last executing test programs: 1m4.365782768s ago: executing program 1 (id=150): r0 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1}, 0x30, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000340)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) recvmmsg(r4, &(0x7f0000000380), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf20000000000000150002000000ffffffff0100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b85fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f867338789036ca61a9fc4c16e22031decf4ec28d611f88d090b2e1d35ed876a4f333a677ebff140d46d6db85628671c9e21ef530f45a6614f8ced3534cf340ca052a2c9763bfe26d3ffbdf6cb8a28bce5fc5307f0a986e2b47ac60601272d7b8ae03414091d8a1cabd101ff004244f1e9bb223f475cb3ddeb6bc0cc6c44a6ec3b48f7c0d131455779344e45731386ff7522ad6e8e987f931111eb02d9e286ceac24bfc8344dbc95f2d2ace799624264dbbce27a0521f1c7b2b49084e69658b95a364a5be3ee4d66ff1eadc2a9656ecebbdcec32768c98836d7f4a2b69308c6ba4ec3889092a9b155a8ec208f3e7ee9b36de74bdfdab8794b18eb9a13fbf376a37f09d710535ecad4efd8ba25b7dfcf2fb277bf407067eef56279b442c6bd61752126e81badbb15bf3598e56b90a68ea8e58e5f716b546867d58c83bd610ca50a6d7741d2e65aaf1e64ad76c1254bae4c97aa4402b5abba7b98e18cb6783b39a3f511c50369e66faf613958081b469df2bdc8aff053d16da63c97c09da62b4a65a3da183f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_open_procfs$userns(r3, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) landlock_restrict_self(r1, 0xe) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1m3.171499122s ago: executing program 1 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) close(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, r3, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000010000000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000005c0), &(0x7f0000000640), &(0x7f0000000680)) r4 = socket$inet(0x2, 0x2, 0x1) r5 = openat$autofs(0xffffff9c, &(0x7f00000006c0), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000740)) timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000840)=0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f0000000880)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000900)={0x0, 0x0, 0x10001, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000940), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r9 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f00000009c0)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40000000040301, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000a40), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0684113, &(0x7f0000000ac0)={0x1, 0xffbff806, 0x10001, 0xa, 0x5, 0xb20, 0x7, 0xe, 0x9, 0x3c, 0x7ff, 0x2}) 1m3.001501267s ago: executing program 1 (id=154): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x300, 0xf) 1m2.951645864s ago: executing program 1 (id=155): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="0104000000000000000004000007000000a4195dc018c50c8d000000000055d392073b099cb0358917b18dabf1924c011b4c09b3a0065b2dc4c00b785b0bafb8156b8821f93ffe2cc079"], 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '(&'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '/dev/sg#\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '*@##'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x15, 0x14, '/dev/virtual_nci\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102}, {@broadcast}, {@multicast2}, {}, {@loopback}, {@loopback}, {@empty}]}]}}}}}}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000b80)={0x0, 0x20fb87, 0x2, 0x1, 0x34c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x400, 0x10006, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0xa, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e0, 0x0, 0x0}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) 1m2.741803047s ago: executing program 1 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x800fff, 0x200, 0x6, 0x8001}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8400, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8001}, 0x8) r1 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x11, 0x6, 0x0, 0x11, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bba, 0x8000, {0x6, 0x33, 0x5, 0x8, 0x0, 0x200, 0x0, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x7, 0x8, 0x178, 0x0, "55647ad87ebc0371ca5f37dbc5d5ee471b586dcb8064242f1ffb9504f52915243493f36d2d652e8427e3d952e005c6"}]}, 0x88}}, 0x1) socket$packet(0x11, 0x2, 0x300) fanotify_init(0x200, 0x400) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000440)={0x0, 0x69ee, 0x400, 0x1, 0x244}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x803, 0x0) openat(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f00000007c0)=[{&(0x7f0000000800)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m2.411706151s ago: executing program 1 (id=159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3084000, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) syz_clone(0x20820500, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000400)={0x51}) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000300)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) close(r1) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = open(&(0x7f0000000340)='.\x00', 0x0, 0x112) getdents(r4, &(0x7f00000004c0)=""/184, 0xb8) 47.127390167s ago: executing program 32 (id=159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3084000, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) syz_clone(0x20820500, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000400)={0x51}) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000300)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) close(r1) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = open(&(0x7f0000000340)='.\x00', 0x0, 0x112) getdents(r4, &(0x7f00000004c0)=""/184, 0xb8) 8.506940626s ago: executing program 0 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}]}, 0xc8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0xf88e470f, 0xed, 0x200009}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000600)=0x8, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0xc41, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x0, 0x4002004c2, 0x803, 0x9, 0x5, 0x3fd, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8e], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r7, @ANYBLOB="000125bd7000fedbdf25030000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004087) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="d1", 0x1}], 0x1) syz_usb_disconnect(r4) syz_usb_connect$lan78xx(0x2, 0xfffffffffffffe0e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b05b5, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.481249866s ago: executing program 0 (id=469): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x5, 0x8, 0x6, 0x0, 0x4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x810, 0xffffffffffffffff, 0x97170000) timer_create(0x4, &(0x7f0000000300)={0x0, 0x38, 0x0, @thr={&(0x7f0000000100)="4c499e8369aba39a2969a6d0b462b7", 0x0}}, &(0x7f0000000340)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) write$input_event(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x7, 0x100000a}, 0x18) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeeb, 0x8010, 0xffffffffffffffff, 0xffff9000) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) 6.569465593s ago: executing program 0 (id=471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0xe, 0x100, 0x6fd, 0x8, 0xff}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="0015ffffff95000000000000009cc9fc26295a8211a3c46f245e9dde611d67cf48ae4af35088871ca1ef51df9610ee264b9de535742b4f0c40496776f91bcc687595c8ee6a54a99681ca241df226217cb322adb8a1e807999ab2f229237e9f5925"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 6.490112109s ago: executing program 0 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x1c1) mkdir(&(0x7f0000001380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x8, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x5b5603, 0x5b6, 0x4}, 0x18) r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$video(&(0x7f0000000e00), 0x7, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000e00), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000f80)={0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000f80)={0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x21, r2) (async) ptrace(0x21, r2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000200)={r0, &(0x7f0000000100)='/dev/loop', 0x48000, &(0x7f0000000140)={@_ha_fsid={[0x10000, 0xbc]}, {0x1, 0x1, 0x10, 0x4}}, 0x9872, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000200)={r0, &(0x7f0000000100)='/dev/loop', 0x48000, &(0x7f0000000140)={@_ha_fsid={[0x10000, 0xbc]}, {0x1, 0x1, 0x10, 0x4}}, 0x9872, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000ec0)={"714322a0ef0990e966b4998efc9a30701f5713a73f73fa879a8e28dfff4e", 0x2, 0x1, 0x401, 0x4, 0x400, 0x337, 0x0, 0x4, [0xf, 0x0, 0x7, 0x66b7, 0x6, 0x1, 0xfac, 0x80000001, 0x6, 0x1, 0x3ff, 0x8, 0x100, 0x7, 0x10001, 0x101, 0x9, 0x40, 0xffffffff]}) ioctl$DVD_WRITE_STRUCT(r0, 0x2203, &(0x7f0000000480)=@manufact={0x4, 0x1, 0x800, "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x19, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000001100000007c00000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000002a00000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000dd22c0fffcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000010c0)='syzkaller\x00', 0x4c18, 0x0, 0x0, 0x41100, 0x50, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000001140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0x8, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000011c0)=[r5], &(0x7f0000001200)=[{0x0, 0x2, 0xa, 0x5}, {0x2, 0x3, 0x10, 0x9}, {0x0, 0x5, 0xc, 0xa}, {0x5, 0x4, 0xb}, {0x5, 0x5, 0x0, 0x6}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r7, {0x8251}}, './cgroup.cpu/memory.limit_in_bytes\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x14, &(0x7f0000000e00)=ANY=[], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e80)={r8}, 0xc) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') 6.430492029s ago: executing program 0 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000000c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x9b00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000500)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) pread64(r4, &(0x7f0000000400)=""/224, 0xe0, 0x8001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000540), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000580)={&(0x7f00000005c0)="80", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r9, 0xc01064ac, &(0x7f0000000600)={r10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000640)={r10}) sendmsg$can_bcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000010000001000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c01e"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)="fc", 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x1f, 0xa, 0xca, &(0x7f0000000900)="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"}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000d00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000680)={r11}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r9, 0xc01064c4, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x0, 0x0, r11], 0x3}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="29010200010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) socket$pppl2tp(0x18, 0x1, 0x1) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 6.190817873s ago: executing program 0 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x749}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xc1, 0x87e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0xfffffffc], [0x101, 0x0, 0x1, 0xb1e5], [0x6, 0xffffffffffffffff, 0x0, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}]}}]}, 0x98}}, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="31303438b5", 0x9) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008003}, 0x4000080) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x40002006}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xd) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000680)={0x0, 0xf5, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) madvise(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x2) socket$nl_route(0x10, 0x3, 0x0) 6.053003272s ago: executing program 33 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x749}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xc1, 0x87e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0xfffffffc], [0x101, 0x0, 0x1, 0xb1e5], [0x6, 0xffffffffffffffff, 0x0, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}]}}]}, 0x98}}, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="31303438b5", 0x9) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008003}, 0x4000080) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x40002006}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xd) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000680)={0x0, 0xf5, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) madvise(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x2) socket$nl_route(0x10, 0x3, 0x0) 4.291890801s ago: executing program 2 (id=489): r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/198, 0xc6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5207, 0x0) 4.291550726s ago: executing program 2 (id=490): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x2) syz_ublk_setup_io_uring(0x6d89, &(0x7f0000000100)={0x0, 0xf153, 0x0, 0x1, 0x4f}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) syz_ublk_setup_io_uring(0x7903, &(0x7f0000000240)={0x0, 0x4b5f, 0x400, 0x1, 0x192}, &(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x2317, &(0x7f00000003c0)={0x0, 0xa011, 0x1000, 0x3, 0x102}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) openat$sw_sync(0xffffff9c, &(0x7f0000001bc0), 0x440000, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001b40)=@IORING_OP_WRITEV_FIXED={0x3d, 0x50, 0x4004, @fd_index=0x3, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000500)="cf0b9a7ba38fdb57db4614327056c9c112bdc2407bca93f6698f6349b97b04b4ca7ab86ae26c3a3ea47735aed96910b9a12cfae872374303c3595fd66e5332e4a43f07d819603b7debc8f474fcaa195bc00ed2bc8637f2bb6a87eade54cebfb7d07f4c7ee1b45a4f685fc313ccadb7dbe8910890ea4ebdd9773b916ad0ac5e86b4683f062dde932a532eea475fbbbd36c7def08ad6767986978f6a32f963c50e751a08438d5fbd0e269cecbde6", 0xad}, {&(0x7f00000005c0)="d58a6019114a4cc024434d0c8fe812d2238b41d1797888c6988ab23fe28c1d49791ba3d3bc086f0945b673a75f4ccf5d9e8d38049959700f3cdb03d17c39971cc5cb80694bc27cfd59326419077e10539c7a6d676e2aaa4b9afdfbe1de1c4052f8a32a3504361da840487ef838", 0x6d}, {&(0x7f0000000640)="e01b68476e4e47b73ff4ac697d54fffbeb20bb5a6816236ab1d8b059ff53ce0d452a5edc91b4cf2a51ab4907a7e3590efdb2d77c54668b495ba447af9c38f6cdc495ed47afd1868eaea9091fa18ccf4facf2965d772d79c9abcdaeef4d0a69cfae3b9aeeca8c4066f55845752dab1f2d028e78bc78420974f2c887f9b0d304c80614a2a5cb798b4211255214c4a174c07e4e90b593f3138e1033d28a7fa2a21e11cd69be615116bd2ce8d6909f41ed7d65a50d58fee44ff981b522cd2e902b33fff7df58a75b86873b2c88b17504203d098825119b6172c1e85b9cddf6f65f61027dc3d5d1b7e27223e7bebd7ae3a6b2ea1034b9661187", 0xf7}, {&(0x7f0000000740)="267d2000fc81db8e5c9f1f4c049057e6f535b6b43665e467b8f99b605bb694cc2ab6cfabd29a57453b4da7d5bb7e000c022b5b2b40864a95b147da6bd340e5ea7e80e9fa902919982d7a0b30be668f70d6b80566fa088a87d6691242c7f01e12f3c29aa54099c9655c78cab26b1d41e07c87585ec40bfca8240c250d8f", 0x7d}, {&(0x7f00000007c0)="2fb3c95f8fc36d0967921db3c0f43de73d83a4ca2ec5d6d8d129dcbe35f5c9fc04a7e38458453fcbcd7169ed427beed3469f38377e8ab0195e540c1f2b8df8be52a63dfec7a2e5a4ab3b37920fa3276bfd8189eb", 0x54}, {&(0x7f0000000840)="f082b5cf20e11e16a55f81143a13955711cb", 0x12}, {&(0x7f0000000880)="70995ed419833b8f6335ec6397d41f1e7707b570f44da68db5c93e2ce1ad31efd720b67dbc080a3e49769c7f6219a78e554a47ca8d55828612d5f21c6b51520b709891979ea7ef66c89866d8af871024d314b165260aa96c7e", 0x59}, {&(0x7f0000000900)="fc1f7184b66e3de0cb5d9d2a4c89cc43cd32b029d8feae0e690e3ada5ddb24f2ce44b759f907e5ca7b71179aa12cba84bfc58fed1c1df5f13a7cda276b0a365b84b6c1f538e0ae095bd697236e8d764485bbf9a8fc1c988496d9bb9a98f35ac41f80fa634de49fd21ba633b2d30538d528459ee3b7ed499cc294aaa2072cc64a0728e14c8620e53e3480525c2bca305e61247d4007016bae64ad558db3cd07b4954e2f5a62f34468ba232389fa92e3e8c65ea684e780cc", 0xb7}, {&(0x7f00000009c0)="26ddad74035621f82635dba4ef8b01938f930a1b6f4b84df9281e958d6d94bea993672496e7cd809742e169176cf7c0259a3c31b5e172e07b3c5cc58f42e75959d4fc7cb1629ad803ff396f6fc6f23a1ed4f1f69ec35706331f9b181eb645eec5d99ab271728e3ec7eb4ba30e5a44320c2713f4142dcec6aa5130f8ed310804a1dea35f971f6d2679b4a6c1d29f81d96a71aaeb59fe7a25f21", 0x99}], 0x9, 0x1c, 0x0, {0x2, 0x0, 0x0, '\x00', &(0x7f0000001b00)={0x80, 0x1d63, 0x1000, &(0x7f0000000b00)="ad03d4ea562d36704f467414f2fde0e12099d397f17fd73d3544e9a832087884528aa5d9dd720c64502cf048109da77ccf3a5db059304ce800d65313d097d0a4675d8e62aa2e1751c3d46242323e925735f0bf1a86bc72a12410c3d35bd4d660298539f031a72a554c2c37d551913d6d381b2c29ca9f60235e2a2d0db2b0240085b42fadfecc9fb6fa4c67f0bdc92ea3195d95cde3a253081968fea76d692aa71048a77a428b7bd4fe01fa72f9c6a6d547315ead2d3e7515aca12571b770b0e6839cd1207de38b6f5f1d835002c70226f7af6d9c0614e4d80272fe968a276f1db018cbf2d56fbbc4b6be9af67d77769d91c7154a75e58abcc939357105ad50eea107212a5bdde11328f7ea0942fe425d78e35e59a117226e51fe50d0eb89204e6e96dd5952ea28d459cec97f82eda31077ad4fc459d8d65948f0ff0bef43507b82080f86f5f81403d64a7216a77a39d7d02ea7968a8b7a9d71a81297c3849abe21664f213f03fc79a38fbf2881b0618a2d3139cf3e60018d499095f1f9751b38ff1c03f388702347a32b5b8ca7d88ed275890a50a524027a5bead868844c5d39be88a81aad75233c60ef414992069f9cf17ec47f83b6b9916575d17775536969f0a5498cb4e004416ea0d09b0754c078b299c57ea1bcd622665c8da6f1ef162190e3e4de00370e9559edd75d82e8c01b44c841aede542475f59b62dd1640e8b5dfd3a301b41af99a4b9d49b6bb229786e712fdf491f6284d3152ef089fe919f01318ca01b8c3ac588c1c2cda16bcb06dd694399cea3ea13760e63d061cc2a44633f2de7df61c9a2ac43f8394c23bb89d18ec9e5e79ec0315fca510973199e8e7dba519fec3c0fccae4e6bd0494a466ba57f4fd41a0164131bd8c38f230f934b415d20a17424ac452b939d9a58fa1f1ea725dcd5d23d459241ef73e2b23777cf62f03ebb57fbd75c54ebd2d0aa716a3932a7ea32fd61f17474d24c39c1e6866c8212a6ef626ae0c06bd9d4b2208b2c0a2841dce132b1404636c9bae824c2b55452ce146c44b4073d16fcd4c4b701f92307f26b1c780534027fd589544c6ad8fd164ec42833a59282376f00d5ba4bc1530e73d80d1402930a63c710f01276b091a22b8337bd71d65876bb4a2f1cfa210109f80b5d1159c9baecb8bb3b60286d96185a1860f0ca50358f6fadcba7e935f350d493c536381d96464fab08841132959a43a17f93b5a002c0ce7af529673f761ca39ffba15e62f4ec934b7a88db5f2d450344e502bc8ea9bff860cbae0d30aac61649763f019a40d42b845c9e9df1c73f381e3c35638d8306e900de6a55d4f4d24d7997541fa5ae76e6154f18f41d4c5f9799fe233d399bbd70d4d444d80f293fa5bfaad56283b5597528f449723eac0be881156844f5ca78ec727565adafdcbce3632ece84dbbcebb4736d197cd5950b928405f3da490a1173ea2274a654a804f296bc63af3ea8e99486783ae0d2606d530c935b2446b9e470c0c1656e8e4bbb4e837d538ad40cbe3f85a94e1e6c4a0f4845eb5092332f59ca2e8369ec3a21e29c7506563301bf8f358d8f2fa67483e08b14bf06d5d1b2401aeb16cabd999116ca22ea8f064a8327efcef4e3caf640b7a943ab87dc13ebc6bf50fcd653e22c8688ad0388fcd004a823c8d297d841a3e9f40e28d7f8b44694dc54d0705a17d356091df5db05a4dd4d67e283e7f8e442af23dd55d363dc43fce2c66e995f6fc2bbaf7ba40f9740556480fff7d3d8234076604733cf81b7af58f70f71ee5890d5c1d8ce6352bde737a9ecdf34bcdd6d02dcebaebb1aa5e130a8ce952dde73b6183ce5d57177f55ecddc5dadbc090b12e6cabbd1f917446faa82be46a6f356fb0ab23a344f54ab6a7d739f68e5841ab2e109cfbac8216ab7eaf993043cab4731643c6a64cdf09494b2f4e32e6afe32e94060a6c4b8abe8c5491e801b47caf0f972f7c89828b1a9e03589510afd9d8b4f4bccaa01d05c656ec13e621edbef14cc0048c2f665055197009471eab11533e9fa86aef9addde9225f6455ef70bbcddb92787db93460e59efa864fd4e8f1b2efb216f778a1bb8b1865abb85d0beb277f00e64f2f8eb43668b8e7385d4f39e88ca4c600847e609e41005dd55cadf51482e966cfd6763569c29bcaed439e0fe02fd01de01503c6d030ee10bacb398a81d24f505682f2dab0446826be1dae21ebc015afd6e3f8aea1810c3eb121f2840834528c7a66b76bab09c91fabb2802921f2f6f3435fac944a65e369e614ce8333f77fd47cee795d0d17a3af7d001db980dc4d06b0706898399ea636ef05a31142dafe3307532857ea91aedd94f84628ad6166c6046be35d0853c4a64a12606c1bc6fa9a4017555b20622cf0b41b5cfa5b5edb588eae56f74870f0dab30544ad4f55cc96fba54fd0df98a194f1d51f172051bc1d8d3cc01a32a7df056166afa69b54067c49d207a8060e30456abd40d6e16826aa39faa76ad8122f78383523931c05033d73140d6b3092f92416a7e47636b86cdd64e8ae7ee9a057682fbdc3e827c375d92be5e0096bad8e55f34ea3327ed471633dac6666a704414aed1cb70d81be7bb51b7ae39fff06f59d3ea905daa758aab2c3be3639134a52b02f2da0e8ba07c4cfb1a6a25a7b721fd0492ad19bf036c45b7337f91f3e4db072449ade917f990932dc21e85df6f77b03e49b1eae343995ba15007a7cb785146d144bebad23a813a10a43b08ec785c7640f2fa68b1f0cd0ca450838b0131b6bb004f0c6942bcf8b35cd5caeeb8c0b75e3f92df387968fc6735bb45138a618b731a039901010934984b5b5ee79fa782120006ef42af5e710a08e1a2e6d06c74ca25446ac55a2f1a0e9a0aefff901d8b6a152f95a678d168bb23710e1f68d90074f139753b241d930ea96a949840dd426a74d18bf76d7e9da6d51cda16b11c14946a30f29caa17fcac082bc609ccf6feb89a83c569f8a36847c3999eb71d10f54caf9ecae2a5d90cf7a8949e39ffbbf154003cd3d81088a15a4d4b56d729b6992da9b72a5537e3f971aee6602b963a6647e9ff2ccca518548d016d4d099ef03362c35d72f26d286c61010cc6c157680a4c01fa4751d901a9b56f0a6e7faf4aaffbd78ddb2da728ed14da8ce5545d7c6cad8b022aa477078c64bb625f4d87a324254f99c4f465294b2ddd6740c3bda44f65c29f6623d7187695de09912f6cdcf2e6b4270cb1ff1f07150b7e3755edf23c7f0bdb130f7a47e4a3f97f7964869f2a369a6a7a699bd59ad876776f1b18f3f24f91432ae84040de6ce1766c38c2bdce9980decbf4adaee56143f5975a7795216b3f3e3e60b22d829f4bb2a1738befed813bedbdf72a49d73f79046f51c14ca237b72de62d4e2ca7e345337c8dd30531734fdc7a565447e63418ac4ced91019bf96193eb52437ffa2c4c744dcb9bdb4f1519b46f04e78dd3a545b0a64cfa0e49064c53ba1c67f8d3989de56f58f6fd930c3fdc08d2f1554da5cfd9301537d148b38e85a69a31136ea4475a1ed938388390f739eb429e089ab927dae83ebdff53626e0084a738ff84ed7de40e0c3c0feb20a98159385e5952863a1a117da7c95233d9ae8fbea1cc2bab668f0a3986a4ae3ccf174556cb72fb4179c36e32253dfe6ac97aa2f3d2983ccf93bb8bf97da3670d522a452cf175d929c8405e0bdf44d0cfa070217a521eb8ee43e6dc68c6eb5f47afa903988fcd3b1da93bb23191165903b1d19335c89304fab18723d82ac1c094702d690b4ae23b514ddacbbc6b1570a545dad4e8d4f2edbb51f2c2fe09a695062a543095693f2b0257127e19c29993ea98df1e67a74fd5973ee368c35def5bf8a5163660f674ef7c2d3b1e6f14e751934812b4185b93b09bf126b059ccd0fef16ab8dbde7e2a851d8ba886b4149f806d8f2305915af2959c2774e4872ef06116c0e0f3f1cfa46186f944a66674465bed1bf0d33339070ec190a899c1c856c52ac0b4db36e78fe006374ce467b5f3513a3efabcbc5d58d6b6a4d811f6d549634d048d6e081c1ec51937d47e489ecd092aacb94e1d44670ab7335970cae8d12b84f6ad2220995934c46c7b3bca5b026b6a22c2b97edf7471359d239f39d1bc4df36e2b3a2f0a636b7a7221a33ccc1d1151d89b15a94b294e1cc8b9138e7a39aff08410cf8196ba5431b1e84c39932b12d44468b4e3c3ecdf76b5f9860a08b01bced755d648b07f8f4e9bae35290fff2612268b44858c9d5735afa9c9f175455ba170c369096042c7c8473d13425a67c96085560a1e5d7856d292d873219063b59921fe27ed1e2e98db4ccdc1de9578f7ae6a7afd5be9a23dfe6b689d9d6408529bc923c3c58987adde9bc0bdd192100953af674f0c4a5633286155261da0398349732a3c5bc4f812fe908c17cff529abd14e8834a608a10b42fe46e1bb5789eeb3ab06f1ac7696ee44d145d717943a040433866bc4ecc5049a5376b4c26e0a3f3a82671985f1dbb6eaf90b55c476d026166d111f0dc84733ff36fd1a21e0332a637c1dc8071e2553175d26c5f3d34b084f60a58b21a04fa898178e511324f272c17e480044b0fe0988b1682b172162b3cc9f6b8b9fdcb57940d5bf8660ebcf94973f8f968f67c7efa4107a663407e5eba17c44ac3dfc4dfe18bb093b1de9ef6ef3b4b6eb745d887baee511f235bb234d4d794066cf3cf4c5d7bfb4901ecdf0719cc4a0daf4cfd91e6a3a89d8b185b59b9bae7e3c1f5839229e044b1989a29102740c8a45cd36d074bed0e70a3abc20a6136c79bb974d5a953972751445c0563f6bb24179034a69280587a4ac5501b37709a47f392bb485587eec6b069f6e5965c5b80ebc5353cdcb3ce637dd6ab5bf447d343f2476ddc8915ac30b012b0eda1d2aa3dc193b2c8d616ad3b546b9eee95dd71dcb3a0c6f29dc8670cdf1adc5fed0fffc83c5257bd41314135258ac168f5d958438c7e0b92234a6ac51a1fdd36f5521f8da9b96034730ec6178fb527efc216d325539e2b8b6e4b75e2309e16db7d56fb24bc642f7517eb0010843ce48fbc4b35c6999af603cff31a86b1cfbe5d7f225a34f89164ecc426185f4dea01ef403982809266792260ece14037b4df6e0570c5e17889c62200269db188e74f16cf188ca17a9a2458da2069744099a9e71bac8129466dac5e535e1063453a9beb704aae6b09c63a68768936d2442105e544e402c6744c2b26163f33faa3d98af78ad152c071b07aa86f62c910c557da33909b8a8719ae96fefc622e7dadaf654baab6bb2d88322dd38d05fb0b4709d43dc9c09dd0f78b1a35d6eaecc48e585e8ca0203856847b2eb7f6e678bc715c6b655cadffd9dbdb8bb6f0d2db1021618cdfa85c33217e863dd364666ea7c9adb85a8609e8bfa5d58070ccd42dd2316dc2c760736143d6d6692a0e9953e521b68c1babc43fb5cae4aad69c5b099d3833d5d99a491902eef65cbc80c18200b55c970b38b4328be988d2e81ca1e487b378332e282d3500b5584e96039bd7316357763605fa63eb68b062bc13c87188979c5bdebbf33087864a3ce8bbcf5969752219a3054c94bc1a46b3cc5f2a21d46d6c7c6faeffcbe68879dfbd5ff683f5934df29b2edb9a071d552d81e45c7149c47119e4a4c75316308e84304293897fb209b4d94255eac2cdbcd8b053d58045d0a7151bae54088173a2c36fcdc5a1ad2e754df4e8fba1142bc9a80b6bc559f6931cb86fbd3fe1f21149b804dcad039b32d24f2ea2529a04c5314f13ea01a1b303588c4e2807d69c607cc82e4933e", 0x7f}, 0x6b}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSBRK(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x5f) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000002c0)) 3.561204482s ago: executing program 3 (id=492): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0xe2, 0x0, 0x7fc000fd}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/flush\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1', 0x1) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2d726c696d6974202d6e65745f7072696f202b626c6b696f202d696f202d626c6b696f202b63707520e03ba8837d61e40f772e2f8ff944cc7e20402bd394ae2eb2f35220e4bc836675d20b4920674af196405381558729044fcae023c054aae54a9d2da1451ab49805eab42994c127f1c3a084dad435870fd68acf252b16a781cf90696ba9db82979cbe9697407829526092dd3c6561d4d521412e4619760b8c499431c4"], 0x29) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000002", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf252b0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x8b0}, 0x4040054) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r5, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) r8 = syz_io_uring_setup(0x5c0f, &(0x7f0000000740)={0x0, 0x64, 0x2, 0x3, 0x3d3}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000880)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x7, &(0x7f0000000900), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000940)) r13 = openat$vimc0(0xffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r13, 0x80345621, &(0x7f0000000a00)) openat$cachefiles(0xffffff9c, &(0x7f0000000a40), 0x400300, 0x0) 3.141655962s ago: executing program 4 (id=493): openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x149183) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000240)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r2 = open(&(0x7f00000004c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f00000005c0), 0x7f03) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f00000017c0)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000001800)=0x1, 0x4) sendmmsg(r3, &(0x7f0000001840), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001880)=0x2c6, 0x4) 2.618939432s ago: executing program 3 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000320000000000000000a00100003801000001fd00") 2.48140036s ago: executing program 3 (id=495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0xc6, &(0x7f0000000840)=""/198}, &(0x7f0000000940)="1201b9048020", 0x0, 0x0, 0x4, 0xffffffff, 0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) fcntl$addseals(r4, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) unshare(0x20050880) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x2) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r6, 0x2, &(0x7f0000000740)=[0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) 2.381384036s ago: executing program 4 (id=496): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d42}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8a682, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = dup2(r1, r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='wwnn=0x2000000010000001,wwpn=0x2000000010000002', 0x2f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='wwnn=0x1000000010000001,wwpn=0x1000000010000002', 0x2f) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=32\n', 0x6d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000780)={'sit0\x00', r3, 0x40, 0x1, 0x0, 0x1, {{0x37, 0x4, 0x2, 0x7, 0xdc, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @empty, {[@cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x13, 0x0, [{0x0, 0xd, "e784b7e200a6bf9f6ee305"}]}, @end, @timestamp={0x44, 0x10, 0xa1, 0x0, 0xd, [0x0, 0x1ff, 0x3]}, @ssrr={0x89, 0x1f, 0xb, [@multicast2, @broadcast, @remote, @rand_addr=0x64010101, @broadcast, @loopback, @local]}, @lsrr={0x83, 0x13, 0x24, [@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xf4, [@dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0xb, 0x6, [@local, @local]}, @timestamp_addr={0x44, 0x54, 0xb3, 0x1, 0x0, [{@loopback, 0xd}, {@local}, {@multicast2, 0x1}, {@private=0xa010102, 0xe89}, {@multicast2, 0xa37a}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@rand_addr=0x64010100, 0x9}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x9}, {@local, 0x7}]}]}}}}}) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.991193547s ago: executing program 2 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x3c0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_xt={0x54, 0x16, 0x0, 0x0, {{0x7}, {0x4}, {0x2a, 0x6, "6a7bddf34758a85f64bf0d3c23c4348ffcc546dedcf5445fa13fb14b09a0f9232c47e9acba24"}, {0xc, 0x7, {0x0, 0xe52e7f52084e836d}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x324, 0x1, [@m_gact={0x150, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1660, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2e5, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2082, 0x8}}]}, {0xfd, 0x6, "e2f73346114961d0b9117a7b226830b44a9e8f83a3dc12ac983d82108accd65e5ee6959e08378bb9cde9d444391500ab892670dfd209dd09826c98f65ffa54a315eec70ae36cf1204b78fcedd7f5682c82b2c5ebc70592f9a673e4ec6ac8b09bf39c883a56c0d3c07f5fe0b091d07e6e4d97293c8ce782754fc6df6b3e36f5ed7a6e903ec4b6ba0a9a5df97cff3dd599eac59fccb01b3df08ccfed3baf98a949abb9d6134005d1d5574c9e1e19fdcb9c09cf9c66ec19b7bef4e5569f907af088aa523f93469c0d64807d2a38c7f798a585d7dab23536bdaf8c44f8b273e3472274ca2efe9f9ed1bc0fda8617a3b993629ca98aede49ee876c9"}, {0xffffffffffffff6c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x128, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0xfb, 0x6, "b197f078da26f8096ea4fd70cf044dd417687f4834b8a197581d81ebff9a812e703a616be70b413f50b254b529df0be4a2f47e045d9039b1ed3df6b113bfd793bdaae4b221d566a2d93e6c0523b10c6cba44f1819bd796f98f03408eccde49e6d4bea08071b700eb94ba6902fde0c5ca654e37e395fba2e22650bd8a18b52a9fb6b3dbb3d3701f8d14d2b1fb3fd46c0ba8dfaee62fb1aab2140c388cbe83a435e4328c78046f5905dfc9e8f9bf550656b3bcb089c296283fe148719ba53af08233d0931ac72d0e2d82579b333ee0f0c48466dc305f1edd169e4b7e2ecfb128923706d27af47075415882443859d7bda1f060aa88e2339f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xa8, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x1}]}, {0x74, 0x6, "05fdf244ad82e8f74e8cbb866d1b06884c9bdc47b2c70f1f7678ce87660f7ba385c892760284154ac4c65e199136904e33192e55d6c2b6d7f40a187c5e8ef554c13d1bc8e9a7cb5d5ff5aac781656b92c2435913530bea7277333a948402f00b821f48247b60538d1d2e74c69af0e0a7"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x3c0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4f26, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x10}, 0x1c, 0x0}}], 0x1, 0x200880c4) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f00000000c0)=""/158, &(0x7f0000000180)=0x9e) dup3(r0, r1, 0x80000) 1.907456999s ago: executing program 2 (id=498): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8a4022, &(0x7f0000000400)=ANY=[@ANYBLOB="544fcd"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x1, 0x1, @loopback, @empty}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.281048509s ago: executing program 3 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) setns(0xc9, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl(r2, 0x8b14, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_codel={{}, {0x0, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x101}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x6}, @TCA_CODEL_INTERVAL={0x0, 0x3, 0x8}, @TCA_CODEL_TARGET={0x0, 0x1, 0x9e2}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x40}, @TCA_CODEL_INTERVAL={0x0, 0x3, 0x6}, @TCA_CODEL_TARGET={0x0, 0x1, 0xc}, @TCA_CODEL_TARGET={0x0, 0x1, 0xfffffff7}]}}]}, 0x4d}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) 1.268745267s ago: executing program 2 (id=500): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000580), 0x0, 0x18104) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xc3ecff0, 0x2, 0x0, 0x9}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2941, 0x8000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r13 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046602, &(0x7f0000000500)=0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init() openat$audio(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) 1.141703896s ago: executing program 4 (id=501): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x21, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="e6ba65ebdc0c417bd22114ebad3401b1d5d219103ddbd5b127318fb233bf082fde482e640b3c91c019571645656da5627b3619073b3d3e1c6699c12901c34c216c7f3c9118f31c1896bb0ab54d5337ea0682a48f712fef5c4264ecbb8c25a4bc6d9fc1c04a30099f7dbe12d9f64bf175fe592fb45bbc200f497b6b52e569daa6b82ef9cb9ec293a32b76e7783584f10205a79b4959709ac4b994790020763cd67b6f3c36618b5d769ad430b8cd50284878fad91c8046c566110e803c074d0ae567f39171726a4d0c7031d9c7579908688c36be72969d49528ab17cd1ec365eb35e3cc4fbe06c800fc02711ae971fb1", 0xef}, {&(0x7f0000000640)="a91adc3429eac11168baf3b6c28ea84628f1551dcd7b3d59e97e17c5387dc53f66720d686748192a7ccb27b502f36a9a320fb0ef63709d08046f8218d57e5a00ac82dabd84b952205d47f604a64b7dfc6dd8c29669749c93f2fde602553f7ea384bdd19827e6df200641aa1a14d85eb6f6a8e581c5fa3c2a2e6ad56ac8abf94390249e0c", 0x84}], 0x2}, 0x20000015) connect$tipc(r2, &(0x7f0000000700)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000000740), 0x400000000000203, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x2, 0x1, 0x20}]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x143102) writev(r4, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000280)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40080, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @sack_perm, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r1, &(0x7f0000000180), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.141402254s ago: executing program 5 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), r1) fadvise64(r1, 0x1400000, 0x7, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x14, r2, 0x301}, 0x14}}, 0x0) 706.540574ms ago: executing program 3 (id=502): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000004c80)={0x20071026}, &(0x7f0000005240)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000000)={'batadv0\x00', 0x8000}) r2 = getpid() capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x2bb5c303, 0x0, 0x2, 0x2, 0x2fa, 0x6c}) 606.135155ms ago: executing program 3 (id=503): openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x149183) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000240)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r2 = open(&(0x7f00000004c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f00000005c0), 0x7f03) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f00000017c0)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000001800)=0x1, 0x4) sendmmsg(r3, &(0x7f0000001840), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001880)=0x2c6, 0x4) 541.269096ms ago: executing program 5 (id=504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x3, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x100, 0xf011, 0xb8, 0x1}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000000)) 227.677909ms ago: executing program 4 (id=505): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="fbffffff03000000000000000000001e0008000034a1fcaa190ad1720986ed2c74dc69f781c1ce458a895c8ca9c23042b8f5a9bb04eb3a68414d34a73cdfeb50243b99b831e65c6a92a1a4b688500b2fbac96859746db8df23482be4087c4a829073f277a967ccabf34ee2152752b72dde8096a5f902a33690142776a826ce7ab5eed2063994d9e8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x1e, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) userfaultfd(0x1) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d00), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r1], 0x10) r2 = socket(0x1e, 0x2, 0x4) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000007c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaffffffff08004500002000000000008890"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) splice(r4, &(0x7f0000000880)=0x100, r4, &(0x7f00000008c0)=0x40000000000000, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000900)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1028000}, 0xc, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0002d50a761fddfaa07168000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 202.82404ms ago: executing program 5 (id=506): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0xc6, &(0x7f0000000840)=""/198}, &(0x7f0000000940)="1201b9048020", 0x0, 0x0, 0x4, 0xffffffff, 0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) fcntl$addseals(r4, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) unshare(0x20050880) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x2) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r6, 0x2, &(0x7f0000000740)=[0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) 184.312869ms ago: executing program 2 (id=507): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000180)='nqn=test,transport=tcp,traddr=::', 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000360007012ebd7000fbdbdf25077c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x101202, 0x0) write$dsp(r5, &(0x7f0000000300)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000340)=0x5f) landlock_restrict_self(r0, 0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 101.196821ms ago: executing program 4 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300627269646765300000000000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/brport/root_block\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x1c, 0x4e0, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x53c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r2, r4, 0x2, 0x4, 0x5}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount_setattr(r6, &(0x7f00000002c0)='.\x00', 0x9000, &(0x7f0000000400)={0x200005, 0xd, 0x80000}, 0x20) syz_emit_ethernet(0x38, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000002000000000100264242030000000000000000000000000100000000000000000000000180010000140002000f000000"], 0x0) 0s ago: executing program 4 (id=509): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xaf, &(0x7f0000000180)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x2) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000008c0)=[{&(0x7f0000000900)="ce", 0x1}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2842, 0x0) read$FUSE(r4, &(0x7f0000000ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f0000002b00)={0xa0, 0xffffffffffffffda, r5, {{0x0, 0x3, 0x3ff, 0x9, 0x3, 0x81, {0x1, 0x8, 0x2, 0x88f, 0xb551, 0x0, 0x81, 0xffff, 0xffffff80, 0x0, 0x7, 0x0, 0x0, 0x57, 0xffc00000}}, {0x0, 0xb}}}, 0xa0) pipe2(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) add_key(&(0x7f0000002c00)='asymmetric\x00', 0x0, &(0x7f0000002c40)="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", 0x559, 0xffffffffffffffff) fstatfs(r6, &(0x7f00000031c0)=""/112) mkdirat(0xffffffffffffff9c, &(0x7f0000003240)='./sec\x00', 0x1ff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000003280)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000003340)={0x3, {{0x2, 0x0, @multicast2}}}, 0x84) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000003400)=""/4091, &(0x7f0000004400)=0xffb) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): to HW filter on device bond0 [ 131.441716][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.457953][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.458034][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.489931][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.490008][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.506317][ T44] audit: type=1800 audit(1791733653.641:14): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file0" dev="overlay" ino=407 res=0 errno=0 [ 131.543127][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 131.815343][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 131.974711][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.041537][ T7086] netlink: 'syz.2.232': attribute type 178 has an invalid length. [ 132.042286][ T7086] syzkaller0: entered promiscuous mode [ 132.042298][ T7086] syzkaller0: entered allmulticast mode [ 132.045168][ T7086] 0: reclassify loop, rule prio 0, protocol 800 [ 132.144714][ T5748] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 132.340502][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.346339][ T6243] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 132.350676][ T6189] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 132.369065][ T6960] veth0_vlan: entered promiscuous mode [ 132.376389][ T6960] veth1_vlan: entered promiscuous mode [ 132.401401][ T6960] veth0_macvtap: entered promiscuous mode [ 132.403475][ T6960] veth1_macvtap: entered promiscuous mode [ 132.411148][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.434295][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.469911][ T5580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.469952][ T5580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.469979][ T5580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.470007][ T5580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.490289][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.490302][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.517915][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.518022][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.819376][ T5748] Bluetooth: hci4: command tx timeout [ 133.956181][ T44] audit: type=1800 audit(1791733656.091:15): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file0" dev="overlay" ino=409 res=0 errno=0 [ 134.076830][ T7129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.106863][ T7128] can: request_module (can-proto-3) failed. [ 134.725445][ T7154] fuse: Bad value for 'group_id' [ 134.725464][ T7154] fuse: Bad value for 'group_id' [ 135.510998][ T5748] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 135.518881][ T5748] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 135.709790][ T7169] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 135.774068][ T44] audit: type=1800 audit(1791733657.911:16): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="file0" dev="overlay" ino=54 res=0 errno=0 [ 136.169320][ T855] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 136.269307][ T5748] Bluetooth: hci4: command tx timeout [ 136.320976][ T855] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.322119][ T855] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.322141][ T855] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.322155][ T855] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.322188][ T855] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.323631][ T855] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.325592][ T855] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.325611][ T855] usb 8-1: Product: syz [ 136.325623][ T855] usb 8-1: Manufacturer: syz [ 136.342196][ T855] cdc_wdm 8-1:1.0: skipping garbage [ 136.342211][ T855] cdc_wdm 8-1:1.0: skipping garbage [ 136.346569][ T855] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 136.346585][ T855] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.544333][ T855] usb 8-1: USB disconnect, device number 3 [ 136.819460][ T5755] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 136.990327][ T5755] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 136.995387][ T5755] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.996963][ T5755] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.999586][ T855] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 137.000404][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.000416][ T5755] usb 9-1: Product: syz [ 137.000423][ T5755] usb 9-1: Manufacturer: syz [ 137.000430][ T5755] usb 9-1: SerialNumber: syz [ 137.030173][ T5755] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 137.053850][ T5755] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 137.067398][ T5755] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 137.129796][ T855] usb 8-1: device descriptor read/64, error -71 [ 137.183330][ T5748] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 137.221733][ T1677] usb 9-1: USB disconnect, device number 2 [ 137.234108][ T1677] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 137.245245][ T1677] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 137.245954][ T1677] ti_usb_3410_5052 9-1:2.0: device disconnected [ 137.379330][ T855] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 137.509491][ T855] usb 8-1: device descriptor read/64, error -71 [ 137.620131][ T855] usb usb8-port1: attempt power cycle [ 137.679574][ T44] audit: type=1800 audit(1791733659.821:17): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="file0" dev="overlay" ino=464 res=0 errno=0 [ 137.959385][ T855] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 137.980162][ T855] usb 8-1: device descriptor read/8, error -71 [ 138.219294][ T855] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 138.240148][ T855] usb 8-1: device descriptor read/8, error -71 [ 138.349832][ T855] usb usb8-port1: unable to enumerate USB device PÚÿÿÿ-D [ 139.363727][ T7237] FAULT_INJECTION: forcing a failure. [ 139.363727][ T7237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.363748][ T7237] CPU: 3 UID: 0 PID: 7237 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) [ 139.363761][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.363767][ T7237] Call Trace: [ 139.363771][ T7237] [ 139.363776][ T7237] dump_stack_lvl+0x100/0x190 [ 139.363796][ T7237] should_fail_ex.cold+0x5/0xa [ 139.363811][ T7237] _copy_from_iter+0x1f4/0x1690 [ 139.363826][ T7237] ? __pfx__copy_from_iter+0x10/0x10 [ 139.363841][ T7237] ? __pfx___might_resched+0x10/0x10 [ 139.363855][ T7237] ? kfree+0x22b/0x6d0 [ 139.363869][ T7237] file_tty_write.isra.0+0x45b/0x890 [ 139.363888][ T7237] redirected_tty_write+0xd4/0x120 [ 139.363901][ T7237] vfs_write+0x6af/0x1050 [ 139.363915][ T7237] ? __pfx_redirected_tty_write+0x10/0x10 [ 139.363929][ T7237] ? __pfx_vfs_write+0x10/0x10 [ 139.363942][ T7237] ? find_held_lock+0x2b/0x80 [ 139.363965][ T7237] ksys_write+0x12a/0x250 [ 139.363979][ T7237] ? __pfx_ksys_write+0x10/0x10 [ 139.363992][ T7237] ? ksys_write+0x1ac/0x250 [ 139.364005][ T7237] ? __pfx_ksys_write+0x10/0x10 [ 139.364022][ T7237] __do_fast_syscall_32+0x13a/0x8b0 [ 139.364034][ T7237] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.364052][ T7237] do_fast_syscall_32+0x32/0x70 [ 139.364064][ T7237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.364084][ T7237] RIP: 0023:0xf740efec [ 139.364096][ T7237] Code: Unable to access opcode bytes at 0xf740efc2. [ 139.364101][ T7237] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 139.364112][ T7237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 139.364119][ T7237] RDX: 000000000000ff18 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.364125][ T7237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.364131][ T7237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.364137][ T7237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.364151][ T7237] [ 139.647956][ T44] audit: type=1800 audit(1791733661.781:18): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.279" name="file0" dev="overlay" ino=488 res=0 errno=0 [ 140.148762][ T5748] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 140.523277][ T7260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.706751][ T7265] jffs2: notice: (7265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.821893][ T7265] tipc: Started in network mode [ 140.821920][ T7265] tipc: Node identity ac14140f, cluster identity 4711 [ 140.824894][ T7265] tipc: New replicast peer: 255.255.255.255 [ 140.826201][ T7265] tipc: Enabled bearer , priority 10 [ 140.994329][ T44] audit: type=1800 audit(1791733663.131:19): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.288" name="file0" dev="overlay" ino=138 res=0 errno=0 [ 141.169725][ T7275] FAULT_INJECTION: forcing a failure. [ 141.169725][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 141.169746][ T7275] CPU: 3 UID: 0 PID: 7275 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 141.169759][ T7275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.169766][ T7275] Call Trace: [ 141.169770][ T7275] [ 141.169775][ T7275] dump_stack_lvl+0x100/0x190 [ 141.169794][ T7275] should_fail_ex.cold+0x5/0xa [ 141.169809][ T7275] should_failslab+0xc2/0x120 [ 141.169828][ T7275] __kmalloc_noprof+0xfc/0x840 [ 141.169844][ T7275] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 141.169861][ T7275] kernfs_fop_write_iter+0x26a/0x5f0 [ 141.169877][ T7275] vfs_write+0x6af/0x1050 [ 141.169892][ T7275] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 141.169908][ T7275] ? __pfx_vfs_write+0x10/0x10 [ 141.169921][ T7275] ? find_held_lock+0x2b/0x80 [ 141.169944][ T7275] ksys_write+0x12a/0x250 [ 141.169959][ T7275] ? __pfx_ksys_write+0x10/0x10 [ 141.169978][ T7275] __do_fast_syscall_32+0x13a/0x8b0 [ 141.169993][ T7275] do_fast_syscall_32+0x32/0x70 [ 141.170005][ T7275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.170019][ T7275] RIP: 0023:0xf73befec [ 141.170033][ T7275] Code: Unable to access opcode bytes at 0xf73befc2. [ 141.170038][ T7275] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 141.170050][ T7275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 141.170057][ T7275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.170066][ T7275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.170072][ T7275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.170079][ T7275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.170093][ T7275] [ 141.568753][ T44] audit: type=1807 audit(1791733663.701:20): action=measure res=1 [ 141.671493][ T7287] Console: switching to colour dummy device 80x25 [ 141.943428][ T855] tipc: Node number set to 2886997007 [ 142.077076][ T5748] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 142.821089][ T7319] 9p: Bad value for 'rfdno' [ 142.913749][ T7284] ima: policy update completed [ 142.928778][ T44] audit: type=1802 audit(1791733665.051:21): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.293" res=1 errno=0 [ 143.302364][ T44] audit: type=1800 audit(1791733665.441:22): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.303" name="file0" dev="overlay" ino=489 res=0 errno=0 PÚÿÿÿ-D [ 143.659317][ T44] audit: type=1800 audit(1791733665.761:23): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.306" name="timeout" dev="sysfs" ino=4587 res=0 errno=0 [ 144.217597][ T7344] Zero length message leads to an empty skb [ 144.749389][ T7352] syzkaller0: entered promiscuous mode [ 144.749404][ T7352] syzkaller0: entered allmulticast mode [ 144.752209][ T7352] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 145.543989][ T5748] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 146.010780][ T44] audit: type=1326 audit(1791733668.141:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.011742][ T44] audit: type=1326 audit(1791733668.151:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.012530][ T44] audit: type=1326 audit(1791733668.151:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.014831][ T44] audit: type=1326 audit(1791733668.151:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.015094][ T44] audit: type=1326 audit(1791733668.151:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.015577][ T44] audit: type=1326 audit(1791733668.151:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.029352][ T44] audit: type=1326 audit(1791733668.161:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.029421][ T44] audit: type=1326 audit(1791733668.161:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.029456][ T44] audit: type=1326 audit(1791733668.161:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 146.029490][ T44] audit: type=1326 audit(1791733668.161:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.317" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740efec code=0x7ffc0000 [ 147.131074][ T7412] overlay: filesystem on ./bus not supported as upperdir [ 147.149106][ T7415] netlink: 100 bytes leftover after parsing attributes in process `syz.2.323'. [ 147.149125][ T7415] netlink: 100 bytes leftover after parsing attributes in process `syz.2.323'. [ 147.189370][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 147.406343][ T5748] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 148.030276][ T7456] syz.4.334 uses obsolete (PF_INET,SOCK_PACKET) [ 149.990246][ T7528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 149.992036][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 149.992056][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 150.675628][ T7566] syzkaller0: entered promiscuous mode [ 150.675647][ T7566] syzkaller0: entered allmulticast mode [ 150.712257][ T7567] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 150.713732][ T7568] process 'syz.2.358' launched '/dev/fd/4' with NULL argv: empty string added [ 150.775647][ T5748] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 151.451354][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.362'. [ 151.579673][ T7584] netlink: 'syz.3.363': attribute type 16 has an invalid length. [ 151.579694][ T7584] netlink: 'syz.3.363': attribute type 17 has an invalid length. [ 152.105489][ T44] kauditd_printk_skb: 105 callbacks suppressed [ 152.105507][ T44] audit: type=1800 audit(1791733674.241:137): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name="file0" dev="overlay" ino=589 res=0 errno=0 [ 152.584451][ T7608] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 152.631471][ T5748] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 152.818576][ T44] audit: type=1800 audit(1791733674.951:138): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128516 res=0 errno=0 [ 152.999543][ T7531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.083262][ T44] audit: type=1800 audit(1791733675.221:139): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file0" dev="overlay" ino=531 res=0 errno=0 [ 153.234466][ T7638] syzkaller0: entered promiscuous mode [ 153.234479][ T7638] syzkaller0: entered allmulticast mode [ 154.360922][ T5748] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 154.381969][ T7668] netlink: 'syz.4.385': attribute type 2 has an invalid length. [ 154.633638][ T44] audit: type=1800 audit(1791733676.771:140): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.388" name="quirks" dev="sysfs" ino=62374 res=0 errno=0 [ 154.642814][ T7681] syz.2.388 (7681): /proc/7680/oom_adj is deprecated, please use /proc/7680/oom_score_adj instead. [ 155.026129][ T7697] netlink: 68 bytes leftover after parsing attributes in process `syz.3.393'. [ 155.026288][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 155.026302][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 155.057319][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 155.057410][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 155.076108][ T7687] FAULT_INJECTION: forcing a failure. [ 155.076108][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 155.076136][ T7687] CPU: 3 UID: 0 PID: 7687 Comm: syz.4.390 Not tainted syzkaller #0 PREEMPT(full) [ 155.076155][ T7687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.076164][ T7687] Call Trace: [ 155.076170][ T7687] [ 155.076177][ T7687] dump_stack_lvl+0x100/0x190 [ 155.076206][ T7687] should_fail_ex.cold+0x5/0xa [ 155.076227][ T7687] should_failslab+0xc2/0x120 [ 155.076254][ T7687] kmem_cache_alloc_noprof+0x92/0x6a0 [ 155.076273][ T7687] ? __pfx_map_id_range_down+0x10/0x10 [ 155.076298][ T7687] ? security_inode_alloc+0x3b/0x2c0 [ 155.076321][ T7687] security_inode_alloc+0x3b/0x2c0 [ 155.076341][ T7687] inode_init_always_gfp+0xc6f/0xfb0 [ 155.076369][ T7687] alloc_inode+0x8e/0x250 [ 155.076385][ T7687] new_inode+0x22/0x1c0 [ 155.076404][ T7687] shmem_get_inode+0x1e3/0xf70 [ 155.076431][ T7687] ? __pfx_shmem_get_inode+0x10/0x10 [ 155.076454][ T7687] ? __pfx_make_vfsuid+0x10/0x10 [ 155.076478][ T7687] shmem_mknod+0x217/0x480 [ 155.076504][ T7687] ? __pfx_shmem_mknod+0x10/0x10 [ 155.076525][ T7687] ? security_inode_permission+0xbf/0x250 [ 155.076545][ T7687] ? inode_permission+0x374/0x620 [ 155.076567][ T7687] shmem_mkdir+0x31/0x80 [ 155.076598][ T7687] vfs_mkdir+0x364/0x850 [ 155.076621][ T7687] filename_mkdirat+0x48b/0x5e0 [ 155.076649][ T7687] ? __pfx_filename_mkdirat+0x10/0x10 [ 155.076672][ T7687] ? strncpy_from_user+0x19d/0x2d0 [ 155.076695][ T7687] ? do_getname+0x191/0x390 [ 155.076715][ T7687] __ia32_sys_mkdirat+0x88/0xc0 [ 155.076740][ T7687] __do_fast_syscall_32+0x13a/0x8b0 [ 155.076762][ T7687] do_fast_syscall_32+0x32/0x70 [ 155.076780][ T7687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.076801][ T7687] RIP: 0023:0xf7fa2fec [ 155.076821][ T7687] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 155.076829][ T7687] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 155.076845][ T7687] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 155.076856][ T7687] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 155.076866][ T7687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.076875][ T7687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.076884][ T7687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.076909][ T7687] [ 155.109280][ T44] audit: type=1800 audit(1791733677.241:141): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128612 res=0 errno=0 [ 155.111264][ T7699] input: syz1 as /devices/virtual/input/input8 [ 155.113793][ T44] audit: type=1800 audit(1791733677.251:142): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=128627 res=0 errno=0 [ 155.118446][ T44] audit: type=1800 audit(1791733677.251:143): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=128630 res=0 errno=0 [ 155.118488][ T44] audit: type=1800 audit(1791733677.251:144): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=128629 res=0 errno=0 [ 155.118520][ T44] audit: type=1800 audit(1791733677.251:145): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=128628 res=0 errno=0 [ 155.126216][ T44] audit: type=1800 audit(1791733677.261:146): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=128619 res=0 errno=0 [ 155.539379][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.740815][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.743310][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.743558][ T30] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 155.762569][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.762630][ T30] usb 5-1: Product: syz [ 155.762640][ T30] usb 5-1: Manufacturer: syz [ 155.762698][ T30] usb 5-1: SerialNumber: syz [ 155.851785][ T30] cdc_mbim 5-1:1.0: skipping garbage [ 156.020024][ T7705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.153316][ T5748] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 156.425572][ T7705] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 156.425588][ T7705] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.396'. [ 156.639622][ T7705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.639866][ T30] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 156.641984][ T30] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 156.648365][ T30] wwan wwan0: port wwan0mbim0 attached [ 156.660113][ T30] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ae:a8:1c:fc:85:02 [ 156.710885][ T1677] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 156.842863][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 156.842916][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 156.843104][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 156.843116][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 156.843294][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 156.843304][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 156.843481][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 156.843490][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 156.846264][ T30] usb 5-1: USB disconnect, device number 4 [ 156.846963][ T30] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 156.871279][ T1677] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.872624][ T1677] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.872646][ T1677] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 156.874592][ T1677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.874604][ T1677] usb 9-1: Product: syz [ 156.874614][ T1677] usb 9-1: Manufacturer: syz [ 156.874621][ T1677] usb 9-1: SerialNumber: syz [ 156.903295][ T1677] cdc_mbim 9-1:1.0: skipping garbage [ 156.920125][ T30] wwan wwan0: port wwan0mbim0 disconnected [ 156.931784][ T7753] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 156.936362][ T7748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.407'. [ 156.936375][ T7748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.407'. [ 156.936382][ T7748] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 157.016888][ T7762] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(8) [ 157.082541][ T7735] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.695177][ T7735] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.700729][ T1677] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 157.790512][ T1677] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 157.812102][ T7786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.414'. [ 158.360653][ T1677] wwan wwan0: port wwan0mbim0 attached [ 158.388059][ T1677] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, a2:73:f3:2d:94:40 [ 158.404328][ T1677] usb 9-1: USB disconnect, device number 3 [ 158.404402][ T44] kauditd_printk_skb: 34 callbacks suppressed [ 158.404433][ T44] audit: type=1800 audit(1791733680.541:181): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=129045 res=0 errno=0 [ 158.404460][ T44] audit: type=1800 audit(1791733680.541:182): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=129046 res=0 errno=0 [ 158.408410][ T44] audit: type=1800 audit(1791733680.541:183): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=129025 res=0 errno=0 [ 158.418026][ T1677] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 158.476450][ T7794] FAULT_INJECTION: forcing a failure. [ 158.476450][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 158.476470][ T7794] CPU: 3 UID: 0 PID: 7794 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(full) [ 158.476482][ T7794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.476489][ T7794] Call Trace: [ 158.476493][ T7794] [ 158.476498][ T7794] dump_stack_lvl+0x100/0x190 [ 158.476517][ T7794] should_fail_ex.cold+0x5/0xa [ 158.476532][ T7794] should_failslab+0xc2/0x120 [ 158.476550][ T7794] __kmalloc_cache_noprof+0x91/0x6d0 [ 158.476563][ T7794] ? lock_acquire+0x1d1/0x380 [ 158.476579][ T7794] ? ima_add_digest_entry+0x53/0x5b0 [ 158.476600][ T7794] ima_add_digest_entry+0x53/0x5b0 [ 158.476618][ T7794] ima_add_template_entry+0x45e/0x8b0 [ 158.476639][ T7794] ? __pfx_ima_add_template_entry+0x10/0x10 [ 158.476657][ T7794] ? ima_calc_field_array_hash+0x378/0x440 [ 158.476673][ T7794] ima_store_template+0xda/0x150 [ 158.476687][ T7794] ima_store_measurement+0x21c/0x5b0 [ 158.476700][ T7794] ? __pfx_ima_store_measurement+0x10/0x10 [ 158.476719][ T7794] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 158.476738][ T7794] process_measurement+0x19cc/0x2350 [ 158.476755][ T7794] ? __pfx_process_measurement+0x10/0x10 [ 158.476769][ T7794] ? rcu_read_unlock+0x17/0x60 [ 158.476785][ T7794] ? find_held_lock+0x2b/0x80 [ 158.476811][ T7794] ? event_trigger_open+0x38/0x590 [ 158.476825][ T7794] ima_file_check+0xcc/0x120 [ 158.476836][ T7794] ? __pfx_ima_file_check+0x10/0x10 [ 158.476851][ T7794] security_file_post_open+0xc4/0x210 [ 158.476865][ T7794] path_openat+0x5cd/0x2440 [ 158.476883][ T7794] ? __pfx_path_openat+0x10/0x10 [ 158.476903][ T7794] do_file_open+0x20e/0x430 [ 158.476956][ T7794] ? __pfx_do_file_open+0x10/0x10 [ 158.476989][ T7794] ? _raw_spin_unlock+0x28/0x50 [ 158.477010][ T7794] ? alloc_fd+0x471/0x7a0 [ 158.477029][ T7794] do_sys_openat2+0x10f/0x1e0 [ 158.477041][ T7794] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.477053][ T7794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.477068][ T7794] __ia32_compat_sys_openat+0x12d/0x210 [ 158.477080][ T7794] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 158.477092][ T7794] ? fput+0x7c/0x100 [ 158.477108][ T7794] ? ksys_write+0x1ac/0x250 [ 158.477122][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 158.477139][ T7794] __do_fast_syscall_32+0x13a/0x8b0 [ 158.477150][ T7794] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.477168][ T7794] do_fast_syscall_32+0x32/0x70 [ 158.477180][ T7794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.477194][ T7794] RIP: 0023:0xf7fa2fec [ 158.477207][ T7794] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 158.477212][ T7794] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 158.477223][ T7794] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 158.477231][ T7794] RDX: 0000000000000302 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.477237][ T7794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.477243][ T7794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.477249][ T7794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.477263][ T7794] [ 158.477268][ T7794] ima: OUT OF MEMORY ERROR creating queue entry [ 158.478648][ T44] audit: type=1804 audit(1791733680.611:184): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.417" name="/newroot/56/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 158.513789][ T44] audit: type=1800 audit(1791733680.651:185): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.418" name="file0" dev="overlay" ino=609 res=0 errno=0 [ 158.628718][ T44] audit: type=1800 audit(1791733680.761:186): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129308 res=0 errno=0 [ 158.639758][ T44] audit: type=1800 audit(1791733680.781:187): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129320 res=0 errno=0 [ 158.644320][ T44] audit: type=1800 audit(1791733680.781:188): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129332 res=0 errno=0 [ 158.658000][ T1677] wwan wwan0: port wwan0mbim0 disconnected [ 158.685516][ T44] audit: type=1800 audit(1791733680.821:189): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=129047 res=0 errno=0 [ 158.725849][ T44] audit: type=1800 audit(1791733680.861:190): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30167 res=0 errno=0 [ 159.568239][ T7829] mtrr: base(0x1400010000000) is not aligned on a size(0xf800000) boundary [ 160.614946][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 160.682249][ T7863] ip6t_REJECT: ECHOREPLY is not supported [ 160.886786][ T7877] netlink: 412 bytes leftover after parsing attributes in process `syz.0.435'. [ 160.886813][ T7877] openvswitch: netlink: Flow key attr not present in new flow. [ 160.906368][ T7878] FAULT_INJECTION: forcing a failure. [ 160.906368][ T7878] name fail_futex, interval 1, probability 0, space 0, times 1 [ 160.906390][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT(full) [ 160.906405][ T7878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.906411][ T7878] Call Trace: [ 160.906416][ T7878] [ 160.906421][ T7878] dump_stack_lvl+0x100/0x190 [ 160.906455][ T7878] should_fail_ex.cold+0x5/0xa [ 160.906471][ T7878] get_futex_key+0x1d0/0x14f0 [ 160.906486][ T7878] ? __pfx_get_futex_key+0x10/0x10 [ 160.906498][ T7878] ? find_held_lock+0x2b/0x80 [ 160.906512][ T7878] ? futex_wake+0x4ea/0x5e0 [ 160.906530][ T7878] futex_wake+0xf4/0x5e0 [ 160.906544][ T7878] ? futex_wait+0x11e/0x370 [ 160.906560][ T7878] ? __pfx_futex_wake+0x10/0x10 [ 160.906577][ T7878] ? rcu_read_lock_any_held+0x6a/0x90 [ 160.906591][ T7878] ? find_held_lock+0x2b/0x80 [ 160.906604][ T7878] ? ksys_write+0x190/0x250 [ 160.906617][ T7878] ? ksys_write+0x190/0x250 [ 160.906633][ T7878] do_futex+0x2b2/0x440 [ 160.906651][ T7878] ? __pfx_do_futex+0x10/0x10 [ 160.906665][ T7878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.906681][ T7878] __ia32_sys_futex_time32+0x2f4/0x470 [ 160.906699][ T7878] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 160.906714][ T7878] ? __task_pid_nr_ns+0x1ca/0x510 [ 160.906728][ T7878] ? __task_pid_nr_ns+0x1ca/0x510 [ 160.906746][ T7878] __do_fast_syscall_32+0x13a/0x8b0 [ 160.906761][ T7878] do_fast_syscall_32+0x32/0x70 [ 160.906773][ T7878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.906788][ T7878] RIP: 0023:0xf740efec [ 160.906801][ T7878] Code: Unable to access opcode bytes at 0xf740efc2. [ 160.906806][ T7878] RSP: 002b:00000000f4ef25cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 160.906817][ T7878] RAX: ffffffffffffffda RBX: 00000000f7435154 RCX: 0000000000000081 [ 160.906825][ T7878] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 160.906831][ T7878] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 160.906838][ T7878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.906844][ T7878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.906859][ T7878] [ 161.209324][ T9] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 161.266748][ T5748] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 161.479899][ T9] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 161.480781][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.480797][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.480810][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 161.482723][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.482735][ T9] usb 8-1: Product: syz [ 161.482742][ T9] usb 8-1: Manufacturer: syz [ 161.482749][ T9] usb 8-1: SerialNumber: syz [ 161.486104][ T9] usb 8-1: config 0 descriptor?? [ 161.489454][ T7878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.621739][ T9] rc_core: IR keymap rc-streamzap not found [ 161.621757][ T9] Registered IR keymap rc-empty [ 161.640443][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 161.652505][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 161.788653][ T25] usb 8-1: USB disconnect, device number 8 [ 162.844945][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 162.852804][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 162.864848][ T7912] vlan2: entered allmulticast mode [ 162.864869][ T7912] bond0: entered allmulticast mode [ 162.864883][ T7912] bond_slave_0: entered allmulticast mode [ 162.864926][ T7912] bond_slave_1: entered allmulticast mode [ 162.867753][ T7912] netlink: 14 bytes leftover after parsing attributes in process `syz.3.444'. [ 162.895975][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.900725][ T7912] bond_slave_0: left allmulticast mode [ 162.911572][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.914214][ T7912] bond_slave_1: left allmulticast mode [ 162.916497][ T7912] bond0 (unregistering): Released all slaves [ 163.109719][ T7924] ALSA: mixer_oss: invalid OSS volume '' [ 163.317613][ T5748] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 163.330456][ T5748] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 165.203166][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 165.203250][ T44] audit: type=1800 audit(1791733687.341:221): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34593 res=0 errno=0 [ 165.209350][ T44] audit: type=1800 audit(1791733687.341:222): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34616 res=0 errno=0 [ 165.439381][ T855] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 165.615516][ T7966] dvmrp0: entered allmulticast mode [ 165.633000][ T7966] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 165.702536][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 165.702588][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 165.705869][ T7973] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 165.727623][ T7973] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 165.795121][ T7974] netlink: 80 bytes leftover after parsing attributes in process `syz.4.461'. [ 166.020830][ T44] audit: type=1800 audit(1791733688.161:223): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.463" name="remove" dev="sysfs" ino=2123 res=0 errno=0 [ 166.027567][ T7978] e1000e 0000:00:02.0 eth1: removed PHC [ 166.075007][ T44] audit: type=1800 audit(1791733688.211:224): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.463" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 166.145637][ T7978] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 166.301897][ T7982] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 166.313981][ T7982] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 166.314176][ T7982] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 166.314524][ T7982] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 166.315676][ T7982] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 166.341967][ T44] audit: type=1800 audit(1791733688.471:225): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130234 res=0 errno=0 [ 166.346460][ T7982] pci 0000:00:01.0: Adding to iommu group 1 [ 166.358322][ T7982] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 166.358335][ T7982] pci 0000:00:01.0: vgaarb: bridge control possible [ 166.358343][ T7982] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 166.365840][ T44] audit: type=1800 audit(1791733688.501:226): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130249 res=0 errno=0 [ 166.376761][ T7982] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 166.386806][ T7982] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 166.386870][ T7982] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 166.386967][ T7982] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 166.387022][ T7982] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 166.387204][ T7982] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 166.387553][ T7982] pci 0000:00:02.0: enabling Extended Tags [ 166.406495][ T44] audit: type=1800 audit(1791733688.541:227): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130304 res=0 errno=0 [ 166.420892][ T7982] pci 0000:00:02.0: Adding to iommu group 2 [ 166.429070][ T44] audit: type=1800 audit(1791733688.561:228): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130319 res=0 errno=0 [ 166.439576][ T7982] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 166.447978][ T7982] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 166.448012][ T7982] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 166.449433][ T7982] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 166.450791][ T7982] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 166.453338][ T7982] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 166.454313][ T7982] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 166.476674][ T7982] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 166.492989][ T7982] [drm] Found bochs VGA, ID 0xb0c5. [ 166.493007][ T7982] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 166.510587][ T44] audit: type=1800 audit(1791733688.651:229): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130387 res=0 errno=0 [ 166.527472][ T44] audit: type=1800 audit(1791733688.661:230): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130401 res=0 errno=0 [ 166.542027][ T7982] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 166.689371][ T7982] Console: switching to colour frame buffer device 160x50 [ 166.722993][ T7982] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 166.806153][ T7982] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 166.894353][ T7982] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 166.986306][ T8008] gadgetfs: bound to dummy_udc driver [ 167.023612][ T7982] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 167.023633][ T7982] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 167.023839][ T7982] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 167.192078][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.192413][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.239388][ T5755] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 167.239637][ C1] gadgetfs: connected [ 167.240213][ T5755] gadgetfs: disconnected [ 167.397377][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.397673][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.411930][ C1] gadgetfs: connected [ 167.412863][ T5755] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 167.413215][ T5755] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 167.413248][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.416931][ C1] gadgetfs: configuration #1 [ 167.470119][ T7997] gadgetfs: suspended from state 3 [ 167.470486][ T5755] usb 5-1: USB disconnect, device number 5 [ 167.471154][ T7997] gadgetfs: disconnected [ 167.870539][ T5452] 8021q: adding VLAN 0 to HW filter on device eth1 [ 168.206804][ T855] usb 7-1: unable to get BOS descriptor or descriptor too short [ 168.206901][ T855] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 168.208541][ T855] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 168.208593][ T855] usb 7-1: can't read configurations, error -71 [ 168.339052][ T5755] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 169.180357][ T5753] overlayfs: failed lookup in lower (newroot/120, name='file0', err=-40): overlapping layers [ 169.180459][ T5753] overlayfs: failed lookup in lower (newroot/120, name='file0', err=-40): overlapping layers [ 169.616563][ T5580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.696055][ T8089] can0: slcan on ttyS3. [ 169.710639][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.714524][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.719677][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.725545][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.726764][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.815004][ T8089] can0 (unregistered): slcan off ttyS3. [ 169.824577][ T5580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.908806][ T5580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.042796][ T5580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.199000][ T8090] lo speed is unknown, defaulting to 1000 [ 170.216397][ T44] kauditd_printk_skb: 41 callbacks suppressed [ 170.216410][ T44] audit: type=1800 audit(1791733692.351:272): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131301 res=0 errno=0 [ 170.223757][ T44] audit: type=1800 audit(1791733692.351:273): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=131306 res=0 errno=0 [ 170.230368][ T44] audit: type=1800 audit(1791733692.371:274): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=131310 res=0 errno=0 [ 170.230395][ T44] audit: type=1800 audit(1791733692.371:275): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=131309 res=0 errno=0 [ 170.235643][ T44] audit: type=1800 audit(1791733692.371:276): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=131312 res=0 errno=0 [ 170.265753][ T44] audit: type=1800 audit(1791733692.401:277): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131461 res=0 errno=0 [ 170.272203][ T44] audit: type=1800 audit(1791733692.411:278): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=131466 res=0 errno=0 [ 170.273402][ T44] audit: type=1800 audit(1791733692.411:279): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=131470 res=0 errno=0 [ 170.278011][ T44] audit: type=1800 audit(1791733692.411:280): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=131469 res=0 errno=0 [ 170.282647][ T44] audit: type=1800 audit(1791733692.421:281): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=131472 res=0 errno=0 [ 170.310220][ T5580] bridge_slave_1: left allmulticast mode [ 170.310236][ T5580] bridge_slave_1: left promiscuous mode [ 170.310343][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.314240][ T5580] bridge_slave_0: left allmulticast mode [ 170.314262][ T5580] bridge_slave_0: left promiscuous mode [ 170.314411][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.486001][ T5580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.488467][ T5580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.495746][ T5580] bond0 (unregistering): Released all slaves [ 170.522911][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 170.573204][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.484'. [ 170.604776][ T5580] ovs-dp0: left promiscuous mode [ 171.022771][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.095321][ T8130] syzkaller0: entered promiscuous mode [ 171.095342][ T8130] syzkaller0: entered allmulticast mode [ 171.277177][ T5580] hsr_slave_0: left promiscuous mode [ 171.277813][ T5580] hsr_slave_1: left promiscuous mode [ 171.278496][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.278510][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.279139][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.279151][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.303346][ T5580] veth1_macvtap: left promiscuous mode [ 171.303370][ T5580] veth0_macvtap: left promiscuous mode [ 171.303448][ T5580] veth1_vlan: left promiscuous mode [ 171.303480][ T5580] veth0_vlan: left promiscuous mode [ 171.523756][ T5580] team0 (unregistering): Port device team_slave_1 removed [ 171.528895][ T5580] team0 (unregistering): Port device team_slave_0 removed [ 171.685654][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 171.686435][ T5828] infiniband syz2: ib_query_port failed (-19) [ 171.687268][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.688402][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.688510][ T8090] bridge_slave_0: entered allmulticast mode [ 171.691642][ T74] smbdirect: ib_dev[syz2] removed [ 171.692340][ T8090] bridge_slave_0: entered promiscuous mode [ 171.699551][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.700331][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.700446][ T8090] bridge_slave_1: entered allmulticast mode [ 171.702953][ T8090] bridge_slave_1: entered promiscuous mode [ 171.738287][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.744360][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.780101][ T5750] Bluetooth: hci2: command tx timeout [ 171.783634][ T8090] team0: Port device team_slave_0 added [ 171.790842][ T8090] team0: Port device team_slave_1 added [ 171.887225][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.887241][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.887261][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.888795][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.888807][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.888828][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.972016][ T8090] hsr_slave_0: entered promiscuous mode [ 171.976757][ T8090] hsr_slave_1: entered promiscuous mode [ 171.986681][ T8162] FAULT_INJECTION: forcing a failure. [ 171.986681][ T8162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.986712][ T8162] CPU: 2 UID: 0 PID: 8162 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(full) [ 171.986732][ T8162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.986743][ T8162] Call Trace: [ 171.986750][ T8162] [ 171.986757][ T8162] dump_stack_lvl+0x100/0x190 [ 171.986854][ T8162] should_fail_ex.cold+0x5/0xa [ 171.986881][ T8162] _copy_from_user+0x2e/0xd0 [ 171.986931][ T8162] io_uring_setup+0xc0/0x160 [ 171.986953][ T8162] ? rcu_read_lock_any_held+0x6a/0x90 [ 171.986978][ T8162] ? find_held_lock+0x2b/0x80 [ 171.987001][ T8162] ? __pfx_io_uring_setup+0x10/0x10 [ 171.987020][ T8162] ? ksys_write+0x190/0x250 [ 171.987045][ T8162] ? lock_acquire+0x1d1/0x380 [ 171.987075][ T8162] ? __mutex_unlock_slowpath+0x35d/0x930 [ 171.987133][ T8162] ? fput+0x7c/0x100 [ 171.987160][ T8162] ? ksys_write+0x1ac/0x250 [ 171.987185][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 171.987211][ T8162] __ia32_sys_io_uring_setup+0xc2/0x170 [ 171.987233][ T8162] __do_fast_syscall_32+0x13a/0x8b0 [ 171.987251][ T8162] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.987282][ T8162] do_fast_syscall_32+0x32/0x70 [ 171.987300][ T8162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.987325][ T8162] RIP: 0023:0xf740efec [ 171.987346][ T8162] Code: Unable to access opcode bytes at 0xf740efc2. [ 171.987354][ T8162] RSP: 002b:00000000f542643c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 171.987372][ T8162] RAX: ffffffffffffffda RBX: 00000000000003f7 RCX: 0000000080000908 [ 171.987384][ T8162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.987394][ T8162] RBP: 00000000f54264fc R08: 0000000000000000 R09: 0000000000000000 [ 171.987405][ T8162] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.987416][ T8162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.987441][ T8162] [ 172.015068][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.310464][ T8090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.323088][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.323548][ T8090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.325209][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.329635][ T8090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.335229][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.335644][ T8090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.354985][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.437082][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.450644][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.458277][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.458335][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.463684][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.463734][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.084707][ T8192] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(9) [ 173.134252][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.459502][ T5750] Bluetooth: hci3: command 0x1003 tx timeout [ 173.459597][ T5748] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 173.720254][ T8090] veth0_vlan: entered promiscuous mode [ 173.724202][ T8090] veth1_vlan: entered promiscuous mode [ 173.744586][ T8090] veth0_macvtap: entered promiscuous mode [ 173.748295][ T8090] veth1_macvtap: entered promiscuous mode [ 173.755940][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.765399][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.779749][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.860226][ T5748] Bluetooth: hci2: command tx timeout [ 174.292432][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.292452][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.299427][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.299959][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.375828][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.375848][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.379370][ T5580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.465625][ T8227] netlink: 256 bytes leftover after parsing attributes in process `syz.2.500'. [ 174.465646][ T8227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.500'. [ 174.498843][ T8221] tipc: Started in network mode [ 174.498859][ T8221] tipc: Node identity 8ee99c7a352d, cluster identity 4711 [ 174.499000][ T8221] tipc: Enabled bearer , priority 0 [ 174.500954][ T8221] syzkaller0: entered promiscuous mode [ 174.500966][ T8221] syzkaller0: entered allmulticast mode [ 174.515442][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 174.517752][ T8221] tipc: Resetting bearer [ 174.609644][ T8220] tipc: Resetting bearer [ 174.756139][ T8220] tipc: Disabling bearer [ 175.265414][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.504'. [ 175.447473][ T44] kauditd_printk_skb: 19 callbacks suppressed [ 175.447492][ T44] audit: type=1326 audit(1791733697.581:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.447535][ T44] audit: type=1326 audit(1791733697.581:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448131][ T44] audit: type=1326 audit(1791733697.581:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448509][ T44] audit: type=1326 audit(1791733697.581:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448549][ T44] audit: type=1326 audit(1791733697.581:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448740][ T44] audit: type=1326 audit(1791733697.581:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448780][ T44] audit: type=1326 audit(1791733697.581:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.448817][ T44] audit: type=1326 audit(1791733697.581:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.449074][ T44] audit: type=1326 audit(1791733697.581:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.450305][ T44] audit: type=1326 audit(1791733697.581:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 175.590961][ T8257] bridge0: port 3(syz_tun) entered blocking state [ 175.591092][ T8257] bridge0: port 3(syz_tun) entered disabled state [ 175.591214][ T8257] syz_tun: entered allmulticast mode [ 175.592665][ T8257] syz_tun: entered promiscuous mode [ 175.593249][ T8257] bridge0: port 3(syz_tun) entered blocking state [ 175.593371][ T8257] bridge0: port 3(syz_tun) entered listening state [ 175.609874][ T8257] bridge0: port 3(syz_tun) tried to become root port (blocked) [ 175.610792][ T8257] bridge0: port 3(syz_tun) entered listening state [ 175.645191][ T8263] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 175.756934][ T8259] nvme nvme0: failed to connect socket: -111 [ 175.757327][ T8259] [ 175.761163][ T8259] ====================================================== [ 175.764239][ T8259] WARNING: possible circular locking dependency detected [ 175.767332][ T8259] syzkaller #0 Not tainted [ 175.769453][ T8259] ------------------------------------------------------ [ 175.772329][ T8259] syz.2.507/8259 is trying to acquire lock: [ 175.774933][ T8259] ffff88805161aa80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 175.779429][ T8259] [ 175.779429][ T8259] but task is already holding lock: [ 175.782675][ T8259] ffffffff90f54ae0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 175.786573][ T8259] [ 175.786573][ T8259] which lock already depends on the new lock. [ 175.786573][ T8259] [ 175.791088][ T8259] [ 175.791088][ T8259] the existing dependency chain (in reverse order) is: [ 175.795014][ T8259] [ 175.795014][ T8259] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 175.798347][ T8259] lock_acquire+0x1d1/0x380 [ 175.800605][ T8259] __mutex_lock+0x1a4/0x1bd0 [ 175.802931][ T8259] nvmf_dev_show+0x26/0x210 [ 175.805191][ T8259] seq_read_iter+0x32f/0x1270 [ 175.807518][ T8259] seq_read+0x344/0x4d0 [ 175.809625][ T8259] vfs_read+0x1e4/0xb40 [ 175.811740][ T8259] ksys_read+0x12a/0x250 [ 175.813896][ T8259] __do_fast_syscall_32+0x13a/0x8b0 [ 175.816386][ T8259] do_fast_syscall_32+0x32/0x70 [ 175.818756][ T8259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.821771][ T8259] [ 175.821771][ T8259] -> #3 (&p->lock){+.+.}-{4:4}: [ 175.824876][ T8259] lock_acquire+0x1d1/0x380 [ 175.827126][ T8259] __mutex_lock+0x1a4/0x1bd0 [ 175.829398][ T8259] seq_read_iter+0xe1/0x1270 [ 175.831681][ T8259] kernfs_fop_read_iter+0x46c/0x610 [ 175.834214][ T8259] __kernel_read+0x397/0xad0 [ 175.836484][ T8259] integrity_kernel_read+0x7e/0xb0 [ 175.839006][ T8259] ima_calc_file_hash_tfm+0x25e/0x350 [ 175.841638][ T8259] ima_calc_file_hash+0x167/0x380 [ 175.844071][ T8259] ima_collect_measurement+0x94f/0xb30 [ 175.846727][ T8259] process_measurement+0xdfe/0x2350 [ 175.849253][ T8259] ima_file_check+0xcc/0x120 [ 175.851530][ T8259] security_file_post_open+0xc4/0x210 [ 175.854140][ T8259] path_openat+0x5cd/0x2440 [ 175.856372][ T8259] do_file_open+0x20e/0x430 [ 175.858614][ T8259] do_sys_openat2+0x10f/0x1e0 [ 175.860933][ T8259] __ia32_compat_sys_openat+0x12d/0x210 [ 175.863622][ T8259] __do_fast_syscall_32+0x13a/0x8b0 [ 175.866114][ T8259] do_fast_syscall_32+0x32/0x70 [ 175.868488][ T8259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.871502][ T8259] [ 175.871502][ T8259] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 175.875260][ T8259] lock_acquire+0x1d1/0x380 [ 175.877516][ T8259] __mutex_lock+0x1a4/0x1bd0 [ 175.879772][ T8259] process_measurement+0x5ab/0x2350 [ 175.882308][ T8259] ima_file_check+0xcc/0x120 [ 175.884584][ T8259] security_file_post_open+0xc4/0x210 [ 175.887214][ T8259] path_openat+0x5cd/0x2440 [ 175.889473][ T8259] do_file_open+0x20e/0x430 [ 175.891738][ T8259] file_open_name+0x1c3/0x3e0 [ 175.894045][ T8259] filp_open+0x2e/0x50 [ 175.896100][ T8259] kernel_read_file_from_path_initns+0xec/0x240 [ 175.899063][ T8259] _request_firmware+0x733/0x13c0 [ 175.901540][ T8259] request_firmware+0x35/0x50 [ 175.903858][ T8259] reg_reload_regdb+0x85/0x460 [ 175.906215][ T8259] genl_family_rcv_msg_doit+0x214/0x300 [ 175.908883][ T8259] genl_rcv_msg+0x560/0x800 [ 175.911165][ T8259] netlink_rcv_skb+0x159/0x420 [ 175.913518][ T8259] genl_rcv+0x28/0x40 [ 175.915552][ T8259] netlink_unicast+0x585/0x850 [ 175.917908][ T8259] netlink_sendmsg+0x8b0/0xda0 [ 175.920259][ T8259] ____sys_sendmsg+0xa4d/0xbe0 [ 175.922632][ T8259] ___sys_sendmsg+0x190/0x1e0 [ 175.924953][ T8259] __sys_sendmsg+0x160/0x210 [ 175.927232][ T8259] __do_fast_syscall_32+0x13a/0x8b0 [ 175.929766][ T8259] do_fast_syscall_32+0x32/0x70 [ 175.932113][ T8259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.935132][ T8259] [ 175.935132][ T8259] -> #1 (cb_lock){++++}-{4:4}: [ 175.938197][ T8259] lock_acquire+0x1d1/0x380 [ 175.940468][ T8259] down_read+0x99/0x4c0 [ 175.942586][ T8259] genl_release+0x7e/0x1d0 [ 175.944802][ T8259] netlink_release+0x105e/0x2000 [ 175.947268][ T8259] __sock_release+0xb3/0x260 [ 175.949600][ T8259] sock_close+0x1c/0x30 [ 175.951692][ T8259] __fput+0x400/0xb60 [ 175.953753][ T8259] fput_close_sync+0x118/0x250 [ 175.956098][ T8259] __x64_sys_close+0x8b/0x120 [ 175.958414][ T8259] do_syscall_64+0x121/0x770 [ 175.960702][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.963594][ T8259] [ 175.963594][ T8259] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 175.967402][ T8259] check_prev_add+0xeb/0xe60 [ 175.969708][ T8259] __lock_acquire+0x1528/0x1f40 [ 175.972082][ T8259] lock_acquire+0x1d1/0x380 [ 175.974373][ T8259] down_write+0x8b/0x1f0 [ 175.976539][ T8259] __sock_release+0x86/0x260 [ 175.978847][ T8259] sock_close+0x1c/0x30 [ 175.980946][ T8259] __fput+0x400/0xb60 [ 175.982980][ T8259] __fput_sync+0xd7/0x100 [ 175.985152][ T8259] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 175.987968][ T8259] nvme_tcp_configure_admin_queue+0x26/0x530 [ 175.990858][ T8259] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 175.993315][ T8259] nvme_tcp_create_ctrl+0x970/0xd90 [ 175.995837][ T8259] nvmf_dev_write+0x4ee/0xb60 [ 175.998189][ T8259] vfs_write+0x2aa/0x1050 [ 176.000350][ T8259] ksys_write+0x12a/0x250 [ 176.002553][ T8259] __do_fast_syscall_32+0x13a/0x8b0 [ 176.005070][ T8259] do_fast_syscall_32+0x32/0x70 [ 176.007433][ T8259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.010457][ T8259] [ 176.010457][ T8259] other info that might help us debug this: [ 176.010457][ T8259] [ 176.014896][ T8259] Chain exists of: [ 176.014896][ T8259] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 176.014896][ T8259] [ 176.020732][ T8259] Possible unsafe locking scenario: [ 176.020732][ T8259] [ 176.024001][ T8259] CPU0 CPU1 [ 176.026363][ T8259] ---- ---- [ 176.028735][ T8259] lock(nvmf_dev_mutex); [ 176.030662][ T8259] lock(&p->lock); [ 176.033448][ T8259] lock(nvmf_dev_mutex); [ 176.036478][ T8259] lock(&sb->s_type->i_mutex_key#13); [ 176.038948][ T8259] [ 176.038948][ T8259] *** DEADLOCK *** [ 176.038948][ T8259] [ 176.042489][ T8259] locks held by syz.2.507/8259: 1, last CPU#2: [ 176.045215][ T8259] #0: ffffffff90f54ae0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 176.049348][ T8259] [ 176.049348][ T8259] stack backtrace: [ 176.051983][ T8259] CPU: 2 UID: 0 PID: 8259 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(full) [ 176.056053][ T8259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.060496][ T8259] Call Trace: [ 176.061989][ T8259] [ 176.063322][ T8259] dump_stack_lvl+0x100/0x190 [ 176.065440][ T8259] print_circular_bug.cold+0x178/0x1be [ 176.067867][ T8259] check_noncircular+0x146/0x160 [ 176.070100][ T8259] check_prev_add+0xeb/0xe60 [ 176.072174][ T8259] __lock_acquire+0x1528/0x1f40 [ 176.074359][ T8259] ? do_fast_syscall_32+0x32/0x70 [ 176.076603][ T8259] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.079476][ T8259] lock_acquire+0x1d1/0x380 [ 176.081525][ T8259] ? __sock_release+0x86/0x260 [ 176.083665][ T8259] ? __pfx___might_resched+0x10/0x10 [ 176.086024][ T8259] down_write+0x8b/0x1f0 [ 176.087931][ T8259] ? __sock_release+0x86/0x260 [ 176.090073][ T8259] ? __pfx_down_write+0x10/0x10 [ 176.092147][ T8259] ? __pfx_locks_remove_file+0x10/0x10 [ 176.094581][ T8259] __sock_release+0x86/0x260 [ 176.096647][ T8259] ? __pfx_sock_close+0x10/0x10 [ 176.098808][ T8259] sock_close+0x1c/0x30 [ 176.100665][ T8259] __fput+0x400/0xb60 [ 176.102469][ T8259] ? kfree+0x22b/0x6d0 [ 176.104304][ T8259] __fput_sync+0xd7/0x100 [ 176.106285][ T8259] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 176.108979][ T8259] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 176.111738][ T8259] nvme_tcp_configure_admin_queue+0x26/0x530 [ 176.114433][ T8259] ? __wake_up+0x3f/0x60 [ 176.116357][ T8259] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 176.118634][ T8259] ? mark_held_locks+0x40/0x70 [ 176.120808][ T8259] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 176.123360][ T8259] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.125726][ T8259] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 176.128344][ T8259] ? nvme_change_ctrl_state+0xc0/0x440 [ 176.130787][ T8259] nvme_tcp_create_ctrl+0x970/0xd90 [ 176.133118][ T8259] nvmf_dev_write+0x4ee/0xb60 [ 176.135204][ T8259] vfs_write+0x2aa/0x1050 [ 176.137142][ T8259] ? __pfx_nvmf_dev_write+0x10/0x10 [ 176.139443][ T8259] ? lock_acquire+0x1d1/0x380 [ 176.141595][ T8259] ? __fget_files+0x34/0x3d0 [ 176.143694][ T8259] ? __pfx_vfs_write+0x10/0x10 [ 176.145867][ T8259] ? find_held_lock+0x2b/0x80 [ 176.147984][ T8259] ? __fget_files+0x215/0x3d0 [ 176.150102][ T8259] ? __fget_files+0x215/0x3d0 [ 176.152205][ T8259] ? __fget_files+0x21f/0x3d0 [ 176.154351][ T8259] ksys_write+0x12a/0x250 [ 176.156311][ T8259] ? __pfx_ksys_write+0x10/0x10 [ 176.158528][ T8259] __do_fast_syscall_32+0x13a/0x8b0 [ 176.160855][ T8259] do_fast_syscall_32+0x32/0x70 [ 176.163026][ T8259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.165821][ T8259] RIP: 0023:0xf7fc5fec [ 176.167678][ T8259] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 176.170629][ T8259] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 176.174294][ T8259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 176.177771][ T8259] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.181280][ T8259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.184754][ T8259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.188244][ T8259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.191754][ T8259] [ 176.200770][ T5748] Bluetooth: hci2: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.613919][ T8266] bridge0: port 3(syz_tun) entered disabled state [ 176.623699][ T8266] syz_tun (unregistering): left allmulticast mode [ 176.623715][ T8266] syz_tun (unregistering): left promiscuous mode [ 176.623740][ T8266] bridge0: port 3(syz_tun) entered disabled state [ 176.800164][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.943160][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.992471][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.032061][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.112776][ T13] bridge_slave_1: left allmulticast mode [ 177.112800][ T13] bridge_slave_1: left promiscuous mode [ 177.112965][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.114173][ T13] bridge_slave_0: left allmulticast mode [ 177.114189][ T13] bridge_slave_0: left promiscuous mode [ 177.114294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.297805][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 177.400295][ T13] hsr_slave_0: left promiscuous mode [ 177.400623][ T13] hsr_slave_1: left promiscuous mode [ 177.401080][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.401091][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.401542][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.401551][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.404089][ T13] veth1_macvtap: left promiscuous mode [ 177.404111][ T13] veth0_macvtap: left promiscuous mode [ 177.404156][ T13] veth1_vlan: left promiscuous mode [ 177.404186][ T13] veth0_vlan: left promiscuous mode [ 177.486303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 177.492984][ T13] team0 (unregistering): Port device team_slave_0 removed [ 177.534257][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 177.695177][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 177.857441][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 177.965694][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.013877][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.064469][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.114227][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.183632][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.223674][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.276660][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 178.284254][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.314550][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.384290][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.393685][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 178.414765][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.474478][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.494913][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.521898][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 178.558992][ T13] bridge_slave_1: left allmulticast mode [ 178.559014][ T13] bridge_slave_1: left promiscuous mode [ 178.559128][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.568010][ T13] bridge_slave_0: left allmulticast mode [ 178.568032][ T13] bridge_slave_0: left promiscuous mode [ 178.568149][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.573737][ T13] dvmrp0: left allmulticast mode [ 178.581676][ T13] bridge_slave_1: left allmulticast mode [ 178.581696][ T13] bridge_slave_1: left promiscuous mode [ 178.581804][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.583008][ T13] bridge_slave_0: left allmulticast mode [ 178.583024][ T13] bridge_slave_0: left promiscuous mode [ 178.583116][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.605093][ T13] bridge_slave_1: left allmulticast mode [ 178.605107][ T13] bridge_slave_1: left promiscuous mode [ 178.605180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.606067][ T13] bridge_slave_0: left allmulticast mode [ 178.606083][ T13] bridge_slave_0: left promiscuous mode [ 178.606210][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.692267][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.693287][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.693831][ T13] bond0 (unregistering): Released all slaves [ 178.720898][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.721846][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.722410][ T13] bond0 (unregistering): Released all slaves [ 178.746006][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.747315][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.748100][ T13] bond0 (unregistering): Released all slaves [ 178.754180][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17 [ 178.800982][ T13] tipc: Disabling bearer [ 178.801036][ T13] tipc: Left network mode [ 178.802851][ T13] IPVS: stopping backup sync thread 7169 ... [ 178.869438][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 179.001030][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 179.112227][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 179.126274][ T13] hsr_slave_0: left promiscuous mode [ 179.126455][ T13] hsr_slave_1: left promiscuous mode [ 179.126702][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.126713][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.126904][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.126912][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.128033][ T13] hsr_slave_0: left promiscuous mode [ 179.128549][ T13] hsr_slave_1: left promiscuous mode [ 179.128761][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.128769][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.129008][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.129016][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.137366][ T13] hsr_slave_0: left promiscuous mode [ 179.140079][ T13] hsr_slave_1: left promiscuous mode [ 179.140310][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.140320][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.142417][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.142426][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.148587][ T13] veth1_macvtap: left promiscuous mode [ 179.148606][ T13] veth0_macvtap: left promiscuous mode [ 179.148650][ T13] veth1_vlan: left promiscuous mode [ 179.148680][ T13] veth0_vlan: left promiscuous mode [ 179.157192][ T13] veth1_macvtap: left promiscuous mode [ 179.157217][ T13] veth0_macvtap: left promiscuous mode [ 179.157289][ T13] veth1_vlan: left promiscuous mode [ 179.157334][ T13] veth0_vlan: left promiscuous mode [ 179.166086][ T13] veth1_macvtap: left promiscuous mode [ 179.166117][ T13] veth0_macvtap: left promiscuous mode [ 179.166191][ T13] veth1_vlan: left promiscuous mode [ 179.166237][ T13] veth0_vlan: left promiscuous mode [ 179.272536][ T13] team0 (unregistering): Port device team_slave_1 removed [ 179.276333][ T13] team0 (unregistering): Port device team_slave_0 removed [ 179.346449][ T13] team0 (unregistering): Port device team_slave_1 removed [ 179.358706][ T13] team0 (unregistering): Port device team_slave_0 removed [ 179.428489][ T13] team0 (unregistering): Port device team_slave_1 removed [ 179.432951][ T13] team0 (unregistering): Port device team_slave_0 removed [ 179.587191][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21 [ 179.849557][ T5452] 8021q: adding VLAN 0 to HW filter on device eth22 [ 179.980549][ T5452] 8021q: adding VLAN 0 to HW filter on device eth23 [ 180.123176][ T5452] 8021q: adding VLAN 0 to HW filter on device eth24 [ 180.379054][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25