last executing test programs: 1m10.549029526s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x7, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x10, 0x7, 0x9, 0x7ff}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_async', 0x10000, 0x26) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x56cb, '\x00', r2, r3, 0x2, 0x1, 0x1}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x56cb, '\x00', r2, r3, 0x2, 0x1, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090589e702008000040905", @ANYBLOB="0237"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) recvmsg$unix(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000540)=@sg0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='vfat\x00', 0x2000000, &(0x7f0000000680)='nfs\x00') 47.83229409s ago: executing program 0 (id=16): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010a980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010ab80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010ad80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000010af80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000010bf80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c180)={0xf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x6, "e155f20cb6aabc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010d180)={{0x0, 0x6, 0x4, 0x0, 0xcc1, 0x9, 0x10000, 0x0, 0x73, 0x47e0, 0x5, 0x10001, 0x1, 0x3, 0xffffffffffffffff}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010d240)={0x9, [{}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "de1510293841fd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010e240)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010e440)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "e1a74f4b3bc42b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000010f440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000010f640)={{0x0, 0x7, 0xffff, 0x2, 0xe, 0x4c, 0xb7, 0x3, 0x80000000, 0x2, 0x2469, 0x7, 0x100, 0x800, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000110640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000110840)={{0x0, 0x7fffffffffffffff, 0x4, 0x8, 0x0, 0x8, 0xfffffffffffffc01, 0x2, 0x7, 0xe, 0x4a, 0x9, 0xc000000000, 0x2, 0x90}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00001108c0)={{0x0, 0x9, 0x2, 0x1, 0x6, 0x7, 0x2, 0x5, 0x19, 0x40, 0xffffffff, 0x0, 0x5, 0x4, 0x6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000110980)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000111980)={{0x0, 0x6, 0xffffffff, 0x9, 0xffff, 0x6, 0x5, 0x5, 0x6, 0x8, 0xfffffffe, 0x8000, 0x1ff, 0xb, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000112980)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000113980)={{0x0, 0xfc9, 0x4c, 0x5, 0x6, 0x8, 0x5, 0x1, 0x6, 0x2, 0x8, 0x2045, 0x3, 0x6, 0x5e0d}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000113a40)={0x0, 0x0, "c925c06e2d6345540099849238a08890d1329b37582a068e5f04ee52190ca356be18d7ba6001fe536a86541f22da914ac2a7bc07f76342096187a3b2ab33a98952673ce3ccaa54a65e41cc1917d1d3979b5c62c6f9f6ae098b8a1450246ce4bed6c8f6def9adf2ac3245bcea233a80ca65741cc017eb7723e380c07423b0a73e51c75f319f5c3728c2b7cbdd666aa6626db7675538f83e3b618f4cc4e4de55fffb517036a0cae2c9d6c6e8349f15af217a713c0e16ee27d0a672402500a09a63db64a8dc138aafdad736b31f55bcef9e1ecec1f83d48d25b4c69a8248f000da640bc23fe11f381230b3eb1bfa21bd86b2578ea4ed55c3cbe16658bc237a347da", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114a40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4, r5}, {0x0, r6}, {0x0, r7}, {0x0, r9}, {}, {r11, r14}, {r17}, {r18, r21}, {r22, r23}, {r24}, {r25, r26}, {r27, r28}, {}, {r29, r30}], 0xf9, "967c50a384ecf0"}) r31 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=0x8, 0x4) setsockopt$sock_int(r31, 0x1, 0x4000000000000002, &(0x7f0000000340)=0xad01, 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x1421428, &(0x7f0000000280)=ANY=[@ANYBLOB="80"]) 47.718394987s ago: executing program 0 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mlockall(0x7) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000100)={0x9, 0x2, 0x4, 0x2, 0x6, 0x7}) mlock2(&(0x7f0000433000/0x4000)=nil, 0x4000, 0x1) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="e5", 0x1}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f00000002c0)=@tcp6=r4}, 0x20) recvmmsg$unix(r4, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10040, 0x0) write$char_usb(r1, &(0x7f0000000000)='#a', 0x2) write(r0, &(0x7f0000000280)='0', 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 46.73594448s ago: executing program 0 (id=31): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1252c1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)=0x1) close_range(r0, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000008520a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 46.597544797s ago: executing program 0 (id=34): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4f22, 0x0, @empty}, 0x1c) listen(r3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002001, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x48, 0x7ffffcb9}]}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 46.394767939s ago: executing program 0 (id=43): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df250200"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 45.463475393s ago: executing program 1 (id=17): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x2) pselect6(0x40, &(0x7f0000000840)={0x7, 0x1ff, 0x4, 0x7, 0x1, 0x2, 0x5, 0x9}, 0x0, &(0x7f00000008c0)={0x9, 0x9, 0x401, 0x9, 0x6, 0x8000000000000001, 0xa94f, 0x2}, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x9}]}, {0x0, [0x30, 0x5f, 0x51, 0x2e, 0x61]}}, &(0x7f0000000740)=""/154, 0x2b, 0x9a, 0x1, 0x1, 0x10000, @value=r1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdb7, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x9, 0x6, &(0x7f0000000640)=""/6, 0x41000, 0x48, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xb, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r0], &(0x7f00000009c0)=[{0x0, 0x1, 0x4, 0x8}, {0x5, 0x3, 0x1}, {0x5, 0x4, 0x9, 0xa}, {0x1, 0x5, 0x9, 0x5}, {0x1, 0x4, 0xb, 0x1}, {0x2, 0x1, 0xd, 0x2}, {0x4, 0x4, 0x1, 0x2}], 0x10, 0x5}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd25, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x803}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000c5}, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r10, 0x40085875) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000051}, 0x2) r12 = io_uring_setup(0x4745, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r12, 0x24, &(0x7f0000000400), 0x0) 45.321784537s ago: executing program 1 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="b7050000000100007910a800000000001d500000000000009500000000000000dad0ae437202fe29729e5361e283f4c4ddf4f91558ee5ce40394c5f0063281d106d9692809f9019b91aa47941e12669ec84cb12e51a175b929b9eb3ed662fd9448d2cf8c101279664c6e0e70869cd88420cb289b7fdbd62b760fd36c31a0919c482808100058572aea56c1b636001f34db40ee898d88ee30e8942a975c7806f0cfb12f6127edd280f96e41d54100b2ced86c59bb6524d0d985c6eaef2ea15d1ceadcf5cdde89b6c76ea58af225f8a9c763767491566c6a3627011463fb7267715090bc94407ad0962476b14a851594175b41576cbd060faa5ae19d1d433bad4e5aa7f338f511028103bf634e003cce56be57cd177878f429"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) 45.224993312s ago: executing program 1 (id=48): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0xfffffff8, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xd, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x1041, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0xfff, 0x3, 0x200000d, 0x10, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x5, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x6, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x41) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) 44.288676825s ago: executing program 1 (id=52): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1ffe00) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x40282, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r2, 0xc138fd0c, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000000001f34aa02d47dbfe351d84a2f36a3ffea0c15e932225ecf3a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r5 = fsmount(r4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000780)}, 0x20) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 44.138551065s ago: executing program 1 (id=53): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4f22, 0x0, @empty}, 0x1c) listen(r3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002001, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x48, 0x7ffffcb9}]}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 44.074040527s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875", 0x5}], 0x1}, 0x800) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000280)='./bus\x00', 0x8000, 0x52) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r3, &(0x7f0000000240)=""/29, 0x1d) 31.344367976s ago: executing program 32 (id=43): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df250200"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 29.031234608s ago: executing program 33 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875", 0x5}], 0x1}, 0x800) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000280)='./bus\x00', 0x8000, 0x52) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r3, &(0x7f0000000240)=""/29, 0x1d) 26.038398992s ago: executing program 4 (id=183): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40880) write(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fcntl$lock(r2, 0x26, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x0, 0x104, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0xb, 0x3, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r6}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r7) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r7, 0xc0106440, &(0x7f0000000080)={0x1, 0x8}) 25.818881394s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_emit_ethernet(0xde, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="e89600000000000052b500000000000001000000bbdfb214067d1e73c2b37ebab36e5fb3c976d48ded430b4219b9f91689a07cb690cca38d040fb60113de73dde8c2403ca92c32a302aa3edcea8eec4562537191fa254deb28d2a193ae681de30e55bdca0f216be8be0a9390a6b6575c27bd0348f4dbbdd89bc4c85f52348ff2610bc02ded5488150f95707b466bb755e74725", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)={0x80001, 0x1c2, 0x22}, 0x18) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x40080) ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f0000000140), 0x1004) openat(r5, 0x0, 0x42, 0x1fe) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='-:_ygroup/myevent', 0x11) 25.452110702s ago: executing program 4 (id=185): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000fd2b73266dc912fef2e68c11ee42df3824b4ff17f4e7a83179f257079d29fa205401bbb49f6d950a42ba6f656d26630c2a93233f5c5b430d7d46b6faa7e14760b7", 0x65) 24.798644178s ago: executing program 4 (id=192): ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000780)={0xe, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) mbind(&(0x7f00001c0000/0x4000)=nil, 0x4000, 0x4d72ae22bccc50b3, &(0x7f00000003c0)=0x8000000000000000, 0x5, 0x4) write(0xffffffffffffffff, &(0x7f0000000080)="203030303030302032c1", 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x0, 0x21, 0xaf, {0xaf, 0x30, "f74c34e4903ee140b67531c5cc72959edddfce1cf2ae34816ff3e37f2f84fe91c9c63b638a9cd6c88f30b1b3faa635e0daaa9fc660917e205c8d0390fdb8d22af552bd14c911c13822090afd0339a62ceb02e66beef1c43c53528dbd9d25fe5abd548406e8b2467ba3344b46ce9b7673393b788f10187c4e548912301f85f72f313d1f98d64c78c0c5d47b735ea5e76277d883e3fe75da16736be99b0351c55a03893fc0bcb5970df922577143"}}, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)={0x20, 0xa, 0x2e, "5d12da9275781ed9454288597bf20a41d383e661f711174d8acfd9449021b65689450716464260545837f3c5eb9e"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x81, 0x1, '\\'}, &(0x7f0000000bc0)={0x20, 0x82, 0x1, "18"}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "a799"}, &(0x7f0000000c40)={0x20, 0x84, 0x1, "96"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "7eb67c"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="120150020200002025e4a0a440000102030109024e00010104100509040008030206000e072406000039f205240006000d240f01010000000180000400000000000003072414020003000905820210000a0605090503020004049a0a00000000"], &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x50, 0x1, 0xd, 0xfd, 0x10, 0x6}, 0xce, &(0x7f00000007c0)=ANY=[@ANYBLOB="050fce00030710021462010007100212450600bb100aa7043c1925cfc910dbc63271f40e69eeac12098e4affdfbe431a34d1f1eb"], 0x4, [{0xf, &(0x7f0000000400)=@string={0xf, 0x3, "3a283a56cacf92a08f96f2fcec"}}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "9c243d400781a28cdaf45e8bb85f0cf7c3548120475a4065a2bd73499bc1be724dccafa7d2717689488d93d0a83c9ebe206ffb8cda4ae9735a2443ca6a413b545a87c8299ac862eed1b92472e88f11fbcb0ec2df2324a6e43a50e39597f26ab9ec78f8e06da9f5da145e257802296fc52fba5a6c6c19d616397502c98ed775ff56528c32bcbb304a586b89c6b0355e9436a707c2b35915"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x409}}, {0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0xfffffffffffffffc, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffff9, 0xf95, 0x5, 0x8, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"}) 20.918800674s ago: executing program 4 (id=238): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @fwd={0x5}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @enum64={0x2, 0x3, 0x0, 0x13, 0x1, 0x4, [{0x3, 0x0, 0xd8f}, {0xb, 0x7fffffff, 0x2000000}, {0x2, 0x4, 0x10000}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xd, 0x1000002, 0x1ff}]}]}}, &(0x7f0000000340)=""/13, 0x86, 0xd, 0x1, 0x1b6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) write(r5, &(0x7f0000000000)='3', 0x3e) mount$fuse(0x0, 0x0, &(0x7f00000003c0), 0x900000, &(0x7f0000000680)=ANY=[]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)}], 0x1}, 0x7101}], 0x1, 0x4001c00) epoll_create1(0x0) 20.543421449s ago: executing program 4 (id=245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0xfffffffb, 0x5, 0xa5e, 0x4, 0x24, 0x2, 0x6}, 0x9c) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1ffe00) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 5.160319523s ago: executing program 34 (id=245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0xfffffffb, 0x5, 0xa5e, 0x4, 0x24, 0x2, 0x6}, 0x9c) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1ffe00) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.564180058s ago: executing program 3 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cl1/comms/1/addr_list\x00', 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)={0x40, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x30}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8091}, 0x10000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f0000000000)={[{@dyn}, {@flock_write}]}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e29, 0x202, @mcast1, 0x14000}, 0x1c) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r10 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000005580)=""/102392, 0x18ff8) 1.678826135s ago: executing program 2 (id=450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syncfs(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x8893}, 0x40000) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)="b3185a56"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800040005000000050015"], 0x44}}, 0x4004010) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0xb5) setresuid(0x0, 0xee00, 0xee01) r5 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8000}, 0xc) r6 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x2) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000b40)) 1.652195736s ago: executing program 3 (id=451): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz1\x00', {0x0, 0xfffd, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xa, 0x0, 0x1, 0x0, 0x0, 0xf5b1, 0xd6, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xffffffff, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x3b, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0xa], [0x3, 0xfffff41a, 0xaed, 0x0, 0x4, 0x9, 0x2000000, 0xedc0, 0xfffffffc, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0xfffffffd, 0xfffffffd, 0x4, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffffb86], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0xfffffff8, 0x0, 0x40, 0x9, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x100000, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0xfffffffd, 0x7f631ab5, 0xffffffff, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x8c68, 0x6, 0x0, 0x9, 0x200, 0x0, 0x6, 0x80000000, 0x2, 0x47fff, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x2], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x54c, 0xffffffff, 0x0, 0x0, 0xce1d, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x9, 0x4, 0x8001, 0x80, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc4e, 0x0, 0xea, 0x0, 0xffffffff, 0x0, 0x8000000, 0x4, 0x7f, 0x0, 0x0, 0xffffe]}, 0x45c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090700000"], 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x8000, 0x0) fchdir(r3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r12 = dup(r11) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r12}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) 1.417775132s ago: executing program 2 (id=452): socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x100, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x5537, &(0x7f0000000400)={0x0, 0x1, 0x400, 0x4, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10"], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0xfffffffd, 0x8}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) fremovexattr(r8, &(0x7f0000000080)=@known='system.sockprotoname\x00') sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.417283806s ago: executing program 3 (id=453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xb1d}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.049066909s ago: executing program 5 (id=457): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x2000025, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0xfffffd01, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x4, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x400, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x0, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x3, 0xffffffff, 0x8, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a5, 0xfffffeff, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b396, 0x8001, 0x1, 0x5, 0x0, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0x2, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x3, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x10009, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x4, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8007f, 0x9d27, 0x80000001, 0xa6, 0x100, 0x2, 0x1, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0x101, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x181}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000120001000000000000000000000000008c1e72a92f8bfc29069f3b5af1b4cd1b38a3614788936846ba048743d76dc8bfdd55502c067a7f9cf5fc5698c137a39bbe21a96f794d8f144e97ada23a787c0f891ce3eff00e9b3549a6374cdc4995e258d22f37c365f2bbb1d8e8e0a0240f44381b76b3eabd36e3bfff39ecbb1a7367d233be8ebd406e92", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff030000"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0x145, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac47, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7f, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x300000, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r10, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r10, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DELAY(r10, 0x80084121, &(0x7f00000000c0)) 699.899841ms ago: executing program 5 (id=458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0x10040000000}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50809402}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x23, 0xac, "6e7c44683745fce60c3336b279a02c51b507c38a865176a0b28f29620a6edb"}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 698.594402ms ago: executing program 2 (id=459): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@mcast1, 0xf}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31fff50000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 566.081889ms ago: executing program 2 (id=460): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) fanotify_mark(0xffffffffffffffff, 0x105, 0x30, r0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e1102010401aaaaaaaaaa110504"], 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) (async) fanotify_mark(0xffffffffffffffff, 0x105, 0x30, r0, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e1102010401aaaaaaaaaa110504"], 0x14) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) (async) 507.35428ms ago: executing program 2 (id=461): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0xba01}, 0x8810) 506.748695ms ago: executing program 5 (id=462): execve(&(0x7f0000000040)='./config/cluster/ocfs2/heartbeat/dead_threshold\x00', 0x0, 0x0) 463.684309ms ago: executing program 3 (id=463): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) unshare(0x24020400) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r3, 0x100, &(0x7f0000000040)="7f3580c63db300000032cd000000a5") read$FUSE(0xffffffffffffffff, 0x0, 0x0) 355.994324ms ago: executing program 5 (id=464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = io_uring_setup(0x4745, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 355.421028ms ago: executing program 2 (id=465): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mmap$IORING_OFF_SQ_RING(0x7ffff7ffe000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010002d5600000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000de6100001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}}, 0x2006004) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4c96a77e}, r7}}, 0x30) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe52, 0x7, 0x8, 0x2a, 0x8, {0xffff945a, 0x1}, 0x8, 0xed}}) 298.610836ms ago: executing program 3 (id=466): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000180)="d3f2d483feccdb74848bc20f0449a549b2ea7d983d0d45508dc9d7d628fdd57d2bf9a356eb42337738f00c70a37516633bf4753e08711e4e6b5c48189adbc146f216ed24f9f3e1ff3a306a151c59253bb7e557cc43c94d9cd677e3e8641482d2b0538ea6b33a0150cbc0ea82ce8000") keyctl$dh_compute(0x17, &(0x7f0000001e00), 0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={'xcbc(twofish)\x00'}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendto$inet(r0, &(0x7f0000000300)="0303ec58000000004500001c0000000040840000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) 216.203019ms ago: executing program 5 (id=467): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000d300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 940.382µs ago: executing program 5 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x10, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0xffffffffdfffffff, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x44}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f00000002c0)={0xd600000000000000, 0x5000, 0xfffffffffffffffd, 0xd}) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@local}, &(0x7f0000000340)=0xc) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb) socket$netlink(0x10, 0x3, 0x14) io_uring_enter(r11, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) 214.368µs ago: executing program 6 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 3 (id=469): syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): 1.566229][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.566307][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.566391][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.607532][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.607598][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.608181][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.616752][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.616772][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.616798][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.623640][ T5735] hsr_slave_0: entered promiscuous mode [ 51.624473][ T5735] hsr_slave_1: entered promiscuous mode [ 51.641044][ T5732] team0: Port device team_slave_0 added [ 51.641518][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.641526][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.641539][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.643497][ T5732] team0: Port device team_slave_1 added [ 51.665963][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.666005][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.666170][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.690443][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.690510][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.690547][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.711171][ T5734] hsr_slave_0: entered promiscuous mode [ 51.711862][ T5734] hsr_slave_1: entered promiscuous mode [ 51.712259][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 51.713018][ T5734] Cannot create hsr debugfs directory [ 51.743170][ T5733] hsr_slave_0: entered promiscuous mode [ 51.744047][ T5733] hsr_slave_1: entered promiscuous mode [ 51.744600][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 51.744619][ T5733] Cannot create hsr debugfs directory [ 51.817764][ T5732] hsr_slave_0: entered promiscuous mode [ 51.819718][ T5732] hsr_slave_1: entered promiscuous mode [ 51.820225][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 51.820250][ T5732] Cannot create hsr debugfs directory [ 52.265964][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.278437][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.279686][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.287296][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.290257][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.295938][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.296899][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.302557][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.378652][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.385869][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.390174][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.398705][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.402925][ T5090] Bluetooth: hci2: command tx timeout [ 52.403240][ T5090] Bluetooth: hci3: command tx timeout [ 52.404355][ T5090] Bluetooth: hci0: command tx timeout [ 52.404481][ T5090] Bluetooth: hci1: command tx timeout [ 52.414964][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.423016][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.435764][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.443205][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.519854][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.528104][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.529214][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.534933][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.541120][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.547746][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.554497][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.561507][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.656231][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.687589][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.698313][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.703686][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.709638][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.711223][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.716007][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.730546][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.730961][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.737316][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.765953][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.766762][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.783699][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.783836][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.810816][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.868931][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.890081][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.890180][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.893344][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.907051][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.907152][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.928291][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.948516][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.948615][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.964751][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.964948][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.999986][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.061119][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.088592][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.088756][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.112975][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.113146][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.360083][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.421239][ T5735] veth0_vlan: entered promiscuous mode [ 53.429565][ T5735] veth1_vlan: entered promiscuous mode [ 53.434253][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.499892][ T5735] veth0_macvtap: entered promiscuous mode [ 53.505212][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.511084][ T5735] veth1_macvtap: entered promiscuous mode [ 53.530884][ T5733] veth0_vlan: entered promiscuous mode [ 53.551457][ T5733] veth1_vlan: entered promiscuous mode [ 53.555123][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.576026][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.608057][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.608286][ T5734] veth0_vlan: entered promiscuous mode [ 53.614073][ T5734] veth1_vlan: entered promiscuous mode [ 53.661153][ T5733] veth0_macvtap: entered promiscuous mode [ 53.673061][ T5733] veth1_macvtap: entered promiscuous mode [ 53.682959][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.702819][ T5734] veth0_macvtap: entered promiscuous mode [ 53.718243][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.718314][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.720781][ T5734] veth1_macvtap: entered promiscuous mode [ 53.732155][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.754376][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.765679][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.765745][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.770469][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.773268][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.786717][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.786858][ T5732] veth0_vlan: entered promiscuous mode [ 53.824499][ T5732] veth1_vlan: entered promiscuous mode [ 53.832550][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.872636][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.931171][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.931222][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.948545][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.948591][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.976372][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.979681][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.985675][ T5732] veth0_macvtap: entered promiscuous mode [ 54.017756][ T5732] veth1_macvtap: entered promiscuous mode [ 54.023323][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.023347][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.070664][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.079914][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.141809][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.141907][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.141971][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142017][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142063][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142110][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142149][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142195][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142243][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142291][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142338][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.232004][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.259237][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.259315][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.259411][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.260754][ T5891] FAULT_INJECTION: forcing a failure. [ 54.260754][ T5891] name failslab, interval 1, probability 0, space 0, times 1 [ 54.260781][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 54.260798][ T5891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.260807][ T5891] Call Trace: [ 54.260813][ T5891] [ 54.260819][ T5891] dump_stack_lvl+0x100/0x190 [ 54.260846][ T5891] should_fail_ex.cold+0x5/0xa [ 54.260867][ T5891] should_failslab+0xc2/0x120 [ 54.260887][ T5891] __kmalloc_noprof+0xfc/0x840 [ 54.260902][ T5891] ? tnode_new+0x2f7/0x350 [ 54.260927][ T5891] tnode_new+0x2f7/0x350 [ 54.260948][ T5891] resize+0xa60/0x22f0 [ 54.260968][ T5891] ? __kmalloc_noprof+0x350/0x840 [ 54.260989][ T5891] fib_insert_alias+0x9b3/0xe30 [ 54.261015][ T5891] fib_trie_unmerge+0x289/0xbd0 [ 54.261033][ T5891] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 54.261051][ T5891] ? lock_acquire+0x1d1/0x380 [ 54.261069][ T5891] fib_unmerge+0xee/0x510 [ 54.261082][ T5891] ? fib_nl2rule_locked+0x3ef/0x740 [ 54.261102][ T5891] fib4_rule_configure+0xaba/0x1160 [ 54.261120][ T5891] ? fib_nl2rule_locked+0x3fe/0x740 [ 54.261137][ T5891] fib_newrule+0x3c3/0x1e50 [ 54.261156][ T5891] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 54.261176][ T5891] ? __pfx_fib_newrule+0x10/0x10 [ 54.261193][ T5891] ? avc_has_perm_noaudit+0xb0/0x3b0 [ 54.261221][ T5891] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 54.261236][ T5891] ? find_held_lock+0x2b/0x80 [ 54.261258][ T5891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 54.261277][ T5891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 54.261298][ T5891] ? __pfx_fib_nl_newrule+0x10/0x10 [ 54.261322][ T5891] rtnetlink_rcv_msg+0x95e/0xe90 [ 54.261345][ T5891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.261379][ T5891] ? ref_tracker_free+0x37e/0x6c0 [ 54.261406][ T5891] netlink_rcv_skb+0x159/0x420 [ 54.261430][ T5891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.261446][ T5891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.261472][ T5891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 54.261514][ T5891] netlink_unicast+0x585/0x850 [ 54.261542][ T5891] ? __pfx_netlink_unicast+0x10/0x10 [ 54.261569][ T5891] netlink_sendmsg+0x8b0/0xda0 [ 54.261594][ T5891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.261618][ T5891] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.261644][ T5891] ____sys_sendmsg+0xa4d/0xbe0 [ 54.261666][ T5891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.261688][ T5891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.261713][ T5891] ___sys_sendmsg+0x190/0x1e0 [ 54.261737][ T5891] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.261755][ T5891] ? futex_wait+0x11e/0x370 [ 54.261781][ T5891] ? find_held_lock+0x2b/0x80 [ 54.261813][ T5891] __sys_sendmsg+0x160/0x210 [ 54.261828][ T5891] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.261852][ T5891] do_syscall_64+0x123/0x790 [ 54.261871][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.261885][ T5891] RIP: 0033:0x7f237919e159 [ 54.261897][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.261910][ T5891] RSP: 002b:00007f2379f94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.261926][ T5891] RAX: ffffffffffffffda RBX: 00007f2379425fa0 RCX: 00007f237919e159 [ 54.261934][ T5891] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000004 [ 54.261942][ T5891] RBP: 00007f2379235024 R08: 0000000000000000 R09: 0000000000000000 [ 54.261949][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.261957][ T5891] R13: 00007f2379426038 R14: 00007f2379425fa0 R15: 00007ffd7f225d18 [ 54.261973][ T5891] [ 54.400551][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.400572][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.420541][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.481964][ T5745] Bluetooth: hci1: command tx timeout [ 54.482046][ T5745] Bluetooth: hci0: command tx timeout [ 54.483072][ T5745] Bluetooth: hci3: command tx timeout [ 54.483098][ T5745] Bluetooth: hci2: command tx timeout [ 54.508273][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 54.569749][ T5907] FAULT_INJECTION: forcing a failure. [ 54.569749][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 54.579189][ T5907] CPU: 3 UID: 0 PID: 5907 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 54.579235][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.579249][ T5907] Call Trace: [ 54.579257][ T5907] [ 54.579266][ T5907] dump_stack_lvl+0x100/0x190 [ 54.579303][ T5907] should_fail_ex.cold+0x5/0xa [ 54.579333][ T5907] should_failslab+0xc2/0x120 [ 54.579356][ T5907] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.579375][ T5907] ? d_instantiate+0x8a/0xb0 [ 54.579402][ T5907] ? alloc_empty_file+0x5b/0x1c0 [ 54.579433][ T5907] alloc_empty_file+0x5b/0x1c0 [ 54.579458][ T5907] alloc_file_pseudo+0x183/0x290 [ 54.579484][ T5907] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 54.579509][ T5907] ? alloc_fd+0x471/0x7a0 [ 54.579535][ T5907] sock_alloc_file+0x50/0x210 [ 54.579557][ T5907] __sys_socket+0x1c0/0x260 [ 54.579584][ T5907] ? __pfx___sys_socket+0x10/0x10 [ 54.579635][ T5907] __x64_sys_socket+0x72/0xb0 [ 54.579661][ T5907] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.579696][ T5907] do_syscall_64+0x123/0x790 [ 54.579725][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.579747][ T5907] RIP: 0033:0x7f237919e159 [ 54.579766][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.579785][ T5907] RSP: 002b:00007f2379f94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 54.579804][ T5907] RAX: ffffffffffffffda RBX: 00007f2379425fa0 RCX: 00007f237919e159 [ 54.579817][ T5907] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 54.579829][ T5907] RBP: 00007f2379235024 R08: 0000000000000000 R09: 0000000000000000 [ 54.579842][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.579853][ T5907] R13: 00007f2379426038 R14: 00007f2379425fa0 R15: 00007ffd7f225d18 [ 54.579880][ T5907] [ 54.774358][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.922002][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 54.924227][ T5846] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 54.926253][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 54.926283][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 54.926306][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 54.928364][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.928387][ T5846] usb 5-1: Product: syz [ 54.928400][ T5846] usb 5-1: Manufacturer: syz [ 54.928412][ T5846] usb 5-1: SerialNumber: syz [ 54.933099][ T5926] netlink: 'syz.1.14': attribute type 10 has an invalid length. [ 54.936303][ T5926] syz_tun: entered promiscuous mode [ 54.939086][ T5846] usb 5-1: config 0 descriptor?? [ 54.946173][ T5926] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 54.948462][ T5814] bond0: (slave bond_slave_0): interface is now down [ 54.948485][ T5814] bond0: (slave bond_slave_1): interface is now down [ 54.957643][ T5846] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 54.967568][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 54.972165][ T5815] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.972644][ T5814] bond0: (slave bond_slave_0): interface is now down [ 54.972663][ T5814] bond0: (slave bond_slave_1): interface is now down [ 54.972676][ T5814] bond0: (slave syz_tun): interface is now down [ 54.975506][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 54.975526][ T43] audit: type=1400 audit(1788719077.025:224): avc: denied { create } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.977806][ T43] audit: type=1400 audit(1788719077.025:225): avc: denied { ioctl } for pid=5925 comm="syz.1.14" path="socket:[8774]" dev="sockfs" ino=8774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.978171][ T43] audit: type=1400 audit(1788719077.025:226): avc: denied { bind } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.996861][ T5814] bond0: now running without any active interface! [ 54.999609][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.013574][ T43] audit: type=1400 audit(1788719077.055:227): avc: denied { setopt } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.014759][ T43] audit: type=1400 audit(1788719077.065:228): avc: denied { write } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.015664][ T43] audit: type=1400 audit(1788719077.065:229): avc: denied { read } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.016232][ T43] audit: type=1400 audit(1788719077.065:230): avc: denied { write } for pid=5925 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.024049][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.035738][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.044299][ T43] audit: type=1400 audit(1788719077.095:231): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 55.044495][ T43] audit: type=1400 audit(1788719077.095:232): avc: denied { read } for pid=5733 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.044742][ T43] audit: type=1400 audit(1788719077.095:233): avc: denied { open } for pid=5733 comm="syz-executor" path="/6/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.083971][ T5748] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.091060][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.096530][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.106788][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.113890][ T5127] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.133656][ T5815] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 55.137466][ T5815] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 55.137544][ T5815] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 55.137577][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.147329][ T5901] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 55.154871][ T5815] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 55.172128][ T5815] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 55.220469][ T5902] /dev/sg0: Can't lookup blockdev [ 55.230682][ T5927] bond0: (slave syz_tun): Releasing backup interface [ 55.410684][ T2427] usb 8-1: USB disconnect, device number 2 [ 55.412044][ T5921] SPCP8x5 ttyUSB0: failed to set control lines: -71 [ 55.412353][ T5921] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -19) [ 55.433298][ T2427] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 55.435163][ T2427] spcp8x5 8-1:1.0: device disconnected [ 56.255978][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.561885][ T5090] Bluetooth: hci2: command tx timeout [ 56.561986][ T5745] Bluetooth: hci3: command tx timeout [ 56.562039][ T5745] Bluetooth: hci1: command tx timeout [ 56.901204][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.970098][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.043577][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.202390][ T12] bridge_slave_1: left allmulticast mode [ 57.202494][ T12] bridge_slave_1: left promiscuous mode [ 57.204663][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.213909][ T12] bridge_slave_0: left allmulticast mode [ 57.213973][ T12] bridge_slave_0: left promiscuous mode [ 57.214315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.379860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.389415][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.397055][ T12] bond0 (unregistering): Released all slaves [ 57.413989][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.507151][ T2427] usb 5-1: USB disconnect, device number 2 [ 57.683557][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.750854][ T12] hsr_slave_0: left promiscuous mode [ 57.754374][ T12] hsr_slave_1: left promiscuous mode [ 57.755691][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.755711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.757783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.757797][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.772545][ T12] veth1_macvtap: left promiscuous mode [ 57.772671][ T12] veth0_macvtap: left promiscuous mode [ 57.772827][ T12] veth1_vlan: left promiscuous mode [ 57.773005][ T12] veth0_vlan: left promiscuous mode [ 57.968422][ T12] team0 (unregistering): Port device team_slave_1 removed [ 57.977974][ T12] team0 (unregistering): Port device team_slave_0 removed [ 58.040369][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.251092][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 58.641863][ T5090] Bluetooth: hci2: command tx timeout [ 58.646163][ T5090] Bluetooth: hci1: command tx timeout [ 58.646194][ T5090] Bluetooth: hci3: command tx timeout [ 68.305998][ T43] kauditd_printk_skb: 221 callbacks suppressed [ 68.306125][ T43] audit: type=1400 audit(1788719090.355:455): avc: denied { write } for pid=5978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.359641][ T43] audit: type=1400 audit(1788719090.405:456): avc: denied { write } for pid=5981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.296581][ T43] audit: type=1400 audit(1788719091.345:457): avc: denied { write } for pid=5984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.357249][ T43] audit: type=1400 audit(1788719091.405:458): avc: denied { write } for pid=5987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.924247][ T43] audit: type=1400 audit(1788719091.975:459): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.970649][ T43] audit: type=1400 audit(1788719092.015:460): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.144167][ T43] audit: type=1400 audit(1788719092.195:461): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.217047][ T43] audit: type=1400 audit(1788719092.265:462): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.523817][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.523893][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.650441][ T1040] cfg80211: failed to load regulatory.db [ 77.181279][ T43] audit: type=1400 audit(1788719099.225:463): avc: denied { create } for pid=6005 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.184466][ T43] audit: type=1400 audit(1788719099.235:464): avc: denied { create } for pid=6003 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.184892][ T43] audit: type=1400 audit(1788719099.235:465): avc: denied { ioctl } for pid=6003 comm="syz.2.18" path="socket:[8177]" dev="sockfs" ino=8177 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.185027][ T6004] syzkaller0: entered promiscuous mode [ 77.185039][ T6004] syzkaller0: entered allmulticast mode [ 77.188951][ T43] audit: type=1400 audit(1788719099.235:466): avc: denied { write } for pid=6005 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.193146][ T6008] jffs2: notice: (6008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.197552][ T43] audit: type=1400 audit(1788719099.245:467): avc: denied { mount } for pid=6006 comm="syz.3.19" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.203164][ T43] audit: type=1400 audit(1788719099.255:468): avc: denied { ioctl } for pid=6006 comm="syz.3.19" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x6f44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.218121][ T43] audit: type=1400 audit(1788719099.265:469): avc: denied { setopt } for pid=6003 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.221409][ T43] audit: type=1400 audit(1788719099.265:470): avc: denied { ioctl } for pid=6005 comm="syz.0.16" path="socket:[9743]" dev="sockfs" ino=9743 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.222877][ T43] audit: type=1400 audit(1788719099.275:471): avc: denied { ioctl } for pid=6005 comm="syz.0.16" path="net:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.294990][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.296248][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.301066][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.302970][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.303639][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.307084][ T43] audit: type=1400 audit(1788719099.355:472): avc: denied { create } for pid=6013 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.319473][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 77.353046][ T6017] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 77.436210][ T5090] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 255 [ 77.548643][ T6036] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.864751][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.864957][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.865074][ T6012] bridge_slave_0: entered allmulticast mode [ 77.866618][ T6012] bridge_slave_0: entered promiscuous mode [ 77.870917][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.871868][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.872187][ T6012] bridge_slave_1: entered allmulticast mode [ 77.874052][ T6012] bridge_slave_1: entered promiscuous mode [ 77.901463][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.904614][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.932621][ T6012] team0: Port device team_slave_0 added [ 77.934224][ T6012] team0: Port device team_slave_1 added [ 77.948962][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.948991][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.949039][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.949848][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.949856][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.949868][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.976993][ T6012] hsr_slave_0: entered promiscuous mode [ 77.977495][ T6012] hsr_slave_1: entered promiscuous mode [ 77.977808][ T6012] debugfs: 'hsr0' already exists in 'hsr' [ 77.977819][ T6012] Cannot create hsr debugfs directory [ 78.202192][ T6056] file system registered [ 78.306624][ T6064] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 78.361688][ T6074] 9pnet_virtio: no channels available for device syz [ 78.592818][ T6088] macvlan2: entered promiscuous mode [ 78.592929][ T6088] dummy0: entered promiscuous mode [ 78.593366][ T6088] macvlan2: entered allmulticast mode [ 78.593383][ T6088] dummy0: entered allmulticast mode [ 78.677747][ T6012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.692916][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.694093][ T6012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.705292][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.706462][ T6012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.721542][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.723214][ T6012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.742820][ T6012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.820943][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.838992][ T6012] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.845812][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.846049][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.857216][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.857494][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.991088][ T6115] Zero length message leads to an empty skb [ 79.221472][ T6012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.284624][ T6012] veth0_vlan: entered promiscuous mode [ 79.297674][ T6012] veth1_vlan: entered promiscuous mode [ 79.322668][ T6012] veth0_macvtap: entered promiscuous mode [ 79.327025][ T6012] veth1_macvtap: entered promiscuous mode [ 79.335703][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.344841][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.362830][ T5090] Bluetooth: hci0: command tx timeout [ 79.443913][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.443979][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.480701][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.480788][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.493871][ T6150] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 79.511746][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.511820][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.512122][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.512151][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.685591][ T6160] FAULT_INJECTION: forcing a failure. [ 79.685591][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 79.685663][ T6160] CPU: 2 UID: 0 PID: 6160 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 79.685686][ T6160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.685695][ T6160] Call Trace: [ 79.685699][ T6160] [ 79.685704][ T6160] dump_stack_lvl+0x100/0x190 [ 79.685726][ T6160] should_fail_ex.cold+0x5/0xa [ 79.685743][ T6160] should_failslab+0xc2/0x120 [ 79.685758][ T6160] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 79.685770][ T6160] ? sock_alloc_inode+0x26/0x2c0 [ 79.685785][ T6160] ? __pfx_sock_alloc_inode+0x10/0x10 [ 79.685798][ T6160] sock_alloc_inode+0x26/0x2c0 [ 79.685811][ T6160] ? __pfx_sock_alloc_inode+0x10/0x10 [ 79.685824][ T6160] alloc_inode+0x68/0x250 [ 79.685841][ T6160] sock_alloc+0x44/0x280 [ 79.685852][ T6160] ? security_socket_create+0x7f/0x250 [ 79.685870][ T6160] __sock_create+0xc2/0x860 [ 79.685888][ T6160] __sys_socket+0x14d/0x260 [ 79.685903][ T6160] ? __pfx___sys_socket+0x10/0x10 [ 79.685921][ T6160] __x64_sys_socket+0x72/0xb0 [ 79.685935][ T6160] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.685949][ T6160] do_syscall_64+0x123/0x790 [ 79.685963][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.685974][ T6160] RIP: 0033:0x7f153159e159 [ 79.685984][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.685994][ T6160] RSP: 002b:00007f15324f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 79.686005][ T6160] RAX: ffffffffffffffda RBX: 00007f1531825fa0 RCX: 00007f153159e159 [ 79.686012][ T6160] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 79.686018][ T6160] RBP: 00007f1531635024 R08: 0000000000000000 R09: 0000000000000000 [ 79.686025][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.686031][ T6160] R13: 00007f1531826038 R14: 00007f1531825fa0 R15: 00007fff098b5618 [ 79.686044][ T6160] [ 79.688349][ T6160] socket: no more sockets [ 79.941748][ T2427] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.102942][ T2427] usb 8-1: unable to get BOS descriptor or descriptor too short [ 80.103055][ T2427] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 80.104691][ T2427] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 80.109003][ T2427] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.109024][ T2427] usb 8-1: Product: syz [ 80.109034][ T2427] usb 8-1: Manufacturer: Э [ 80.109045][ T2427] usb 8-1: SerialNumber: syz [ 80.567827][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 80.600018][ T6204] macvlan3: entered promiscuous mode [ 80.600171][ T6204] macvlan3: entered allmulticast mode [ 80.631308][ T2427] usb 8-1: USB disconnect, device number 3 [ 80.724159][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.737175][ T6208] loop0: detected capacity change from 0 to 4095 [ 80.791368][ T6208] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 80.791430][ T6208] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 80.793064][ T6208] loop0: [ 81.443561][ T5090] Bluetooth: hci0: command tx timeout [ 81.592688][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.59'. [ 82.271729][ T1040] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.442979][ T1040] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 82.449580][ T1040] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 82.453560][ T1040] usb 8-1: config 1 has no interface number 0 [ 82.458083][ T1040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.462574][ T1040] usb 8-1: Product: syz [ 82.464294][ T1040] usb 8-1: Manufacturer: syz [ 82.466267][ T1040] usb 8-1: SerialNumber: syz [ 82.476524][ T1040] usb 8-1: 3:1 : does not exist [ 82.476585][ T1040] usb 8-1: 3:2 : does not exist [ 82.677882][ T43] kauditd_printk_skb: 93 callbacks suppressed [ 82.678135][ T43] audit: type=1400 audit(1788719104.725:566): avc: denied { setattr } for pid=6233 comm="syz.3.61" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.683887][ T1040] usb 8-1: USB disconnect, device number 4 [ 82.845348][ T43] audit: type=1400 audit(1788719104.895:567): avc: denied { mount } for pid=6235 comm="syz.2.62" name="/" dev="pstore" ino=4898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 83.105591][ T6243] syz_tun: entered allmulticast mode [ 83.105592][ T43] audit: type=1400 audit(1788719105.155:568): avc: denied { setopt } for pid=6242 comm="syz.2.65" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.249213][ T43] audit: type=1400 audit(1788719105.295:569): avc: denied { mount } for pid=6245 comm="syz.3.66" name="/" dev="hugetlbfs" ino=11581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 83.262059][ T43] audit: type=1400 audit(1788719105.315:570): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 83.359923][ T43] audit: type=1400 audit(1788719105.405:571): avc: denied { bind } for pid=6249 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.370890][ T43] audit: type=1400 audit(1788719105.415:572): avc: denied { write } for pid=6249 comm="syz.3.68" path="socket:[10964]" dev="sockfs" ino=10964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.370929][ T6250] Bluetooth: MGMT ver 1.23 [ 83.521786][ T5750] Bluetooth: hci0: command tx timeout [ 83.683176][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.844553][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 83.848030][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.848073][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.869727][ T9] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 83.869933][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 83.869977][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 83.873790][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 83.873870][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 83.883905][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 83.885687][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 83.891375][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 83.900706][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 84.062594][ T43] audit: type=1400 audit(1788719106.105:573): avc: denied { read } for pid=6254 comm="syz.2.70" path="socket:[12311]" dev="sockfs" ino=12311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.067839][ T6253] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 84.091345][ T6253] veth3: entered allmulticast mode [ 84.293620][ T1040] usb 8-1: USB disconnect, device number 5 [ 84.303874][ T1040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 84.313281][ T1040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 84.313834][ T1040] keyspan 8-1:1.0: device disconnected [ 85.362978][ T43] audit: type=1400 audit(1788719107.415:574): avc: denied { mounton } for pid=6262 comm="syz.3.71" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 85.391350][ T6269] erofs (device sr0): cannot find valid erofs superblock [ 85.442602][ T5090] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 85.460457][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 85.460503][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 85.463804][ T43] audit: type=1400 audit(1788719107.515:575): avc: denied { setopt } for pid=6270 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.468073][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 85.603202][ T5090] Bluetooth: hci0: command 0x0419 tx timeout [ 85.791850][ T5815] usb 44-1: SetAddress Request (2) to port 0 [ 85.792178][ T5815] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.916288][ T6271] vhci_hcd: connection reset by peer [ 85.923340][ T12] vhci_hcd vhci_hcd.3: stop threads [ 85.923702][ T12] vhci_hcd vhci_hcd.3: release socket [ 85.928081][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 86.538385][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 86.596731][ T6279] FAULT_INJECTION: forcing a failure. [ 86.596731][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.596836][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 86.596871][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.596883][ T6279] Call Trace: [ 86.596891][ T6279] [ 86.596899][ T6279] dump_stack_lvl+0x100/0x190 [ 86.596933][ T6279] should_fail_ex.cold+0x5/0xa [ 86.596963][ T6279] _copy_from_user+0x2e/0xd0 [ 86.596996][ T6279] __sys_bpf+0x2f5/0x4a30 [ 86.597033][ T6279] ? __pfx___sys_bpf+0x10/0x10 [ 86.597051][ T6279] ? find_held_lock+0x2b/0x80 [ 86.597080][ T6279] ? futex_wake+0x4ea/0x5e0 [ 86.597139][ T6279] ? __lock_acquire+0x4c5/0x1ec0 [ 86.597162][ T6279] ? __sys_sendto+0x2a8/0x4e0 [ 86.597207][ T6279] ? __x64_sys_futex+0x34f/0x4d0 [ 86.597234][ T6279] ? __x64_sys_futex+0x358/0x4d0 [ 86.597260][ T6279] ? __fget_files+0x21f/0x3d0 [ 86.597284][ T6279] ? xfd_validate_state+0x129/0x190 [ 86.597308][ T6279] ? __x64_sys_bpf+0xce/0x140 [ 86.597326][ T6279] __x64_sys_bpf+0xce/0x140 [ 86.597346][ T6279] ? do_syscall_64+0xae/0x790 [ 86.597371][ T6279] do_syscall_64+0x123/0x790 [ 86.597397][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.597419][ T6279] RIP: 0033:0x7f153159e159 [ 86.597438][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.597456][ T6279] RSP: 002b:00007f15324f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.597475][ T6279] RAX: ffffffffffffffda RBX: 00007f1531825fa0 RCX: 00007f153159e159 [ 86.597489][ T6279] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 86.597501][ T6279] RBP: 00007f1531635024 R08: 0000000000000000 R09: 0000000000000000 [ 86.597511][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.597522][ T6279] R13: 00007f1531826038 R14: 00007f1531825fa0 R15: 00007fff098b5618 [ 86.597547][ T6279] [ 86.790139][ T6289] bpf: Bad value for 'uid' [ 86.897183][ T6292] ffs_data_put(): freeing [ 87.681790][ T5090] Bluetooth: hci0: command 0x0419 tx timeout [ 88.476912][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 88.477019][ T43] audit: type=1400 audit(1788719110.525:592): avc: denied { create } for pid=6313 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.483822][ T43] audit: type=1400 audit(1788719110.535:593): avc: denied { write } for pid=6313 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.485558][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.485579][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.485593][ T6314] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 88.485609][ T6314] iwpm_hello_cb: Unable to parse nlmsg [ 88.939318][ T43] audit: type=1400 audit(1788719110.985:594): avc: denied { execute } for pid=6332 comm="syz.3.91" dev="tmpfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.939697][ T6333] process 'syz.3.91' launched '/dev/fd/3' with NULL argv: empty string added [ 88.940724][ T43] audit: type=1400 audit(1788719110.985:595): avc: denied { execute_no_trans } for pid=6332 comm="syz.3.91" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFF03202864656C6574656429 dev="tmpfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.990573][ T43] audit: type=1400 audit(1788719111.035:596): avc: denied { create } for pid=6336 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.991317][ T43] audit: type=1400 audit(1788719111.035:597): avc: denied { ioctl } for pid=6336 comm="syz.2.93" path="socket:[12421]" dev="sockfs" ino=12421 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.668338][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.668394][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.669079][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.669091][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.669164][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.669173][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.669244][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 90.704341][ T43] audit: type=1400 audit(1788719112.755:598): avc: denied { ioctl } for pid=6382 comm="syz.3.109" path="socket:[9037]" dev="sockfs" ino=9037 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.851537][ T43] audit: type=1400 audit(1788719112.895:599): avc: denied { ioctl } for pid=6380 comm="syz.2.108" path="socket:[11037]" dev="sockfs" ino=11037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.868781][ T43] audit: type=1400 audit(1788719112.915:600): avc: denied { map } for pid=6380 comm="syz.2.108" path="socket:[11040]" dev="sockfs" ino=11040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.892814][ T5815] usb 44-1: device descriptor read/8, error -110 [ 91.041469][ T43] audit: type=1400 audit(1788719113.085:601): avc: denied { ioctl } for pid=6389 comm="syz.2.111" path="socket:[12542]" dev="sockfs" ino=12542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.285841][ T5815] usb usb44-port1: attempt power cycle [ 91.853195][ T5815] usb usb44-port1: unable to enumerate USB device [ 92.072239][ T6406] fuse: fd is not a fuse device [ 92.838949][ T6425] __nla_validate_parse: 29 callbacks suppressed [ 92.839229][ T6425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.009190][ T6428] warning: `syz.2.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.056759][ T6430] fuse: fd is not a fuse device [ 93.057653][ T6430] fuse: fd is not a fuse device [ 93.369909][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 93.369966][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 93.482259][ T6440] fuse: fd is not a fuse device [ 93.484450][ T6442] tmpfs: Bad value for 'mpol' [ 93.595938][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 93.729458][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.735268][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.739402][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.743096][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.743404][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.123084][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.186836][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.186995][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.187200][ T6451] bridge_slave_0: entered allmulticast mode [ 94.187923][ T6451] bridge_slave_0: entered promiscuous mode [ 94.189261][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.189323][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.189386][ T6451] bridge_slave_1: entered allmulticast mode [ 94.190110][ T6451] bridge_slave_1: entered promiscuous mode [ 94.232323][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.243457][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.245436][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.263391][ T6451] team0: Port device team_slave_0 added [ 94.264814][ T6451] team0: Port device team_slave_1 added [ 94.280997][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.281043][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.281087][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.282090][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.282098][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.282110][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.308410][ T6451] hsr_slave_0: entered promiscuous mode [ 94.309384][ T6451] hsr_slave_1: entered promiscuous mode [ 94.309723][ T6451] debugfs: 'hsr0' already exists in 'hsr' [ 94.309737][ T6451] Cannot create hsr debugfs directory [ 94.396479][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 94.396547][ T43] audit: type=1400 audit(1788719116.445:608): avc: denied { connect } for pid=6475 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.433333][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.467893][ T6451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.470762][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 94.479057][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.480025][ T6451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.491569][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.492604][ T6451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.503970][ T6478] hfs: unable to load iocharset "io#harset ÿ" [ 94.503984][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.504485][ T6451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.517107][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.544038][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.574125][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.574260][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.574813][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.574889][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.579213][ T6491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.142'. [ 94.709802][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.749942][ T43] audit: type=1400 audit(1788719116.795:609): avc: denied { name_bind } for pid=6502 comm="syz.3.146" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 94.757379][ T43] audit: type=1400 audit(1788719116.805:610): avc: denied { bind } for pid=6502 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.758037][ T43] audit: type=1400 audit(1788719116.805:611): avc: denied { name_bind } for pid=6502 comm="syz.3.146" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.758062][ T43] audit: type=1400 audit(1788719116.805:612): avc: denied { node_bind } for pid=6502 comm="syz.3.146" saddr=::ffff:224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 94.758252][ T43] audit: type=1400 audit(1788719116.805:613): avc: denied { write } for pid=6502 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.788039][ T43] audit: type=1400 audit(1788719116.835:614): avc: denied { watch watch_reads } for pid=6502 comm="syz.3.146" path="/68" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.815068][ T13] bridge_slave_1: left allmulticast mode [ 94.815134][ T13] bridge_slave_1: left promiscuous mode [ 94.819997][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.834058][ T13] bridge_slave_0: left allmulticast mode [ 94.834112][ T13] bridge_slave_0: left promiscuous mode [ 94.834243][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.858134][ T43] audit: type=1400 audit(1788719116.905:615): avc: denied { mounton } for pid=6504 comm="syz.3.147" path="/69/proc" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.958868][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.968625][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.975781][ T13] bond0 (unregistering): Released all slaves [ 94.992466][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.996769][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.007793][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.013936][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.014762][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.018289][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.018338][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.054106][ T43] audit: type=1400 audit(1788719117.105:616): avc: denied { create } for pid=6510 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.056294][ T43] audit: type=1400 audit(1788719117.105:617): avc: denied { setopt } for pid=6510 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.218880][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 95.259405][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.283889][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.340627][ T13] hsr_slave_0: left promiscuous mode [ 95.344065][ T13] hsr_slave_1: left promiscuous mode [ 95.346764][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.350287][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.355032][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.359720][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.368262][ T13] veth1_macvtap: left promiscuous mode [ 95.370482][ T13] veth0_macvtap: left promiscuous mode [ 95.374957][ T13] veth1_vlan: left promiscuous mode [ 95.376747][ T13] veth0_vlan: left promiscuous mode [ 95.543134][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.556382][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.564738][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 95.573691][ T13] team0 (unregistering): Port device team_slave_0 removed [ 95.647151][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 95.661415][ T6560] ======================================================= [ 95.661415][ T6560] WARNING: The mand mount option has been deprecated and [ 95.661415][ T6560] and is ignored by this kernel. Remove the mand [ 95.661415][ T6560] option from the mount to silence this warning. [ 95.661415][ T6560] ======================================================= [ 95.661709][ T6560] 9p: Bad value for 'rfdno' [ 95.719005][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.763277][ T5090] Bluetooth: hci4: command tx timeout [ 95.853613][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 95.938128][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 95.977189][ T6451] veth0_vlan: entered promiscuous mode [ 95.990586][ T6451] veth1_vlan: entered promiscuous mode [ 96.026453][ T6451] veth0_macvtap: entered promiscuous mode [ 96.030544][ T6451] veth1_macvtap: entered promiscuous mode [ 96.047449][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.064688][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 96.070283][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.075454][ T6541] ceph: No mds server is up or the cluster is laggy [ 96.117681][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.121924][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.122737][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.128073][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.129331][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.247255][ T6594] @0Ù: renamed from dummy0 (while UP) [ 96.308707][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.314615][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.314671][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.347186][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 96.347258][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 96.351492][ T6608] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 96.351512][ T6608] iwpm_hello_cb: Unable to parse nlmsg [ 96.351753][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.352029][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.352062][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.352092][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.360300][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.360315][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.571205][ T5814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.670163][ T5814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.717080][ T6631] ref_ctr increment failed for inode: 0x1e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801cf6e600 [ 96.724540][ T5814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.740468][ T6631] bridge_slave_0: left allmulticast mode [ 96.740550][ T6631] bridge_slave_0: left promiscuous mode [ 96.740842][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.754482][ T6631] bridge_slave_1: left allmulticast mode [ 96.754567][ T6631] bridge_slave_1: left promiscuous mode [ 96.754992][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.765773][ T6631] bond0: (slave bond_slave_0): Releasing backup interface [ 96.776670][ T6631] bond0: (slave bond_slave_1): Releasing backup interface [ 96.790133][ T6631] team0: Port device team_slave_0 removed [ 96.796934][ T6631] team0: Port device team_slave_1 removed [ 96.797893][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.797906][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.816378][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.816446][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.823336][ T6631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.829450][ T6638] overlayfs: failed to clone upperpath [ 96.860558][ T6630] uprobe: syz.4.168:6630 failed to unregister, leaking uprobe [ 96.900370][ T5814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.995876][ T6648] xt_l2tp: v2 doesn't support IP mode [ 97.007812][ T6648] team_slave_1: entered promiscuous mode [ 97.008430][ T6648] fuse: fd is not a fuse device [ 97.149586][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.153609][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.157294][ T6589] bridge_slave_0: entered allmulticast mode [ 97.160955][ T6589] bridge_slave_0: entered promiscuous mode [ 97.176585][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.176825][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.176972][ T6589] bridge_slave_1: entered allmulticast mode [ 97.177901][ T6589] bridge_slave_1: entered promiscuous mode [ 97.221087][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.228580][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.252583][ T5814] bridge_slave_1: left allmulticast mode [ 97.252749][ T5814] bridge_slave_1: left promiscuous mode [ 97.253374][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.256068][ T5814] bridge_slave_0: left allmulticast mode [ 97.256091][ T5814] bridge_slave_0: left promiscuous mode [ 97.256242][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.415538][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.428620][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.433556][ T5814] bond0 (unregistering): Released all slaves [ 97.452223][ T6589] team0: Port device team_slave_0 added [ 97.460183][ T6589] team0: Port device team_slave_1 added [ 97.501109][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.502723][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.502736][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.502764][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.508842][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.508855][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.508868][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.638170][ T6589] hsr_slave_0: entered promiscuous mode [ 97.639118][ T6589] hsr_slave_1: entered promiscuous mode [ 97.841726][ T5090] Bluetooth: hci4: command tx timeout [ 97.848856][ T6678] netlink: 'syz.4.175': attribute type 32 has an invalid length. [ 97.848915][ T6678] __nla_validate_parse: 1 callbacks suppressed [ 97.848974][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 97.864442][ T6647] team_slave_1: left promiscuous mode [ 97.900917][ T6678] bond1: Setting coupled_control to off (0) [ 97.904388][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.928898][ T5142] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 97.928970][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 97.929021][ T5142] loop0: [ 98.021887][ T5814] hsr_slave_0: left promiscuous mode [ 98.040664][ T5814] hsr_slave_1: left promiscuous mode [ 98.041379][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.041396][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.049386][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.049454][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.059711][ T5814] veth1_macvtap: left promiscuous mode [ 98.059831][ T5814] veth0_macvtap: left promiscuous mode [ 98.059998][ T5814] veth1_vlan: left promiscuous mode [ 98.060755][ T5814] veth0_vlan: left promiscuous mode [ 98.165990][ T5090] Bluetooth: hci2: command tx timeout [ 98.390295][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 98.414722][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 98.680993][ T6696] syz_tun: entered allmulticast mode [ 98.715348][ T6589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.726614][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.728567][ T6695] syz_tun: left allmulticast mode [ 98.730059][ T6589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.751126][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.760578][ T6589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.773554][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.775191][ T6589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.813031][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.953512][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.973757][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.018340][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.035995][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.036187][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.044233][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.044343][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.305367][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 99.556370][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 99.602236][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.629647][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 99.629754][ T43] audit: type=1400 audit(1788719121.675:663): avc: denied { allowed } for pid=6748 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.648873][ T6750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.186'. [ 99.852961][ T6589] veth0_vlan: entered promiscuous mode [ 99.871354][ T6589] veth1_vlan: entered promiscuous mode [ 99.905379][ T6589] veth0_macvtap: entered promiscuous mode [ 99.911236][ T6589] veth1_macvtap: entered promiscuous mode [ 99.929437][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.932067][ T5090] Bluetooth: hci4: command tx timeout [ 99.938640][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.984471][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.984548][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.984991][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.985037][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.026075][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.026168][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.062598][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.062646][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.180395][ T6771] raw_sendmsg: syz.2.193 forgot to set AF_INET. Fix it! [ 100.182010][ T5090] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 100.247812][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 100.252933][ T5090] Bluetooth: hci2: command tx timeout [ 100.461825][ T58] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 100.461855][ T851] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 100.613880][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'. [ 100.622790][ T58] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 100.624136][ T851] usb 10-1: unable to get BOS descriptor or descriptor too short [ 100.625384][ T58] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.626269][ T851] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.627113][ T851] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 100.627142][ T851] usb 10-1: can't read configurations, error -71 [ 100.631049][ T58] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.633088][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.633104][ T58] usb 9-1: Product: syz [ 100.633112][ T58] usb 9-1: Manufacturer: syz [ 100.633119][ T58] usb 9-1: SerialNumber: syz [ 100.642635][ T58] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 100.647084][ T58] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 100.649479][ T58] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 100.861061][ T43] audit: type=1400 audit(1788719122.905:664): avc: denied { accept } for pid=6787 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.865187][ T5090] Bluetooth: hci3: unexpected subevent 0x12 length: 30 > 5 [ 101.040381][ T6800] could not open pipe file descriptor [ 101.114283][ T6802] netlink: 80 bytes leftover after parsing attributes in process `syz.2.203'. [ 101.471894][ T851] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 101.473729][ T6810] netlink: 316 bytes leftover after parsing attributes in process `syz.3.206'. [ 101.473744][ T6810] netlink: 316 bytes leftover after parsing attributes in process `syz.3.206'. [ 101.632515][ T851] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 101.635840][ T851] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.635881][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.659433][ T851] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 101.659866][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 101.659992][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 101.671990][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 101.672059][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 101.688904][ T851] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 101.713742][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 101.714041][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 101.724971][ T851] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 101.728930][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.729356][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.003761][ T5090] Bluetooth: hci4: command tx timeout [ 102.203698][ T6845] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 102.321819][ T5090] Bluetooth: hci2: command tx timeout [ 102.748538][ T6850] netlink: 80 bytes leftover after parsing attributes in process `syz.3.218'. [ 102.764794][ T5846] usb 10-1: USB disconnect, device number 3 [ 102.770003][ T5846] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 102.778817][ T5846] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 102.785840][ T5846] keyspan 10-1:1.0: device disconnected [ 103.197785][ T43] audit: type=1400 audit(1788719125.245:665): avc: denied { create } for pid=6861 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.205352][ T43] audit: type=1400 audit(1788719125.255:666): avc: denied { ioctl } for pid=6861 comm="syz.2.222" path="socket:[13980]" dev="sockfs" ino=13980 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.215518][ T43] audit: type=1400 audit(1788719125.275:667): avc: denied { create } for pid=6861 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.219474][ T6862] 9p: Bad value for 'rfdno' [ 103.221811][ T43] audit: type=1400 audit(1788719125.275:668): avc: denied { ioctl } for pid=6861 comm="syz.2.222" path="socket:[12905]" dev="sockfs" ino=12905 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.221839][ T43] audit: type=1400 audit(1788719125.275:669): avc: denied { write } for pid=6861 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.400389][ T43] audit: type=1400 audit(1788719125.445:670): avc: denied { accept } for pid=6865 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.446936][ T43] audit: type=1400 audit(1788719125.495:671): avc: denied { create } for pid=6881 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.543899][ T6894] fuse: Bad value for 'fd' [ 103.548780][ T6893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.233'. [ 103.560528][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.562805][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.610811][ T43] audit: type=1400 audit(1788719125.655:672): avc: denied { mmap_zero } for pid=6895 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 103.676931][ T6878] netlink: 108 bytes leftover after parsing attributes in process `syz.5.227'. [ 104.002626][ T6774] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 104.004095][ T6774] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 104.004122][ T6774] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 104.017114][ T6774] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 104.023693][ T6774] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 104.026807][ T851] usb 9-1: USB disconnect, device number 2 [ 104.047336][ T851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 104.051119][ T851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 104.051908][ T851] ti_usb_3410_5052 9-1:2.0: device disconnected [ 104.275585][ T6905] FAULT_INJECTION: forcing a failure. [ 104.275585][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 104.275678][ T6905] CPU: 3 UID: 0 PID: 6905 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(full) [ 104.275716][ T6905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.275729][ T6905] Call Trace: [ 104.275737][ T6905] [ 104.275747][ T6905] dump_stack_lvl+0x100/0x190 [ 104.275803][ T6905] should_fail_ex.cold+0x5/0xa [ 104.275834][ T6905] should_failslab+0xc2/0x120 [ 104.275866][ T6905] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 104.275889][ T6905] ? __kasan_kmalloc+0xaa/0xb0 [ 104.275912][ T6905] ? snd_timer_instance_new+0x65/0x350 [ 104.275949][ T6905] kstrdup+0x51/0xe0 [ 104.275979][ T6905] snd_timer_instance_new+0x65/0x350 [ 104.276002][ T6905] snd_seq_timer_open+0x1d4/0x5c0 [ 104.276039][ T6905] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 104.276070][ T6905] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.276111][ T6905] ? mark_held_locks+0x40/0x70 [ 104.276134][ T6905] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.276184][ T6905] queue_use+0xdc/0x1f0 [ 104.276213][ T6905] snd_seq_queue_alloc+0x2e5/0x540 [ 104.276246][ T6905] snd_seq_ioctl_create_queue+0xa9/0x370 [ 104.276283][ T6905] call_seq_client_ctl+0xa3/0x130 [ 104.276311][ T6905] snd_seq_kernel_client_ctl+0x35/0x50 [ 104.276335][ T6905] alloc_seq_queue+0xdb/0x180 [ 104.276360][ T6905] ? __pfx_alloc_seq_queue+0x10/0x10 [ 104.276393][ T6905] ? find_held_lock+0x2b/0x80 [ 104.276423][ T6905] ? mark_held_locks+0x40/0x70 [ 104.276448][ T6905] snd_seq_oss_open+0x2b2/0xa10 [ 104.276476][ T6905] odev_open+0x6f/0x90 [ 104.276495][ T6905] ? __pfx_odev_open+0x10/0x10 [ 104.276516][ T6905] soundcore_open+0x2e3/0x5a0 [ 104.276540][ T6905] ? __pfx_soundcore_open+0x10/0x10 [ 104.276562][ T6905] chrdev_open+0x234/0x6a0 [ 104.276587][ T6905] ? __pfx_chrdev_open+0x10/0x10 [ 104.276611][ T6905] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 104.276645][ T6905] do_dentry_open+0x6ab/0x14d0 [ 104.276665][ T6905] ? __pfx_chrdev_open+0x10/0x10 [ 104.276693][ T6905] vfs_open+0x82/0x3f0 [ 104.276722][ T6905] path_openat+0x19fa/0x2440 [ 104.276751][ T6905] ? __pfx_path_openat+0x10/0x10 [ 104.276782][ T6905] do_file_open+0x20e/0x430 [ 104.276809][ T6905] ? __pfx_do_file_open+0x10/0x10 [ 104.276851][ T6905] ? _raw_spin_unlock+0x28/0x50 [ 104.276872][ T6905] ? alloc_fd+0x471/0x7a0 [ 104.276903][ T6905] do_sys_openat2+0x10f/0x1e0 [ 104.276930][ T6905] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.276965][ T6905] __x64_sys_openat+0x12d/0x210 [ 104.276993][ T6905] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.277017][ T6905] ? kmem_cache_free+0x127/0x6c0 [ 104.277055][ T6905] do_syscall_64+0x123/0x790 [ 104.277083][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.277111][ T6905] RIP: 0033:0x7f43f5f9e159 [ 104.277130][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.277152][ T6905] RSP: 002b:00007f43f6e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.277175][ T6905] RAX: ffffffffffffffda RBX: 00007f43f6225fa0 RCX: 00007f43f5f9e159 [ 104.277191][ T6905] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 104.277206][ T6905] RBP: 00007f43f6035024 R08: 0000000000000000 R09: 0000000000000000 [ 104.277219][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.277233][ T6905] R13: 00007f43f6226038 R14: 00007f43f6225fa0 R15: 00007ffcf3548f68 [ 104.277262][ T6905] [ 104.402633][ T5090] Bluetooth: hci2: command tx timeout [ 104.504061][ T6926] netlink: 52 bytes leftover after parsing attributes in process `syz.3.247'. [ 104.504491][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.505158][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.860625][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 104.862559][ T43] audit: type=1400 audit(1788719126.905:681): avc: denied { append } for pid=6936 comm="syz.5.250" name="cec5" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.874470][ T6937] macvlan2: entered promiscuous mode [ 104.874497][ T6937] dummy0: entered promiscuous mode [ 104.874711][ T6937] macvlan2: entered allmulticast mode [ 104.874728][ T6937] dummy0: entered allmulticast mode [ 105.216600][ T43] audit: type=1400 audit(1788719127.265:682): avc: denied { block_suspend } for pid=6957 comm="syz.3.257" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.335463][ T6962] netlink: 'syz.3.259': attribute type 2 has an invalid length. [ 105.407944][ T6967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.261'. [ 105.641945][ T6980] FAULT_INJECTION: forcing a failure. [ 105.641945][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 105.641999][ T6980] CPU: 2 UID: 0 PID: 6980 Comm: syz.5.267 Not tainted syzkaller #0 PREEMPT(full) [ 105.642025][ T6980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.642037][ T6980] Call Trace: [ 105.642043][ T6980] [ 105.642051][ T6980] dump_stack_lvl+0x100/0x190 [ 105.642084][ T6980] should_fail_ex.cold+0x5/0xa [ 105.642108][ T6980] should_failslab+0xc2/0x120 [ 105.642130][ T6980] kmem_cache_alloc_noprof+0x92/0x6a0 [ 105.642148][ T6980] ? d_instantiate+0x8a/0xb0 [ 105.642172][ T6980] ? alloc_empty_file+0x5b/0x1c0 [ 105.642198][ T6980] alloc_empty_file+0x5b/0x1c0 [ 105.642220][ T6980] alloc_file_pseudo+0x183/0x290 [ 105.642244][ T6980] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 105.642266][ T6980] ? alloc_fd+0x471/0x7a0 [ 105.642295][ T6980] sock_alloc_file+0x50/0x210 [ 105.642314][ T6980] __sys_socket+0x1c0/0x260 [ 105.642336][ T6980] ? fput+0x7c/0x100 [ 105.642387][ T6980] ? __pfx___sys_socket+0x10/0x10 [ 105.642410][ T6980] ? ksys_write+0x1ac/0x250 [ 105.642425][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 105.642443][ T6980] __x64_sys_socket+0x72/0xb0 [ 105.642464][ T6980] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.642484][ T6980] do_syscall_64+0x123/0x790 [ 105.642508][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.642527][ T6980] RIP: 0033:0x7f79dfd9e159 [ 105.642548][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.642568][ T6980] RSP: 002b:00007f79e0c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.642592][ T6980] RAX: ffffffffffffffda RBX: 00007f79e0025fa0 RCX: 00007f79dfd9e159 [ 105.642605][ T6980] RDX: 0000000000000087 RSI: 0000000000000003 RDI: 000000000000000a [ 105.642615][ T6980] RBP: 00007f79dfe35024 R08: 0000000000000000 R09: 0000000000000000 [ 105.642625][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.642635][ T6980] R13: 00007f79e0026038 R14: 00007f79e0025fa0 R15: 00007ffe5d4af0b8 [ 105.642659][ T6980] [ 105.735180][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 105.735619][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 105.735694][ T6983] bridge_slave_1: left allmulticast mode [ 105.735715][ T6983] bridge_slave_1: left promiscuous mode [ 105.735997][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.744901][ T6983] bridge_slave_0: left allmulticast mode [ 105.744924][ T6983] bridge_slave_0: left promiscuous mode [ 105.746750][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.507075][ T7002] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 106.616829][ T7011] virtio-fs: tag not found [ 106.629168][ T43] audit: type=1400 audit(1788719128.675:683): avc: denied { write } for pid=7007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.699346][ T43] audit: type=1400 audit(1788719128.745:684): avc: denied { write } for pid=7016 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.773273][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.836647][ T43] audit: type=1400 audit(1788719128.885:685): avc: denied { create } for pid=7023 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.015289][ T43] audit: type=1400 audit(1788719129.065:686): avc: denied { write } for pid=7028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.102447][ T43] audit: type=1400 audit(1788719129.145:687): avc: denied { write } for pid=7031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.546314][ T43] audit: type=1400 audit(1788719129.595:688): avc: denied { append } for pid=7039 comm="syz.5.287" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.619709][ T7042] netlink: 'syz.5.287': attribute type 49 has an invalid length. [ 107.909771][ T7063] openvswitch: netlink: Missing valid actions attribute. [ 107.909923][ T7063] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.912421][ T43] audit: type=1400 audit(1788719129.965:689): avc: denied { write } for pid=7062 comm="syz.5.292" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.997908][ T43] audit: type=1400 audit(1788719130.045:690): avc: denied { prog_load } for pid=7066 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.014475][ T7067] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 108.014548][ T7067] ref_ctr increment failed for inode: 0xa6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803581bfc0 [ 108.025372][ T7066] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 108.025437][ T7066] ref_ctr decrement failed for inode: 0xa6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803581bfc0 [ 108.025515][ T7066] uprobe: syz.5.294:7066 failed to unregister, leaking uprobe [ 108.101028][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 108.275407][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7085 comm=syz.3.301 [ 108.318678][ T7087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44817 sclass=netlink_route_socket pid=7087 comm=syz.3.302 [ 108.484380][ T7098] FAULT_INJECTION: forcing a failure. [ 108.484380][ T7098] name fail_futex, interval 1, probability 0, space 0, times 1 [ 108.489183][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.5.304 Not tainted syzkaller #0 PREEMPT(full) [ 108.489229][ T7098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.489253][ T7098] Call Trace: [ 108.489261][ T7098] [ 108.489268][ T7098] dump_stack_lvl+0x100/0x190 [ 108.489301][ T7098] should_fail_ex.cold+0x5/0xa [ 108.489330][ T7098] get_futex_key+0x1d0/0x14f0 [ 108.489358][ T7098] ? __pfx_get_futex_key+0x10/0x10 [ 108.489389][ T7098] futex_wait_setup+0x91/0x540 [ 108.489425][ T7098] __futex_wait+0x19f/0x300 [ 108.489463][ T7098] ? __pfx___futex_wait+0x10/0x10 [ 108.489491][ T7098] ? __pfx_try_to_wake_up+0x10/0x10 [ 108.489512][ T7098] ? futex_hash+0x311/0x400 [ 108.489536][ T7098] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.489566][ T7098] ? find_held_lock+0x2b/0x80 [ 108.489590][ T7098] ? futex_wake+0x4ea/0x5e0 [ 108.489624][ T7098] futex_wait+0xe6/0x370 [ 108.489652][ T7098] ? __pfx_futex_wait+0x10/0x10 [ 108.489692][ T7098] do_futex+0x265/0x440 [ 108.489717][ T7098] ? __pfx_do_futex+0x10/0x10 [ 108.489746][ T7098] __x64_sys_futex+0x34f/0x4d0 [ 108.489772][ T7098] ? fdget_pos+0x2c0/0x380 [ 108.489795][ T7098] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.489818][ T7098] ? ksys_read+0x1ac/0x250 [ 108.489836][ T7098] ? __pfx_ksys_read+0x10/0x10 [ 108.489862][ T7098] do_syscall_64+0x123/0x790 [ 108.489886][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.489907][ T7098] RIP: 0033:0x7f79dfd9e159 [ 108.489923][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.489940][ T7098] RSP: 002b:00007f79e0c860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.489963][ T7098] RAX: ffffffffffffffda RBX: 00007f79e0025fa8 RCX: 00007f79dfd9e159 [ 108.489977][ T7098] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79e0025fa8 [ 108.489988][ T7098] RBP: 00007f79e0025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.489999][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.490010][ T7098] R13: 00007f79e0026038 R14: 00007ffe5d4aefd0 R15: 00007ffe5d4af0b8 [ 108.490035][ T7098] [ 108.709765][ T7101] kvm: pic: non byte write [ 109.015968][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 109.587013][ T7128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=7128 comm=syz.5.313 [ 109.599616][ T7133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=7133 comm=syz.5.313 [ 109.779829][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 109.869385][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 109.870747][ T43] audit: type=1400 audit(1788719131.915:705): avc: denied { write } for pid=7147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.947275][ T43] audit: type=1400 audit(1788719131.995:706): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.079635][ T43] audit: type=1400 audit(1788719132.125:707): avc: denied { write } for pid=7159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.081788][ T5090] Bluetooth: hci1: command tx timeout [ 110.167517][ T43] audit: type=1400 audit(1788719132.215:708): avc: denied { write } for pid=7162 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.326231][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.322'. [ 110.334704][ T43] audit: type=1400 audit(1788719132.385:709): avc: denied { watch watch_reads } for pid=7169 comm="syz.5.322" path="/proc/99/task/100/setgroups" dev="proc" ino=13037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.388679][ T43] audit: type=1400 audit(1788719132.435:710): avc: denied { write } for pid=7171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.460331][ T43] audit: type=1400 audit(1788719132.505:711): avc: denied { write } for pid=7176 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.606155][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 110.630856][ T43] audit: type=1400 audit(1788719132.675:712): avc: denied { map_create } for pid=7189 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.630934][ T43] audit: type=1400 audit(1788719132.675:713): avc: denied { map_read map_write } for pid=7189 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.656034][ T851] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 110.714188][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.331'. [ 110.802751][ T851] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 110.803742][ T43] audit: type=1400 audit(1788719132.855:714): avc: denied { write } for pid=7202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.804342][ T851] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 110.804359][ T851] usb 10-1: config 1 has no interface number 0 [ 110.805948][ T851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.805964][ T851] usb 10-1: Product: syz [ 110.805972][ T851] usb 10-1: Manufacturer: syz [ 110.805979][ T851] usb 10-1: SerialNumber: syz [ 110.825035][ T851] usb 10-1: 3:1 : does not exist [ 110.825058][ T851] usb 10-1: 3:2 : does not exist [ 111.027863][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 111.028682][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.028978][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.039349][ T851] usb 10-1: USB disconnect, device number 4 [ 111.453393][ T7217] netlink: 9152 bytes leftover after parsing attributes in process `syz.3.336'. [ 111.454448][ T7217] jffs2: notice: (7217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.623173][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.337'. [ 111.756671][ T7237] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 111.769688][ T7237] overlayfs: failed to clone upperpath [ 111.880429][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 111.933740][ T7242] netlink: 'syz.3.342': attribute type 10 has an invalid length. [ 111.944633][ T7242] team0 (unregistering): Port device team_slave_0 removed [ 111.949935][ T7242] team0 (unregistering): Port device team_slave_1 removed [ 111.990370][ T7243] macvlan2: entered promiscuous mode [ 111.990434][ T7243] dummy0: entered promiscuous mode [ 111.990584][ T7243] macvlan2: entered allmulticast mode [ 111.990594][ T7243] dummy0: entered allmulticast mode [ 112.293347][ T7253] fuse: fd is not a fuse device [ 112.459881][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 112.774072][ T7264] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 112.793737][ T7264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.888092][ T7268] bond2: (slave geneve2): making interface the new active one [ 112.891745][ T7268] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 113.409310][ T7290] fuse: fd is not a fuse device [ 113.936667][ T7304] kvm [7303]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 113.940353][ T7304] kvm [7303]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 114.282704][ T7312] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.463160][ T5090] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 114.810080][ T7331] xt_hashlimit: size too large, truncated to 1048576 [ 114.934333][ T7331] syz.5.375 (7331) used greatest stack depth: 19608 bytes left [ 114.975826][ T7338] __nla_validate_parse: 1 callbacks suppressed [ 114.979590][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 115.193236][ T7358] tipc: Enabling of bearer rejected, failed to enable media [ 115.226068][ T7351] team0: Device xfrm0 is of different type [ 115.243569][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 115.245903][ T43] audit: type=1400 audit(1788719137.295:730): avc: denied { write } for pid=7357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.252604][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.382'. [ 115.338155][ T43] audit: type=1400 audit(1788719137.385:731): avc: denied { write } for pid=7364 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.538063][ T7375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.571897][ T50] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 115.588722][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 115.632321][ T7382] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 115.655750][ T7382] bond3 (unregistering): Released all slaves [ 115.732723][ T50] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 115.739029][ T50] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.745504][ T50] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.752729][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.757173][ T50] usb 10-1: Product: syz [ 115.758587][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 115.763231][ T50] usb 10-1: Manufacturer: syz [ 115.763333][ T50] usb 10-1: SerialNumber: syz [ 115.780542][ T50] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 115.783619][ T50] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 115.788846][ T50] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 115.842037][ T50] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 116.163265][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 116.194292][ T43] audit: type=1400 audit(1788719138.245:732): avc: denied { sqpoll } for pid=7402 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.839886][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.840205][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.014390][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 119.123299][ T7367] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 119.123658][ T7367] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 119.123793][ T7367] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 119.127991][ T7366] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 119.300564][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 119.898607][ T43] audit: type=1400 audit(1788719141.945:733): avc: denied { setopt } for pid=7493 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.899163][ T43] audit: type=1400 audit(1788719141.945:734): avc: denied { getopt } for pid=7493 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.906736][ T43] audit: type=1400 audit(1788719141.955:735): avc: denied { write } for pid=7493 comm="syz.2.419" path="socket:[16617]" dev="sockfs" ino=16617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.931206][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.942508][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.943895][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.945655][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.947347][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.087012][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.089389][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.134993][ T7366] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 120.146094][ T50] usb 10-1: USB disconnect, device number 5 [ 120.166582][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 120.176889][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 120.187145][ T50] ti_usb_3410_5052 10-1:2.0: device disconnected [ 120.229914][ T7498] @0Ù: left allmulticast mode [ 120.282061][ T6474] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.282154][ T6474] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.282255][ T6474] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.282344][ T6474] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.509762][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 120.686858][ T7530] FAULT_INJECTION: forcing a failure. [ 120.686858][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 120.686958][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.5.427 Not tainted syzkaller #0 PREEMPT(full) [ 120.686994][ T7530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.687008][ T7530] Call Trace: [ 120.687015][ T7530] [ 120.687023][ T7530] dump_stack_lvl+0x100/0x190 [ 120.687075][ T7530] should_fail_ex.cold+0x5/0xa [ 120.687102][ T7530] should_failslab+0xc2/0x120 [ 120.687132][ T7530] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 120.687153][ T7530] ? __d_alloc+0x35/0xa50 [ 120.687181][ T7530] __d_alloc+0x35/0xa50 [ 120.687208][ T7530] d_alloc_pseudo+0x1c/0xc0 [ 120.687226][ T7530] alloc_file_pseudo+0x118/0x290 [ 120.687251][ T7530] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.687276][ T7530] ? alloc_fd+0x471/0x7a0 [ 120.687301][ T7530] sock_alloc_file+0x50/0x210 [ 120.687329][ T7530] __sys_socket+0x1c0/0x260 [ 120.687357][ T7530] ? __pfx___sys_socket+0x10/0x10 [ 120.687391][ T7530] __x64_sys_socket+0x72/0xb0 [ 120.687417][ T7530] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.687445][ T7530] do_syscall_64+0x123/0x790 [ 120.687470][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.687489][ T7530] RIP: 0033:0x7f79dfd9e159 [ 120.687508][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.687525][ T7530] RSP: 002b:00007f79e0c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 120.687543][ T7530] RAX: ffffffffffffffda RBX: 00007f79e0025fa0 RCX: 00007f79dfd9e159 [ 120.687556][ T7530] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 120.687570][ T7530] RBP: 00007f79dfe35024 R08: 0000000000000000 R09: 0000000000000000 [ 120.687582][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.687595][ T7530] R13: 00007f79e0026038 R14: 00007f79e0025fa0 R15: 00007ffe5d4af0b8 [ 120.687621][ T7530] [ 120.726755][ T6474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.869476][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.869694][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.869809][ T7495] bridge_slave_0: entered allmulticast mode [ 120.871248][ T7495] bridge_slave_0: entered promiscuous mode [ 120.879271][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.879452][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.879605][ T7495] bridge_slave_1: entered allmulticast mode [ 120.883528][ T7495] bridge_slave_1: entered promiscuous mode [ 120.926982][ T6474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.026911][ T43] audit: type=1400 audit(1788719143.075:736): avc: denied { write } for pid=7537 comm="syz.5.428" name="configs" dev="configfs" ino=10724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.030614][ T43] audit: type=1400 audit(1788719143.075:737): avc: denied { write } for pid=7537 comm="syz.5.428" name="functions" dev="configfs" ino=10723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.034845][ T43] audit: type=1400 audit(1788719143.085:738): avc: denied { write } for pid=7537 comm="syz.5.428" name="c.1" dev="configfs" ino=16166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.036226][ T43] audit: type=1400 audit(1788719143.085:739): avc: denied { create } for pid=7537 comm="syz.5.428" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 121.048430][ T43] audit: type=1400 audit(1788719143.085:740): avc: denied { write } for pid=7537 comm="syz.5.428" name="c.1" dev="configfs" ino=16166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.072568][ T6474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.100322][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.107694][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.138207][ T7495] team0: Port device team_slave_0 added [ 121.146985][ T7495] team0: Port device team_slave_1 added [ 121.199172][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.199219][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.199265][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.203357][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.203374][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.203398][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.252986][ T43] audit: type=1400 audit(1788719143.305:741): avc: denied { getopt } for pid=7548 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.262846][ T6474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.275003][ T43] audit: type=1400 audit(1788719143.325:742): avc: denied { create } for pid=7546 comm="syz.5.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.276291][ T43] audit: type=1400 audit(1788719143.325:743): avc: denied { getopt } for pid=7546 comm="syz.5.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.317202][ T7495] hsr_slave_0: entered promiscuous mode [ 121.319713][ T7495] hsr_slave_1: entered promiscuous mode [ 121.320485][ T7495] debugfs: 'hsr0' already exists in 'hsr' [ 121.320505][ T7495] Cannot create hsr debugfs directory [ 121.691815][ T58] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 121.862510][ T58] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 121.867360][ T58] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 121.870119][ T58] usb 10-1: config 1 has no interface number 0 [ 121.874830][ T6474] bond0 (unregistering): Released all slaves [ 121.877025][ T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.877066][ T58] usb 10-1: Product: syz [ 121.877170][ T58] usb 10-1: Manufacturer: syz [ 121.877192][ T58] usb 10-1: SerialNumber: syz [ 121.890468][ T6474] bond1 (unregistering): Released all slaves [ 121.913460][ T58] usb 10-1: 3:1 : does not exist [ 121.913552][ T58] usb 10-1: 3:2 : does not exist [ 121.986336][ T7495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.011914][ T5750] Bluetooth: hci0: command tx timeout [ 122.012055][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.013256][ T7495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.041066][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.042603][ T7495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.060916][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.069289][ T43] audit: type=1400 audit(1788719144.115:744): avc: denied { write } for pid=7575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.072374][ T7495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.097287][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.108237][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.436'. [ 122.150451][ T43] audit: type=1400 audit(1788719144.195:745): avc: denied { write } for pid=7578 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.176938][ T58] usb 10-1: USB disconnect, device number 6 [ 122.259933][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 122.340219][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 122.353587][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.440'. [ 122.461969][ T6474] hsr_slave_0: left promiscuous mode [ 122.465216][ T6474] hsr_slave_1: left promiscuous mode [ 122.479678][ T6474] veth1_macvtap: left promiscuous mode [ 122.479751][ T6474] veth0_macvtap: left promiscuous mode [ 122.482356][ T6474] veth1_vlan: left promiscuous mode [ 122.482398][ T6474] veth0_vlan: left promiscuous mode [ 122.972076][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 123.096261][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.119418][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.128636][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.128810][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.156896][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.157070][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.486236][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 123.595228][ T7643] Device name not specified. [ 123.595228][ T7643] [ 123.614894][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 123.667019][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 124.068157][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 124.086353][ T5750] Bluetooth: hci0: command tx timeout [ 124.089675][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.259866][ T7676] FAULT_INJECTION: forcing a failure. [ 124.259866][ T7676] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.259925][ T7676] CPU: 2 UID: 0 PID: 7676 Comm: syz.5.458 Not tainted syzkaller #0 PREEMPT(full) [ 124.259961][ T7676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.259974][ T7676] Call Trace: [ 124.259980][ T7676] [ 124.259987][ T7676] dump_stack_lvl+0x100/0x190 [ 124.260031][ T7676] should_fail_ex.cold+0x5/0xa [ 124.260055][ T7676] get_futex_key+0x1d0/0x14f0 [ 124.260078][ T7676] ? __pfx_get_futex_key+0x10/0x10 [ 124.260103][ T7676] futex_wake+0xf4/0x5e0 [ 124.260127][ T7676] ? __pfx_futex_wake+0x10/0x10 [ 124.260149][ T7676] ? kasan_quarantine_put+0x104/0x240 [ 124.260176][ T7676] ? putname+0xb1/0x110 [ 124.260194][ T7676] ? kmem_cache_free+0x127/0x6c0 [ 124.260220][ T7676] do_futex+0x2b2/0x440 [ 124.260241][ T7676] ? __pfx_do_futex+0x10/0x10 [ 124.260259][ T7676] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.260285][ T7676] __x64_sys_futex+0x34f/0x4d0 [ 124.260304][ T7676] ? __x64_sys_openat+0x12d/0x210 [ 124.260319][ T7676] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.260341][ T7676] do_syscall_64+0x123/0x790 [ 124.260361][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.260380][ T7676] RIP: 0033:0x7f79dfd9e159 [ 124.260391][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.260407][ T7676] RSP: 002b:00007f79e0c860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.260425][ T7676] RAX: ffffffffffffffda RBX: 00007f79e0025fa8 RCX: 00007f79dfd9e159 [ 124.260434][ T7676] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79e0025fac [ 124.260443][ T7676] RBP: 00007f79e0025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 124.260451][ T7676] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 124.260459][ T7676] R13: 00007f79e0026038 R14: 00007ffe5d4aefd0 R15: 00007ffe5d4af0b8 [ 124.260475][ T7676] [ 124.327340][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 124.371233][ T7676] FAULT_INJECTION: forcing a failure. [ 124.371233][ T7676] name failslab, interval 1, probability 0, space 0, times 0 [ 124.371364][ T7676] CPU: 3 UID: 0 PID: 7676 Comm: syz.5.458 Not tainted syzkaller #0 PREEMPT(full) [ 124.371404][ T7676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.371418][ T7676] Call Trace: [ 124.371427][ T7676] [ 124.371437][ T7676] dump_stack_lvl+0x100/0x190 [ 124.371475][ T7676] should_fail_ex.cold+0x5/0xa [ 124.371508][ T7676] should_failslab+0xc2/0x120 [ 124.371535][ T7676] __kmalloc_noprof+0xfc/0x840 [ 124.371557][ T7676] ? drm_atomic_commit_init+0x190/0x490 [ 124.371586][ T7676] drm_atomic_commit_init+0x190/0x490 [ 124.371629][ T7676] drm_atomic_commit_alloc+0xd3/0x120 [ 124.371651][ T7676] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 124.371681][ T7676] ? trace_contention_end+0x126/0x160 [ 124.371708][ T7676] ? __mutex_lock+0x26c/0x1bd0 [ 124.371736][ T7676] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 124.371762][ T7676] ? drm_master_internal_acquire+0x21/0x80 [ 124.371784][ T7676] ? __mutex_lock+0x26c/0x1bd0 [ 124.371822][ T7676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.371849][ T7676] drm_client_modeset_commit_locked+0x14d/0x580 [ 124.371877][ T7676] drm_fb_helper_pan_display+0x32d/0xa40 [ 124.371908][ T7676] fb_pan_display+0x195/0x820 [ 124.371929][ T7676] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 124.371957][ T7676] ? queue_delayed_work_on+0x122/0x1e0 [ 124.371993][ T7676] bit_update_start+0x48/0x1f0 [ 124.372025][ T7676] fbcon_switch+0x1119/0x19f0 [ 124.372058][ T7676] ? __pfx_fbcon_switch+0x10/0x10 [ 124.372099][ T7676] ? __pfx_bit_cursor+0x10/0x10 [ 124.372124][ T7676] ? fbcon_cursor+0x24c/0x5e0 [ 124.372151][ T7676] csi_J+0x872/0xad0 [ 124.372184][ T7676] csi_ECMA.constprop.0+0x51e/0x3b60 [ 124.372207][ T7676] ? find_held_lock+0x2b/0x80 [ 124.372232][ T7676] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 124.372261][ T7676] do_con_write+0x35dc/0x4980 [ 124.372298][ T7676] ? __pfx_do_con_write+0x10/0x10 [ 124.372324][ T7676] ? add_softcursor+0x1c0/0x290 [ 124.372352][ T7676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.372378][ T7676] con_write+0x23/0xb0 [ 124.372397][ T7676] n_tty_write+0x431/0x1160 [ 124.372433][ T7676] ? __pfx_n_tty_write+0x10/0x10 [ 124.372454][ T7676] ? __kasan_kmalloc+0xaa/0xb0 [ 124.372960][ T7676] ? __pfx_woken_wake_function+0x10/0x10 [ 124.373017][ T7676] ? rcu_is_watching+0x13/0xc0 [ 124.373049][ T7676] ? file_tty_write.isra.0+0x694/0x890 [ 124.373074][ T7676] ? kfree+0x1e5/0x6d0 [ 124.373102][ T7676] ? __pfx_n_tty_write+0x10/0x10 [ 124.373126][ T7676] file_tty_write.isra.0+0x4d2/0x890 [ 124.373241][ T7676] vfs_write+0x6af/0x1050 [ 124.373266][ T7676] ? __pfx_tty_write+0x10/0x10 [ 124.373290][ T7676] ? __pfx_vfs_write+0x10/0x10 [ 124.373309][ T7676] ? find_held_lock+0x2b/0x80 [ 124.373357][ T7676] ksys_write+0x12a/0x250 [ 124.373378][ T7676] ? __pfx_ksys_write+0x10/0x10 [ 124.373405][ T7676] do_syscall_64+0x123/0x790 [ 124.373430][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.373458][ T7676] RIP: 0033:0x7f79dfd9e159 [ 124.373479][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.373496][ T7676] RSP: 002b:00007f79e0c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.373516][ T7676] RAX: ffffffffffffffda RBX: 00007f79e0025fa0 RCX: 00007f79dfd9e159 [ 124.373529][ T7676] RDX: 00000000000000fa RSI: 0000200000004000 RDI: 0000000000000006 [ 124.373539][ T7676] RBP: 00007f79dfe35024 R08: 0000000000000000 R09: 0000000000000000 [ 124.373549][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.373561][ T7676] R13: 00007f79e0026038 R14: 00007f79e0025fa0 R15: 00007ffe5d4af0b8 [ 124.373591][ T7676] [ 124.593737][ T7495] veth0_vlan: entered promiscuous mode [ 124.606162][ T7495] veth1_vlan: entered promiscuous mode [ 124.660801][ T7495] veth0_macvtap: entered promiscuous mode [ 124.673181][ T7495] veth1_macvtap: entered promiscuous mode [ 124.674101][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 124.692404][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.707369][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.756152][ T6474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.756211][ T6474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.756253][ T6474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.756287][ T6474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.818821][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.818897][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.877285][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.877351][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.010316][ T7717] ffs_data_put(): freeing [ 125.022746][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 125.031953][ T7721] bridge_slave_1: left allmulticast mode [ 125.032026][ T7721] bridge_slave_1: left promiscuous mode [ 125.032257][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ ** replaying previous printk message ** [ 125.053654][ T7721] bridge_slave_0: left allmulticast mode [ 125.053728][ T7721] bridge_slave_0: left promiscuous mode [ 125.053939][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.054045][ T7721] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI [ 125.065760][ T7721] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 125.069579][ T7721] CPU: 2 UID: 0 PID: 7721 Comm: syz.3.469 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.073328][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.078142][ T7721] RIP: 0010:br_del_frame+0x106/0x1a0 [ 125.080143][ T7721] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 b6 2a 6a f7 48 8d [ 125.086822][ T7721] RSP: 0018:ffffc900052e7288 EFLAGS: 00010a06 [ 125.088817][ T7721] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007a21000 [ 125.092270][ T7721] RDX: 1bd5a00000000024 RSI: ffffffff8aa1d4ef RDI: ffffffff9146e1f8 [ 125.096708][ T7721] RBP: ffffffff9146e1e0 R08: 0000000033a6b6a3 R09: 000000000000002c [ 125.100231][ T7721] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 125.102938][ T7721] R13: ffff888034be5800 R14: 000000000000001c R15: ffff888034be5800 [ 125.105551][ T7721] FS: 00007f15324f16c0(0000) GS:ffff8880d5d5f000(0000) knlGS:0000000000000000 [ 125.108545][ T7721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.110763][ T7721] CR2: 00007f419335da08 CR3: 0000000030285000 CR4: 0000000000352ef0 [ 125.113346][ T7721] Call Trace: [ 125.114495][ T7721] [ 125.115514][ T7721] mep_delete_implementation+0x292/0x340 [ 125.117871][ T7721] br_cfm_port_del+0x14f/0x1e0 [ 125.120178][ T7721] del_nbp+0x168/0xd50 [ 125.122184][ T7721] br_dev_delete+0x96/0x1c0 [ 125.124305][ T7721] rtnl_dellink+0x463/0xb40 [ 125.126220][ T7721] ? __pfx_br_dev_delete+0x10/0x10 [ 125.128494][ T7721] ? kasan_save_track+0x14/0x30 [ 125.130153][ T7721] ? kasan_save_free_info+0x3b/0x70 [ 125.132120][ T7721] ? __kasan_slab_free+0x5f/0x80 [ 125.134273][ T7721] ? __pfx_rtnl_dellink+0x10/0x10 [ 125.136012][ T7721] ? nlmon_xmit+0xa5/0xe0 [ 125.137406][ T7721] ? dev_hard_start_xmit+0x121/0x760 [ 125.139125][ T7721] ? __dev_queue_xmit+0x1bbf/0x4970 [ 125.141975][ T7721] ? netlink_sendmsg+0x8b0/0xda0 [ 125.144815][ T7721] ? sock_write_iter+0x53a/0x5b0 [ 125.147383][ T7721] ? __lock_acquire+0x4c5/0x1ec0 [ 125.149793][ T7721] ? lock_acquire+0x1d1/0x380 [ 125.151816][ T7721] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 125.154083][ T7721] ? find_held_lock+0x2b/0x80 [ 125.156546][ T7721] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.159357][ T7721] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.161547][ T7721] ? __pfx_rtnl_dellink+0x10/0x10 [ 125.163735][ T7721] rtnetlink_rcv_msg+0x95e/0xe90 [ 125.165858][ T7721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.170297][ T7721] ? ref_tracker_free+0x37e/0x6c0 [ 125.173611][ T7721] netlink_rcv_skb+0x159/0x420 [ 125.176527][ T7721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.179537][ T7721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.182112][ T7721] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.184237][ T7721] netlink_unicast+0x585/0x850 [ 125.186176][ T7721] ? __pfx_netlink_unicast+0x10/0x10 [ 125.188714][ T7721] netlink_sendmsg+0x8b0/0xda0 [ 125.190730][ T7721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.192895][ T7721] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.194948][ T7721] sock_write_iter+0x53a/0x5b0 [ 125.196930][ T7721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.199215][ T7721] ? __pfx_sock_write_iter+0x10/0x10 [ 125.201554][ T7721] ? bpf_lsm_file_permission+0x9/0x10 [ 125.204312][ T7721] ? security_file_permission+0x76/0x210 [ 125.208621][ T7721] ? rw_verify_area+0xce/0x6d0 [ 125.211579][ T7721] vfs_write+0x6af/0x1050 [ 125.213389][ T7721] ? __pfx_sock_write_iter+0x10/0x10 [ 125.215731][ T7721] ? __pfx_vfs_write+0x10/0x10 [ 125.217811][ T7721] ? find_held_lock+0x2b/0x80 [ 125.219814][ T7721] ksys_write+0x1f8/0x250 [ 125.221804][ T7721] ? __pfx_ksys_write+0x10/0x10 [ 125.223993][ T7721] do_syscall_64+0x123/0x790 [ 125.226140][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.228789][ T7721] RIP: 0033:0x7f153159e159 [ 125.231002][ T7721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.241013][ T7721] RSP: 002b:00007f15324f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.244489][ T7721] RAX: ffffffffffffffda RBX: 00007f1531825fa0 RCX: 00007f153159e159 [ 125.247247][ T7721] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000b [ 125.250321][ T7721] RBP: 00007f1531635024 R08: 0000000000000000 R09: 0000000000000000 [ 125.253130][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.256158][ T7721] R13: 00007f1531826038 R14: 00007f1531825fa0 R15: 00007fff098b5618 [ 125.258924][ T7721] [ 125.260009][ T7721] Modules linked in: [ 125.261781][ T7721] ---[ end trace 0000000000000000 ]--- [ 125.271028][ T7721] RIP: 0010:br_del_frame+0x106/0x1a0 [ 125.273235][ T7721] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 b6 2a 6a f7 48 8d [ 125.280774][ T7721] RSP: 0018:ffffc900052e7288 EFLAGS: 00010a06 [ 125.283213][ T7721] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007a21000 [ 125.286101][ T7721] RDX: 1bd5a00000000024 RSI: ffffffff8aa1d4ef RDI: ffffffff9146e1f8 [ 125.291107][ T7721] RBP: ffffffff9146e1e0 R08: 0000000033a6b6a3 R09: 000000000000002c [ 125.295252][ T7721] R10: 0000000000000200 R11: 0000000000000001 R12: dead0 ** replaying previous printk message ** [ 125.295252][ T7721] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 125.297334][ T7721] R13: ffff888034be5800 R14: 000000000000001c R15: ffff888034be5800 [ 125.297350][ T7721] FS: 00007f15324f16c0(0000) GS:ffff8880d5d5f000(0000) knlGS:0000000000000000 [ 125.297377][ T7721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.297387][ T7721] CR2: 00007fffa17c7ce0 CR3: 0000000030285000 CR4: 0000000000352ef0 [ 125.297398][ T7721] Kernel panic - not syncing: Fatal exception [ 125.315928][ T7721] Kernel Offset: disabled [ 125.317384][ T7721] Rebooting in 86400 seconds..