473153][T16104] name failslab, interval 1, probability 0, space 0, times 0 [ 600.479163][T16104] CPU: 3 UID: 0 PID: 16104 Comm: syz.4.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.479190][T16104] Tainted: [L]=SOFTLOCKUP [ 600.479196][T16104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.479204][T16104] Call Trace: [ 600.479210][T16104] [ 600.479218][T16104] dump_stack_lvl+0x100/0x190 [ 600.479251][T16104] should_fail_ex.cold+0x5/0xa [ 600.479287][T16104] should_failslab+0xc2/0x120 [ 600.479308][T16104] __kmalloc_cache_noprof+0x7a/0x6f0 [ 600.479333][T16104] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 600.479357][T16104] ? alloc_file_pseudo+0x1a5/0x230 [ 600.479389][T16104] __io_uring_add_tctx_node+0x1ac/0x4c0 [ 600.479413][T16104] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 600.479434][T16104] ? __anon_inode_getfile+0x17c/0x280 [ 600.479467][T16104] io_uring_setup.cold+0x1a0b/0x1cde [ 600.479492][T16104] ? __pfx_io_uring_setup+0x10/0x10 [ 600.479519][T16104] ? find_held_lock+0x2b/0x80 [ 600.479556][T16104] ? ksys_write+0x1ac/0x250 [ 600.479577][T16104] ? __pfx_ksys_write+0x10/0x10 [ 600.479602][T16104] __x64_sys_io_uring_setup+0xc2/0x170 [ 600.479630][T16104] do_syscall_64+0x10b/0xf80 [ 600.479654][T16104] ? clear_bhb_loop+0x40/0x90 [ 600.479678][T16104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.479698][T16104] RIP: 0033:0x7f616759c819 [ 600.479714][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.479730][T16104] RSP: 002b:00007f61683cffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 600.479750][T16104] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f616759c819 [ 600.479762][T16104] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 600.479774][T16104] RBP: 00007f61683d0090 R08: 0000000000000000 R09: 0000000000000101 [ 600.479785][T16104] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 600.479797][T16104] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffd09fd6e08 [ 600.479822][T16104] [ 600.570096][T16104] ------------[ cut here ]------------ [ 600.572571][T16104] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 600.572585][T16104] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#3: syz.4.3058/16104 [ 600.580372][T16104] Modules linked in: SYZFAIL: failed to recv rpc [ 600.582416][T16104] CPU: 3 UID: 0 PID: 16104 Comm: syz.4.3058 Tainted: G L syzkaller #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.587284][T16104] Tainted: [L]=SOFTLOCKUP [ 600.588109][ T40] audit: type=1400 audit(1776783872.408:1012): avc: denied { write } for pid=5888 comm="syz-executor" path="pipe:[6055]" dev="pipefs" ino=6055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 600.589346][T16104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.589363][T16104] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 600.606814][T16104] Code: ff e8 cd c4 14 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 0d bf 14 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 aa c4 14 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 bc 7d 82 fd e9 72 f8 ff ff 48 8b 3c 24 [ 600.614651][T16104] RSP: 0018:ffffc9000502fb50 EFLAGS: 00010293 [ 600.617509][T16104] RAX: 0000000000000000 RBX: ffff888034511000 RCX: ffffffff84f4ae36 [ 600.621100][T16104] RDX: ffff8880328c4a00 RSI: ffffffff84f4b636 RDI: ffff8880328c4a00 [ 600.624741][T16104] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 600.628090][T16104] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000a05f8c [ 600.631512][T16104] R13: 0000000000000000 R14: ffff8880328c5368 R15: ffff88802bc9cc18 [ 600.634745][T16104] FS: 00007f61683d06c0(0000) GS:ffff8880d65e1000(0000) knlGS:0000000000000000 [ 600.639072][T16104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.642064][T16104] CR2: 00007f61683cfff8 CR3: 0000000025a15000 CR4: 0000000000352ef0 [ 600.645179][T16104] Call Trace: [ 600.646624][T16104] [ 600.647924][T16104] ? dump_stack_lvl+0x17c/0x190 [ 600.650080][T16104] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 600.652808][T16104] ? rcu_is_watching+0x12/0xc0 [ 600.655021][T16104] ? trace_kmalloc+0xe3/0x110 [ 600.657119][T16104] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 600.659467][T16104] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 600.662109][T16104] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 600.664672][T16104] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 600.667494][T16104] ? __anon_inode_getfile+0x17c/0x280 [ 600.669865][T16104] io_uring_setup.cold+0x1a0b/0x1cde [ 600.672378][T16104] ? __pfx_io_uring_setup+0x10/0x10 [ 600.674453][T16104] ? find_held_lock+0x2b/0x80 [ 600.676457][T16104] ? ksys_write+0x1ac/0x250 [ 600.678505][T16104] ? __pfx_ksys_write+0x10/0x10 [ 600.680855][T16104] __x64_sys_io_uring_setup+0xc2/0x170 [ 600.683670][T16104] do_syscall_64+0x10b/0xf80 [ 600.685637][T16104] ? clear_bhb_loop+0x40/0x90 [ 600.687894][T16104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.690416][T16104] RIP: 0033:0x7f616759c819 [ 600.692466][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.701525][T16104] RSP: 002b:00007f61683cffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 600.705054][T16104] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f616759c819 [ 600.708439][T16104] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 600.711906][T16104] RBP: 00007f61683d0090 R08: 0000000000000000 R09: 0000000000000101 [ 600.715419][T16104] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 600.719768][T16104] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffd09fd6e08 [ 600.723598][T16104] [ 600.724849][T16104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.727669][T16104] CPU: 3 UID: 0 PID: 16104 Comm: syz.4.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.732065][T16104] Tainted: [L]=SOFTLOCKUP [ 600.733897][T16104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.738176][T16104] Call Trace: [ 600.739687][T16104] [ 600.741063][T16104] dump_stack_lvl+0x100/0x190 [ 600.743237][T16104] vpanic+0x552/0x970 [ 600.744977][T16104] ? __pfx_vpanic+0x10/0x10 [ 600.746917][T16104] panic+0xd1/0xe0 [ 600.748616][T16104] ? __pfx_panic+0x10/0x10 [ 600.750566][T16104] ? check_panic_on_warn+0x1f/0x90 [ 600.752731][T16104] check_panic_on_warn.cold+0x19/0x34 [ 600.755422][T16104] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 600.757859][T16104] __warn.cold+0x191/0x328 [ 600.759833][T16104] __report_bug+0x296/0x3d0 [ 600.761672][T16104] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 600.763893][T16104] ? __pfx___report_bug+0x10/0x10 [ 600.766193][T16104] ? _printk+0xcf/0x110 [ 600.767977][T16104] ? __pfx__printk+0x10/0x10 [ 600.769993][T16104] ? find_held_lock+0x2b/0x80 [ 600.772156][T16104] ? is_bpf_text_address+0x8a/0x1a0 [ 600.774608][T16104] ? bpf_ksym_find+0x128/0x1c0 [ 600.776880][T16104] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 600.779177][T16104] report_bug+0xb2/0x220 [ 600.780988][T16104] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 600.783141][T16104] handle_bug+0x16a/0x2a0 [ 600.784925][T16104] exc_invalid_op+0x17/0x50 [ 600.786807][T16104] asm_exc_invalid_op+0x1a/0x20 [ 600.788806][T16104] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 600.791321][T16104] Code: ff e8 cd c4 14 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 0d bf 14 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 aa c4 14 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 bc 7d 82 fd e9 72 f8 ff ff 48 8b 3c 24 [ 600.799733][T16104] RSP: 0018:ffffc9000502fb50 EFLAGS: 00010293 [ 600.802219][T16104] RAX: 0000000000000000 RBX: ffff888034511000 RCX: ffffffff84f4ae36 [ 600.805580][T16104] RDX: ffff8880328c4a00 RSI: ffffffff84f4b636 RDI: ffff8880328c4a00 [ 600.809465][T16104] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 600.813105][T16104] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000a05f8c [ 600.816366][T16104] R13: 0000000000000000 R14: ffff8880328c5368 R15: ffff88802bc9cc18 [ 600.819677][T16104] ? io_wq_put_and_exit+0xa6/0x9d0 [ 600.821805][T16104] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 600.823791][T16104] ? dump_stack_lvl+0x17c/0x190 [ 600.825399][T16104] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 600.828269][T16104] ? rcu_is_watching+0x12/0xc0 [ 600.830743][T16104] ? trace_kmalloc+0xe3/0x110 [ 600.832628][T16104] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 600.834821][T16104] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 600.837221][T16104] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 600.839460][T16104] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 600.841900][T16104] ? __anon_inode_getfile+0x17c/0x280 [ 600.844054][T16104] io_uring_setup.cold+0x1a0b/0x1cde [ 600.846295][T16104] ? __pfx_io_uring_setup+0x10/0x10 [ 600.848545][T16104] ? find_held_lock+0x2b/0x80 [ 600.850881][T16104] ? ksys_write+0x1ac/0x250 [ 600.852680][T16104] ? __pfx_ksys_write+0x10/0x10 [ 600.854571][T16104] __x64_sys_io_uring_setup+0xc2/0x170 [ 600.856856][T16104] do_syscall_64+0x10b/0xf80 [ 600.858877][T16104] ? clear_bhb_loop+0x40/0x90 [ 600.860757][T16104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.863189][T16104] RIP: 0033:0x7f616759c819 [ 600.865138][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.873129][T16104] RSP: 002b:00007f61683cffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 600.876480][T16104] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007f616759c819 [ 600.879758][T16104] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00000000000004b6 [ 600.883243][T16104] RBP: 00007f61683d0090 R08: 0000000000000000 R09: 0000000000000101 [ 600.886120][T16104] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000000 [ 600.888698][T16104] R13: 0000200000000000 R14: 0000200000ff0000 R15: 00007ffd09fd6e08 [ 600.891399][T16104] [ 600.893753][T16104] Kernel Offset: disabled [ 600.895256][T16104] Rebooting in 86400 seconds..