last executing test programs: 12m55.169009059s ago: executing program 2 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="fec6410f01c8b9800000c00f3235000400000f30f03090abb88dc043db5600c4819f59ba00000080400f35c4617a5ded4c0fc7ad00000000c7442400a6000000c7442402be000000ff2c24", 0x4b}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m55.049156749s ago: executing program 2 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x480c1}, 0x24004054) 12m55.049043736s ago: executing program 2 (id=848): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r1}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 12m54.729146636s ago: executing program 2 (id=849): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x33, 0x1e, 0x0, 0x2, 0x3, 0xa9, 0x5, 0x80002, 0x1}) 12m54.729010632s ago: executing program 2 (id=850): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone(0x40a02000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 12m54.478163762s ago: executing program 2 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515"], 0x54}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 12m46.514956476s ago: executing program 32 (id=776): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x36, &(0x7f0000000800)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) 12m39.164357152s ago: executing program 33 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515"], 0x54}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 12m0.136427541s ago: executing program 1 (id=1050): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000001c0)={0x0, 0x0, 0xd}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11m59.811568529s ago: executing program 1 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, 0x0, 0x400700, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x168, 0x9, 0x144, 0xb, 0x22c, 0x250, 0x250, 0x22c, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xff], [], 'geneve0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xfc, 0x144, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x2c}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@set2={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@broadcast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "84384be0a4202d24"}}}}, &(0x7f0000000240)={0x1, 0x2, [0x73, 0xd66, 0x868, 0x539]}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r8) 11m58.6145995s ago: executing program 1 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) 11m58.614191131s ago: executing program 1 (id=1059): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x01\n0', 0x6) 11m58.288867576s ago: executing program 1 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="1165a1aa22"]}, @nested={0x4, 0x3}]}, 0x24}}, 0x4008030) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x9842, 0x180) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000240)=ANY=[], 0xfff5) socket$inet_sctp(0x2, 0x5, 0x84) 11m57.973073177s ago: executing program 1 (id=1062): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x0, 0x3e, 0x110}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4000003, 0x3) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x28) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x2c0081, 0x0) r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 11m57.801502205s ago: executing program 34 (id=1062): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x0, 0x3e, 0x110}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4000003, 0x3) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x28) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x2c0081, 0x0) r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 10m0.010776055s ago: executing program 0 (id=1692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 9m58.797179437s ago: executing program 0 (id=1696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r6, &(0x7f0000000200), 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000}) 9m57.585131159s ago: executing program 0 (id=1700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 9m56.321259505s ago: executing program 0 (id=1706): r0 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 9m56.24802303s ago: executing program 0 (id=1707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, 0x0, 0x400700, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x168, 0x9, 0x144, 0xb, 0x22c, 0x250, 0x250, 0x22c, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xff], [], 'geneve0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xfc, 0x144, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x2c}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@set2={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@broadcast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "84384be0a4202d24"}}}}, &(0x7f0000000240)={0x1, 0x2, [0x73, 0xd66, 0x868, 0x539]}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9m56.209719606s ago: executing program 0 (id=1709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200), 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000}) 9m55.754170755s ago: executing program 35 (id=1709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200), 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000}) 7m35.467646451s ago: executing program 4 (id=2496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 7m34.79503885s ago: executing program 4 (id=2504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0xa6, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m34.763539032s ago: executing program 4 (id=2505): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r0, 0x400, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) (async) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x2010, r2, 0x0) write(r1, &(0x7f0000000140)="2289", 0x2) 7m34.656922965s ago: executing program 4 (id=2507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x400000, 0x130) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x344, 0xffffffff, 0x1d4, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ip={@loopback, @broadcast, 0xffffff, 0x0, 'ip6gre0\x00', 'hsr0\x00', {}, {}, 0x5c, 0x2, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8a, 0x14, "a6ae013866bccf37be56a524c3c7db384159a0c557774c704e69c4821ff2"}}}, {{@ip={@broadcast, @multicast2, 0xff, 0xff, 'bond_slave_0\x00', 'nr0\x00', {0xff}, {}, 0x21, 0x0, 0x31}, 0x0, 0xc8, 0x124, 0x0, {}, [@common=@ah={{0x2c}, {[0x8, 0xa]}}, @common=@addrtype={{0x2c}, {0x100, 0x9, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="57ef5ff9cebd", 0x7ff, 0x7, [0x14, 0x37, 0x27, 0x2b, 0x37, 0x15, 0x2e, 0xc, 0x13, 0x2, 0xd, 0x1a, 0x32, 0x2d, 0x40, 0x12], 0x1, 0x33}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x2}}, @common=@inet=@socket1={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='2', 0x1) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe4) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000480)={0x7ff, 0xffffffffffffffff, 0x1, 0x5}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4000010, r1, 0x0) ftruncate(r1, 0x4a8e) pipe(&(0x7f0000000300)) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m34.487433596s ago: executing program 4 (id=2510): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0xfe) close_range(r0, 0xffffffffffffffff, 0x0) 7m34.267613209s ago: executing program 4 (id=2513): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) 7m34.226585589s ago: executing program 36 (id=2513): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) 6m16.765740635s ago: executing program 5 (id=2968): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbffffffffffffff000000050000000000000000200000001c19959838974987af"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x14840, 0x94c5b70d69a46fa0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) execveat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000280)='syzkaller\x00']}, &(0x7f00000003c0)={[&(0x7f0000000300)='[@&@*\x00', &(0x7f0000000380)='\x00']}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x61, 0x4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$xdp(r4, &(0x7f0000000b80)={&(0x7f0000000680)={0x2c, 0x8, r7, 0x18}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000780)="fb4eeb2344226dcbbac2a46f097ef7221e971d8203e1289956b2875806198d60aa0e9b16c0e6e72637bd42194604aa7f38e8c855d3c3fbc4697c74abb9f66e77823d3d91de54214d317bbba1c9a0e8b27c8c25b96a4c4f856aa446964c33c1b479283b6581d1f8f0ecaef31ca05a8f59750b69f354c240f5ddacd44d22a3ec2bc75329cce88bb6023099494a41b83d380d5b966624bbe21f3019ca8df44087d254eaf812293b2b455fd9eb667d997a7d8ed395900ad8d69ee2f6624171eb7b510f3ba899d5ef84d51b42219d246fda94526c65e37c9a359c4e921865351b0c0857d0690c2f2d48", 0xe7}], 0x1, 0x0, 0x0, 0x24048000}, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000040)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7004fedbdf251f00000008000200", @ANYRES64=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc01c5869, &(0x7f0000000580)={r0, &(0x7f0000000480)='\x00', 0x80000, &(0x7f00000004c0)={@align, {0x83, 0x1, 0x9, 0xb95}}, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x4}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000000600)='.}){(\x00', &(0x7f0000000640)='./file0\x00', r2) 6m16.692628307s ago: executing program 5 (id=2969): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) lsetxattr$trusted_overlay_opaque(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), &(0x7f0000002600), 0x2, 0x2) r1 = syz_ublk_setup_io_uring(0x800020, &(0x7f0000000040)={0x0, 0x6240, 0x80, 0x2}, 0x0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000780)=[{&(0x7f00000007c0)="b9b7d39e", 0x4}, {&(0x7f00000005c0)="98c7", 0x2}], 0x2) r4 = syz_io_uring_setup(0x820, &(0x7f0000002640)={0x0, 0xeb34, 0x80000, 0x0, 0x239, 0x0, r1}, &(0x7f00000026c0), &(0x7f0000002700), &(0x7f0000002740)) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000004880)=[{0x9, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002780)=""/248, 0xf8}, {&(0x7f0000002880)=""/61, 0x3d}, {&(0x7f00000028c0)=""/28, 0x1c}, {&(0x7f0000002900)=""/145, 0x91}, {&(0x7f00000029c0)=""/225, 0xe1}, {&(0x7f0000002ac0)=""/170, 0xaa}, {&(0x7f0000002b80)=""/23, 0x17}]}, {0x1c0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c00)=""/169, 0xa9}, {&(0x7f0000002cc0)=""/30, 0x1e}, {&(0x7f0000002d00)=""/46, 0x2e}]}, {0x8c36, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002d80)=""/89, 0x59}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/73, 0x49}]}, {0x2, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003ec0)=""/7, 0x7}, {&(0x7f0000003f00)=""/182, 0xb6}]}, {0x6, 0x0, &(0x7f0000004340)=[{&(0x7f0000004000)=""/162, 0xa2}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/1, 0x1}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/48, 0x30}, {&(0x7f0000004300)=""/25, 0x19}]}, {0x6, 0x0, &(0x7f0000004400)=[{&(0x7f0000004380)=""/123, 0x7b}]}, {0xde4, 0x0, &(0x7f0000004840)=[{&(0x7f0000004440)=""/91, 0x5b}, {&(0x7f00000044c0)=""/241, 0xf1}, {&(0x7f00000045c0)=""/237, 0xed}, {&(0x7f00000046c0)=""/173, 0xad}, {&(0x7f0000004780)=""/112, 0x70}, {&(0x7f0000004800)}]}], 0x7) syz_usb_disconnect(r2) syz_fuse_handle_req(r0, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000002340)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x28818010, 0xd, 0x8, 0x7, 0x5, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x5, 0x2, 0x80000000, 0x1, 0x0, 0x9, {0x0, 0x1, 0xb, 0x9, 0x5, 0x4, 0x9, 0x7fffffff, 0x20004, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f00000025c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f00000023c0)={0x118, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x84) mount$9p_fd(0x0, &(0x7f0000002040)='./file0/file3\x00', 0x0, 0xa88000, 0x0) 6m13.623415248s ago: executing program 5 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f000071d000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8032, 0xffffffffffffffff, 0x95a7f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0xa, 0x3, 0x5}, 0x80, 0x0}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf0f2}], 0x1) 6m13.394824084s ago: executing program 5 (id=2978): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000300)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0', 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b1002, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 6m13.3310565s ago: executing program 5 (id=2980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 6m12.795482371s ago: executing program 5 (id=2982): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0x2, 0x3, 0x7, {0x1, 0x7}, 0x401, 0xc70a}) 6m12.656968695s ago: executing program 37 (id=2982): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0x2, 0x3, 0x7, {0x1, 0x7}, 0x401, 0xc70a}) 6m9.367117936s ago: executing program 9 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d05, &(0x7f0000000900)="000001") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 6m9.257004393s ago: executing program 9 (id=2996): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000300)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0', 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b1002, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 6m9.196914377s ago: executing program 9 (id=2997): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m7.975218427s ago: executing program 9 (id=3000): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f00ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x80000006, 0x9f, 0x0, 0x0, 0x7, 0x8, 0x4, 0x11, 0x1, 0x5, 0x6, 0x80983, 0x0, 0x20810, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x4}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 6m7.922849718s ago: executing program 38 (id=3000): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f00ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x80000006, 0x9f, 0x0, 0x0, 0x7, 0x8, 0x4, 0x11, 0x1, 0x5, 0x6, 0x80983, 0x0, 0x20810, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x4}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 1.187479263s ago: executing program 7 (id=6024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x9, 0xfffffff9, 0xf687, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0xd6}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20004014) 1.015712153s ago: executing program 7 (id=6029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x40}}, 0x0) 930.605657ms ago: executing program 7 (id=6031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 770.564066ms ago: executing program 7 (id=6035): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 769.885083ms ago: executing program 7 (id=6038): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x40044) 706.139432ms ago: executing program 7 (id=6039): r0 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f00000000c0), 0x10127, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) 641.564907ms ago: executing program 6 (id=6041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8}, {0x0, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 577.44486ms ago: executing program 8 (id=6043): socket(0x200000000000011, 0x2, 0x8001) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 524.64423ms ago: executing program 6 (id=6044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 448.822043ms ago: executing program 8 (id=6046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4, 0xfff2}, {0xffff, 0xffff}, {0x7, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 393.644931ms ago: executing program 3 (id=6047): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100040018000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000000000000000000000000000000000000000636ec0ecf5c2c4b63e6e87caf4359380f7e69a7fc676afa1e315bf5a6dd1f0e2e57a60716971b23f9a265b9e9ad8b29bdd5955951fa85363484034d863a21121f524fcfcad04477694e4bd43fbdc8159f4f040aabe56ab4ad576467bd180291de3f0b1374fb2ce196f4d195c6a923dbe01e1f3d9f1e40e7d254be7d89960c3252283e4"], 0x50) unshare(0xa020480) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="6f965c4e839a734a5117b669e20c444d6002bbde16eb698d8021ad47ca117483f8c9980cbbcc4c3c1a27e0e16bf2d785b2d4f3dedb8438257b8c4a1e3d80431430f6d1f2bca6eb9d63f1912a541b0e7fbf42e6b6fffa6fcd02104e7f30cab43644f30af10da4d23a79b1343fd202e986ac", @ANYBLOB="000000000000000000bf9e50e62fa2000000000000000000a905ce27b7c2ea000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c81437e751a2b90b16f412ed000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r7) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000d4a8403ef6afa66c", @ANYRES16=r8, @ANYBLOB="030f00000000000000000800000015000100001a0000000000000000000000330a8886000000"], 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0xfffffffffffffee8, &(0x7f0000000540)={&(0x7f0000000600)={0x94, r12, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0xffffffffffffff34, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r14 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r14, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r14, &(0x7f0000001b80), 0x0, 0x2000c044) writev(r14, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES8=r9, @ANYRES64, @ANYRES32, @ANYRESDEC=r3, @ANYRES8=r6, @ANYRES8=r14, @ANYBLOB="44b1813b6f58d10fa7a9d1560136e8f18193bc5ee692a0f90334a3bc008bd19fca6406e42b26c3babbcf60c04ab30990b9e5dd8e436689f4fbc4f3d03d034599435afd7a28751f1360e44c07ea30fed1c570f8af7c4fddf73408cf59064f46edf20f56fcd59176111715da61075794", @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000002500)=""/4116, 0x0, 0xc}, 0x94) 392.91344ms ago: executing program 6 (id=6048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e8031400080045"], 0x6a) 390.30905ms ago: executing program 8 (id=6049): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x9, 0xfffffff9, 0xf687, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0xd6}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20004014) 277.001775ms ago: executing program 3 (id=6050): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x40044) 276.312815ms ago: executing program 6 (id=6051): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r1, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) 275.97115ms ago: executing program 3 (id=6052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8}, {0x0, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 223.702561ms ago: executing program 8 (id=6053): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 138.773128ms ago: executing program 3 (id=6054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$can_j1939(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x1}}, 0x18, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) 137.931768ms ago: executing program 8 (id=6055): socket(0x200000000000011, 0x2, 0x8001) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 137.820222ms ago: executing program 6 (id=6056): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bind$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 54.322082ms ago: executing program 3 (id=6057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 53.840665ms ago: executing program 6 (id=6058): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100040018000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000000000000000000000000000000000000000636ec0ecf5c2c4b63e6e87caf4359380f7e69a7fc676afa1e315bf5a6dd1f0e2e57a60716971b23f9a265b9e9ad8b29bdd5955951fa85363484034d863a21121f524fcfcad04477694e4bd43fbdc8159f4f040aabe56ab4ad576467bd180291de3f0b1374fb2ce196f4d195c6a923dbe01e1f3d9f1e40e7d254be7d89960c3252283e4"], 0x50) unshare(0xa020480) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="6f965c4e839a734a5117b669e20c444d6002bbde16eb698d8021ad47ca117483f8c9980cbbcc4c3c1a27e0e16bf2d785b2d4f3dedb8438257b8c4a1e3d80431430f6d1f2bca6eb9d63f1912a541b0e7fbf42e6b6fffa6fcd02104e7f30cab43644f30af10da4d23a79b1343fd202e986ac", @ANYBLOB="000000000000000000bf9e50e62fa2000000000000000000a905ce27b7c2ea000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c81437e751a2b90b16f412ed000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r7) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000d4a8403ef6afa66c", @ANYRES16=r8, @ANYBLOB="030f00000000000000000800000015000100001a0000000000000000000000330a8886000000"], 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0xfffffffffffffee8, &(0x7f0000000540)={&(0x7f0000000600)={0x94, r12, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0xffffffffffffff34, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r14 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r14, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r14, &(0x7f0000001b80), 0x0, 0x2000c044) writev(r14, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES8=r9, @ANYRES64, @ANYRES32, @ANYRESDEC=r3, @ANYRES8=r6, @ANYRES8=r14, @ANYBLOB="44b1813b6f58d10fa7a9d1560136e8f18193bc5ee692a0f90334a3bc008bd19fca6406e42b26c3babbcf60c04ab30990b9e5dd8e436689f4fbc4f3d03d034599435afd7a28751f1360e44c07ea30fed1c570f8af7c4fddf73408cf59064f46edf20f56fcd59176111715da61075794", @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000002500)=""/4116, 0x0, 0xc}, 0x94) 787.429µs ago: executing program 8 (id=6059): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x8, 0xffff, 0x65, @loopback, @mcast1, 0x20, 0x700, 0xb8, 0x7}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b000000"], 0x28}}, 0x0) close(0x3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r4, 0x0, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000020000000090a010400000000000000000700008909000200aeaf8fdf21e0"], 0x68}}, 0x20050800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c"], 0x92fc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r0}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0xb0abc2ec80b84c55, 0x10, {0x0, 0xea60}, {0x0, 0xea60}, {0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "52ddfb8fdb7e392e"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x59, 0x2, 0x3, 0x8000, 0x8}, &(0x7f0000000480)=0x98) 0s ago: executing program 3 (id=6060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e8031400080045"], 0x6a) kernel console output (not intermixed with test programs): T20741] __sys_bpf+0x2f5/0x4a30 [ 814.786728][T20741] ? __pfx___sys_bpf+0x10/0x10 [ 814.786740][T20741] ? find_held_lock+0x2b/0x80 [ 814.786751][T20741] ? get_pid_task+0xfc/0x250 [ 814.786762][T20741] ? get_pid_task+0xfc/0x250 [ 814.786776][T20741] ? proc_fail_nth_write+0x9f/0x220 [ 814.786794][T20741] ? find_held_lock+0x2b/0x80 [ 814.786807][T20741] ? rcu_read_lock_any_held+0x6a/0x90 [ 814.786820][T20741] ? find_held_lock+0x2b/0x80 [ 814.786830][T20741] ? ksys_write+0x190/0x250 [ 814.786848][T20741] ? ksys_write+0x190/0x250 [ 814.786874][T20741] ? fput+0x7c/0x100 [ 814.786887][T20741] ? __ia32_sys_bpf+0xcc/0x170 [ 814.786898][T20741] __ia32_sys_bpf+0xcc/0x170 [ 814.786909][T20741] ? __do_fast_syscall_32+0xb3/0x8b0 [ 814.786921][T20741] __do_fast_syscall_32+0x13a/0x8b0 [ 814.786932][T20741] ? lockdep_hardirqs_on+0x7d/0x110 [ 814.786949][T20741] do_fast_syscall_32+0x32/0x70 [ 814.786966][T20741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.786980][T20741] RIP: 0023:0xf700efec [ 814.786992][T20741] Code: Unable to access opcode bytes at 0xf700efc2. [ 814.786998][T20741] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 814.787009][T20741] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080002300 [ 814.787017][T20741] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 814.787023][T20741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.787029][T20741] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 814.787036][T20741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.787049][T20741] [ 814.915789][T20743] batman_adv: batadv0: Adding interface: macvtap5 [ 814.915829][T20743] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.915847][T20743] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active [ 815.036742][T20748] loop5: detected capacity change from 0 to 7 [ 815.039715][T20748] Dev loop5: unable to read RDB block 7 [ 815.039769][T20748] loop5: unable to read partition table [ 815.039883][T20748] loop5: partition table beyond EOD, truncated [ 815.039902][T20748] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 815.143327][T18018] usb usb52-port1: attempt power cycle [ 815.406953][T20765] FAULT_INJECTION: forcing a failure. [ 815.406953][T20765] name fail_futex, interval 1, probability 0, space 0, times 1 [ 815.407012][T20765] CPU: 2 UID: 0 PID: 20765 Comm: syz.7.3837 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.407038][T20765] Tainted: [L]=SOFTLOCKUP [ 815.407046][T20765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 815.407057][T20765] Call Trace: [ 815.407064][T20765] [ 815.407071][T20765] dump_stack_lvl+0x100/0x190 [ 815.407101][T20765] should_fail_ex.cold+0x5/0xa [ 815.407125][T20765] get_futex_key+0xf72/0x14f0 [ 815.407155][T20765] ? __pfx_get_futex_key+0x10/0x10 [ 815.407200][T20765] ? __mutex_unlock_slowpath+0x35d/0x930 [ 815.407236][T20765] futex_wake+0xf4/0x5e0 [ 815.407260][T20765] ? __pfx_futex_wake+0x10/0x10 [ 815.407279][T20765] ? __lock_acquire+0x4c5/0x1ec0 [ 815.407315][T20765] do_futex+0x2b2/0x440 [ 815.407335][T20765] ? __pfx_do_futex+0x10/0x10 [ 815.407350][T20765] ? __might_fault+0xc5/0x140 [ 815.407384][T20765] mm_exit_exec_release+0x256/0x2f0 [ 815.407415][T20765] do_exit+0x707/0x2ae0 [ 815.407439][T20765] ? __pfx_do_exit+0x10/0x10 [ 815.407457][T20765] ? do_raw_spin_lock+0x128/0x260 [ 815.407485][T20765] ? find_held_lock+0x2b/0x80 [ 815.407502][T20765] ? get_signal+0x7e0/0x21e0 [ 815.407530][T20765] do_group_exit+0xd5/0x2a0 [ 815.407551][T20765] get_signal+0x1ec7/0x21e0 [ 815.407578][T20765] ? __local_bh_enable_ip+0xa5/0x120 [ 815.407602][T20765] ? tcp_sendmsg+0x38/0x50 [ 815.407616][T20765] ? __pfx_tcp_sendmsg+0x10/0x10 [ 815.407635][T20765] ? __pfx_get_signal+0x10/0x10 [ 815.407654][T20765] ? __pfx___sys_sendto+0x10/0x10 [ 815.407678][T20765] arch_do_signal_or_restart+0x91/0x7a0 [ 815.407698][T20765] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 815.407727][T20765] exit_to_user_mode_loop+0x139/0x700 [ 815.407748][T20765] ? rcu_is_watching+0x13/0xc0 [ 815.407763][T20765] __do_fast_syscall_32+0x59f/0x8b0 [ 815.407776][T20765] ? lockdep_hardirqs_on+0x7d/0x110 [ 815.407798][T20765] do_fast_syscall_32+0x32/0x70 [ 815.407812][T20765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.407829][T20765] RIP: 0023:0xf704efec [ 815.407845][T20765] Code: Unable to access opcode bytes at 0xf704efc2. [ 815.407852][T20765] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 815.407866][T20765] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000080000000 [ 815.407876][T20765] RDX: 00000000ffffff94 RSI: 0000000000000000 RDI: 0000000000000000 [ 815.407884][T20765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.407892][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.407901][T20765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.407922][T20765] [ 815.516181][T20775] loop5: detected capacity change from 0 to 7 [ 815.518099][T20775] Dev loop5: unable to read RDB block 7 [ 815.518120][T20775] loop5: unable to read partition table [ 815.518207][T20775] loop5: partition table beyond EOD, truncated [ 815.518222][T20775] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 815.540786][T20774] batman_adv: batadv0: Adding interface: macvtap6 [ 815.540849][T20774] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.540902][T20774] batman_adv: batadv0: Not using interface macvtap6 (retrying later): interface not active [ 815.639288][T20780] FAULT_INJECTION: forcing a failure. [ 815.639288][T20780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.639339][T20780] CPU: 3 UID: 0 PID: 20780 Comm: syz.6.3844 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.639366][T20780] Tainted: [L]=SOFTLOCKUP [ 815.639371][T20780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 815.639378][T20780] Call Trace: [ 815.639383][T20780] [ 815.639387][T20780] dump_stack_lvl+0x100/0x190 [ 815.639405][T20780] should_fail_ex.cold+0x5/0xa [ 815.639420][T20780] _copy_from_iter+0x1f4/0x1690 [ 815.639439][T20780] ? __asan_memset+0x23/0x50 [ 815.639462][T20780] ? __pfx__copy_from_iter+0x10/0x10 [ 815.639483][T20780] ? __pfx___alloc_skb+0x10/0x10 [ 815.639520][T20780] netlink_sendmsg+0x808/0xda0 [ 815.639546][T20780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.639570][T20780] ? apparmor_socket_sendmsg+0x15b/0x270 [ 815.639598][T20780] ____sys_sendmsg+0xa4d/0xbe0 [ 815.639615][T20780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.639638][T20780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.639666][T20780] ___sys_sendmsg+0x190/0x1e0 [ 815.639687][T20780] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.639717][T20780] ? find_held_lock+0x2b/0x80 [ 815.639748][T20780] __sys_sendmsg+0x160/0x210 [ 815.639772][T20780] ? __pfx___sys_sendmsg+0x10/0x10 [ 815.639800][T20780] ? __pfx_ksys_write+0x10/0x10 [ 815.639828][T20780] __do_fast_syscall_32+0x13a/0x8b0 [ 815.639855][T20780] ? lockdep_hardirqs_on+0x7d/0x110 [ 815.639881][T20780] do_fast_syscall_32+0x32/0x70 [ 815.639898][T20780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.639918][T20780] RIP: 0023:0xf700efec [ 815.639936][T20780] Code: Unable to access opcode bytes at 0xf700efc2. [ 815.639944][T20780] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 815.639960][T20780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 815.639971][T20780] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 815.639980][T20780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.639990][T20780] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 815.639999][T20780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.640020][T20780] [ 815.718515][T13290] usb 13-1: new high-speed USB device number 67 using dummy_hcd [ 815.734306][T20782] /dev/nullb0: Can't open blockdev [ 815.735693][T20782] 9pnet_fd: p9_fd_create_tcp (20782): problem connecting socket to 127.0.0.1 [ 815.744163][T20787] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 815.744236][T20787] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 815.815613][T18018] usb usb52-port1: unable to enumerate USB device [ 815.878845][T13290] usb 13-1: Using ep0 maxpacket: 16 [ 815.879991][T13290] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 815.881168][T13290] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.881191][T13290] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.881212][T13290] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.882400][T13290] usb 13-1: config 0 descriptor?? [ 816.117708][T13290] usbhid 13-1:0.0: can't add hid device: -71 [ 816.117830][T13290] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 816.120529][T13290] usb 13-1: USB disconnect, device number 67 [ 816.586668][T20792] FAULT_INJECTION: forcing a failure. [ 816.586668][T20792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.586736][T20792] CPU: 0 UID: 0 PID: 20792 Comm: syz.7.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.586763][T20792] Tainted: [L]=SOFTLOCKUP [ 816.586769][T20792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 816.586776][T20792] Call Trace: [ 816.586780][T20792] [ 816.586785][T20792] dump_stack_lvl+0x100/0x190 [ 816.586803][T20792] should_fail_ex.cold+0x5/0xa [ 816.586818][T20792] _copy_from_iter+0x1f4/0x1690 [ 816.586836][T20792] ? __asan_memset+0x23/0x50 [ 816.586854][T20792] ? __pfx__copy_from_iter+0x10/0x10 [ 816.586870][T20792] ? __pfx___alloc_skb+0x10/0x10 [ 816.586892][T20792] netlink_sendmsg+0x808/0xda0 [ 816.586908][T20792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.586930][T20792] ? apparmor_socket_sendmsg+0x15b/0x270 [ 816.586950][T20792] ____sys_sendmsg+0xa4d/0xbe0 [ 816.586961][T20792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.586977][T20792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.586995][T20792] ___sys_sendmsg+0x190/0x1e0 [ 816.587010][T20792] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.587029][T20792] ? find_held_lock+0x2b/0x80 [ 816.587049][T20792] __sys_sendmsg+0x160/0x210 [ 816.587066][T20792] ? __pfx___sys_sendmsg+0x10/0x10 [ 816.587086][T20792] ? __pfx_ksys_write+0x10/0x10 [ 816.587105][T20792] __do_fast_syscall_32+0x13a/0x8b0 [ 816.587117][T20792] ? lockdep_hardirqs_on+0x7d/0x110 [ 816.587134][T20792] do_fast_syscall_32+0x32/0x70 [ 816.587145][T20792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 816.587159][T20792] RIP: 0023:0xf704efec [ 816.587172][T20792] Code: Unable to access opcode bytes at 0xf704efc2. [ 816.587177][T20792] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 816.587189][T20792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 816.587196][T20792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.587202][T20792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.587209][T20792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 816.587215][T20792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.587229][T20792] [ 816.655383][T20798] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3849'. [ 816.700094][T20802] loop5: detected capacity change from 0 to 7 [ 816.705702][T20802] Dev loop5: unable to read RDB block 7 [ 816.705770][T20802] loop5: unable to read partition table [ 816.705913][T20802] loop5: partition table beyond EOD, truncated [ 816.705928][T20802] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 816.717228][T20798] FAULT_INJECTION: forcing a failure. [ 816.717228][T20798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.717355][T20798] CPU: 3 UID: 0 PID: 20798 Comm: syz.7.3849 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.717379][T20798] Tainted: [L]=SOFTLOCKUP [ 816.717386][T20798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 816.717401][T20798] Call Trace: [ 816.717407][T20798] [ 816.717414][T20798] dump_stack_lvl+0x100/0x190 [ 816.717442][T20798] should_fail_ex.cold+0x5/0xa [ 816.717463][T20798] save_fsave_header+0x14c/0x2f0 [ 816.717486][T20798] ? __pfx_save_fsave_header+0x10/0x10 [ 816.717515][T20798] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 816.717538][T20798] ? __local_bh_enable_ip+0xa5/0x120 [ 816.717566][T20798] copy_fpstate_to_sigframe+0x755/0xae0 [ 816.717587][T20798] ? do_raw_spin_lock+0x128/0x260 [ 816.717614][T20798] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 816.717640][T20798] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 816.717659][T20798] ? x86_task_fpu+0x5f/0x90 [ 816.717679][T20798] get_sigframe+0x3fb/0x940 [ 816.717705][T20798] ? __pfx_get_sigframe+0x10/0x10 [ 816.717725][T20798] ? rcu_is_watching+0x13/0xc0 [ 816.717742][T20798] ? siginfo_layout+0x156/0x290 [ 816.717769][T20798] ia32_setup_rt_frame+0xe7/0xaf0 [ 816.717800][T20798] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 816.717831][T20798] arch_do_signal_or_restart+0x459/0x7a0 [ 816.717854][T20798] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 816.717881][T20798] ? fput+0x7c/0x100 [ 816.717905][T20798] exit_to_user_mode_loop+0x139/0x700 [ 816.717929][T20798] ? rcu_is_watching+0x13/0xc0 [ 816.717946][T20798] do_int80_emulation+0x555/0x650 [ 816.717966][T20798] asm_int80_emulation+0x1a/0x20 [ 816.717983][T20798] RIP: 0023:0xf71874eb [ 816.717997][T20798] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 816.718012][T20798] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 816.718029][T20798] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00000000f543d5c0 [ 816.718039][T20798] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.718049][T20798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.718058][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.718068][T20798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.718088][T20798] [ 816.785864][T20809] device-mapper: ioctl: Unable to rename non-existent device, to $ [ 816.837885][T20804] batman_adv: batadv0: Adding interface: macvtap7 [ 816.837934][T20804] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.837952][T20804] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active [ 817.001670][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3860'. [ 817.001717][T20825] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3860'. [ 817.342806][T16393] usb 13-1: new high-speed USB device number 68 using dummy_hcd [ 817.503126][T16393] usb 13-1: Using ep0 maxpacket: 16 [ 817.503937][T16393] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 817.504856][T16393] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.504880][T16393] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.504911][T16393] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.506908][T16393] usb 13-1: config 0 descriptor?? [ 817.751651][T16393] usbhid 13-1:0.0: can't add hid device: -71 [ 817.751783][T16393] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 817.757853][T16393] usb 13-1: USB disconnect, device number 68 [ 817.824828][T20842] FAULT_INJECTION: forcing a failure. [ 817.824828][T20842] name failslab, interval 1, probability 0, space 0, times 0 [ 817.824886][T20842] CPU: 2 UID: 0 PID: 20842 Comm: syz.3.3865 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.824914][T20842] Tainted: [L]=SOFTLOCKUP [ 817.824919][T20842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 817.824926][T20842] Call Trace: [ 817.824931][T20842] [ 817.824935][T20842] dump_stack_lvl+0x100/0x190 [ 817.824956][T20842] should_fail_ex.cold+0x5/0xa [ 817.824970][T20842] ? __netlink_lookup+0x652/0x900 [ 817.824985][T20842] should_failslab+0xc2/0x120 [ 817.824999][T20842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 817.825011][T20842] ? skb_clone+0x190/0x400 [ 817.825029][T20842] skb_clone+0x190/0x400 [ 817.825046][T20842] netlink_deliver_tap+0xaed/0xcc0 [ 817.825063][T20842] netlink_unicast+0x62b/0x850 [ 817.825091][T20842] ? __pfx_netlink_unicast+0x10/0x10 [ 817.825111][T20842] netlink_sendmsg+0x8b0/0xda0 [ 817.825139][T20842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.825158][T20842] ? apparmor_socket_sendmsg+0x15b/0x270 [ 817.825178][T20842] ____sys_sendmsg+0xa4d/0xbe0 [ 817.825189][T20842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.825205][T20842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.825224][T20842] ___sys_sendmsg+0x190/0x1e0 [ 817.825238][T20842] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.825258][T20842] ? find_held_lock+0x2b/0x80 [ 817.825278][T20842] __sys_sendmsg+0x160/0x210 [ 817.825295][T20842] ? __pfx___sys_sendmsg+0x10/0x10 [ 817.825315][T20842] ? __pfx_ksys_write+0x10/0x10 [ 817.825337][T20842] __do_fast_syscall_32+0x13a/0x8b0 [ 817.825354][T20842] ? lockdep_hardirqs_on+0x7d/0x110 [ 817.825380][T20842] do_fast_syscall_32+0x32/0x70 [ 817.825400][T20842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 817.825423][T20842] RIP: 0023:0xf7f22fec [ 817.825442][T20842] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 817.825447][T20842] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 817.825463][T20842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 817.825470][T20842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.825477][T20842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.825483][T20842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 817.825490][T20842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 817.825504][T20842] [ 817.934227][T20844] batman_adv: batadv0: Adding interface: macvtap8 [ 817.934358][T20844] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.934387][T20844] batman_adv: batadv0: Not using interface macvtap8 (retrying later): interface not active [ 818.010925][T20849] netlink: 'syz.6.3868': attribute type 4 has an invalid length. [ 818.055842][T20853] fuse: Bad value for 'fd' [ 818.103652][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.325899][ T1366] usb 11-1: new high-speed USB device number 75 using dummy_hcd [ 818.486981][ T1366] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 818.487972][ T1366] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 818.487986][ T1366] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.487999][ T1366] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 818.488032][ T1366] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.489362][ T1366] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 818.489375][ T1366] usb 11-1: Product: syz [ 818.489383][ T1366] usb 11-1: Manufacturer: syz [ 818.493876][ T1366] cdc_wdm 11-1:1.0: skipping garbage [ 818.493887][ T1366] cdc_wdm 11-1:1.0: skipping garbage [ 818.500393][ T1366] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 818.500410][ T1366] cdc_wdm 11-1:1.0: Unknown control protocol [ 818.818273][ T5881] usb 12-1: new high-speed USB device number 66 using dummy_hcd [ 818.935156][ C3] wdm_int_callback: 14219 callbacks suppressed [ 818.935186][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.935196][ C3] wdm_int_callback: 14219 callbacks suppressed [ 818.935203][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.937275][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.937287][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.939419][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.939430][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.941353][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.941363][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.943363][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.943373][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.945486][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.945496][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.947433][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.947443][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.949572][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.949584][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.951554][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.951564][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.953964][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 818.953976][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 818.984486][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 818.987309][T16393] usb 11-1: USB disconnect, device number 75 [ 818.988955][ T5881] usb 12-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 818.989908][ T5881] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.989923][ T5881] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 818.989941][ T5881] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.012832][ T5881] idmouse 12-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 819.256799][T20869] batman_adv: batadv0: Adding interface: macvtap7 [ 819.256852][T20869] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.256901][T20869] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active [ 819.334817][ T44] audit: type=1800 audit(1787714902.544:1342): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3878" name="bus" dev="tmpfs" ino=1147 res=0 errno=0 [ 819.388854][T20876] FAULT_INJECTION: forcing a failure. [ 819.388854][T20876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.393272][T20876] CPU: 3 UID: 0 PID: 20876 Comm: syz.3.3879 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.393306][T20876] Tainted: [L]=SOFTLOCKUP [ 819.393312][T20876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 819.393320][T20876] Call Trace: [ 819.393325][T20876] [ 819.393333][T20876] dump_stack_lvl+0x100/0x190 [ 819.393354][T20876] should_fail_ex.cold+0x5/0xa [ 819.393369][T20876] _copy_from_iter+0x1f4/0x1690 [ 819.393390][T20876] ? __asan_memset+0x23/0x50 [ 819.393409][T20876] ? __pfx__copy_from_iter+0x10/0x10 [ 819.393426][T20876] ? __pfx___alloc_skb+0x10/0x10 [ 819.393449][T20876] netlink_sendmsg+0x808/0xda0 [ 819.393468][T20876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.393486][T20876] ? apparmor_socket_sendmsg+0x15b/0x270 [ 819.393507][T20876] ____sys_sendmsg+0xa4d/0xbe0 [ 819.393520][T20876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.393537][T20876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.393558][T20876] ___sys_sendmsg+0x190/0x1e0 [ 819.393573][T20876] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.393594][T20876] ? find_held_lock+0x2b/0x80 [ 819.393617][T20876] __sys_sendmsg+0x160/0x210 [ 819.393635][T20876] ? __pfx___sys_sendmsg+0x10/0x10 [ 819.393658][T20876] ? __pfx_ksys_write+0x10/0x10 [ 819.393679][T20876] __do_fast_syscall_32+0x13a/0x8b0 [ 819.393692][T20876] ? lockdep_hardirqs_on+0x7d/0x110 [ 819.393711][T20876] do_fast_syscall_32+0x32/0x70 [ 819.393723][T20876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.393739][T20876] RIP: 0023:0xf7f22fec [ 819.393752][T20876] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 819.393758][T20876] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 819.393771][T20876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 819.393780][T20876] RDX: 0000000006040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.393787][T20876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 819.393794][T20876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 819.393801][T20876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.393816][T20876] [ 819.465364][T20882] xt_ipcomp: unknown flags 1D [ 819.508245][ T44] audit: type=1800 audit(1787714902.703:1343): pid=20884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3883" name="streaming_maxpacket" dev="configfs" ino=96684 res=0 errno=0 [ 819.752098][T20891] batman_adv: batadv0: Adding interface: macvtap7 [ 819.754673][T20891] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.763937][T20891] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active [ 819.820812][T20895] FAULT_INJECTION: forcing a failure. [ 819.820812][T20895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.820894][T20895] CPU: 2 UID: 0 PID: 20895 Comm: syz.8.3886 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.820921][T20895] Tainted: [L]=SOFTLOCKUP [ 819.820927][T20895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 819.820933][T20895] Call Trace: [ 819.820938][T20895] [ 819.820943][T20895] dump_stack_lvl+0x100/0x190 [ 819.820962][T20895] should_fail_ex.cold+0x5/0xa [ 819.820977][T20895] _copy_to_user+0x32/0xd0 [ 819.820994][T20895] simple_read_from_buffer+0xcb/0x170 [ 819.821014][T20895] proc_fail_nth_read+0x1af/0x230 [ 819.821032][T20895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.821050][T20895] ? rw_verify_area+0xce/0x6d0 [ 819.821066][T20895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.821083][T20895] vfs_read+0x1e4/0xb40 [ 819.821101][T20895] ? __pfx_vfs_read+0x10/0x10 [ 819.821116][T20895] ? find_held_lock+0x2b/0x80 [ 819.821128][T20895] ? __fget_files+0x215/0x3d0 [ 819.821141][T20895] ? __fget_files+0x21f/0x3d0 [ 819.821156][T20895] ksys_read+0x12a/0x250 [ 819.821172][T20895] ? __pfx_ksys_read+0x10/0x10 [ 819.821192][T20895] do_int80_emulation+0x166/0x650 [ 819.821205][T20895] asm_int80_emulation+0x1a/0x20 [ 819.821217][T20895] RIP: 0023:0xf71574eb [ 819.821226][T20895] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 819.821237][T20895] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 819.821248][T20895] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 819.821255][T20895] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 819.821262][T20895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 819.821268][T20895] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 819.821275][T20895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.821289][T20895] [ 820.013211][T20906] siw: device registration error -23 [ 820.016067][ T44] audit: type=1800 audit(1787714903.190:1344): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3890" name="attr_allow_any_host" dev="configfs" ino=96733 res=0 errno=0 [ 820.017955][ T44] audit: type=1800 audit(1787714903.190:1345): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3890" name="addr_trtype" dev="configfs" ino=96735 res=0 errno=0 [ 820.018818][ T44] audit: type=1800 audit(1787714903.190:1346): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3890" name="addr_adrfam" dev="configfs" ino=96736 res=0 errno=0 [ 820.022483][ T44] audit: type=1800 audit(1787714903.190:1347): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3890" name="addr_traddr" dev="configfs" ino=96737 res=0 errno=0 [ 820.023356][ T44] audit: type=1800 audit(1787714903.190:1348): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3890" name="addr_trsvcid" dev="configfs" ino=96738 res=0 errno=0 [ 820.029078][T20906] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 820.442544][T18018] usb 11-1: new high-speed USB device number 76 using dummy_hcd [ 820.599086][T20914] batman_adv: batadv0: Adding interface: macvtap8 [ 820.599140][T20914] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.599219][T20914] batman_adv: batadv0: Not using interface macvtap8 (retrying later): interface not active [ 820.614125][T18018] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 820.615579][T18018] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.615600][T18018] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 820.615616][T18018] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 820.615649][T18018] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.618293][T18018] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 820.618313][T18018] usb 11-1: Product: syz [ 820.618325][T18018] usb 11-1: Manufacturer: syz [ 820.623966][T18018] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 820.655258][T20916] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 820.844810][ T5906] usb 11-1: USB disconnect, device number 76 [ 820.882887][T20922] random: crng reseeded on system resumption [ 820.892708][T20922] ip6gretap0: entered promiscuous mode [ 821.845129][T18018] usb 12-1: USB disconnect, device number 66 [ 821.868326][T18018] idmouse 12-1:1.0: disconnected [ 821.895196][T16393] usb 11-1: new high-speed USB device number 77 using dummy_hcd [ 822.068099][T16393] usb 11-1: Using ep0 maxpacket: 16 [ 822.073815][T16393] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 822.079097][T16393] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.083822][T16393] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.083863][T16393] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.095222][T16393] usb 11-1: config 0 descriptor?? [ 822.132451][T20961] hfsplus: unable to find HFS+ superblock [ 822.320538][ T69] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 822.341541][T16393] usbhid 11-1:0.0: can't add hid device: -71 [ 822.343650][T16393] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 822.347503][T16393] usb 11-1: USB disconnect, device number 77 [ 823.166350][T20973] 9pnet_virtio: no channels available for device syz [ 823.505067][T20986] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 823.529192][T20986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 823.564271][T17551] usb 11-1: new high-speed USB device number 78 using dummy_hcd [ 823.585585][T20986] block device autoloading is deprecated and will be removed. [ 823.745853][T17551] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 823.749392][T17551] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 823.749436][T17551] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 823.749461][T17551] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 823.749494][T17551] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.763630][T17551] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 823.763665][T17551] usb 11-1: Product: syz [ 823.763709][T17551] usb 11-1: Manufacturer: syz [ 823.773978][T17551] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 823.990986][T17551] usb 11-1: USB disconnect, device number 78 [ 824.235963][ T44] audit: type=1800 audit(1787714907.139:1349): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3910" name="streaming_maxpacket" dev="configfs" ino=98562 res=0 errno=0 [ 824.392548][T20986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.394939][T20986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 824.479791][T20997] trusted_key: syz.7.3913 sent an empty control message without MSG_MORE. [ 825.133053][ T5906] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 825.293317][ T5906] usb 11-1: Using ep0 maxpacket: 16 [ 825.296526][ T5906] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 825.301759][ T5906] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.306408][ T5906] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 825.306453][ T5906] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.318935][ T5906] usb 11-1: config 0 descriptor?? [ 825.515276][ T44] audit: type=1800 audit(1787714908.327:1350): pid=21023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3922" name="memory_backed" dev="configfs" ino=97616 res=0 errno=0 [ 825.517784][ T44] audit: type=1800 audit(1787714908.327:1351): pid=21023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3922" name="zoned" dev="configfs" ino=97617 res=0 errno=0 [ 825.518028][T21023] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 825.518045][T21023] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3922'. [ 825.518058][T21023] netlink: 'syz.3.3922': attribute type 2 has an invalid length. [ 825.518068][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 825.562702][ T69] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 825.575339][T21025] FAULT_INJECTION: forcing a failure. [ 825.575339][T21025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.575423][T21025] CPU: 3 UID: 0 PID: 21025 Comm: syz.7.3921 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.575461][T21025] Tainted: [L]=SOFTLOCKUP [ 825.575469][T21025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 825.575479][T21025] Call Trace: [ 825.575486][T21025] [ 825.575494][T21025] dump_stack_lvl+0x100/0x190 [ 825.575520][T21025] should_fail_ex.cold+0x5/0xa [ 825.575542][T21025] _copy_from_iter+0x1f4/0x1690 [ 825.575569][T21025] ? __asan_memset+0x23/0x50 [ 825.575596][T21025] ? __pfx__copy_from_iter+0x10/0x10 [ 825.575620][T21025] ? __pfx___alloc_skb+0x10/0x10 [ 825.575653][T21025] netlink_sendmsg+0x808/0xda0 [ 825.575681][T21025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.575707][T21025] ? apparmor_socket_sendmsg+0x15b/0x270 [ 825.575738][T21025] ____sys_sendmsg+0xa4d/0xbe0 [ 825.575756][T21025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.575780][T21025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.575811][T21025] ___sys_sendmsg+0x190/0x1e0 [ 825.575833][T21025] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.575862][T21025] ? find_held_lock+0x2b/0x80 [ 825.575895][T21025] __sys_sendmsg+0x160/0x210 [ 825.575920][T21025] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.575951][T21025] ? __pfx_ksys_write+0x10/0x10 [ 825.575983][T21025] __do_fast_syscall_32+0x13a/0x8b0 [ 825.576002][T21025] ? lockdep_hardirqs_on+0x7d/0x110 [ 825.576029][T21025] do_fast_syscall_32+0x32/0x70 [ 825.576047][T21025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.576069][T21025] RIP: 0023:0xf704efec [ 825.576088][T21025] Code: Unable to access opcode bytes at 0xf704efc2. [ 825.576097][T21025] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 825.576113][T21025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 825.576124][T21025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 825.576134][T21025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.576145][T21025] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.576156][T21025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.576180][T21025] [ 825.640195][ T44] audit: type=1800 audit(1787714908.449:1352): pid=21027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3922" name="power" dev="configfs" ino=97625 res=0 errno=0 [ 825.651267][T21027] null_blk: my_zoned_dev: using native zone append [ 825.726673][T21027] null_blk: disk my_zoned_dev created [ 825.856085][ T5906] usbhid 11-1:0.0: can't add hid device: -71 [ 825.858869][ T5906] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 825.870455][ T69] Bluetooth: hci3: command 0x0405 tx timeout [ 825.877723][ T5906] usb 11-1: USB disconnect, device number 79 [ 825.909838][T21035] team0: Device vlan2 is of different type [ 826.113756][T21039] netlink: 592 bytes leftover after parsing attributes in process `syz.7.3925'. [ 826.549123][T21055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3929'. [ 826.576311][T21056] netlink: 'syz.7.3928': attribute type 10 has an invalid length. [ 826.590128][T21056] team0: Device dummy0 is of different type [ 826.627147][T21056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3928'. [ 830.352582][T21138] syzkaller0: entered promiscuous mode [ 830.767196][T21151] netlink: 'syz.8.3975': attribute type 29 has an invalid length. [ 830.774734][T21151] netlink: 'syz.8.3975': attribute type 29 has an invalid length. [ 833.284207][T21171] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3985'. [ 833.331418][T21175] netlink: 'syz.6.3987': attribute type 16 has an invalid length. [ 833.331467][T21175] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3987'. [ 833.340864][T21179] netlink: 'syz.8.3986': attribute type 11 has an invalid length. [ 833.404286][T21179] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3986'. [ 833.517319][T21195] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3996'. [ 833.536454][T21196] raw_sendmsg: syz.6.3995 forgot to set AF_INET. Fix it! [ 833.588870][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3998'. [ 833.590687][T21200] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3998'. [ 833.590707][T21200] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3998'. [ 833.695382][T21204] netlink: 18 bytes leftover after parsing attributes in process `syz.6.4000'. [ 834.727654][T21231] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4009'. [ 834.732389][T21212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 834.735049][T21231] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4009'. [ 834.735183][T21212] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 834.739704][T21212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 834.739718][T21212] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 834.852098][T21240] netlink: 'syz.6.4012': attribute type 10 has an invalid length. [ 834.854679][T21240] team0: Device dummy0 is already a lower device of the team interface [ 834.896349][T21237] pimreg: entered allmulticast mode [ 834.904426][T21237] pimreg: left allmulticast mode [ 835.051813][T21268] net_ratelimit: 16 callbacks suppressed [ 835.051889][T21268] netlink: zone id is out of range [ 835.051947][T21268] netlink: zone id is out of range [ 835.051952][T21268] netlink: zone id is out of range [ 835.051958][T21268] netlink: zone id is out of range [ 835.051962][T21268] netlink: zone id is out of range [ 835.051966][T21268] netlink: zone id is out of range [ 835.051971][T21268] netlink: zone id is out of range [ 835.051975][T21268] netlink: zone id is out of range [ 835.051979][T21268] netlink: zone id is out of range [ 835.051984][T21268] netlink: zone id is out of range [ 835.122324][T21281] netlink: 'syz.7.4034': attribute type 4 has an invalid length. [ 835.129744][T21284] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 835.424305][T21322] netlink: 'syz.8.4053': attribute type 1 has an invalid length. [ 835.698969][T21337] tipc: Started in network mode [ 835.699016][T21337] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 835.699159][T21337] tipc: Enabled bearer , priority 0 [ 836.358779][T21363] tipc: Enabled bearer , priority 0 [ 836.555326][T21387] tipc: Enabled bearer , priority 0 [ 836.712920][T21403] syzkaller0: entered promiscuous mode [ 836.713004][T21403] syzkaller0: entered allmulticast mode [ 836.806416][T21416] netlink: 'syz.3.4096': attribute type 1 has an invalid length. [ 837.105430][T21436] netlink: 'syz.6.4099': attribute type 1 has an invalid length. [ 838.748118][ T43] tipc: Node number set to 43690 [ 838.756458][ T5881] tipc: Node number set to 3737238159 [ 838.763739][T17551] tipc: Node number set to 3206547117 [ 838.798189][T21440] __nla_validate_parse: 29 callbacks suppressed [ 838.798465][T21440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4103'. [ 838.799904][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4103'. [ 838.936037][T21454] syzkaller0: entered promiscuous mode [ 838.936124][T21454] syzkaller0: entered allmulticast mode [ 838.981724][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4111'. [ 838.983816][T21458] netlink: 'syz.8.4111': attribute type 4 has an invalid length. [ 840.406878][T21550] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 840.406910][T21550] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode [ 840.462270][T21556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4146'. [ 840.533904][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4153'. [ 840.581713][T21567] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.708396][T21588] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4158'. [ 840.832762][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.844236][T21606] netlink: 'syz.7.4165': attribute type 4 has an invalid length. [ 840.846188][T21606] netlink: 'syz.7.4165': attribute type 4 has an invalid length. [ 841.008923][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.017753][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.020798][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.024308][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.027126][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.049017][ T69] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.049320][ T69] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.049513][ T69] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.051337][ T69] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.051970][ T69] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.132928][T21631] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4177'. [ 841.163401][T18488] tipc: Disabling bearer [ 841.365387][T21656] netlink: 18 bytes leftover after parsing attributes in process `syz.6.4184'. [ 841.507488][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4197'. [ 841.519269][T21683] tipc: Resetting bearer [ 841.577912][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4197'. [ 841.901138][ T13] team0: Port device xfrm0 removed [ 841.968883][ T13] bond0 (unregistering): Released all slaves [ 841.981142][T21620] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.981265][T21620] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.981384][T21620] bridge_slave_0: entered allmulticast mode [ 841.982736][T21620] bridge_slave_0: entered promiscuous mode [ 841.993421][T21620] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.993627][T21620] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.993737][T21620] bridge_slave_1: entered allmulticast mode [ 841.997137][T21620] bridge_slave_1: entered promiscuous mode [ 842.044241][T21620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.046002][T21620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.047793][ T5450] 8021q: adding VLAN 0 to HW filter on device eth26 [ 842.062525][ T13] tipc: Left network mode [ 842.073292][T21620] team0: Port device team_slave_0 added [ 842.085140][T21620] team0: Port device team_slave_1 added [ 842.099789][T21620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.099834][T21620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.099866][T21620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.100693][T21620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.100701][T21620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.100714][T21620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.132496][T21620] hsr_slave_0: entered promiscuous mode [ 842.133306][T21620] hsr_slave_1: entered promiscuous mode [ 842.133650][T21620] debugfs: 'hsr0' already exists in 'hsr' [ 842.133662][T21620] Cannot create hsr debugfs directory [ 842.163553][ T13] batman_adv: batadv0: Removing interface: macvtap1 [ 842.170949][ T13] batman_adv: batadv0: Removing interface: macvtap2 [ 842.178398][ T13] batman_adv: batadv0: Removing interface: macvtap3 [ 842.187541][ T13] batman_adv: batadv0: Removing interface: macvtap4 [ 842.204378][ T13] batman_adv: batadv0: Removing interface: macvtap5 [ 842.213193][ T13] batman_adv: batadv0: Removing interface: macvtap6 [ 842.235934][ T13] batman_adv: batadv0: Removing interface: macvtap7 [ 842.249684][ T13] batman_adv: batadv0: Removing interface: macvtap8 [ 842.275151][ T13] batman_adv: batadv0: Removing interface: macvtap9 [ 842.297406][ T13] batman_adv: batadv0: Removing interface: macvtap10 [ 842.364096][ T5450] 8021q: adding VLAN 0 to HW filter on device eth27 [ 842.428062][T21742] block nbd8: not configured, cannot reconfigure [ 842.596610][ T5450] 8021q: adding VLAN 0 to HW filter on device eth28 [ 842.879184][ T13] hsr_slave_0: left promiscuous mode [ 842.881340][ T13] hsr_slave_1: left promiscuous mode [ 843.231624][ T5753] Bluetooth: hci0: command tx timeout [ 843.480383][T21841] veth0: entered promiscuous mode [ 843.486101][T21846] syzkaller0: entered promiscuous mode [ 843.486158][T21846] syzkaller0: entered allmulticast mode [ 843.584771][T21620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 843.589131][T21620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.589803][T21620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 843.600296][T21620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.600941][T21620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 843.604317][T21620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.604896][T21620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 843.619240][T21620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.681965][T21620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.695101][T21620] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.698471][T20932] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.698554][T20932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.708560][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.708641][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.015857][T21620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.026355][T21923] net_ratelimit: 255 callbacks suppressed [ 844.028857][T21923] netlink: zone id is out of range [ 844.031063][T21923] netlink: zone id is out of range [ 844.033522][T21923] netlink: zone id is out of range [ 844.035696][T21923] netlink: zone id is out of range [ 844.040418][T21923] netlink: zone id is out of range [ 844.042688][T21923] netlink: zone id is out of range [ 844.044510][T21923] netlink: zone id is out of range [ 844.046274][T21923] netlink: zone id is out of range [ 844.047851][T21923] netlink: zone id is out of range [ 844.047865][T21923] netlink: zone id is out of range [ 844.175851][T21620] veth0_vlan: entered promiscuous mode [ 844.181126][T21620] veth1_vlan: entered promiscuous mode [ 844.197273][T21620] veth0_macvtap: entered promiscuous mode [ 844.199442][T21620] veth1_macvtap: entered promiscuous mode [ 844.212212][T21620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.221711][T21620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.386034][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.386080][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.402710][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.422443][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.422681][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.422867][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.422989][T20934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.422999][T20934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.491208][T21959] __nla_validate_parse: 1 callbacks suppressed [ 844.491454][T21959] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4170'. [ 844.531011][T21965] block nbd7: not configured, cannot reconfigure [ 844.719460][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4297'. [ 844.903400][T22005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4308'. [ 845.053801][T22027] block nbd7: not configured, cannot reconfigure [ 845.084273][T22031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4321'. [ 845.222098][T22050] block nbd3: not configured, cannot reconfigure [ 845.447472][ T5753] Bluetooth: hci0: command tx timeout [ 845.472066][T22091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4348'. [ 845.541836][T22098] syzkaller0: entered promiscuous mode [ 845.541887][T22098] syzkaller0: entered allmulticast mode [ 845.647597][T22115] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4361'. [ 845.825528][T22132] netlink: 18 bytes leftover after parsing attributes in process `syz.7.4364'. [ 846.413801][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4384'. [ 847.680515][ T5753] Bluetooth: hci0: command tx timeout [ 847.994965][T22200] syzkaller0: entered promiscuous mode [ 847.996957][T22200] syzkaller0: entered allmulticast mode [ 848.000280][T22196] netlink: 18 bytes leftover after parsing attributes in process `syz.6.4396'. [ 848.562717][T22245] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4416'. [ 849.893024][ T5753] Bluetooth: hci0: command tx timeout [ 850.413363][T22277] __nla_validate_parse: 3 callbacks suppressed [ 850.413437][T22277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4428'. [ 850.414870][T22277] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4428'. [ 850.419031][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4428'. [ 850.579257][T22299] net_ratelimit: 139 callbacks suppressed [ 850.581207][T22299] netlink: zone id is out of range [ 850.582863][T22299] netlink: zone id is out of range [ 850.584704][T22299] netlink: zone id is out of range [ 850.586484][T22299] netlink: zone id is out of range [ 850.588217][T22299] netlink: zone id is out of range [ 850.588491][T22293] syzkaller0: entered promiscuous mode [ 850.588512][T22293] syzkaller0: entered allmulticast mode [ 850.590953][T22297] syzkaller1: entered promiscuous mode [ 850.590971][T22297] syzkaller1: entered allmulticast mode [ 850.597203][T22299] netlink: zone id is out of range [ 850.600277][T22299] netlink: zone id is out of range [ 850.602563][T22299] netlink: zone id is out of range [ 850.604405][T22299] netlink: zone id is out of range [ 850.606078][T22299] netlink: zone id is out of range [ 850.700081][T22308] rdma_rxe: rxe_newlink: failed to add bond0 [ 850.778766][T22318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4446'. [ 850.780310][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4446'. [ 852.836444][T22341] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 852.876526][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4458'. [ 852.902600][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 852.981017][T22361] syzkaller0: entered promiscuous mode [ 852.983499][T22361] syzkaller0: entered allmulticast mode [ 853.135820][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 853.161106][T22382] netlink: 18 bytes leftover after parsing attributes in process `syz.6.4475'. [ 853.463383][T22411] syzkaller0: entered promiscuous mode [ 853.463453][T22411] syzkaller0: entered allmulticast mode [ 853.549694][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4492'. [ 853.780205][T22459] netlink: 'syz.7.4505': attribute type 10 has an invalid length. [ 853.783816][T22459] dummy0: entered promiscuous mode [ 853.966123][T22481] nbd: must specify a device to reconfigure [ 854.085116][T22495] syzkaller0: entered promiscuous mode [ 854.085165][T22495] syzkaller0: entered allmulticast mode [ 854.214979][T22508] nbd: must specify a device to reconfigure [ 854.446078][T22532] syzkaller0: entered promiscuous mode [ 854.448420][T22532] syzkaller0: entered allmulticast mode [ 855.136299][T22615] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 855.776591][T22684] __nla_validate_parse: 12 callbacks suppressed [ 855.776776][T22684] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4608'. [ 855.900910][T22698] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4617'. [ 855.996267][T22712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4622'. [ 856.080168][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4618'. [ 856.104274][T22728] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 856.200694][T22737] tc_dump_action: action bad kind [ 856.209023][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4632'. [ 856.469456][T22769] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4646'. [ 856.549042][T22773] syzkaller0: entered promiscuous mode [ 856.549093][T22773] syzkaller0: entered allmulticast mode [ 856.772286][T22788] netlink: 18 bytes leftover after parsing attributes in process `syz.7.4654'. [ 856.868289][T22793] net_ratelimit: 34 callbacks suppressed [ 856.868356][T22793] netlink: get zone limit has 4 unknown bytes [ 859.034699][T22803] syzkaller0: entered promiscuous mode [ 859.036871][T22803] syzkaller0: entered allmulticast mode [ 859.119258][T22813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4663'. [ 859.120960][T22813] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4663'. [ 859.120973][T22813] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4663'. [ 859.126309][T22813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.270455][T22825] syzkaller0: entered promiscuous mode [ 859.270532][T22825] syzkaller0: entered allmulticast mode [ 862.011478][T22886] syzkaller0: entered promiscuous mode [ 862.011542][T22886] syzkaller0: entered allmulticast mode [ 862.041286][T22889] __nla_validate_parse: 4 callbacks suppressed [ 862.041375][T22889] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4692'. [ 862.459998][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 862.688006][T22941] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4716'. [ 863.325895][T22999] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 863.400646][T23009] veth0: entered promiscuous mode [ 863.472919][T23009] netlink: 'syz.6.4750': attribute type 1 has an invalid length. [ 863.475418][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4750'. [ 863.540639][T23020] syzkaller1: entered promiscuous mode [ 863.540686][T23020] syzkaller1: entered allmulticast mode [ 863.996277][T23067] syzkaller0: entered promiscuous mode [ 863.996329][T23067] syzkaller0: entered allmulticast mode [ 864.013721][T23072] Bluetooth: MGMT ver 1.23 [ 864.028368][T23072] vxcan3: entered promiscuous mode [ 865.006575][T23167] syzkaller0: entered promiscuous mode [ 865.008742][T23167] syzkaller0: entered allmulticast mode [ 865.073821][T23165] ip6gre1: entered promiscuous mode [ 865.073870][T23165] ip6gre1: entered allmulticast mode [ 865.114444][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4822'. [ 865.311498][T23190] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4829'. [ 865.314848][T23190] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4829'. [ 865.417277][T23193] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 865.577619][T23209] syzkaller0: entered promiscuous mode [ 865.577682][T23209] syzkaller0: entered allmulticast mode [ 865.915503][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4855'. [ 865.919328][T23243] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4855'. [ 865.919384][T23243] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4855'. [ 865.923082][T23243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.206790][T23271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.690284][T23310] veth0: entered promiscuous mode [ 866.697470][T23313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.757041][T23310] netlink: 'syz.8.4885': attribute type 1 has an invalid length. [ 866.792997][T20934] smbdirect: ib_dev[syz2] removed [ 866.806099][T13055] syz2: Port: 1 Link DOWN [ 866.818721][T23321] syzkaller0: entered promiscuous mode [ 866.818774][T23321] syzkaller0: entered allmulticast mode [ 867.223843][T23361] syzkaller0: entered promiscuous mode [ 867.223906][T23361] syzkaller0: entered allmulticast mode [ 867.476421][T23384] netlink: 'syz.3.4906': attribute type 1 has an invalid length. [ 867.482629][T23367] __nla_validate_parse: 4 callbacks suppressed [ 867.482721][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4906'. [ 867.579152][T23402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4917'. [ 867.638936][T23410] syzkaller0: entered promiscuous mode [ 867.639022][T23410] syzkaller0: entered allmulticast mode [ 867.824064][T23423] syzkaller1: entered promiscuous mode [ 867.824151][T23423] syzkaller1: entered allmulticast mode [ 868.164194][T23450] syzkaller0: entered promiscuous mode [ 868.164252][T23450] syzkaller0: entered allmulticast mode [ 868.286372][T23452] veth0: entered promiscuous mode [ 868.347423][T23451] veth0: left promiscuous mode [ 871.960587][T23561] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4981'. [ 872.166601][T23596] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4996'. [ 872.362890][T23621] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5007'. [ 872.445410][T23628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5009'. [ 872.445475][T23628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5009'. [ 872.495585][T23636] netlink: 'syz.6.5014': attribute type 46 has an invalid length. [ 872.607960][T23649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5019'. [ 872.795724][T23667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5026'. [ 872.795774][T23667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5026'. [ 872.825365][T23652] netlink: 'syz.3.5022': attribute type 1 has an invalid length. [ 872.848690][T23675] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5029'. [ 872.849044][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5029'. [ 873.089563][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5042'. [ 873.323033][T23738] netlink: 'syz.6.5055': attribute type 1 has an invalid length. [ 873.327164][T23738] netlink: 'syz.6.5055': attribute type 3 has an invalid length. [ 873.327176][T23738] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5055'. [ 873.345835][T23738] vxcan3: entered promiscuous mode [ 873.552544][T23759] syzkaller0: entered promiscuous mode [ 873.552610][T23759] syzkaller0: entered allmulticast mode [ 874.230023][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.247864][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.252190][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.276767][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.280620][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.497041][T16167] tipc: Resetting bearer [ 876.523482][T16167] tipc: Disabling bearer [ 876.578439][ T69] Bluetooth: hci1: command tx timeout [ 876.587288][T23782] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5070'. [ 876.802841][T23809] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5079'. [ 876.891818][T23811] syzkaller0: entered promiscuous mode [ 876.891915][T23811] syzkaller0: entered allmulticast mode [ 878.280554][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 878.795277][ T69] Bluetooth: hci1: command tx timeout [ 879.634543][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.718388][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5088'. [ 879.738204][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.877719][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.996676][T23848] syzkaller0: entered promiscuous mode [ 879.998056][T23848] syzkaller0: entered allmulticast mode [ 881.022571][ T69] Bluetooth: hci1: command tx timeout [ 882.701781][T23773] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.701909][T23773] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.701970][T23773] bridge_slave_0: entered allmulticast mode [ 882.702694][T23773] bridge_slave_0: entered promiscuous mode [ 882.706274][T23773] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.706316][T23773] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.706374][T23773] bridge_slave_1: entered allmulticast mode [ 882.719602][T23773] bridge_slave_1: entered promiscuous mode [ 882.739757][ T13] bridge_slave_1: left allmulticast mode [ 882.739805][ T13] bridge_slave_1: left promiscuous mode [ 882.740130][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.746041][ T13] bridge_slave_0: left allmulticast mode [ 882.746056][ T13] bridge_slave_0: left promiscuous mode [ 882.746147][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.776875][T23901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.946967][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.956473][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.960288][ T13] bond0 (unregistering): Released all slaves [ 882.962955][ T13] bond1 (unregistering): Released all slaves [ 882.988136][ T5450] 8021q: adding VLAN 0 to HW filter on device eth26 [ 883.014473][T23907] syzkaller0: entered promiscuous mode [ 883.014528][T23907] syzkaller0: entered allmulticast mode [ 883.016811][T23773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.079719][T23917] syzkaller0: entered promiscuous mode [ 883.081825][T23917] syzkaller0: entered allmulticast mode [ 883.087210][T23773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.243948][ T69] Bluetooth: hci1: command tx timeout [ 885.287233][ T13] tipc: Left network mode [ 885.291879][T23773] team0: Port device team_slave_0 added [ 885.646470][T23938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.820539][T23773] team0: Port device team_slave_1 added [ 887.845002][T23773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.847874][T23773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.847899][T23773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.849705][T23773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.849717][T23773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.849740][T23773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.913931][T23773] hsr_slave_0: entered promiscuous mode [ 887.917170][T23773] hsr_slave_1: entered promiscuous mode [ 887.932162][T23951] syzkaller1: entered promiscuous mode [ 887.932223][T23951] syzkaller1: entered allmulticast mode [ 888.052334][ T13] batman_adv: batadv0: Removing interface: macvtap2 [ 888.058716][ T13] batman_adv: batadv0: Removing interface: macvtap3 [ 888.073268][ T13] batman_adv: batadv0: Removing interface: macvtap4 [ 888.083392][ T13] batman_adv: batadv0: Removing interface: macvtap5 [ 888.092094][ T13] batman_adv: batadv0: Removing interface: macvtap6 [ 888.105364][ T13] batman_adv: batadv0: Removing interface: macvtap7 [ 888.150795][ T5450] 8021q: adding VLAN 0 to HW filter on device eth27 [ 888.442415][ T13] hsr_slave_0: left promiscuous mode [ 888.443049][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.443068][ T13] batadv0: mtu less than device minimum [ 888.445063][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.446000][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.446933][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.447961][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.448939][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.449920][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.452051][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.453062][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.453998][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.466656][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.468512][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.486717][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.489441][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 888.489458][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 888.500071][ T13] veth1_macvtap: left promiscuous mode [ 888.500103][ T13] veth0_macvtap: left promiscuous mode [ 888.500184][ T13] veth1_vlan: left promiscuous mode [ 888.500271][ T13] veth0_vlan: left promiscuous mode [ 888.664217][ T13] team0 (unregistering): Port device team_slave_1 removed [ 888.670032][ T13] team0 (unregistering): Port device team_slave_0 removed [ 888.777502][T23989] syzkaller0: entered promiscuous mode [ 888.779066][T23989] syzkaller0: entered allmulticast mode [ 888.780988][ T5450] 8021q: adding VLAN 0 to HW filter on device eth28 [ 894.171132][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.172094][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.172781][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.173512][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.216943][ T13] IPVS: stop unused estimator thread 0... [ 894.246509][T24032] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.249690][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.249904][T24032] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5139'. [ 894.382578][T24037] syzkaller0: entered promiscuous mode [ 894.382669][T24037] syzkaller0: entered allmulticast mode [ 894.403154][T24037] net_ratelimit: 30 callbacks suppressed [ 894.403217][T24037] TC_ACT_REPEAT abuse ? [ 896.754814][T24073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5147'. [ 896.847587][T23773] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 896.854957][T23773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.855421][T23773] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 896.863021][T23773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.863506][T23773] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 896.876714][T23773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.879831][T23773] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 896.887085][T23773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.948939][T23773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.961173][T23773] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.973079][T20934] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.973160][T20934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.984944][T20934] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.985053][T20934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.013481][T24103] syzkaller0: entered promiscuous mode [ 897.013537][T24103] syzkaller0: entered allmulticast mode [ 897.022172][T24103] TC_ACT_REPEAT abuse ? [ 899.482918][T24135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5166'. [ 899.746009][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5177'. [ 899.813445][T23773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.950102][T24198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 899.992909][T23773] veth0_vlan: entered promiscuous mode [ 899.998984][T23773] veth1_vlan: entered promiscuous mode [ 900.017948][T23773] veth0_macvtap: entered promiscuous mode [ 900.026443][T23773] veth1_macvtap: entered promiscuous mode [ 900.033640][T23773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.037677][T23773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.099773][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.099853][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.099914][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.099978][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.161353][T24206] syzkaller0: entered promiscuous mode [ 900.161429][T24206] syzkaller0: entered allmulticast mode [ 902.620498][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.625458][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.675528][T20934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.675583][T20934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.709303][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 902.909928][T24250] syzkaller0: entered promiscuous mode [ 902.909980][T24250] syzkaller0: entered allmulticast mode [ 902.960685][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'. [ 905.528498][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5216'. [ 905.668520][T24304] syzkaller0: entered promiscuous mode [ 905.668602][T24304] syzkaller0: entered allmulticast mode [ 905.715712][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5226'. [ 908.193590][T24323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5229'. [ 908.193978][T24321] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5227'. [ 908.233334][T24327] block nbd8: not configured, cannot reconfigure [ 908.275327][T24335] veth0: entered promiscuous mode [ 908.284547][T24337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5236'. [ 908.324729][T24345] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5239'. [ 908.369359][T24334] veth0: left promiscuous mode [ 908.394668][T24352] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5241'. [ 908.651188][T24380] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5254'. [ 908.679115][T24382] veth0: entered promiscuous mode [ 908.740125][T24381] veth0: left promiscuous mode [ 909.018493][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.025772][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.030726][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.032077][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.032860][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.173298][T18967] tipc: Resetting bearer [ 909.213064][T18967] tipc: Disabling bearer [ 909.645011][T24402] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.645187][T24402] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.645290][T24402] bridge_slave_0: entered allmulticast mode [ 909.646643][T24402] bridge_slave_0: entered promiscuous mode [ 909.650104][T24402] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.650256][T24402] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.650357][T24402] bridge_slave_1: entered allmulticast mode [ 909.653355][T24402] bridge_slave_1: entered promiscuous mode [ 909.688242][T24402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.690976][T24402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.712831][T24402] team0: Port device team_slave_0 added [ 909.715676][T24402] team0: Port device team_slave_1 added [ 909.734113][T24402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.734157][T24402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.735087][T24402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.735947][T24402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.735955][T24402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.735969][T24402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.759229][T24402] hsr_slave_0: entered promiscuous mode [ 909.759619][T24402] hsr_slave_1: entered promiscuous mode [ 909.760228][T24402] debugfs: 'hsr0' already exists in 'hsr' [ 909.760240][T24402] Cannot create hsr debugfs directory [ 909.858052][T24402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.934620][T24402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.024735][T24402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.110037][T24402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.151462][T24459] syzkaller0: entered promiscuous mode [ 910.151512][T24459] syzkaller0: entered allmulticast mode [ 911.284028][ T69] Bluetooth: hci2: command tx timeout [ 912.646282][T24402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.654955][T24402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.658872][T24402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.672748][T24402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.693680][T24402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 912.705709][T24402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 912.706439][T24402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 912.710102][T24402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 912.760827][T24402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.767241][T24402] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.773619][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.773685][T10964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.787603][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.787719][T10964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.830272][T24507] syzkaller0: entered promiscuous mode [ 912.830364][T24507] syzkaller0: entered allmulticast mode [ 913.496037][ T69] Bluetooth: hci2: command tx timeout [ 915.478155][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5302'. [ 915.530844][T24402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.585770][T24402] veth0_vlan: entered promiscuous mode [ 915.644088][T24402] veth1_vlan: entered promiscuous mode [ 915.675048][T24565] syzkaller0: entered promiscuous mode [ 915.675118][T24565] syzkaller0: entered allmulticast mode [ 915.718692][ T69] Bluetooth: hci2: command tx timeout [ 917.950957][ T69] Bluetooth: hci2: command tx timeout [ 918.291929][T24402] veth0_macvtap: entered promiscuous mode [ 918.306282][T24402] veth1_macvtap: entered promiscuous mode [ 918.336178][T24402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.345445][T24402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.351830][T18007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.401170][T18007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.402034][T18007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.402066][T18007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.447956][T24597] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5314'. [ 918.517728][T20932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.517774][T20932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.538977][T20932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.539041][T20932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.618098][T24612] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5319'. [ 918.720979][T24619] syzkaller0: entered promiscuous mode [ 918.723354][T24619] syzkaller0: entered allmulticast mode [ 921.532418][T24624] syzkaller0: entered promiscuous mode [ 921.532491][T24624] syzkaller0: entered allmulticast mode [ 921.560089][T24636] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5327'. [ 921.598192][T24640] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5329'. [ 921.625433][T24642] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5330'. [ 921.643892][T24645] syzkaller1: entered promiscuous mode [ 921.643930][T24645] syzkaller1: entered allmulticast mode [ 921.758164][T24661] syzkaller0: entered promiscuous mode [ 921.758221][T24661] syzkaller0: entered allmulticast mode [ 924.392941][T24683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5343'. [ 924.490232][T24697] syzkaller1: entered promiscuous mode [ 924.490319][T24697] syzkaller1: entered allmulticast mode [ 924.537761][T24699] syzkaller0: entered promiscuous mode [ 924.537831][T24699] syzkaller0: entered allmulticast mode [ 924.544767][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5351'. [ 924.589957][T24703] syzkaller0: entered promiscuous mode [ 924.592142][T24703] syzkaller0: entered allmulticast mode [ 924.597096][T24699] tipc: Started in network mode [ 924.597183][T24699] tipc: Node identity 9a9d17add85, cluster identity 4711 [ 924.597617][T24699] tipc: Enabled bearer , priority 0 [ 924.607256][T24698] tipc: Resetting bearer [ 924.615860][T24708] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5355'. [ 924.640680][T24698] tipc: Disabling bearer [ 927.236352][T24716] syzkaller0: entered promiscuous mode [ 927.236391][T24716] syzkaller0: entered allmulticast mode [ 927.376202][T24736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.377124][T24736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.379452][T24736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.379465][T24736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.404487][T24735] syzkaller0: entered promiscuous mode [ 927.404537][T24735] syzkaller0: entered allmulticast mode [ 927.408347][T24735] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5368'. [ 927.408367][T24735] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5368'. [ 927.456432][T24740] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 927.518601][T24744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5372'. [ 927.662838][T24759] syzkaller0: entered promiscuous mode [ 927.662894][T24759] syzkaller0: entered allmulticast mode [ 927.772472][T24765] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 928.011204][T24779] syzkaller0: entered promiscuous mode [ 928.011271][T24779] syzkaller0: entered allmulticast mode [ 928.192867][T24794] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 928.412955][T24825] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5406'. [ 928.639655][T24857] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5420'. [ 928.773795][T24860] ip6gre1: entered promiscuous mode [ 928.773859][T24860] ip6gre1: entered allmulticast mode [ 928.996250][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 929.266776][T24911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.266826][T24911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.270544][T24911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.270557][T24911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.272920][T24911] batman_adv: batadv0: Removing interface: macvtap1 [ 929.275347][T24911] batman_adv: batadv0: Removing interface: macvtap2 [ 929.277587][T24911] batman_adv: batadv0: Removing interface: macvtap3 [ 929.281216][T24911] batman_adv: batadv0: Removing interface: macvtap4 [ 929.282923][T24911] batman_adv: batadv0: Removing interface: macvtap5 [ 929.285077][T24911] batman_adv: batadv0: Removing interface: macvtap6 [ 929.287207][T24911] batman_adv: batadv0: Removing interface: macvtap7 [ 929.289480][T24911] batman_adv: batadv0: Removing interface: macvtap8 [ 929.379198][T24919] syzkaller0: entered promiscuous mode [ 929.379263][T24919] syzkaller0: entered allmulticast mode [ 929.382531][T24919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5444'. [ 929.382547][T24919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5444'. [ 929.462810][T24922] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5446'. [ 929.466565][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5447'. [ 929.596970][T24935] syzkaller0: entered promiscuous mode [ 929.597020][T24935] syzkaller0: entered allmulticast mode [ 929.598409][T24935] 0: reclassify loop, rule prio 0, protocol 700 [ 929.682353][T24942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.685779][T24942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.690112][T24942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.690185][T24942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.758380][T24943] syzkaller0: entered promiscuous mode [ 929.758441][T24943] syzkaller0: entered allmulticast mode [ 932.204795][T24988] syzkaller0: entered promiscuous mode [ 932.207176][T24988] syzkaller0: entered allmulticast mode [ 932.294629][T24994] syzkaller0: entered promiscuous mode [ 932.294685][T24994] syzkaller0: entered allmulticast mode [ 932.449702][T25008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.698811][T25032] syzkaller0: entered promiscuous mode [ 934.698855][T25032] syzkaller0: entered allmulticast mode [ 934.703597][T25032] __nla_validate_parse: 6 callbacks suppressed [ 934.705087][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5488'. [ 934.708355][T25032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5487'. [ 934.821708][T25048] syzkaller0: entered promiscuous mode [ 934.821788][T25048] syzkaller0: entered allmulticast mode [ 934.986346][T25067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 937.186623][T25063] syzkaller0: entered promiscuous mode [ 937.186675][T25063] syzkaller0: entered allmulticast mode [ 937.291829][T25077] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5501'. [ 937.350107][T25081] syzkaller0: entered promiscuous mode [ 937.350167][T25081] syzkaller0: entered allmulticast mode [ 937.383456][T25081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5504'. [ 937.448548][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5507'. [ 937.488795][T25090] syzkaller0: entered promiscuous mode [ 937.488870][T25090] syzkaller0: entered allmulticast mode [ 937.489755][T25087] veth0: entered promiscuous mode [ 937.499133][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5506'. [ 937.553620][T25092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5506'. [ 937.564717][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'. [ 937.617075][T25101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5512'. [ 940.136476][T25094] syzkaller1: entered promiscuous mode [ 940.136511][T25094] syzkaller1: entered allmulticast mode [ 940.397432][T25136] __nla_validate_parse: 1 callbacks suppressed [ 940.402906][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5523'. [ 940.407430][T25144] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 940.487627][T25150] syzkaller0: entered promiscuous mode [ 940.487705][T25150] syzkaller0: entered allmulticast mode [ 941.991923][T25175] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 942.466611][T25193] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 943.568748][T25221] veth0: entered promiscuous mode [ 943.572567][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5549'. [ 943.575572][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5549'. [ 943.653062][T25220] veth0: left promiscuous mode [ 943.696471][T25235] netlink: 'syz.3.5557': attribute type 11 has an invalid length. [ 943.742641][T25235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5557'. [ 943.757584][T25233] syzkaller0: entered promiscuous mode [ 943.760669][T25233] syzkaller0: entered allmulticast mode [ 946.583059][T25268] netlink: 'syz.7.5568': attribute type 8 has an invalid length. [ 946.583117][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5568'. [ 946.688756][T25289] veth0: entered promiscuous mode [ 946.762047][T25292] syzkaller0: entered promiscuous mode [ 946.762122][T25292] syzkaller0: entered allmulticast mode [ 946.763977][T25295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.766398][T25288] veth0: left promiscuous mode [ 950.062648][T25344] syzkaller0: entered promiscuous mode [ 950.062734][T25344] syzkaller0: entered allmulticast mode [ 950.066204][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5594'. [ 950.066221][T25348] bridge: RTM_NEWNEIGH with invalid ether address [ 953.292802][T25385] netlink: 'syz.7.5602': attribute type 11 has an invalid length. [ 953.332632][T25385] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5602'. [ 953.398021][T25393] syzkaller0: entered promiscuous mode [ 953.398873][T25393] syzkaller0: entered allmulticast mode [ 955.945977][T18007] bridge_slave_1: left allmulticast mode [ 955.946034][T18007] bridge_slave_1: left promiscuous mode [ 955.946172][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.953492][T18007] bridge_slave_0: left allmulticast mode [ 955.955784][T18007] bridge_slave_0: left promiscuous mode [ 955.957971][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.973016][T18007] team0: left allmulticast mode [ 955.973081][T18007] team_slave_0: left allmulticast mode [ 955.973126][T18007] team_slave_1: left allmulticast mode [ 955.980016][T18007] pim6reg: left allmulticast mode [ 956.190266][T18007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.195232][T18007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.206008][T18007] bond0 (unregistering): Released all slaves [ 956.210578][T18007] bond1 (unregistering): Released all slaves [ 956.218882][T18007] bond2 (unregistering): Released all slaves [ 956.227877][T18007] bond3 (unregistering): Released all slaves [ 958.746968][T18007] tipc: Left network mode [ 958.747117][T25452] syzkaller0: entered promiscuous mode [ 958.747130][T25452] syzkaller0: entered allmulticast mode [ 958.984768][T25466] syzkaller0: entered promiscuous mode [ 958.984849][T25466] syzkaller0: entered allmulticast mode [ 959.076187][T18007] batman_adv: batadv0: Removing interface: macvtap1 [ 959.086964][T18007] batman_adv: batadv0: Removing interface: macvtap2 [ 959.092818][T18007] batman_adv: batadv0: Removing interface: macvtap3 [ 959.098393][T18007] batman_adv: batadv0: Removing interface: macvtap4 [ 959.102304][T18007] batman_adv: batadv0: Removing interface: macvtap5 [ 959.108244][T18007] batman_adv: batadv0: Removing interface: macvtap6 [ 959.111648][T18007] batman_adv: batadv0: Removing interface: macvtap7 [ 959.124577][T18007] batman_adv: batadv0: Removing interface: macvtap8 [ 959.195394][T25478] syzkaller0: entered promiscuous mode [ 959.195457][T25478] syzkaller0: entered allmulticast mode [ 961.563275][T25476] syzkaller0: entered promiscuous mode [ 961.563562][T25476] syzkaller0: entered allmulticast mode [ 961.852990][T25512] netlink: 'syz.8.5634': attribute type 1 has an invalid length. [ 963.972290][T25512] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 964.081943][T25533] syzkaller0: entered promiscuous mode [ 964.083695][T25533] syzkaller0: entered allmulticast mode [ 964.147655][T25536] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 964.171104][T18007] hsr_slave_0: left promiscuous mode [ 964.173257][T18007] hsr_slave_1: left promiscuous mode [ 964.173932][T18007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.173949][T18007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.175779][T18007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.175790][T18007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.183336][T18007] veth1_macvtap: left promiscuous mode [ 964.183382][T18007] veth0_macvtap: left promiscuous mode [ 964.183445][T18007] veth1_vlan: left promiscuous mode [ 964.183496][T18007] veth0_vlan: left promiscuous mode [ 964.367186][T18007] team0 (unregistering): Port device team_slave_1 removed [ 964.392076][T18007] team0 (unregistering): Port device team_slave_0 removed [ 964.525969][T25551] syzkaller0: entered promiscuous mode [ 964.526017][T25551] syzkaller0: entered allmulticast mode [ 967.059706][T25572] syzkaller0: entered promiscuous mode [ 967.059754][T25572] syzkaller0: entered allmulticast mode [ 967.081604][T25593] tipc: Enabling of bearer rejected, failed to enable media [ 967.134774][T25597] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5647'. [ 969.668681][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5658'. [ 969.741268][T25649] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 969.784378][T25657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5668'. [ 969.797598][T25651] syzkaller0: entered promiscuous mode [ 969.797675][T25651] syzkaller0: entered allmulticast mode [ 972.449908][T25678] syzkaller0: entered promiscuous mode [ 972.449968][T25678] syzkaller0: entered allmulticast mode [ 972.503195][T25693] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5677'. [ 972.545412][T25695] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 975.070241][T25712] syzkaller1: entered promiscuous mode [ 975.070291][T25712] syzkaller1: entered allmulticast mode [ 975.111179][T25716] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 975.204666][T25728] syzkaller0: entered promiscuous mode [ 975.206539][T25728] syzkaller0: entered allmulticast mode [ 976.196649][T25759] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 978.074677][T25776] syzkaller0: entered promiscuous mode [ 978.076605][T25776] syzkaller0: entered allmulticast mode [ 978.081355][T25776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5706'. [ 978.094585][T25776] tipc: Started in network mode [ 978.094661][T25776] tipc: Node identity 32b7aa297caf, cluster identity 4711 [ 978.102831][T25776] tipc: Enabled bearer , priority 0 [ 978.117552][T25781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.118197][T25775] tipc: Resetting bearer [ 978.123679][T25781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.125623][T25781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.136279][T25781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.139465][T25781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 978.153162][T25775] tipc: Disabling bearer [ 978.158495][T25783] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 978.252365][T25789] tipc: Failed to remove unknown binding: 66,0,0/0:998661154/998661156 [ 978.252447][T25789] tipc: Failed to remove unknown binding: 66,0,0/0:998661154/998661155 [ 978.252645][T25789] tipc: Failed to remove unknown binding: 66,0,0/0:998661154/998661156 [ 978.252658][T25789] tipc: Failed to remove unknown binding: 66,0,0/0:998661154/998661155 [ 978.261445][T19901] tipc: Resetting bearer [ 978.306324][T19901] tipc: Disabling bearer [ 978.340050][T25787] syzkaller0: entered promiscuous mode [ 978.340141][T25787] syzkaller0: entered allmulticast mode [ 980.355669][T25781] Bluetooth: hci3: command tx timeout [ 980.706441][T18007] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.749129][T25823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5717'. [ 980.761029][T25826] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5718'. [ 980.816023][T18007] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.864236][T18007] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.092133][T25839] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 982.578007][T25781] Bluetooth: hci3: command tx timeout [ 983.501697][T18007] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.653901][T25851] syzkaller0: entered promiscuous mode [ 983.653955][T25851] syzkaller0: entered allmulticast mode [ 984.804063][T25781] Bluetooth: hci3: command tx timeout [ 986.466438][T25870] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 987.036458][T25781] Bluetooth: hci3: command tx timeout [ 989.147096][T25880] tipc: Enabling of bearer rejected, failed to enable media [ 989.288206][T25779] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.288320][T25779] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.288385][T25779] bridge_slave_0: entered allmulticast mode [ 989.289100][T25779] bridge_slave_0: entered promiscuous mode [ 989.290200][T25890] syzkaller1: entered promiscuous mode [ 989.290213][T25890] syzkaller1: entered allmulticast mode [ 989.302050][T18007] bridge_slave_1: left allmulticast mode [ 989.302099][T18007] bridge_slave_1: left promiscuous mode [ 989.302399][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.311322][T18007] bridge_slave_0: left allmulticast mode [ 989.311373][T18007] bridge_slave_0: left promiscuous mode [ 989.311540][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.474769][T18007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.481216][T18007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.486544][T18007] bond0 (unregistering): Released all slaves [ 989.490810][T25779] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.490911][T25779] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.490990][T25779] bridge_slave_1: entered allmulticast mode [ 989.491952][T25779] bridge_slave_1: entered promiscuous mode [ 989.528203][T25897] syzkaller0: entered promiscuous mode [ 989.528252][T25897] syzkaller0: entered allmulticast mode [ 989.596451][T25779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.596579][T18007] tipc: Left network mode [ 989.598445][T25779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.613459][T25779] team0: Port device team_slave_0 added [ 989.616666][T25779] team0: Port device team_slave_1 added [ 989.633376][T25779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.635642][T25779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.643807][T25779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.654415][T25779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.656924][T25779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.664944][T25779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.786494][T25779] hsr_slave_0: entered promiscuous mode [ 989.786943][T25779] hsr_slave_1: entered promiscuous mode [ 989.787328][T25779] debugfs: 'hsr0' already exists in 'hsr' [ 989.787340][T25779] Cannot create hsr debugfs directory [ 989.787713][T25908] syzkaller0: entered promiscuous mode [ 989.787731][T25908] syzkaller0: entered allmulticast mode [ 989.800783][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5741'. [ 989.845061][T25908] tipc: Enabled bearer , priority 0 [ 989.855409][T25907] tipc: Resetting bearer [ 989.884875][T25907] tipc: Disabling bearer [ 989.898082][T25912] tipc: Enabled bearer , priority 0 [ 989.910419][T25912] syzkaller0: entered promiscuous mode [ 989.910481][T25912] syzkaller0: entered allmulticast mode [ 989.958247][T18007] hsr_slave_0: left promiscuous mode [ 989.960983][T18007] hsr_slave_1: left promiscuous mode [ 989.965119][T18007] veth1_macvtap: left promiscuous mode [ 989.967970][T18007] veth0_macvtap: left promiscuous mode [ 989.968128][T18007] veth1_vlan: left promiscuous mode [ 989.968216][T18007] veth0_vlan: left promiscuous mode [ 990.025357][T18007] team0 (unregistering): Port device vlan2 removed [ 990.165797][T18007] team0 (unregistering): Port device team_slave_1 removed [ 990.174183][T18007] team0 (unregistering): Port device team_slave_0 removed [ 990.258119][T25912] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 990.314025][ T5450] 8021q: adding VLAN 0 to HW filter on device eth26 [ 990.321590][T25923] tipc: Resetting bearer [ 990.362275][T25911] tipc: Resetting bearer [ 990.414585][T25911] tipc: Disabling bearer [ 990.466553][T25929] syzkaller1: entered promiscuous mode [ 990.466602][T25929] syzkaller1: entered allmulticast mode [ 990.594486][T25933] syzkaller0: entered promiscuous mode [ 990.594533][T25933] syzkaller0: entered allmulticast mode [ 990.702357][ T5450] 8021q: adding VLAN 0 to HW filter on device eth27 [ 990.763453][T25953] syzkaller0: entered promiscuous mode [ 990.763526][T25953] syzkaller0: entered allmulticast mode [ 990.766152][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5752'. [ 990.794280][T25953] tipc: Enabled bearer , priority 0 [ 990.872809][T25952] tipc: Resetting bearer [ 990.888490][T25952] tipc: Disabling bearer [ 991.123222][T25978] tipc: Started in network mode [ 991.123292][T25978] tipc: Node identity ea01acc04c85, cluster identity 4711 [ 991.125450][T25978] tipc: Enabled bearer , priority 0 [ 991.128989][T25978] syzkaller0: entered promiscuous mode [ 991.129001][T25978] syzkaller0: entered allmulticast mode [ 991.146600][T25978] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 991.206891][T25981] syzkaller0: entered promiscuous mode [ 991.206940][T25981] syzkaller0: entered allmulticast mode [ 991.211001][T25978] tipc: Resetting bearer [ 991.234025][T25779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 991.240215][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.243755][T25977] tipc: Resetting bearer [ 991.258403][T25977] tipc: Disabling bearer [ 991.265640][T25989] syzkaller1: entered promiscuous mode [ 991.265735][T25989] syzkaller1: entered allmulticast mode [ 991.267728][T25779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 991.277977][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 991.278539][T25779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 991.283080][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.283876][T25779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 991.294592][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 991.336341][T25999] syzkaller0: entered promiscuous mode [ 991.336413][T25999] syzkaller0: entered allmulticast mode [ 991.351470][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5762'. [ 991.358383][T25999] tipc: Enabled bearer , priority 0 [ 991.362591][T25998] tipc: Resetting bearer [ 991.379574][T25998] tipc: Disabling bearer [ 991.442854][T25779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.452262][T25779] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.456466][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.456562][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.465365][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.465499][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.553100][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5769'. [ 991.593042][T26017] syzkaller0: entered promiscuous mode [ 991.593133][T26017] syzkaller0: entered allmulticast mode [ 991.672589][T26026] syzkaller0: entered promiscuous mode [ 991.672645][T26026] syzkaller0: entered allmulticast mode [ 991.675970][T26026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5773'. [ 991.681992][T26026] tipc: Enabled bearer , priority 0 [ 991.702629][T26024] tipc: Resetting bearer [ 991.743121][T26024] tipc: Disabling bearer [ 991.758804][T26030] tipc: Enabled bearer , priority 0 [ 991.759418][T26030] syzkaller0: entered promiscuous mode [ 991.759429][T26030] syzkaller0: entered allmulticast mode [ 991.760331][T26032] syzkaller1: entered promiscuous mode [ 991.760342][T26032] syzkaller1: entered allmulticast mode [ 991.767138][T26030] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 991.799614][T26030] tipc: Resetting bearer [ 991.809627][T26029] tipc: Resetting bearer [ 991.829476][T26029] tipc: Disabling bearer [ 991.943797][T26047] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5780'. [ 991.967114][T25779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.035489][T26053] syzkaller0: entered promiscuous mode [ 992.035578][T26053] syzkaller0: entered allmulticast mode [ 992.134156][T26060] syzkaller0: entered promiscuous mode [ 992.134233][T26060] syzkaller0: entered allmulticast mode [ 992.138936][T26060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5784'. [ 992.141802][T26060] tipc: Enabled bearer , priority 0 [ 992.151488][T26059] tipc: Resetting bearer [ 992.172739][T26059] tipc: Disabling bearer [ 992.218460][T25779] veth0_vlan: entered promiscuous mode [ 992.223789][T25779] veth1_vlan: entered promiscuous mode [ 992.246830][T26071] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5789'. [ 992.252772][T25779] veth0_macvtap: entered promiscuous mode [ 992.255622][T25779] veth1_macvtap: entered promiscuous mode [ 992.265353][T26069] tipc: Enabled bearer , priority 0 [ 992.266082][T26069] syzkaller0: entered promiscuous mode [ 992.266100][T26069] syzkaller0: entered allmulticast mode [ 992.269479][T26069] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 992.301702][T26073] syzkaller1: entered promiscuous mode [ 992.301761][T26073] syzkaller1: entered allmulticast mode [ 992.304603][T26069] tipc: Resetting bearer [ 992.306118][T25779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.313728][T26068] tipc: Resetting bearer [ 992.333082][T26068] tipc: Disabling bearer [ 992.351334][T25779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.380750][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.461344][T18007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.544096][T26080] syzkaller0: entered promiscuous mode [ 992.544177][T26080] syzkaller0: entered allmulticast mode [ 995.417043][T10964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.417097][T10964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.447442][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.447565][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.447652][T26098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5796'. [ 995.447775][T26095] tipc: Enabling of bearer rejected, failed to enable media [ 995.482873][T10964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.482952][T10964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.568637][T26107] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5799'. [ 995.627397][T26113] syzkaller1: entered promiscuous mode [ 995.627472][T26113] syzkaller1: entered allmulticast mode [ 995.878210][T26134] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 995.932302][T26137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5810'. [ 998.443143][T26128] syzkaller0: entered promiscuous mode [ 998.443198][T26128] syzkaller0: entered allmulticast mode [ 998.444100][T26132] syzkaller0: entered promiscuous mode [ 998.444114][T26132] syzkaller0: entered allmulticast mode [ 998.444899][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5807'. [ 998.455741][T26140] tipc: Enabled bearer , priority 0 [ 998.462046][T26121] tipc: Resetting bearer [ 998.478344][T26121] tipc: Disabling bearer [ 998.616027][T26154] syzkaller1: entered promiscuous mode [ 998.616093][T26154] syzkaller1: entered allmulticast mode [ 1001.405157][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1001.405379][T26180] tipc: Enabling of bearer rejected, failed to enable media [ 1001.503585][T26192] syzkaller0: entered promiscuous mode [ 1001.503648][T26192] syzkaller0: entered allmulticast mode [ 1001.617481][T26203] syzkaller0: entered promiscuous mode [ 1001.617556][T26203] syzkaller0: entered allmulticast mode [ 1001.620041][T26203] tipc: Enabled bearer , priority 0 [ 1001.622879][T26202] tipc: Resetting bearer [ 1001.644153][T26202] tipc: Disabling bearer [ 1001.655316][T26205] tipc: Enabled bearer , priority 0 [ 1001.655969][T26205] syzkaller0: entered promiscuous mode [ 1001.655981][T26205] syzkaller0: entered allmulticast mode [ 1001.679620][T26205] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1002.046215][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 1004.406297][T26214] tipc: Resetting bearer [ 1004.418073][T26232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.430168][T26232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.450027][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1004.452229][T26239] tipc: Enabling of bearer rejected, failed to enable media [ 1004.453640][T26204] tipc: Resetting bearer [ 1004.468858][T26204] tipc: Disabling bearer [ 1004.476180][ T5871] tipc: Node number set to 1120737197 [ 1004.549685][T26245] syzkaller0: entered promiscuous mode [ 1004.549742][T26245] syzkaller0: entered allmulticast mode [ 1004.598766][T26247] syzkaller0: entered promiscuous mode [ 1004.600578][T26247] syzkaller0: entered allmulticast mode [ 1004.606494][T26247] tipc: Enabled bearer , priority 0 [ 1004.611143][T26246] tipc: Resetting bearer [ 1004.638591][T26246] tipc: Disabling bearer [ 1004.655668][T26251] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5849'. [ 1004.820125][T26260] syzkaller0: entered promiscuous mode [ 1004.820194][T26260] syzkaller0: entered allmulticast mode [ 1004.843720][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5853'. [ 1004.849580][T26260] tipc: Enabled bearer , priority 0 [ 1004.854318][T26259] tipc: Resetting bearer [ 1005.021321][T26259] tipc: Disabling bearer [ 1006.347163][ T69] Bluetooth: hci1: command 0x0405 tx timeout [ 1007.957994][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5857'. [ 1008.098148][T26284] syzkaller0: entered promiscuous mode [ 1008.100170][T26284] syzkaller0: entered allmulticast mode [ 1008.106227][T26284] tipc: Enabled bearer , priority 0 [ 1008.109758][T26283] tipc: Resetting bearer [ 1008.143190][T26283] tipc: Disabling bearer [ 1008.171503][T26288] tipc: Enabled bearer , priority 0 [ 1008.172182][T26288] syzkaller0: entered promiscuous mode [ 1008.172198][T26288] syzkaller0: entered allmulticast mode [ 1008.176643][T26288] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1008.208450][T26291] syzkaller0: entered promiscuous mode [ 1008.208540][T26291] syzkaller0: entered allmulticast mode [ 1008.212560][T26288] tipc: Resetting bearer [ 1008.212872][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5865'. [ 1008.221556][T26287] tipc: Resetting bearer [ 1008.335912][T26287] tipc: Disabling bearer [ 1008.341231][T26291] tipc: Started in network mode [ 1008.341338][T26291] tipc: Node identity 1a4c76276b9a, cluster identity 4711 [ 1008.341618][T26291] tipc: Enabled bearer , priority 0 [ 1008.346882][T26290] tipc: Resetting bearer [ 1008.376964][T26290] tipc: Disabling bearer [ 1008.501945][T26306] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5872'. [ 1011.264797][T26339] tipc: Enabling of bearer rejected, failed to enable media [ 1011.293803][T26343] syzkaller1: entered promiscuous mode [ 1011.293852][T26343] syzkaller1: entered allmulticast mode [ 1011.460958][T26362] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1011.582956][T26380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5896'. [ 1011.583245][T26380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5896'. [ 1011.634193][T26387] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1011.687591][T26388] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1011.819751][T26413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5911'. [ 1011.819821][T26413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5911'. [ 1011.853371][T26417] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1012.103241][T26443] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1012.184783][T26447] syzkaller0: entered promiscuous mode [ 1012.184831][T26447] syzkaller0: entered allmulticast mode [ 1012.245409][T26449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1012.245459][T26449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1012.410768][T26455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1012.411100][T26455] nbd: must specify at least one socket [ 1012.507604][T26462] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1012.775897][T26482] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1013.024200][T26506] syzkaller0: entered promiscuous mode [ 1013.024245][T26506] syzkaller0: entered allmulticast mode [ 1013.255147][T26508] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1013.435140][T26523] syzkaller0: entered promiscuous mode [ 1013.435190][T26523] syzkaller0: entered allmulticast mode [ 1016.059922][T26539] tipc: Enabling of bearer rejected, failed to enable media [ 1016.102193][T26555] syzkaller0: entered promiscuous mode [ 1016.102240][T26555] syzkaller0: entered allmulticast mode [ 1016.138299][T26559] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1016.311837][T26578] syzkaller0: entered promiscuous mode [ 1016.311898][T26578] syzkaller0: entered allmulticast mode [ 1016.447775][T26588] __nla_validate_parse: 2 callbacks suppressed [ 1016.448061][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5971'. [ 1018.997642][T26588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.002293][T26588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.014816][T26593] tipc: Enabling of bearer rejected, failed to enable media [ 1019.035806][T26603] syzkaller0: entered promiscuous mode [ 1019.035861][T26603] syzkaller0: entered allmulticast mode [ 1019.044613][T26614] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1021.673552][T26643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5983'. [ 1021.677374][T26635] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5980'. [ 1021.793692][T26655] syzkaller0: entered promiscuous mode [ 1021.793753][T26655] syzkaller0: entered allmulticast mode [ 1021.797245][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5988'. [ 1021.797400][T26654] syzkaller0: entered promiscuous mode [ 1021.797409][T26654] syzkaller0: entered allmulticast mode [ 1021.807908][T26655] tipc: Enabled bearer , priority 0 [ 1024.617196][T26652] tipc: Resetting bearer [ 1024.638066][T26652] tipc: Disabling bearer [ 1024.669622][T26659] syzkaller0: entered promiscuous mode [ 1024.669673][T26659] syzkaller0: entered allmulticast mode [ 1024.670881][T26667] tipc: Enabled bearer , priority 0 [ 1024.671942][ T9] tipc: Node number set to 2793712832 [ 1024.672754][T26657] tipc: Resetting bearer [ 1024.690449][T26657] tipc: Disabling bearer [ 1024.756184][T26673] syzkaller0: entered promiscuous mode [ 1024.756266][T26673] syzkaller0: entered allmulticast mode [ 1024.767502][T26674] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1024.821192][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5991'. [ 1025.011146][T26694] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1027.865691][T26702] syzkaller0: entered promiscuous mode [ 1027.865738][T26702] syzkaller0: entered allmulticast mode [ 1027.868442][T26705] syzkaller0: entered promiscuous mode [ 1027.868463][T26705] syzkaller0: entered allmulticast mode [ 1027.871389][T26706] syzkaller0: entered promiscuous mode [ 1027.871408][T26706] syzkaller0: entered allmulticast mode [ 1027.872631][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6002'. [ 1027.872813][T26708] tipc: Enabled bearer , priority 0 [ 1027.938230][T26695] tipc: Resetting bearer [ 1027.941130][T26713] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1027.955601][T26695] tipc: Disabling bearer [ 1028.094641][T26721] syzkaller0: entered promiscuous mode [ 1028.094701][T26721] syzkaller0: entered allmulticast mode [ 1028.239485][T26735] tipc: Enabled bearer , priority 0 [ 1028.240110][T26735] syzkaller0: entered promiscuous mode [ 1028.240127][T26735] syzkaller0: entered allmulticast mode [ 1028.242071][T26735] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1028.271094][T26735] tipc: Resetting bearer [ 1028.277600][T26734] tipc: Resetting bearer [ 1028.295659][T26734] tipc: Disabling bearer [ 1028.314943][T26740] syzkaller0: entered promiscuous mode [ 1028.314984][T26740] syzkaller0: entered allmulticast mode [ 1028.377965][T26746] syzkaller0: entered promiscuous mode [ 1028.378032][T26746] syzkaller0: entered allmulticast mode [ 1028.380016][T26746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6018'. [ 1028.383809][T26746] tipc: Enabled bearer , priority 0 [ 1028.388525][T26745] tipc: Resetting bearer [ 1028.403977][T26745] tipc: Disabling bearer [ 1028.427013][T26751] syzkaller0: entered promiscuous mode [ 1028.427065][T26751] syzkaller0: entered allmulticast mode [ 1028.429445][T26751] tipc: Enabled bearer , priority 0 [ 1028.433475][T26750] tipc: Resetting bearer [ 1028.457607][T26750] tipc: Disabling bearer [ 1028.537709][T26758] syzkaller0: entered promiscuous mode [ 1028.537752][T26758] syzkaller0: entered allmulticast mode [ 1028.792538][T26773] tipc: Enabled bearer , priority 0 [ 1028.792996][T26773] syzkaller0: entered promiscuous mode [ 1028.793009][T26773] syzkaller0: entered allmulticast mode [ 1028.805407][T26773] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1028.837586][T26773] tipc: Resetting bearer [ 1028.838038][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6030'. [ 1028.843147][T26777] tipc: Enabled bearer , priority 0 [ 1028.847527][T26772] tipc: Resetting bearer [ 1028.861084][T26772] tipc: Disabling bearer [ 1028.866405][T26776] tipc: Disabling bearer [ 1028.876522][T26780] syzkaller0: entered promiscuous mode [ 1028.876577][T26780] syzkaller0: entered allmulticast mode [ 1028.879125][T26780] tipc: Enabled bearer , priority 0 [ 1028.883098][T26778] tipc: Resetting bearer [ 1028.900738][T26778] tipc: Disabling bearer [ 1029.095909][T26804] syzkaller0: entered promiscuous mode [ 1029.095949][T26804] syzkaller0: entered allmulticast mode [ 1029.199426][T26812] tipc: Enabled bearer , priority 0 [ 1029.202148][T26812] syzkaller0: entered promiscuous mode [ 1029.203984][T26812] syzkaller0: entered allmulticast mode [ 1029.205648][T26812] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1029.225133][T26812] tipc: Resetting bearer [ 1029.231044][T26811] tipc: Resetting bearer [ 1029.254734][T26811] tipc: Disabling bearer [ 1029.267627][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6043'. [ 1029.270189][T26814] tipc: Enabled bearer , priority 0 [ 1029.270913][T26816] syzkaller0: entered promiscuous mode [ 1029.270925][T26816] syzkaller0: entered allmulticast mode [ 1029.277402][T26813] tipc: Disabling bearer [ 1029.284613][T26816] tipc: Enabled bearer , priority 0 [ 1029.287055][T26815] tipc: Resetting bearer [ 1029.305261][T26815] tipc: Disabling bearer [ 1029.565213][T26847] tipc: Enabled bearer , priority 0 [ 1029.565649][T26847] syzkaller0: entered promiscuous mode [ 1029.565660][T26847] syzkaller0: entered allmulticast mode [ 1029.567425][T26847] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1029.583943][T26847] tipc: Resetting bearer [ 1029.586105][T26845] tipc: Resetting bearer [ 1029.602684][T26845] tipc: Disabling bearer [ 1029.683582][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6055'. [ 1029.688961][T26858] tipc: Enabled bearer , priority 0 [ 1029.697552][T26857] tipc: Disabling bearer [ 1029.719929][T26863] tipc: Enabled bearer , priority 0 [ 1029.723527][T26862] tipc: Disabling bearer [ 1029.820260][T26868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.820548][T26868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.857939][ C2] ------------[ cut here ]------------ [ 1029.858000][ C2] refcount_t: underflow; use-after-free. [ 1029.858034][ C2] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#2: swapper/2/0 [ 1029.864585][ C2] Modules linked in: [ 1029.867945][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.872658][ C2] Tainted: [L]=SOFTLOCKUP [ 1029.874042][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1029.877202][ C2] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 1029.879233][ C2] Code: cc e8 d0 39 e5 fc 48 8d 3d 89 02 2a 0c 67 48 0f b9 3a e8 bf 39 e5 fc 5b 5d e9 48 1f a8 06 e8 b3 39 e5 fc 48 8d 3d 7c 02 2a 0c <67> 48 0f b9 3a e8 a2 39 e5 fc 5b 5d c3 cc cc cc cc e8 96 39 e5 fc [ 1029.885200][ C2] RSP: 0000:ffffc90000558c18 EFLAGS: 00010246 [ 1029.887121][ C2] RAX: 0000000000000000 RBX: ffff88806bce9820 RCX: 0000000000000101 [ 1029.889720][ C2] RDX: ffff88801cbc8000 RSI: ffffffff8525e69d RDI: ffffffff914fe920 [ 1029.892213][ C2] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 1029.894692][ C2] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88806bce9820 [ 1029.897169][ C2] R13: 8000000000000101 R14: 1ffff920000ab18d R15: ffffffff8b00de60 [ 1029.899781][ C2] FS: 0000000000000000(0000) GS:ffff888096b76000(0000) knlGS:0000000000000000 [ 1029.902562][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.904643][ C2] CR2: 00000000f548cda4 CR3: 0000000056e53000 CR4: 0000000000352ef0 [ 1029.907154][ C2] Call Trace: [ 1029.908203][ C2] [ 1029.909222][ C2] sctp_transport_put+0x134/0x180 [ 1029.910969][ C2] call_timer_fn+0x198/0x5f0 [ 1029.912538][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 1029.914277][ C2] ? __run_timers+0x747/0xb00 [ 1029.915869][ C2] ? rcu_is_watching+0x13/0xc0 [ 1029.917492][ C2] ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10 [ 1029.919511][ C2] __run_timers+0x757/0xb00 [ 1029.921026][ C2] ? __pfx___run_timers+0x10/0x10 [ 1029.922704][ C2] ? clockevents_program_event+0x1bf/0x820 [ 1029.924555][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 1029.926147][ C2] run_timer_base+0x114/0x190 [ 1029.927645][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 1029.929321][ C2] run_timer_softirq+0x1a/0x50 [ 1029.930817][ C2] handle_softirqs+0x1e6/0x9d0 [ 1029.932607][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 1029.934380][ C2] ? _raw_spin_unlock+0x28/0x50 [ 1029.935947][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1029.937731][ C2] __irq_exit_rcu+0x194/0x210 [ 1029.939296][ C2] irq_exit_rcu+0x9/0x30 [ 1029.940660][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1029.942488][ C2] [ 1029.943436][ C2] [ 1029.944608][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1029.946476][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1029.948262][ C2] Code: 28 a0 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 e5 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1029.954537][ C2] RSP: 0000:ffffc9000049fe00 EFLAGS: 00000202 [ 1029.956489][ C2] RAX: 0000000000e027a1 RBX: ffff88801cbc8000 RCX: ffffffff8bcad115 [ 1029.958982][ C2] RDX: 0000000000000001 RSI: ffffffff8e3e64a5 RDI: ffffffff8c61e280 [ 1029.961442][ C2] RBP: ffffed1003979000 R08: 0000000000000001 R09: ffffed10056867bd [ 1029.963944][ C2] R10: ffff88802b433deb R11: 0000000000000001 R12: 0000000000000000 [ 1029.966369][ C2] R13: 0000000000000000 R14: 1ffff92000093fc4 R15: dffffc0000000000 [ 1029.968876][ C2] ? ct_kernel_exit+0x125/0x180 [ 1029.970563][ C2] default_idle+0x9/0x10 [ 1029.971899][ C2] default_idle_call+0x6c/0xb0 [ 1029.973402][ C2] do_idle+0x3ae/0x5b0 [ 1029.974766][ C2] ? __pfx_do_idle+0x10/0x10 [ 1029.976237][ C2] ? do_idle+0x38f/0x5b0 [ 1029.977571][ C2] cpu_startup_entry+0x4f/0x60 [ 1029.979163][ C2] start_secondary+0x21d/0x2d0 [ 1029.980675][ C2] ? __pfx_start_secondary+0x10/0x10 [ 1029.982333][ C2] common_startup_64+0x13e/0x158 [ 1029.983894][ C2] [ 1029.984945][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1029.987463][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.991041][ C2] Tainted: [L]=SOFTLOCKUP [ 1029.992452][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1029.995576][ C2] Call Trace: [ 1029.996625][ C2] [ 1029.997536][ C2] dump_stack_lvl+0x100/0x190 [ 1029.999100][ C2] vpanic+0x553/0x970 [ 1030.000382][ C2] ? __pfx_vpanic+0x10/0x10 [ 1030.001903][ C2] panic+0xd1/0xe0 [ 1030.003290][ C2] ? __pfx_panic+0x10/0x10 [ 1030.004865][ C2] check_panic_on_warn.cold+0x19/0x34 [ 1030.006554][ C2] ? refcount_warn_saturate+0xf4/0x130 [ 1030.008312][ C2] __warn.cold+0x191/0x318 [ 1030.009679][ C2] __report_bug+0x30f/0x440 [ 1030.011081][ C2] ? refcount_warn_saturate+0xf4/0x130 [ 1030.012798][ C2] ? __pfx___report_bug+0x10/0x10 [ 1030.014385][ C2] ? refcount_warn_saturate+0xed/0x130 [ 1030.016108][ C2] ? mark_held_locks+0x40/0x70 [ 1030.017620][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1030.019552][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 1030.021252][ C2] report_bug_entry+0xe2/0x290 [ 1030.022832][ C2] ? refcount_warn_saturate+0xf4/0x130 [ 1030.024579][ C2] handle_bug+0x1cd/0x2a0 [ 1030.025892][ C2] exc_invalid_op+0x17/0x50 [ 1030.027252][ C2] asm_exc_invalid_op+0x1a/0x20 [ 1030.029035][ C2] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 1030.031098][ C2] Code: cc e8 d0 39 e5 fc 48 8d 3d 89 02 2a 0c 67 48 0f b9 3a e8 bf 39 e5 fc 5b 5d e9 48 1f a8 06 e8 b3 39 e5 fc 48 8d 3d 7c 02 2a 0c <67> 48 0f b9 3a e8 a2 39 e5 fc 5b 5d c3 cc cc cc cc e8 96 39 e5 fc [ 1030.037129][ C2] RSP: 0000:ffffc90000558c18 EFLAGS: 00010246 [ 1030.039095][ C2] RAX: 0000000000000000 RBX: ffff88806bce9820 RCX: 0000000000000101 [ 1030.041551][ C2] RDX: ffff88801cbc8000 RSI: ffffffff8525e69d RDI: ffffffff914fe920 [ 1030.044120][ C2] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 1030.047103][ C2] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88806bce9820 [ 1030.050416][ C2] R13: 8000000000000101 R14: 1ffff920000ab18d R15: ffffffff8b00de60 [ 1030.053312][ C2] ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10 [ 1030.055304][ C2] ? refcount_warn_saturate+0xed/0x130 [ 1030.057039][ C2] ? refcount_warn_saturate+0xed/0x130 [ 1030.058773][ C2] sctp_transport_put+0x134/0x180 [ 1030.060392][ C2] call_timer_fn+0x198/0x5f0 [ 1030.061813][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 1030.063431][ C2] ? __run_timers+0x747/0xb00 [ 1030.064910][ C2] ? rcu_is_watching+0x13/0xc0 [ 1030.066419][ C2] ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10 [ 1030.068389][ C2] __run_timers+0x757/0xb00 [ 1030.069832][ C2] ? __pfx___run_timers+0x10/0x10 [ 1030.071399][ C2] ? clockevents_program_event+0x1bf/0x820 [ 1030.073176][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 1030.074723][ C2] run_timer_base+0x114/0x190 [ 1030.076211][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 1030.077948][ C2] run_timer_softirq+0x1a/0x50 [ 1030.079476][ C2] handle_softirqs+0x1e6/0x9d0 [ 1030.080960][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 1030.082597][ C2] ? _raw_spin_unlock+0x28/0x50 [ 1030.084198][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1030.086069][ C2] __irq_exit_rcu+0x194/0x210 [ 1030.087567][ C2] irq_exit_rcu+0x9/0x30 [ 1030.088927][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1030.090719][ C2] [ 1030.091638][ C2] [ 1030.092765][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1030.094613][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1030.096341][ C2] Code: 28 a0 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 e5 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1030.102158][ C2] RSP: 0000:ffffc9000049fe00 EFLAGS: 00000202 [ 1030.104118][ C2] RAX: 0000000000e027a1 RBX: ffff88801cbc8000 RCX: ffffffff8bcad115 [ 1030.106749][ C2] RDX: 0000000000000001 RSI: ffffffff8e3e64a5 RDI: ffffffff8c61e280 [ 1030.109233][ C2] RBP: ffffed1003979000 R08: 0000000000000001 R09: ffffed10056867bd [ 1030.111981][ C2] R10: ffff88802b433deb R11: 0000000000000001 R12: 0000000000000000 [ 1030.114485][ C2] R13: 0000000000000000 R14: 1ffff92000093fc4 R15: dffffc0000000000 [ 1030.116955][ C2] ? ct_kernel_exit+0x125/0x180 [ 1030.118579][ C2] default_idle+0x9/0x10 [ 1030.120356][ C2] default_idle_call+0x6c/0xb0 [ 1030.122325][ C2] do_idle+0x3ae/0x5b0 [ 1030.123943][ C2] ? __pfx_do_idle+0x10/0x10 [ 1030.125717][ C2] ? do_idle+0x38f/0x5b0 [ 1030.127349][ C2] cpu_startup_entry+0x4f/0x60 [ 1030.129392][ C2] start_secondary+0x21d/0x2d0 [ 1030.131232][ C2] ? __pfx_start_secondary+0x10/0x10 [ 1030.132893][ C2] common_startup_64+0x13e/0x158 [ 1030.134458][ C2] [ 1030.136332][ C2] Kernel Offset: disabled [ 1030.137771][ C2] Rebooting in 86400 seconds..