last executing test programs: 2m10.865260546s ago: executing program 1 (id=44): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7a00000004f0080000000000000016000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0980, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, @ioapic={0xdffe, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x4}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x21}, {0x3, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xe, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0xca, 0x3, 0x0, '\x00', 0x16}, {0x4, 0x6, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x7, '\x00', 0x3}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x1, 0xc1, '\x00', 0x26}, {0xe, 0xce, 0x3, '\x00', 0x18}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) 2m10.863609007s ago: executing program 1 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x6c}}, 0x24000810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000001c0), 0x12) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="43a2f2", 0x3}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x4, 0x0) r4 = creat(&(0x7f0000000380)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9) write$tcp_mem(r4, &(0x7f00000003c0)={0x5, 0x20, 0x2f, 0x20, 0x10}, 0x48) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0xd) sendto(r1, &(0x7f0000000000)="340000003e000500010000000000000001020000004000000c0001006f76732d6470300008c8020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 2m10.274770341s ago: executing program 1 (id=57): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f00000005c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syslog(0x2, &(0x7f0000000400)=""/229, 0xe5) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000380)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)='udf\x00', 0x204001, 0x0) 2m9.829081661s ago: executing program 1 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000340)=[@rdmsr={0x66, 0x18, {0x3f1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xb, 0x6000000000000000, 0xb1, 0x95}}], 0x50}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101100, 0x0) sendfile(r4, r1, 0x0, 0xc652) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x24, 0x0, &(0x7f0000000300)=0x5b) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000000)="0f23ba0f014a3f660f3a209f65000cba4100ed660f743966b80500000066b9002800000f01d9670f01cf7d6c66f3a46766c7442400000000806766c7442402000000006766c744240600000000670f011424", 0x52}], 0x1, 0x76, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x43) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000540)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x515801, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xa, 0x0, 0x5}, 0x800}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m9.475003262s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0xdd) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x1004004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x35e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xf0, 0x46}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x0, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000880)=0x5, 0x4) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0x4212, r2, 0x58, &(0x7f00000006c0)="01") setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x2e8, 0x1b8, 0x1b8, 0x418, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6, 0xb561a16a5759827b}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 2m8.33356538s ago: executing program 1 (id=83): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffe38}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x36040800) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f00000000c0)=0x40, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a056020"], 0xd) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20, 0x6, 0x1}) (async) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20, 0x6, 0x1}) 1m53.016673258s ago: executing program 32 (id=83): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffe38}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x36040800) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f00000000c0)=0x40, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a056020"], 0xd) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20, 0x6, 0x1}) (async) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20, 0x6, 0x1}) 1m38.172278142s ago: executing program 4 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x100) (async) shutdown(0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0xf02, 0xf0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000300)="0a0fec0fa28786b99e45abc54214", 0xe, 0x20008000, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='gfs2\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./mnt\x00', r0}, 0x18) 1m37.843772874s ago: executing program 4 (id=522): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xd, 0x2}}}}, 0xf) capset(&(0x7f00000000c0)={0x19980330}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000140)) (async) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f00000013c0)=@type=0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x4, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@rand_addr=0x64010102, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x12, "7014", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xe, 0x8400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) write$snddsp(r1, &(0x7f0000000200)="364a43a39a92644114809c466d320b900a512b5471d22212871d542e7b67bb9b1015929f896a8e59517c778d35d7af95776bff86efe1a0c16b7749843bcb0bf795ade970da7d52c4246f1e2b2006a71b0e966c903c36748b4ce0f684e471eab8faeffc335a4ea99e", 0x68) 1m37.25462101s ago: executing program 4 (id=533): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xb5547000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="00000001"], 0x35) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) r3 = accept(r0, &(0x7f0000001200)=@tipc=@name, &(0x7f0000001280)=0x80) mmap$xdp(&(0x7f0000246000/0x2000)=nil, 0x2000, 0x4, 0x1010, r3, 0x300000000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) 1m36.714504272s ago: executing program 4 (id=535): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(&(0x7f0000000f00)='.\x00', &(0x7f0000000f40)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000b80)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, r0) 1m36.662814649s ago: executing program 4 (id=537): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x128000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 1m36.424749387s ago: executing program 4 (id=541): r0 = syz_create_resource$futex(&(0x7f0000000040)=0x200001) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex$unlock_wake_list64(r1, 0x28a, 0x6, 0x0, 0x0, 0x5) futex(r1, 0xd, 0x3, 0x0, r1, 0x2) futex$unlock_pi_list64(r1, 0x287, 0xc, 0x0, &(0x7f0000000080)=0x7, 0x4) futex(r0, 0x6, 0x0, 0x0, r1, 0x1) 1m36.315652714s ago: executing program 33 (id=541): r0 = syz_create_resource$futex(&(0x7f0000000040)=0x200001) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex$unlock_wake_list64(r1, 0x28a, 0x6, 0x0, 0x0, 0x5) futex(r1, 0xd, 0x3, 0x0, r1, 0x2) futex$unlock_pi_list64(r1, 0x287, 0xc, 0x0, &(0x7f0000000080)=0x7, 0x4) futex(r0, 0x6, 0x0, 0x0, r1, 0x1) 1m35.924302116s ago: executing program 0 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x1}) r2 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) 1m35.861050277s ago: executing program 0 (id=551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='lp', 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff61, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) setsockopt(r1, 0x84, 0x1c, &(0x7f0000000100)="1a000000020000", 0x7) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000080)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0xc, 0x1, 0x9, 0x27}) 1m35.671772628s ago: executing program 0 (id=555): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8004}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000039c0)=ANY=[@ANYBLOB="580100001a00100000000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e210002", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000004d22b000000ac141438000000000000000000000000050000000000000000000000000000000000000000ffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000040002bbd7000053500000a0000005400000000000000605d999f802e0f98b194b3c4cc476fee001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200"/272], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="34000000140001002dbd7000fddbdf2502184000", @ANYRES32, @ANYBLOB="08000200ac1e0001140006"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x3, 0x77, &(0x7f0000000000)="0f561c", &(0x7f0000000200)=""/119, 0x7fffffff, 0x0, 0x37, 0x1000, &(0x7f0000000280)="e241474dd902384c05be316b7bd0153f233df1a0795c4219d94fdb7c45f52813ee625a4016221259216693a77060b5e7877a30baf7ee3e", &(0x7f00000002c0)="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", 0x4, 0x0, 0x4}, 0x50) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000014c0), 0x440, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001500)=0x2000) readv(r3, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4106, 0x100a}], 0x1) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000025c0), 0xa0201, 0x0) write$dsp(r4, &(0x7f0000002600)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m33.474969073s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 1m33.414735696s ago: executing program 0 (id=575): r0 = socket(0x40000000015, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ppoll(&(0x7f0000000200)=[{r4}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001780)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001840)={0xa4, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) sendmsg$netlink(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001280)={0x22c, 0x35, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x34, 0x6e, 0x0, 0x1, [@typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xc5, 0x0, 0x0, @fd}]}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r1}, @nested={0x107, 0x166, 0x0, 0x1, [@generic="daae27f0e22424c4d79182b83caa2964af7ce52d9e8cbab38312acb4b9e932b50505048e7cea8c7b19b43663f2f93f3be051f82265048861d913aa193c926941a8760adb12661f9119d523", @generic="cdb8461a7a4eefac81c30951cc20db9ad0f7a31c0bd00e5e6aae8901fcd6221d6515a1b6a36aec5567edbd6374578a20fc33e60c8e73e914c98ae74c7bbace91bfc9c3d345defd8d7fdd3743130f1bb6f4adab50d6f7484c15db6b0948fc7b8d1c8e9d4b0dfb1f64e26c6b2ad56e43428bc64fe87bfdd94ca0c0559cf96e11ed7359e50178dfbffca145d73be9015eeb215bbc97547e898c9fc8715b5aea3b4b6ce5606c63dc769aeb588ce8fe5b685870cabf7336e61b10"]}, @typed={0x8, 0xe2, 0x0, 0x0, @uid=r5}, @nested={0xcd, 0x71, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xa}, @generic="5d5e5c4738794ce4c910d87621c9074e9c5c329f4289a0de54e94ebd13dfe06811374feb989098e6fe6809fb2fd9a453479b97b44bf0478d2a131bf799e0cc91f39904c362a644c5027928b8fdc8cc1fd2340d513fdc43c0856102b94da831e485e66ddee0facb778900d08b8ef42df0e820aa876b80e772185600b0c5234ba1daf3d546bcf16fcfe3c268665898732a1ec731d854d641c7e00eb91da2e83928c0", @typed={0xc, 0xe2, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x4, 0x3e}, @typed={0x7, 0xac, 0x0, 0x0, @str='\'#\x00'}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}]}]}, 0x22c}, {&(0x7f00000014c0)={0xf8, 0x15, 0x300, 0x70bd28, 0x25dfdbff, "", [@generic="24c2ace5db71a766da236ca3b6768c3f56c4076032600c26f8e6778e5d4e3ed5dca54b13aa93b321f32de4dfa957d5188240c60afbc38d051537d5c11e8a16fe094bc37f57701cb5ba213f71432aad467470d0f519e4793bbb8706ef4c5ed3d6195fa4031d44a9dc6b5c86984afcb92f08f11a09e86eee791e15dbc4024445e02aaea9aed3443b4c88638c7e7fb891b145a2dfbe8d439bdd4add6bac0d6e9efeaa11dfd5640568646787ca8086e27f71f24f2fad58fa3c26f2a3169391d9b186392d2f5f6e5a", @typed={0x4, 0x8c}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xf8}, {&(0x7f00000015c0)={0x11c, 0x29, 0x400, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x1b, 0x0, 0x0, @u32=0xa63}, @nested={0x103, 0x6e, 0x0, 0x1, [@generic="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"]}]}, 0x11c}], 0x3, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [r6, r1, r1, r1]}}], 0x20, 0x4050}, 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000019c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001a00)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000001a40)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8864, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082abd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300c0100e00080211000001080211000000505050505050730000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) syz_emit_vhci(0x0, 0xe) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12]) 1m33.103289494s ago: executing program 34 (id=576): r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000140), 0x4) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0xc, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x10800000, 0x0, 0x1, 0xffff06bd, 0xfffffffd, 0x5, 0x1a, 0xf0, 0x10, 0x1, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0xffff00e7, 0x4, 0x3, 0x0, 0xffff8000, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0xe, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x5, 0xffff, 0x401, 0x7, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0xa00, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xf7, 0x101, 0x4, 0x0, 0xa, 0x1, 0x1fe, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff88, 0xe, 0xd, 0xf, 0xc, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10000, 0x9, 0xc6b, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x806, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x6, 0xffffffff, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x2, 0x8, 0xa, 0xfffffffa, 0xa7b1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x8000, 0x0, 0x80002001, 0xc, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x3, 0xffff, 0x2, 0x10000089, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x0, 0x0, 0xf, 0xce5fb90f, 0x5, 0x4, 0x0, 0xf, 0x9, 0xfc, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x4, 0x7, 0x8000, 0x40, 0xd3, 0x7, 0xffffffff, 0xb, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x40003d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x20000002, 0x49, 0x10, 0x400, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x4001, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x0, 0x3, 0x6, 0x3, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x800, 0xffffffff, 0x1, 0x8001, 0xd, 0x0, 0x88d, 0x7fff, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x100, 0x404, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0x5, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0x1, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x80000000, 0x40, 0x6, 0x792a3cec, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x10000000, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf4, 0x0, 0xfffff53d, 0xb, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x10000, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x202, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x20020, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb669, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0x5, 0x4, 0x7f, 0x6, 0xfffffff9, 0x40, 0x40000005, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0xb, 0x2, 0x7, 0x1, 0x5, 0x9, 0xfffffff7, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x7fff, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x1000, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4008, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xb, 0x101, 0x3, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x3, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0xd, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x1, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x0, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0xff, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x718, 0x2, 0xfffffff8, 0x2, 0x9ad, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x2, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x9, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xffffffff, 0x7, 0x5, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfefffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x40000004, 0x4, 0x2, 0xff, 0xee, 0x2, 0x8000004, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x8000, 0x7, 0x4, 0x6330, 0xff, 0x6, 0x4ea, 0x1, 0xfff, 0x7, 0x6, 0x0, 0x6, 0x9, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62c8, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x402, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x7fffffff, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0x1ec, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0xd, 0xe, 0x7, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0xa, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0xfffe, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x1, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ppoll(&(0x7f0000000200)=[{r4}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001780)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001840)={0xa4, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) sendmsg$netlink(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001280)={0x22c, 0x35, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x34, 0x6e, 0x0, 0x1, [@typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xc5, 0x0, 0x0, @fd}]}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r1}, @nested={0x107, 0x166, 0x0, 0x1, [@generic="daae27f0e22424c4d79182b83caa2964af7ce52d9e8cbab38312acb4b9e932b50505048e7cea8c7b19b43663f2f93f3be051f82265048861d913aa193c926941a8760adb12661f9119d523", @generic="cdb8461a7a4eefac81c30951cc20db9ad0f7a31c0bd00e5e6aae8901fcd6221d6515a1b6a36aec5567edbd6374578a20fc33e60c8e73e914c98ae74c7bbace91bfc9c3d345defd8d7fdd3743130f1bb6f4adab50d6f7484c15db6b0948fc7b8d1c8e9d4b0dfb1f64e26c6b2ad56e43428bc64fe87bfdd94ca0c0559cf96e11ed7359e50178dfbffca145d73be9015eeb215bbc97547e898c9fc8715b5aea3b4b6ce5606c63dc769aeb588ce8fe5b685870cabf7336e61b10"]}, @typed={0x8, 0xe2, 0x0, 0x0, @uid=r5}, @nested={0xcd, 0x71, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xa}, @generic="5d5e5c4738794ce4c910d87621c9074e9c5c329f4289a0de54e94ebd13dfe06811374feb989098e6fe6809fb2fd9a453479b97b44bf0478d2a131bf799e0cc91f39904c362a644c5027928b8fdc8cc1fd2340d513fdc43c0856102b94da831e485e66ddee0facb778900d08b8ef42df0e820aa876b80e772185600b0c5234ba1daf3d546bcf16fcfe3c268665898732a1ec731d854d641c7e00eb91da2e83928c0", @typed={0xc, 0xe2, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x4, 0x3e}, @typed={0x7, 0xac, 0x0, 0x0, @str='\'#\x00'}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}]}]}, 0x22c}, {&(0x7f00000014c0)={0xf8, 0x15, 0x300, 0x70bd28, 0x25dfdbff, "", [@generic="24c2ace5db71a766da236ca3b6768c3f56c4076032600c26f8e6778e5d4e3ed5dca54b13aa93b321f32de4dfa957d5188240c60afbc38d051537d5c11e8a16fe094bc37f57701cb5ba213f71432aad467470d0f519e4793bbb8706ef4c5ed3d6195fa4031d44a9dc6b5c86984afcb92f08f11a09e86eee791e15dbc4024445e02aaea9aed3443b4c88638c7e7fb891b145a2dfbe8d439bdd4add6bac0d6e9efeaa11dfd5640568646787ca8086e27f71f24f2fad58fa3c26f2a3169391d9b186392d2f5f6e5a", @typed={0x4, 0x8c}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xf8}, {&(0x7f00000015c0)={0x11c, 0x29, 0x400, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x1b, 0x0, 0x0, @u32=0xa63}, @nested={0x103, 0x6e, 0x0, 0x1, [@generic="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"]}]}, 0x11c}], 0x3, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [r6, r1, r1, r1]}}], 0x20, 0x4050}, 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000019c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001a00)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000001a40)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8864, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082abd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300c0100e00080211000001080211000000505050505050730000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) syz_emit_vhci(0x0, 0xe) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12]) 2.60484016s ago: executing program 6 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES8=r3], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="088000000844005d304690a607a4070067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000006c0)={0x0, 0x89, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r8 = syz_open_pts(r7, 0x141401) fcntl$setstatus(r8, 0x4, 0x2000) write(r8, &(0x7f0000000700)="d5", 0xfffffedf) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000740)=0x3) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r10, 0x40049366, &(0x7f0000000000)=0x2) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) 2.443693608s ago: executing program 2 (id=1664): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001940), 0xfffffedf, 0x10, &(0x7f0000001980)}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) rmdir(&(0x7f0000000940)='./file0\x00') 2.443360437s ago: executing program 2 (id=1665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x601, 0x80000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/45, 0xfdef}, {0x0}], 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000340)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000680)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10000, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @broadcast}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001400010028bd7000fbdbdf25022001c8dd939e60670a8e8b273d8b33783086164f4838b7fdf4d396a18fab066feb61d04fc2914a35a7dbd562ec77e687dbe07dd1c10f2ce5d4eff8a43d7fd8cbbca13c330751ba68c2ded42b2d50b840ecfdee09286c693662e63b2dbc4b0b803f83d24421ba9748b9d23d74cb8cb92098a08e89f3ed7c6c68d60265cc79d918e719cb56d4e199bbf86d5689ff343214f2248c5fe147c125", @ANYRES32=r5, @ANYBLOB="14000600fef500000300000003000000f8ffffff"], 0x2c}}, 0x4000040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r5], 0x58}}, 0x0) 2.428868374s ago: executing program 6 (id=1667): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x1) r0 = io_uring_setup(0x115c, &(0x7f0000000100)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x178) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8d, 0x2101) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000300)=[r0], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000003100090029bdf000ffdbdf2504000000240011800d219ea5267e4f664617402fe816b31530b4067e85ee7a2137fead41b74f7f2f8e502476922c640ddd8a02ff432e6f"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./debug\x00', &(0x7f0000000740)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./debug/o2net/connected_nodes\x00', 0x0, 0x0) read(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r7, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}]}, 0x6c}}, 0x4000000) 2.321808374s ago: executing program 2 (id=1670): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1407, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x5) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.315005555s ago: executing program 6 (id=1671): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt/trace_pipe\x00', &(0x7f0000000040)='autofs\x00', 0x100002, 0x0) r0 = creat(0x0, 0xecf86c37d53049cc) read(r0, 0x0, 0x5d) chown(&(0x7f0000004580)='./mnt/trace_pipe\x00', 0x0, 0x0) 2.224064167s ago: executing program 6 (id=1672): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8004}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000039c0)=ANY=[@ANYBLOB="580100001a00100000000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/272], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="34000000140001002dbd7000fddbdf250218", @ANYRES32, @ANYBLOB="08000200ac1e0001140006"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x3, 0x77, &(0x7f0000000000)="0f561c", &(0x7f0000000200)=""/119, 0x7fffffff, 0x0, 0x37, 0x1000, &(0x7f0000000280)="e241474dd902384c05be316b7bd0153f233df1a0795c4219d94fdb7c45f52813ee625a4016221259216693a77060b5e7877a30baf7ee3e", &(0x7f00000002c0)="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", 0x4, 0x0, 0x4}, 0x50) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000014c0), 0x440, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001500)=0x2000) readv(r3, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4106, 0x100a}], 0x1) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000025c0), 0xa0201, 0x0) write$dsp(r4, &(0x7f0000002600)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.768624781s ago: executing program 5 (id=1676): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8014}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0x1001}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8014}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000850) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0x1001}) (async) 1.534342277s ago: executing program 5 (id=1677): userfaultfd(0x801) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x100, 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffe, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) syz_clone(0x49000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) chdir(&(0x7f0000000580)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) close(0x3) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f00000005c0)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) 1.384444409s ago: executing program 2 (id=1679): openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000280)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0) r0 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=@udp=r2, 0x1}, 0x20) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/188, 0xbc}], 0x1}}], 0x2, 0x10041, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$nsim_del_device(r0, &(0x7f0000000040)={0x0}, 0x1) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x120000, &(0x7f00000001c0)='\x9f/^[&}-@\x00') 1.308153751s ago: executing program 2 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010010418e01400004fcff", 0x58}], 0x1) mount(&(0x7f0000000980)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)='jffs2\x00', 0x1920439, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x21) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x10) chroot(&(0x7f0000000340)='./bus\x00') r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f0000000640)="b51bb735d18e59eab62e33b50f319ae577a797cbb253cf394e75fbadbe9db3bd77b6edd220d06cb00d485832d610d0ae6a", 0x31) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r8 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000900)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r4, r7, 0x25, 0x8, @void}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt/fillfile\x00', 0x42, 0x9f) write(r9, &(0x7f0000000040)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f870433830f097892dc9b81e1b358889f55e9a6810505055399f2ce2a52e0156cafb7c58838cb0f7813e13deb71e5cb", 0x6f) dup3(r6, r5, 0x80000) 1.306067179s ago: executing program 3 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can_delroute={0x44, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "8391fdff0b4d3981"}, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "6bc59c6297fad977"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x32, r0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r1], 0x24}}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000001f2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1,0x400000,0x401000', 0x13) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r5, &(0x7f0000000300)) getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000240)) 1.242872937s ago: executing program 3 (id=1683): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc140, 0x165) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x40, 0x7, 0x2, {{0x8, 0x4, 0x2, 0x1b, 0x20, 0x66, 0x0, 0x3, 0x4, 0x0, @broadcast, @broadcast, {[@end, @generic={0x88, 0xa, "eb2c30a7269f8c2e"}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x2, 0x9, @vifc_lcl_ifindex=r2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x6) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="e0c2a356420828615c8cf5f53942511b45004fa272159c0128c5d90689dd518d755440aaeafddaf99a62778c00c57479f41eae5a4e3a455cc2964f67e20b17463917daee5dcc97e51aedf24664", 0x4d}, {&(0x7f0000000400)="e6b24c5900e794e72a4c295b36934ae5353968d73fd2fc7277dfc9940db9373876898ab7e9b41074a549886b6bb115b78789664691bac42ede43afdc5dc875672c8ba90d68721222835159b2572e5276384bd63406e805eae0e3eed709cdc91b47bb340bf9b522d5223c74eaf75f618cda286d53e2d081b0935933bb82697b0b20057bdb0483e099d315a059f7e86854b2e2780e08e53e2c406a1d3316ff847c53d5082c5d8ffd286c25a6d3", 0xac}, {&(0x7f00000004c0)="2d67576004a2ca58abedda0e73da5eee5ad254f2f4273726271f6896478e987fb2f807b32ce33e43829925c40f00955845d01710d5110c65131329111eacb4bfbcca9f0c13576160378232505fddd7301e8c767abc3296604eaa91bd786757ef4eac6baa98d1120b1b73525a22758743080362d979d40f62104591b4f9a1f61800bffb89fea367add94fea7d88aa9acc796c3247c75affa6f05e86694f698c2f48", 0xa1}, {&(0x7f0000000580)="9ed495c38bc04bc70f89ab49818c8e8fa11ded58c8c2783612e7fcbb3e87bbdbfea6ae82ab0a9d9285ca8a43e7f04957b39901a6e41d2fc82f398f69ace900796833d5924c8e71dffa95e77ba06057ddd5528e4721dd7131ee0ac62057721160afbee4e27f1257f049c77116f9735641aed92e47c5c7806730ba4275c38a30d28afdb73e8405d562c957ed998b565e015438e4eaa721d55135d3e3eea9c4d17c7e5306e21b4f105854007331094584cd7ba9f48ec65b2c40a12f942411e130cdbcc45af8bcdaa086f6bab973354ffb0d1dad6e13", 0xd4}, {&(0x7f0000000680)="59e3ffc715b85d430dc477af09fd73bc1eb4be15700c1e6d56d839e8c46f6f9f525f93c1e006904621a494f1e4c1dd51ccce58dc3815fbbf79d486687dedd7e9a7fda2d4907ebbf565ce73195f", 0x4d}, {&(0x7f0000000700)}], 0x6, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}, {{&(0x7f0000000800)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000840)="f8aff79638930de1da45f8169de7233729e75eb4eb378ce4be58792704cb483abbd4e16713a7", 0x26}, {&(0x7f0000000880)="e0b904bb8742e7a828fdf022e0a9237e5adfdb1efb3be999364d95c9050cd60ddd50119aa62e5ab1bf414c6dcf6c093977102b123e086835585f427fcdfed90d502e4f40f5e4a4afa1a09860a6896f46019f7ca16aa01a001deff666d325f5f3ea81182571", 0x65}, {&(0x7f0000000900)="3a6b6c3c0228f15cf1f1ad59a55c5a79570de6d06d191ed0dcc21d2684dacb697dd13aac2b80ae39992046a1c0fe2f36c4e06c7d0b02533bf4408e529bca3426482ae481a6584ae69184f140320b1d85e5dd93e1946e3aded62aa4615b85ae3ae41ef32d510f162c60907312721cb3980458aefeb81ee9e8154d8e0b911c75b227f869b60c31e1779ed1b86264f6", 0x8e}, {&(0x7f00000009c0)="69eb427ad8aad116203ba03bde2f3777136823eea5c308e88cc4a24e0c0c72ec10ed3a79944225243efc0ae72a747903e33695426e3faca02adf8379a1c4422d60a2a44aa4bf978098ed9d432d132e55b0d253e07dbcbdf0cf40a7313fab15c59b14eea155629e8ec767fc099b5a5c75e179", 0x72}], 0x4, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6dd16340}}, @ip_ttl={{0x14, 0x0, 0x2, 0x66}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="4ac8c7ad34b11b2fd99185ee997d7ae08ec406b9fac5643e99150be49a9e3ad6ee59e6e9e8d39d607f1043c3aaf03c61832948fff0cf001265d1b075780ae9f51f5db2dbcdd62be0d8607551eb3df3292fe1b74af48ba9a10962988272f024e0a7494cc331e6c8c7ad7faa4e6ba8db7a96b3587a2c108158ac4c43ecb4b78144c963029f54a966c9170d232470991bc9a3244985a4b6c8c6a7b1caab", 0x9c}, {&(0x7f0000000c00)="d9302e631710a79db9e57de8e710bdc3796f3ae29d77f58bc8e918e7d413b6bef597c5d3bc7d69e66237f33591aa0baa7f330f6b00fd43092e1be1ebfe4474339137478fd8e573ab518a1310", 0x4c}, {&(0x7f0000000c80)="819fb525f9bc530239081223887cdf33e7be48e8ed2c424402e612fc624bb3513b95c240bcb22f4cd68c16ee1fbf5a05ba7d087f20f8aaa71e0a9af48f63f2806ea8f00d29c3ab05f9223b4a79c195e49c67e23263e21f3671c11194077456e587f4f87299a71c5b29c6aa0d86bd7ccfbe9a827ac848cee6cbdbad26e77e6006d1b94fe12823eed647234c5cba8e6c5fd62d89addfb80ba023f37460e4474562b53a62b34b18ede2b5", 0xa9}, {&(0x7f0000000d40)="c04a1cda4f28fb849be7575c182dbd55933d148c23c7b2da007a384c48d89715b560fb78e1b21e3243ca293c97d9d4f68ad3e400f03889daeaf8fb7a73ce8dac6c3874e1a1edee73bb0b2bdcc783cfdf24185ee7197e36f6de1070d310ef7e9e4266376ffc611c72e3e98c93aa6a47be384e18f4218913aa877bf4a9410b826d58d82c2d7873f2e4edee21b739", 0x8d}, {&(0x7f0000000e00)="f148851ccff8d369556891bd29c9e5ca31f764c438bb935c31dcbbbd3378fb16891448aca3160e0cd42b439ba953233f5862491782d2bcc020cd58378a02582ffb1f3af7b04d5e8834c30e332465f1b90a811c9b", 0x54}, {&(0x7f0000000e80)="35ca10f68c37c734901f657fa8c15a57d2ac", 0x12}], 0x6, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @broadcast, @empty, @broadcast, @remote, @multicast2, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x37f8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x6b, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x4f1e}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8e}, {@local, 0x4}]}, @rr={0x7, 0x13, 0xe4, [@loopback, @rand_addr=0x64010102, @multicast2, @multicast1]}, @end]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xbd, [@rand_addr=0x7ff, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @remote, @loopback]}, @timestamp={0x44, 0x14, 0x31, 0x0, 0x1, [0x8, 0x0, 0x0, 0x0]}, @generic={0x7, 0x8, "af7212ad52b4"}, @generic={0x86, 0x5, "07facc"}, @cipso={0x86, 0x1b, 0x3, [{0x1, 0x5, "7418df"}, {0x1, 0x5, "aa86fa"}, {0x6, 0xb, "4876d4370dfff2bbac"}]}, @lsrr={0x83, 0xf, 0x44, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x60, [@rand_addr=0x64010101, @loopback]}, @ssrr={0x89, 0x7, 0xc9, [@local]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1d8}}, {{&(0x7f0000001140)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001180)="6bf072e485c49a1f3f6a10c8f9afb53464cbb11dd637e4fd1e73b20eeb2c8d531f5c893d9d47", 0x26}], 0x1}}], 0x4, 0x2000000) (async) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="e0c2a356420828615c8cf5f53942511b45004fa272159c0128c5d90689dd518d755440aaeafddaf99a62778c00c57479f41eae5a4e3a455cc2964f67e20b17463917daee5dcc97e51aedf24664", 0x4d}, {&(0x7f0000000400)="e6b24c5900e794e72a4c295b36934ae5353968d73fd2fc7277dfc9940db9373876898ab7e9b41074a549886b6bb115b78789664691bac42ede43afdc5dc875672c8ba90d68721222835159b2572e5276384bd63406e805eae0e3eed709cdc91b47bb340bf9b522d5223c74eaf75f618cda286d53e2d081b0935933bb82697b0b20057bdb0483e099d315a059f7e86854b2e2780e08e53e2c406a1d3316ff847c53d5082c5d8ffd286c25a6d3", 0xac}, {&(0x7f00000004c0)="2d67576004a2ca58abedda0e73da5eee5ad254f2f4273726271f6896478e987fb2f807b32ce33e43829925c40f00955845d01710d5110c65131329111eacb4bfbcca9f0c13576160378232505fddd7301e8c767abc3296604eaa91bd786757ef4eac6baa98d1120b1b73525a22758743080362d979d40f62104591b4f9a1f61800bffb89fea367add94fea7d88aa9acc796c3247c75affa6f05e86694f698c2f48", 0xa1}, {&(0x7f0000000580)="9ed495c38bc04bc70f89ab49818c8e8fa11ded58c8c2783612e7fcbb3e87bbdbfea6ae82ab0a9d9285ca8a43e7f04957b39901a6e41d2fc82f398f69ace900796833d5924c8e71dffa95e77ba06057ddd5528e4721dd7131ee0ac62057721160afbee4e27f1257f049c77116f9735641aed92e47c5c7806730ba4275c38a30d28afdb73e8405d562c957ed998b565e015438e4eaa721d55135d3e3eea9c4d17c7e5306e21b4f105854007331094584cd7ba9f48ec65b2c40a12f942411e130cdbcc45af8bcdaa086f6bab973354ffb0d1dad6e13", 0xd4}, {&(0x7f0000000680)="59e3ffc715b85d430dc477af09fd73bc1eb4be15700c1e6d56d839e8c46f6f9f525f93c1e006904621a494f1e4c1dd51ccce58dc3815fbbf79d486687dedd7e9a7fda2d4907ebbf565ce73195f", 0x4d}, {&(0x7f0000000700)}], 0x6, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}, {{&(0x7f0000000800)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000840)="f8aff79638930de1da45f8169de7233729e75eb4eb378ce4be58792704cb483abbd4e16713a7", 0x26}, {&(0x7f0000000880)="e0b904bb8742e7a828fdf022e0a9237e5adfdb1efb3be999364d95c9050cd60ddd50119aa62e5ab1bf414c6dcf6c093977102b123e086835585f427fcdfed90d502e4f40f5e4a4afa1a09860a6896f46019f7ca16aa01a001deff666d325f5f3ea81182571", 0x65}, {&(0x7f0000000900)="3a6b6c3c0228f15cf1f1ad59a55c5a79570de6d06d191ed0dcc21d2684dacb697dd13aac2b80ae39992046a1c0fe2f36c4e06c7d0b02533bf4408e529bca3426482ae481a6584ae69184f140320b1d85e5dd93e1946e3aded62aa4615b85ae3ae41ef32d510f162c60907312721cb3980458aefeb81ee9e8154d8e0b911c75b227f869b60c31e1779ed1b86264f6", 0x8e}, {&(0x7f00000009c0)="69eb427ad8aad116203ba03bde2f3777136823eea5c308e88cc4a24e0c0c72ec10ed3a79944225243efc0ae72a747903e33695426e3faca02adf8379a1c4422d60a2a44aa4bf978098ed9d432d132e55b0d253e07dbcbdf0cf40a7313fab15c59b14eea155629e8ec767fc099b5a5c75e179", 0x72}], 0x4, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6dd16340}}, @ip_ttl={{0x14, 0x0, 0x2, 0x66}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="4ac8c7ad34b11b2fd99185ee997d7ae08ec406b9fac5643e99150be49a9e3ad6ee59e6e9e8d39d607f1043c3aaf03c61832948fff0cf001265d1b075780ae9f51f5db2dbcdd62be0d8607551eb3df3292fe1b74af48ba9a10962988272f024e0a7494cc331e6c8c7ad7faa4e6ba8db7a96b3587a2c108158ac4c43ecb4b78144c963029f54a966c9170d232470991bc9a3244985a4b6c8c6a7b1caab", 0x9c}, {&(0x7f0000000c00)="d9302e631710a79db9e57de8e710bdc3796f3ae29d77f58bc8e918e7d413b6bef597c5d3bc7d69e66237f33591aa0baa7f330f6b00fd43092e1be1ebfe4474339137478fd8e573ab518a1310", 0x4c}, {&(0x7f0000000c80)="819fb525f9bc530239081223887cdf33e7be48e8ed2c424402e612fc624bb3513b95c240bcb22f4cd68c16ee1fbf5a05ba7d087f20f8aaa71e0a9af48f63f2806ea8f00d29c3ab05f9223b4a79c195e49c67e23263e21f3671c11194077456e587f4f87299a71c5b29c6aa0d86bd7ccfbe9a827ac848cee6cbdbad26e77e6006d1b94fe12823eed647234c5cba8e6c5fd62d89addfb80ba023f37460e4474562b53a62b34b18ede2b5", 0xa9}, {&(0x7f0000000d40)="c04a1cda4f28fb849be7575c182dbd55933d148c23c7b2da007a384c48d89715b560fb78e1b21e3243ca293c97d9d4f68ad3e400f03889daeaf8fb7a73ce8dac6c3874e1a1edee73bb0b2bdcc783cfdf24185ee7197e36f6de1070d310ef7e9e4266376ffc611c72e3e98c93aa6a47be384e18f4218913aa877bf4a9410b826d58d82c2d7873f2e4edee21b739", 0x8d}, {&(0x7f0000000e00)="f148851ccff8d369556891bd29c9e5ca31f764c438bb935c31dcbbbd3378fb16891448aca3160e0cd42b439ba953233f5862491782d2bcc020cd58378a02582ffb1f3af7b04d5e8834c30e332465f1b90a811c9b", 0x54}, {&(0x7f0000000e80)="35ca10f68c37c734901f657fa8c15a57d2ac", 0x12}], 0x6, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @broadcast, @empty, @broadcast, @remote, @multicast2, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x37f8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x6b, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x4f1e}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8e}, {@local, 0x4}]}, @rr={0x7, 0x13, 0xe4, [@loopback, @rand_addr=0x64010102, @multicast2, @multicast1]}, @end]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xbd, [@rand_addr=0x7ff, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @remote, @loopback]}, @timestamp={0x44, 0x14, 0x31, 0x0, 0x1, [0x8, 0x0, 0x0, 0x0]}, @generic={0x7, 0x8, "af7212ad52b4"}, @generic={0x86, 0x5, "07facc"}, @cipso={0x86, 0x1b, 0x3, [{0x1, 0x5, "7418df"}, {0x1, 0x5, "aa86fa"}, {0x6, 0xb, "4876d4370dfff2bbac"}]}, @lsrr={0x83, 0xf, 0x44, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x60, [@rand_addr=0x64010101, @loopback]}, @ssrr={0x89, 0x7, 0xc9, [@local]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1d8}}, {{&(0x7f0000001140)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001180)="6bf072e485c49a1f3f6a10c8f9afb53464cbb11dd637e4fd1e73b20eeb2c8d531f5c893d9d47", 0x26}], 0x1}}], 0x4, 0x2000000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001300), 0x260003, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001300), 0x260003, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x7, [@datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x4, 0xc100, 0x5}, {0x2, 0x5, 0x100}], 'fS'}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x2e]}}, &(0x7f0000001400)=""/209, 0x47, 0xd1, 0x0, 0x4}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x7, [@datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x4, 0xc100, 0x5}, {0x2, 0x5, 0x100}], 'fS'}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x2e]}}, &(0x7f0000001400)=""/209, 0x47, 0xd1, 0x0, 0x4}, 0x28) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000001540)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000001540)) sendmsg$kcm(r4, &(0x7f0000001c40)={&(0x7f0000001580)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001600)="8cdd92afaaff0d7983c5c3e3854af748c2028fc9d5d2189f2c046c67e450c029c55cdd20e37e0b0e2bc09ce199f5d9717f85260ae37f701f55be741fe23b9620d68246220965fe8b5b08cd2c", 0x4c}, {&(0x7f0000001680)="ab438ee6d97bfe0eec99c0eca7cd3d49187d2d20fc2cab645dc24fab49d319db59186824282864", 0x27}, {&(0x7f00000016c0)="a9fa8f042d1d0509cbccda321ae978563dea6c9d768f81e367f009bf5983b81843a6a00caf8beb2349c6e461878f0d00360e5afe4d8350fb7c16b88d41eaee5f09c9b282054326c26d89e6c616049d1db29188a430c8a5aa8c79495e6a78a873ac5f517f90a053c3cba8449b955434b3d02b6945288bd3dc05cc7995bc9551e71d6ab147513840c3b05d3aa15bad045ea483345f22a996eecd7e391d90a4749bda1eeefb2146e401e4bb359282f1685d0825cc2bac28607ae3ce51459192524a2ba6c1eebbbc5a3c84332da9c249a9b5cbb0a5aaf03d0e6dcc90b9b54345610ab4b16752baae9990c85381f8ba681fb4926fa2dc3109fa35", 0xf8}], 0x3, &(0x7f0000001800)=[{0x78, 0x6, 0x400, "97b6afa488ecdae99d83080793d8ffc86372854b70b9921639098eef9545d546bb105f9032bfc017bf6bd03196ee6fff5e19360e07846ea2aa942d31e389c5041135c3ede28c5a9e22a972733c1ec8de88b0a0a99627fcfc04cd00818c1a5faae96f385959"}, {0xb8, 0x10d, 0x3ff, "ef5fb153c92a5e044e75f8cf98207ca6c6c5d16a0d06ae6b268dc2a2b9c989b906eab889727166c8212ce763d98a5cece7e4b6f61a9037f47fc0d075f36acae2be857e8e2abf82b81905d683c67b2e3a37cc51c3087007989a20e4295eff8db3f90148abf510ee8ee086c7ee183dcaebff7c3ab9c2bcc826ce9736b24903719c1f9228531159952320fa54f29c5ace571374488205584ad7088f162e7563f5eabec09323f9"}, {0xe8, 0x0, 0x400, "4baa948eb06e44ed1e0635ddacbcf118d5a1e9da8e40ac59d8ac139d6fdf07ed2d7e1563ba6ce230f156de014bbfe3dd6c355eeb51251053471c3877a15924d1a9558ad2c480a0533aee3a9df81c9c4212da78f7b2dd7e82d13214d3467901b23e6cd4c139e3d72b9412a8734652e81bf9bc7f531355fb65b734d90fc8e5df8bf643ecb0cf8d0f8f1859aad0182b7f35e8663042206fc304e454d1406015462e958b032113e35e7253e3824afe0f99573407b0620d58595824034b6835629fc23d1134a2a359f96f931215e6ea98af2b98693899cb5d"}, {0x68, 0x1, 0x10, "5525ab4479b79d49ed25001afdd4b22664b9d91557a2757dca7dd2ebd0a07a1eeb69556ca3c1fc57b64cda7f3866a2db644ad2f6d04fa1d06e87975a5581e12822e295f75f60eb484eefce78da3d4192820fadd9834ede"}, {0xe8, 0x115, 0x80000000, "2c0eadd65023cc50a12287442ea0fb8b5697d95cc8ddcfe2cd635752716aaab773f43eeda164aac2b6795fcb757bdb45a78582c0c2448cfd0b57fa51bda962df6ef41d0f2aa8152e90c3683c96ec83d8cb8a145d18db37eb77d668a420c08a088afd4e77abebbf55ef0aec1df43c56eb3e4163c0c9dc51e31f8c3f1ef9d81b6f1307c57fb2c5ee21ffeb58c927cabd1415bfc291bffa79bf75f49c127c202fb45b952cd864163186c2c310c3dbd5e44f6ac731d0a22071eb7c48380b7f7728c24a1cf03d9662f3dcd17884997b67975e665b31a2831fa565"}, {0xd0, 0x1, 0x1, "f61d390620d19bcbf1a1735176f3ef8c8381e59c418c28473250b6da051505235a576d84bef057b70f3954b0fde0e35cb6bf783a66f649776d32d9bd506ad043b6df91a6898bd3e638f83c4cf9ea63cccdea013fd38ac9a4a6dde0d8354728d877d89ec38f4be1e9c42fafa9fb87f0c13c3a47a1496e52626dbdc669b003781ec40297b5d35387bae8421d187367870cce818b7e323857a14959f1b67539c269d675683d22a4cc3b86fb9e4cec706b79bff958c28ed3018ae29cb5d8994b24"}], 0x438}, 0x4040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x1b, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc142}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d80)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x43, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000001dc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001e00)={0x3, 0x9, 0x1, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001e40)=[r4, r5], &(0x7f0000001e80)=[{0x3, 0x2, 0x1, 0x4}, {0x2, 0x4, 0x3, 0x2}, {0x0, 0x5, 0xfffffffa}, {0x1, 0x4, 0x17bf, 0x8}, {0x3, 0x4, 0xa, 0xd}, {0x2, 0x2, 0xd, 0x2}, {0x5, 0x2, 0xb, 0x9}, {0x1, 0x2, 0xc, 0x6}, {0x5, 0x2, 0xb, 0x3}, {0x4, 0x4, 0xb, 0x2}], 0x10, 0x5}, 0x94) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000002000)={@loopback}, &(0x7f0000002040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002080)) syz_io_uring_setup(0x2391, &(0x7f00000020c0)={0x0, 0xccae, 0x800, 0x0, 0x136, 0x0, r5}, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)) (async) syz_io_uring_setup(0x2391, &(0x7f00000020c0)={0x0, 0xccae, 0x800, 0x0, 0x136, 0x0, r5}, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)) ioctl$KVM_GET_DEVICE_ATTR_vm(r5, 0x4018aee2, &(0x7f0000002240)=@attr_other={0x0, 0x7, 0x2, &(0x7f0000002200)=0x8}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002280), 0x420900, 0x0) (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002280), 0x420900, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002300), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000023c0)={'sit0\x00', &(0x7f0000002340)={'sit0\x00', r2, 0x7800, 0x1, 0x9, 0x2, {{0x10, 0x4, 0x3, 0x21, 0x40, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xa6, 0x0, 0xe, [0x2ec4, 0x6, 0x7, 0x8, 0x2]}, @end, @end, @cipso={0x86, 0xf, 0x1, [{0x2, 0x9, "b6f7e623ae9c30"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_STATS_GET(r6, &(0x7f0000002700)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002400)={0x28c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_GROUPS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "aa38eb7d46a3a5e9f666e430d88026714ed4c1504ff3688797fdf66a3eeaebbc0326107291f53e1c19df9aab1b87e1139ab07894a0ffd36ec71eb9b42d21e47dd56c1c29a0844fd641d77bfe271bff3e6b7ce151be9735e51d9213d1da2d99e48652087359e7cd006b16f0b97740fa5c42446307d76691f05fae449a307ce7a667e289e99dfa4b665dac8fc6782d16badb520d790d7766e2ba09ab75ad5dd1652fa4db20848547e12eaca8e082a56e8a4b7041e198199caaeee630c46c0be74c6aad1618b73bebfebf5f8eaa6238316db58af0c46f8e8160803de7c4"}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STATS_GROUPS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "e666002e0a3e2253336d8cd2872b6d34c25684e7c54ea18a08d4df99a45d"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "d92d9c8975611f9da606c6426b55586bd1b72c94f91b569dc9005f15488c6a32238a270b7319a2cfecf7b4e0281f47eaa951febc474079ec6bb3a9e8854c0d6605393b5178fac3cfc4a461afd1faceba65f1b03f3b6f2622ae741a6dddb8db16035ade4481b628deddcbf5c97744df29c4e99bd19127a4b5b0cc4fe328e280bc012e31ccd3c66c43bbab03ecd4e50d3bfbaeb846e980ff853c93ff0c0bc2be0c689563e624ecf1eea4591733cf37c62f7d2a4f393d2e05138734c657765f0bdf6ee55e5d6459"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "cc2f44644e207135"}]}, @ETHTOOL_A_STATS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_SRC={0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4}, 0x4085) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r6, &(0x7f0000002700)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002400)={0x28c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_GROUPS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "aa38eb7d46a3a5e9f666e430d88026714ed4c1504ff3688797fdf66a3eeaebbc0326107291f53e1c19df9aab1b87e1139ab07894a0ffd36ec71eb9b42d21e47dd56c1c29a0844fd641d77bfe271bff3e6b7ce151be9735e51d9213d1da2d99e48652087359e7cd006b16f0b97740fa5c42446307d76691f05fae449a307ce7a667e289e99dfa4b665dac8fc6782d16badb520d790d7766e2ba09ab75ad5dd1652fa4db20848547e12eaca8e082a56e8a4b7041e198199caaeee630c46c0be74c6aad1618b73bebfebf5f8eaa6238316db58af0c46f8e8160803de7c4"}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STATS_GROUPS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "e666002e0a3e2253336d8cd2872b6d34c25684e7c54ea18a08d4df99a45d"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "d92d9c8975611f9da606c6426b55586bd1b72c94f91b569dc9005f15488c6a32238a270b7319a2cfecf7b4e0281f47eaa951febc474079ec6bb3a9e8854c0d6605393b5178fac3cfc4a461afd1faceba65f1b03f3b6f2622ae741a6dddb8db16035ade4481b628deddcbf5c97744df29c4e99bd19127a4b5b0cc4fe328e280bc012e31ccd3c66c43bbab03ecd4e50d3bfbaeb846e980ff853c93ff0c0bc2be0c689563e624ecf1eea4591733cf37c62f7d2a4f393d2e05138734c657765f0bdf6ee55e5d6459"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "cc2f44644e207135"}]}, @ETHTOOL_A_STATS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_SRC={0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4}, 0x4085) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000027c0)={'ip6gre0\x00', &(0x7f0000002740)={'ip6tnl0\x00', r8, 0x4, 0x6a, 0x6, 0x8, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x8000, 0x11bf5250, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002800)={'batadv_slave_1\x00'}) prctl$PR_SET_FPEXC(0xc, 0x80001) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f0000002840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x6}, @ptr={0x4}]}, {0x0, [0x5f, 0x0, 0x61, 0x5f, 0x0, 0x2e, 0xe, 0x30]}}, &(0x7f0000002880)=""/166, 0x3e, 0xa6, 0x0, 0x5218, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@arena={0x21, 0x0, 0x0, 0x22, 0x60000, r6, 0x3ff, '\x00', r9, r10, 0x5, 0x4, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@arena={0x21, 0x0, 0x0, 0x22, 0x60000, r6, 0x3ff, '\x00', r9, r10, 0x5, 0x4, 0x2}, 0x50) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) 1.226865906s ago: executing program 3 (id=1684): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x44) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x34}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}}, 0x0) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000001c0)="11388994ebebaf06b221f7eb205fe3a24463df0461a898fe8884563138433aeafb739f2c605b28784d20ed026426ea035ed3a806961c20") r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)="b8", 0x1) 1.093696237s ago: executing program 5 (id=1685): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc458}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x0, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x6, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000300)='./gadget\x00', &(0x7f0000000340)='gadgetfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r8, &(0x7f00000003c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x7, 0x3, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 986.946039ms ago: executing program 5 (id=1686): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00') close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, r4}, [""]}, 0x18}}, 0x0) 834.056251ms ago: executing program 5 (id=1687): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000480)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0xc0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000600)=[r6, r6, r7], 0x3}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000028000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000180003"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r9 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x20}}, 0x8015) 490.242634ms ago: executing program 3 (id=1688): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='j', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000000000084000000020000000884410009000000c0000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x38, 0x20000000}, 0x400c040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/4077, 0xfed}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000015c0)=""/256, 0x100}, {&(0x7f00000016c0)=""/191, 0xbf}], 0x6}, 0x4001}], 0x4, 0x0, 0x0) 487.405958ms ago: executing program 2 (id=1689): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000802907800000000ffffffff11009078000000013d2e02f3de717e89083d37271df13756b0866dc32f8aecd16cdbb8619aa0f23644a8e4391e9b89108e90f6e27f1d4d16edb102ec944df871da3928f16d68b68022f3b755fb4c7893ef455a5382422f4cf901b38742a0dc92cd8d14d8e549875c6954486d1494e38110420f96bcd903b9dbbe397f8ef9c36363c82016c2420b6167c4c220d1c9b98cfe60999547e91e4fb0738eba13f96495724117e0d63ae26080263a632e3381cc14318f0fb6943aae92d5c7328181196df820ad23da2154f5b00776e12c25e3a3ae38813ffc5e86680c6cbed19f348c776242ce4b2fe283462ba63e7db292214903839d377d2a9a43"], 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f00000009c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="00fc67000000007b8af8ff00000000bfb2000000010000000000"], 0x0, 0x1200, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000a40)={0x0, [[0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffbfffff, 0xffffffff, 0xffffffff], [0x39a8, 0xfff7ffff, 0xffffffff, 0x3, 0xa, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x3, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x13c8, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x8, 0x0, 0x0, 0x1}, {0xffe, 0x4000, 0x0, 0x0, 0x1}, {0x80000, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000000cc0)=0xfd8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000d00)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x67, 0x0, 0x4d, 0x5f}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setresuid(r1, r2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2a020480) 404.058838ms ago: executing program 3 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r2, 0x235, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x600c802}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211"], 0x288}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0x200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x8, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x8, r0}, 0x38) 344.681215ms ago: executing program 3 (id=1691): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace\x00', 0x1ff) prlimit64(0x0, 0x7, &(0x7f00000008c0)={0x7, 0x100}, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='_', 0x1, 0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000002a80)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d1", 0xb1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000002b40)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002bc0)={'sha256\x00'}}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = fanotify_init(0x81, 0x40000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) fanotify_mark(r3, 0x105, 0x800101b, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000700)='./trace\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) write(r4, &(0x7f00000007c0)='hi', 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000029c0)={0x10f, 0x0, 0x1, 0x505, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast1}, {0x0, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x80, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0xd0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'geneve1\x00', &(0x7f0000000300)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) r8 = socket(0x2c, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r8) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x44) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x29901, 0x49a41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x4c}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000680)) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x15) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 67.918513ms ago: executing program 6 (id=1692): bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x4, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb210503, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x344ea}]}, &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/10, 0xa}], 0x1) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000005c0)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[], 0x10}}, 0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newsa={0x144, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in=@local, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd2a, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_dont_frag={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @broadcast}) (async) r7 = memfd_create(&(0x7f0000000640)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x8010002}) (async, rerun: 64) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) (async, rerun: 64) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000240)='bind\x00', 0x1, 0x0) write(r9, &(0x7f00000004c0)='00:02', 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x2, 0x129, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x10}, 0x94) (async) sendmmsg(r3, &(0x7f00000004c0), 0x800001d, 0x0) 10.177392ms ago: executing program 5 (id=1693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0xf2) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./config\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/dri/0/name\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000780)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r2, &(0x7f0000000800)='attr/keycreate\x00') bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000140)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="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", 0xfb, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x38, 0x1000, 0x0, 0x7}}}}}}}, 0x0) 0s ago: executing program 6 (id=1694): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82581, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x4006) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0xffbfffff, 0x2, 0x4000086, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x3154c36c, 0x9, 0x89, 0xfffff7ed, 0x18, "3ebc0d2d55b8310d5739290c302bf40c4d34d2"}) lseek(r0, 0x103, 0x1) getdents64(r0, &(0x7f0000003340)=""/48, 0x30) kernel console output (not intermixed with test programs): +0x10/0x10 [ 132.558713][T10960] ? find_held_lock+0x2b/0x80 [ 132.558725][T10960] ? rcu_read_unlock+0x17/0x60 [ 132.558739][T10960] ? rcu_read_unlock+0x17/0x60 [ 132.558754][T10960] ? find_held_lock+0x2b/0x80 [ 132.558767][T10960] ? rcu_read_unlock+0x17/0x60 [ 132.558784][T10960] charge_memcg+0x1ae/0x210 [ 132.558799][T10960] __mem_cgroup_charge+0x2b/0x1e0 [ 132.558817][T10960] shmem_alloc_and_add_folio+0x451/0xd40 [ 132.558839][T10960] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 132.558860][T10960] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 132.558891][T10960] shmem_get_folio_gfp+0x758/0x1af0 [ 132.558925][T10960] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 132.558951][T10960] ? inode_set_ctime_current+0x9c/0x850 [ 132.558970][T10960] ? find_held_lock+0x2b/0x80 [ 132.558984][T10960] ? timestamp_truncate+0x22e/0x2f0 [ 132.559001][T10960] shmem_write_begin+0x1a4/0x420 [ 132.559014][T10960] ? __pfx_shmem_write_begin+0x10/0x10 [ 132.559026][T10960] ? inode_set_ctime_current+0x283/0x850 [ 132.559041][T10960] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 132.559055][T10960] ? inode_maybe_inc_iversion+0x169/0x220 [ 132.559071][T10960] generic_perform_write+0x292/0xa40 [ 132.559087][T10960] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 132.559104][T10960] ? __pfx_generic_perform_write+0x10/0x10 [ 132.559121][T10960] ? mnt_put_write_access_file+0x4e/0x100 [ 132.559136][T10960] ? file_update_time_flags+0x38c/0x520 [ 132.559170][T10960] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 132.559184][T10960] shmem_file_write_iter+0x10e/0x140 [ 132.559199][T10960] __kernel_write_iter+0x2ac/0x930 [ 132.559219][T10960] ? __pfx___kernel_write_iter+0x10/0x10 [ 132.559238][T10960] ? __up_read+0x333/0x980 [ 132.559257][T10960] ? dump_user_range+0x7e0/0xe90 [ 132.559273][T10960] dump_user_range+0xa0d/0xe90 [ 132.559289][T10960] ? __pfx_dump_user_range+0x10/0x10 [ 132.559305][T10960] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 132.559321][T10960] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 132.559338][T10960] ? __pfx_writenote+0x10/0x10 [ 132.559355][T10960] elf_core_dump+0x2d97/0x3d60 [ 132.559377][T10960] ? __pfx_elf_core_dump+0x10/0x10 [ 132.559389][T10960] ? kasan_save_stack+0x3f/0x50 [ 132.559407][T10960] ? kasan_save_stack+0x30/0x50 [ 132.559423][T10960] ? kasan_save_track+0x14/0x30 [ 132.559433][T10960] ? __kasan_kmalloc+0xaa/0xb0 [ 132.559450][T10960] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 132.559467][T10960] ? get_signal+0x1f20/0x21d0 [ 132.559481][T10960] ? arch_do_signal_or_restart+0x91/0x7e0 [ 132.559493][T10960] ? irqentry_exit+0x542/0xab0 [ 132.559506][T10960] ? 0xffffffffff600000 [ 132.559534][T10960] ? lock_acquire+0x1d1/0x380 [ 132.559550][T10960] ? get_signal+0x1f20/0x21d0 [ 132.559569][T10960] ? vfs_coredump+0x2606/0x5920 [ 132.559579][T10960] vfs_coredump+0x2606/0x5920 [ 132.559598][T10960] ? __pfx_vfs_coredump+0x10/0x10 [ 132.559613][T10960] ? __lock_acquire+0x5c0/0x1f40 [ 132.559631][T10960] ? lock_acquire+0x1d1/0x380 [ 132.559646][T10960] ? unwind_next_frame+0xbd/0x2090 [ 132.559661][T10960] ? lock_acquire+0x1d1/0x380 [ 132.559676][T10960] ? is_bpf_text_address+0x25/0x1a0 [ 132.559691][T10960] ? find_held_lock+0x2b/0x80 [ 132.559703][T10960] ? is_bpf_text_address+0x8a/0x1a0 [ 132.559716][T10960] ? is_bpf_text_address+0x8a/0x1a0 [ 132.559730][T10960] ? bpf_ksym_find+0x128/0x1c0 [ 132.559746][T10960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.559764][T10960] ? is_bpf_text_address+0x94/0x1a0 [ 132.559787][T10960] ? __sigqueue_free+0xbe/0x2a0 [ 132.559804][T10960] ? stack_trace_save+0x8e/0xc0 [ 132.559825][T10960] ? kasan_save_stack+0x3f/0x50 [ 132.559842][T10960] ? kasan_save_stack+0x30/0x50 [ 132.559859][T10960] ? kasan_save_track+0x14/0x30 [ 132.559868][T10960] ? kasan_save_free_info+0x3b/0x70 [ 132.559883][T10960] ? __kasan_slab_free+0x5f/0x80 [ 132.559897][T10960] ? kmem_cache_free+0x127/0x6c0 [ 132.559911][T10960] ? __sigqueue_free+0xbe/0x2a0 [ 132.559926][T10960] ? get_signal+0xb02/0x21d0 [ 132.559939][T10960] ? arch_do_signal_or_restart+0x91/0x7e0 [ 132.559950][T10960] ? irqentry_exit+0x542/0xab0 [ 132.559960][T10960] ? asm_exc_general_protection+0x26/0x30 [ 132.559997][T10960] ? rcu_is_watching+0x13/0xc0 [ 132.560013][T10960] get_signal+0x1f20/0x21d0 [ 132.560033][T10960] ? __pfx_get_signal+0x10/0x10 [ 132.560051][T10960] arch_do_signal_or_restart+0x91/0x7e0 [ 132.560064][T10960] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 132.560081][T10960] ? cond_local_irq_disable.part.0+0x38/0x40 [ 132.560095][T10960] ? exc_general_protection+0x120/0x240 [ 132.560113][T10960] irqentry_exit+0x542/0xab0 [ 132.560125][T10960] asm_exc_general_protection+0x26/0x30 [ 132.560137][T10960] RIP: 0033:0x7f842df9f561 [ 132.560147][T10960] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 132.560158][T10960] RSP: 002b:0000200000000010 EFLAGS: 00010217 [ 132.560168][T10960] RAX: 0000000000000000 RBX: 00007f842e226090 RCX: 00007f842df9f559 [ 132.560176][T10960] RDX: 0000200000000040 RSI: 0000200000000010 RDI: 0000000000000000 [ 132.560183][T10960] RBP: 00007f842e036b20 R08: 00002000000000c0 R09: 00002000000000c0 [ 132.560190][T10960] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 132.560197][T10960] R13: 00007f842e226128 R14: 00007f842e226090 R15: 00007ffdd359b4c8 [ 132.560213][T10960] [ 132.580276][T10960] memory: usage 307200kB, limit 307200kB, failcnt 19849 [ 132.580290][T10960] memory+swap: usage 417372kB, limit 9007199254740988kB, failcnt 0 [ 132.580298][T10960] kmem: usage 9872kB, limit 9007199254740988kB, failcnt 0 [ 132.580305][T10960] Memory cgroup stats for /syz2: [ 132.580389][T10960] cache 304295936 [ 132.580396][T10960] rss 53248 [ 132.580400][T10960] rss_huge 0 [ 132.580404][T10960] shmem 304295936 [ 132.580408][T10960] mapped_file 0 [ 132.580412][T10960] dirty 0 [ 132.580416][T10960] writeback 0 [ 132.580420][T10960] workingset_refault_anon 789 [ 132.580424][T10960] workingset_refault_file 2541 [ 132.580429][T10960] swap 112840704 [ 132.580432][T10960] swapcached 12288 [ 132.580436][T10960] pgpgin 279598 [ 132.580440][T10960] pgpgout 205293 [ 132.580444][T10960] pgfault 127106 [ 132.580448][T10960] pgmajfault 19 [ 132.580452][T10960] inactive_anon 77590528 [ 132.580456][T10960] active_anon 226762752 [ 132.580461][T10960] inactive_file 0 [ 132.580465][T10960] active_file 0 [ 132.580468][T10960] unevictable 0 [ 132.580472][T10960] hierarchical_memory_limit 314572800 [ 132.580477][T10960] hierarchical_memsw_limit 9223372036854771712 [ 132.580482][T10960] total_cache 304295936 [ 132.580487][T10960] total_rss 53248 [ 132.580490][T10960] total_rss_huge 0 [ 132.580494][T10960] total_shmem 304295936 [ 132.580499][T10960] total_mapped_file 0 [ 132.580503][T10960] total_dirty 0 [ 132.580506][T10960] total_writeback 0 [ 132.580510][T10960] total_workingset_refault_anon 789 [ 132.580515][T10960] total_workingset_refault_file 2541 [ 132.580520][T10960] total_swap 112840704 [ 132.580524][T10960] total_swapcached 12288 [ 132.580528][T10960] total_pgpgin 279598 [ 132.580532][T10960] total_pgpgout 205293 [ 132.580537][T10960] total_pgfault 127106 [ 132.580541][T10960] total_pgmajfault 19 [ 132.580545][T10960] total_inactive_anon 77590528 [ 132.580549][T10960] total_active_anon 226762752 [ 132.580554][T10960] total_inactive_file 0 [ 132.580558][T10960] total_active_file 0 [ 132.580562][T10960] total_unevictable 0 [ 132.580566][T10960] anon_cost 0 [ 132.580570][T10960] file_cost 0 [ 132.580574][T10960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10977,uid=0 [ 132.580636][T10960] Memory cgroup out of memory: Killed process 10977 (syz.2.1213) total-vm:98572kB, anon-rss:1272kB, file-rss:51780kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 132.617849][T11049] dns_resolver: Unsupported server list version (0) [ 132.639367][T10974] syz.2.1213 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 132.639391][T10974] CPU: 3 UID: 0 PID: 10974 Comm: syz.2.1213 Tainted: G Y syzkaller #0 PREEMPT(full) [ 132.639408][T10974] Tainted: [Y]=FORCED_BIND [ 132.639412][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.639419][T10974] Call Trace: [ 132.639423][T10974] [ 132.639428][T10974] dump_stack_lvl+0x100/0x190 [ 132.639452][T10974] dump_header+0xfb/0x606 [ 132.639466][T10974] oom_kill_process.cold+0xd/0x380 [ 132.639482][T10974] out_of_memory+0x343/0x14c0 [ 132.639517][T10974] ? __pfx_out_of_memory+0x10/0x10 [ 132.639538][T10974] mem_cgroup_out_of_memory+0xc6/0x130 [ 132.639557][T10974] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 132.639586][T10974] ? find_held_lock+0x2b/0x80 [ 132.639603][T10974] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.639616][T10974] ? _raw_spin_unlock+0x28/0x50 [ 132.639634][T10974] try_charge_memcg+0x779/0xf30 [ 132.639653][T10974] ? __pfx_try_charge_memcg+0x10/0x10 [ 132.639666][T10974] ? find_held_lock+0x2b/0x80 [ 132.639678][T10974] ? rcu_read_unlock+0x17/0x60 [ 132.639692][T10974] ? rcu_read_unlock+0x17/0x60 [ 132.639707][T10974] ? find_held_lock+0x2b/0x80 [ 132.639719][T10974] ? rcu_read_unlock+0x17/0x60 [ 132.639737][T10974] charge_memcg+0x1ae/0x210 [ 132.639752][T10974] __mem_cgroup_charge+0x2b/0x1e0 [ 132.639769][T10974] shmem_alloc_and_add_folio+0x451/0xd40 [ 132.639792][T10974] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 132.639813][T10974] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 132.639836][T10974] shmem_get_folio_gfp+0x758/0x1af0 [ 132.639863][T10974] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 132.639881][T10974] ? inode_set_ctime_current+0x9c/0x850 [ 132.639897][T10974] ? find_held_lock+0x2b/0x80 [ 132.639910][T10974] ? timestamp_truncate+0x22e/0x2f0 [ 132.639927][T10974] shmem_write_begin+0x1a4/0x420 [ 132.639940][T10974] ? __pfx_shmem_write_begin+0x10/0x10 [ 132.639952][T10974] ? inode_set_ctime_current+0x283/0x850 [ 132.639968][T10974] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 132.639981][T10974] ? inode_maybe_inc_iversion+0x169/0x220 [ 132.639996][T10974] generic_perform_write+0x292/0xa40 [ 132.640012][T10974] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 132.640029][T10974] ? __pfx_generic_perform_write+0x10/0x10 [ 132.640046][T10974] ? mnt_put_write_access_file+0x4e/0x100 [ 132.640061][T10974] ? file_update_time_flags+0x38c/0x520 [ 132.640080][T10974] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 132.640093][T10974] shmem_file_write_iter+0x10e/0x140 [ 132.640107][T10974] __kernel_write_iter+0x2ac/0x930 [ 132.640127][T10974] ? __pfx___kernel_write_iter+0x10/0x10 [ 132.640146][T10974] ? __up_read+0x333/0x980 [ 132.640166][T10974] ? dump_user_range+0x7e0/0xe90 [ 132.640178][T10974] ? __kernel_write_iter+0x567/0x930 [ 132.640199][T10974] dump_user_range+0xa0d/0xe90 [ 132.640215][T10974] ? __pfx_dump_user_range+0x10/0x10 [ 132.640231][T10974] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 132.640248][T10974] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 132.640265][T10974] ? __pfx_writenote+0x10/0x10 [ 132.640284][T10974] elf_core_dump+0x2d97/0x3d60 [ 132.640306][T10974] ? __pfx_elf_core_dump+0x10/0x10 [ 132.640318][T10974] ? kasan_save_stack+0x3f/0x50 [ 132.640353][T10974] ? kasan_save_stack+0x30/0x50 [ 132.640372][T10974] ? kasan_save_track+0x14/0x30 [ 132.640381][T10974] ? __kasan_kmalloc+0xaa/0xb0 [ 132.640398][T10974] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 132.640416][T10974] ? get_signal+0x1f20/0x21d0 [ 132.640429][T10974] ? arch_do_signal_or_restart+0x91/0x7e0 [ 132.640441][T10974] ? irqentry_exit+0x542/0xab0 [ 132.640455][T10974] ? 0xffffffffff600000 [ 132.640483][T10974] ? lock_acquire+0x1d1/0x380 [ 132.640498][T10974] ? get_signal+0x1f20/0x21d0 [ 132.640517][T10974] ? vfs_coredump+0x2606/0x5920 [ 132.640528][T10974] vfs_coredump+0x2606/0x5920 [ 132.640546][T10974] ? __pfx_vfs_coredump+0x10/0x10 [ 132.640561][T10974] ? __lock_acquire+0x5c0/0x1f40 [ 132.640579][T10974] ? lock_acquire+0x1d1/0x380 [ 132.640594][T10974] ? unwind_next_frame+0xbd/0x2090 [ 132.640609][T10974] ? lock_acquire+0x1d1/0x380 [ 132.640624][T10974] ? is_bpf_text_address+0x25/0x1a0 [ 132.640640][T10974] ? find_held_lock+0x2b/0x80 [ 132.640652][T10974] ? is_bpf_text_address+0x8a/0x1a0 [ 132.640665][T10974] ? is_bpf_text_address+0x8a/0x1a0 [ 132.640679][T10974] ? bpf_ksym_find+0x128/0x1c0 [ 132.640695][T10974] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.640713][T10974] ? is_bpf_text_address+0x94/0x1a0 [ 132.640736][T10974] ? __sigqueue_free+0xbe/0x2a0 [ 132.640753][T10974] ? stack_trace_save+0x8e/0xc0 [ 132.640774][T10974] ? kasan_save_stack+0x3f/0x50 [ 132.640791][T10974] ? kasan_save_stack+0x30/0x50 [ 132.640808][T10974] ? kasan_save_track+0x14/0x30 [ 132.640817][T10974] ? kasan_save_free_info+0x3b/0x70 [ 132.640831][T10974] ? __kasan_slab_free+0x5f/0x80 [ 132.640842][T10974] ? kmem_cache_free+0x127/0x6c0 [ 132.640859][T10974] ? __sigqueue_free+0xbe/0x2a0 [ 132.640875][T10974] ? get_signal+0xb02/0x21d0 [ 132.640887][T10974] ? arch_do_signal_or_restart+0x91/0x7e0 [ 132.640899][T10974] ? irqentry_exit+0x542/0xab0 [ 132.640908][T10974] ? asm_exc_general_protection+0x26/0x30 [ 132.640945][T10974] ? rcu_is_watching+0x13/0xc0 [ 132.640960][T10974] get_signal+0x1f20/0x21d0 [ 132.640980][T10974] ? __pfx_get_signal+0x10/0x10 [ 132.640999][T10974] arch_do_signal_or_restart+0x91/0x7e0 [ 132.641012][T10974] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 132.641028][T10974] ? cond_local_irq_disable.part.0+0x38/0x40 [ 132.641041][T10974] ? exc_general_protection+0x120/0x240 [ 132.641059][T10974] irqentry_exit+0x542/0xab0 [ 132.641072][T10974] asm_exc_general_protection+0x26/0x30 [ 132.641084][T10974] RIP: 0033:0x7f842df9f561 [ 132.641094][T10974] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 132.641106][T10974] RSP: 002b:0000200000000010 EFLAGS: 00010217 [ 132.641115][T10974] RAX: 0000000000000000 RBX: 00007f842e226090 RCX: 00007f842df9f559 [ 132.641123][T10974] RDX: 0000200000000040 RSI: 0000200000000010 RDI: 0000000000000000 [ 132.641130][T10974] RBP: 00007f842e036b20 R08: 00002000000000c0 R09: 00002000000000c0 [ 132.641137][T10974] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 132.641144][T10974] R13: 00007f842e226128 R14: 00007f842e226090 R15: 00007ffdd359b4c8 [ 132.641160][T10974] [ 132.641206][T10974] memory: usage 307188kB, limit 307200kB, failcnt 20101 [ 132.641236][T10974] memory+swap: usage 417444kB, limit 9007199254740988kB, failcnt 0 [ 132.641245][T10974] kmem: usage 9892kB, limit 9007199254740988kB, failcnt 0 [ 132.641252][T10974] Memory cgroup stats for /syz2: [ 132.641331][T10974] cache 304197632 [ 132.641336][T10974] rss 57344 [ 132.641340][T10974] rss_huge 0 [ 132.641344][T10974] shmem 304197632 [ 132.641348][T10974] mapped_file 0 [ 132.641352][T10974] dirty 0 [ 132.641355][T10974] writeback 0 [ 132.641359][T10974] workingset_refault_anon 789 [ 132.641364][T10974] workingset_refault_file 2541 [ 132.641368][T10974] swap 112898048 [ 132.641372][T10974] swapcached 20480 [ 132.641376][T10974] pgpgin 279919 [ 132.641380][T10974] pgpgout 205637 [ 132.641383][T10974] pgfault 127129 [ 132.641387][T10974] pgmajfault 19 [ 132.641391][T10974] inactive_anon 72822784 [ 132.641396][T10974] active_anon 230428672 [ 132.641400][T10974] inactive_file 0 [ 132.641404][T10974] active_file 0 [ 132.641407][T10974] unevictable 0 [ 132.641411][T10974] hierarchical_memory_limit 314572800 [ 132.641416][T10974] hierarchical_memsw_limit 9223372036854771712 [ 132.641421][T10974] total_cache 304197632 [ 132.641425][T10974] total_rss 57344 [ 132.641429][T10974] total_rss_huge 0 [ 132.668154][T10974] total_shmem 304197632 [ 132.668162][T10974] total_mapped_file 0 [ 132.668167][T10974] total_dirty 0 [ 132.668171][T10974] total_writeback 0 [ 132.668175][T10974] total_workingset_refault_anon 789 [ 132.668179][T10974] total_workingset_refault_file 2541 [ 132.668184][T10974] total_swap 112898048 [ 132.668188][T10974] total_swapcached 20480 [ 132.668192][T10974] total_pgpgin 279919 [ 132.668196][T10974] total_pgpgout 205637 [ 132.668200][T10974] total_pgfault 127129 [ 132.668204][T10974] total_pgmajfault 19 [ 132.668208][T10974] total_inactive_anon 72822784 [ 132.668213][T10974] total_active_anon 230428672 [ 132.668217][T10974] total_inactive_file 0 [ 132.668221][T10974] total_active_file 0 [ 132.668225][T10974] total_unevictable 0 [ 132.668229][T10974] anon_cost 0 [ 132.668233][T10974] file_cost 0 [ 132.668237][T10974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10960,uid=0 [ 132.668296][T10974] Memory cgroup out of memory: Killed process 10960 (syz.2.1213) total-vm:98572kB, anon-rss:1272kB, file-rss:48900kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 132.680966][ T1450] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.680996][ T1450] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.306273][T10956] syz.2.1213 (10956) used greatest stack depth: 19192 bytes left [ 133.343234][T11082] __nla_validate_parse: 7 callbacks suppressed [ 133.343247][T11082] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1245'. [ 133.517113][T11086] openvswitch: netlink: Tunnel attr 263 out of range max 16 [ 133.517342][T11086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11086 comm=syz.3.1245 [ 133.696746][ T5950] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 133.741284][T11095] hfsplus: unable to find HFS+ superblock [ 133.760600][T11095] hfsplus: unable to find HFS+ superblock [ 134.605616][T10965] syz.2.1213 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 134.605642][T10965] CPU: 1 UID: 0 PID: 10965 Comm: syz.2.1213 Tainted: G Y syzkaller #0 PREEMPT(full) [ 134.605659][T10965] Tainted: [Y]=FORCED_BIND [ 134.605663][T10965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.605670][T10965] Call Trace: [ 134.605674][T10965] [ 134.605679][T10965] dump_stack_lvl+0x100/0x190 [ 134.605701][T10965] dump_header+0xfb/0x606 [ 134.605715][T10965] oom_kill_process.cold+0xd/0x380 [ 134.605730][T10965] out_of_memory+0x343/0x14c0 [ 134.605751][T10965] ? __pfx_out_of_memory+0x10/0x10 [ 134.605772][T10965] mem_cgroup_out_of_memory+0xc6/0x130 [ 134.605790][T10965] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 134.605807][T10965] ? find_held_lock+0x2b/0x80 [ 134.605823][T10965] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.605835][T10965] ? _raw_spin_unlock+0x28/0x50 [ 134.605853][T10965] try_charge_memcg+0x779/0xf30 [ 134.605871][T10965] ? __pfx_try_charge_memcg+0x10/0x10 [ 134.605884][T10965] ? find_held_lock+0x2b/0x80 [ 134.605896][T10965] ? rcu_read_unlock+0x17/0x60 [ 134.605910][T10965] ? rcu_read_unlock+0x17/0x60 [ 134.605925][T10965] ? find_held_lock+0x2b/0x80 [ 134.605938][T10965] ? rcu_read_unlock+0x17/0x60 [ 134.605955][T10965] charge_memcg+0x1ae/0x210 [ 134.605971][T10965] __mem_cgroup_charge+0x2b/0x1e0 [ 134.605988][T10965] shmem_alloc_and_add_folio+0x451/0xd40 [ 134.606011][T10965] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 134.606031][T10965] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 134.606054][T10965] shmem_get_folio_gfp+0x758/0x1af0 [ 134.606077][T10965] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 134.606097][T10965] ? vm_normal_page+0x1d1/0x380 [ 134.606113][T10965] ? __pfx_vm_normal_page+0x10/0x10 [ 134.606132][T10965] shmem_write_begin+0x1a4/0x420 [ 134.606145][T10965] ? __pfx_shmem_write_begin+0x10/0x10 [ 134.606158][T10965] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 134.606174][T10965] generic_perform_write+0x292/0xa40 [ 134.606190][T10965] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.606207][T10965] ? __pfx_generic_perform_write+0x10/0x10 [ 134.606225][T10965] ? file_update_time_flags+0x38c/0x520 [ 134.606244][T10965] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.606257][T10965] shmem_file_write_iter+0x10e/0x140 [ 134.606271][T10965] __kernel_write_iter+0x2ac/0x930 [ 134.606291][T10965] ? __pfx___kernel_write_iter+0x10/0x10 [ 134.606310][T10965] ? __up_read+0x333/0x980 [ 134.606330][T10965] ? dump_user_range+0x7e0/0xe90 [ 134.606345][T10965] dump_user_range+0xa0d/0xe90 [ 134.606361][T10965] ? __pfx_dump_user_range+0x10/0x10 [ 134.606377][T10965] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 134.606394][T10965] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 134.606411][T10965] ? __pfx_writenote+0x10/0x10 [ 134.606427][T10965] elf_core_dump+0x2d97/0x3d60 [ 134.606449][T10965] ? __pfx_elf_core_dump+0x10/0x10 [ 134.606460][T10965] ? kasan_save_stack+0x3f/0x50 [ 134.606478][T10965] ? kasan_save_stack+0x30/0x50 [ 134.606495][T10965] ? kasan_save_track+0x14/0x30 [ 134.606505][T10965] ? __kasan_kmalloc+0xaa/0xb0 [ 134.606525][T10965] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 134.606543][T10965] ? get_signal+0x1f20/0x21d0 [ 134.606557][T10965] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.606569][T10965] ? irqentry_exit+0x542/0xab0 [ 134.606582][T10965] ? 0xffffffffff600000 [ 134.606609][T10965] ? lock_acquire+0x1d1/0x380 [ 134.606624][T10965] ? get_signal+0x1f20/0x21d0 [ 134.606643][T10965] ? vfs_coredump+0x2606/0x5920 [ 134.606653][T10965] vfs_coredump+0x2606/0x5920 [ 134.606671][T10965] ? __pfx_vfs_coredump+0x10/0x10 [ 134.606686][T10965] ? __lock_acquire+0x5c0/0x1f40 [ 134.606704][T10965] ? lock_acquire+0x1d1/0x380 [ 134.606719][T10965] ? unwind_next_frame+0xbd/0x2090 [ 134.606733][T10965] ? lock_acquire+0x1d1/0x380 [ 134.606748][T10965] ? is_bpf_text_address+0x25/0x1a0 [ 134.606763][T10965] ? find_held_lock+0x2b/0x80 [ 134.606775][T10965] ? is_bpf_text_address+0x8a/0x1a0 [ 134.606789][T10965] ? is_bpf_text_address+0x8a/0x1a0 [ 134.606803][T10965] ? bpf_ksym_find+0x128/0x1c0 [ 134.606819][T10965] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.606836][T10965] ? is_bpf_text_address+0x94/0x1a0 [ 134.606859][T10965] ? __sigqueue_free+0xbe/0x2a0 [ 134.606876][T10965] ? stack_trace_save+0x8e/0xc0 [ 134.606896][T10965] ? kasan_save_stack+0x3f/0x50 [ 134.606913][T10965] ? kasan_save_stack+0x30/0x50 [ 134.606930][T10965] ? kasan_save_track+0x14/0x30 [ 134.606939][T10965] ? kasan_save_free_info+0x3b/0x70 [ 134.606968][T10965] ? __kasan_slab_free+0x5f/0x80 [ 134.606979][T10965] ? kmem_cache_free+0x127/0x6c0 [ 134.606993][T10965] ? __sigqueue_free+0xbe/0x2a0 [ 134.607008][T10965] ? get_signal+0xb02/0x21d0 [ 134.607021][T10965] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.607032][T10965] ? irqentry_exit+0x542/0xab0 [ 134.607042][T10965] ? asm_exc_general_protection+0x26/0x30 [ 134.607079][T10965] ? rcu_is_watching+0x13/0xc0 [ 134.607094][T10965] get_signal+0x1f20/0x21d0 [ 134.607114][T10965] ? __pfx_get_signal+0x10/0x10 [ 134.607133][T10965] arch_do_signal_or_restart+0x91/0x7e0 [ 134.607146][T10965] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 134.607162][T10965] ? cond_local_irq_disable.part.0+0x38/0x40 [ 134.607175][T10965] ? exc_general_protection+0x120/0x240 [ 134.607194][T10965] irqentry_exit+0x542/0xab0 [ 134.607206][T10965] asm_exc_general_protection+0x26/0x30 [ 134.607218][T10965] RIP: 0033:0x7f842df9f561 [ 134.607228][T10965] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 134.607240][T10965] RSP: 002b:0000200000000010 EFLAGS: 00010217 [ 134.607250][T10965] RAX: 0000000000000000 RBX: 00007f842e226090 RCX: 00007f842df9f559 [ 134.607257][T10965] RDX: 0000200000000040 RSI: 0000200000000010 RDI: 0000000000000000 [ 134.607264][T10965] RBP: 00007f842e036b20 R08: 00002000000000c0 R09: 00002000000000c0 [ 134.607271][T10965] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 134.607278][T10965] R13: 00007f842e226128 R14: 00007f842e226090 R15: 00007ffdd359b4c8 [ 134.607294][T10965] [ 134.612489][T10965] memory: usage 307200kB, limit 307200kB, failcnt 31288 [ 134.612499][T10965] memory+swap: usage 410528kB, limit 9007199254740988kB, failcnt 0 [ 134.612507][T10965] kmem: usage 9176kB, limit 9007199254740988kB, failcnt 0 [ 134.612514][T10965] Memory cgroup stats for /syz2: [ 134.612603][T10965] cache 305098752 [ 134.612609][T10965] rss 77824 [ 134.612613][T10965] rss_huge 0 [ 134.612616][T10965] shmem 305057792 [ 134.612620][T10965] mapped_file 4096 [ 134.612624][T10965] dirty 4096 [ 134.612628][T10965] writeback 0 [ 134.612632][T10965] workingset_refault_anon 793 [ 134.612636][T10965] workingset_refault_file 5896 [ 134.612640][T10965] swap 105807872 [ 134.612644][T10965] swapcached 8192 [ 134.612648][T10965] pgpgin 326084 [ 134.612652][T10965] pgpgout 251578 [ 134.612656][T10965] pgfault 129824 [ 134.612660][T10965] pgmajfault 74 [ 134.612664][T10965] inactive_anon 235593728 [ 134.612668][T10965] active_anon 69541888 [ 134.612672][T10965] inactive_file 0 [ 134.612676][T10965] active_file 20480 [ 134.612680][T10965] unevictable 0 [ 134.612684][T10965] hierarchical_memory_limit 314572800 [ 134.612688][T10965] hierarchical_memsw_limit 9223372036854771712 [ 134.612693][T10965] total_cache 305098752 [ 134.612697][T10965] total_rss 77824 [ 134.612701][T10965] total_rss_huge 0 [ 134.612705][T10965] total_shmem 305057792 [ 134.612709][T10965] total_mapped_file 4096 [ 134.612713][T10965] total_dirty 4096 [ 134.612717][T10965] total_writeback 0 [ 134.612721][T10965] total_workingset_refault_anon 793 [ 134.612726][T10965] total_workingset_refault_file 5896 [ 134.612730][T10965] total_swap 105807872 [ 134.612734][T10965] total_swapcached 8192 [ 134.612738][T10965] total_pgpgin 326084 [ 134.612742][T10965] total_pgpgout 251578 [ 134.612746][T10965] total_pgfault 129824 [ 134.612750][T10965] total_pgmajfault 74 [ 134.612754][T10965] total_inactive_anon 235593728 [ 134.612758][T10965] total_active_anon 69541888 [ 134.612763][T10965] total_inactive_file 0 [ 134.612767][T10965] total_active_file 20480 [ 134.612771][T10965] total_unevictable 0 [ 134.612775][T10965] anon_cost 0 [ 134.612779][T10965] file_cost 0 [ 134.612783][T10965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10989,uid=0 [ 134.612835][T10965] Memory cgroup out of memory: Killed process 10989 (syz.2.1213) total-vm:98572kB, anon-rss:1264kB, file-rss:53384kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 134.732879][T10959] syz.2.1213 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 134.732925][T10959] CPU: 3 UID: 0 PID: 10959 Comm: syz.2.1213 Tainted: G Y syzkaller #0 PREEMPT(full) [ 134.732944][T10959] Tainted: [Y]=FORCED_BIND [ 134.732948][T10959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.732955][T10959] Call Trace: [ 134.732959][T10959] [ 134.732964][T10959] dump_stack_lvl+0x100/0x190 [ 134.732987][T10959] dump_header+0xfb/0x606 [ 134.733002][T10959] oom_kill_process.cold+0xd/0x380 [ 134.733017][T10959] out_of_memory+0x343/0x14c0 [ 134.733038][T10959] ? __pfx_out_of_memory+0x10/0x10 [ 134.733059][T10959] mem_cgroup_out_of_memory+0xc6/0x130 [ 134.733077][T10959] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 134.733095][T10959] ? find_held_lock+0x2b/0x80 [ 134.733110][T10959] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.733122][T10959] ? _raw_spin_unlock+0x28/0x50 [ 134.733141][T10959] try_charge_memcg+0x779/0xf30 [ 134.733159][T10959] ? __pfx_try_charge_memcg+0x10/0x10 [ 134.733173][T10959] ? find_held_lock+0x2b/0x80 [ 134.733184][T10959] ? rcu_read_unlock+0x17/0x60 [ 134.733199][T10959] ? rcu_read_unlock+0x17/0x60 [ 134.733213][T10959] ? find_held_lock+0x2b/0x80 [ 134.733226][T10959] ? rcu_read_unlock+0x17/0x60 [ 134.733243][T10959] charge_memcg+0x1ae/0x210 [ 134.733258][T10959] __mem_cgroup_charge+0x2b/0x1e0 [ 134.733275][T10959] shmem_alloc_and_add_folio+0x451/0xd40 [ 134.733298][T10959] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 134.733319][T10959] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 134.733342][T10959] shmem_get_folio_gfp+0x758/0x1af0 [ 134.733364][T10959] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 134.733384][T10959] ? vm_normal_page+0x1d1/0x380 [ 134.733401][T10959] ? __pfx_vm_normal_page+0x10/0x10 [ 134.733424][T10959] shmem_write_begin+0x1a4/0x420 [ 134.733437][T10959] ? __pfx_shmem_write_begin+0x10/0x10 [ 134.733450][T10959] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 134.733465][T10959] generic_perform_write+0x292/0xa40 [ 134.733481][T10959] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.733499][T10959] ? __pfx_generic_perform_write+0x10/0x10 [ 134.733516][T10959] ? file_update_time_flags+0x38c/0x520 [ 134.733536][T10959] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.733549][T10959] shmem_file_write_iter+0x10e/0x140 [ 134.733563][T10959] __kernel_write_iter+0x2ac/0x930 [ 134.733583][T10959] ? __pfx___kernel_write_iter+0x10/0x10 [ 134.733602][T10959] ? __up_read+0x333/0x980 [ 134.733622][T10959] ? dump_user_range+0x7e0/0xe90 [ 134.733637][T10959] dump_user_range+0xa0d/0xe90 [ 134.733653][T10959] ? __pfx_dump_user_range+0x10/0x10 [ 134.733669][T10959] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 134.733685][T10959] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 134.733702][T10959] ? __pfx_writenote+0x10/0x10 [ 134.733719][T10959] elf_core_dump+0x2d97/0x3d60 [ 134.733740][T10959] ? __pfx_elf_core_dump+0x10/0x10 [ 134.733752][T10959] ? kasan_save_stack+0x3f/0x50 [ 134.733770][T10959] ? kasan_save_stack+0x30/0x50 [ 134.733787][T10959] ? kasan_save_track+0x14/0x30 [ 134.733796][T10959] ? __kasan_kmalloc+0xaa/0xb0 [ 134.733813][T10959] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 134.733830][T10959] ? get_signal+0x1f20/0x21d0 [ 134.733843][T10959] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.733855][T10959] ? irqentry_exit+0x542/0xab0 [ 134.733869][T10959] ? 0xffffffffff600000 [ 134.733896][T10959] ? lock_acquire+0x1d1/0x380 [ 134.733911][T10959] ? get_signal+0x1f20/0x21d0 [ 134.733930][T10959] ? vfs_coredump+0x2606/0x5920 [ 134.733940][T10959] vfs_coredump+0x2606/0x5920 [ 134.733958][T10959] ? __pfx_vfs_coredump+0x10/0x10 [ 134.733974][T10959] ? __lock_acquire+0x5c0/0x1f40 [ 134.733991][T10959] ? lock_acquire+0x1d1/0x380 [ 134.734006][T10959] ? unwind_next_frame+0xbd/0x2090 [ 134.734021][T10959] ? lock_acquire+0x1d1/0x380 [ 134.734036][T10959] ? is_bpf_text_address+0x25/0x1a0 [ 134.734064][T10959] ? find_held_lock+0x2b/0x80 [ 134.734076][T10959] ? is_bpf_text_address+0x8a/0x1a0 [ 134.734090][T10959] ? is_bpf_text_address+0x8a/0x1a0 [ 134.734104][T10959] ? bpf_ksym_find+0x128/0x1c0 [ 134.734120][T10959] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.734137][T10959] ? is_bpf_text_address+0x94/0x1a0 [ 134.734160][T10959] ? __sigqueue_free+0xbe/0x2a0 [ 134.734178][T10959] ? stack_trace_save+0x8e/0xc0 [ 134.734199][T10959] ? kasan_save_stack+0x3f/0x50 [ 134.734216][T10959] ? kasan_save_stack+0x30/0x50 [ 134.734232][T10959] ? kasan_save_track+0x14/0x30 [ 134.734242][T10959] ? kasan_save_free_info+0x3b/0x70 [ 134.734256][T10959] ? __kasan_slab_free+0x5f/0x80 [ 134.734266][T10959] ? kmem_cache_free+0x127/0x6c0 [ 134.734280][T10959] ? __sigqueue_free+0xbe/0x2a0 [ 134.734296][T10959] ? get_signal+0xb02/0x21d0 [ 134.734308][T10959] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.734320][T10959] ? irqentry_exit+0x542/0xab0 [ 134.734329][T10959] ? asm_exc_general_protection+0x26/0x30 [ 134.734366][T10959] ? rcu_is_watching+0x13/0xc0 [ 134.734382][T10959] get_signal+0x1f20/0x21d0 [ 134.734402][T10959] ? __pfx_get_signal+0x10/0x10 [ 134.734424][T10959] arch_do_signal_or_restart+0x91/0x7e0 [ 134.734437][T10959] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 134.734453][T10959] ? cond_local_irq_disable.part.0+0x38/0x40 [ 134.734467][T10959] ? exc_general_protection+0x120/0x240 [ 134.734485][T10959] irqentry_exit+0x542/0xab0 [ 134.734498][T10959] asm_exc_general_protection+0x26/0x30 [ 134.734510][T10959] RIP: 0033:0x7f842df9f561 [ 134.734521][T10959] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 134.734532][T10959] RSP: 002b:0000200000000010 EFLAGS: 00010217 [ 134.734542][T10959] RAX: 0000000000000000 RBX: 00007f842e226090 RCX: 00007f842df9f559 [ 134.734549][T10959] RDX: 0000200000000040 RSI: 0000200000000010 RDI: 0000000000000000 [ 134.734556][T10959] RBP: 00007f842e036b20 R08: 00002000000000c0 R09: 00002000000000c0 [ 134.734563][T10959] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 134.734570][T10959] R13: 00007f842e226128 R14: 00007f842e226090 R15: 00007ffdd359b4c8 [ 134.734586][T10959] [ 134.736400][T10959] memory: usage 307200kB, limit 307200kB, failcnt 31872 [ 134.736409][T10959] memory+swap: usage 410528kB, limit 9007199254740988kB, failcnt 0 [ 134.736420][T10959] kmem: usage 9136kB, limit 9007199254740988kB, failcnt 0 [ 134.736427][T10959] Memory cgroup stats for /syz2: [ 134.736507][T10959] cache 305135616 [ 134.736512][T10959] rss 81920 [ 134.736516][T10959] rss_huge 0 [ 134.736519][T10959] shmem 305119232 [ 134.736524][T10959] mapped_file 8192 [ 134.736527][T10959] dirty 8192 [ 134.736531][T10959] writeback 0 [ 134.736535][T10959] workingset_refault_anon 793 [ 134.736539][T10959] workingset_refault_file 5906 [ 134.736544][T10959] swap 105807872 [ 134.736548][T10959] swapcached 8192 [ 134.736552][T10959] pgpgin 326110 [ 134.736556][T10959] pgpgout 251594 [ 134.736559][T10959] pgfault 129836 [ 134.736564][T10959] pgmajfault 77 [ 134.736568][T10959] inactive_anon 235646976 [ 134.736572][T10959] active_anon 69554176 [ 134.736576][T10959] inactive_file 4096 [ 134.736580][T10959] active_file 4096 [ 134.736584][T10959] unevictable 0 [ 134.736588][T10959] hierarchical_memory_limit 314572800 [ 134.736593][T10959] hierarchical_memsw_limit 9223372036854771712 [ 134.736598][T10959] total_cache 305135616 [ 134.736602][T10959] total_rss 81920 [ 134.736606][T10959] total_rss_huge 0 [ 134.736610][T10959] total_shmem 305119232 [ 134.736614][T10959] total_mapped_file 8192 [ 134.737268][T10959] total_dirty 8192 [ 134.737273][T10959] total_writeback 0 [ 134.737277][T10959] total_workingset_refault_anon 793 [ 134.737282][T10959] total_workingset_refault_file 5906 [ 134.737287][T10959] total_swap 105807872 [ 134.737291][T10959] total_swapcached 8192 [ 134.737295][T10959] total_pgpgin 326110 [ 134.737299][T10959] total_pgpgout 251594 [ 134.737303][T10959] total_pgfault 129836 [ 134.737307][T10959] total_pgmajfault 77 [ 134.737311][T10959] total_inactive_anon 235646976 [ 134.737315][T10959] total_active_anon 69554176 [ 134.737319][T10959] total_inactive_file 4096 [ 134.737323][T10959] total_active_file 4096 [ 134.737327][T10959] total_unevictable 0 [ 134.737331][T10959] anon_cost 0 [ 134.737335][T10959] file_cost 0 [ 134.737339][T10959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10974,uid=0 [ 134.737392][T10959] Memory cgroup out of memory: Killed process 10974 (syz.2.1213) total-vm:98572kB, anon-rss:1264kB, file-rss:53384kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 134.812740][T10964] syz.2.1213 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 134.812774][T10964] CPU: 3 UID: 0 PID: 10964 Comm: syz.2.1213 Tainted: G Y syzkaller #0 PREEMPT(full) [ 134.812801][T10964] Tainted: [Y]=FORCED_BIND [ 134.812807][T10964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.812817][T10964] Call Trace: [ 134.812823][T10964] [ 134.812830][T10964] dump_stack_lvl+0x100/0x190 [ 134.812864][T10964] dump_header+0xfb/0x606 [ 134.812887][T10964] oom_kill_process.cold+0xd/0x380 [ 134.812910][T10964] out_of_memory+0x343/0x14c0 [ 134.812943][T10964] ? __pfx_out_of_memory+0x10/0x10 [ 134.812974][T10964] mem_cgroup_out_of_memory+0xc6/0x130 [ 134.813001][T10964] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 134.813026][T10964] ? find_held_lock+0x2b/0x80 [ 134.813052][T10964] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.813069][T10964] ? _raw_spin_unlock+0x28/0x50 [ 134.813090][T10964] try_charge_memcg+0x779/0xf30 [ 134.813108][T10964] ? __pfx_try_charge_memcg+0x10/0x10 [ 134.813122][T10964] ? find_held_lock+0x2b/0x80 [ 134.813134][T10964] ? rcu_read_unlock+0x17/0x60 [ 134.813148][T10964] ? rcu_read_unlock+0x17/0x60 [ 134.813163][T10964] ? find_held_lock+0x2b/0x80 [ 134.813176][T10964] ? rcu_read_unlock+0x17/0x60 [ 134.813194][T10964] charge_memcg+0x1ae/0x210 [ 134.813209][T10964] __mem_cgroup_charge+0x2b/0x1e0 [ 134.813226][T10964] filemap_add_folio+0xe7/0x640 [ 134.813245][T10964] ? __pfx_filemap_add_folio+0x10/0x10 [ 134.813267][T10964] __filemap_get_folio_mpol+0x57f/0x1230 [ 134.813289][T10964] filemap_fault+0x871/0x3140 [ 134.813311][T10964] ? __pfx_filemap_fault+0x10/0x10 [ 134.813327][T10964] ? __pte_offset_map+0x9a/0x470 [ 134.813348][T10964] ? find_held_lock+0x2b/0x80 [ 134.813362][T10964] ? __pfx_filemap_map_pages+0x10/0x10 [ 134.813378][T10964] __do_fault+0x10b/0x440 [ 134.813394][T10964] do_fault+0xb3f/0x1890 [ 134.813413][T10964] ? __pfx_do_fault+0x10/0x10 [ 134.813434][T10964] ? rcu_read_unlock+0x2d/0xb0 [ 134.813446][T10964] ? rcu_read_unlock+0x2d/0xb0 [ 134.813462][T10964] __handle_mm_fault+0x150b/0x2f60 [ 134.813478][T10964] ? __pfx___handle_mm_fault+0x10/0x10 [ 134.813491][T10964] ? pte_offset_map_lock+0x174/0x320 [ 134.813508][T10964] ? find_held_lock+0x2b/0x80 [ 134.813520][T10964] ? find_held_lock+0x2b/0x80 [ 134.813532][T10964] ? follow_page_pte+0x536/0x1050 [ 134.813557][T10964] handle_mm_fault+0x363/0xa20 [ 134.813573][T10964] __get_user_pages+0x8a9/0x2c20 [ 134.813593][T10964] ? lock_acquire+0x1d1/0x380 [ 134.813609][T10964] ? __pfx___get_user_pages+0x10/0x10 [ 134.813626][T10964] ? __pfx___might_resched+0x10/0x10 [ 134.813645][T10964] get_dump_page+0x27e/0x3d0 [ 134.813661][T10964] ? __pfx_get_dump_page+0x10/0x10 [ 134.813677][T10964] ? dump_user_range+0x7e0/0xe90 [ 134.813693][T10964] dump_user_range+0x19c/0xe90 [ 134.813709][T10964] ? __pfx_dump_user_range+0x10/0x10 [ 134.813725][T10964] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 134.813741][T10964] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 134.813758][T10964] ? __pfx_writenote+0x10/0x10 [ 134.813775][T10964] elf_core_dump+0x2d97/0x3d60 [ 134.813797][T10964] ? __pfx_elf_core_dump+0x10/0x10 [ 134.813809][T10964] ? kasan_save_stack+0x3f/0x50 [ 134.813826][T10964] ? kasan_save_stack+0x30/0x50 [ 134.813843][T10964] ? kasan_save_track+0x14/0x30 [ 134.813853][T10964] ? __kasan_kmalloc+0xaa/0xb0 [ 134.813869][T10964] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 134.813887][T10964] ? get_signal+0x1f20/0x21d0 [ 134.813900][T10964] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.813912][T10964] ? irqentry_exit+0x542/0xab0 [ 134.813927][T10964] ? 0xffffffffff600000 [ 134.813955][T10964] ? lock_acquire+0x1d1/0x380 [ 134.813970][T10964] ? get_signal+0x1f20/0x21d0 [ 134.813989][T10964] ? vfs_coredump+0x2606/0x5920 [ 134.814000][T10964] vfs_coredump+0x2606/0x5920 [ 134.814031][T10964] ? __pfx_vfs_coredump+0x10/0x10 [ 134.814048][T10964] ? __lock_acquire+0x5c0/0x1f40 [ 134.814066][T10964] ? lock_acquire+0x1d1/0x380 [ 134.814082][T10964] ? unwind_next_frame+0xbd/0x2090 [ 134.814096][T10964] ? lock_acquire+0x1d1/0x380 [ 134.814111][T10964] ? is_bpf_text_address+0x25/0x1a0 [ 134.814127][T10964] ? find_held_lock+0x2b/0x80 [ 134.814139][T10964] ? is_bpf_text_address+0x8a/0x1a0 [ 134.814152][T10964] ? is_bpf_text_address+0x8a/0x1a0 [ 134.814166][T10964] ? bpf_ksym_find+0x128/0x1c0 [ 134.814182][T10964] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.814199][T10964] ? is_bpf_text_address+0x94/0x1a0 [ 134.814223][T10964] ? __sigqueue_free+0xbe/0x2a0 [ 134.814240][T10964] ? stack_trace_save+0x8e/0xc0 [ 134.814261][T10964] ? kasan_save_stack+0x3f/0x50 [ 134.814278][T10964] ? kasan_save_stack+0x30/0x50 [ 134.814295][T10964] ? kasan_save_track+0x14/0x30 [ 134.814304][T10964] ? kasan_save_free_info+0x3b/0x70 [ 134.814318][T10964] ? __kasan_slab_free+0x5f/0x80 [ 134.814329][T10964] ? kmem_cache_free+0x127/0x6c0 [ 134.814343][T10964] ? __sigqueue_free+0xbe/0x2a0 [ 134.814358][T10964] ? get_signal+0xb02/0x21d0 [ 134.814371][T10964] ? arch_do_signal_or_restart+0x91/0x7e0 [ 134.814382][T10964] ? irqentry_exit+0x542/0xab0 [ 134.814391][T10964] ? asm_exc_general_protection+0x26/0x30 [ 134.814433][T10964] ? rcu_is_watching+0x13/0xc0 [ 134.814448][T10964] get_signal+0x1f20/0x21d0 [ 134.814468][T10964] ? __pfx_get_signal+0x10/0x10 [ 134.814487][T10964] arch_do_signal_or_restart+0x91/0x7e0 [ 134.814500][T10964] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 134.814516][T10964] ? cond_local_irq_disable.part.0+0x38/0x40 [ 134.814530][T10964] ? exc_general_protection+0x120/0x240 [ 134.814548][T10964] irqentry_exit+0x542/0xab0 [ 134.814560][T10964] asm_exc_general_protection+0x26/0x30 [ 134.814572][T10964] RIP: 0033:0x7f842df9f561 [ 134.814583][T10964] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 134.814594][T10964] RSP: 002b:0000200000000010 EFLAGS: 00010217 [ 134.814603][T10964] RAX: 0000000000000000 RBX: 00007f842e226090 RCX: 00007f842df9f559 [ 134.814611][T10964] RDX: 0000200000000040 RSI: 0000200000000010 RDI: 0000000000000000 [ 134.814618][T10964] RBP: 00007f842e036b20 R08: 00002000000000c0 R09: 00002000000000c0 [ 134.814625][T10964] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 134.814632][T10964] R13: 00007f842e226128 R14: 00007f842e226090 R15: 00007ffdd359b4c8 [ 134.814648][T10964] [ 134.818140][T10964] memory: usage 307200kB, limit 307200kB, failcnt 32268 [ 134.818152][T10964] memory+swap: usage 410520kB, limit 9007199254740988kB, failcnt 0 [ 134.818160][T10964] kmem: usage 9136kB, limit 9007199254740988kB, failcnt 0 [ 134.818167][T10964] Memory cgroup stats for /syz2: [ 134.818268][T10964] cache 305135616 [ 134.818273][T10964] rss 81920 [ 134.818277][T10964] rss_huge 0 [ 134.818281][T10964] shmem 305119232 [ 134.818285][T10964] mapped_file 8192 [ 134.818289][T10964] dirty 0 [ 134.818293][T10964] writeback 0 [ 134.818297][T10964] workingset_refault_anon 793 [ 134.818301][T10964] workingset_refault_file 5907 [ 134.818306][T10964] swap 105799680 [ 134.818309][T10964] swapcached 8192 [ 134.818313][T10964] pgpgin 326111 [ 134.818317][T10964] pgpgout 251595 [ 134.818321][T10964] pgfault 129837 [ 134.818325][T10964] pgmajfault 77 [ 134.818329][T10964] inactive_anon 174579712 [ 134.818333][T10964] active_anon 130621440 [ 134.818337][T10964] inactive_file 0 [ 134.818341][T10964] active_file 8192 [ 134.818345][T10964] unevictable 0 [ 134.818349][T10964] hierarchical_memory_limit 314572800 [ 134.818354][T10964] hierarchical_memsw_limit 9223372036854771712 [ 134.818359][T10964] total_cache 305135616 [ 134.818363][T10964] total_rss 81920 [ 134.818367][T10964] total_rss_huge 0 [ 134.818371][T10964] total_shmem 305119232 [ 134.818375][T10964] total_mapped_file 8192 [ 134.818379][T10964] total_dirty 0 [ 134.818383][T10964] total_writeback 0 [ 134.818387][T10964] total_workingset_refault_anon 793 [ 134.818391][T10964] total_workingset_refault_file 5907 [ 134.818396][T10964] total_swap 105799680 [ 134.818400][T10964] total_swapcached 8192 [ 134.818405][T10964] total_pgpgin 326111 [ 134.818409][T10964] total_pgpgout 251595 [ 134.818413][T10964] total_pgfault 129837 [ 134.818423][T10964] total_pgmajfault 77 [ 134.818427][T10964] total_inactive_anon 174579712 [ 134.818431][T10964] total_active_anon 130621440 [ 134.818435][T10964] total_inactive_file 0 [ 134.818439][T10964] total_active_file 8192 [ 134.818444][T10964] total_unevictable 0 [ 134.818448][T10964] anon_cost 0 [ 134.818451][T10964] file_cost 0 [ 134.818456][T10964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10967,uid=0 [ 134.818601][T10964] Memory cgroup out of memory: Killed process 10967 (syz.2.1213) total-vm:98572kB, anon-rss:1264kB, file-rss:53384kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 134.830750][T11061] syz.2.1237 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 134.830771][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.2.1237 Tainted: G Y syzkaller #0 PREEMPT(full) [ 134.830787][T11061] Tainted: [Y]=FORCED_BIND [ 134.830791][T11061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.830798][T11061] Call Trace: [ 134.830803][T11061] [ 134.830807][T11061] dump_stack_lvl+0x100/0x190 [ 134.830830][T11061] dump_header+0xfb/0x606 [ 134.830845][T11061] oom_kill_process.cold+0xd/0x380 [ 134.830860][T11061] out_of_memory+0x343/0x14c0 [ 134.830881][T11061] ? __pfx_out_of_memory+0x10/0x10 [ 134.830902][T11061] mem_cgroup_out_of_memory+0xc6/0x130 [ 134.830921][T11061] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 134.830938][T11061] ? find_held_lock+0x2b/0x80 [ 134.830953][T11061] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.830965][T11061] ? _raw_spin_unlock+0x28/0x50 [ 134.830984][T11061] try_charge_memcg+0x779/0xf30 [ 134.831002][T11061] ? __pfx_try_charge_memcg+0x10/0x10 [ 134.831015][T11061] ? find_held_lock+0x2b/0x80 [ 134.831027][T11061] ? rcu_read_unlock+0x17/0x60 [ 134.831042][T11061] ? rcu_read_unlock+0x17/0x60 [ 134.831056][T11061] ? find_held_lock+0x2b/0x80 [ 134.831069][T11061] ? rcu_read_unlock+0x17/0x60 [ 134.831086][T11061] charge_memcg+0x1ae/0x210 [ 134.831102][T11061] __mem_cgroup_charge+0x2b/0x1e0 [ 134.831119][T11061] do_anonymous_page+0xaf1/0x2050 [ 134.831136][T11061] ? __pfx_do_anonymous_page+0x10/0x10 [ 134.831148][T11061] ? rcu_read_unlock+0x2d/0xb0 [ 134.831160][T11061] ? rcu_read_unlock+0x2d/0xb0 [ 134.831177][T11061] __handle_mm_fault+0x1ff3/0x2f60 [ 134.831191][T11061] ? lock_vma_under_rcu+0x11d/0x590 [ 134.831210][T11061] ? __pfx___handle_mm_fault+0x10/0x10 [ 134.831225][T11061] ? lock_vma_under_rcu+0x17c/0x590 [ 134.831253][T11061] handle_mm_fault+0x363/0xa20 [ 134.831268][T11061] do_user_addr_fault+0x59c/0x12f0 [ 134.831291][T11061] exc_page_fault+0x6f/0xd0 [ 134.831310][T11061] asm_exc_page_fault+0x26/0x30 [ 134.831322][T11061] RIP: 0033:0x7f842df5c704 [ 134.831332][T11061] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 134.831344][T11061] RSP: 002b:00007ffdd359b470 EFLAGS: 00010246 [ 134.831353][T11061] RAX: 00007f842c1b5000 RBX: 00007f842c1d56c0 RCX: 00007f842df9f357 [ 134.831361][T11061] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f842c1d56c0 [ 134.831368][T11061] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 134.831375][T11061] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdd359b5c0 [ 134.831382][T11061] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 134.831397][T11061] [ 134.831402][T11061] memory: usage 307200kB, limit 307200kB, failcnt 32309 [ 134.831409][T11061] memory+swap: usage 410520kB, limit 9007199254740988kB, failcnt 0 [ 134.831416][T11061] kmem: usage 9136kB, limit 9007199254740988kB, failcnt 0 [ 134.831423][T11061] Memory cgroup stats for /syz2: [ 134.831569][T11061] cache 305135616 [ 134.831576][T11061] rss 81920 [ 134.831580][T11061] rss_huge 0 [ 134.831584][T11061] shmem 305119232 [ 134.831588][T11061] mapped_file 8192 [ 134.831591][T11061] dirty 0 [ 134.831595][T11061] writeback 0 [ 134.831599][T11061] workingset_refault_anon 793 [ 134.831603][T11061] workingset_refault_file 5907 [ 134.831608][T11061] swap 105799680 [ 134.831611][T11061] swapcached 8192 [ 134.831615][T11061] pgpgin 326111 [ 134.831619][T11061] pgpgout 251595 [ 134.831623][T11061] pgfault 129838 [ 134.831627][T11061] pgmajfault 77 [ 134.831631][T11061] inactive_anon 174579712 [ 134.831635][T11061] active_anon 130621440 [ 134.831639][T11061] inactive_file 4096 [ 134.831643][T11061] active_file 4096 [ 134.831647][T11061] unevictable 0 [ 134.831651][T11061] hierarchical_memory_limit 314572800 [ 134.831656][T11061] hierarchical_memsw_limit 9223372036854771712 [ 134.831661][T11061] total_cache 305135616 [ 134.831665][T11061] total_rss 81920 [ 134.831669][T11061] total_rss_huge 0 [ 134.831673][T11061] total_shmem 305119232 [ 134.831677][T11061] total_mapped_file 8192 [ 134.831681][T11061] total_dirty 0 [ 134.831685][T11061] total_writeback 0 [ 134.831689][T11061] total_workingset_refault_anon 793 [ 134.831693][T11061] total_workingset_refault_file 5907 [ 134.831698][T11061] total_swap 105799680 [ 134.831702][T11061] total_swapcached 8192 [ 134.831706][T11061] total_pgpgin 326111 [ 134.831710][T11061] total_pgpgout 251595 [ 134.831714][T11061] total_pgfault 129838 [ 134.831718][T11061] total_pgmajfault 77 [ 134.831723][T11061] total_inactive_anon 174579712 [ 134.831727][T11061] total_active_anon 130621440 [ 134.831731][T11061] total_inactive_file 4096 [ 134.831735][T11061] total_active_file 4096 [ 134.831739][T11061] total_unevictable 0 [ 134.831744][T11061] anon_cost 0 [ 134.831747][T11061] file_cost 0 [ 134.831751][T11061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1213,pid=10966,uid=0 [ 134.831961][T11061] Memory cgroup out of memory: Killed process 10966 (syz.2.1213) total-vm:98572kB, anon-rss:1264kB, file-rss:53384kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 134.844131][T10985] Memory cgroup out of memory: Killed process 10965 (syz.2.1213) total-vm:98572kB, anon-rss:1264kB, file-rss:53384kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 135.162150][ T878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 135.438455][T10989] syz.2.1213 (10989) used greatest stack depth: 18840 bytes left [ 135.691699][T11053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.813322][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 135.813335][ T42] audit: type=1400 audit(1793262055.605:855): avc: denied { write } for pid=11131 comm="syz.5.1249" name="usb_gadget" dev="configfs" ino=6149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.813560][ T42] audit: type=1400 audit(1793262055.605:856): avc: denied { add_name } for pid=11131 comm="syz.5.1249" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.833602][ T42] audit: type=1400 audit(1793262055.625:857): avc: denied { create } for pid=11131 comm="syz.5.1249" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 135.844261][T11132] LUN: removable file: (no medium) [ 135.846101][ T42] audit: type=1400 audit(1793262055.635:858): avc: denied { write } for pid=11131 comm="syz.5.1249" name="functions" dev="configfs" ino=35918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.902275][ T42] audit: type=1400 audit(1793262055.695:859): avc: denied { setattr } for pid=11131 comm="syz.5.1249" name="file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.084971][T10985] syz.2.1213 (10985) used greatest stack depth: 18744 bytes left [ 136.304638][T10980] syz.2.1213 (10980) used greatest stack depth: 17792 bytes left [ 141.848960][ T42] audit: type=1400 audit(1793262061.635:860): avc: denied { write } for pid=11146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.920434][ T42] audit: type=1400 audit(1793262061.715:861): avc: denied { write } for pid=11149 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.557392][ T42] audit: type=1400 audit(1793262065.345:862): avc: denied { write } for pid=11152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.621723][ T42] audit: type=1400 audit(1793262065.415:863): avc: denied { write } for pid=11155 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.441603][T11162] overlay: Unknown parameter 'subj_type' [ 147.446213][T11165] netlink: 'syz.2.1255': attribute type 10 has an invalid length. [ 147.448763][T11160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=11160 comm=syz.6.1253 [ 147.453473][T11164] netlink: 'syz.2.1255': attribute type 10 has an invalid length. [ 147.468942][T11165] team0: Port device veth1_to_hsr added [ 147.635877][T11181] netlink: 'syz.6.1258': attribute type 21 has an invalid length. [ 147.635898][T11181] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1258'. [ 147.638476][T11181] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1258'. [ 147.691119][T11183] overlay: ./bus is not a directory [ 147.776869][T11193] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1262'. [ 147.780078][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.780347][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.791763][T11193] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1262'. [ 147.791884][T11193] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.792006][T11193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.792241][T11193] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.792343][T11193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.794571][T11193] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1262'. [ 147.794861][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.795001][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.891570][ T42] audit: type=1400 audit(1793262067.685:864): avc: denied { write } for pid=11203 comm="syz.5.1266" name="/" dev="9p" ino=73138303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.999295][ T855] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 148.019499][T11213] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 148.023611][ T42] audit: type=1400 audit(1793262067.815:865): avc: denied { override_creds } for pid=11207 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.126304][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 148.134042][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'. [ 148.151367][ T855] usb 11-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 148.152232][ T855] usb 11-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 148.152281][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 148.152298][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 148.152311][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 148.152324][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 148.152338][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 148.152351][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 148.152364][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 148.152377][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 148.152390][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 148.152404][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 148.152417][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 148.152430][ T855] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 30768, setting to 1024 [ 148.152445][ T855] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.152458][ T855] usb 11-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 148.154013][ T855] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.154026][ T855] usb 11-1: Product: syz [ 148.154033][ T855] usb 11-1: Manufacturer: syz [ 148.154041][ T855] usb 11-1: SerialNumber: syz [ 148.155705][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.155758][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.155857][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.155913][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.155999][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156291][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156342][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156459][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156509][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156558][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156654][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.156703][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 148.160058][ T855] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 148.160741][ T855] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 7 [ 148.162830][ T855] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 148.164719][ T855] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 148.165715][ T855] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 148.263087][T11232] macvlan4: entered promiscuous mode [ 148.263109][T11232] bridge0: entered promiscuous mode [ 148.307773][T11235] gtp0: entered allmulticast mode [ 148.314260][T11235] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 148.415337][T11240] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1280'. [ 148.639981][ T42] audit: type=1400 audit(1793262068.425:866): avc: denied { map } for pid=11253 comm="syz.3.1284" path="socket:[36968]" dev="sockfs" ino=36968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.661901][ T5148] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 149.355902][T11281] lo speed is unknown, defaulting to 1000 [ 149.356948][T11281] lo speed is unknown, defaulting to 1000 [ 149.357608][T11281] lo speed is unknown, defaulting to 1000 [ 149.502416][T11281] infiniband syz0: set active [ 149.502453][ T34] lo speed is unknown, defaulting to 1000 [ 149.502486][T11281] infiniband syz0: added lo [ 149.516572][T11281] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 149.516595][T11281] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 149.516618][T11281] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 149.516774][T11292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.543106][T11281] RDS/IB: syz0: added [ 149.543133][T11281] smc: adding ib device syz0 with port count 1 [ 149.543145][T11281] smc: ib device syz0 port 1 has no pnetid [ 149.543184][ T34] lo speed is unknown, defaulting to 1000 [ 149.545683][T11281] lo speed is unknown, defaulting to 1000 [ 149.634383][T11281] lo speed is unknown, defaulting to 1000 [ 149.692341][T11297] fuse: fd is not a fuse device [ 149.723227][T11281] lo speed is unknown, defaulting to 1000 [ 149.821747][T11281] lo speed is unknown, defaulting to 1000 [ 149.832490][T11307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.939453][ T42] audit: type=1400 audit(1793262069.725:867): avc: denied { read } for pid=8210 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.939485][ T42] audit: type=1400 audit(1793262069.725:868): avc: denied { open } for pid=8210 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.939608][ T42] audit: type=1400 audit(1793262069.735:869): avc: denied { ioctl } for pid=8210 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.967450][T11320] netlink: 'syz.5.1301': attribute type 1 has an invalid length. [ 149.968734][T11320] netlink: 'syz.5.1301': attribute type 4 has an invalid length. [ 149.980128][ T34] lo speed is unknown, defaulting to 1000 [ 149.980142][ T34] syz0: Port: 1 Link DOWN [ 149.980468][ T34] lo speed is unknown, defaulting to 1000 [ 149.992860][T11320] hub 5-0:1.0: USB hub found [ 149.993672][T11320] hub 5-0:1.0: 1 port detected [ 150.028988][T11323] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1302'. [ 150.068605][ T42] audit: type=1400 audit(1793262069.855:870): avc: denied { mounton } for pid=11324 comm="syz.5.1303" path="/105/file1" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.068613][T11325] autofs: Unknown parameter '/dev/snd/seq' [ 150.110703][T11327] netlink: 'syz.5.1304': attribute type 4 has an invalid length. [ 150.112933][ T34] lo speed is unknown, defaulting to 1000 [ 150.112948][ T34] syz0: Port: 1 Link ACTIVE [ 150.112985][ T34] lo speed is unknown, defaulting to 1000 [ 150.254966][T11330] ebt_limit: overflow, try lower: 4294967040/255 [ 150.287819][ T42] audit: type=1400 audit(1793262070.075:871): avc: denied { connect } for pid=11335 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.411989][T11346] ip_tables: iptables: counters copy to user failed while replacing table [ 150.422709][ T5950] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 150.580070][ T5950] usb 10-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 150.581130][ T5950] usb 10-1: config 0 has no interfaces? [ 150.581159][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.584395][ T5950] usb 10-1: config 0 descriptor?? [ 150.772405][ T878] usb 11-1: USB disconnect, device number 5 [ 150.789953][ T29] usb 10-1: USB disconnect, device number 4 [ 150.806093][ T878] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 150.815241][ T878] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 150.815502][T11363] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1314'. [ 150.815930][ T878] keyspan 11-1:1.0: device disconnected [ 150.821350][T11372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=11372 comm=syz.6.1315 [ 150.980690][T11382] netlink: 'syz.3.1321': attribute type 11 has an invalid length. [ 151.105521][ T42] audit: type=1400 audit(1793262070.895:872): avc: denied { write } for pid=11398 comm="syz.6.1326" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 151.105975][ T42] audit: type=1400 audit(1793262070.895:873): avc: denied { ioctl } for pid=11398 comm="syz.6.1326" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x40084d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 151.223705][T11409] x_tables: duplicate underflow at hook 3 [ 151.393327][T11423] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.393353][T11423] overlayfs: failed to set xattr on upper [ 151.393359][T11423] overlayfs: ...falling back to redirect_dir=nofollow. [ 151.393366][T11423] overlayfs: ...falling back to index=off. [ 151.393371][T11423] overlayfs: ...falling back to uuid=null. [ 151.393402][T11423] overlayfs: conflicting lowerdir path [ 151.540810][T11434] raw_sendmsg: syz.3.1338 forgot to set AF_INET. Fix it! [ 151.559447][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.206333][T11464] bond2 (unregistering): Released all slaves [ 152.300343][T11467] openvswitch: netlink: IPv6 tunnel dst address is zero [ 152.307744][T11469] overlayfs: overlapping lowerdir path [ 153.469691][T11507] __nla_validate_parse: 5 callbacks suppressed [ 153.469705][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1353'. [ 153.586784][T11515] ip_tables: iptables: counters copy to user failed while replacing table [ 155.444008][T11481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.562075][T11537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11537 comm=syz.5.1358 [ 155.574365][T11533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 155.575886][T11533] bond0: (slave bond11): Enslaving as an active interface with an up link [ 155.636553][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 155.636573][ T42] audit: type=1400 audit(1793262075.425:879): avc: denied { name_bind 0x1000000 } for pid=11544 comm="syz.6.1365" path="socket:[37223]" dev="sockfs" ino=37223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.667243][ T42] audit: type=1400 audit(1793262075.455:880): avc: denied { setopt } for pid=11547 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.685689][ T42] audit: type=1400 audit(1793262075.475:881): avc: denied { create } for pid=11549 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.688049][ T42] audit: type=1400 audit(1793262075.475:882): avc: denied { read write } for pid=11551 comm="syz.6.1367" name="uhid" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.688400][ T42] audit: type=1400 audit(1793262075.475:883): avc: denied { open } for pid=11551 comm="syz.6.1367" path="/dev/uhid" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.692814][ T878] hid (null): unknown global tag 0xe [ 155.704985][ T878] hid-generic 0007:0009:0005.0004: unknown global tag 0xe [ 155.704999][ T878] hid-generic 0007:0009:0005.0004: item 0 1 1 14 parsing failed [ 155.705687][ T878] hid-generic 0007:0009:0005.0004: probe with driver hid-generic failed with error -22 [ 155.784554][T11558] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1369'. [ 155.999385][ T1358] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 156.170024][ T1358] usb 11-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 156.171490][ T1358] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 156.171510][ T1358] usb 11-1: config 1 has no interface number 0 [ 156.171547][ T1358] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x9 has invalid maxpacket 2046, setting to 1024 [ 156.171570][ T1358] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 156.171590][ T1358] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 156.173550][ T1358] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.173570][ T1358] usb 11-1: Product: syz [ 156.173583][ T1358] usb 11-1: Manufacturer: syz [ 156.173596][ T1358] usb 11-1: SerialNumber: syz [ 156.176647][T11557] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 156.176793][T11557] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 156.179599][ T1358] usb 11-1: Error in usbnet_get_endpoints (-22) [ 156.383127][T11552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.384378][T11552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.447307][T11580] bridge0: port 3(dummy0) entered blocking state [ 156.447478][T11580] bridge0: port 3(dummy0) entered disabled state [ 156.447600][T11580] dummy0: entered allmulticast mode [ 156.448878][T11580] dummy0: entered promiscuous mode [ 156.586434][ T855] usb 11-1: USB disconnect, device number 6 [ 156.698151][T11600] fuse: fd is not a fuse device [ 156.698982][T11600] jffs2: notice: (11600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.701069][T11600] fuse: fd is not a fuse device [ 156.835531][T11608] netlink: 'syz.2.1381': attribute type 30 has an invalid length. [ 156.861217][ T42] audit: type=1400 audit(1793262076.655:884): avc: denied { module_load } for pid=11605 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 156.861427][T11610] Invalid ELF header type: 2 != 1 [ 157.101569][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1384'. [ 157.545046][T11608] netlink: 'syz.2.1381': attribute type 30 has an invalid length. [ 157.594136][ T42] audit: type=1807 audit(1793262077.385:885): action=measure func=FILE_CHECK res=1 [ 157.594316][T11628] ima: policy update completed [ 157.594478][ T42] audit: type=1802 audit(1793262077.385:886): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.1389" res=1 errno=0 [ 157.634323][ T42] audit: type=1400 audit(1793262077.425:887): avc: denied { bind } for pid=11633 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.642570][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1391'. [ 157.648537][T11636] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 157.684530][T11645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.016899][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1395'. [ 158.467297][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'. [ 158.467317][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'. [ 158.467331][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'. [ 158.505703][T11663] FAULT_INJECTION: forcing a failure. [ 158.505703][T11663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.505724][T11663] CPU: 1 UID: 0 PID: 11663 Comm: syz.5.1400 Tainted: G Y syzkaller #0 PREEMPT(full) [ 158.505740][T11663] Tainted: [Y]=FORCED_BIND [ 158.505745][T11663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.505752][T11663] Call Trace: [ 158.505756][T11663] [ 158.505761][T11663] dump_stack_lvl+0x100/0x190 [ 158.505791][T11663] should_fail_ex.cold+0x5/0xa [ 158.505809][T11663] _copy_from_user+0x2e/0xd0 [ 158.505824][T11663] copy_msghdr_from_user+0x9f/0x4c0 [ 158.505842][T11663] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.505862][T11663] ? lock_acquire+0x1d1/0x380 [ 158.505878][T11663] ? get_pid_task+0x2a/0x250 [ 158.505890][T11663] ___sys_sendmsg+0x106/0x1e0 [ 158.505908][T11663] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.505924][T11663] ? get_pid_task+0x106/0x250 [ 158.505940][T11663] ? find_held_lock+0x2b/0x80 [ 158.505961][T11663] __sys_sendmsg+0x160/0x210 [ 158.505975][T11663] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.506012][T11663] do_syscall_64+0x123/0x790 [ 158.506027][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.506039][T11663] RIP: 0033:0x7f17de39f559 [ 158.506049][T11663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.506060][T11663] RSP: 002b:00007f17df1f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.506072][T11663] RAX: ffffffffffffffda RBX: 00007f17de625fa0 RCX: 00007f17de39f559 [ 158.506080][T11663] RDX: 0000000000000080 RSI: 0000200000000400 RDI: 0000000000000003 [ 158.506087][T11663] RBP: 00007f17df1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 158.506094][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.506101][T11663] R13: 00007f17de626038 R14: 00007f17de625fa0 R15: 00007ffdfbff9348 [ 158.506116][T11663] [ 158.539773][ T42] audit: type=1326 audit(1793262078.335:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.3.1401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d72d9f559 code=0x7ffc0000 [ 158.706517][T11692] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 158.993510][T11733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11733 comm=syz.5.1422 [ 158.995451][T11733] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.995472][T11733] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 158.995714][T11733] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.995744][T11733] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 159.001456][T11733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11733 comm=syz.5.1422 [ 159.033348][T11740] x_tables: duplicate underflow at hook 1 [ 159.033514][T11741] x_tables: duplicate underflow at hook 1 [ 159.107817][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 159.107916][T11743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.124501][T11743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.143578][T11756] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 159.152430][T11756] 8021q: adding VLAN 0 to HW filter on device bond12 [ 159.167817][T11756] 8021q: adding VLAN 0 to HW filter on device bond13 [ 159.172349][T11756] bond12: (slave bond13): Enslaving as an active interface with a down link [ 159.177849][T11756] bond12 (unregistering): (slave bond13): Releasing active interface [ 159.182321][T11756] bond12 (unregistering): Released all slaves [ 159.224660][T11743] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 159.226803][T11743] cramfs: wrong magic [ 159.263647][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'. [ 159.303124][T11774] kernel read not supported for file /policy (pid: 11774 comm: syz.5.1434) [ 159.306923][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1434'. [ 159.378256][T11783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.529695][T11797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11797 comm=syz.2.1437 [ 159.640673][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 159.663209][T11811] netlink: 'syz.3.1444': attribute type 4 has an invalid length. [ 159.783320][T11823] ptrace attach of "/syz-executor exec"[5790] was attempted by ""[11823] [ 159.783913][T11824] jffs2: notice: (11824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.858546][T11829] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.1450'. [ 159.868164][T11830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1450'. [ 160.111100][T11845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11845 comm=syz.3.1453 [ 160.111128][T11845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=11845 comm=syz.3.1453 [ 160.111147][T11845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11845 comm=syz.3.1453 [ 160.246548][T11853] F2FS-fs: Conflicting test_dummy_encryption options [ 160.277768][T11857] overlayfs: failed to clone upperpath [ 160.309901][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1460'. [ 160.310335][T11859] netlink: 684 bytes leftover after parsing attributes in process `syz.6.1460'. [ 160.357631][T11866] netlink: 'syz.6.1463': attribute type 1 has an invalid length. [ 160.357653][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 160.357900][T11866] 8021q: VLANs not supported on tunl0 [ 160.450887][T11879] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20003 [ 160.543359][T11888] overlayfs: missing 'lowerdir' [ 160.543722][T11887] overlayfs: failed to clone upperpath [ 160.546318][T11888] overlayfs: failed to clone upperpath [ 160.563396][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 160.576748][T11900] bridge_slave_1 (unregistering): left allmulticast mode [ 160.576764][T11900] bridge_slave_1 (unregistering): left promiscuous mode [ 160.576810][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.675321][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 160.675337][ T42] audit: type=1800 audit(1793262080.465:911): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35243 res=0 errno=-22 [ 160.677526][ T42] audit: type=1800 audit(1793262080.465:912): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35266 res=0 errno=-22 [ 160.693364][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 160.839280][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 160.840573][ T34] usb 10-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 160.844507][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 160.844524][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.844542][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.847200][ T42] audit: type=1800 audit(1793262080.635:913): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232781 res=0 errno=-22 [ 160.847369][ T34] kobil_sct 10-1:1.0: KOBIL USB smart card terminal converter detected [ 160.852271][ T34] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 160.854185][ T42] audit: type=1800 audit(1793262080.645:914): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232810 res=0 errno=-22 [ 160.854229][ T42] audit: type=1800 audit(1793262080.645:915): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232788 res=0 errno=-22 [ 160.856302][ T42] audit: type=1800 audit(1793262080.645:916): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232789 res=0 errno=-22 [ 160.857049][ T42] audit: type=1800 audit(1793262080.645:917): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=232790 res=0 errno=-22 [ 160.867724][ T42] audit: type=1800 audit(1793262080.655:918): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232830 res=0 errno=-22 [ 160.872900][ T42] audit: type=1800 audit(1793262080.665:919): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232846 res=0 errno=-22 [ 160.876582][ T42] audit: type=1800 audit(1793262080.665:920): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232860 res=0 errno=-22 [ 160.930914][ T1358] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 161.089279][ T1358] usb 11-1: Using ep0 maxpacket: 8 [ 161.565845][ T9] usb 10-1: USB disconnect, device number 5 [ 161.572651][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 161.573459][ T9] kobil_sct 10-1:1.0: device disconnected [ 161.577804][T11968] futex_wake_op: syz.3.1496 tries to shift op by 144; fix this program [ 161.622493][T11970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11970 comm=syz.3.1497 [ 161.823684][T11988] overlay: ./file0 is not a directory [ 162.358190][T12027] /dev/sr0: Can't open blockdev [ 162.362335][T12027] ip_tables: iptables: counters copy to user failed while replacing table [ 163.057055][T12048] netlink: 'syz.3.1522': attribute type 9 has an invalid length. [ 163.281132][T12065] Process accounting resumed [ 163.344612][T12069] futex_wake_op: syz.2.1531 tries to shift op by 144; fix this program [ 163.427191][ T1358] usb 11-1: unable to get BOS descriptor or descriptor too short [ 163.427232][ T1358] usb 11-1: New USB device found: idVendor=2100, idProduct=9e58, bcdDevice=66.20 [ 163.428102][ T1358] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 163.428121][ T1358] usb 11-1: can't read configurations, error -71 [ 163.555199][T12084] : renamed from bond0 (while UP) [ 163.659693][T12101] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 163.672748][T12101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.676055][T12101] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 163.708930][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.708972][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709003][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709032][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709062][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709092][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709121][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709248][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709282][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709312][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709347][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709377][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709410][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709439][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709472][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709502][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709534][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709563][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709595][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709624][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709655][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709684][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709713][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709742][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709770][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709800][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709828][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709858][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709887][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709916][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709946][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.709974][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.710003][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 163.986999][T12113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12113 comm=syz.3.1544 [ 163.988093][T12113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12113 comm=syz.3.1544 [ 163.994482][T12114] dummy0 (unregistering): left allmulticast mode [ 163.994503][T12114] dummy0 (unregistering): left promiscuous mode [ 163.994567][T12114] bridge0: port 3(dummy0) entered disabled state [ 164.213763][T12121] netlink: 'syz.6.1545': attribute type 3 has an invalid length. [ 164.213785][T12121] netlink: 'syz.6.1545': attribute type 1 has an invalid length. [ 164.252386][T12124] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 164.286336][T12131] __nla_validate_parse: 13 callbacks suppressed [ 164.286355][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 164.507599][T12145] lo: entered promiscuous mode [ 164.507614][T12145] lo: left allmulticast mode [ 164.511477][T12145] bond0: entered promiscuous mode [ 164.511490][T12145] bond0: left allmulticast mode [ 164.511825][T12145] dummy0: entered promiscuous mode [ 164.511835][T12145] dummy0: left allmulticast mode [ 164.511951][T12145] eql: entered promiscuous mode [ 164.511959][T12145] eql: left allmulticast mode [ 164.512056][T12145] ifb0: entered promiscuous mode [ 164.512064][T12145] ifb0: left allmulticast mode [ 164.512227][T12145] ifb1: entered promiscuous mode [ 164.512238][T12145] ifb1: left allmulticast mode [ 164.516400][T12145] e1000 0000:00:07.0 eth0: entered promiscuous mode [ 164.518780][T12145] e1000 0000:00:07.0 eth0: left allmulticast mode [ 164.522874][T12145] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 164.523044][T12145] e1000e 0000:00:02.0 eth1: left allmulticast mode [ 164.524985][T12145] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 164.524998][T12145] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 164.525261][T12145] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 164.525272][T12145] mac80211_hwsim hwsim1 wlan1: left allmulticast mode [ 164.525543][T12145] hwsim0: entered promiscuous mode [ 164.525591][T12145] hwsim0: left allmulticast mode [ 164.525867][T12145] ieee802154 phy0 wpan0: entered promiscuous mode [ 164.525878][T12145] ieee802154 phy0 wpan0: left allmulticast mode [ 164.526066][T12145] ieee802154 phy1 wpan1: entered promiscuous mode [ 164.526077][T12145] ieee802154 phy1 wpan1: left allmulticast mode [ 164.526282][T12145] teql0: entered promiscuous mode [ 164.526291][T12145] teql0: left allmulticast mode [ 164.526299][T12145] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 164.535474][T12148] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 164.649268][ T1358] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 164.802247][ T1358] usb 11-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 164.803072][ T1358] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.803134][ T1358] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.804677][ T1358] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.804690][ T1358] usb 11-1: Product: syz [ 164.804698][ T1358] usb 11-1: Manufacturer: syz [ 164.804706][ T1358] usb 11-1: SerialNumber: syz [ 165.014015][ T8589] usb 11-1: USB disconnect, device number 9 [ 165.928692][T12178] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 165.928715][T12178] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1566'. [ 165.928772][T12178] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 165.928784][T12178] netlink: 'syz.2.1566': attribute type 5 has an invalid length. [ 165.928796][T12178] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1566'. [ 165.963357][ T67] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 166.039601][T12189] jffs2: notice: (12189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.043773][T12190] ptrace attach of "/syz-executor exec"[8390] was attempted by ""[12190] [ 166.108012][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 166.108026][ T42] audit: type=1800 audit(1793262085.895:943): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1570" name="status" dev="sysfs" ino=1941 res=0 errno=-22 [ 166.112263][ T42] audit: type=1800 audit(1793262085.905:944): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233349 res=0 errno=-22 [ 166.650021][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650204][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650357][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650507][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650661][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650837][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.650991][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651140][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651288][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651449][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651599][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651758][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.651930][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652092][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652290][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652488][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652636][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652790][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.652939][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653087][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653234][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653397][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653545][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653698][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.653852][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654004][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654155][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654303][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654450][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654614][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654760][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.654913][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.655065][T12204] MTD: Couldn't look up '/dev/syzrnull5': -2 [ 166.693923][T12212] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 166.694245][T12211] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 166.745923][ T42] audit: type=1400 audit(1793262086.535:945): avc: denied { watch watch_reads } for pid=12217 comm="syz.2.1576" path="/526" dev="tmpfs" ino=2875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.783028][ T42] audit: type=1800 audit(1793262086.575:946): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1577" name="remove" dev="sysfs" ino=2490 res=0 errno=-13 [ 166.850761][ T42] audit: type=1400 audit(1793262086.645:947): avc: denied { create } for pid=12224 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.934354][ T42] audit: type=1800 audit(1793262086.725:948): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1570" name="/" dev="fuse" ino=1 res=0 errno=-107 [ 166.957363][ T42] audit: type=1800 audit(1793262086.745:949): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2489 res=0 errno=-22 [ 166.967033][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 166.967053][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 167.035887][T12238] fuse: fd is not a fuse device [ 167.036026][ T42] audit: type=1400 audit(1793262086.825:950): avc: denied { mounton } for pid=12234 comm="syz.2.1580" path="/529/file0" dev="tmpfs" ino=2895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.095893][T12240] ip_tables: iptables: counters copy to user failed while replacing table [ 167.200489][T12252] EXT4-fs (nbd6): unable to read superblock [ 167.212214][T12252] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 167.214311][ T42] audit: type=1400 audit(1793262087.005:951): avc: denied { relabelto } for pid=12250 comm="syz.6.1586" name="mnt" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 167.214643][ T42] audit: type=1400 audit(1793262087.005:952): avc: denied { associate } for pid=12250 comm="syz.6.1586" name="mnt" dev="tmpfs" ino=803 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 167.281025][T12256] FAULT_INJECTION: forcing a failure. [ 167.281025][T12256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.281055][T12256] CPU: 1 UID: 0 PID: 12256 Comm: syz.6.1587 Tainted: G Y syzkaller #0 PREEMPT(full) [ 167.281082][T12256] Tainted: [Y]=FORCED_BIND [ 167.281088][T12256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.281099][T12256] Call Trace: [ 167.281105][T12256] [ 167.281113][T12256] dump_stack_lvl+0x100/0x190 [ 167.281146][T12256] should_fail_ex.cold+0x5/0xa [ 167.281175][T12256] should_fail_alloc_page+0xeb/0x140 [ 167.281196][T12256] prepare_alloc_pages+0x1f0/0x5b0 [ 167.281220][T12256] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 167.281245][T12256] ? __handle_mm_fault+0x4ec/0x2f60 [ 167.281266][T12256] ? __lock_acquire+0x5c0/0x1f40 [ 167.281293][T12256] ? __css_rstat_updated+0x1ce/0x590 [ 167.281312][T12256] ? __pfx___handle_mm_fault+0x10/0x10 [ 167.281332][T12256] ? __pfx___css_rstat_updated+0x10/0x10 [ 167.281356][T12256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.281379][T12256] ? lock_acquire+0x1d1/0x380 [ 167.281404][T12256] ? find_held_lock+0x2b/0x80 [ 167.281423][T12256] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 167.281449][T12256] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 167.281474][T12256] ? rcu_is_watching+0x13/0xc0 [ 167.281519][T12256] ? __up_read+0x333/0x980 [ 167.281548][T12256] ? __pfx___up_read+0x10/0x10 [ 167.281575][T12256] ? do_user_addr_fault+0x7d7/0x12f0 [ 167.281604][T12256] ? do_user_addr_fault+0x7d7/0x12f0 [ 167.281641][T12256] ? irqentry_exit+0x202/0xab0 [ 167.281658][T12256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.281689][T12256] ? policy_nodemask+0xed/0x5e0 [ 167.281712][T12256] alloc_pages_mpol+0x201/0x560 [ 167.281735][T12256] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.281769][T12256] alloc_pages_noprof+0x1a/0x160 [ 167.281793][T12256] bpf_prog_test_run_xdp+0x10e0/0x1670 [ 167.281826][T12256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.281855][T12256] ? fput+0x7c/0x100 [ 167.281877][T12256] ? __bpf_prog_get+0x97/0x290 [ 167.281901][T12256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.281921][T12256] __sys_bpf+0x1d13/0x4b60 [ 167.281948][T12256] ? plist_check_list+0x1b8/0x280 [ 167.281977][T12256] ? plist_check_list+0x1b0/0x280 [ 167.282001][T12256] ? __pfx___sys_bpf+0x10/0x10 [ 167.282027][T12256] ? find_held_lock+0x2b/0x80 [ 167.282045][T12256] ? futex_wake+0x4ea/0x5e0 [ 167.282073][T12256] ? futex_private_hash_put.part.0+0xdc/0x180 [ 167.282093][T12256] ? futex_private_hash_put+0x24/0x30 [ 167.282118][T12256] ? __pfx_futex_wake+0x10/0x10 [ 167.282146][T12256] ? rcu_read_lock_any_held+0x6a/0x90 [ 167.282168][T12256] ? find_held_lock+0x2b/0x80 [ 167.282187][T12256] ? ksys_write+0x190/0x250 [ 167.282203][T12256] ? ksys_write+0x190/0x250 [ 167.282237][T12256] ? __x64_sys_futex+0x34f/0x4d0 [ 167.282257][T12256] ? __x64_sys_futex+0x358/0x4d0 [ 167.282281][T12256] ? xfd_validate_state+0x129/0x190 [ 167.282308][T12256] ? __x64_sys_bpf+0xce/0x140 [ 167.282323][T12256] __x64_sys_bpf+0xce/0x140 [ 167.282341][T12256] ? do_syscall_64+0xae/0x790 [ 167.282361][T12256] do_syscall_64+0x123/0x790 [ 167.282381][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.282401][T12256] RIP: 0033:0x7f654c19f559 [ 167.282416][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.282435][T12256] RSP: 002b:00007f654d086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.282454][T12256] RAX: ffffffffffffffda RBX: 00007f654c425fa0 RCX: 00007f654c19f559 [ 167.282468][T12256] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 167.282480][T12256] RBP: 00007f654c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.282491][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.282502][T12256] R13: 00007f654c426038 R14: 00007f654c425fa0 R15: 00007ffd41c0ac08 [ 167.282529][T12256] [ 167.365851][T12261] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 167.487630][T12281] Cannot find map_set index 135 as target [ 167.537150][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 167.537174][T12284] openvswitch: netlink: Invalid VLAN frame [ 167.628794][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.6.1590 [ 167.631426][T12279] netlink: 'syz.6.1590': attribute type 1 has an invalid length. [ 167.657089][T12279] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1590'. [ 167.658481][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.6.1590 [ 167.663125][T12279] vlan2: entered allmulticast mode [ 167.663137][T12279] bond0: entered allmulticast mode [ 167.945687][T12300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1808 sclass=netlink_xfrm_socket pid=12300 comm=syz.5.1596 [ 167.990307][T12302] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 168.132292][T12309] ipt_REJECT: TCP_RESET invalid for non-tcp [ 168.476814][T12339] overlay: Unknown parameter 'subj_type' [ 168.482775][T12340] overlay: Unknown parameter 'subj_type' [ 168.774927][ T5836] bond0: (slave bond_slave_0): interface is now down [ 168.774950][ T5836] bond0: (slave bond_slave_1): interface is now down [ 168.789969][ T5860] bond0: (slave bond_slave_0): interface is now down [ 168.789990][ T5860] bond0: (slave bond_slave_1): interface is now down [ 168.795739][ T5860] bond0: now running without any active interface! [ 168.836463][T12364] FAT-fs (nbd6): unable to read boot sector [ 168.977908][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.987038][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.993391][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.994195][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.994754][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.326555][T12369] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.355938][T12394] bridge0: port 3(syz_tun) entered blocking state [ 169.355984][T12394] bridge0: port 3(syz_tun) entered disabled state [ 169.356071][T12394] syz_tun: entered allmulticast mode [ 169.357074][T12394] syz_tun: entered promiscuous mode [ 169.466155][T12369] lo speed is unknown, defaulting to 1000 [ 169.649402][ T34] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 169.762876][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.762971][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.763061][T12369] bridge_slave_0: entered allmulticast mode [ 169.763793][T12369] bridge_slave_0: entered promiscuous mode [ 169.765511][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.765554][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.765625][T12369] bridge_slave_1: entered allmulticast mode [ 169.766408][T12369] bridge_slave_1: entered promiscuous mode [ 169.778775][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.780346][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.792594][T12369] team0: Port device team_slave_0 added [ 169.793818][T12369] team0: Port device team_slave_1 added [ 169.805160][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.805170][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.805184][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.806019][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.806027][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.806041][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.809828][ T34] usb 10-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 169.812442][ T34] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 169.812456][ T34] usb 10-1: Product: syz [ 169.812464][ T34] usb 10-1: Manufacturer: syz [ 169.812471][ T34] usb 10-1: SerialNumber: syz [ 169.816211][ T34] usb 10-1: config 0 descriptor?? [ 169.851221][T12369] hsr_slave_0: entered promiscuous mode [ 169.852625][T12369] hsr_slave_1: entered promiscuous mode [ 169.853288][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 169.853313][T12369] Cannot create hsr debugfs directory [ 169.941841][T12369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 169.993783][T12369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 170.021759][T12398] jffs2: notice: (12398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.050695][T12369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 170.109914][T12369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 170.182075][T12411] Bluetooth: MGMT ver 1.23 [ 170.218724][T12413] tmpfs: Using encoding : utf8-12.1.0 [ 170.255894][T12369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.257907][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.258325][T12369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.260255][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.260645][T12369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.264939][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.265381][T12369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.270352][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.282233][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.282283][T12369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.282391][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.282436][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.302560][T12416] tipc: Failed to obtain node identity [ 170.302577][T12416] tipc: Enabling of bearer rejected, failed to enable media [ 170.307375][T12416] overlayfs: failed to clone upperpath [ 170.309910][T12416] overlayfs: failed to clone upperpath [ 170.317927][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.326038][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.327751][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.328103][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.345484][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.345589][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.348691][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.348771][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.435841][ T67] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 170.604544][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.633963][T12369] veth0_vlan: entered promiscuous mode [ 170.641899][T12369] veth1_vlan: entered promiscuous mode [ 170.662336][T12369] veth0_macvtap: entered promiscuous mode [ 170.664951][T12369] veth1_macvtap: entered promiscuous mode [ 170.674412][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.680033][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.733646][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.733721][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.767600][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.767615][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.779682][ T8195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.789806][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.790040][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.790070][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.939544][T12449] md: couldn't update array info. -22 [ 170.959510][T12449] md: could not open device unknown-block(1,6). [ 170.959563][T12449] md: md_import_device returned -16 [ 170.991185][T12451] 9p: Bad value for 'rfdno' [ 171.001879][T12449] md: could not open device unknown-block(1,7). [ 171.001927][T12449] md: md_import_device returned -16 [ 171.033192][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 171.090534][ T67] Bluetooth: hci4: command tx timeout [ 171.141950][T12462] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1633'. [ 171.254862][T12477] IPv6: addrconf: prefix option has invalid lifetime [ 171.350773][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1638'. [ 171.392117][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 171.392129][ T42] audit: type=1800 audit(1793262091.185:1067): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1638" name="run" dev="sysfs" ino=1288 res=0 errno=-22 [ 171.639599][ T878] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 171.646188][ T12] bridge_slave_1: left allmulticast mode [ 171.646205][ T12] bridge_slave_1: left promiscuous mode [ 171.647715][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.649119][ T12] bridge_slave_0: left allmulticast mode [ 171.649131][ T12] bridge_slave_0: left promiscuous mode [ 171.649352][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.685949][ T12] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 171.754483][ T12] bond6 (unregistering): (slave xfrm1): Releasing backup interface [ 171.754501][ T12] xfrm1 (unregistering): left promiscuous mode [ 171.788351][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 171.799669][ T878] usb 11-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 171.800112][ T878] usb 11-1: config 0 has no interfaces? [ 171.800129][ T878] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.802466][ T878] usb 11-1: config 0 descriptor?? [ 171.803403][ T42] audit: type=1800 audit(1793262091.595:1068): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247623 res=0 errno=-22 [ 171.805793][ T42] audit: type=1800 audit(1793262091.595:1069): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247652 res=0 errno=-22 [ 171.806654][ T42] audit: type=1800 audit(1793262091.595:1070): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=247630 res=0 errno=-22 [ 171.807398][ T42] audit: type=1800 audit(1793262091.595:1071): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=247631 res=0 errno=-22 [ 171.813034][ T42] audit: type=1800 audit(1793262091.605:1072): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=247632 res=0 errno=-22 [ 171.816469][ T12] bridge0 (unregistering): left promiscuous mode [ 171.884081][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.885023][ T12] bond0 (unregistering): Released all slaves [ 171.888045][ T12] bond1 (unregistering): Released all slaves [ 171.896259][ T12] bond2 (unregistering): Released all slaves [ 171.901862][ T12] bond3 (unregistering): Released all slaves [ 171.907413][ T12] bond4 (unregistering): Released all slaves [ 171.915988][ T12] bond5 (unregistering): Released all slaves [ 171.922676][ T12] bond6 (unregistering): Released all slaves [ 171.931450][ T12] bond7 (unregistering): Released all slaves [ 171.937483][ T12] bond8 (unregistering): Released all slaves [ 172.107462][ T12] tipc: Left network mode [ 172.121890][ T12] IPVS: stopping master sync thread 11213 ... [ 172.163395][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 172.165583][T12490] overlayfs: failed to clone upperpath [ 172.190873][T12488] xt_socket: unknown flags 0x8 [ 172.255592][ T42] audit: type=1800 audit(1793262092.045:1073): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188160 res=0 errno=-19 [ 172.424880][ T24] usb 10-1: USB disconnect, device number 6 [ 172.471378][T12502] md2: detected capacity change from 3840 to 0 [ 172.471394][T12502] md: md2 stopped. [ 172.632585][ T12] hsr_slave_0: left promiscuous mode [ 172.633295][ T12] hsr_slave_1: left promiscuous mode [ 172.829247][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 172.925625][ T12] IPVS: stop unused estimator thread 0... [ 172.999921][ T24] usb 10-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00 [ 173.000781][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.003314][ T42] audit: type=1800 audit(2000000000.729:1074): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247772 res=0 errno=-22 [ 173.004474][ T42] audit: type=1800 audit(2000000000.729:1075): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247801 res=0 errno=-22 [ 173.004945][ T42] audit: type=1800 audit(2000000000.729:1076): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=247779 res=0 errno=-22 [ 173.220365][ T24] net1080 10-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, 82:25:d8:a1:fe:d0 [ 173.458544][T12533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1644'. [ 173.905545][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1652'. [ 174.200644][ T67] Bluetooth: hci4: command tx timeout [ 174.361950][ T34] usb 11-1: USB disconnect, device number 10 [ 176.123094][T12548] overlayfs: failed to resolve './file1': -2 [ 176.280892][ T67] Bluetooth: hci4: command tx timeout [ 176.477491][T12559] Cannot find del_set index 0 as target [ 176.485569][T12559] device-mapper: table: 248:3: verity: Invalid number of feature args (-EINVAL) [ 176.485592][T12559] device-mapper: ioctl: error adding target to table [ 178.444933][ T855] usb 10-1: USB disconnect, device number 7 [ 178.446566][ T855] net1080 10-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 178.451392][T12543] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 178.498169][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 178.498188][ T42] audit: type=1400 audit(2000000006.219:1099): avc: denied { create } for pid=12567 comm="syz.2.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.513390][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1659'. [ 178.514877][ T42] audit: type=1400 audit(2000000006.239:1100): avc: denied { write } for pid=12569 comm="syz.3.1660" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.522017][T12571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1660'. [ 178.522033][T12571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1660'. [ 178.522042][T12571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1660'. [ 178.556319][T12579] openvswitch: netlink: Multiple metadata blocks provided [ 178.562258][ T42] audit: type=1400 audit(2000000006.289:1101): avc: denied { write } for pid=12572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.611953][ T42] audit: type=1800 audit(2000000006.339:1102): pid=12562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13630 res=0 errno=-22 [ 178.634002][ T42] audit: type=1400 audit(2000000006.359:1103): avc: denied { write } for pid=12585 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.635040][ T42] audit: type=1400 audit(2000000006.359:1104): avc: denied { create } for pid=12584 comm="syz.3.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.637692][ T42] audit: type=1400 audit(2000000006.359:1105): avc: denied { ioctl } for pid=12584 comm="syz.3.1663" path="socket:[41652]" dev="sockfs" ino=41652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.668249][T12592] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 178.673442][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 178.703749][ T42] audit: type=1800 audit(2000000006.429:1106): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248263 res=0 errno=-22 [ 178.728775][ T42] audit: type=1400 audit(2000000006.449:1107): avc: denied { unmount } for pid=12369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 178.734989][T12598] kernel read not supported for file /o2net/connected_nodes (pid: 12598 comm: syz.6.1667) [ 178.735801][ T42] audit: type=1800 audit(2000000006.459:1108): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1667" name="connected_nodes" dev="debugfs" ino=1126 res=0 errno=-22 [ 178.765572][ T34] hid-sensor-hub 0003:1234:5678.0005: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 178.827862][T12612] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1672'. [ 179.056032][T12620] veth1_macvtap: left promiscuous mode [ 179.096024][T12622] tipc: Started in network mode [ 179.096037][T12622] tipc: Node identity 1000001, cluster identity 4369 [ 179.096044][T12622] tipc: Node number set to 16777217 [ 179.096290][T12622] tipc: Cannot configure node identity twice [ 179.097280][T12622] tipc: New replicast peer: 127.0.0.1 [ 179.101272][T12622] tipc: Enabled bearer , priority 10 [ 179.102160][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1674'. [ 179.117403][T12622] tipc: Enabling of bearer rejected, already enabled [ 179.117916][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1674'. [ 179.176308][T12631] 0x000000000000-0x000000010000 : "" [ 179.204632][T12631] ftl_cs: FTL header not found. [ 179.212780][T12631] FAULT_INJECTION: forcing a failure. [ 179.212780][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 179.213571][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.5.1675 Tainted: G Y syzkaller #0 PREEMPT(full) [ 179.213592][T12631] Tainted: [Y]=FORCED_BIND [ 179.213597][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.213605][T12631] Call Trace: [ 179.213610][T12631] [ 179.213616][T12631] dump_stack_lvl+0x100/0x190 [ 179.213650][T12631] should_fail_ex.cold+0x5/0xa [ 179.213670][T12631] should_failslab+0xc2/0x120 [ 179.213689][T12631] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 179.213710][T12631] ? kvasprintf_const+0x66/0x1a0 [ 179.213728][T12631] kvasprintf+0xbc/0x150 [ 179.213742][T12631] ? __pfx_kvasprintf+0x10/0x10 [ 179.213755][T12631] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 179.213775][T12631] ? rcu_is_watching+0x13/0xc0 [ 179.213793][T12631] kvasprintf_const+0x66/0x1a0 [ 179.213810][T12631] kobject_set_name_vargs+0x5a/0x140 [ 179.213832][T12631] kobject_add+0x129/0x1e0 [ 179.213848][T12631] ? __pfx_kobject_add+0x10/0x10 [ 179.213867][T12631] ? lock_acquire+0x1d1/0x380 [ 179.213884][T12631] ? queue_hctx+0x26/0x2a0 [ 179.213904][T12631] blk_mq_register_hctx+0x263/0x460 [ 179.213927][T12631] blk_mq_sysfs_register+0x1cc/0x480 [ 179.213950][T12631] blk_register_queue+0xda/0x640 [ 179.213972][T12631] __add_disk+0x7dd/0xf10 [ 179.213990][T12631] add_disk_fwnode+0x118/0x480 [ 179.214008][T12631] add_mtd_blktrans_dev+0xd0b/0x1520 [ 179.214035][T12631] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 179.214060][T12631] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 179.214077][T12631] ? mtdblock_add_mtd+0x4a/0x270 [ 179.214095][T12631] mtdblock_add_mtd+0x1cc/0x270 [ 179.214111][T12631] blktrans_notify_add+0xa2/0xf0 [ 179.214125][T12631] add_mtd_device+0xb6d/0x1820 [ 179.214148][T12631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.214163][T12631] ? __pfx_add_mtd_device+0x10/0x10 [ 179.214186][T12631] mtd_add_partition+0x376/0x6a0 [ 179.214199][T12631] ? __pfx_mtd_add_partition+0x10/0x10 [ 179.214210][T12631] ? __might_fault+0xc5/0x140 [ 179.214223][T12631] ? __might_fault+0xc5/0x140 [ 179.214242][T12631] mtdchar_blkpg_ioctl+0x207/0x250 [ 179.214254][T12631] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 179.214280][T12631] mtdchar_ioctl+0x1670/0x1fd0 [ 179.214295][T12631] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 179.214313][T12631] ? lock_acquire+0x1d1/0x380 [ 179.214329][T12631] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 179.214345][T12631] ? rcu_is_watching+0x13/0xc0 [ 179.214359][T12631] ? trace_contention_end+0x126/0x160 [ 179.214381][T12631] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 179.214396][T12631] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.214414][T12631] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 179.214437][T12631] ? __pfx___mutex_lock+0x10/0x10 [ 179.214449][T12631] ? __fget_files+0x34/0x3d0 [ 179.214472][T12631] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 179.214485][T12631] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 179.214500][T12631] __x64_sys_ioctl+0x18e/0x210 [ 179.214520][T12631] do_syscall_64+0x123/0x790 [ 179.214533][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.214546][T12631] RIP: 0033:0x7f17de39f559 [ 179.214557][T12631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.214569][T12631] RSP: 002b:00007f17df1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.214582][T12631] RAX: ffffffffffffffda RBX: 00007f17de625fa0 RCX: 00007f17de39f559 [ 179.214590][T12631] RDX: 0000200000000880 RSI: 0000000000001269 RDI: 0000000000000004 [ 179.214598][T12631] RBP: 00007f17de436b20 R08: 0000000000000000 R09: 0000000000000000 [ 179.214605][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.214613][T12631] R13: 00007f17de626038 R14: 00007f17de625fa0 R15: 00007ffdfbff9348 [ 179.214630][T12631] [ 179.214635][T12631] kobject: can not set name properly! [ 179.281183][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 179.283133][T12631] IPv6: sit3: Disabled Multicast RS [ 179.285166][T12631] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1675'. [ 179.285354][T12631] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 179.363727][T12634] : renamed from bond0 (while UP) [ 179.632742][T12642] loop6: detected capacity change from 0 to 7 [ 179.640786][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.640875][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643225][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643263][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643333][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643361][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643437][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643464][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643523][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643606][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643633][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643686][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643712][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.643730][T12642] ldm_validate_partition_table(): Disk read failed. [ 179.643781][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.643808][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.645107][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.645140][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.645228][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.645256][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.645332][T12642] Dev loop6: unable to read RDB block 0 [ 179.646700][T12642] loop6: unable to read partition table [ 179.646803][T12642] loop6: partition table beyond EOD, truncated [ 179.646813][T12642] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 179.674656][T12642] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.764542][T12647] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 179.791511][T12642] lo speed is unknown, defaulting to 1000 [ 179.964678][T12664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.977201][T12664] gadgetfs: bound to dummy_udc driver [ 180.608139][T12677] syz.3.1688 (12677): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.022961][T12689] netlink: 'syz.6.1692': attribute type 11 has an invalid length. [ 181.024138][T12689] syzkaller1: entered promiscuous mode [ 181.024150][T12689] syzkaller1: entered allmulticast mode [ 181.103443][T12695] [ 181.104309][T12695] ====================================================== [ 181.106498][T12695] WARNING: possible circular locking dependency detected [ 181.108776][T12695] syzkaller #0 Tainted: G Y [ 181.110767][T12695] ------------------------------------------------------ [ 181.112866][T12695] syz.5.1693/12695 is trying to acquire lock: [ 181.114762][T12695] ffff88802188db80 (&sb->s_type->i_mutex_key#40){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 181.118341][T12695] [ 181.118341][T12695] but task is already holding lock: [ 181.120688][T12695] ffffffff916ae820 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 181.123604][T12695] [ 181.123604][T12695] which lock already depends on the new lock. [ 181.123604][T12695] [ 181.126831][T12695] [ 181.126831][T12695] the existing dependency chain (in reverse order) is: [ 181.129563][T12695] [ 181.129563][T12695] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 181.132002][T12695] lock_acquire+0x1d1/0x380 [ 181.133621][T12695] __mutex_lock+0x19f/0x1c10 [ 181.135251][T12695] tcm_alloc_inst+0x5f/0x1e0 [ 181.136908][T12695] try_get_usb_function_instance+0x136/0x1f0 [ 181.138994][T12695] usb_get_function_instance+0x16/0x70 [ 181.141014][T12695] function_make+0x18c/0x3f0 [ 181.142648][T12695] configfs_mkdir+0x525/0xd40 [ 181.144334][T12695] vfs_mkdir+0x367/0x850 [ 181.145856][T12695] filename_mkdirat+0x48b/0x5e0 [ 181.147573][T12695] __x64_sys_mkdirat+0x89/0xc0 [ 181.149293][T12695] do_syscall_64+0x123/0x790 [ 181.150960][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.153031][T12695] [ 181.153031][T12695] -> #2 (func_lock){+.+.}-{4:4}: [ 181.155252][T12695] lock_acquire+0x1d1/0x380 [ 181.156914][T12695] __mutex_lock+0x19f/0x1c10 [ 181.158559][T12695] try_get_usb_function_instance+0x26/0x1f0 [ 181.160600][T12695] usb_get_function_instance+0x16/0x70 [ 181.162517][T12695] function_make+0x18c/0x3f0 [ 181.164151][T12695] configfs_mkdir+0x525/0xd40 [ 181.165795][T12695] vfs_mkdir+0x367/0x850 [ 181.167335][T12695] filename_mkdirat+0x48b/0x5e0 [ 181.169349][T12695] __x64_sys_mkdir+0x6b/0x90 [ 181.171433][T12695] do_syscall_64+0x123/0x790 [ 181.173514][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.176129][T12695] [ 181.176129][T12695] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 181.179464][T12695] lock_acquire+0x1d1/0x380 [ 181.181532][T12695] __mutex_lock+0x19f/0x1c10 [ 181.183508][T12695] configfs_rmdir+0x5ae/0x950 [ 181.185318][T12695] vfs_rmdir+0x328/0x8a0 [ 181.187283][T12695] filename_rmdir+0x31a/0x5c0 [ 181.189433][T12695] __x64_sys_rmdir+0x46/0x70 [ 181.191598][T12695] do_syscall_64+0x123/0x790 [ 181.193476][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.195871][T12695] [ 181.195871][T12695] -> #0 (&sb->s_type->i_mutex_key#40){++++}-{4:4}: [ 181.199304][T12695] check_prev_add+0xeb/0xe60 [ 181.200936][T12695] __lock_acquire+0x1528/0x1f40 [ 181.202959][T12695] lock_acquire+0x1d1/0x380 [ 181.204797][T12695] down_write+0x86/0x1f0 [ 181.206316][T12695] configfs_depend_item_unlocked+0xf3/0x6a0 [ 181.208711][T12695] usbg_make_tpg+0x251/0x610 [ 181.210455][T12695] target_fabric_make_tpg+0xab/0x8c0 [ 181.212411][T12695] configfs_mkdir+0x525/0xd40 [ 181.214595][T12695] vfs_mkdir+0x367/0x850 [ 181.216401][T12695] filename_mkdirat+0x48b/0x5e0 [ 181.218108][T12695] __x64_sys_mkdirat+0x89/0xc0 [ 181.220240][T12695] do_syscall_64+0x123/0x790 [ 181.222099][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.224161][T12695] [ 181.224161][T12695] other info that might help us debug this: [ 181.224161][T12695] [ 181.227948][T12695] Chain exists of: [ 181.227948][T12695] &sb->s_type->i_mutex_key#40 --> func_lock --> tpg_instances_lock [ 181.227948][T12695] [ 181.232823][T12695] Possible unsafe locking scenario: [ 181.232823][T12695] [ 181.235236][T12695] CPU0 CPU1 [ 181.237417][T12695] ---- ---- [ 181.239120][T12695] lock(tpg_instances_lock); [ 181.240785][T12695] lock(func_lock); [ 181.243344][T12695] lock(tpg_instances_lock); [ 181.245635][T12695] lock(&sb->s_type->i_mutex_key#40); [ 181.247866][T12695] [ 181.247866][T12695] *** DEADLOCK *** [ 181.247866][T12695] [ 181.249243][T12711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.250130][T12711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.258636][T12695] locks held by syz.5.1693/12695: 4, last CPU#2: [ 181.260916][T12695] #0: ffff8880257be460 (sb_writers#27){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 181.264669][T12695] #1: ffff88803bba8140 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 181.268272][T12695] #2: ffffffff911de5c8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 181.272197][T12695] #3: ffffffff916ae820 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 181.275707][T12695] [ 181.275707][T12695] stack backtrace: [ 181.278134][T12695] CPU: 2 UID: 0 PID: 12695 Comm: syz.5.1693 Tainted: G Y syzkaller #0 PREEMPT(full) [ 181.281870][T12695] Tainted: [Y]=FORCED_BIND [ 181.283628][T12695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.286969][T12695] Call Trace: [ 181.288418][T12695] [ 181.289678][T12695] dump_stack_lvl+0x100/0x190 [ 181.291339][T12695] print_circular_bug.cold+0x178/0x1be [ 181.293139][T12695] check_noncircular+0x146/0x160 [ 181.295180][T12695] check_prev_add+0xeb/0xe60 [ 181.296831][T12695] __lock_acquire+0x1528/0x1f40 [ 181.298412][T12695] ? rcu_is_watching+0x13/0xc0 [ 181.300368][T12695] lock_acquire+0x1d1/0x380 [ 181.301919][T12695] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 181.303995][T12695] ? __pfx___might_resched+0x10/0x10 [ 181.306150][T12695] down_write+0x86/0x1f0 [ 181.307543][T12695] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 181.309666][T12695] ? __pfx_down_write+0x10/0x10 [ 181.311679][T12695] ? kstrtou16+0xde/0x130 [ 181.313205][T12695] configfs_depend_item_unlocked+0xf3/0x6a0 [ 181.315396][T12695] usbg_make_tpg+0x251/0x610 [ 181.317327][T12695] ? __pfx_usbg_make_tpg+0x10/0x10 [ 181.319006][T12695] ? find_held_lock+0x2b/0x80 [ 181.320808][T12695] ? __pfx_usbg_make_tpg+0x10/0x10 [ 181.322836][T12695] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 181.324835][T12695] target_fabric_make_tpg+0xab/0x8c0 [ 181.326649][T12695] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 181.329072][T12695] configfs_mkdir+0x525/0xd40 [ 181.330635][T12695] ? may_create+0x280/0x430 [ 181.332211][T12695] ? __pfx_configfs_mkdir+0x10/0x10 [ 181.334332][T12695] vfs_mkdir+0x367/0x850 [ 181.335838][T12695] filename_mkdirat+0x48b/0x5e0 [ 181.337441][T12695] ? __pfx_filename_mkdirat+0x10/0x10 [ 181.339621][T12695] ? strncpy_from_user+0x19d/0x2d0 [ 181.341538][T12695] ? do_getname+0x191/0x390 [ 181.342982][T12695] __x64_sys_mkdirat+0x89/0xc0 [ 181.344832][T12695] do_syscall_64+0x123/0x790 [ 181.346703][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.348595][T12695] RIP: 0033:0x7f17de39f559 [ 181.350298][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.357292][T12695] RSP: 002b:00007f17df1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 181.359958][T12695] RAX: ffffffffffffffda RBX: 00007f17de625fa0 RCX: 00007f17de39f559 [ 181.362981][T12695] RDX: 00000000000001ff RSI: 0000200000000700 RDI: ffffffffffffff9c [ 181.365576][T12695] RBP: 00007f17de436b20 R08: 0000000000000000 R09: 0000000000000000 [ 181.368746][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.371538][T12695] R13: 00007f17de626038 R14: 00007f17de625fa0 R15: 00007ffdfbff9348 [ 181.374366][T12695]