last executing test programs: 4m32.464615558s ago: executing program 0 (id=1754): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f00000002c0)=""/242) sendfile(r1, r1, &(0x7f0000000080)=0xfffffffb, 0xd) close(0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1) 4m32.464386119s ago: executing program 0 (id=1755): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m31.043337572s ago: executing program 0 (id=1765): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0xc) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x5, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}, &(0x7f0000000040)=0x84) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000241400001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r5, @ANYBLOB="f230d434ced4a4ee801b673e1dad657aae4bf6388a64bb55852054eb48f61b10ee6527fab7e62e402988c3325069fa1c56f2020027383bb5b25694d1d669b4455b4ada023764c51d78c4922d4b3b5a5823d0208915a71ccc2052b48eb09d582a2e63c13c57b18642f5d3e9cab38a630f822588a36017f84e0f619a6abc6ecd831a4b5327f4a38520e8e3b81578d4590cb310d00ab87f41954af3291e4d377dab7d377c5fcc73a6dfa31d56bb9528b0af41e6fc7f9a0dd33cc8b2fbd24bce5f906775cad27bb25eaf8bd42b66"], 0x44}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000000000000000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601fc10a0e000000220200ff00461602868b28ab52da2a0093dc69200e9e6473c6c52b885f8967aea0a3a6f92ac774f4db5cdf8376888e1721f775de4b1307da34ca41f10abac4e9748b45970fbdb9dc9d7f89ac6edda22f803b2083182f327881475c99aad752af32d0f91caf9f8f7095082c62fa4ea53f10b564287c256518c872142f4adbac0b292663b4a618c3cbb081390c030cad0972563ee4451c52b9278f76"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", ""]}, 0x14}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) openat$nullb(0xffffff9c, &(0x7f0000000680), 0x8442, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x8, '\x00', r7, r9, 0x3, 0x5, 0x4}, 0x50) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000004c0)=0x84) setgroups(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f41c0b47af314f1fd18f50400041c04"], 0x7) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000024066501000000000000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4m30.814768209s ago: executing program 0 (id=1766): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0}}) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) write(r1, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x161001, 0xc1) write(r3, &(0x7f0000000600)='1', 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0x19c8}, {0x9, 0xfcf}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0xa0aaf419689b402e) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000740)={0x7, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x30, r1, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0xfffffffc, 0x1}, 0x10, 0x0, r1, 0x5, &(0x7f00000005c0)=[r3, 0xffffffffffffffff, r5, r1, r3, r1, r1], &(0x7f00000007c0)=[{0x4, 0x4, 0x8, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x3, 0x9}, {0x1, 0x1, 0xc, 0xa}, {0x0, 0x4, 0x8, 0x6}], 0x10, 0xfffffffe}, 0x94) 4m29.75449838s ago: executing program 0 (id=1771): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)=@polexpire={0xc0, 0x1b, 0x800, 0x70bd2d, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x4, 0x4e20, 0x4, 0xa, 0x0, 0x0, 0x3b}, {0x5fcc6dbd, 0x4, 0xa984, 0xfffffffffffffff7, 0x1, 0x896, 0x5, 0x5}, {0x10000, 0x0, 0x936, 0x6}, 0x6, 0x6e6bb0, 0x0, 0x0, 0x1, 0x2}, 0x6}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x800) 4m29.546377485s ago: executing program 0 (id=1772): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x171) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663b2b10a65079aa09519e659", 0x69}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a2b6d43311a2fb8c56695d43d5f18c04514aabe53dd091efd0b577c455b636154b11a31ed54df51ca1e3a2e8b6941aeb19878fb1f7aeeb2cd2f15", 0x5e}], 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4m29.467379638s ago: executing program 32 (id=1772): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x171) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663b2b10a65079aa09519e659", 0x69}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a2b6d43311a2fb8c56695d43d5f18c04514aabe53dd091efd0b577c455b636154b11a31ed54df51ca1e3a2e8b6941aeb19878fb1f7aeeb2cd2f15", 0x5e}], 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4m0.611548803s ago: executing program 4 (id=1958): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2000009, 0x30, 0xffffffffffffffff, 0x20000000) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x8, "e2f06487b14a4767c1bc0565958c4af043a57786be27fdd97fc698c6cc0340a7"}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000005800)={0x2020}, 0x2020) syz_ublk_setup_io_uring(0x1f46, &(0x7f0000000280)={0x0, 0x18fa, 0x1, 0x2, 0x310}, &(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000180)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r7, &(0x7f0000000400)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0xe0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) syz_usbip_server_init(0x2) set_tid_address(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r9, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0x0}) setpgid(r10, r11) 3m59.237605228s ago: executing program 4 (id=1967): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1b8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0x0, 0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d000003000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) close(r0) 3m58.964727291s ago: executing program 4 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206050003000000000000000000000005000400000000000900020073797a32000000001400078005001500cee5000008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3m58.964446815s ago: executing program 4 (id=1969): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000380)=ANY=[@ANYBLOB="67727051756f74615f0f630f6e80ec9d311666c0f783bb5c2b3564ff"]) chroot(&(0x7f00000002c0)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000200)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000005800000311bd7000fedbdf250008000300697b1e66699ea2f9d88d59d521d562cf5fe7f3d4f394d96761fc2c7cc23d04dbd1e99e49445d739e3daa4fd8a50e570a6eb480860fb87c9ce9816a076d11da389dd2484db973af926ed1e0d3a18f21f783feb2375a1dede05ff8e7cf008c53ccad1c4dd23dcdc9664dd10aeefcd6880f0daa965924107fb3debbe1ef377e6f4979153e89282e77c4bbc848f00f2acf5be7ee977aaa94bee82cec4c03e1c8082c1663e30d53603661849ba49d435ca077fbd93471a2aa1c32e5220440e4ac8cc0d9961bbd52957882ab6011e1936cde09c863452825ed1bb6a7f9fdf45f6428e417834b49f043f1de25", @ANYRES32, @ANYBLOB="08000100040000000800010002000000080001000000000008000200", @ANYRES32=r1, @ANYBLOB="080001000300000008000200", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x448c4}, 0x800c000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) 3m58.8292595s ago: executing program 4 (id=1970): keyctl$join(0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x4000}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = fsopen(&(0x7f00000000c0)='v7\x00', 0x1) fsmount(r2, 0x0, 0x80) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x39, 0x10000000000003, 0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 3m58.422483645s ago: executing program 4 (id=1973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r2, &(0x7f0000000080)='transport=loop,nqn=nq', 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041) syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = io_uring_setup(0xc3a, &(0x7f0000000340)={0x0, 0x1211, 0x2, 0x1, 0x178}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3e) r5 = openat$btrfs_control(0xffffff9c, &(0x7f00000005c0), 0x200400, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c814}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900020073797a312000200003801c0000800c00018006000100000000000900090073797a3200000000140000001100010000000000000000000200000a0000"], 0x74}, 0x1, 0x0, 0x0, 0x24000855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000ffffffff000500000a400000000c0a010100301700000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vim2m(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, 0x1, 0x1}, 0x88) 3m58.342383255s ago: executing program 33 (id=1973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r2, &(0x7f0000000080)='transport=loop,nqn=nq', 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041) syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = io_uring_setup(0xc3a, &(0x7f0000000340)={0x0, 0x1211, 0x2, 0x1, 0x178}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3e) r5 = openat$btrfs_control(0xffffff9c, &(0x7f00000005c0), 0x200400, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c814}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900020073797a312000200003801c0000800c00018006000100000000000900090073797a3200000000140000001100010000000000000000000200000a0000"], 0x74}, 0x1, 0x0, 0x0, 0x24000855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000ffffffff000500000a400000000c0a010100301700000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vim2m(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, 0x1, 0x1}, 0x88) 3m11.649704556s ago: executing program 1 (id=2222): r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.unix.ip/channel\x00', &(0x7f0000000040)={0xa17162e26a695666, 0x0, 0x23}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x28a, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x6004408d) mkdirat(r0, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYBLOB="0412f5c9c34e59b727656b8ac40d1239496a4bf413a89dbc00adf16b9fe901206c020ca665d52c954d77418f57f207854ed1ef4346ba62f31eccc053b58a34d1158f5be88c311e84cb6b9e569b6a905e3637"], 0x11, 0x2) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) openat$incfs(r4, &(0x7f0000000340)='.log\x00', 0x2000, 0x21) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_START(r9, 0x6f29) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b000000060000000c000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000000100"/28], 0x48) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f000000bbc0)={0x0, 0x0, &(0x7f000000bb80)={&(0x7f000000b9c0)=ANY=[@ANYBLOB="5000000402020104000000000a00000153000da43402802c00018014000300ff020000000000f7ffffff000000000114000400fe8000000000000000000000000000420c1002800500010088"], 0x50}, 0x1, 0x0, 0x0, 0x48090}, 0x4) r12 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x3, 0x40a400) ioctl$DVB_DVR_DMX_EXPBUF(r12, 0xc00c6f3e, &(0x7f00000000c0)={0x4, 0x80000, r6}) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r15], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES8=r14, @ANYBLOB="00410000bf00000014002b8008000100", @ANYRES32=r13], 0x34}}, 0x4008000) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) clock_nanosleep(0x9, 0x0, &(0x7f0000000140), 0x0) 3m11.393997235s ago: executing program 1 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x110, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xaf, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x4, [{0x60}, {0x18, 0x1}, {0x12, 0x1}, {0xc, 0x1}]}, @void, @void, @void, @val={0x5, 0x71, {0xa, 0x14, 0x6, "534f6159f7daa138b612c8e583a4e6373b5f80be72a0c683cc95939b35314df7b3e9e5eda763af1e4154fa28c6c9e45d2bca8ac79f0f30f28a3f7bc8b82a904bc6063f49efc0f5995e38099333c0e08d2a1d787ce16c3d7f11058114826f89c07cf04d71aea615c24430831f49b8"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x2, 0xa1, 0x8}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x19, 0x34, @random="12d801b385727ebb1af4803cdd4ff387dc256f673c"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x110}}, 0x0) 3m11.244597008s ago: executing program 1 (id=2227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r1, &(0x7f00000031c0)={0x0, 0x9, 0x3, 0x1, 0x1ff, 0x1, 0x2, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x8, 0x2, 0x157}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0x902, 0x0, 0x0, 0x1000, 0x3ff, 0x0, 0x0, 0x82}}}, &(0x7f0000000480)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r9, 0x2) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read(r10, &(0x7f0000000140)=""/154, 0x9a) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r8, &(0x7f0000000180)={0x0, 0x0, 0x1f00, 0x3, 0xbd}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1510, 0x4, 0x2100, 0x10001004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1160, 0x400, 0xfffffffe, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x2, 0x1ed, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='+'], 0x14}, 0x1, 0x0, 0x0, 0x800c006}, 0x4000091) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) chdir(0x0) 3m10.369517645s ago: executing program 1 (id=2233): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r0, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x402001, 0x0) write(r1, &(0x7f0000000640)='\"\"go=z', 0x6) 3m9.140066784s ago: executing program 1 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0xb}}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0xa6c9) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x200000000000088) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x9, 0x9, 0x7, 0x8, 0x5, 0x1ff}}, &(0x7f0000000280), 0x600) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) 3m8.693750052s ago: executing program 1 (id=2240): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x988fd3c8e0b6f54f, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000140)}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)=ANY=[]) write$FUSE_INIT(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007020000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x4008000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x28e81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x1, 0x12c000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) close(r2) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000380)={@in6={0xa, 0x4e20, 0x773, @loopback, 0x4}, {&(0x7f0000000040)=""/55, 0x37}, &(0x7f0000000280), 0x8}, 0xa0) 3m8.659822437s ago: executing program 34 (id=2240): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x988fd3c8e0b6f54f, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000140)}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)=ANY=[]) write$FUSE_INIT(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007020000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x4008000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x28e81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x1, 0x12c000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) close(r2) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000380)={@in6={0xa, 0x4e20, 0x773, @loopback, 0x4}, {&(0x7f0000000040)=""/55, 0x37}, &(0x7f0000000280), 0x8}, 0xa0) 2m26.853919151s ago: executing program 3 (id=2415): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/29, 0x1d, 0x9939b96c7d7008e8, 0x0, 0x5) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m26.80404512s ago: executing program 3 (id=2416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = syz_io_uring_setup(0x671f, &(0x7f0000000400)={0x0, 0x9e89, 0x80, 0x10000000, 0x3c1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x126, 0xfffffffd, 0x29, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x4, 0x0) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f00000000c0)=""/26) sendto$phonet(r5, &(0x7f00000012c0)="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", 0xff, 0x8, &(0x7f00000013c0)={0x23, 0x0, 0x1, 0x5}, 0x10) 2m26.737441046s ago: executing program 3 (id=2417): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x84, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000077449977fe5a1e7c05ca3dbd4f8a7526637a34b7ccbc7acab85892049dac1eba9b35b7643f4ead978ce7870bac3e7e382c1df23ade7d5b164008141ae7a76d5236ef2df99e28220aa8a07da727ef3acb32649b7eb48c80c4245d574861a5c18e96861242c09687bf7db1b20a7dc1adda26fe48db02767c0cfc3e0804206846a4b23b9f6"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffbff, 0x4, 0x30c7, 0x5, 0xfffffffe, 0x8], 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0x80) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$kcm(0x10, 0x3, 0x10) 2m25.670912689s ago: executing program 3 (id=2423): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0}}) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) write(r1, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x161001, 0xc1) write(r3, &(0x7f0000000600)='1', 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0x19c8}, {0x9, 0xfcf}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0xa0aaf419689b402e) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000740)={0x7, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x30, r1, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0xfffffffc, 0x1}, 0x10, 0x0, r1, 0x5, &(0x7f00000005c0)=[r3, 0xffffffffffffffff, r5, r1, r3, r1, r1], &(0x7f00000007c0)=[{0x4, 0x4, 0x8, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x3, 0x9}, {0x1, 0x1, 0xc, 0xa}, {0x0, 0x4, 0x8, 0x6}], 0x10, 0xfffffffe}, 0x94) 2m25.036414648s ago: executing program 3 (id=2426): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000042}, 0x20008054) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @remote, 0xfffffff9}, r1}}, 0x30) 2m24.753330006s ago: executing program 3 (id=2429): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xe, &(0x7f0000000600)=@raw=[@generic={0x1, 0xb, 0x3, 0x1, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x86, &(0x7f00000006c0)=""/134, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x125ef, 0xffffffffffffffff, 0x4, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x4, 0x3, 0xd, 0x5}, {0x5, 0x8, 0xf, 0x6}, {0x3, 0x5, 0x2e, 0x1}, {0x4, 0x4, 0x4, 0x4}], 0x10, 0x69}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fchdir(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x4e20, 0x800, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x16, 0x0, r6}, {0x8000, 0x1db, 0x7fff, 0x8000, 0xffffffffffffffff, 0x7ff, 0x32, 0x9}, {0x9, 0xffffffffffffffff, 0x8, 0xf}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x2, 0x5, 0x7, 0x8, 0x214}}, 0xe4) (async) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 2m24.697822351s ago: executing program 35 (id=2429): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xe, &(0x7f0000000600)=@raw=[@generic={0x1, 0xb, 0x3, 0x1, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x86, &(0x7f00000006c0)=""/134, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x125ef, 0xffffffffffffffff, 0x4, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x4, 0x3, 0xd, 0x5}, {0x5, 0x8, 0xf, 0x6}, {0x3, 0x5, 0x2e, 0x1}, {0x4, 0x4, 0x4, 0x4}], 0x10, 0x69}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fchdir(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x4e20, 0x800, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x16, 0x0, r6}, {0x8000, 0x1db, 0x7fff, 0x8000, 0xffffffffffffffff, 0x7ff, 0x32, 0x9}, {0x9, 0xffffffffffffffff, 0x8, 0xf}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x2, 0x5, 0x7, 0x8, 0x214}}, 0xe4) (async) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 1m42.555692104s ago: executing program 2 (id=2744): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x149a82, 0x1a1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)='\f', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1854248a8be702dbdd7bb86a3e3fbb00f7ff000000c4001800"/38], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername$netlink(r8, 0x0, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200010) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0xb, 0x0, 0x9}]}) 1m41.683783844s ago: executing program 2 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00d736", @ANYRES16=r6, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000600)="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", 0xe9c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000540)=""/35) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000c00000000000000fd4100", @ANYRES16, @ANYBLOB="00032cbd7000fbdbdf251700000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x2044010) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffe, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000080)={0x0, 0x1, {0x2, 0x3, 0x5, 0x1}, 0x7f}) r9 = socket$inet6(0xa, 0x3, 0x1000005) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4c20, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x5, 0x3, 0x0, 0x9, 0xf42, 0x5, 0x6}, {0x0, 0x0, 0x4, 0x5}, 0x3, 0x0, 0x0, 0x1, 0x6, 0x1}, {{@in=@empty, 0x6, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000, 0xfffffffd}}, 0xe4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1m40.566957571s ago: executing program 2 (id=2755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2504000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="05000a0040"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000020000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r7, 0x2e, 0x0, r7, @void, @value=r6}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x5b49e932, @remote, 0x3}, 0x1c) pwritev2(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0}], 0x1, 0x7, 0x5, 0x4) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f0000000380)={0x0, 0xffff, 0x6c, &(0x7f0000000280)={0x6c}}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={r0, 0x1, 0x10000}) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r8, 0x0, 0x86) 1m39.596323658s ago: executing program 2 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x1fe) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x2021441, 0x0) r2 = openat(r1, &(0x7f0000001100)='./proc/modules\x00', 0x4000, 0x84) pread64$ublk_bdev(r2, &(0x7f0000002280)=""/11, 0xb, 0xf4df) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r3}, 0x38) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000080)=0xfffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x24000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 1m39.29637074s ago: executing program 2 (id=2768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x128, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0xfff3, 0x1}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0xf488, 0x3, 0x1, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0x7fff, 0xfc00, 0x3, 0x5, 0x0]}}, {{0x1c, 0x1, {0x8, 0x24, 0x0, 0xfa96, 0x0, 0x1207, 0xfffffe01, 0x3}}, {0xa, 0x2, [0x9, 0x3, 0x2]}}, {{0x1c, 0x1, {0x33, 0x10, 0x7, 0xfe67, 0x0, 0x4, 0x7, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}, {{0x1c, 0x1, {0x1, 0x4b, 0x401, 0x8, 0x1, 0x1, 0x3, 0x2}}, {0x8, 0x2, [0xfe01, 0x6a1b]}}]}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x55, 0xc00, 0x9, 0x2, 0x3, 0x0, 0x9}}, {0x16, 0x2, [0x9, 0x3, 0x1, 0x4, 0x8, 0x3ff, 0x9, 0x81, 0x40]}}, {{0x1c, 0x1, {0x5, 0x4, 0x72, 0x5, 0x2, 0x8, 0xfffffff5, 0x6}}, {0x10, 0x2, [0x5, 0x2, 0x9, 0x9, 0xed0d, 0x4]}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 1m39.113621295s ago: executing program 2 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) (fail_nth: 5) 1m39.025535375s ago: executing program 36 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) (fail_nth: 5) 57.497294591s ago: executing program 7 (id=3037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = syz_io_uring_setup(0x671f, &(0x7f0000000140)={0x0, 0x7680, 0x80, 0xfffffff, 0x3c1}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x126, 0xfffffffd, 0x29, 0x0, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) 57.12225589s ago: executing program 7 (id=3040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = openat$fuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000028c0)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2d, 0x6, 0x20000a00, 0x4, 0xa, 0x3, 0x4, 0x0, 0x0, 0x100, 0xe}}, 0x50) 56.20735441s ago: executing program 7 (id=3050): syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365723a7d20"], 0x2b, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000240), &(0x7f00000001c0)="72ddb9ffa9d4", 0x6, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, 0x0, 0x0) 54.705946945s ago: executing program 7 (id=3056): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000340)="a8fc7b04bd136c6034ef8b52a07de93f4aae2bb70f8def645700d786be6bbd390d220c500382eaa77810676321558e9227902ac6be257070d6b540a1d33553433de13a00"/77, 0x6a45f49d603bce7a}], 0x1, 0x6, 0x203, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) r4 = getpgid(r3) setpgid(0x0, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002"], 0x5c}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x48c201, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_INSNLIST(r8, 0x8008640b, &(0x7f0000000240)={0x868, &(0x7f00000020c0)=[{0x4000300, 0xff92, 0x0, 0x0, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 54.313745545s ago: executing program 7 (id=3057): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r3, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 53.928697627s ago: executing program 7 (id=3060): syz_emit_ethernet(0x52, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000059078ac1414000a010100441405030000000000000000ffffffff000000008903ce830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200006be2b1c76125808c94f1d3128cd0a9f2ecc0667d163770fff0b12ce73cfdb514da8f4156a9aa0b8274eb67e16d9a29e65162e3e5a5101b297c2ccc0ed18144b98ef629ddba8ea0ea94ced1b75f49f7e9645e34076c439d43c4cf54ec2d02b5d8f534847099c30881a46c122d4cae5a04a6ba9da540cda7569c52a66c89d789dd29f8acf97218e5a577782c666514cd5c903999c6a18c6d7988de8d3272b585054e33bb777e41996943f098df9b0f97000000000000000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000140)='ceph\x00', 0x88, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat$uhid(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000280)={0xa, {0x4, 0x7, 0x40}}, 0xa) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = open$dir(&(0x7f0000000000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x501000, 0x1) renameat2(r2, &(0x7f00000004c0)='./my_configfs\x00', r1, &(0x7f0000000500)='./my_configfs\x00', 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0], 0x18}}, 0x20008050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='2', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_rxfh={0x46, 0x80ffff, 0x5, 0x10001, 0x92, "67bc41", 0x7ff, [0x8, 0x2, 0x7, 0x8, 0xe]}}) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000540)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1, 0x0) 53.374191718s ago: executing program 37 (id=3060): syz_emit_ethernet(0x52, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000059078ac1414000a010100441405030000000000000000ffffffff000000008903ce830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200006be2b1c76125808c94f1d3128cd0a9f2ecc0667d163770fff0b12ce73cfdb514da8f4156a9aa0b8274eb67e16d9a29e65162e3e5a5101b297c2ccc0ed18144b98ef629ddba8ea0ea94ced1b75f49f7e9645e34076c439d43c4cf54ec2d02b5d8f534847099c30881a46c122d4cae5a04a6ba9da540cda7569c52a66c89d789dd29f8acf97218e5a577782c666514cd5c903999c6a18c6d7988de8d3272b585054e33bb777e41996943f098df9b0f97000000000000000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000140)='ceph\x00', 0x88, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat$uhid(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000280)={0xa, {0x4, 0x7, 0x40}}, 0xa) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = open$dir(&(0x7f0000000000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x501000, 0x1) renameat2(r2, &(0x7f00000004c0)='./my_configfs\x00', r1, &(0x7f0000000500)='./my_configfs\x00', 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0], 0x18}}, 0x20008050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='2', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_rxfh={0x46, 0x80ffff, 0x5, 0x10001, 0x92, "67bc41", 0x7ff, [0x8, 0x2, 0x7, 0x8, 0xe]}}) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000540)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1, 0x0) 7.186408661s ago: executing program 8 (id=3261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x76, 0x0, &(0x7f0000000440)="e05bec4ef8f3734b3a49efd2d1c4e0355d879596ce1ec761cdf7bdd4bf585b06f3ef7089558ace5332b7c21f6913908e15aa3f02a34abad4905692fcc38c8a5cf3f33b0d28f0b127ad9cf24c3abb7a9df245cc580e22e82c789e9469ea13696a821236dad9ed5f2745e94427e0c5130e9f32cd98b30b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) (async) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) (async) r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000340)={0x8, 0xffffff21}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x68) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$snapshot(0xffffff9c, &(0x7f0000000380), 0x98001, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r6 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r6, &(0x7f0000000640)=""/175, 0xaf) 6.084629841s ago: executing program 8 (id=3264): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) r1 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000240)={0x29, 0x2}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000200)=0xa9, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "e6204caa81943957"}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002) r9 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac14"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendmsg$nl_crypto(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001002abd7000fbdbdf2561656769733132382d6165736e6900000000000000000000000000000000000000000000000000c720db9238d5c41a00000000000000000000000000000000002000"/118], 0xe0}, 0x1, 0x0, 0x0, 0x40801}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x8000000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 5.76141512s ago: executing program 6 (id=3265): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = epoll_create1(0x80000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000340)={0x30000015}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 5.610500341s ago: executing program 9 (id=3267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x11, 0x8001, 0x0, 0x2000000000000009, 0x2, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, 0x0, 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x837045c648246e76, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x630, 0x9, 0x400, 0xce8}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'gretap0\x00', @random="6d08ff8d0080"}) getdents64(r5, &(0x7f0000001340)=""/4096, 0x1000) 5.323032338s ago: executing program 5 (id=3268): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x602002, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x9) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x800, 0x6, 0x80000001}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c005}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0xa}, {0x8, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 3.273736055s ago: executing program 8 (id=3269): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sg(&(0x7f0000000080), 0x400, 0x100000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 2.992842609s ago: executing program 5 (id=3270): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000040), 0x82000, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0), 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0x2000, 0x3c00, 0x800, 0x4, 0x8, 0x2, 0x0, {0x3, 0x7, 0x1}, {0x1, 0x7}, {0x2}, {0x2, 0x1, 0x1}, 0x2, 0x0, 0x2, 0x5, 0x0, 0x2, 0x7fffffff, 0x4, 0x6ae5, 0x10000, 0x8, 0xfffffffb, 0x16, 0x100, 0x1, 0xb}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, 0xffffffffffffffff, 0x1, 0x2002) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "47b20fc6d29a68f96feac7372a6dc4cc27ff47e74d14bdde6e752ccde58646a0c9758ea6d4ada5dad2fdd9b8e0f34d0cbf29f964a7d381a79b8c09cd408ce2fe"}}}}, 0x0) openat$userfaultfd(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x27cd, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x4, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r10 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x90000001}) poll(&(0x7f0000000080)=[{r10, 0x21}], 0x1, 0x800) ioctl$FS_IOC_GETFLAGS(r9, 0x5437, 0x0) r11 = openat$sr(0xffffff9c, &(0x7f00000001c0), 0x140, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000300)=[0x7f, 0x6, 0x4, 0xb], &(0x7f0000000340)=[0x7, 0x264e, 0x4, 0x643], &(0x7f00000003c0)=[0x0, 0x553f, 0xff00, 0x8], &(0x7f00000004c0)=[0x0, 0x0, 0x679, 0x5, 0x8001, 0x2]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r12], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, 0x0, 0x44050) 2.046520807s ago: executing program 8 (id=3271): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setresuid(0xffffffffffffffff, 0xee01, 0xee00) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x6}}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x79ea, 0x408000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffe26, &(0x7f0000000080)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r10, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1.969716034s ago: executing program 9 (id=3272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x14b, &(0x7f0000000280)={@local, @link_local, @void, {@mpls_mc={0x8848, {[{}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0x89db, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0xe65c}], @ipv6=@udp={0x3, 0x6, "59eda9", 0xed, 0x11, 0x1, @private2, @mcast1, {[@fragment={0xff, 0x0, 0xbd, 0x1, 0x0, 0x2, 0x68}, @srh={0x1d, 0xc, 0x4, 0x6, 0x40, 0x0, 0x7, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1, @remote, @mcast2]}, @srh={0x2b, 0x2, 0x4, 0x1, 0x31, 0x40, 0x0, [@loopback]}, @routing={0x89, 0x0, 0x1, 0x2}], {0x4e24, 0x4e24, 0x5d, 0x0, @opaque="36015cd841e4692cd58befa235fd2f23dfbee94543da634bc805d48818e0b1a21975b95a03fb4868c2c745f18cb7d4572bd5d8bc070edceef7321f65d044fa83ef75640d191c78603c63cb1ae0db8fb8ea50a5f62b"}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\t', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd600a843500140601fe80009e0000000000000000000000bbfe8000000000eb0100000000000000aa00004e05f4362755734522", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 1.956808396s ago: executing program 5 (id=3273): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.761881855s ago: executing program 9 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030942bd7000fcdbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="060036000c0000000c00430001000000040000000a0006000802110000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000000), &(0x7f0000000080), 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000100)) read$msr(r5, &(0x7f00000000c0)=""/187, 0xbb) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1, 0x10, r3, 0x0) 1.613354205s ago: executing program 9 (id=3275): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$full(0xffffff9c, &(0x7f0000000280), 0xc0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000010401020000000000000000050000010500010002000000050001000100000008000540000000070800034054a025fc0800ee3f2300007f080005400000009eabaca0431e71c50a020000000008020000000800"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 1.490992341s ago: executing program 6 (id=3276): setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x5, 0x2, 0x2d19}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) write(r2, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r5 = socket$inet6(0xa, 0x1, 0xfffffffb) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x809}, {0xa, 0x4ea0, 0xe, @mcast2}, 0x2, {[0x1ff, 0x1, 0xfffffffe, 0x8, 0xffffffff, 0x208, 0xe187]}}, 0x5c) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x1}, 0x2}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x6, 0x2, 0xfffffff9, 'syz0\x00', 0x8}, 0x27, 0x30, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000180)}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x95ea8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r9, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.488073491s ago: executing program 9 (id=3277): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='fd/4\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x0, 0x1, 0x0, 0xe}, 0x30, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823d5b82f6158adc8b61bca70b554d23cb6d5f7e06f6f05", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) landlock_restrict_self(r3, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_clone(0x10ab0a00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x2e, 0x6, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7, 0x80, 0x3, 0x9}}) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) ioctl$TCXONC(r7, 0x540a, 0x246e8eae910f182c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 851.455061ms ago: executing program 6 (id=3278): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x82) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r3 = dup2(r0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xffffffff, 0x8, 0x2, r3, 0xffff, '\x00', r2, r3, 0x5, 0x4, 0x2, 0xb}, 0x1f) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x8, &(0x7f0000000300)={0x3, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d352c6e725f626c6f636b733d322c00c688bd82427acbc3cd394fb179b3a52e58c5d016b1b6cbe9f4ee94ee01f30775abad1c9b9d1c2f278d8f0404e3a422fbfa4e76cf00bfc90080c326aeb6f8e198519c4763678fb6d0087ec8156bccfe404d9e734c8e0325d398b612d6a853d458267afb5eaff16fea17bd037e93bfea4b260acb4119bd502951f5ecae93ecc6ed"]) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000a00)=ANY=[@ANYRES8=r3, @ANYRESHEX=r7], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x8, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) syz_socket_connect_nvme_tcp() 827.44924ms ago: executing program 9 (id=3279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000340)=0xb000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004c00)=@newtaction={0x2a20, 0x30, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{0x1300, 0x1, [@m_xt={0xb4, 0xd, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x79, 0x6, "685ab4f79124160bb5d0e2431a77cd5b1f2080e8a6249d6cdad5464de6f45635755fc112a16eaed88d3dee4b39a9827da5b26525da1eb936d578529b3bad157a56f36c1484d83a82896a6892a28ab9445d2d7124c1cc1418ebec3d52c1c0d364efa4249bf80c032e208903e1dce9db7e1cebe4fe71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xb0, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x19, 0x6, './sec/tomoyo/profile\x00'}]}, {0x6a, 0x6, "b048ea1874704e63ea7cdc2e81668ae827e7da076f691103f2b70da1e6e6e69abec79856c2ac51c92a71c02fac49dd60791897e44e850d8ef2d5840f2481120298d484903f7e14eaeb6505938f739ba4a80b9f2f0f4d166aee0b2e38a56e600fc60d5f751db6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x112c, 0x2, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x20000000, 0x7a2f, 0x6de3}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xe9, 0x6, 0x10, 0xc}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe2, 0xd8be, 0x7, 0x5, 0x7}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x20000000, 0x4, 0x6}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0xaef2, 0x7}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4e, 0x5, 0x5, 0x3, 0x7}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x8, 0xff, 0x1}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x0, 0xfe9, 0xffffffff}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x4, 0xe651, 0x6}, 0x6e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x6c, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2dd3}]}, {0x37, 0x6, "a3205e6f7b6e2ea499ee09e6ded582026f6ca51eed63fc2a372fa139619fa8457d20d6823c3e2945e5552000ac61d772da2814"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x654, 0x1, [@m_csum={0x13c, 0x19, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x401, 0x4, 0x3, 0x1}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x45c6, 0x2, 0x7, 0xffffea8d, 0x1}, 0x34}}]}, {0xd5, 0x6, "42ac9dc77417ce0c5452eae64a7555459f4a3c64025894929316e79d53e0b354df60b7a3b2e4468ca80e5f5e3e0d66296d784071574c5835d6274b5e6720da7a7581637b89b0af5f99043d7b4ddebed06774bafd0302559a6c68d7484a3b5284843f7dab995868761146aea7e82274cceeb650c1de50217eaad8aabe3cd14100af6916afb3791a620bcd23e3ee42b9fa85d494d19428146a454d3acddb51058e5348e078da4767d2d88e500db4b65d47b6202ffe9ec750103800d4d828c2d9c5bac202e3a710f784f11ac65bc044e12de9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x170, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0xffffffffffffffff, 0x8e4, 0x80000001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x28000, 0x3, 0x6, 0x2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffffffffff, 0x3, 0x40}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x5, 0x10000000, 0x6, 0x9}}]}, {0xe1, 0x6, "6dac2757b208c27a7904fdbb49ce095b66ad7de817a1fd7247d44a6bede81b1e612881ad9301ff28f0fea3a7f313c4ccfd1da91862d3a6285430b340616ac4a032fb537fa8ea957d3cc69a7f455925bd567c2d8f74bc7ddb2678696a473178c3c1581910e302240961ae3a560f05b3b7f362a6010d4ef83a4ef6b64dd5410718437e9baa353a1ffc6f2f5f564e6e3739f93d0aa1bb2ca4a10ffc2901853623007c1909ac29d09d530e7756d614ac86696b067cd2c1dfe37bb5f2a8d1fe39b3fa6c8c79c65aba681ce1b8e0f68efbdb17807bfc95fcb64df7b411e92cd5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x88, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x53, 0x6, "da3cf8946a88d8623cc9b0f776d3a61ed43570d7d3999332b18bc86390a0c5a30a5e4361992c2e79f086b1e42b40b71aac1bb86d12902c79fe7bb3ef49e0b0a6ecd81160a7c4eb6e82a2b9261473a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ctinfo={0x90, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x5b, 0x6, "99a1cd39e88a11b716fc2423bf45c33bc1c06aafde8d60d859ebe09151b6053981869795955e972fdb617496fb09568559cfec3ad9f3e2af4aadf65485d3c388e6c0a14e7781df9712ea2fcbbf21bf794b6d64f429cfa0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_mpls={0xa4, 0x19, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ec11}, @TCA_MPLS_TTL={0x5, 0x7, 0xa7}, @TCA_MPLS_TTL={0x5, 0x7, 0xa}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x413a, 0x4, 0x8000}, 0x3}}]}, {0x41, 0x6, "5c95fe5636a0970ecf4a0e6e3ac925fc637b0256b4a39f61881a48be263f826d33690c6986b9b065e5e663560c4f1c833c23bd36dc8fe0b3e12bb63da8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_xt={0x1e8, 0x0, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_INDEX={0x8, 0x3, 0xf}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xc7, 0x6, {0x0, 'nat\x00', 0xd, 0x9, "b177fd0b49e31628ea106e54a154dfccb71164feba1d58de0bb1409213c5a2b7546b8851dcede33dcd1e8ec0bb59da2e9616525dae741beb9ece8146e24451890513b30efe6f674822e934dfc6c5c685b0a1162eb0c7edf2e74858f2b9e4df2f235284a76bb2362188d5b571e3bb4f7be2da3ae73944d9ecad5bb2fda17cb1c12fde332ca8e23c9347ddb4a79299469f0d9b348db18ba5b56350963ea8"}}]}, {0xd6, 0x6, "c4aa1e063a5408af75125fce63a5f43177c2c879768b99d2e29682d8489b1d51f25afd7e7d040b05c0cca204ca8c6611247c63dc256facb572a2a9868fd18447e4ed3642e4ac3d593f26350324e252d769d9f5e9a4e11c74a9da9e6368d40de21f1a51336e4f1d2f4277a23347d6953b25458abee519c5d9fb23cc06910547ad05cb4f329184031afa854305ccec67e9efd713098d404d3a06c63f23bfe6f2d27479338798f9769932fe15762731c110ba173f089c9f04bce3e74ec8bc9dd7560f7254f5956791ae14138dafa5b1572be08d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x10b8, 0x1, [@m_ife={0x10b4, 0x9, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x0, 0x5d01}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2271cf35}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0x141}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2a20}, 0x1, 0x0, 0x0, 0x4008895}, 0x20044040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x67bc, &(0x7f0000000440)={0x0, 0x398, 0x80, 0x0, 0x2cd}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_setup(0x5, &(0x7f0000000300)=0x0) r6 = eventfd2(0x1, 0x1) r7 = eventfd(0x0) io_submit(r5, 0x5, &(0x7f00000008c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x3, r3, &(0x7f00000003c0)="c0d6b3b537ca69319145c49ca57f6ddffedfd38892b5b116eb1d0a60af5c3c015e63ae630c389d4b30385d12077e1396787169e912f07a55e5bb20757733ac7dd0f0", 0x42, 0x200, 0x0, 0x0, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x400, r3, &(0x7f0000000500)="a5e264c9befea0ddbf0626793fa80e04dd100a76dfa89d3884f22c59dc803495d26643d5479b65d5004830eb6416309cb9b9382ff27e9d632ca7f46219bea346f5c2ec75e80f851ddb746bde54db1ebd1fd61572f16fbce644e2e65981ea4a7cb9cc5fd69aa16704d0967fed771cfe3dcc8ed54716bf6c6c26be9802613b3353cd3896c37579635351dbf9b3a1a8380e7c846f01fdfcd49a64e6fa1f72f43929e741755204a3bdabfb30355d86da7f7bf577d370432ff04b9a09ac94fd8768a261a15931", 0xc4, 0x2, 0x0, 0x2, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1ff, r4, &(0x7f0000000640)="97b6dfc4365e7b0aaef99d95b5f025b08100644c06cd50df15484508c2589a99ab0fb62c30f6fe2d0c0fe1e6c25797acc42501", 0x33, 0xbe41}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000006c0)="2ee09a1bbb180990f5e09ea6e170fb1e6a472841deb0c9f8fb6932c9b2d7ba74066c7b69e219f637e377be16bb8e5882d2358eb8908fa67c5fae922cc068de485b0a2e5693ec71429f4b3f65962c7a8854a3d62126efea", 0x57, 0x5, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000780)="74e845f4cdec62daf0fecc9d190e258710d2ba9473cd38a8318c254537d23be3b234d26b530cf7b2c0407091dec7fdb9fb433b1650f54f9a348ea7f99e709da9bf284c45883135a9f17ef181e2a61b66a500854a2f95a80f87d8faa8bf390411fb659409b7c59d6a852b23549d4b6e8f7bebbeb253f35f3ce7786709544b835c0fbebd8aa2a98507caa621676fa84d9a35929f53525d5459dac4c91ce7a0ff577e4e7ea9801097a005c213469c5f3e3f7a6518acbabc3757e08012b5b0f11ba6b09459f18429c697a87734d69b3e4c247a3c4586babdc6e98332b2a99118b5be31d45312be6b3afd580c716ba4", 0xed, 0x7fffffffffffffff, 0x0, 0x1}]) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) 775.475785ms ago: executing program 6 (id=3280): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 456.69675ms ago: executing program 5 (id=3281): setuid(0xee00) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0xfffffe6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000880) 334.987999ms ago: executing program 6 (id=3282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) umount2(0x0, 0x1) openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x101080, 0xead8e867b2bc6882) 235.535482ms ago: executing program 5 (id=3283): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000", 0x4}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x601, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x38}}, 0x0) 173.01033ms ago: executing program 8 (id=3284): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r4, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a108417df341b9dc3d8008a2fe5bdaad140004009c7e472c916120fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000040500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c"], 0x270}, 0x1, 0x0, 0x0, 0xc00}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newchain={0x94, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff}, {0xfff1, 0x6}, {0xfff2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x9}}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_U32_MARK={0x10, 0xa, {0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2f85}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x82}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) 77.101503ms ago: executing program 5 (id=3285): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$full(0xffffff9c, &(0x7f0000000280), 0xc0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000010401020000000000000000050000010500010002000000050001000100000008000540000000070800034054a025fc0800ee3f2300007f080005400000009eabaca0431e71c50a020000000008020000000800"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 76.881424ms ago: executing program 8 (id=3286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x108242, 0x78e22799f4a46fa9) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='fi', 0x2) 0s ago: executing program 6 (id=3287): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) futex(0x0, 0x7, 0x2, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffc, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x40000000000009, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x18, 0x1, 0x70bd26, 0x100, {{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0xfffffffffffffec0, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) kernel console output (not intermixed with test programs): [T15888] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.535021][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2672'. [ 514.538859][T15905] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2672'. [ 514.655763][T15888] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.192256][ T5826] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.262541][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.510186][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.510358][T15926] trusted_key: encrypted_key: insufficient parameters specified [ 515.510504][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.549545][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.754522][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2678'. [ 515.955215][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2682'. [ 515.974925][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 515.974939][ T42] audit: type=1800 audit(1785791419.067:6464): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 515.986808][ T42] audit: type=1800 audit(1785791419.127:6465): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 516.015316][ T42] audit: type=1800 audit(1785791419.207:6466): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2685" name="idVendor" dev="configfs" ino=69196 res=0 errno=0 [ 516.033400][ T42] audit: type=1800 audit(1785791419.207:6467): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2685" name="idProduct" dev="configfs" ino=69197 res=0 errno=0 [ 516.054631][ T42] audit: type=1800 audit(1785791419.237:6468): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 516.099913][T15953] 9p: Bad value for 'port' [ 516.101674][ T42] audit: type=1326 audit(1785791419.297:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 516.111207][ T42] audit: type=1326 audit(1785791419.297:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 516.123809][ T42] audit: type=1326 audit(1785791419.297:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 516.130763][ T42] audit: type=1326 audit(1785791419.297:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 516.137497][ T42] audit: type=1326 audit(1785791419.297:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.7.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 516.372742][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.954525][T15975] trusted_key: encrypted_key: insufficient parameters specified [ 517.009927][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.409835][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.588463][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2697'. [ 517.683812][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2699'. [ 517.751261][T16025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.846233][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'. [ 517.860596][T16034] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2701'. [ 517.975898][T16037] siw: device registration error -23 [ 518.219682][ T5855] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 518.370457][ T5855] usb 12-1: Using ep0 maxpacket: 16 [ 518.374955][ T5855] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 518.382482][ T5855] usb 12-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 518.386480][ T5855] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.391053][ T5855] usb 12-1: Product: syz [ 518.392900][ T5855] usb 12-1: Manufacturer: syz [ 518.394933][ T5855] usb 12-1: SerialNumber: syz [ 518.402315][ T5855] usb 12-1: config 0 descriptor?? [ 518.405768][ T5855] hub 12-1:0.0: bad descriptor, ignoring hub [ 518.408373][ T5855] hub 12-1:0.0: probe with driver hub failed with error -5 [ 518.415519][ T5855] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.460190][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.710562][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 518.719436][T13994] usb 12-1: USB disconnect, device number 2 [ 519.283843][T16067] Cannot find add_set index 0 as target [ 519.324967][T16067] __nla_validate_parse: 1 callbacks suppressed [ 519.324980][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 519.342145][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 519.462673][T16071] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 519.474815][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2709'. [ 519.493639][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.714205][T16086] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2716'. [ 519.782013][T16094] dlm: Using TCP for communications [ 519.812826][T16094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.150417][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.530707][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.940067][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2723'. [ 521.084161][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 521.084176][ T42] audit: type=1800 audit(1785791424.277:6522): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 521.412813][ T42] audit: type=1800 audit(1785791424.607:6523): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 521.489405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.580031][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.118019][T16134] overlayfs: failed to clone upperpath [ 522.181954][T16136] ptrace attach of ""[16137] was attempted by "/syz-executor exec"[16136] [ 522.200510][ T42] audit: type=1800 audit(1785791425.397:6524): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2731" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 522.373221][ T5764] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 522.507593][T16087] Set syz1 is full, maxelem 65536 reached [ 522.589195][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2733'. [ 522.612263][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.673990][T16146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.750132][ T42] audit: type=1800 audit(1785791425.947:6525): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=615471 res=0 errno=0 [ 522.769870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.803686][ T42] audit: type=1800 audit(1785791425.997:6526): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 522.889414][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2738'. [ 522.921825][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 523.159455][ T42] audit: type=1800 audit(1785791426.347:6527): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 523.179641][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.233414][ T42] audit: type=1800 audit(1785791426.427:6528): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 523.425484][T16102] Set syz1 is full, maxelem 65536 reached [ 523.545803][T16177] netlink: 'syz.6.2743': attribute type 1 has an invalid length. [ 523.612555][ T42] audit: type=1800 audit(1785791426.767:6529): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 523.650034][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.669313][ T42] audit: type=1800 audit(1785791426.857:6530): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2744" name="reserved_size" dev="sysfs" ino=607 res=0 errno=0 [ 523.683869][T16177] wg2 speed is unknown, defaulting to 1000 [ 523.969718][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 524.559423][ T42] audit: type=1800 audit(1785791427.747:6531): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 524.659525][T16196] kAFS: unable to lookup cell '/,c¾ûL' [ 524.689768][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.975784][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2754'. [ 525.037599][T16212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.729483][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.771358][T16216] trusted_key: encrypted_key: insufficient parameters specified [ 526.156575][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 526.156587][ T42] audit: type=1800 audit(1785791429.347:6538): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 526.410830][ T42] audit: type=1800 audit(1785791429.607:6539): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 526.662976][ T42] audit: type=1800 audit(1785791429.847:6540): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 526.670711][T13994] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 526.690519][T16237] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 526.694191][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 526.720456][ T42] audit: type=1800 audit(1785791429.917:6541): pid=16237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2764" name="ignore_ce" dev="sysfs" ino=56275 res=0 errno=0 [ 526.822629][T13994] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.827056][T13994] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.828709][T16241] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2765'. [ 526.834812][T13994] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.847148][T13994] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.855608][T16228] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 526.858824][ T42] audit: type=1800 audit(1785791430.047:6542): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=622722 res=0 errno=0 [ 526.859762][T13994] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.902000][ T42] audit: type=1800 audit(1785791430.077:6543): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=622751 res=0 errno=0 [ 526.908451][ T42] audit: type=1800 audit(1785791430.087:6544): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=622729 res=0 errno=0 [ 526.914947][ T42] audit: type=1800 audit(1785791430.087:6545): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=622730 res=0 errno=0 [ 526.924385][ T42] audit: type=1800 audit(1785791430.087:6546): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=622731 res=0 errno=0 [ 526.927358][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 526.936504][ T42] audit: type=1800 audit(1785791430.087:6547): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=622771 res=0 errno=0 [ 527.012803][T16244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.084834][T13994] usb 12-1: USB disconnect, device number 3 [ 527.211772][ T5764] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 527.321547][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 527.336691][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 527.341364][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.345078][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.347831][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.683890][T16263] trusted_key: encrypted_key: insufficient parameters specified [ 527.718508][T16247] wg2 speed is unknown, defaulting to 1000 [ 527.819537][ T1348] net_ratelimit: 2 callbacks suppressed [ 527.819550][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.943354][ T12] bridge_slave_1: left allmulticast mode [ 527.945859][ T12] bridge_slave_1: left promiscuous mode [ 527.949744][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.958117][ T12] bridge_slave_0: left allmulticast mode [ 527.962802][ T12] bridge_slave_0: left promiscuous mode [ 527.966249][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.021291][T16273] trusted_key: encrypted_key: insufficient parameters specified [ 528.143259][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.148843][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.163238][ T12] bond0 (unregistering): Released all slaves [ 528.177261][ T12] bond1 (unregistering): Released all slaves [ 528.195555][ T12] bond2 (unregistering): Released all slaves [ 528.203062][ T12] bond3 (unregistering): Released all slaves [ 528.231454][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 528.539126][T16291] netlink: 'syz.7.2776': attribute type 2 has an invalid length. [ 528.798185][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11 [ 528.859494][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.249749][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.409411][ T5756] Bluetooth: hci3: command tx timeout [ 529.438845][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12 [ 529.519750][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.545474][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.553122][T16247] bridge_slave_0: entered allmulticast mode [ 529.556224][T16247] bridge_slave_0: entered promiscuous mode [ 529.563197][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.572299][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.575379][T16247] bridge_slave_1: entered allmulticast mode [ 529.578584][T16247] bridge_slave_1: entered promiscuous mode [ 529.593005][ T5756] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1 [ 529.597705][ T5756] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 529.642386][T16247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.653078][T16247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.682286][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 529.696423][T16247] team0: Port device team_slave_0 added [ 529.705561][T16247] team0: Port device team_slave_1 added [ 529.760939][T16334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.766754][T16247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.768954][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.779277][T16247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.790316][T16247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.793261][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.815144][T16247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.827867][ T5455] 8021q: adding VLAN 0 to HW filter on device eth13 [ 529.851050][ T12] hsr_slave_0: left promiscuous mode [ 529.853205][ T12] hsr_slave_1: left promiscuous mode [ 529.855225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.857806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.895050][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.090799][ T12] team0 (unregistering): Port device team_slave_1 removed [ 530.098691][ T12] team0 (unregistering): Port device team_slave_0 removed [ 530.122662][ T1167] smc: removing ib device syz0 [ 530.319552][ T1167] smbdirect: ib_dev[syz0] removed [ 530.443994][T16346] veth1_macvtap: left promiscuous mode [ 530.445971][T16346] macsec0: entered promiscuous mode [ 530.484410][T16247] hsr_slave_0: entered promiscuous mode [ 530.509170][T16247] hsr_slave_1: entered promiscuous mode [ 530.512077][T16247] debugfs: 'hsr0' already exists in 'hsr' [ 530.513930][T16247] Cannot create hsr debugfs directory [ 530.929571][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.263762][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 531.263776][ T42] audit: type=1800 audit(1785791434.457:6627): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 531.499340][ T5756] Bluetooth: hci3: command tx timeout [ 531.509139][T16247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 531.754482][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.830285][T16374] bridge2: entered promiscuous mode [ 531.870478][T16247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 531.969888][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.059822][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.089421][T16247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 532.201450][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.223560][T16247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 532.272420][ T12] IPVS: stop unused estimator thread 0... [ 532.286650][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.292021][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.422582][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.515848][T16395] fuse: fd is not a fuse device [ 532.517976][ T42] audit: type=1804 audit(1785791435.697:6628): pid=16395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2793" name="file1" dev="tmpfs" ino=758 res=1 errno=0 [ 532.529488][T16395] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 532.554357][ T42] audit: type=1800 audit(1785791435.727:6629): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 532.573366][ T42] audit: type=1804 audit(1785791435.737:6630): pid=16395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2793" name="file0" dev="tmpfs" ino=759 res=1 errno=0 [ 532.640440][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2795'. [ 532.701402][T16408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.728873][T16397] gadgetfs: bound to dummy_udc driver [ 532.733227][ T42] audit: type=1800 audit(1785791435.927:6631): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34958 res=0 errno=0 [ 532.740879][ T42] audit: type=1800 audit(1785791435.937:6632): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34981 res=0 errno=0 [ 532.767536][T16247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.776456][ T42] audit: type=1800 audit(1785791435.967:6633): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 532.808223][T16247] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.814136][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.816499][T10245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.822914][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.825360][T10245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.025173][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.046078][ T42] audit: type=1800 audit(1785791436.237:6634): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 533.094821][T16425] FAULT_INJECTION: forcing a failure. [ 533.094821][T16425] name failslab, interval 1, probability 0, space 0, times 0 [ 533.096384][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.098841][T16425] CPU: 0 UID: 0 PID: 16425 Comm: syz.7.2798 Tainted: G S L syzkaller #0 PREEMPT(full) [ 533.098860][T16425] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 533.098865][T16425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.098877][T16425] Call Trace: [ 533.098882][T16425] [ 533.098887][T16425] dump_stack_lvl+0x100/0x190 [ 533.098905][T16425] should_fail_ex.cold+0x5/0xa [ 533.098919][T16425] should_failslab+0xc2/0x120 [ 533.098937][T16425] __kmalloc_noprof+0xfc/0x820 [ 533.098952][T16425] ? __pfx_dynamic_dname+0x10/0x10 [ 533.098969][T16425] ? tomoyo_encode2+0xfb/0x3c0 [ 533.098988][T16425] tomoyo_encode2+0xfb/0x3c0 [ 533.099007][T16425] tomoyo_encode+0x29/0x50 [ 533.099024][T16425] tomoyo_realpath_from_path+0x18c/0x690 [ 533.099044][T16425] tomoyo_path_number_perm+0x23c/0x580 [ 533.099059][T16425] ? tomoyo_path_number_perm+0x22e/0x580 [ 533.099075][T16425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.099090][T16425] ? get_pid_task+0x106/0x250 [ 533.099118][T16425] ? find_held_lock+0x2b/0x80 [ 533.099133][T16425] ? __fget_files+0x215/0x3d0 [ 533.099143][T16425] ? hook_file_ioctl_common+0x140/0x440 [ 533.099158][T16425] ? __fget_files+0x215/0x3d0 [ 533.099171][T16425] ? __fget_files+0x21f/0x3d0 [ 533.099184][T16425] security_file_ioctl_compat+0xd3/0x230 [ 533.099200][T16425] __ia32_compat_sys_ioctl+0xc2/0x360 [ 533.099233][T16425] __do_fast_syscall_32+0xe7/0x970 [ 533.099250][T16425] ? lockdep_hardirqs_on+0x78/0x100 [ 533.099266][T16425] do_fast_syscall_32+0x32/0x70 [ 533.099282][T16425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.099298][T16425] RIP: 0023:0xf7f96fec [ 533.099314][T16425] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 533.099319][T16425] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 533.099331][T16425] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 533.099338][T16425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.099345][T16425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.099352][T16425] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.099358][T16425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.099373][T16425] [ 533.101830][T16425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.273845][T16247] veth0_vlan: entered promiscuous mode [ 533.279996][T16247] veth1_vlan: entered promiscuous mode [ 533.302133][ T42] audit: type=1800 audit(1785791436.497:6635): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 533.326909][T16247] veth0_macvtap: entered promiscuous mode [ 533.332287][T16247] veth1_macvtap: entered promiscuous mode [ 533.343012][T16247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.375345][T16247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.470515][T13069] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.485135][ T42] audit: type=1800 audit(1785791436.667:6636): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 533.528412][T15311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.531879][ T5827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.534679][T15311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.576906][T10245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.577843][ T5756] Bluetooth: hci3: command tx timeout [ 533.580429][T10245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.596842][ T5827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.605809][ T5827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.679302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 533.721901][T16439] wg2 speed is unknown, defaulting to 1000 [ 533.944613][T16441] wg2 speed is unknown, defaulting to 1000 [ 534.052805][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.099598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 534.129261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 534.139614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 534.169251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 534.179659][T16454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.882687][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2804'. [ 534.889048][T16462] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2804'. [ 535.092997][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.334537][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.363002][T16465] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2805'. [ 535.662832][ T5756] Bluetooth: hci3: command tx timeout [ 535.906233][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2810'. [ 535.963536][T16482] dlm: Using TCP for communications [ 535.996133][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2807'. [ 536.015457][T16486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.032194][T16480] FAULT_INJECTION: forcing a failure. [ 536.032194][T16480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.054928][T16480] CPU: 2 UID: 0 PID: 16480 Comm: syz.8.2809 Tainted: G S L syzkaller #0 PREEMPT(full) [ 536.054952][T16480] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 536.054957][T16480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.054964][T16480] Call Trace: [ 536.054968][T16480] [ 536.054974][T16480] dump_stack_lvl+0x100/0x190 [ 536.054993][T16480] should_fail_ex.cold+0x5/0xa [ 536.055008][T16480] _copy_from_iter+0x1f4/0x1690 [ 536.055028][T16480] ? __lock_acquire+0x49f/0x1a40 [ 536.055048][T16480] ? __pfx__copy_from_iter+0x10/0x10 [ 536.055066][T16480] ? _parse_integer_limit+0x1ac/0x220 [ 536.055084][T16480] tun_get_user+0x3ba/0x3c20 [ 536.055115][T16480] ? __pfx_tun_get_user+0x10/0x10 [ 536.055129][T16480] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 536.055146][T16480] ? find_held_lock+0x2b/0x80 [ 536.055160][T16480] ? tun_get+0x191/0x370 [ 536.055171][T16480] ? tun_get+0x191/0x370 [ 536.055186][T16480] tun_chr_write_iter+0xdc/0x200 [ 536.055201][T16480] vfs_write+0x6ac/0x1050 [ 536.055213][T16480] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 536.055228][T16480] ? __pfx_vfs_write+0x10/0x10 [ 536.055237][T16480] ? find_held_lock+0x2b/0x80 [ 536.055259][T16480] ksys_write+0x12a/0x250 [ 536.055270][T16480] ? __pfx_ksys_write+0x10/0x10 [ 536.055280][T16480] ? ksys_write+0x1ac/0x250 [ 536.055290][T16480] ? __pfx_ksys_write+0x10/0x10 [ 536.055303][T16480] __do_fast_syscall_32+0xe7/0x970 [ 536.055320][T16480] ? lockdep_hardirqs_on+0x78/0x100 [ 536.055336][T16480] do_fast_syscall_32+0x32/0x70 [ 536.055352][T16480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.055368][T16480] RIP: 0023:0xf7f55fec [ 536.055383][T16480] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 536.055388][T16480] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 536.055401][T16480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 536.055408][T16480] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 536.055415][T16480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.055421][T16480] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.055428][T16480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.055442][T16480] [ 536.141659][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.401897][T16490] syz_tun: entered allmulticast mode [ 536.403356][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 536.403366][ T42] audit: type=1800 audit(1785791439.597:6649): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 536.405034][T16489] syz_tun: left allmulticast mode [ 536.457104][ T42] audit: type=1800 audit(1785791439.647:6650): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 536.484799][ T42] audit: type=1800 audit(1785791439.677:6651): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 536.516261][T16494] gretap1: entered allmulticast mode [ 536.521921][T16494] batman_adv: batadv0: Adding interface: gretap1 [ 536.524038][T16494] batman_adv: batadv0: The MTU of interface gretap1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.532692][T16494] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 536.592053][T16496] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2814'. [ 536.974307][T16503] fuse: Bad value for 'fd' [ 537.001089][T16503] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 537.171559][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.267535][ T42] audit: type=1800 audit(1785791440.457:6652): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 537.337257][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 537.342101][T16514] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2818'. [ 537.354441][ T42] audit: type=1800 audit(1785791440.547:6653): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 537.408111][ T42] audit: type=1800 audit(1785791440.597:6654): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 537.455034][ T42] audit: type=1800 audit(1785791440.647:6655): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 537.680149][ T42] audit: type=1800 audit(1785791440.877:6656): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 537.753006][ T42] audit: type=1800 audit(1785791440.947:6657): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 537.780645][T16540] syzkaller0: entered promiscuous mode [ 537.782497][T16540] syzkaller0: entered allmulticast mode [ 537.923273][ T42] audit: type=1800 audit(1785791441.117:6658): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 538.009838][T16545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.019501][T16545] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2830'. [ 538.223221][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.252994][T16550] binder: 16549:16550 ioctl c00c6211 0 returned -14 [ 538.369624][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.654694][T16559] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2834'. [ 538.657703][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2834'. [ 538.741759][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.743983][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.751315][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.757723][T16563] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 538.767513][T16563] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 538.778884][T16563] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 538.840240][T16563] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 538.878387][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.885094][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.893938][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.896825][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.901846][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.904803][T16563] wlan0 speed is unknown, defaulting to 1000 [ 538.907634][T16563] wlan0 speed is unknown, defaulting to 1000 [ 539.260323][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.232049][T16580] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 540.236683][T16581] CIFS: Attempting to mount //127.0.0.1/share [ 540.325484][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.458523][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2839'. [ 540.462179][T16585] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2839'. [ 541.102962][T16581] CIFS: VFS: Error connecting to socket. Aborting operation. [ 541.112691][T16581] CIFS: VFS: cifs_mount failed w/return code = -4 [ 541.332738][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.535212][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.634949][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 541.634960][ T42] audit: type=1800 audit(1785791444.827:6668): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.670564][T16611] FAULT_INJECTION: forcing a failure. [ 541.670564][T16611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.674993][T16611] CPU: 2 UID: 0 PID: 16611 Comm: syz.7.2849 Tainted: G S L syzkaller #0 PREEMPT(full) [ 541.675015][T16611] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 541.675020][T16611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.675026][T16611] Call Trace: [ 541.675032][T16611] [ 541.675037][T16611] dump_stack_lvl+0x100/0x190 [ 541.675057][T16611] should_fail_ex.cold+0x5/0xa [ 541.675071][T16611] strncpy_from_user+0x3b/0x2d0 [ 541.675091][T16611] do_getname+0x78/0x390 [ 541.675109][T16611] do_sys_openat2+0xc7/0x1e0 [ 541.675125][T16611] ? __pfx_do_sys_openat2+0x10/0x10 [ 541.675140][T16611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.675157][T16611] ? __fget_files+0x21f/0x3d0 [ 541.675171][T16611] __ia32_compat_sys_openat+0x12d/0x210 [ 541.675188][T16611] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 541.675204][T16611] ? ksys_write+0x1ac/0x250 [ 541.675219][T16611] do_int80_emulation+0x14b/0x720 [ 541.675236][T16611] asm_int80_emulation+0x1a/0x20 [ 541.675249][T16611] RIP: 0023:0xf71973eb [ 541.675260][T16611] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 541.675271][T16611] RSP: 002b:00000000f545603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 541.675283][T16611] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5456100 [ 541.675290][T16611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.675297][T16611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.675303][T16611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 541.675310][T16611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.675329][T16611] [ 541.758888][ T42] audit: type=1800 audit(1785791444.947:6669): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.990189][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.101008][ T42] audit: type=1800 audit(1785791445.297:6670): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 542.116076][T16623] CIFS: Attempting to mount //127.0.0.1/share [ 542.188058][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2851'. [ 542.192034][T16624] CIFS: VFS: Invalid response size 0 for command 0 [ 542.196843][T16620] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2851'. [ 542.213291][T16623] CIFS: VFS: cifs_mount failed w/return code = -5 [ 542.371120][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.409763][ T42] audit: type=1800 audit(1785791445.597:6671): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 542.610733][ T42] audit: type=1800 audit(1785791445.807:6672): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=644343 res=0 errno=0 [ 542.882089][ T42] audit: type=1800 audit(1785791446.077:6673): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 542.890917][T16652] syz_tun: entered allmulticast mode [ 542.932586][ T42] audit: type=1800 audit(1785791446.127:6674): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 543.022611][ T42] audit: type=1800 audit(1785791446.217:6675): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 543.109041][T16651] syz_tun: left allmulticast mode [ 543.152450][ T42] audit: type=1800 audit(1785791446.347:6676): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 543.274641][T16643] orangefs_mount: mount request failed with -4 [ 543.378518][ T42] audit: type=1800 audit(1785791446.567:6677): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 543.440986][T16680] vlan2: entered promiscuous mode [ 543.442651][T16680] bond0: entered promiscuous mode [ 543.444609][T16680] bond_slave_0: entered promiscuous mode [ 543.446542][T16680] bond_slave_1: entered promiscuous mode [ 543.563783][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2863'. [ 543.567877][T16684] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2863'. [ 543.662342][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2864'. [ 543.726312][T16687] dlm: Using TCP for communications [ 543.753072][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.762128][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.166294][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2866'. [ 544.189017][T16695] SQUASHFS error: Failed to read block 0x0: -5 [ 544.193581][T16695] unable to read squashfs_super_block [ 544.410255][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2870'. [ 544.770304][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.812068][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.075798][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2873'. [ 545.106807][T16716] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2873'. [ 545.669883][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2878'. [ 545.684447][T16728] team0 (unregistering): Port device team_slave_0 removed [ 545.693485][T16727] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2878'. [ 545.701278][T16728] team0 (unregistering): Port device team_slave_1 removed [ 545.705072][T16729] openvswitch: netlink: IP tunnel dst address not specified [ 545.719459][T16728] team0 (unregistering): Port device vlan2 removed [ 545.892731][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.784189][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 546.784200][ T42] audit: type=1800 audit(1785791449.977:6686): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 546.804216][T16744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.933076][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.101210][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 547.262819][ T42] audit: type=1800 audit(1785791450.447:6687): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 547.511120][T16748] raw_sendmsg: syz.7.2885 forgot to set AF_INET. Fix it! [ 547.814496][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.869878][ T42] audit: type=1800 audit(1785791451.057:6688): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 547.961594][ T42] audit: type=1800 audit(1785791451.157:6689): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 547.978900][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.995215][ T42] audit: type=1800 audit(1785791451.187:6690): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 548.241708][ T42] audit: type=1800 audit(1785791451.437:6691): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 548.305084][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2897'. [ 548.392254][T16798] dlm: Using TCP for communications [ 548.446363][T16798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.017656][ T42] audit: type=1800 audit(1785791452.207:6692): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 549.116640][ T42] audit: type=1800 audit(1785791452.307:6693): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 549.133981][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.144495][T16814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.305378][T16817] gretap1: entered promiscuous mode [ 549.309846][T16821] overlayfs: missing 'lowerdir' [ 549.633881][ T42] audit: type=1800 audit(1785791452.827:6694): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 549.804665][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2907'. [ 549.814560][T16826] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2907'. [ 550.035197][ T42] audit: type=1800 audit(1785791453.227:6695): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 550.053171][T16830] syzkaller1: tun_chr_ioctl cmd 35108 [ 550.215357][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.701506][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.704896][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.738613][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2915'. [ 550.765982][T16852] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2915'. [ 550.771471][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.777225][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.850485][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.879653][T16375] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.883273][T16375] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.887984][T16375] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.895367][T16375] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.992811][T16854] CIFS mount error: No usable UNC path provided in device string! [ 550.992811][T16854] [ 551.004967][T16854] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.200560][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2918'. [ 551.251630][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.583300][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.609984][T16856] netlink: 'syz.7.2917': attribute type 12 has an invalid length. [ 551.802016][T16869] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2921'. [ 552.294489][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.363824][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2924'. [ 552.380008][T16879] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2924'. [ 552.544345][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 552.544361][ T42] audit: type=1800 audit(1785791455.737:6704): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 552.650452][ T42] audit: type=1800 audit(1785791455.837:6705): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 552.693366][ T42] audit: type=1800 audit(1785791455.887:6706): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 552.746219][T16885] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2928'. [ 552.829507][ T42] audit: type=1800 audit(1785791456.007:6707): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 553.070012][ T24] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 553.291767][ T24] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 553.301652][ T24] usb 12-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 553.330136][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.369296][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.400997][T16893] loop8: detected capacity change from 0 to 8 [ 553.415900][T16883] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 553.429057][ T24] opticon 12-1:1.0: opticon converter detected [ 553.463411][ T42] audit: type=1800 audit(1785791456.617:6708): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=644904 res=0 errno=0 [ 553.552904][T16893] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 553.609066][T16893] loop8: partition table partially beyond EOD, truncated [ 553.629639][ T24] usb 12-1: opticon converter now attached to ttyUSB0 [ 553.655059][ T42] audit: type=1800 audit(1785791456.627:6709): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=644933 res=0 errno=0 [ 553.763552][ T42] audit: type=1800 audit(1785791456.817:6710): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=644911 res=0 errno=0 [ 553.782530][ T42] audit: type=1800 audit(1785791456.817:6711): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=644912 res=0 errno=0 [ 553.839764][ T42] audit: type=1800 audit(1785791456.817:6712): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=644913 res=0 errno=0 [ 553.865249][ T24] usb 12-1: USB disconnect, device number 4 [ 553.880347][ T42] audit: type=1800 audit(1785791456.967:6713): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=644953 res=0 errno=0 [ 553.899066][T16893] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 553.909802][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 553.922262][ T24] opticon 12-1:1.0: device disconnected [ 553.932910][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.988003][T14744] udevd[14744]: symlink '../../loop8' '/dev/disk/by-diskseq/89.tmp-b7:8' failed: Read-only file system [ 554.085319][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/89.tmp-b7:8' failed: Read-only file system [ 554.121582][T16897] fuse: fd is not a fuse device [ 554.124441][T14477] udevd[14477]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 554.155297][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/89.tmp-b7:8' failed: Read-only file system [ 554.182318][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/89.tmp-b7:8' failed: Read-only file system [ 554.203348][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 554.300141][T16903] trusted_key: encrypted_key: insufficient parameters specified [ 554.397788][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.662192][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.931862][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2937'. [ 555.101305][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 555.158079][T16920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.437676][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2939'. [ 555.444348][T16925] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2939'. [ 555.617112][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 555.697881][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 555.766558][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 555.771785][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.742376][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 556.756775][T16945] netlink: 'syz.8.2946': attribute type 1 has an invalid length. [ 556.772881][T16945] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2946'. [ 556.854295][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.957503][T16948] batadv_slave_0: Caught tx_queue_len zero misconfig [ 557.010740][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.133660][T16949] netlink: 'syz.8.2946': attribute type 1 has an invalid length. [ 557.136338][T16949] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2946'. [ 557.336890][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.893500][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.216810][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 558.216831][ T42] audit: type=1800 audit(1785791461.407:6756): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 558.328757][ T42] audit: type=1800 audit(1785791461.517:6757): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 558.420479][T16991] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2961'. [ 558.459275][ T42] audit: type=1800 audit(1785791461.647:6758): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 558.578134][ T42] audit: type=1800 audit(1785791461.757:6759): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 558.602841][ T42] audit: type=1800 audit(1785791461.797:6760): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2965" name="new_device" dev="sysfs" ino=45616 res=0 errno=0 [ 558.612907][T17003] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95 [ 558.613180][T17003] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 558.613482][T17003] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 558.635036][ T42] audit: type=1800 audit(1785791461.797:6761): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=645318 res=0 errno=0 [ 558.643182][ T42] audit: type=1800 audit(1785791461.807:6762): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45614 res=0 errno=0 [ 558.650627][ T42] audit: type=1800 audit(1785791461.807:6763): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=645319 res=0 errno=0 [ 558.859594][ T1042] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 559.022658][ T1042] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 559.031489][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.039573][ T1042] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 559.050900][ T1042] usb 12-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 559.054047][ T1042] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.058861][ T1042] usb 12-1: Product: syz [ 559.063696][ T1042] usb 12-1: Manufacturer: syz [ 559.070649][ T1042] usb 12-1: SerialNumber: syz [ 559.078517][ T1042] usb 12-1: config 0 descriptor?? [ 559.087340][ T42] audit: type=1800 audit(1785791462.277:6764): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=645340 res=0 errno=0 [ 559.097290][ T1042] hub 12-1:0.0: bad descriptor, ignoring hub [ 559.107084][ T1042] hub 12-1:0.0: probe with driver hub failed with error -5 [ 559.116421][ T42] audit: type=1800 audit(1785791462.277:6765): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=645372 res=0 errno=0 [ 559.132846][ T1042] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input109 [ 559.197245][T17012] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 559.671616][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 559.671706][T17025] netlink: 191164 bytes leftover after parsing attributes in process `syz.6.2973'. [ 559.689424][T17025] openvswitch: netlink: ufid size 21752 bytes exceeds the range (1, 16) [ 559.693627][T17025] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 559.740365][T17027] netlink: 'syz.8.2974': attribute type 1 has an invalid length. [ 559.745481][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2974'. [ 559.817692][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 559.879329][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'. [ 560.049808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.053484][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.257770][T17025] netlink: 'syz.6.2973': attribute type 2 has an invalid length. [ 560.379580][ T5927] usb 12-1: USB disconnect, device number 5 [ 560.489447][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 560.542911][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2977'. [ 560.719657][T17044] dlm: Using TCP for communications [ 561.118401][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.118930][T17046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.180348][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.356258][ T5756] Bluetooth: hci1: unexpected cc 0x2027 length: 9 > 1 [ 561.358300][ T5756] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 561.374437][ T5756] Bluetooth: hci1: ACL packet for unknown connection handle 1225 [ 561.677042][T17067] pim6reg: entered allmulticast mode [ 561.718899][T17067] pim6reg: left allmulticast mode [ 561.788463][T17060] netlink: 'syz.7.2983': attribute type 4 has an invalid length. [ 561.795113][T17060] netlink: 'syz.7.2983': attribute type 8 has an invalid length. [ 561.812739][T17060] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2983'. [ 561.826713][T17060] tmpfs: Unknown parameter 'usrquota€' [ 561.968785][T14744] udevd[14744]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 562.134588][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.225884][T17082] trusted_key: encrypted_key: insufficient parameters specified [ 562.451785][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.099600][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.106525][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 563.171569][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.574795][T17088] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 563.633788][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 563.633808][ T42] audit: type=1800 audit(1785791466.827:6803): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 563.656750][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2996'. [ 563.747989][T17110] dlm: Using TCP for communications [ 563.754781][T17110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.925794][T17115] trusted_key: encrypted_key: insufficient parameters specified [ 564.041867][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 564.046426][ T42] audit: type=1800 audit(1785791467.237:6804): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 564.062711][T17118] fuse: fd is not a fuse device [ 564.078462][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3000'. [ 564.212746][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.216791][ T42] audit: type=1800 audit(1785791467.407:6805): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 564.235706][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 564.363790][T17133] siw: device registration error -23 [ 565.020527][ T42] audit: type=1800 audit(1785791468.217:6806): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 565.105118][T17151] veth0_to_bond: Caught tx_queue_len zero misconfig [ 565.111260][T17151] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 565.141676][ T42] audit: type=1800 audit(1785791468.337:6807): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 565.149117][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 565.202294][T17157] o2cb: This node has not been configured. [ 565.205624][T17157] o2cb: Cluster check failed. Fix errors before retrying. [ 565.207912][T17157] (syz.5.3012,17157,0):user_dlm_register:674 ERROR: status = -22 [ 565.212103][T17157] (syz.5.3012,17157,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "sec" [ 565.250523][T14705] net_ratelimit: 1 callbacks suppressed [ 565.250538][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.402687][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3015'. [ 565.406740][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3015'. [ 565.669338][ T42] audit: type=1800 audit(1785791468.837:6808): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=645682 res=0 errno=0 [ 565.914710][ T5602] tipc: Subscription rejected, illegal request [ 565.955022][ T42] audit: type=1800 audit(1785791469.147:6809): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 565.960888][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 565.989336][ T42] audit: type=1800 audit(1785791469.177:6810): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 566.006764][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3017'. [ 566.075487][T17177] dlm: Using TCP for communications [ 566.186519][T17177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.297645][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.303109][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.067235][T10243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.156022][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.159415][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.170784][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3023'. [ 567.175838][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3023'. [ 567.312275][ T42] audit: type=1800 audit(1785791470.507:6811): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 567.345299][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.345353][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.422332][ T42] audit: type=1800 audit(1785791470.617:6812): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 567.432889][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 567.446815][T17200] overlayfs: failed to clone lowerpath [ 567.574241][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3029'. [ 567.594310][T17207] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3029'. [ 567.730150][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.371875][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.422346][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 568.541501][T17224] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3035'. [ 568.645500][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3036'. [ 568.802384][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3033'. [ 568.808637][T17231] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3033'. [ 568.843265][T17232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.873967][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 568.873979][ T42] audit: type=1800 audit(1785791472.057:6818): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 568.938272][ T24] wlan0 speed is unknown, defaulting to 1000 [ 568.942335][ T24] syz0: Port: 1 Link DOWN [ 569.052106][ T42] audit: type=1800 audit(1785791472.247:6819): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3039" name="nullb0" dev="tmpfs" ino=1570 res=0 errno=0 [ 569.066097][ T42] audit: type=1800 audit(1785791472.257:6820): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3039" name="nullb0" dev="tmpfs" ino=1570 res=0 errno=0 [ 569.081059][ T42] audit: type=1800 audit(1785791472.257:6821): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3039" name="nullb0" dev="tmpfs" ino=1570 res=0 errno=0 [ 569.115521][ T42] audit: type=1800 audit(1785791472.307:6822): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 569.325565][T17245] bond1: entered promiscuous mode [ 569.374934][ T42] audit: type=1800 audit(1785791472.567:6823): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 569.391183][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 569.414186][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.483815][ T42] audit: type=1800 audit(1785791472.677:6824): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 569.497961][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 569.545446][T17257] trusted_key: encrypted_key: insufficient parameters specified [ 569.577679][ T42] audit: type=1800 audit(1785791472.767:6825): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 569.590137][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 569.619603][ T42] audit: type=1800 audit(1785791472.807:6826): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3046" name="run" dev="sysfs" ino=1000 res=0 errno=0 [ 569.704576][ T42] audit: type=1800 audit(1785791472.897:6827): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 569.720741][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 570.183097][T17271] trusted_key: encrypted_key: insufficient parameters specified [ 570.301154][T13994] net_ratelimit: 3 callbacks suppressed [ 570.301167][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.361244][T14744] udevd[14744]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 570.377955][T17286] 9p: Bad value for 'rfdno' [ 570.769883][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.259509][ T5455] veth0_vlan: left promiscuous mode [ 571.277957][ T5855] veth0_vlan: entered promiscuous mode [ 571.598060][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.606076][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.609777][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.718791][T17300] wg2 speed is unknown, defaulting to 1000 [ 571.728178][T17307] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3056'. [ 572.068640][T17300] wlan0 speed is unknown, defaulting to 1000 [ 572.197497][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.229600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.419877][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 572.691424][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 573.005356][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.024225][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.029308][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.033350][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.041321][ T5764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.250980][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.328495][T17322] wg2 speed is unknown, defaulting to 1000 [ 573.341643][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.404096][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 573.472723][T17326] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3062'. [ 573.753062][T17322] wlan0 speed is unknown, defaulting to 1000 [ 573.808896][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3063'. [ 573.817899][T17340] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3063'. [ 573.927796][T17342] trusted_key: encrypted_key: insufficient parameters specified [ 574.513952][T17322] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.520553][T17322] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.524939][T17322] bridge_slave_0: entered allmulticast mode [ 574.532831][T17322] bridge_slave_0: entered promiscuous mode [ 574.539504][T17322] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.554063][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.561048][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 574.561062][ T42] audit: type=1800 audit(1785791477.757:6843): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 574.574860][T17322] bridge_slave_1: entered allmulticast mode [ 574.592362][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 574.600300][T17322] bridge_slave_1: entered promiscuous mode [ 574.633294][T17322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.657148][ T42] audit: type=1800 audit(1785791477.847:6844): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 574.668784][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 574.674252][T17322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.694929][T17322] team0: Port device team_slave_0 added [ 574.698208][T17322] team0: Port device team_slave_1 added [ 574.713861][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.716168][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.768741][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.780191][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.784124][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.792747][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.861513][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3069'. [ 574.869738][T17370] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3069'. [ 575.062544][T17322] hsr_slave_0: entered promiscuous mode [ 575.065044][T17322] hsr_slave_1: entered promiscuous mode [ 575.067024][T17322] debugfs: 'hsr0' already exists in 'hsr' [ 575.068647][T17322] Cannot create hsr debugfs directory [ 575.093354][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3071'. [ 575.097976][T17371] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3071'. [ 575.169351][ T5756] Bluetooth: hci0: command tx timeout [ 575.330297][T14705] net_ratelimit: 2 callbacks suppressed [ 575.330316][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.353779][ T42] audit: type=1800 audit(1785791477.548:6845): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 575.367080][ T42] audit: type=1800 audit(1785791477.558:6846): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27370 res=0 errno=0 [ 575.399100][ T42] audit: type=1800 audit(1785791477.578:6847): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659249 res=0 errno=0 [ 575.447923][T17322] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 575.453041][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.455894][T17322] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 575.460032][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.462950][T17322] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 575.467289][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.470567][T17322] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 575.475075][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.517776][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.535476][T17322] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.578090][ T42] audit: type=1800 audit(1785791477.768:6848): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 575.582266][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 575.585421][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.590166][T10245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.605666][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.608323][T10245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.617077][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3074'. [ 575.621766][T17382] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3074'. [ 575.641328][ T42] audit: type=1800 audit(1785791477.838:6849): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 575.657280][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 575.666644][T17322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.720222][ T42] audit: type=1800 audit(1785791477.898:6850): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 575.723802][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 575.795174][T17393] dlm: Using TCP for communications [ 575.822543][T17393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.948394][T17322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.096780][T17322] veth0_vlan: entered promiscuous mode [ 576.103494][T17322] veth1_vlan: entered promiscuous mode [ 576.121729][T17322] veth0_macvtap: entered promiscuous mode [ 576.126419][T17322] veth1_macvtap: entered promiscuous mode [ 576.136895][T17322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.143639][T17322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.177767][T16375] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.203315][ T42] audit: type=1800 audit(1785791477.398:6851): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659609 res=0 errno=0 [ 576.213051][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.218891][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.236885][T15311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.242367][T15311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.244670][ T42] audit: type=1800 audit(1785791477.428:6852): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659735 res=0 errno=0 [ 576.250754][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.277299][T15311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.279961][T15311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.330641][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 576.372099][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.374732][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.462785][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 576.636252][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 576.637769][T17424] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 576.673860][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 576.864729][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.254379][ T5756] Bluetooth: hci0: command tx timeout [ 577.258209][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 577.463680][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.811313][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.011266][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 578.109089][T17444] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 578.110607][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.318901][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 578.531965][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.678544][T17459] __nla_validate_parse: 1 callbacks suppressed [ 578.678563][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3093'. [ 578.777983][T17462] dlm: Using TCP for communications [ 578.816810][T17462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.012602][ T1167] smbdirect: ib_dev[syz0] removed [ 579.119441][T17467] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3095'. [ 579.146090][T17469] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 579.332254][ T5756] Bluetooth: hci0: command tx timeout [ 579.410865][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.438151][T17480] netlink: 'syz.5.3100': attribute type 12 has an invalid length. [ 579.446563][T17480] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3100'. [ 579.455030][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.465592][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.057471][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 580.057489][ T42] audit: type=1800 audit(1785791481.248:6866): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 580.178402][ T42] audit: type=1800 audit(1785791481.368:6867): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 580.194775][ T42] audit: type=1326 audit(1785791481.388:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17490 comm="syz.6.3105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 580.211096][ T42] audit: type=1326 audit(1785791481.388:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17490 comm="syz.6.3105" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 580.212022][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3108'. [ 580.226420][T17501] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3108'. [ 580.234388][ T42] audit: type=1326 audit(1785791481.388:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17490 comm="syz.6.3105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 580.253313][ T42] audit: type=1326 audit(1785791481.398:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17490 comm="syz.6.3105" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 580.362519][ T42] audit: type=1800 audit(1785791481.558:6872): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 580.610963][ T41] net_ratelimit: 1 callbacks suppressed [ 580.610987][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.659617][ T42] audit: type=1800 audit(1785791481.848:6873): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 580.676051][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 581.039584][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 581.040410][ T42] audit: type=1800 audit(1785791482.228:6874): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 581.059853][T17518] netlink: 'syz.8.3112': attribute type 1 has an invalid length. [ 581.119441][T17518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.141915][T17519] bond1: (slave gretap2): making interface the new active one [ 581.152235][T17519] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 581.184202][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.291885][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 581.297255][ T42] audit: type=1800 audit(1785791482.478:6875): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 581.410807][ T5756] Bluetooth: hci0: command tx timeout [ 581.481413][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3114'. [ 581.608189][T17525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.651303][ T5532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.653962][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.698600][T17527] Invalid source name [ 582.099800][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 582.146202][T17533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.280562][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3118'. [ 582.448948][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 582.452927][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.516952][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3120'. [ 582.573675][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 582.662586][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 582.691855][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.719881][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 582.959606][T17557] netlink: 'syz.5.3125': attribute type 1 has an invalid length. [ 582.962292][T17557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3125'. [ 583.056021][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.097623][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 583.167654][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 583.449454][ T5532] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 583.613827][ T5532] usb 13-1: Using ep0 maxpacket: 8 [ 583.632467][ T5532] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 583.642515][ T5532] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.653861][ T5532] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 583.665235][ T5532] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 583.675028][ T5532] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.693891][ T5532] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 583.712326][ T5532] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.732902][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.211044][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.487718][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3133'. [ 584.545339][T17589] dlm: Using TCP for communications [ 584.565757][T17589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.770893][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.345181][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 585.345200][ T42] audit: type=1326 audit(1785791486.538:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.6.3132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 585.416776][T17596] fuse: fd is not a fuse device [ 585.597882][T17599] wg2 speed is unknown, defaulting to 1000 [ 585.812602][ T41] net_ratelimit: 1 callbacks suppressed [ 585.812618][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.065486][ T42] audit: type=1800 audit(1785791487.258:6917): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 586.076911][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 586.172474][ T42] audit: type=1800 audit(1785791487.368:6918): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=664523 res=0 errno=0 [ 586.240703][ T5927] usb 13-1: USB disconnect, device number 2 [ 586.270519][ T42] audit: type=1800 audit(1785791487.448:6919): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 586.298183][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 586.424970][ T42] audit: type=1800 audit(1785791487.618:6920): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 586.444359][T17614] tipc: Started in network mode [ 586.446033][T17614] tipc: Node identity 4, cluster identity 4711 [ 586.448072][T17614] tipc: Node number set to 4 [ 586.470942][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 586.636770][ T42] audit: type=1800 audit(1785791487.828:6921): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=664575 res=0 errno=0 [ 586.902942][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.915392][T17628] fuse: fd is not a fuse device [ 587.592200][ T42] audit: type=1800 audit(1785791488.768:6922): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 587.611946][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 587.698185][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.796862][T17635] macvlan2: entered allmulticast mode [ 587.798676][T17635] batadv_slave_1: entered allmulticast mode [ 587.809028][T17635] batman_adv: batadv0: Adding interface: macvlan2 [ 587.811393][T17635] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.819692][T17635] batman_adv: batadv0: Interface activated: macvlan2 [ 588.005735][T14705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.011665][ T42] audit: type=1800 audit(1785791489.208:6923): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 588.025681][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 588.084575][T17645] No source specified [ 588.104787][T17645] bridge_slave_0: left allmulticast mode [ 588.108985][T17645] bridge_slave_0: left promiscuous mode [ 588.113610][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.122237][ T5855] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 588.135146][T17645] bridge_slave_1: left allmulticast mode [ 588.137146][T17645] bridge_slave_1: left promiscuous mode [ 588.139083][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.192116][T17645] bond0: (slave bond_slave_0): Releasing backup interface [ 588.393353][T17645] bond_slave_0: left promiscuous mode [ 588.397657][T17645] bond0: (slave bond_slave_1): Releasing backup interface [ 588.402112][T17645] bond_slave_1: left promiscuous mode [ 588.412391][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.424475][T17645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.435249][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.457048][T17645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.465240][ T42] audit: type=1800 audit(1785791489.658:6924): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 588.474662][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 588.539587][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.574619][ T42] audit: type=1800 audit(1785791489.768:6925): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 588.588927][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 588.642398][T17645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 588.694295][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.724169][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.733438][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.839548][ T5756] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 588.842851][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3151'. [ 588.865384][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 588.896966][ T5756] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 588.900020][T17661] netlink: 'syz.6.3154': attribute type 4 has an invalid length. [ 588.902490][T17661] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3154'. [ 588.922894][T17659] wg2 speed is unknown, defaulting to 1000 [ 589.245456][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 589.305420][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 589.373678][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3160'. [ 589.377578][T17677] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3160'. [ 590.045298][ T24] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 590.364028][T17700] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3168'. [ 590.723447][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 590.723458][ T42] audit: type=1800 audit(1785791491.918:6937): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 590.771387][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3169'. [ 590.774957][T17715] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3169'. [ 590.801872][ T24] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 590.808580][ T24] usb 14-1: config 0 has no interface number 0 [ 590.811361][ T24] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.818200][ T24] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 590.822444][ T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.825864][ T24] usb 14-1: Product: syz [ 590.826334][ T42] audit: type=1800 audit(1785791492.018:6938): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 590.827662][ T24] usb 14-1: Manufacturer: syz [ 590.827677][ T24] usb 14-1: SerialNumber: syz [ 590.864173][ T42] audit: type=1800 audit(1785791492.038:6939): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=668662 res=0 errno=0 [ 590.876648][ T42] audit: type=1800 audit(1785791492.038:6940): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=668694 res=0 errno=0 [ 590.891084][ T42] audit: type=1800 audit(1785791492.038:6941): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=668669 res=0 errno=0 [ 590.905914][ T42] audit: type=1800 audit(1785791492.038:6942): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=668670 res=0 errno=0 [ 590.917953][ T42] audit: type=1800 audit(1785791492.038:6943): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=668691 res=0 errno=0 [ 590.930483][ T42] audit: type=1800 audit(1785791492.038:6944): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=668692 res=0 errno=0 [ 590.939411][ T42] audit: type=1800 audit(1785791492.038:6945): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=668671 res=0 errno=0 [ 590.945834][ T42] audit: type=1800 audit(1785791492.048:6946): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=668693 res=0 errno=0 [ 591.090500][ T5841] net_ratelimit: 4 callbacks suppressed [ 591.090513][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.170222][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 591.208004][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3175'. [ 591.215653][T17738] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3175'. [ 591.250046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.356993][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3178'. [ 591.362786][T17745] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3178'. [ 591.475228][T17754] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3182'. [ 591.534763][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 591.573089][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.604747][T17760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.131234][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.133172][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 592.306210][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'. [ 592.489922][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 592.710100][ T24] usb 14-1: USB disconnect, device number 2 [ 592.915315][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 593.171260][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.178328][T14477] udevd[14477]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 593.436383][T14477] udevd[14477]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 594.210590][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.450609][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.453565][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.610259][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.251058][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.290612][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.331180][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.649517][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.369896][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.411341][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.212827][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.216633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.450580][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.690806][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.850187][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.491234][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.530424][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.570438][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.731676][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.610456][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.332124][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.334776][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.650438][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.962689][T17800] 9p: Bad value for 'rfdno' [ 605.993240][T17800] futex_wake_op: syz.6.3193 tries to shift op by 32; fix this program [ 606.691044][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.770331][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.774576][T17830] trusted_key: encrypted_key: insufficient parameters specified [ 606.856104][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 606.856142][ T42] audit: type=1800 audit(1785791508.048:6956): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 606.874899][T17825] udevd[17825]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 607.200753][T17827] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3198'. [ 607.423350][ T42] audit: type=1800 audit(1785791508.618:6957): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 607.436797][T17825] udevd[17825]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 607.730485][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.880358][ T42] audit: type=1800 audit(1785791509.078:6958): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 607.888990][T17825] udevd[17825]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 607.979533][T17854] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3206'. [ 608.076816][ T42] audit: type=1800 audit(1785791509.268:6959): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 608.091334][T17825] udevd[17825]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 608.386887][T17861] siw: device registration error -23 [ 608.771063][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.305301][T17874] netlink: 'syz.5.3214': attribute type 3 has an invalid length. [ 609.307803][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'. [ 609.407977][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.414311][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.425142][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.434812][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.449141][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.532408][T13994] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 611.103597][T17884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3216'. [ 611.394932][ T42] audit: type=1800 audit(1785791512.588:6960): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 611.450434][T17892] udevd[17892]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 611.566352][T17879] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3215'. [ 611.657970][T17903] netlink: 'syz.6.3221': attribute type 4 has an invalid length. [ 611.933718][T17911] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3223'. [ 611.971471][ T5841] net_ratelimit: 8 callbacks suppressed [ 611.971492][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.630358][ T42] audit: type=1800 audit(1785791513.828:6961): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 612.658056][T17892] udevd[17892]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 612.747727][ T42] audit: type=1800 audit(1785791513.938:6962): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 612.769183][T17892] udevd[17892]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 612.790017][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3226'. [ 612.826834][ T42] audit: type=1800 audit(1785791514.018:6963): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 612.843548][T17921] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3226'. [ 612.845322][T17892] udevd[17892]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 612.871751][T17928] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 612.871751][T17928] Please contact the netfilter-devel mailing list or update your nftables rules. [ 613.011052][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.075206][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.215352][ T42] audit: type=1800 audit(1785791514.408:6964): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 613.231062][T17892] udevd[17892]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 613.489339][T13994] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 613.641489][T13994] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.656344][T13994] usb 13-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 613.668554][T13994] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.710963][ T42] audit: type=1800 audit(1785791514.898:6965): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 613.732807][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 613.744437][ T42] audit: type=1800 audit(1785791514.918:6966): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=668987 res=0 errno=0 [ 613.772690][ T42] audit: type=1800 audit(1785791514.918:6967): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=669016 res=0 errno=0 [ 613.800358][ T42] audit: type=1800 audit(1785791514.928:6968): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=668994 res=0 errno=0 [ 613.823489][T17943] can: request_module (can-proto-3) failed. [ 613.824998][ T42] audit: type=1800 audit(1785791514.928:6969): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=668995 res=0 errno=0 [ 613.844512][ T42] audit: type=1800 audit(1785791514.928:6970): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=668996 res=0 errno=0 [ 613.852587][T17946] wg2 speed is unknown, defaulting to 1000 [ 614.053372][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.339046][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 614.521391][T17956] fuse: fd is not a fuse device [ 614.694058][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 614.697853][T17959] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3236'. [ 614.821829][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 614.829565][T17961] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3237'. [ 615.093712][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.209118][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 615.813961][T17974] fuse: fd is not a fuse device [ 615.934890][ T5756] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 616.130865][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.133743][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.174722][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 616.277154][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3245'. [ 616.288536][T17985] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3245'. [ 616.365333][ T5855] usb 13-1: USB disconnect, device number 3 [ 616.395130][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 616.850400][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.853740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.105947][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 617.200648][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.271594][T18007] can: request_module (can-proto-3) failed. [ 617.300469][T18007] wg2 speed is unknown, defaulting to 1000 [ 617.718744][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 617.718756][ T42] audit: type=1800 audit(1785791518.908:6980): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 617.732304][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 617.778016][ T42] audit: type=1800 audit(1785791518.968:6981): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 617.798528][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 617.815195][ T42] audit: type=1800 audit(1785791519.008:6982): pid=18015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3256" name="fscaps" dev="sysfs" ino=8 res=0 errno=0 [ 617.937084][ T42] audit: type=1800 audit(1785791519.128:6983): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 617.949665][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 617.991969][ T42] audit: type=1800 audit(1785791519.178:6984): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 617.993718][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 618.052096][T18024] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 618.129274][ T42] audit: type=1800 audit(1785791519.318:6985): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 618.144412][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 618.221136][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.134263][ T42] audit: type=1800 audit(1785791520.318:6986): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 619.142516][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 619.179417][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.190346][ T42] audit: type=1800 audit(1785791520.388:6987): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 619.231313][ T42] audit: type=1800 audit(1785791520.388:6988): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=676870 res=0 errno=0 [ 619.242694][T17892] udevd[17892]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 619.253590][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.254039][ T42] audit: type=1800 audit(1785791520.408:6989): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=676880 res=0 errno=0 [ 619.546366][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 619.751331][T18013] Cannot find add_set index 0 as target [ 620.125539][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 620.292301][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.556534][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 620.700426][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.330733][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.211958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.372366][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.613041][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.616635][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.018048][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 623.018062][ T42] audit: type=1800 audit(1785791524.208:6996): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5226 res=0 errno=0 [ 623.035817][ T42] audit: type=1800 audit(1785791524.228:6997): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 623.052756][ T42] audit: type=1800 audit(1785791524.248:6998): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 623.097372][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 623.143633][T18065] lo: Caught tx_queue_len zero misconfig [ 623.283408][T18068] overlay: Unknown parameter '/' [ 623.297743][T18070] overlay: Unknown parameter '/' [ 623.412356][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.498952][T18072] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 623.577056][ T42] audit: type=1800 audit(1785791524.768:6999): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=677006 res=0 errno=0 [ 623.596566][ T42] audit: type=1800 audit(1785791524.768:7000): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=677021 res=0 errno=0 [ 623.605962][ T42] audit: type=1800 audit(1785791524.788:7001): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=677051 res=0 errno=0 [ 623.612392][ T42] audit: type=1800 audit(1785791524.788:7002): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=677036 res=0 errno=0 [ 623.892107][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.221447][ T42] audit: type=1800 audit(1785791525.408:7003): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 624.221605][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 624.336278][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3273'. [ 624.379121][ T42] audit: type=1800 audit(1785791525.568:7004): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 624.393377][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 624.428094][T18084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.478473][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.512994][ T42] audit: type=1800 audit(1785791525.708:7005): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 624.535497][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 624.550166][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3274'. [ 624.617372][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 624.711151][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3275'. [ 624.836927][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 625.025688][T18099] Invalid option length (1047276) for dns_resolver key [ 625.098907][T18099] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.260927][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.493035][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.494698][T17940] udevd[17940]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 625.975227][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.103221][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 626.212665][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 626.327303][T18129] [ 626.328351][T18129] ====================================================== [ 626.331168][T18129] WARNING: possible circular locking dependency detected [ 626.333966][T18129] syzkaller #0 Tainted: G S L [ 626.336469][T18129] ------------------------------------------------------ [ 626.339275][T18129] syz.8.3286/18129 is trying to acquire lock: [ 626.341734][T18129] ffff8880423b6450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 626.345277][T18129] [ 626.345277][T18129] but task is already holding lock: [ 626.348223][T18129] ffff8880134eb920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 626.351909][T18129] [ 626.351909][T18129] which lock already depends on the new lock. [ 626.351909][T18129] [ 626.356090][T18129] [ 626.356090][T18129] the existing dependency chain (in reverse order) is: [ 626.359742][T18129] [ 626.359742][T18129] -> #3 (&common->filesem){++++}-{4:4}: [ 626.362848][T18129] lock_acquire+0x1b9/0x370 [ 626.364933][T18129] down_read+0x99/0x4c0 [ 626.366750][T18129] fsg_show_file+0x20/0x180 [ 626.368679][T18129] configfs_read_iter+0x426/0x6f0 [ 626.370836][T18129] __kernel_read+0x397/0xad0 [ 626.372898][T18129] integrity_kernel_read+0x7e/0xb0 [ 626.375181][T18129] ima_calc_file_hash_tfm+0x25e/0x350 [ 626.377639][T18129] ima_calc_file_hash+0x1e3/0x380 [ 626.379882][T18129] ima_collect_measurement+0x94f/0xb30 [ 626.382313][T18129] process_measurement+0xdfe/0x2350 [ 626.384675][T18129] ima_file_check+0xcc/0x120 [ 626.386742][T18129] security_file_post_open+0xc4/0x210 [ 626.389116][T18129] path_openat+0x985/0x4280 [ 626.391180][T18129] do_file_open+0x20e/0x430 [ 626.393257][T18129] do_sys_openat2+0x10f/0x1e0 [ 626.395271][T18129] __ia32_compat_sys_openat+0x12d/0x210 [ 626.397629][T18129] __do_fast_syscall_32+0xe7/0x970 [ 626.399794][T18129] do_fast_syscall_32+0x32/0x70 [ 626.402009][T18129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.404821][T18129] [ 626.404821][T18129] -> #2 (&p->frag_sem){++++}-{4:4}: [ 626.407814][T18129] lock_acquire+0x1b9/0x370 [ 626.409900][T18129] down_read+0x99/0x4c0 [ 626.411832][T18129] __configfs_open_file+0xe8/0x9c0 [ 626.414123][T18129] do_dentry_open+0x6ab/0x14d0 [ 626.416280][T18129] vfs_open+0x82/0x3f0 [ 626.418214][T18129] dentry_open+0x71/0xd0 [ 626.420219][T18129] ima_calc_file_hash+0xe1/0x380 [ 626.422470][T18129] ima_collect_measurement+0x94f/0xb30 [ 626.424981][T18129] process_measurement+0xdfe/0x2350 [ 626.427318][T18129] ima_file_check+0xcc/0x120 [ 626.429402][T18129] security_file_post_open+0xc4/0x210 [ 626.431387][T18129] path_openat+0x985/0x4280 [ 626.432981][T18129] do_file_open+0x20e/0x430 [ 626.434674][T18129] do_sys_openat2+0x10f/0x1e0 [ 626.436308][T18129] __ia32_compat_sys_openat+0x12d/0x210 [ 626.438222][T18129] __do_fast_syscall_32+0xe7/0x970 [ 626.439988][T18129] do_fast_syscall_32+0x32/0x70 [ 626.441790][T18129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.444086][T18129] [ 626.444086][T18129] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 626.446992][T18129] lock_acquire+0x1b9/0x370 [ 626.448590][T18129] __mutex_lock+0x1a4/0x1bd0 [ 626.450302][T18129] process_measurement+0x5ab/0x2350 [ 626.452613][T18129] ima_file_check+0xcc/0x120 [ 626.454730][T18129] security_file_post_open+0xc4/0x210 [ 626.457113][T18129] path_openat+0x985/0x4280 [ 626.459177][T18129] do_file_open+0x20e/0x430 [ 626.461215][T18129] do_sys_openat2+0x10f/0x1e0 [ 626.462970][T18129] __x64_sys_openat+0x12d/0x210 [ 626.464842][T18129] do_syscall_64+0x115/0x840 [ 626.466528][T18129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.468558][T18129] [ 626.468558][T18129] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 626.470969][T18129] check_prev_add+0xeb/0xe60 [ 626.472618][T18129] __lock_acquire+0x136c/0x1a40 [ 626.474577][T18129] lock_acquire+0x1b9/0x370 [ 626.476261][T18129] mnt_want_write+0x6f/0x410 [ 626.477921][T18129] path_openat+0xad9/0x4280 [ 626.479564][T18129] do_file_open+0x20e/0x430 [ 626.481177][T18129] file_open_name+0x1c3/0x3e0 [ 626.482886][T18129] filp_open+0x2e/0x50 [ 626.484644][T18129] fsg_lun_open+0x6b/0x7b0 [ 626.486683][T18129] fsg_store_file+0x1e7/0x450 [ 626.488385][T18129] configfs_write_iter+0x302/0x4e0 [ 626.490057][T18129] vfs_write+0x6ac/0x1050 [ 626.491627][T18129] ksys_write+0x12a/0x250 [ 626.493210][T18129] __do_fast_syscall_32+0xe7/0x970 [ 626.495115][T18129] do_fast_syscall_32+0x32/0x70 [ 626.496960][T18129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.499591][T18129] [ 626.499591][T18129] other info that might help us debug this: [ 626.499591][T18129] [ 626.503655][T18129] Chain exists of: [ 626.503655][T18129] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 626.503655][T18129] [ 626.508752][T18129] Possible unsafe locking scenario: [ 626.508752][T18129] [ 626.511703][T18129] CPU0 CPU1 [ 626.513865][T18129] ---- ---- [ 626.516017][T18129] lock(&common->filesem); [ 626.517873][T18129] lock(&p->frag_sem); [ 626.520547][T18129] lock(&common->filesem); [ 626.523410][T18129] rlock(sb_writers#5); [ 626.525171][T18129] [ 626.525171][T18129] *** DEADLOCK *** [ 626.525171][T18129] [ 626.528467][T18129] 5 locks held by syz.8.3286/18129: [ 626.530592][T18129] #0: ffff8880142d3b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 626.534209][T18129] #1: ffff888022870450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 626.537906][T18129] #2: ffff88801cf98880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 626.541743][T18129] #3: ffff88805d69b970 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 626.545656][T18129] #4: ffff8880134eb920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 626.549453][T18129] [ 626.549453][T18129] stack backtrace: [ 626.551840][T18129] CPU: 2 UID: 0 PID: 18129 Comm: syz.8.3286 Tainted: G S L syzkaller #0 PREEMPT(full) [ 626.551868][T18129] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 626.551875][T18129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.551887][T18129] Call Trace: [ 626.551897][T18129] [ 626.551905][T18129] dump_stack_lvl+0x100/0x190 [ 626.551929][T18129] print_circular_bug.cold+0x178/0x1c7 [ 626.551958][T18129] check_noncircular+0x146/0x160 [ 626.551982][T18129] ? __lock_acquire+0xd5b/0x1a40 [ 626.552013][T18129] check_prev_add+0xeb/0xe60 [ 626.552039][T18129] __lock_acquire+0x136c/0x1a40 [ 626.552065][T18129] ? try_to_unlazy+0x296/0x910 [ 626.552091][T18129] lock_acquire+0x1b9/0x370 [ 626.552115][T18129] ? path_openat+0xad9/0x4280 [ 626.552132][T18129] ? __pfx___might_resched+0x10/0x10 [ 626.552174][T18129] mnt_want_write+0x6f/0x410 [ 626.552199][T18129] ? path_openat+0xad9/0x4280 [ 626.552216][T18129] path_openat+0xad9/0x4280 [ 626.552238][T18129] ? __pfx_path_openat+0x10/0x10 [ 626.552256][T18129] ? kasan_save_stack+0x3f/0x50 [ 626.552280][T18129] ? kasan_save_stack+0x30/0x50 [ 626.552301][T18129] ? kasan_save_track+0x14/0x30 [ 626.552324][T18129] ? __kasan_slab_alloc+0x89/0x90 [ 626.552346][T18129] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 626.552370][T18129] ? do_getname_kernel+0x5d/0x250 [ 626.552391][T18129] ? filp_open+0x1d/0x50 [ 626.552415][T18129] ? fsg_lun_open+0x6b/0x7b0 [ 626.552446][T18129] do_file_open+0x20e/0x430 [ 626.552466][T18129] ? __pfx_do_file_open+0x10/0x10 [ 626.552496][T18129] ? rcu_is_watching+0x12/0xc0 [ 626.552520][T18129] file_open_name+0x1c3/0x3e0 [ 626.552546][T18129] ? __pfx_file_open_name+0x10/0x10 [ 626.552569][T18129] ? do_getname_kernel+0x5d/0x250 [ 626.552591][T18129] ? __asan_memcpy+0x3c/0x60 [ 626.552611][T18129] ? do_getname_kernel+0x1be/0x250 [ 626.552633][T18129] filp_open+0x2e/0x50 [ 626.552655][T18129] fsg_lun_open+0x6b/0x7b0 [ 626.552678][T18129] ? __pfx_down_read+0x10/0x10 [ 626.552707][T18129] fsg_store_file+0x1e7/0x450 [ 626.552730][T18129] configfs_write_iter+0x302/0x4e0 [ 626.552749][T18129] vfs_write+0x6ac/0x1050 [ 626.552766][T18129] ? __pfx_configfs_write_iter+0x10/0x10 [ 626.552783][T18129] ? __pfx_vfs_write+0x10/0x10 [ 626.552798][T18129] ? find_held_lock+0x2b/0x80 [ 626.552825][T18129] ksys_write+0x12a/0x250 [ 626.552840][T18129] ? __pfx_ksys_write+0x10/0x10 [ 626.552859][T18129] __do_fast_syscall_32+0xe7/0x970 [ 626.552885][T18129] do_fast_syscall_32+0x32/0x70 [ 626.552909][T18129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.552931][T18129] RIP: 0023:0xf7f55fec [ 626.552954][T18129] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 626.552962][T18129] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 626.552979][T18129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 626.552990][T18129] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.553000][T18129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.553011][T18129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 626.553021][T18129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.553036][T18129] [ 626.561280][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3287'. [ 626.569255][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.572609][T18132] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3287'. [ 626.619819][T18129] mass_storage.0/lun.0: unable to open backing file: fi [ 626.626265][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3285'. [ 626.724035][T17940] udevd[17940]: symlink '../../loop8' '/dev/disk/by-diskseq/90.tmp-b7:8' failed: Read-only file system [ 627.571119][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.649900][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.652549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.289663][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.612006][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.652213][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.289865][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.692057][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.330000][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.732348][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.689826][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.693303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.771330][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.810447][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.369799][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.850953][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.890572][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog