last executing test programs: 8.515954466s ago: executing program 0 (id=153): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x24}}, 0x40800) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x24}}, 0x40800) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) accept4(r1, &(0x7f00000002c0)=@l2, &(0x7f0000000340)=0x80, 0x800) (async) accept4(r1, &(0x7f00000002c0)=@l2, &(0x7f0000000340)=0x80, 0x800) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.539470688s ago: executing program 0 (id=166): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f00000002c0)='usruuota\x1c\x9a\xb9\x9c\x95\xef\x92\xcc\x96`\xde\xc2\x13\x8a\xd5\xb2\xfe;\x1e\xda\xa9o$J\xd7,\xbe-\x99@\xd7\x82\x1e&u\xec}5\xfb\xf4\x95\xeb\xe9\x15\xd2\x04w[\x8cM\x1dX\x89\xc0cq\b\x04\x8c\x1d\xdd\x05\xcah\xa3|p\xb6r\xb7\x01;\xc0$\x88\x02.\x06\xa2\x84\xb8\xabW\x19!\xbe\xbb\x1fn\xac\xb6\x85\xf3]\xb8\f\xd6\x95\xa7\xa1\x1eJL\x8e\x12\x01\x89\x12n\x9e\x1c\x0e\xc0\xf8\xd4') r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x3, 0x3, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x0, 0x6}, 0x100, './bus\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2, 0x4, 0x5, 0x2000}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000400)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050004770000000000000a0000000900020073797a30000001000500010007000000050005000a0000000c00078008000b400000cb57050004000000000011000300686173683a69702c6d61726b00"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r10, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r9, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r11, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x89e, 0x2, &(0x7f0000000040)=0x100000001}) 5.624729238s ago: executing program 0 (id=175): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3ec2a965ee06c6b786"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133dce", 0x0, 0x0, 0x10012, 0x0, 0x0}) 3.76475876s ago: executing program 2 (id=192): mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000013, &(0x7f0000000140)={[{@grpquota}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'proc\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x64, 0x38, 0x31, 0x34, 0x35, 0x32], 0x2d, [0x32, 0x36, 0x53, 0x31], 0x2d, [0x62, 0x7, 0x64, 0x34], 0x2d, [0x36, 0x35, 0x36, 0x38], 0x2d, [0x35, 0x37, 0x36, 0x64, 0x63, 0x32, 0x64, 0x64]}}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@flag='nolazytime'}, {@fsname={'fsname', 0x3d, '\x00'}}]}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000013, &(0x7f0000000140)={[{@grpquota}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'proc\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x64, 0x38, 0x31, 0x34, 0x35, 0x32], 0x2d, [0x32, 0x36, 0x53, 0x31], 0x2d, [0x62, 0x7, 0x64, 0x34], 0x2d, [0x36, 0x35, 0x36, 0x38], 0x2d, [0x35, 0x37, 0x36, 0x64, 0x63, 0x32, 0x64, 0x64]}}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@flag='nolazytime'}, {@fsname={'fsname', 0x3d, '\x00'}}]}) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) 3.600421561s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x20010, r0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x103) setpgid(r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='GPL\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='syz\x00', &(0x7f00000002c0)='(\x00', &(0x7f0000000300)='(+-\'%:.\x00']}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) 3.497270559s ago: executing program 2 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000600)="2e660f38800366baf80cb8ff0d048aef66bafc0cb000eeff0166ba4200edb9960200000f32c744240085000000c744240200500000c7442406000000000f011c243e670f797f700f0fcb1da4b805000000b97b9b00000f01c1", 0x59}], 0x1, 0x50, 0x0, 0x0) (async) r3 = socket(0xb, 0x800, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 3.197287732s ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x545480, 0x100) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x2, "48a638213e4b34b32a7d2cac65b7c88593d3b69b7e9bc907a1e9064cf06a43c7"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000464000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.81395485s ago: executing program 1 (id=197): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x60000, 0x101000}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2b8c3, 0xe1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x810, r3, 0x180000000) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, @initdev={0xac, 0x1e, 0x41, 0x0}, 0x16, 0x13}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r4, &(0x7f0000000000)="9e", 0x1, 0x2) 2.695220435s ago: executing program 3 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x0, 0x8, 0x2, 0x0, &(0x7f0000000040)=[{0x17, 0xfe, 0x2}, {0x6, 0xfe}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000800)=@svm={0x108, 0x1, 0x1080, {0x25000}, {"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"}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]}) (async) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]}) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r12, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r13 = inotify_init() inotify_add_watch(r13, &(0x7f0000000000)='./file1\x00', 0x4000523) (async) inotify_add_watch(r13, &(0x7f0000000000)='./file1\x00', 0x4000523) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) 2.422828962s ago: executing program 2 (id=199): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x804}}}, 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x80, 0x2, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a3", 0x34}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)}], 0x8, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000c40), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 2.357174888s ago: executing program 0 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x100}]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r5 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001a80)="12b5ca8883a72c61be64d1809e4e551c8fcc795bacbc79d1a786c09a1861dfb427e430bee5b00ac73434620f11a914ef7cf7658efc365a26b43990993f60d4ffeb9cc31d7d5fc06ba7c3a4d828f40fca355cff79686f12971618904dc7d09e85e7a5f9194c4cae7983ee20f6c522b89ecc73c43438aad7dd15ff4738f5e4e1b7713142e7ff6cfc1b6cf7baba9ebf3b471cd0a72011fef02b46e280ad7a8c42d24bfb2ffe1518bc0fea207ec37a9e388c9dea8124df3f50a75f03df8d30d7b3b73e274042a52c058e1d85ef3b420b4da9699edaadd192a3ae60c765260d1cbfb21f0cc30d8128b3783867b85873de07b02635d5573f9e578094a3ce6efbf44818daef38e14005a360909d226d7e13a86f6c83b6aaf615b6a2642d17bc2c56b8b0f8209e20ec1e0f58b0486493e511ab0a45b44a87340a9052ef5fba93c83753f1b101a744407f54d052188087c1cf43de80fd7bd5f3ce8585b5499959e6c3f5e17ae837d7c5627abb604947ad9906d641658f01464f48244182de8d5a7ceee614ad4a964e2124177771a84806cda0682d58743928d2d16d83fd8b706a9669ac7605e8d857ac586dc2eda90715951c21bd116ade52f03cd61f3874aaefa77da678450228eb476d84bf175564a215e1683ced4bb9adba5daed835c6b38b61b213834aca56b86259784addb8601d26a42ad637ee296cd4382aaa7c1eaa5cbfa3a7177390bc646916aeb885d2dd43fc5b2dbbd2d184ba6cc6a439b95b5d814a8582405635b5c6bdb41c24af7a10bbd264eb2308a800a09705ac7856a7ac993cb4d88fea4cd1d5cf9e82e10c4badb996f4c0d5fd5866baf90a07d8777f793feb9250e22dd5190aa26c2a31412f1b41e0a65d0e435a9c5ebbf5205f6c6a117ce1fb16e8eb797e7d3eb5d62178dc0441941e9cb464814982ebe54195d73113efc971799121683f6e85d24ad6f21023868327b67446a36ebffda572b90f9b228a03b612e7e0ca09aac6b5710fc90f51c0efefb69b5d26ba9a1d8954832b1370d099d09c07fb2893d57d617ec0d626f1f96ee1608e0f8d9ca1b491578d639ac74b3ea568a474707ac756555d0ae9cdc609609e30d7ef2648fb8baa5854e58b60fac9ec9670c620ce6dcf3bbcca971cb5bf37462febde30e3865960627ceb15a11dd891160a2fcbb682c94a7de4e00fff20774364ffc4bfa31173261f1684dbbaa9addf0d9bc43539a7c09c6b98769aecf8529402bc66e37f0f20580e8e5f59ec48979957552fe17b897dcb4ed1a8d0fdf68d8c065c9d3501b387cf08c62123459679e7104eb50bc58a0140b594ad57b8d4be0c50f98e9c3e323d0a57001f8c6a094a7908315c7d7b33227861d2035649bb91daf77776e11159f3ebf7f3ed576adfc364f363e6f474dbbe3500c62c74193e7102fdf57b345066a6ebe47b4b469187631b586676e8e449fa215444366baf5d675f637a0f52c36a042d74957e94bd6d87061675da18128f69106970a9492d76dc312884bb7fcd88ca7e13f2914ba817724bc97ab634e845dfd1ab40344c33c7c202674ef959378abaf3f4fa038a6bbec31f5bd88f81240d2722dfa5e8621eb604db9ae06d49f0a56d64d525f3d41b367ed4d459f21baa3dc43c7cbe096f15bead83bc5ffe2f82128f2943a479556a39ab661bf0a86e0ad0520ab015112eeb06c13abc0da61cc6bf9508182d142696a4670fef7dcfa7a7e09f673c992f3acd4bafa7874c8bf9dc362943d7cd3c14d32bb7a8c3e3f1f55f500eca0c6fd0f199fefe601857e5307660c000cbd8f83f64e2afeb931f5dbba2d538f1c1d78c6ecd14af198f9e0ae4a8e2ef6cda63e059f5b3137946434418fd8920753c3ea5d054ad5d3da2749c94b23018be9495831a1ac647783823ac4f554bea483ee919824516f8d3d9d90753d69dd6375f0edafc98716d2aa7dbbf73208ee017fddec8c994cb5df3f74bfed87db0b88076c430495ce8a39b4b61003bb6c0e12a2f6d41a994537dadc0b389d5a1049e26b968d4aa8ded4fc38dec2ab5b14b5d0d0e24b37875e17d1066e0b04c807ef6712034f0cbd899e5cfd68143e0c3865c00a18fc7001fe9386acb55614fb7c739aef69bf21b8364e407fdb62e068359017714809d3a0b61b8bd046119f2a8e71f17908da23fbe13e50e0bafce63abba77a07695782fb01423efffe421bc9bede0df8ff1e163f677178eb84aec1c8517ca5a503fddba2a15878d0bf1bd255671f17417692a950fb0181150a08868107071661984c0099d588cc9456eb457fcb5fc37cec48a30aa0aa83251394fc1ec9cd0cb66a6e949d353f8757a1ee90bc4b60edeacf14c55c45efaa2feae65276f1a78b3d23408cc13752505008a", 0x690}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e515", 0x46}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed2", 0x13}, {0x0}, {0x0}], 0x6}, 0x800) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x6) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x4) 2.034911874s ago: executing program 1 (id=201): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00'}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x84, 0x0, r5}, {0x1800, 0x1, 0x9, 0x9, 0x7, 0x4, 0x5, 0x80000000}, {0x5, 0x1, 0x8}, 0x2d32, 0x6e6bb6, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast2, 0x4d3, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x0, 0x1, 0x0, 0x400, 0xf, 0xffffffff}}, 0xe8) r6 = syz_open_dev$radio(&(0x7f00000014c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1852493baf0000f7000000000000060018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$fb(r8, &(0x7f0000000080)="ccae2b01d899609f3dd6b387c83a8d9b01da4f8463832c7e6ae9a7d9afd1509e6f9d65ff6cd4e31bd59ec822ceb67cead084ecdb18f9e4e67d310b008eb9b114dae0e648712c7d8216a0f493c12ab439c2fe87eea0abbeea7952c4629456c1a96bfdf4f9fd2727903c43feb76f7aa359a3e5942fa4", 0x75) 1.697061699s ago: executing program 0 (id=202): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8, 0x80, 0xb, 0xc3, {{0x27, 0x4, 0x0, 0x3b, 0x9c, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @multicast2, {[@rr={0x7, 0x13, 0xa3, [@local, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0xf9, [@multicast2, @broadcast, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x15}]}, @end, @timestamp_prespec={0x44, 0x54, 0x5b, 0x3, 0x7, [{@private=0xa010101, 0x2d42}, {@private=0xa010101, 0x8}, {@local, 0xf6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1, 0x55}, {@loopback, 0x5}, {@broadcast, 0x9}, {@multicast1, 0x4}, {@local, 0x5}]}, @noop]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x1, 0x81, {{0x27, 0x4, 0x0, 0x1, 0x9c, 0x66, 0x0, 0xa7, 0x4, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0xc, 0x30, 0x0, 0x3, [0xe75, 0x401]}, @timestamp_addr={0x44, 0x3c, 0x31, 0x1, 0x5, [{@loopback, 0x1}, {@rand_addr=0x64010101, 0x3}, {@local, 0xbd5}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x51c4}, {@loopback, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x1d, 0x0, [{0x1, 0x5, "be7794"}, {0x6, 0x12, "ffb90c8022489889bb96c63ac90932a8"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x3ff, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x20, 0x200000, 0xe}}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x164, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.182375747s ago: executing program 3 (id=203): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async, rerun: 64) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/vmcoreinfo', 0x400, 0xe4) read$FUSE(r2, &(0x7f0000007040)={0x2020}, 0x2020) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f000001b000)={@loopback, @private0, @private2, 0x4000006, 0x5, 0x0, 0x100, 0xffffffffffffffff, 0x2480187, r3}) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') (async) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) (async, rerun: 64) unlink(&(0x7f00000002c0)='./file0\x00') (rerun: 64) 1.025263643s ago: executing program 3 (id=204): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000000180)) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f00000002c0)={0x16, 0x140, 0x34, 0xa5, 0x8}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/394, @ANYRES16=r6, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="06cc0000", @ANYRES16=r9, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003000000"], 0x30}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x30, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r11, 0x500e, 0x0) 832.786189ms ago: executing program 1 (id=205): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x80, 0x7fffffff, 0x1, @mcast1, @mcast2, 0x7800, 0x20, 0x80000000, 0x7}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000240)=""/182, 0x74) lseek(r6, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x8021000, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 785.45359ms ago: executing program 0 (id=206): syz_usb_ep_write(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x180, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x51}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b014bbf8ee6e69cfc8f8fdd0a0ce8718d9b28ffa57f18b22"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f86d3f7710e01b6899cfe599d37c3b63b8ae501f2a6bb76d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95adbab5a38f3c84d40fd9c8756a14a25b5bc42aa254f56a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3bf2a05ce73cca549c554e2611b3651e77e230f076b6be1f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8441b2543c7d1ca64c36114e9a8f53403da39a0bffb58974"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x180}, 0x1, 0x0, 0x0, 0x40080d0}, 0x20008004) 681.334908ms ago: executing program 3 (id=207): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8020000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x0, 0x0, @loopback, 0x5}}}, 0x108) close(r0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x4, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 490.572331ms ago: executing program 1 (id=208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 467.022675ms ago: executing program 3 (id=209): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) close_range(r2, r3, 0x0) 232.39229ms ago: executing program 1 (id=210): syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "8f844a", 0x20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x13}, @local, {[@dstopts], @ndisc_na={0x88, 0x0, 0x0, 0x7, '\x00', @remote}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000562000008001b001c000000080004000180000003"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x2, 0x649, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x5, 0xa12}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@float={0xb, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8, 0x7}, {0x7, 0x1}, {0xd, 0x5}, {0xf, 0x1}, {0xb, 0x1}, {0xa, 0x2}, {0xa, 0x2}]}, @fwd={0x10}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0xb, [{0xe, 0x4, 0x1}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000005c0)=""/111, 0x90, 0x6f, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x28, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x853a, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x6f}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x3, 0x2, 0x2, 0x4, 0xfffffffffffffffc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x2c9, 0x0, 0x0, 0x40f00, 0x43, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f0000000780)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x8, 0xffff, 0x7fdfc0cf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r1], &(0x7f0000000840)=[{0x3, 0x3, 0x2, 0xb}, {0x0, 0x1, 0x10, 0x1}, {0x2, 0x2, 0xd, 0xb}], 0x10, 0x7}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r6, &(0x7f0000000140)='net/nf_conntrack_expect\x00') syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "8f844a", 0x20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x13}, @local, {[@dstopts], @ndisc_na={0x88, 0x0, 0x0, 0x7, '\x00', @remote}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000562000008001b001c000000080004000180000003"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x2, 0x649, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x5, 0xa12}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@float={0xb, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8, 0x7}, {0x7, 0x1}, {0xd, 0x5}, {0xf, 0x1}, {0xb, 0x1}, {0xa, 0x2}, {0xa, 0x2}]}, @fwd={0x10}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0xb, [{0xe, 0x4, 0x1}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000005c0)=""/111, 0x90, 0x6f, 0x1, 0x3, 0x10000}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x28, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x853a, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x6f}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x3, 0x2, 0x2, 0x4, 0xfffffffffffffffc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x2c9, 0x0, 0x0, 0x40f00, 0x43, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f0000000780)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x8, 0xffff, 0x7fdfc0cf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r1], &(0x7f0000000840)=[{0x3, 0x3, 0x2, 0xb}, {0x0, 0x1, 0x10, 0x1}, {0x2, 0x2, 0xd, 0xb}], 0x10, 0x7}, 0x94) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) syz_open_procfs(r6, &(0x7f0000000140)='net/nf_conntrack_expect\x00') (async) 144.157612ms ago: executing program 2 (id=211): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) r2 = syz_pidfd_open(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='coredump_filter\x00') ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) (async) syz_pidfd_open(r0, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000040)='coredump_filter\x00') (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) (async) exit(0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) 298.032µs ago: executing program 1 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x6}, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, r2, 0xa}}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x401, 0x9, 0x10}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @local}}, 0x3, 0x1000}, &(0x7f00000002c0)=0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r7 = socket$kcm(0x10, 0x400000005, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r9, r10, 0x0, 0x1) getsockopt$sock_buf(r8, 0x1, 0x0, 0x0, &(0x7f0000000180)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) socket$packet(0x11, 0xa, 0x300) r12 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r12, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) flock(r7, 0xc) 0s ago: executing program 3 (id=213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e1, &(0x7f00000023c0)) r5 = openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): [ 53.109907][ T40] audit: type=1400 audit(1772086671.742:61): avc: denied { siginh } for pid=5850 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:18837' (ED25519) to the list of known hosts. [ 58.338500][ T40] audit: type=1400 audit(1772086677.062:62): avc: denied { name_bind } for pid=5915 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.445890][ T40] audit: type=1400 audit(1772086677.172:63): avc: denied { execute } for pid=5916 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.465003][ T40] audit: type=1400 audit(1772086677.192:64): avc: denied { execute_no_trans } for pid=5916 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.877165][ T40] audit: type=1400 audit(1772086683.602:65): avc: denied { mounton } for pid=5916 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.900124][ T5916] cgroup: Unknown subsys name 'net' [ 64.906121][ T40] audit: type=1400 audit(1772086683.622:66): avc: denied { mount } for pid=5916 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.919000][ T40] audit: type=1400 audit(1772086683.622:67): avc: denied { unmount } for pid=5916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.116532][ T5916] cgroup: Unknown subsys name 'cpuset' [ 65.133249][ T5916] cgroup: Unknown subsys name 'rlimit' [ 65.419873][ T40] audit: type=1400 audit(1772086684.142:68): avc: denied { setattr } for pid=5916 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.452090][ T40] audit: type=1400 audit(1772086684.152:69): avc: denied { create } for pid=5916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.482120][ T40] audit: type=1400 audit(1772086684.152:70): avc: denied { write } for pid=5916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.545062][ T40] audit: type=1400 audit(1772086684.152:71): avc: denied { read } for pid=5916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.592032][ T40] audit: type=1400 audit(1772086684.172:72): avc: denied { mounton } for pid=5916 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.617214][ T40] audit: type=1400 audit(1772086684.172:73): avc: denied { mount } for pid=5916 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.669719][ T40] audit: type=1400 audit(1772086684.182:74): avc: denied { read } for pid=5635 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.720045][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.891508][ T5916] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.888536][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.893344][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.083621][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 79.083638][ T40] audit: type=1400 audit(1772086697.792:82): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.734099][ T40] audit: type=1400 audit(1772086698.462:83): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.775372][ T40] audit: type=1400 audit(1772086698.462:84): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.824863][ T40] audit: type=1400 audit(1772086698.462:85): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.891512][ T40] audit: type=1400 audit(1772086698.502:86): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[7195]" dev="sockfs" ino=7195 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.954952][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.996164][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.000640][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.006952][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.012647][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.017428][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.029488][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.042935][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.045665][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.051768][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.058973][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.059693][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.060223][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.074776][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.076308][ T40] audit: type=1400 audit(1772086698.792:87): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.077142][ T40] audit: type=1400 audit(1772086698.802:88): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.078368][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.078795][ T40] audit: type=1400 audit(1772086698.802:89): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.120991][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.164290][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.182217][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.275789][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.284353][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.684752][ T40] audit: type=1400 audit(1772086699.412:90): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.825177][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 80.843370][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 80.967831][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 81.241443][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.247440][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.267006][ T5934] bridge_slave_0: entered allmulticast mode [ 81.270937][ T5934] bridge_slave_0: entered promiscuous mode [ 81.277830][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.281198][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.284647][ T5943] bridge_slave_0: entered allmulticast mode [ 81.309841][ T5943] bridge_slave_0: entered promiscuous mode [ 81.341531][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.344816][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.348070][ T5934] bridge_slave_1: entered allmulticast mode [ 81.354831][ T5934] bridge_slave_1: entered promiscuous mode [ 81.382721][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.387510][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.392581][ T5943] bridge_slave_1: entered allmulticast mode [ 81.397372][ T5943] bridge_slave_1: entered promiscuous mode [ 81.437022][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 81.490188][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.569708][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.620988][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.649105][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.652260][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.655819][ T5938] bridge_slave_0: entered allmulticast mode [ 81.660258][ T5938] bridge_slave_0: entered promiscuous mode [ 81.693253][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.700490][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.707125][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.711166][ T5938] bridge_slave_1: entered allmulticast mode [ 81.716225][ T5938] bridge_slave_1: entered promiscuous mode [ 81.724680][ T5934] team0: Port device team_slave_0 added [ 81.770838][ T5934] team0: Port device team_slave_1 added [ 81.837308][ T5943] team0: Port device team_slave_0 added [ 81.861791][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.936488][ T5943] team0: Port device team_slave_1 added [ 81.942806][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.999030][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.027777][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.030288][ T5939] bridge_slave_0: entered allmulticast mode [ 82.033721][ T5939] bridge_slave_0: entered promiscuous mode [ 82.054283][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.057281][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.081847][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.102894][ T63] Bluetooth: hci0: command tx timeout [ 82.117395][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.122046][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.126754][ T5939] bridge_slave_1: entered allmulticast mode [ 82.135605][ T5939] bridge_slave_1: entered promiscuous mode [ 82.140351][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.144144][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.156208][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.162680][ T63] Bluetooth: hci3: command tx timeout [ 82.185538][ T5938] team0: Port device team_slave_0 added [ 82.196573][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.200086][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.252234][ T63] Bluetooth: hci1: command tx timeout [ 82.291901][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.322233][ T63] Bluetooth: hci2: command tx timeout [ 82.403630][ T5938] team0: Port device team_slave_1 added [ 82.441263][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.444757][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.468982][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.587386][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.623558][ T5934] hsr_slave_0: entered promiscuous mode [ 82.627386][ T5934] hsr_slave_1: entered promiscuous mode [ 82.646698][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.649845][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.661381][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.676428][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.679227][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.704956][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.714108][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.884750][ T5939] team0: Port device team_slave_0 added [ 82.892552][ T5943] hsr_slave_0: entered promiscuous mode [ 82.896077][ T5943] hsr_slave_1: entered promiscuous mode [ 82.904788][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 82.923183][ T5943] Cannot create hsr debugfs directory [ 82.933827][ T5939] team0: Port device team_slave_1 added [ 83.142551][ T5938] hsr_slave_0: entered promiscuous mode [ 83.146837][ T5938] hsr_slave_1: entered promiscuous mode [ 83.151141][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 83.154167][ T5938] Cannot create hsr debugfs directory [ 83.157384][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.159856][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.179379][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.293048][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.296282][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.311769][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.576539][ T5939] hsr_slave_0: entered promiscuous mode [ 83.581410][ T5939] hsr_slave_1: entered promiscuous mode [ 83.585222][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 83.587764][ T5939] Cannot create hsr debugfs directory [ 84.003588][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.091536][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.171394][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.176055][ T63] Bluetooth: hci0: command tx timeout [ 84.184810][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.249162][ T63] Bluetooth: hci3: command tx timeout [ 84.274707][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.303881][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.313635][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.331925][ T63] Bluetooth: hci1: command tx timeout [ 84.369064][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.429299][ T63] Bluetooth: hci2: command tx timeout [ 84.554645][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.590594][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.675663][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.764132][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.776437][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.878891][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.915989][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.928859][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.947614][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.987374][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.003401][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.009954][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.013086][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.052161][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.055681][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.123142][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.208318][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.213626][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.273927][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.278144][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.315388][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.463084][ T40] audit: type=1400 audit(1772086704.182:91): avc: denied { sys_module } for pid=5934 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.596165][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.680421][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.739400][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.768723][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.771463][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.793125][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.809980][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.813207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.887118][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.934834][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.937673][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.970519][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.974962][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.024308][ T5934] veth0_vlan: entered promiscuous mode [ 86.038262][ T5934] veth1_vlan: entered promiscuous mode [ 86.147305][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.253496][ T5934] veth0_macvtap: entered promiscuous mode [ 86.260474][ T5934] veth1_macvtap: entered promiscuous mode [ 86.285901][ T63] Bluetooth: hci0: command tx timeout [ 86.338468][ T63] Bluetooth: hci3: command tx timeout [ 86.415756][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.421121][ T63] Bluetooth: hci1: command tx timeout [ 86.484693][ T63] Bluetooth: hci2: command tx timeout [ 86.529228][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.543033][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.582214][ T5943] veth0_vlan: entered promiscuous mode [ 86.713957][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.718958][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.735858][ T5943] veth1_vlan: entered promiscuous mode [ 86.800297][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.804223][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.938522][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.999290][ T5943] veth0_macvtap: entered promiscuous mode [ 87.028373][ T5943] veth1_macvtap: entered promiscuous mode [ 87.090726][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.144873][ T24] cfg80211: failed to load regulatory.db [ 87.173846][ T5939] veth0_vlan: entered promiscuous mode [ 87.238718][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.250182][ T5938] veth0_vlan: entered promiscuous mode [ 87.261719][ T5939] veth1_vlan: entered promiscuous mode [ 87.302302][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.310939][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.329350][ T5938] veth1_vlan: entered promiscuous mode [ 87.345634][ T1147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.352734][ T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.410945][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.416125][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.434779][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.440760][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.536198][ T5939] veth0_macvtap: entered promiscuous mode [ 87.544296][ T5939] veth1_macvtap: entered promiscuous mode [ 87.595817][ T40] audit: type=1400 audit(1772086706.312:92): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.635078][ T40] audit: type=1400 audit(1772086706.342:93): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzkaller.zgUemC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.652911][ T40] audit: type=1400 audit(1772086706.352:94): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.682455][ T40] audit: type=1400 audit(1772086706.352:95): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzkaller.zgUemC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 87.729162][ T40] audit: type=1400 audit(1772086706.352:96): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzkaller.zgUemC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.749530][ T40] audit: type=1400 audit(1772086706.382:97): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.754098][ T5938] veth0_macvtap: entered promiscuous mode [ 87.822862][ T40] audit: type=1400 audit(1772086706.422:98): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.847779][ T5938] veth1_macvtap: entered promiscuous mode [ 87.900064][ T40] audit: type=1400 audit(1772086706.422:99): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="gadgetfs" ino=9601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 87.900112][ T40] audit: type=1400 audit(1772086706.422:100): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.024785][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.033268][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.079790][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.094302][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.104062][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.139379][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182085][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.186025][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.249391][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.252347][ T6027] tmpfs: Bad value for 'mpol' [ 88.258687][ T6026] tmpfs: Bad value for 'mpol' [ 88.280385][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.285283][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288951][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295891][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.299200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.321988][ T63] Bluetooth: hci0: command tx timeout [ 88.388858][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.402068][ T63] Bluetooth: hci3: command tx timeout [ 88.459006][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.482595][ T63] Bluetooth: hci1: command tx timeout [ 88.595571][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613371][ T63] Bluetooth: hci2: command tx timeout [ 88.805045][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.809029][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.923648][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.946465][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.960091][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.963288][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969864][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 89.022602][ T13] bond0: (slave bond_slave_0): interface is now down [ 89.026020][ T13] bond0: (slave bond_slave_1): interface is now down [ 89.068786][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.085803][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.564509][ T6056] QAT: Invalid ioctl 1079531651 [ 89.586696][ T6053] QAT: Invalid ioctl 1079531651 [ 89.751471][ T6063] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.044948][ T6074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6074 comm=syz.1.14 [ 90.142548][ T6076] veth0_to_bond: entered allmulticast mode [ 90.237713][ T6077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=6077 comm=syz.0.15 [ 90.262927][ T6077] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 90.277225][ T6077] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15'. [ 90.288105][ T6077] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 90.304630][ T6024] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.485229][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 90.485250][ T40] audit: type=1400 audit(1772086709.212:154): avc: denied { name_bind } for pid=6084 comm="syz.2.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.507767][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 90.567972][ T6024] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.586643][ T6024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.591360][ T6024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.655416][ T6024] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.662118][ T6024] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.672871][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.802406][ T40] audit: type=1400 audit(1772086709.512:155): avc: denied { create } for pid=6087 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.819714][ T40] audit: type=1400 audit(1772086709.532:156): avc: denied { setopt } for pid=6087 comm="syz.0.19" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.912989][ T6024] usb 6-1: GET_CAPABILITIES returned 0 [ 90.917585][ T6024] usbtmc 6-1:16.0: can't read capabilities [ 90.919942][ T40] audit: type=1400 audit(1772086709.632:157): avc: denied { name_bind } for pid=6073 comm="syz.1.14" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.965237][ T40] audit: type=1400 audit(1772086709.632:158): avc: denied { node_bind } for pid=6073 comm="syz.1.14" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.091750][ T40] audit: type=1400 audit(1772086709.742:159): avc: denied { create } for pid=6093 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.137065][ T6024] usb 6-1: USB disconnect, device number 2 [ 91.140517][ T40] audit: type=1400 audit(1772086709.782:160): avc: denied { write } for pid=6093 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.191763][ T40] audit: type=1400 audit(1772086709.782:161): avc: denied { nlmsg_write } for pid=6093 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.221505][ T40] audit: type=1400 audit(1772086709.832:162): avc: denied { write } for pid=6100 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.235628][ T40] audit: type=1400 audit(1772086709.872:163): avc: denied { create } for pid=6100 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 91.618148][ T6109] Zero length message leads to an empty skb [ 91.878036][ T6130] netlink: 92 bytes leftover after parsing attributes in process `syz.1.30'. [ 91.903421][ T6130] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 91.928430][ T6130] exFAT-fs (nullb0): invalid boot record signature [ 91.948219][ T6130] exFAT-fs (nullb0): failed to read boot sector [ 91.956653][ T6133] program syz.1.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.967853][ T6130] exFAT-fs (nullb0): failed to recognize exfat type [ 92.084700][ T6125] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.27'. [ 92.106610][ T6138] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.158975][ T6143] sctp: [Deprecated]: syz.1.33 (pid 6143) Use of int in max_burst socket option deprecated. [ 92.158975][ T6143] Use struct sctp_assoc_value instead [ 92.171510][ T6141] netlink: 'syz.2.34': attribute type 21 has an invalid length. [ 92.212222][ T6141] netlink: 156 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.233859][ T6148] (syz.0.35,6148,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 92.294631][ T6150] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 92.308053][ T6148] (syz.0.35,6148,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 92.313087][ T6150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.372982][ T6148] (syz.0.35,6148,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 92.454029][ T6148] (syz.0.35,6148,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 92.611255][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6157 comm=syz.2.37 [ 93.018910][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.289162][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.45'. [ 93.890729][ T6196] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 93.939377][ T6196] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.009119][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.692688][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.983104][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.081248][ T6230] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 95.101833][ T6230] ALSA: mixer_oss: invalid index 1374389 [ 95.169326][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 95.212092][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.253240][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.276985][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.298389][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.299026][ T6235] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 95.314337][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.321153][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.326452][ T6235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.61'. [ 95.517825][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 95.517849][ T40] audit: type=1326 audit(1772086714.212:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.561757][ T40] audit: type=1326 audit(1772086714.212:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.583765][ T54] usb 6-1: usb_control_msg returned -32 [ 95.583821][ T54] usbtmc 6-1:16.0: can't read capabilities [ 95.593949][ T40] audit: type=1326 audit(1772086714.212:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.625275][ T40] audit: type=1326 audit(1772086714.212:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.679870][ T40] audit: type=1326 audit(1772086714.212:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.693008][ T40] audit: type=1326 audit(1772086714.212:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.740856][ T40] audit: type=1326 audit(1772086714.212:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.763888][ T6238] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 95.780986][ T40] audit: type=1326 audit(1772086714.212:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.795080][ T6239] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 95.797298][ T40] audit: type=1326 audit(1772086714.212:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.870795][ T40] audit: type=1326 audit(1772086714.212:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef79c629 code=0x7ff00000 [ 95.966987][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 95.983063][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.076097][ T6249] bridge_slave_1 (unregistering): left allmulticast mode [ 96.080202][ T6249] bridge_slave_1 (unregistering): left promiscuous mode [ 96.085279][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.150402][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 96.256819][ T6253] lo: entered promiscuous mode [ 96.592135][ T6270] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 96.618029][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.71'. [ 97.035695][ T6279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 97.542864][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.72'. [ 97.559444][ T6272] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 97.564841][ T6272] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 97.640878][ T50] usb 6-1: USB disconnect, device number 3 [ 98.664009][ T6305] Can't find a SQUASHFS superblock on nullb0 [ 99.526923][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 99.737729][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 99.797967][ T6345] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 99.895014][ T6355] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 100.005861][ T6365] netlink: 'syz.1.96': attribute type 8 has an invalid length. [ 100.009307][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.022731][ T6362] nilfs2: Unknown parameter 'barri' [ 100.539766][ T6387] sock: sock_set_timeout: `syz.3.105' (pid 6387) tries to set negative timeout [ 100.555753][ T6387] overlayfs: missing 'lowerdir' [ 100.559483][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 100.559501][ T40] audit: type=1400 audit(1772086719.272:621): avc: denied { name_bind } for pid=6386 comm="syz.3.105" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 100.591227][ T40] audit: type=1400 audit(1772086719.272:622): avc: denied { ioctl } for pid=6386 comm="syz.3.105" path="socket:[10690]" dev="sockfs" ino=10690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.641811][ T40] audit: type=1400 audit(1772086719.362:623): avc: denied { mount } for pid=6389 comm="syz.1.104" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 100.670988][ T40] audit: type=1400 audit(1772086719.362:624): avc: denied { remount } for pid=6389 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 100.690482][ T40] audit: type=1400 audit(1772086719.362:625): avc: denied { create } for pid=6389 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.700639][ T40] audit: type=1400 audit(1772086719.362:626): avc: denied { write } for pid=6389 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.746785][ T40] audit: type=1400 audit(1772086719.472:627): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 100.840178][ T40] audit: type=1400 audit(1772086719.562:628): avc: denied { read } for pid=6396 comm="syz.3.107" path="socket:[10693]" dev="sockfs" ino=10693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.002544][ T6411] capability: warning: `syz.3.111' uses deprecated v2 capabilities in a way that may be insecure [ 101.074882][ T6412] overlay: ./file0 is not a directory [ 101.293126][ T6425] ip6erspan0: entered promiscuous mode [ 101.512384][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 101.736812][ T6449] __vm_enough_memory: pid: 6449, comm: syz.3.122, bytes: 4503599627366400 not enough memory for the allocation [ 101.817068][ T6452] mkiss: ax0: crc mode is auto. [ 101.845305][ T40] audit: type=1400 audit(1772086720.542:629): avc: denied { append } for pid=6451 comm="syz.2.120" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 101.900941][ T40] audit: type=1400 audit(1772086720.582:630): avc: denied { search } for pid=5635 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.957100][ T6459] trusted_key: syz.3.123 sent an empty control message without MSG_MORE. [ 102.512177][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.331387][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 103.501151][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 103.520284][ T6504] team0: Device gtp0 is up. Set it down before adding it as a team port [ 103.524843][ T6512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.583345][ T6513] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 103.586485][ T6513] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.589666][ T6513] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.595065][ T6513] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 103.599228][ T6513] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.604859][ T6513] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.654526][ T6513] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 103.658972][ T6513] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.672931][ T6513] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.678207][ T6513] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 103.705059][ T6513] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.714665][ T6513] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.719697][ T6513] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 103.723592][ T6513] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.725426][ T842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.891221][ T6524] tmpfs: Bad value for 'mpol' [ 103.951172][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 103.968446][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.973713][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.989197][ T842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.000317][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.036198][ T842] usb 6-1: config 0 descriptor?? [ 104.217548][ T6537] process 'syz.3.143' launched '/dev/fd/7' with NULL argv: empty string added [ 104.277532][ T6536] kAFS: unparsable volume name [ 104.287344][ T842] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.495404][ T6509] iowarrior 6-1:0.0: Error -90 while submitting URB [ 104.512530][ T842] usb 6-1: USB disconnect, device number 4 [ 104.581575][ T6545] macvlan2: entered promiscuous mode [ 105.001985][ T6566] program syz.3.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.691765][ T6011] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.833166][ T6024] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.853975][ T6011] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.858976][ T6011] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.864182][ T6011] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.884990][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 105.885008][ T40] audit: type=1400 audit(1772086724.592:667): avc: denied { create } for pid=6610 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.917511][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.927002][ T6615] binder: BINDER_SET_CONTEXT_MGR already set [ 105.951281][ T6615] binder: 6614:6615 ioctl 4018620d 2000000000c0 returned -16 [ 105.953515][ T6586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.998274][ T6615] binder: BINDER_SET_CONTEXT_MGR already set [ 106.019947][ T6024] usb 6-1: device descriptor read/64, error -71 [ 106.041096][ T6011] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.044946][ T6611] __nla_validate_parse: 30 callbacks suppressed [ 106.044970][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 106.090840][ T6615] binder: 6614:6615 ioctl 4018620d 200000000040 returned -16 [ 106.090983][ T40] audit: type=1400 audit(1772086724.802:668): avc: denied { call } for pid=6614 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 106.295408][ T6024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 106.393134][ T40] audit: type=1400 audit(1772086725.102:669): avc: denied { sqpoll } for pid=6623 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.404418][ C2] usb 5-1: urb status -115 [ 106.446294][ T6024] usb 6-1: device descriptor read/64, error -71 [ 106.462343][ T40] audit: type=1400 audit(1772086725.172:670): avc: denied { allowed } for pid=6623 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.484016][ T40] audit: type=1400 audit(1772086725.192:671): avc: denied { read } for pid=6623 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.511652][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 106.562489][ T6024] usb usb6-port1: attempt power cycle [ 106.591525][ T6002] usb 5-1: USB disconnect, device number 2 [ 106.854046][ T40] audit: type=1400 audit(1772086725.572:672): avc: denied { execute_no_trans } for pid=6635 comm="/dev/nbd" path="/55/file2" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.885703][ T40] audit: type=1400 audit(1772086725.572:673): avc: denied { remount } for pid=6635 comm="/dev/nbd" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.907712][ T6024] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.955183][ T6024] usb 6-1: device descriptor read/8, error -71 [ 107.021843][ T40] audit: type=1400 audit(1772086725.752:674): avc: denied { create } for pid=6640 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.054611][ T40] audit: type=1400 audit(1772086725.752:675): avc: denied { create } for pid=6640 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.072807][ T40] audit: type=1400 audit(1772086725.752:676): avc: denied { write } for pid=6640 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.241120][ T6024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.271012][ T6649] f2fs: Unknown parameter 'usruuotaš¹œ•ï’Ì–`ÞŠղþ;Ú©o$J×' [ 107.324960][ T6024] usb 6-1: device descriptor read/8, error -71 [ 107.330111][ T6648] ./bus: Can't lookup blockdev [ 107.360414][ T6652] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.488661][ T6024] usb usb6-port1: unable to enumerate USB device [ 107.521005][ T6655] program syz.2.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.592147][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 107.718839][ T6663] random: crng reseeded on system resumption [ 107.744527][ T6663] PM: hibernation: Image mismatch: memory size [ 107.758083][ T6661] veth0_macvtap: left promiscuous mode [ 107.762894][ T6666] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.950879][ T6670] 9p: Bad value for 'rfdno' [ 108.104040][ T6672] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.174'. [ 108.133679][ T6672] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.521860][ T6011] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.705523][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 108.709993][ T6011] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 108.714280][ T6011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.748169][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.752797][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.767137][ T6011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.787385][ T6011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.803634][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.820187][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.832390][ T6686] evm: overlay not supported [ 108.845030][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.885382][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.918348][ T6023] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 108.919402][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.989977][ T6680] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 108.995767][ T6680] macvlan2: left promiscuous mode [ 109.093922][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 109.184972][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 109.210555][ T6695] nbd: device at index 64 is going down [ 109.590592][ T6711] validate_nla: 60 callbacks suppressed [ 109.590611][ T6711] netlink: 'syz.1.186': attribute type 29 has an invalid length. [ 109.603987][ T6711] netlink: 548 bytes leftover after parsing attributes in process `syz.1.186'. [ 110.001716][ T6727] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 110.074724][ T6734] ======================================================= [ 110.074724][ T6734] WARNING: The mand mount option has been deprecated and [ 110.074724][ T6734] and is ignored by this kernel. Remove the mand [ 110.074724][ T6734] option from the mount to silence this warning. [ 110.074724][ T6734] ======================================================= [ 110.213977][ T6736] 9pnet_virtio: no channels available for device syz [ 110.284832][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.308185][ T6734] vlan2: entered promiscuous mode [ 110.318981][ T6734] bond0: entered promiscuous mode [ 110.326217][ T6734] bond_slave_0: entered promiscuous mode [ 110.338433][ T6734] bond_slave_1: entered promiscuous mode [ 110.347033][ T6734] syz_tun: entered promiscuous mode [ 110.689504][ T6738] orangefs_mount: mount request failed with -4 [ 111.037976][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 111.037995][ T40] audit: type=1400 audit(1772086729.742:704): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.350691][ T50] usb 5-1: USB disconnect, device number 3 [ 111.481754][ T40] audit: type=1400 audit(1772086730.202:705): avc: denied { map_read map_write } for pid=6751 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.665507][ T6755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.763981][ T40] audit: type=1400 audit(1772086730.472:706): avc: denied { relabelfrom } for pid=6753 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.814839][ T40] audit: type=1400 audit(1772086730.472:707): avc: denied { relabelto } for pid=6753 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.892066][ T40] audit: type=1400 audit(1772086730.612:708): avc: denied { read } for pid=6761 comm="syz.3.198" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.934730][ T40] audit: type=1400 audit(1772086730.652:709): avc: denied { open } for pid=6761 comm="syz.3.198" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.107910][ T6768] vivid-003: ================= START STATUS ================= [ 112.146129][ T6755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.173570][ T6768] vivid-003: Radio HW Seek Mode: Bounded [ 112.178699][ T6768] vivid-003: Radio Programmable HW Seek: false [ 112.184200][ T6768] vivid-003: RDS Rx I/O Mode: Block I/O [ 112.203756][ T6768] vivid-003: Generate RBDS Instead of RDS: false [ 112.215074][ T6768] vivid-003: RDS Reception: true [ 112.217277][ T6768] vivid-003: RDS Program Type: 0 inactive [ 112.220160][ T6768] vivid-003: RDS PS Name: inactive [ 112.250053][ T6768] vivid-003: RDS Radio Text: inactive [ 112.252924][ T6768] vivid-003: RDS Traffic Announcement: false inactive [ 112.255822][ T6768] vivid-003: RDS Traffic Program: false inactive [ 112.258579][ T6768] vivid-003: RDS Music: false inactive [ 112.261167][ T6768] vivid-003: ================== END STATUS ================== [ 112.361815][ T40] audit: type=1400 audit(1772086731.082:710): avc: denied { read } for pid=6758 comm="syz.1.201" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 112.389069][ T6772] vlan2: entered promiscuous mode [ 112.426256][ T6772] bridge0: entered promiscuous mode [ 112.565226][ T6755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.804552][ T40] audit: type=1400 audit(1772086731.522:711): avc: denied { read write } for pid=6779 comm="syz.3.204" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.822591][ T40] audit: type=1400 audit(1772086731.522:712): avc: denied { open } for pid=6779 comm="syz.3.204" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.842309][ T40] audit: type=1400 audit(1772086731.522:713): avc: denied { ioctl } for pid=6779 comm="syz.3.204" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.908937][ T6755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.182108][ T6788] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.341893][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.358019][ T6791] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 113.400870][ T6791] bond0: (slave sit0): Error -95 calling set_mac_address [ 113.450606][ T1153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.505824][ T1153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.522050][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.527525][ T1153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.839786][ C2] [ 113.861267][ C2] ================================ [ 113.863486][ C2] WARNING: inconsistent lock state [ 113.867149][ C2] syzkaller #0 Not tainted [ 113.869908][ C2] -------------------------------- [ 113.873937][ C2] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 113.876631][ C2] kworker/u32:1/13 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 113.879315][ C2] ffff88803f1c0260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x1a2/0x860 [ 113.884047][ C2] {SOFTIRQ-ON-W} state was registered at: [ 113.897388][ C2] lock_acquire+0x1cf/0x380 [ 113.907278][ C2] lock_sock_nested+0x41/0xf0 [ 113.910741][ C2] tcp_sock_set_nodelay+0x1c/0x120 [ 113.915313][ C2] rds_tcp_listen_init+0x157/0x4e0 [ 113.927707][ C2] rds_tcp_init_net+0x16d/0x310 [ 113.930489][ C2] ops_init+0x1e2/0x5f0 [ 113.932384][ C2] register_pernet_operations+0x3cb/0x740 [ 113.940996][ C2] register_pernet_device+0x29/0x80 [ 113.943861][ C2] rds_tcp_init+0x85/0x110 [ 113.962656][ C2] do_one_initcall+0x11d/0x760 [ 113.965531][ C2] kernel_init_freeable+0x6e5/0x7a0 [ 113.969078][ C2] kernel_init+0x1f/0x1e0 [ 113.972465][ C2] ret_from_fork+0x754/0xd80 [ 113.975862][ C2] ret_from_fork_asm+0x1a/0x30 [ 113.979019][ C2] irq event stamp: 273496 [ 113.981820][ C2] hardirqs last enabled at (273496): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.996754][ C2] hardirqs last disabled at (273495): [] _raw_spin_lock_irqsave+0x52/0x60 [ 114.003733][ C2] softirqs last enabled at (273420): [] __dev_queue_xmit+0x7dc/0x4750 [ 114.020988][ C2] softirqs last disabled at (273421): [] do_softirq+0xac/0xe0 [ 114.027422][ C2] [ 114.027422][ C2] other info that might help us debug this: [ 114.037266][ C2] Possible unsafe locking scenario: [ 114.037266][ C2] [ 114.045341][ C2] CPU0 [ 114.047261][ C2] ---- [ 114.064885][ C2] lock(k-sk_lock-AF_INET6); [ 114.067302][ C2] [ 114.069030][ C2] lock(k-sk_lock-AF_INET6); [ 114.075243][ C2] [ 114.075243][ C2] *** DEADLOCK *** [ 114.075243][ C2] [ 114.089067][ C2] 10 locks held by kworker/u32:1/13: [ 114.096695][ C2] #0: ffff88802ebd6148 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 114.106160][ C2] #1: ffffc90000107d08 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 114.118008][ C2] #2: ffff88803f1c0fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 114.127600][ C2] #3: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x136/0x760 [ 114.137807][ C2] #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x2dc/0x26e0 [ 114.147842][ C2] #5: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 114.152008][ C2] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x32a/0x1580 [ 114.175904][ C2] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x29/0x2f0 [ 114.179235][ C2] #8: ffff88803f1c01e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x285b/0x42c0 [ 114.184220][ C2] #9: ffff88803f1c0408 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x90/0x790 [ 114.194153][ C2] [ 114.194153][ C2] stack backtrace: [ 114.201505][ C2] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 114.201530][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.201545][ C2] Workqueue: krds_cp_wq#2/0 rds_send_worker [ 114.201576][ C2] Call Trace: [ 114.201645][ C2] [ 114.201654][ C2] dump_stack_lvl+0x100/0x190 [ 114.201687][ C2] print_usage_bug.part.0+0x257/0x340 [ 114.201718][ C2] mark_lock+0x74a/0xa20 [ 114.201742][ C2] ? add_lock_to_list+0x99/0x110 [ 114.201766][ C2] ? do_raw_spin_lock+0x128/0x260 [ 114.201785][ C2] __lock_acquire+0x103a/0x2630 [ 114.201812][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 114.201830][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 114.201860][ C2] ? debug_object_activate+0x331/0x490 [ 114.202158][ C2] lock_acquire+0x1cf/0x380 [ 114.202184][ C2] ? inet6_getname+0x1a2/0x860 [ 114.202202][ C2] ? __mod_timer+0x409/0xca0 [ 114.202375][ C2] ? __mod_timer+0x409/0xca0 [ 114.202401][ C2] lock_sock_nested+0x41/0xf0 [ 114.202430][ C2] ? inet6_getname+0x1a2/0x860 [ 114.202447][ C2] inet6_getname+0x1a2/0x860 [ 114.202465][ C2] rds_tcp_get_peer_sport+0x7c/0x110 [ 114.202493][ C2] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 114.202523][ C2] ? find_held_lock+0x2b/0x80 [ 114.202545][ C2] ? rds_addr_cmp+0x10d/0x150 [ 114.202564][ C2] rds_tcp_conn_slots_available+0x279/0x390 [ 114.202591][ C2] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 114.202619][ C2] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 114.202637][ C2] ? ip6_output+0x211/0xa60 [ 114.202660][ C2] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 114.202677][ C2] ? worker_thread+0x530/0xe40 [ 114.202694][ C2] ? flush_ptrace_hw_breakpoint+0xf0/0x150 [ 114.202723][ C2] rds_recv_incoming+0xd6c/0x1150 [ 114.202743][ C2] ? __pfx_rds_recv_incoming+0x10/0x10 [ 114.202761][ C2] ? skb_copy_bits+0x5c8/0x8d0 [ 114.202789][ C2] rds_tcp_data_recv+0x278/0xce0 [ 114.202820][ C2] __tcp_read_sock+0x204/0x8d0 [ 114.202845][ C2] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 114.202892][ C2] ? __pfx___tcp_read_sock+0x10/0x10 [ 114.202913][ C2] ? cubictcp_acked+0x789/0xdc0 [ 114.202937][ C2] ? tcp_schedule_loss_probe+0x54/0xc10 [ 114.202967][ C2] ? cubictcp_cong_avoid+0xf2/0xef0 [ 114.202988][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.203058][ C2] ? tcp_newly_delivered+0x14a/0x1a0 [ 114.203085][ C2] rds_tcp_read_sock+0x12e/0x280 [ 114.203111][ C2] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 114.203137][ C2] ? lock_acquire+0x1cf/0x380 [ 114.203164][ C2] ? __sk_mem_schedule+0xd0/0x100 [ 114.203182][ C2] ? __pfx_sock_def_readable+0x10/0x10 [ 114.203206][ C2] rds_tcp_data_ready+0x1c9/0x790 [ 114.203232][ C2] ? tcp_data_ecn_check+0x1c0/0x750 [ 114.203250][ C2] tcp_data_ready+0x114/0x5a0 [ 114.203272][ C2] tcp_data_queue+0x1aca/0x4fd0 [ 114.203296][ C2] ? tcp_urg+0x10f/0xb80 [ 114.203313][ C2] ? __pfx_tcp_data_queue+0x10/0x10 [ 114.203334][ C2] ? tcp_ecn_create_request+0x870/0x8d0 [ 114.203356][ C2] tcp_rcv_established+0xb64/0x3980 [ 114.203379][ C2] ? ip6_dst_check+0x352/0x950 [ 114.203397][ C2] ? __pfx_tcp_rcv_established+0x10/0x10 [ 114.203418][ C2] ? lock_acquire+0x1cf/0x380 [ 114.203446][ C2] tcp_v6_do_rcv+0x118b/0x1dd0 [ 114.203468][ C2] tcp_v6_rcv+0x2b03/0x42c0 [ 114.203493][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 114.203511][ C2] ? raw6_local_deliver+0x3f3/0xa80 [ 114.203531][ C2] ? raw6_local_deliver+0x3fd/0xa80 [ 114.203548][ C2] ? nf_hook.constprop.0+0x2d9/0x750 [ 114.203571][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 114.203589][ C2] ip6_protocol_deliver_rcu+0x188/0x1500 [ 114.203618][ C2] ip6_input_finish+0x1e4/0x4a0 [ 114.203640][ C2] ip6_input+0x105/0x2f0 [ 114.203662][ C2] ipv6_rcv+0x261/0x610 [ 114.203684][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 114.203704][ C2] __netif_receive_skb_one_core+0x12d/0x1e0 [ 114.203730][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 114.203755][ C2] ? lock_acquire+0x1cf/0x380 [ 114.210323][ C2] ? process_backlog+0x32a/0x1580 [ 114.210349][ C2] ? process_backlog+0x32a/0x1580 [ 114.210371][ C2] __netif_receive_skb+0x1f/0x120 [ 114.210396][ C2] process_backlog+0x37a/0x1580 [ 114.210422][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 114.210447][ C2] net_rx_action+0xa40/0xf20 [ 114.210474][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 114.210497][ C2] ? lock_acquire+0x100/0x380 [ 114.210523][ C2] ? find_held_lock+0x2b/0x80 [ 114.210544][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 114.210573][ C2] ? sched_clock+0x38/0x60 [ 114.210598][ C2] ? sched_clock_cpu+0x6c/0x570 [ 114.210629][ C2] ? mark_held_locks+0x40/0x70 [ 114.210656][ C2] handle_softirqs+0x1eb/0x9e0 [ 114.210679][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 114.210699][ C2] ? irqtime_account_irq+0x176/0x2d0 [ 114.210726][ C2] ? __dev_queue_xmit+0x7dc/0x4750 [ 114.210748][ C2] do_softirq+0xac/0xe0 [ 114.210768][ C2] [ 114.210774][ C2] [ 114.210780][ C2] __local_bh_enable_ip+0xf8/0x120 [ 114.210800][ C2] ? __dev_queue_xmit+0x7dc/0x4750 [ 114.210821][ C2] __dev_queue_xmit+0x7f1/0x4750 [ 114.210847][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.210872][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.210906][ C2] ip6_finish_output2+0xfd4/0x1ce0 [ 114.210933][ C2] __ip6_finish_output+0x357/0x1080 [ 114.210961][ C2] ip6_output+0x2aa/0xa60 [ 114.210982][ C2] ? __pfx_ip6_output+0x10/0x10 [ 114.211003][ C2] ? __pfx_ip6_finish_output+0x10/0x10 [ 114.211027][ C2] ip6_xmit+0x1002/0x26e0 [ 114.211047][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.211077][ C2] ? __pfx_ip6_xmit+0x10/0x10 [ 114.211096][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.211121][ C2] ? ip6_dst_check+0x343/0x950 [ 114.211140][ C2] ? __pfx_dst_output+0x10/0x10 [ 114.211167][ C2] inet6_csk_xmit+0x387/0x760 [ 114.211194][ C2] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 114.211220][ C2] __tcp_transmit_skb+0x1dd1/0x4b50 [ 114.211250][ C2] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 114.211280][ C2] ? ktime_get+0x200/0x300 [ 114.211303][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 114.211321][ C2] tcp_write_xmit+0x12a2/0x8980 [ 114.211355][ C2] __tcp_push_pending_frames+0xaf/0x3b0 [ 114.211382][ C2] __tcp_sock_set_cork.part.0+0x105/0x140 [ 114.211403][ C2] tcp_sock_set_cork+0x9b/0xc0 [ 114.211422][ C2] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 114.211440][ C2] rds_send_xmit+0x17cb/0x2950 [ 114.211466][ C2] ? __pfx_rds_send_xmit+0x10/0x10 [ 114.211488][ C2] rds_send_worker+0x94/0x320 [ 114.211508][ C2] process_one_work+0x9d7/0x1920 [ 114.211531][ C2] ? __pfx_process_one_work+0x10/0x10 [ 114.211551][ C2] ? __pfx_rds_send_worker+0x10/0x10 [ 114.211573][ C2] worker_thread+0x5da/0xe40 [ 114.211594][ C2] ? kthread+0x13a/0x450 [ 114.211609][ C2] ? __pfx_worker_thread+0x10/0x10 [ 114.211625][ C2] kthread+0x370/0x450 [ 114.211640][ C2] ? __pfx_kthread+0x10/0x10 [ 114.211656][ C2] ret_from_fork+0x754/0xd80 [ 114.211672][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 114.211689][ C2] ? __switch_to+0x7b4/0x1120 [ 114.211710][ C2] ? __pfx_kthread+0x10/0x10 [ 114.211726][ C2] ret_from_fork_asm+0x1a/0x30 [ 114.211752][ C2] [ 114.890332][ C2] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 114.893700][ C2] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13, name: kworker/u32:1 [ 114.908174][ C2] preempt_count: 303, expected: 0 [ 114.927558][ C2] RCU nest depth: 5, expected: 0 [ 114.933049][ C2] INFO: lockdep is turned off. [ 114.936206][ C2] Preemption disabled at: [ 114.936221][ C2] [] __dev_queue_xmit+0x27c/0x4750 [ 114.947383][ C2] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 114.947411][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.947423][ C2] Workqueue: krds_cp_wq#2/0 rds_send_worker [ 114.947454][ C2] Call Trace: [ 114.947460][ C2] [ 114.947468][ C2] dump_stack_lvl+0x100/0x190 [ 114.947500][ C2] __might_resched.cold+0x1ec/0x232 [ 114.947605][ C2] ? __pfx___might_resched+0x10/0x10 [ 114.947629][ C2] lock_sock_nested+0x52/0xf0 [ 114.947654][ C2] ? inet6_getname+0x1a2/0x860 [ 114.947673][ C2] inet6_getname+0x1a2/0x860 [ 114.947689][ C2] rds_tcp_get_peer_sport+0x7c/0x110 [ 114.947716][ C2] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 114.947746][ C2] ? find_held_lock+0x2b/0x80 [ 114.947770][ C2] ? rds_addr_cmp+0x10d/0x150 [ 114.947790][ C2] rds_tcp_conn_slots_available+0x279/0x390 [ 114.947817][ C2] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 114.947844][ C2] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 114.947862][ C2] ? ip6_output+0x211/0xa60 [ 114.947883][ C2] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 114.947901][ C2] ? worker_thread+0x530/0xe40 [ 114.947919][ C2] ? flush_ptrace_hw_breakpoint+0xf0/0x150 [ 114.947948][ C2] rds_recv_incoming+0xd6c/0x1150 [ 114.947968][ C2] ? __pfx_rds_recv_incoming+0x10/0x10 [ 114.947986][ C2] ? skb_copy_bits+0x5c8/0x8d0 [ 114.948015][ C2] rds_tcp_data_recv+0x278/0xce0 [ 114.948053][ C2] __tcp_read_sock+0x204/0x8d0 [ 114.948079][ C2] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 114.948106][ C2] ? __pfx___tcp_read_sock+0x10/0x10 [ 114.948129][ C2] ? cubictcp_acked+0x789/0xdc0 [ 114.948151][ C2] ? tcp_schedule_loss_probe+0x54/0xc10 [ 114.948176][ C2] ? cubictcp_cong_avoid+0xf2/0xef0 [ 114.948198][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.948223][ C2] ? tcp_newly_delivered+0x14a/0x1a0 [ 114.948250][ C2] rds_tcp_read_sock+0x12e/0x280 [ 114.948277][ C2] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 114.948302][ C2] ? lock_acquire+0x1cf/0x380 [ 114.948329][ C2] ? __sk_mem_schedule+0xd0/0x100 [ 114.948348][ C2] ? __pfx_sock_def_readable+0x10/0x10 [ 114.948399][ C2] rds_tcp_data_ready+0x1c9/0x790 [ 114.948425][ C2] ? tcp_data_ecn_check+0x1c0/0x750 [ 114.948445][ C2] tcp_data_ready+0x114/0x5a0 [ 114.948468][ C2] tcp_data_queue+0x1aca/0x4fd0 [ 114.948671][ C2] ? tcp_urg+0x10f/0xb80 [ 114.948690][ C2] ? __pfx_tcp_data_queue+0x10/0x10 [ 114.948730][ C2] ? tcp_ecn_create_request+0x870/0x8d0 [ 114.948752][ C2] tcp_rcv_established+0xb64/0x3980 [ 114.948777][ C2] ? ip6_dst_check+0x352/0x950 [ 114.948795][ C2] ? __pfx_tcp_rcv_established+0x10/0x10 [ 114.948816][ C2] ? lock_acquire+0x1cf/0x380 [ 114.948844][ C2] tcp_v6_do_rcv+0x118b/0x1dd0 [ 114.948867][ C2] tcp_v6_rcv+0x2b03/0x42c0 [ 114.948892][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 114.948911][ C2] ? raw6_local_deliver+0x3f3/0xa80 [ 114.948931][ C2] ? raw6_local_deliver+0x3fd/0xa80 [ 114.948948][ C2] ? nf_hook.constprop.0+0x2d9/0x750 [ 114.948972][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 114.948990][ C2] ip6_protocol_deliver_rcu+0x188/0x1500 [ 114.949019][ C2] ip6_input_finish+0x1e4/0x4a0 [ 114.949050][ C2] ip6_input+0x105/0x2f0 [ 114.949073][ C2] ipv6_rcv+0x261/0x610 [ 114.949094][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 114.949112][ C2] __netif_receive_skb_one_core+0x12d/0x1e0 [ 114.949134][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 114.949157][ C2] ? lock_acquire+0x1cf/0x380 [ 114.949183][ C2] ? process_backlog+0x32a/0x1580 [ 114.949205][ C2] ? process_backlog+0x32a/0x1580 [ 114.949227][ C2] __netif_receive_skb+0x1f/0x120 [ 114.949249][ C2] process_backlog+0x37a/0x1580 [ 114.949272][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 114.949294][ C2] net_rx_action+0xa40/0xf20 [ 114.949320][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 114.949343][ C2] ? lock_acquire+0x100/0x380 [ 114.949367][ C2] ? find_held_lock+0x2b/0x80 [ 114.949385][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 114.949416][ C2] ? sched_clock+0x38/0x60 [ 114.949441][ C2] ? sched_clock_cpu+0x6c/0x570 [ 114.949471][ C2] ? mark_held_locks+0x40/0x70 [ 114.949498][ C2] handle_softirqs+0x1eb/0x9e0 [ 114.949523][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 114.949544][ C2] ? irqtime_account_irq+0x176/0x2d0 [ 114.949571][ C2] ? __dev_queue_xmit+0x7dc/0x4750 [ 114.949594][ C2] do_softirq+0xac/0xe0 [ 114.949615][ C2] [ 114.949621][ C2] [ 114.949627][ C2] __local_bh_enable_ip+0xf8/0x120 [ 114.949648][ C2] ? __dev_queue_xmit+0x7dc/0x4750 [ 114.949669][ C2] __dev_queue_xmit+0x7f1/0x4750 [ 114.949698][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.949724][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.949759][ C2] ip6_finish_output2+0xfd4/0x1ce0 [ 114.949784][ C2] __ip6_finish_output+0x357/0x1080 [ 114.949810][ C2] ip6_output+0x2aa/0xa60 [ 114.949832][ C2] ? __pfx_ip6_output+0x10/0x10 [ 114.949855][ C2] ? __pfx_ip6_finish_output+0x10/0x10 [ 114.949880][ C2] ip6_xmit+0x1002/0x26e0 [ 114.949900][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.949929][ C2] ? __pfx_ip6_xmit+0x10/0x10 [ 114.949949][ C2] ? __lock_acquire+0x4a5/0x2630 [ 114.949974][ C2] ? ip6_dst_check+0x343/0x950 [ 114.949990][ C2] ? __pfx_dst_output+0x10/0x10 [ 114.950016][ C2] inet6_csk_xmit+0x387/0x760 [ 114.950051][ C2] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 114.950074][ C2] __tcp_transmit_skb+0x1dd1/0x4b50 [ 114.950106][ C2] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 114.950135][ C2] ? ktime_get+0x200/0x300 [ 114.950158][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 114.950179][ C2] tcp_write_xmit+0x12a2/0x8980 [ 114.950213][ C2] __tcp_push_pending_frames+0xaf/0x3b0 [ 114.950239][ C2] __tcp_sock_set_cork.part.0+0x105/0x140 [ 114.950258][ C2] tcp_sock_set_cork+0x9b/0xc0 [ 114.950276][ C2] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 114.950293][ C2] rds_send_xmit+0x17cb/0x2950 [ 114.950320][ C2] ? __pfx_rds_send_xmit+0x10/0x10 [ 114.950342][ C2] rds_send_worker+0x94/0x320 [ 114.950364][ C2] process_one_work+0x9d7/0x1920 [ 114.950388][ C2] ? __pfx_process_one_work+0x10/0x10 [ 114.950410][ C2] ? __pfx_rds_send_worker+0x10/0x10 [ 114.950433][ C2] worker_thread+0x5da/0xe40 [ 114.950455][ C2] ? kthread+0x13a/0x450 [ 114.950471][ C2] ? __pfx_worker_thread+0x10/0x10 [ 114.950488][ C2] kthread+0x370/0x450 [ 114.950503][ C2] ? __pfx_kthread+0x10/0x10 [ 114.950518][ C2] ret_from_fork+0x754/0xd80 [ 114.950533][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 114.950549][ C2] ? __switch_to+0x7b4/0x1120 [ 114.950570][ C2] ? __pfx_kthread+0x10/0x10 [ 114.950584][ C2] ret_from_fork_asm+0x1a/0x30 [ 114.950608][ C2]