last executing test programs: 2m7.554357751s ago: executing program 2 (id=231): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001000010400000000000000000000000000000000000000000000000100000000000000000000000000000012341234000000000a000000000000009ba9aa2cc99dc5d1660a424a46f9e8032c1950fc223df1607bfaedf534265c4b139ba15f07a4b0520faf27a7956c0a898483ba8ac257c4312032e674ac6dd0488f0f536ca0805240dcb9ffee5178d229ce41217d802031920b7563b1940be68064f241fd0131035f6d990625a5e679b64290b377cb320ce9e3055d60f922031450c9d06f8da320bddf0e9747dbb3857f11cf993d76d313b4d642265dd1015a79427d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000"], 0xf0}}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)) 2m7.42334495s ago: executing program 2 (id=233): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000100)=0x6, 0x4) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x0, 0x44a6, 0x6, 0x80080, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @aes256, 0x0, @desc1}) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', '', [], 0xa, "e768e296"}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) madvise(&(0x7f000002d000/0x4000)=nil, 0x4000, 0x65) (async) setns(0xc9, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ed03020026bd7000fddbdf255aee90e4c99142699c4b54c112d2d1d9105de0e8cd75d7e61eeb2034ef8b2a46e9e032fbc49397e15acebbcb44c546faf3d52357dc7c9028c9b11061a9945f9000357d8307621fdf9a1dc992410fff0c147d727d27788f93e60d72761cdfa1ca"], 0x70}, 0x1, 0x0, 0x0, 0x4000045}, 0x4801) (async) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) write(r4, &(0x7f0000000600)="50000000100001040100000000000000000000000000000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028005000f0002000000", 0x50) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x22020600) eventfd(0x8000) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000340)={r3, 0x50000005, 0x1}) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) connect$llc(r3, &(0x7f0000000300)={0x1a, 0x2, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$inet(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) lseek(r1, 0x7, 0x4) (async) r8 = fsmount(r2, 0x0, 0xa) fchdir(r8) (async) write$P9_RCLUNK(r8, &(0x7f0000000040)={0x7, 0x79, 0xffff}, 0x7) (async) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES64=0x0]) 2m7.310045705s ago: executing program 2 (id=235): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x4) r2 = socket(0x2, 0x80805, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r3, 0x7f}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x3, 0x6, 0x5, r3}, &(0x7f0000000080)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m7.088381042s ago: executing program 2 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x4000000) r1 = io_uring_setup(0x3249, &(0x7f0000000200)={0x0, 0x2c3f, 0x0, 0x2, 0x2}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, 0x0) write(r4, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) mremap(&(0x7f00006b2000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd4000/0x4000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000040a0101000000000300000608000a400000000108000540000000000900030073797a32000000000900030073797a32000000000900010073797a300000000008000540fffffffc"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x2}) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x10010, r5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m6.87992952s ago: executing program 2 (id=240): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r2) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r3, 0x801, 0x4, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x69e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m6.440235264s ago: executing program 2 (id=243): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0xffffbfff, 0x264}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, 0x0) fcntl$setlease(r3, 0x400, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) (async) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0xffffbfff, 0x264}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async) 2m6.376120816s ago: executing program 32 (id=243): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0xffffbfff, 0x264}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, 0x0) fcntl$setlease(r3, 0x400, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) (async) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0xffffbfff, 0x264}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async) 1m53.759731005s ago: executing program 3 (id=371): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x20) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) (async) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80482) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/253) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e00c045ead9f46618d28a9c5b44c66fb242098b90f22046546c3526349dcadeece13438d10100008000000000039423bb8e27298bf018d51c296df0515907d4d508773a52126b9a6d"], 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='add', 0x3) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='workdir', &(0x7f0000000280)='./file0\x00', r3) (async) truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x80) 1m50.659908047s ago: executing program 3 (id=415): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x818) (async) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) (async) r4 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r4, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000540)=""/17, 0x11}, {0x0, 0xffffffa0}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000100)=""/101, 0x65}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000340)=""/142, 0x8e}], 0x6, 0x5, 0x4) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) recvmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/155, 0x9b}], 0x2, &(0x7f00000024c0)=""/8, 0x8}, 0x10}, {{&(0x7f0000002500)=@isdn, 0x80, &(0x7f0000002600)=[{&(0x7f0000002580)=""/86, 0x56}], 0x1, &(0x7f0000002640)=""/119, 0x77}, 0x2}, {{&(0x7f00000026c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002740)=""/242, 0xf2}], 0x1}, 0x2}, {{&(0x7f0000002880)=@qipcrtr, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002900)=""/144, 0x90}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/145, 0x91}, {&(0x7f0000002b00)=""/64, 0x40}, {&(0x7f0000002b40)=""/85, 0x55}, {&(0x7f0000002bc0)=""/69, 0x45}, {&(0x7f0000002c40)=""/24, 0x18}], 0x7, &(0x7f0000002d00)=""/118, 0x76}, 0xd}], 0x5, 0x2002, &(0x7f0000002ec0)) (async) recvmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/155, 0x9b}], 0x2, &(0x7f00000024c0)=""/8, 0x8}, 0x10}, {{&(0x7f0000002500)=@isdn, 0x80, &(0x7f0000002600)=[{&(0x7f0000002580)=""/86, 0x56}], 0x1, &(0x7f0000002640)=""/119, 0x77}, 0x2}, {{&(0x7f00000026c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002740)=""/242, 0xf2}], 0x1}, 0x2}, {{&(0x7f0000002880)=@qipcrtr, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002900)=""/144, 0x90}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/145, 0x91}, {&(0x7f0000002b00)=""/64, 0x40}, {&(0x7f0000002b40)=""/85, 0x55}, {&(0x7f0000002bc0)=""/69, 0x45}, {&(0x7f0000002c40)=""/24, 0x18}], 0x7, &(0x7f0000002d00)=""/118, 0x76}, 0xd}], 0x5, 0x2002, &(0x7f0000002ec0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) write(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x204, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffbc9, 0x4e}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x1c1, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x3, 0x5, 0xffff, 0x2}}, @chsw_timing={0x68, 0x4, {0x319a, 0xe}}, @measure_req={0x26, 0x77, {0xc, 0x8, 0x1, "44e1cf50f55a11bfd5411ef11efdf0d95ed2de777e6458adcc83b31d705dc6abdf94752283f16d722cb109ab4975c3b6a93e76466e1afbc8c6c295f71d29e9224c9058b9cef1cf4761e03238570129bdc712d4a61d3dbaa015537e716d82a073e315188a89188f09a5a88b9780076435fa77d2c6"}}, @prep={0x83, 0x1f, {{}, 0x80, 0xd1, @device_b, 0xa, @void, 0xbbc, 0x2, @device_b, 0x83}}, @mic={0x8c, 0x10, {0xa60, "ee0d53495756", @short="41a62178bcdbb3a1"}}, @supported_rates={0x1, 0x1, [{0xc9}]}, @chsw_timing={0x68, 0x4, {0x1, 0x8}}, @fast_bss_trans={0x37, 0xd9, {0x40, 0x4, "8d7df8584202885c20a5356ac8b529be", "f38372cfcfa62ee970176c52043e2a17e22076c61c62309d0aec6509032080dc", "fd554df421fbf76a4b267c6314108628800c09450c74aa12dd9d1ffe8336d557", [{0x1, 0x25, "da42ab4c7b03d6a5043ff13368fc0914404c4f95debb38879d1bf1d51fedc1d51738977e4b"}, {0x3, 0x23, "e8f30716e2581972986b1e366c10a8551895dc0eb864f6c5f84402b066600cc5987bc4"}, {0x4, 0x20, "348bdbc3c947609034ca573ea49e55fc71b1f7a23d507dd3180af1831907af7a"}, {0x3, 0x17, "0ee6e771fefa008287a369f1eda6c2576b19a77aa55ab1"}]}}, @rann={0x7e, 0x15, {{0x0, 0x45}, 0x2, 0x1, @device_a, 0x80000000, 0xf, 0x5}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x204}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x204, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffbc9, 0x4e}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x1c1, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x3, 0x5, 0xffff, 0x2}}, @chsw_timing={0x68, 0x4, {0x319a, 0xe}}, @measure_req={0x26, 0x77, {0xc, 0x8, 0x1, "44e1cf50f55a11bfd5411ef11efdf0d95ed2de777e6458adcc83b31d705dc6abdf94752283f16d722cb109ab4975c3b6a93e76466e1afbc8c6c295f71d29e9224c9058b9cef1cf4761e03238570129bdc712d4a61d3dbaa015537e716d82a073e315188a89188f09a5a88b9780076435fa77d2c6"}}, @prep={0x83, 0x1f, {{}, 0x80, 0xd1, @device_b, 0xa, @void, 0xbbc, 0x2, @device_b, 0x83}}, @mic={0x8c, 0x10, {0xa60, "ee0d53495756", @short="41a62178bcdbb3a1"}}, @supported_rates={0x1, 0x1, [{0xc9}]}, @chsw_timing={0x68, 0x4, {0x1, 0x8}}, @fast_bss_trans={0x37, 0xd9, {0x40, 0x4, "8d7df8584202885c20a5356ac8b529be", "f38372cfcfa62ee970176c52043e2a17e22076c61c62309d0aec6509032080dc", "fd554df421fbf76a4b267c6314108628800c09450c74aa12dd9d1ffe8336d557", [{0x1, 0x25, "da42ab4c7b03d6a5043ff13368fc0914404c4f95debb38879d1bf1d51fedc1d51738977e4b"}, {0x3, 0x23, "e8f30716e2581972986b1e366c10a8551895dc0eb864f6c5f84402b066600cc5987bc4"}, {0x4, 0x20, "348bdbc3c947609034ca573ea49e55fc71b1f7a23d507dd3180af1831907af7a"}, {0x3, 0x17, "0ee6e771fefa008287a369f1eda6c2576b19a77aa55ab1"}]}}, @rann={0x7e, 0x15, {{0x0, 0x45}, 0x2, 0x1, @device_a, 0x80000000, 0xf, 0x5}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x204}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000140)=0x4) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000140)=0x4) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x7031, 0x7, 0x2, 0x7}, {0x2, 0xc6, 0x9, 0x3}, {0x0, 0xed, 0x4, 0x6}, {0x5, 0x0, 0x0, 0xa879}, {0x400, 0x9, 0x0, 0x8}, {0x4, 0x7f, 0x7f, 0x5}]}, 0x10) 1m50.467677824s ago: executing program 3 (id=418): mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75737271756f8e615f626c6f636b5f686172646c696d69743d362c00"]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000100)="ab5c", 0x2, 0xe61e284085547095, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75737271756f8e615f626c6f636b5f686172646c696d69743d362c00"]) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r2, 0x1ff) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000100)="ab5c", 0x2, 0xe61e284085547095, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) (async) 1m49.629390833s ago: executing program 3 (id=429): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @loopback, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4004010) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000003"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x18900, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @loopback}, &(0x7f00000001c0)=0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', r8, 0x7, 0x40, 0xfff, 0x8001, {{0x8, 0x4, 0x2, 0x2a, 0x20, 0x67, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x2, [{@multicast2, 0x4}]}]}}}}}) 1m49.459856343s ago: executing program 3 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) r3 = semget$private(0x0, 0x3, 0x300) semop(r3, &(0x7f0000000480)=[{0x1, 0x4, 0x1800}, {0x1, 0x0, 0x800}, {0x2, 0x3, 0x800}, {0x1, 0x1, 0x1800}, {0x1, 0x5, 0x800}], 0x5) (async, rerun: 32) r4 = syz_clone(0x0, &(0x7f0000000180)="e47cbc6c2eeb16c91f4bf9070143962d6b2cdcd8b3e64c3cd900957902444d36350e48dbaeda12c1b87766b0cce975a4d8679e97c62ddc3fabd339433a97aa1c173df92ccd0d3fcd0be10a9455ec4910744444b93467bddddb064867e332", 0x5e, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)="7bbc1f502ecacca70f31d097b2eba08936941c49f90604dd3d55c189be1f9afbb297c5f3d2d66fa39484bbb1bdcf74edc266d6d76e2d1569751224ea4c6a0f7db8b73fa0be7b886b5522ab6cb3137472a5cc625051da6fcd2e18d8a7f366c01903df23b33754d73bbde285c29fae15eddd0de27a8bfaa49e79ba5af4401396208d50ea188ed574545bfc121fb2415942db6b98af1450ceae45fa0923399df7a219a3c9ec99c60fa4b45bd487471a6e1066a5682cb5085be40d2da7348da5a1e30863559556") (rerun: 32) syz_open_procfs$pagemap(r4, &(0x7f00000003c0)) 1m48.125873225s ago: executing program 3 (id=443): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xfffffff8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/86, 0x14000, 0x800, 0x400, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x60}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x11d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x93d4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x5, 0x3, 0xfffffff8]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x5266, 0xfffffff9, 0xc85]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x82, 0x1, 0x1, 0x9, 0x5, 0x5, 0x376]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xee}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x800}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x7, 0x7, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x529e}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000003c0)='nl80211\x00', &(0x7f0000000400)="6390cfd13671592e5c7866d5b51305ca1aab21b679394ec8712c6bf52c175fff1f23648aaa6985629e74220d2f97bbd11f69d8b7f6ec1bc038838d5e696a434f3dc26cfda649dce27f73fdea11bca11707ecdab7e792e4771a6e2085462ceb6f5d539cd7c0de880510146f3192bc2a43d0e997fcf732e893da429ba7345bfa493c9d65d3b7cff5fbb013a7ad34", 0x8d) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000004c0)={0xa, 0x3, 0x1000}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r1, &(0x7f0000000500)='wlan1\x00', 0x200, &(0x7f0000000540)={@align=0xe, {0x401, 0x3ff, 0x3, 0x4}}, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x224, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xfffa, 0x8, 0x6, 0x7dca, 0x3, 0xb88e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x2, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x4, 0x4a, 0xa, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x23fe63c9f5040198, 0x3, 0x1, 0x30, 0x30, 0x30, 0x5, 0x18, 0xc, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x4, 0x8, 0xfff, 0x1, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x63, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x7}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ae, 0xe, 0x5, 0x7, 0x0, 0xe, 0xe, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfffa, 0x4, 0xa, 0x1, 0x1, 0x200, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x847, 0xf631, 0x2, 0x2, 0x9, 0x5a, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x7, 0xa52, 0xf, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x6, 0xef11, 0x3, 0x4e, 0xaab1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x7, 0x6, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2}, {0x4}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x4, 0xc, 0x9, 0x48, 0x24, 0x2d, 0x1, 0x12, 0x30, 0x48, 0x1b, 0x5, 0xc, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000024}, 0x40c5) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x224, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xfffa, 0x8, 0x6, 0x7dca, 0x3, 0xb88e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x2, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x4, 0x4a, 0xa, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x23fe63c9f5040198, 0x3, 0x1, 0x30, 0x30, 0x30, 0x5, 0x18, 0xc, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x4, 0x8, 0xfff, 0x1, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x63, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x7}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ae, 0xe, 0x5, 0x7, 0x0, 0xe, 0xe, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfffa, 0x4, 0xa, 0x1, 0x1, 0x200, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x847, 0xf631, 0x2, 0x2, 0x9, 0x5a, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x7, 0xa52, 0xf, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x6, 0xef11, 0x3, 0x4e, 0xaab1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x7, 0x6, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2}, {0x4}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x4, 0xc, 0x9, 0x48, 0x24, 0x2d, 0x1, 0x12, 0x30, 0x48, 0x1b, 0x5, 0xc, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000024}, 0x40c5) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x70c, r5, 0xa2c, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x576, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6762}, @broadcast, @broadcast, @random="f33af0a2ab13", {0x6, 0x7}, @value=@ver_80211n={0x0, 0x7ef5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, @default, 0x200, @void, @void, @void, @val={0x4, 0x6, {0x91, 0x8, 0x6, 0xab8}}, @val={0x6, 0x2, 0x8}, @val={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x7, 0x9, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x2, 0xf1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4a, 0x1}}, [{0xdd, 0x84, "baab8b026ae27a07e880d5f52377c16967e5ef2518f19c53292509c37411ea5eac8e062c6fbf71ca591fd6daebd3645f297d019d7491a349fdb9be59eaeb8f3a26a26a06ea3fc129200bb02e26f3e071adb5e5849ee17062c2bc661f51f1936c268e3d5a318eed4e713c62d34c1053359c3f091dee4804dbe2b07ed8400ceb46299d7669"}, {0xdd, 0x66, "db7a62836587accdb0cb0c19bb67f02af0fcdfac57bfb1749b834adb3f9292bdf3b70c907817fc0f59a66a1a8be789825a6d93be345f757a435dcb4ac669a68499b4a70b07682c749e402f40eced088f60b54ec46c29d8a6c6eec77bc727b2d346d2f7d70ebd"}, {0xdd, 0xe5, "4ca832aba10f91a04097702c28534bfc8e57a5e29ee7ff0da24c70bbd4562d01392e84115bacc227597253d48bfc42544c26d567d8c9c5d53e26d3215472e7ec7b83fcfbbef78cb4b87de47734cf631b73404a06cc2e766f485b52fbfa68d8b1c851acd4cb60e8314e2243f2c0e334583cdd9001497804d0c1e85c15f67916e5c185c600aea3ffda6901fca0cfda21f3c99c316f185ebd5d3d9db4df717b2d6f12a99115964310b6e6912215b87ae6be537620404af6139c4c60fec95d41f03bda2de48e036b5ca07199224772d86dd795b8d289785d79cd44b53e9fb099f2ae61c6ef9b75"}, {0xdd, 0xb1, "0b12df6abfb97d0dcef96baffc904a64524213ccec0043110855c25c43a21d971deffdd83a5a3451043984a6e3667977ef4e80dc77e146122aa2c1307ee4d3b7d6b14da8b0ffa6a2b36126175a71e787a64319a0a52efef5e4b468a8df04ca40df4e9e1661a7b51108fd7e40e42be3f82176fdcbf792ccb7496190a03fe40b6c276880945ec39e935c535417b64668d1b12317666a824c9c3e2c03a9f2e6cb2df5caabd027e0d7c273c8b136bf1f6d58fa"}, {0xdd, 0xb2, "7434394b70cb3aa600bca8ba16fcf79ecb00b553127db07b54586c31c297c0480899eb947439fbbe21ba58d659b27f50bbf1ae16ca1788161cf0bacedcd36c6e58c50e09179fd5c1d27d385b7dc28d7eac9be01c4bd830dd04e60f98b68f7767178d6a481ae7b4d39f26814643ff99d37d609cc75ce39455ef0095d5a4ae6814d44ab3dbbb1fc46b3065c1e60aad82e052f124a4dd74692ad6027d875ee2b9b6d4249ee7d1f34d1420ead19dd66ab042784b"}, {0xdd, 0xc9, "607c8f5bb34b9c38b65d5bdb5dd901ba3ba91f5076cc239092a2261f438f5a0eef432f873ff2aeb9982354ea8cc4d7c2e065afc3786ec14305f8a263acd699c21393dc72b7bb0a54c8eb00430ecd524570c46f2e4cd426d5deb611b7d750ac8bbad106d4772bf01569f8f106a3b17ea5bf517bdb3c8abb530589802c3df22872043a4537268a1abeb5c775c9d1d6709c911736b91ccb23d0d9743c4879b8d7a6490eee1f8fda76f931a2fff9d90bf2c5dcedc720159df629d8a430e1fe4cbebf3a28ffc9b2c3cda642"}, {0xdd, 0x84, "6d9c76f4417198c14ba1066ec6f6daec412249938ea93cc9a932059c494c3379459f866acd0fde5ff455899a3e4c796f51326ce03da249a56a4e24e0ea379c43bc5dfc4280bcbf31784a698b358f98b60faedd3a3ee18c86c9edbb71116e1a076556b9fdd01fc1135bf6c9600640d354912f7739e8f8c021ab0014055ca59dd061a2bb4d"}, {0xdd, 0x46, "e13df89b58f2df4da8f820d64fc4b0a99b1144f59cd3a9aea3838f9a0e1b5b11ebe0e4525896fd57b5a5370ed1f9d708c2440e3bdf6a6bf40379d9305575ae2d2b02537fe46a"}, {0xdd, 0x24, "a09449394dc8d7562774c563adc1e87182c529a2e0f00faac84af173f0cf6dffaf2d1d70"}, {0xdd, 0x14, "1f8d465f8de921acc9cd92c0f7baf94ab921881d"}]}}, @NL80211_ATTR_FRAME={0x11e, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x9, 0xab}, "", @value={0xe, 0x1, 0x1, 0x1, 0xd3}}, @a_msdu=[{@broadcast, @device_b, 0xab, "c0c74eef18f44a63e36aea6afdffaa12f248b0f868f3f1c10b2c09342d66fbf5c490e254ab19bc14f8f279016a87fc18aaf349d67eb59f1ee8c54f601bcab917262cd93152b64ebbab81fada11f9e4001f6734d5873ffac9f132de9d89514be250de8f9deb7cebe8e47a7dfaee37a99b8030055141d70ccfa1d9129b44e85121e5e70ca848d06acafd23f2dab9febdf6232a4d4aa41abe78c0c12f50e474e7c586d5b8605b6be2d611b12d"}, {@device_a, @broadcast, 0x34, "7ea9489a64176a4deabbf605c532ff3170443c47d2479c5c56be3420f8a5b311aa54a0e9574e187ec858d2f183f7576f0b9578fe"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @initial, {0x1}, @value=@ver_80211n={0x0, 0x7343, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @vht_group_id={0x15, 0x1, {0x1, "6b06abb274013d445ae9191a7d93f792"}}}}]}, 0x70c}}, 0x20000040) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', r0, 0x4000, r0}, 0x18) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001240), 0x400780, 0x0) (async) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001240), 0x400780, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r1) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x669}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x669}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001400)={'dvmrp0\x00', 0x2000}) getresgid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) r10 = getegid() setregid(r9, r10) (async) setregid(r9, r10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000001500)=0x8, 0x4) (async) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000001500)=0x8, 0x4) r12 = socket(0x26, 0xa, 0x3) close(r11) sendmsg$nl_route(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)=@ipv6_deladdrlabel={0x90, 0x49, 0x8, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x40, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r12) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000001700)) shutdown(r7, 0x0) 1m32.961307352s ago: executing program 33 (id=443): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xfffffff8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/86, 0x14000, 0x800, 0x400, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x60}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x11d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x93d4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x5, 0x3, 0xfffffff8]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x5266, 0xfffffff9, 0xc85]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x82, 0x1, 0x1, 0x9, 0x5, 0x5, 0x376]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xee}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x800}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x7, 0x7, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x529e}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000003c0)='nl80211\x00', &(0x7f0000000400)="6390cfd13671592e5c7866d5b51305ca1aab21b679394ec8712c6bf52c175fff1f23648aaa6985629e74220d2f97bbd11f69d8b7f6ec1bc038838d5e696a434f3dc26cfda649dce27f73fdea11bca11707ecdab7e792e4771a6e2085462ceb6f5d539cd7c0de880510146f3192bc2a43d0e997fcf732e893da429ba7345bfa493c9d65d3b7cff5fbb013a7ad34", 0x8d) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000004c0)={0xa, 0x3, 0x1000}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r1, &(0x7f0000000500)='wlan1\x00', 0x200, &(0x7f0000000540)={@align=0xe, {0x401, 0x3ff, 0x3, 0x4}}, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x224, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xfffa, 0x8, 0x6, 0x7dca, 0x3, 0xb88e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x2, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x4, 0x4a, 0xa, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x23fe63c9f5040198, 0x3, 0x1, 0x30, 0x30, 0x30, 0x5, 0x18, 0xc, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x4, 0x8, 0xfff, 0x1, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x63, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x7}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ae, 0xe, 0x5, 0x7, 0x0, 0xe, 0xe, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfffa, 0x4, 0xa, 0x1, 0x1, 0x200, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x847, 0xf631, 0x2, 0x2, 0x9, 0x5a, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x7, 0xa52, 0xf, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x6, 0xef11, 0x3, 0x4e, 0xaab1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x7, 0x6, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2}, {0x4}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x4, 0xc, 0x9, 0x48, 0x24, 0x2d, 0x1, 0x12, 0x30, 0x48, 0x1b, 0x5, 0xc, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000024}, 0x40c5) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x224, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xfffa, 0x8, 0x6, 0x7dca, 0x3, 0xb88e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x2, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x4, 0x4a, 0xa, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x23fe63c9f5040198, 0x3, 0x1, 0x30, 0x30, 0x30, 0x5, 0x18, 0xc, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x4, 0x8, 0xfff, 0x1, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x63, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x7}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ae, 0xe, 0x5, 0x7, 0x0, 0xe, 0xe, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfffa, 0x4, 0xa, 0x1, 0x1, 0x200, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x847, 0xf631, 0x2, 0x2, 0x9, 0x5a, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x7, 0xa52, 0xf, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x6, 0xef11, 0x3, 0x4e, 0xaab1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x7, 0x6, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2}, {0x4}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x4, 0xc, 0x9, 0x48, 0x24, 0x2d, 0x1, 0x12, 0x30, 0x48, 0x1b, 0x5, 0xc, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000024}, 0x40c5) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x70c, r5, 0xa2c, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x576, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6762}, @broadcast, @broadcast, @random="f33af0a2ab13", {0x6, 0x7}, @value=@ver_80211n={0x0, 0x7ef5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, @default, 0x200, @void, @void, @void, @val={0x4, 0x6, {0x91, 0x8, 0x6, 0xab8}}, @val={0x6, 0x2, 0x8}, @val={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x7, 0x9, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x2, 0xf1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4a, 0x1}}, [{0xdd, 0x84, "baab8b026ae27a07e880d5f52377c16967e5ef2518f19c53292509c37411ea5eac8e062c6fbf71ca591fd6daebd3645f297d019d7491a349fdb9be59eaeb8f3a26a26a06ea3fc129200bb02e26f3e071adb5e5849ee17062c2bc661f51f1936c268e3d5a318eed4e713c62d34c1053359c3f091dee4804dbe2b07ed8400ceb46299d7669"}, {0xdd, 0x66, "db7a62836587accdb0cb0c19bb67f02af0fcdfac57bfb1749b834adb3f9292bdf3b70c907817fc0f59a66a1a8be789825a6d93be345f757a435dcb4ac669a68499b4a70b07682c749e402f40eced088f60b54ec46c29d8a6c6eec77bc727b2d346d2f7d70ebd"}, {0xdd, 0xe5, "4ca832aba10f91a04097702c28534bfc8e57a5e29ee7ff0da24c70bbd4562d01392e84115bacc227597253d48bfc42544c26d567d8c9c5d53e26d3215472e7ec7b83fcfbbef78cb4b87de47734cf631b73404a06cc2e766f485b52fbfa68d8b1c851acd4cb60e8314e2243f2c0e334583cdd9001497804d0c1e85c15f67916e5c185c600aea3ffda6901fca0cfda21f3c99c316f185ebd5d3d9db4df717b2d6f12a99115964310b6e6912215b87ae6be537620404af6139c4c60fec95d41f03bda2de48e036b5ca07199224772d86dd795b8d289785d79cd44b53e9fb099f2ae61c6ef9b75"}, {0xdd, 0xb1, "0b12df6abfb97d0dcef96baffc904a64524213ccec0043110855c25c43a21d971deffdd83a5a3451043984a6e3667977ef4e80dc77e146122aa2c1307ee4d3b7d6b14da8b0ffa6a2b36126175a71e787a64319a0a52efef5e4b468a8df04ca40df4e9e1661a7b51108fd7e40e42be3f82176fdcbf792ccb7496190a03fe40b6c276880945ec39e935c535417b64668d1b12317666a824c9c3e2c03a9f2e6cb2df5caabd027e0d7c273c8b136bf1f6d58fa"}, {0xdd, 0xb2, "7434394b70cb3aa600bca8ba16fcf79ecb00b553127db07b54586c31c297c0480899eb947439fbbe21ba58d659b27f50bbf1ae16ca1788161cf0bacedcd36c6e58c50e09179fd5c1d27d385b7dc28d7eac9be01c4bd830dd04e60f98b68f7767178d6a481ae7b4d39f26814643ff99d37d609cc75ce39455ef0095d5a4ae6814d44ab3dbbb1fc46b3065c1e60aad82e052f124a4dd74692ad6027d875ee2b9b6d4249ee7d1f34d1420ead19dd66ab042784b"}, {0xdd, 0xc9, "607c8f5bb34b9c38b65d5bdb5dd901ba3ba91f5076cc239092a2261f438f5a0eef432f873ff2aeb9982354ea8cc4d7c2e065afc3786ec14305f8a263acd699c21393dc72b7bb0a54c8eb00430ecd524570c46f2e4cd426d5deb611b7d750ac8bbad106d4772bf01569f8f106a3b17ea5bf517bdb3c8abb530589802c3df22872043a4537268a1abeb5c775c9d1d6709c911736b91ccb23d0d9743c4879b8d7a6490eee1f8fda76f931a2fff9d90bf2c5dcedc720159df629d8a430e1fe4cbebf3a28ffc9b2c3cda642"}, {0xdd, 0x84, "6d9c76f4417198c14ba1066ec6f6daec412249938ea93cc9a932059c494c3379459f866acd0fde5ff455899a3e4c796f51326ce03da249a56a4e24e0ea379c43bc5dfc4280bcbf31784a698b358f98b60faedd3a3ee18c86c9edbb71116e1a076556b9fdd01fc1135bf6c9600640d354912f7739e8f8c021ab0014055ca59dd061a2bb4d"}, {0xdd, 0x46, "e13df89b58f2df4da8f820d64fc4b0a99b1144f59cd3a9aea3838f9a0e1b5b11ebe0e4525896fd57b5a5370ed1f9d708c2440e3bdf6a6bf40379d9305575ae2d2b02537fe46a"}, {0xdd, 0x24, "a09449394dc8d7562774c563adc1e87182c529a2e0f00faac84af173f0cf6dffaf2d1d70"}, {0xdd, 0x14, "1f8d465f8de921acc9cd92c0f7baf94ab921881d"}]}}, @NL80211_ATTR_FRAME={0x11e, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x9, 0xab}, "", @value={0xe, 0x1, 0x1, 0x1, 0xd3}}, @a_msdu=[{@broadcast, @device_b, 0xab, "c0c74eef18f44a63e36aea6afdffaa12f248b0f868f3f1c10b2c09342d66fbf5c490e254ab19bc14f8f279016a87fc18aaf349d67eb59f1ee8c54f601bcab917262cd93152b64ebbab81fada11f9e4001f6734d5873ffac9f132de9d89514be250de8f9deb7cebe8e47a7dfaee37a99b8030055141d70ccfa1d9129b44e85121e5e70ca848d06acafd23f2dab9febdf6232a4d4aa41abe78c0c12f50e474e7c586d5b8605b6be2d611b12d"}, {@device_a, @broadcast, 0x34, "7ea9489a64176a4deabbf605c532ff3170443c47d2479c5c56be3420f8a5b311aa54a0e9574e187ec858d2f183f7576f0b9578fe"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @initial, {0x1}, @value=@ver_80211n={0x0, 0x7343, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @vht_group_id={0x15, 0x1, {0x1, "6b06abb274013d445ae9191a7d93f792"}}}}]}, 0x70c}}, 0x20000040) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', r0, 0x4000, r0}, 0x18) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001240), 0x400780, 0x0) (async) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001240), 0x400780, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r1) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x669}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x669}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001400)={'dvmrp0\x00', 0x2000}) getresgid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) r10 = getegid() setregid(r9, r10) (async) setregid(r9, r10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000001500)=0x8, 0x4) (async) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000001500)=0x8, 0x4) r12 = socket(0x26, 0xa, 0x3) close(r11) sendmsg$nl_route(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)=@ipv6_deladdrlabel={0x90, 0x49, 0x8, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x40, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r12) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000001700)) shutdown(r7, 0x0) 3.596909079s ago: executing program 4 (id=1300): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x80049370, 0x1000000000000) 3.519236619s ago: executing program 4 (id=1301): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_DO_IT(r0, 0xab03) shutdown(0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) close(0x3) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) 3.287588136s ago: executing program 4 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4008400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x8000000}, {0x8, 0x22eb, 0x3}}}}}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6e705dbbd2390b7c14d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000740)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c67696ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7109aa4355fd5350ca154643c2fc95b482bdde40429d672a9e5b36d0059ee6ed1e0eb6875be62d3c1c5346b28051611eab36f20093d6a0", 0xe6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdea}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.179023106s ago: executing program 4 (id=1307): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=0xffffffffffffffff], 0x0, 0x3c}, 0x28) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003f10500a909ac041217749f23c1852d4329f82603"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003f10500a909ac041217749f23c1852d4329f82603"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abcd13ec37d94689c9dc5cae099", 0xe}, {0x0, 0xe00}, {0x0}], 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a030480) (async) unshare(0x6a030480) getsockopt$MRT(r2, 0x0, 0xcf, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) getsockopt$MRT(r2, 0x0, 0xcf, &(0x7f0000000340), &(0x7f0000000380)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x25dfdffc, 0x40}, 0xc) (async) bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x25dfdffc, 0x40}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000e40760bb950211787bd8034a8de13e1811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000009d0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.659817403s ago: executing program 1 (id=1315): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff050003"], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020b0e080600000025bd7000fedbdf25040003f79200edbf000005000000000000870f160000000000000100000000001000"], 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x194, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004}, 0x24040040) 2.608135896s ago: executing program 1 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x10, 0x4}) ppoll(&(0x7f00000000c0)=[{r1}, {r2, 0xc000}], 0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140), 0xb32438, &(0x7f0000000800)={[{@userxattr}, {@redirect_dir_follow}, {@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@uuid_on}, {@verity_require}, {@xino_auto}, {@verity_require}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x62, 0x39, 0x34, 0x39, 0x35, 0x34, 0x66], 0x2d, [0x34, 0x36, 0x62, 0x31], 0x2d, [0x31, 0x36, 0x32, 0x36], 0x2d, [0x64, 0x37, 0x34, 0x61], 0x2d, [0x37, 0x31, 0x61, 0x33, 0x33, 0x64, 0x31, 0x20]}}}, {@obj_user={'obj_user', 0x3d, 'user.incfs.size\x00'}}, {@obj_type={'obj_type', 0x3d, 'user.incfs.size\x00'}}, {@fowner_gt={'fowner>', r0}}, {@uid_lt}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@fsname={'fsname', 0x3d, ']@*'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chroot(&(0x7f0000000180)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) 1.869010766s ago: executing program 0 (id=1320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r2, 0x62b8b5139293a4c7, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x40440cc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401000000"], 0x7) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x6) accept4(r6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x900}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c20020200"], 0x6) nanosleep(&(0x7f00000000c0)={0x0, 0x10000000}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04010c2000"], 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) 1.719624294s ago: executing program 1 (id=1321): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x80049370, 0x1000000000000) 1.549594119s ago: executing program 1 (id=1322): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x42) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x10, @loopback, 0x9}, @in={0x2, 0x4e22, @multicast1}], 0x2c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x8}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x8, @private2, 0x5}}, 0x2, 0x1000}, &(0x7f00000002c0)=0x90) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x200, 0x145040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000480)={0x1, r6, 0x1, 0x1, 0x5, 0x8, 0xb73}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000500)={0x0, r6, r5, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0]}) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x402, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004010}, 0x8845) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/hardlockup_count', 0x10000, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000700)) io_uring_enter(r9, 0x297b, 0x906c, 0xa2, &(0x7f0000000740)={[0x6]}, 0x8) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) accept4$phonet_pipe(r9, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x80800) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000800)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f0000000840)={r10, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r9, 0x3b8c, &(0x7f0000001900)={0x30, r11, 0x0, 0x0, 0x9, 0x7ee, 0x8, &(0x7f0000000900)=""/4096}) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) lseek(r12, 0x5, 0x2) syz_open_dev$vbi(&(0x7f0000001980), 0x0, 0x2) 1.479785298s ago: executing program 1 (id=1323): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000240)={0x1ff, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x60000, 0x100) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) 978.109382ms ago: executing program 0 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/bridge0/bridge/nf_call_ip6tables\x00', 0x8802, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000200)={r4, r4, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x1009, 0x209, 0x1, 0x1, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{@none}, {}]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x20, 0x0, 0x1ff, {{0x33, 0x4, 0x3, 0x1, 0xcc, 0x64, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x28, 0xfb, 0x0, 0x1, [0x7, 0x7, 0x4, 0x10000, 0x7cfb, 0xd, 0x400, 0x6fa, 0x5]}, @generic={0x83, 0x5, "b5ca4f"}, @generic={0x83, 0x6, "a251430e"}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xd, [{@broadcast, 0xfffffff7}, {@rand_addr=0x64010102, 0xb}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xfffff839}, {@multicast1, 0x6}, {@remote, 0xd}, {@broadcast, 0x6}]}, @rr={0x7, 0x2b, 0x42, [@local, @local, @multicast2, @empty, @empty, @broadcast, @rand_addr=0x64010100, @multicast1, @remote, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x0, [{@rand_addr=0x64010101, 0x8}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x2, r6}, 0xc) (async) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee01) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca8"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 899.306733ms ago: executing program 0 (id=1329): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r0}) 838.685394ms ago: executing program 0 (id=1331): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) (async) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 779.362761ms ago: executing program 5 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1df) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) 779.09695ms ago: executing program 0 (id=1333): syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="0435"], 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000005c0)={&(0x7f0000001000)={[{&(0x7f0000000080)="e6c9082d106fb00e0c3f026cc9138f87faf606ca9b1fd86ad6c808b4b77d9728fd8dbe39ae03ba53ffbddab167d84ad51251e68e287973fd9ae33f443ac242855958414e3a645140a4184e3cef60512810a582935bbe6e8235bd9732124ef7f16c5c4dc3d6ff4e0a16a4ae340877c410727326b60d7dffd888ae5829c2e527760c5b5968fae6a8d022366a1d94ce8915d59b386eaed39b99904f5d471b2aace4b2a625ce4202b6d56e8d9f05d52d2f2932b6fef26acbec8a9dc6f1f1e40062993e3527c92d0424362994f203ad18d13975cc45", 0xd3, 0x2}, {&(0x7f0000000180)="c81188a4b41283118318ca15bfe077", 0xf}, {&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000400)="25d001197817e964bcbc17ee0c984f96328f3d01c3adaefc9e590ec72325689450e417ca06100b3d252c79662d1656682804338048f10bdc2324a72b0138939d9c8abd57210fe1bc29aa3707d3de2f6954912bad5f9ed0d0d2feaed8c5e87ad070d029fe4775770637922b0056f70cd0eb35d08d79d52fffd98629a792a7927a32a047697a7f2ba4f6f945ac6a15a6462b19436bf0fde7c0bd02772dd2e38e3afaec023205a647cd04cfd14d7922f1477585ecbe97fd9d5b546748b8355aef0e65ceb0b2f9ac6562c325691a7720512e891a67daf09ed4a593", 0xd9, 0x2}, {&(0x7f0000000500)="a1380701e9164e97e5e38e91fccd78bbf33d13ecbd6262111f62e5ed5d9ab2c73dc8831899dd4309274d6c1a0538025786000ce3e3d5ee598208e0f199b13070c565caf0b2d233c8ed01cbd03d39cdc6b15d4bb39fafb2e54c965e97251e79b0a8e893cc028ef5ee3a670b7909797861e4547d218ba8ed25a5993451ad09aa3b", 0x80}]}, 0x5, 0x3, 0x3}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 688.709576ms ago: executing program 5 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xa, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3300, 0x0, 0xa, 0x0, @opaque="7de8"}}}}}}, 0x0) 628.083202ms ago: executing program 5 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='net/ptype\x00') preadv(r1, &(0x7f0000001800)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x2, 0xfffffffb) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00', 0x4a}) r2 = fanotify_init(0x10, 0x1000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0', 0x1) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x8000013, r4, 0x0) fanotify_mark(r2, 0x221, 0x103b, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r7, 0x8430}, {r6, 0x14001}], 0x2, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x60, 0x0, 0x1, 0x0, r8}, {0x3, 0x80000001, 0x9, 0x40, 0x5, 0x9, 0x7fffffffffffffff, 0xfff}, {0x2, 0x4, 0x5, 0x8}, 0x8, 0x6e6bb1, 0x2, 0xabe6e51c3a68b3c2, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3505, 0x4, 0x1, 0x40, 0x10, 0x3bb, 0x1}}, 0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9c000000290001002cbd7000fedbdf2533000000fe8000000000000000000000000000bbac14141400000000000000000000000007ff00064e20fffd0000b08008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="48000100626c616b6532732d3136302d67656e657269630000000000000000000000000000000000002100974fd0b168cbd1b80000000000000000000000000000000000000000000600250001120000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r0, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 622.600528ms ago: executing program 1 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x329581, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8}) r4 = gettid() process_vm_readv(r4, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) (async) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) close(r0) (async) close(r0) 467.656906ms ago: executing program 5 (id=1337): keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a733030303030303030303430393300e7de0a1b50ffcb1da07bc8408c4d29221752d900adc115"], 0x2a, 0x0) r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0}, &(0x7f0000000780)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff000000000000000000"], 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x6, r0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x1ddc, 0x30, 0x300, 0x0, 0x1, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x1c9c, 0x1, [@m_gact={0x13c, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d1, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x92b, 0x200, 0xffffffffffffffff, 0xc, 0x8}}]}, {0xec, 0x6, "bb7b0547eea7e977c5431aa3b68a6df8f96a666ebad4a93efdb7c2b77639aa7bd63087313e85688301dbab92ccb6b93c198bea69ae5af7d31870433c266f88cd304f8d17cca6e58b21678bb9c6be5dc7c42c7eee36cd42314d6d3059e2f5b87abc63a908dd5d8ffcd6021b77332a9b491d1b50b8faf9a4412af11d209a05b64caf65cad6fed00eff97ce653467ca755f9172de65836ef71f616d22cb0b32ce446e6c0d99ddcff3d49f43f6eff0d1b9c6694fb8e86dcae0475132aac79ccec8c4b6b8a87472f5e5427e49bb71a2af16df9d5788448ff60195510467b8824fad29a124f2da80b4ca14"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xfc, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x546, 0x5, 0x5, 0x6, 0xe}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xb4, 0x0, 0x46e, 0x7fff}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ced5d48b64fe"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x60, 0x6, "d3d04e4dadff4ec66fb5de60fe8637065a86e9705e1a38bc21946bc6b3c20305c07766525b382809b2c7653fb0d51fee3fcbef7b02cc964d83de840196e75fd371372415b0be364bec4dcbefdc40066d5cb3ddf74583553d7a782a04"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xd0, 0x3, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf97c, 0x20000000, 0x5, 0x63}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x1, 0x5, 0x10000, 0x6}, @local, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5d0e, 0x9, 0x6, 0x0, 0x50}, @loopback, @multicast2, 0x2e4f3438e63e3b57}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x8, 0xffff2f2b, 0xedb4}, @multicast1, @remote, 0xff, 0x1}}]}, {0x6, 0x6, "f363"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x8f4, 0x19, 0x0, 0x0, {{0xb}, {0x890, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x264}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x20000000, 0x4, 0x6, 0x4, {0x4, 0x1, 0x9, 0x240, 0x21, 0xa59}, {0x9, 0x2, 0x274, 0x81, 0x2, 0x10}, 0x6, 0x2, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xe3, 0xfffffffd, 0x4, 0x7fff, 0x6, 0x5, 0xffffb4cf, 0x3, 0x2ec23c58, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0x4, 0x3, 0x7f6a7281, 0x40, 0xffffffff, 0x3, 0xfff, 0x5, 0x4, 0xd, 0x7ff, 0x3, 0x0, 0x9, 0x4, 0x1, 0x4, 0x375, 0x2, 0xfffffffa, 0x9, 0x80000000, 0x400, 0x5038, 0x80, 0x6, 0x1000, 0x6, 0x8, 0x7, 0xffff1d0f, 0x7ff, 0x6, 0x3, 0xb8b, 0xc, 0x7f, 0x8, 0x8, 0x3, 0x800, 0x10000000, 0xc, 0x1ff, 0x2be, 0x5, 0x3fd, 0xffff, 0x10001, 0x9, 0x0, 0x5, 0x7, 0x8, 0xadc00000, 0x4, 0x2, 0xfffffff8, 0x7, 0x5, 0xc87c, 0x1, 0x7f, 0x4, 0x7, 0x3, 0x2, 0x0, 0x5, 0x8, 0xfffffff7, 0x5, 0x4, 0x9, 0xffffffff, 0x5, 0x41, 0xffffffff, 0x3, 0x4, 0x0, 0xf, 0x80000001, 0x3d, 0x3dac, 0x7, 0x7, 0x5, 0x143, 0x9, 0x4, 0x7f, 0x2, 0x5, 0x2, 0x8, 0x7, 0x60e, 0x7, 0x1ff, 0x6, 0x0, 0x6, 0x0, 0x200, 0x70ce4b73, 0x2, 0x8, 0x7ff, 0x6ffa, 0xc, 0x1, 0x3, 0x0, 0x0, 0x2, 0x800, 0x814, 0xfff, 0x0, 0x3, 0x1ff, 0x5, 0x800, 0x7, 0x7, 0x8, 0xfffffff8, 0x7fffffff, 0xb788, 0x7, 0x0, 0x8000, 0xfffffffd, 0xb2, 0x3, 0x9, 0x6, 0x78, 0x0, 0x5, 0x6, 0x4, 0xfff, 0x8, 0x6, 0x4e, 0x7, 0x7ff, 0x1, 0x0, 0xffffffff, 0xc8f2, 0x3e6, 0x1, 0x898, 0xfd, 0x449541f5, 0x4, 0x8, 0x5, 0x9, 0xd838, 0x7, 0x9, 0x8, 0x8, 0x80, 0x3, 0x10001, 0x9, 0x401, 0xda, 0x100, 0xcaf8, 0x7fffffff, 0x4, 0x8, 0xc, 0x8, 0x5, 0x7, 0x0, 0x5, 0x800, 0x6, 0x200, 0x7a3d, 0x3ff27cb8, 0x8, 0x89f, 0x40b, 0x8, 0xfffffffc, 0x9d, 0x1, 0x6, 0x2, 0xe, 0xfffffffc, 0x644, 0x101, 0x8c, 0x7, 0x1, 0xfffffbff, 0x9, 0x8000, 0x8000, 0x4, 0xf, 0xb552, 0x6, 0x9, 0x0, 0x6, 0x0, 0x1, 0x8000, 0x5, 0x8, 0x1, 0x7, 0xff, 0x6, 0x800, 0x8, 0x70a5, 0x101, 0x80, 0x80, 0x94e, 0x5, 0x2, 0x7, 0x3, 0x0, 0x7, 0x4, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x53c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x7fffffff, 0x800, 0x8d, 0x4, 0xe5bc, 0x2947, 0x10, 0x2, 0xa, 0x1, 0x4, 0x849b, 0x2, 0x9, 0x1, 0x4, 0x7, 0x7, 0x9, 0x7fff, 0x28000000, 0xb, 0x10000, 0x5, 0x4, 0x1, 0x401, 0x8, 0x200, 0x0, 0x3, 0x7, 0x3, 0x55, 0x5, 0x80000000, 0x2, 0x10000, 0x1, 0x6, 0x0, 0x44f, 0x2, 0x101, 0xf, 0xdb51, 0x0, 0x8, 0x4, 0x0, 0x8, 0x3, 0x8, 0x0, 0x101, 0xffffffff, 0xd, 0xfffffffb, 0x1, 0x7, 0x1, 0x0, 0x5e73, 0x7, 0xfffffe00, 0x3ff, 0x5, 0x8, 0x4, 0x159, 0x9, 0x0, 0x2, 0x8, 0x800, 0x8, 0xb, 0x9, 0x0, 0xd8, 0x0, 0x0, 0x7, 0x1000, 0x2924, 0x162c6281, 0x5, 0x8001, 0x1, 0x18c, 0x1, 0x6, 0xffff7cee, 0x5, 0x429fec7c, 0x8, 0x1, 0xfffffff7, 0x4, 0xcb, 0x9, 0xce, 0x4, 0x3, 0xfff, 0x8001, 0x1, 0xce, 0x40, 0x0, 0x2, 0x9, 0xfffffffc, 0x769e70db, 0x8, 0x9, 0x1, 0x7ff, 0x7, 0x8, 0x100, 0x2, 0x1, 0xfffffffc, 0x8, 0x7, 0x4, 0x0, 0x7, 0x200, 0x0, 0x1, 0x5, 0x8, 0x0, 0xe, 0x9, 0x4, 0x6c1, 0x5, 0x1ff, 0x7c, 0x8e, 0x8, 0x9, 0x0, 0x5061, 0x80, 0x8, 0x7, 0x8, 0xffffffff, 0xd89, 0x8, 0x1, 0x200, 0x1, 0x9, 0xffffff9d, 0x9, 0xbed, 0xf, 0x547, 0x0, 0x4, 0x7, 0x3, 0x7fff, 0x4000040, 0x9, 0x5, 0xb, 0x9, 0x40, 0x1, 0x0, 0x9, 0x3609082b, 0x80000000, 0x6, 0x1, 0x49, 0x80000000, 0x7, 0x7, 0x9, 0x3, 0xffff0610, 0xffffffff, 0x9, 0x100, 0x1, 0x0, 0x2, 0x100, 0x4, 0xffff8000, 0xf92, 0x1, 0x1, 0x718, 0xd, 0x4, 0x1d9bb692, 0x1b75, 0xf, 0x1, 0x1, 0x1, 0x1b, 0x3, 0x80, 0x1, 0x2, 0x0, 0x7fffffff, 0x5, 0x3, 0xc, 0x0, 0x0, 0x8, 0x8, 0x6, 0xfffffff7, 0x5, 0xfffffffe, 0x1, 0xfffffffd, 0xffffffb3, 0x7, 0x1, 0x2, 0x4, 0x2, 0x6, 0x2, 0xfff, 0x9, 0x4, 0x8000, 0x1, 0x5, 0x5, 0x401, 0x7, 0x10000, 0x0, 0x247d504b, 0x6, 0x80, 0x9, 0xfffffffa, 0x7, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x3c, 0x6, "07d551f3a484b7d6274f62edc341dac49ddfa99b8d13220dc0375a81808aef93d3d80361b3e399c6306de12c1aae85eb2d235d1861a8e9de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x109c, 0x4, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x71adc583}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}, {0x1004, 0x6, "80443dc54dbd7463a4d5f7f2b9f2b6ee2c2c89b608610fdd34abe03f72231086f30ae7873762af082ca372402ba676efff79c0d0448f5415ccd512a709501f8fe019c0c5d9e76658481a2ad972bf7097d263081ef3e8cf98000c542355084bfa1bd0e1e3c7f9d910e6359a7220f0d5bc0206767670e010cbd7600283840a030b070f47870a1fc69743176ee7a50184e5bad9d324d536bbf2240bfa6c6a7106f4d8b4357b14888585f7942b68a84d39309cc94edb193c3673ce38868c71b7e84695e86866cf208b2577e816d1a7215c0cc552a138c0e93ca0520a97fbb799cab7c97d7416088907699994c6ca7cc1de58ce55df58380257a50361c227db199ad9378a91535fc69db9b2242b8e6231f6ce54593f61e4b1639579c8cd7c35a154c4e8b3f3be049f68bcfbc70cb44752cdd1d22fb128c275ea1154703759fadfecb7d1894fb66e2eb0c476e14e61add8a499f291a1f5eeb421ee17c09382add058354274fa62e2a02069f09c743a6c42a446037baae1d90503c9e52aa1dd6a408421618875a853698cf31141b38a826cd46403414f931872f0858ac6bdd74c03481a78be14cd914157a8e5c7cf7f94531d73c7a5ec3c51667b2a0aaf6a53b70a3afc71778decbac3d7c487f04547c3cb3869d1857c3b3fd3823f0810ae473e884e76bb4b3ece5c1e029e493ce9fb57e5398b99d3e53f27a7f6b6519d60d5f58ee48bd4ca4837d39193606ba4bf55af197e47b3296e6deabb43fc18d6592abd4ae5a4b5438af5723476a87e9c3cd3205bc38f3038d087d675625b2b3e962787663c27cee76cf04d5730f2675cc36b9a4235532e53b4159bfaa4f6bcbd3f2238187325de2f56eeb26218c6c40fb34c7563bf8562cc2b02c3f17d5515d1dce75d7cc89850ea02e244890e306d586acc83e130839a2159b938a77f59c823e8bddaa1fcb57dc406287a7ecb399fb5a03096bd9b1b7d81dc08b561d958b43aea2587df4e3943a888b3362a766260a4218a438dc73c03e8edfeccca8eae258973ca51c7d73f78190d865a056ac55677f85448c36e09508e6f1405171026aa43a8536d5ed91240ce4ffac7ad2dee4a7d0509222fbe805423a562740a046198f131300c985f14301b903e8e76e0bbe52fa7014c1a56abf7577b4bdfafd5c9b21698f36dea138c0ca44ed811dedefbf0f20813e965bf0b7cad3fa5f2a4fd335429849f84351c6cdebfa714dc38b4561ae74ca2532fe6c77e1e903aa016f8918e928ce8edc927a738558a2fa12cad781c2185243a2b4e9ac70213c5582e9a63a0a4b165ab7098010de9d8c7e7e86cf53a168596967f3bee461eb9f4dc9c6de2f932374d01eff3dd9077e4bfa8d6cbc9f5297457672b2551b4ee8962b93af35c8d01818ccbc7ae28c57891406859bd9ff0d913f637252bdb80c7ac25f84b8bf58c144e445791dde6c7655c01555cbff5ee7ac23da78ad2a1b82c0ba06043d7379eb4d0bd135c2b30f7e20f5f254bcf8b52de38f5fc4401309aac56cf1110b5e9cb9377e6899b9111f63526d869e14e1e059c11f0d9a676ac60f2e4767f0794309951c7fda1cdf193d5c5e41336850568d8137e34b8037ccf964c2c91cf2035cd2c74120aec39d39c0a0913036f16be772ecb65ac44b05857e008dc60a40487d9b6b3480c8b77521c8234f2601d882101bf640f4ca7e1c4c655c1ff74c18cde28b37a38bdaf09a5191d9d0d6c57f46231f1ac7facb0c07455a9bb79a7b1262be09bd211d2d430c4763cb7d0ceebc86a60b4f7ce056dfb4b484a1e31c9e8e7b286c3d996ee9833daa99f87ef26a3c4842baa2c45e402f2ac5b67a46d12622fb57430d99f491cf5c3154940e042cad7a638dbbf3f144adb992e18e5e1db2ab3faf415c6a98abdd3837949a733b1d57cd60c60c4e8c0a9f8a4e2a0664a2bef7908f961aeef7f4eb3b9b67bb0ecac23adf6dead9e5ae92c5f4e45b67a27581e3be79e5a09448acc1818adeb278aba07afdb1afcd4755e2543e4caf48654f3b344e0718dc6bed296583d65fc2fe0ee3e830078ccbfc632724a82cfc9c1dae5051abc752b44039381c34ea286fcd5dbad75e2f910001c8cec96d12337aed8ad825086f1c37e956d76d768acab33ea1bd45f9e480121f64bfd22cb8c79507c28fc862b0b04665c7a7605fd593223e519b154dded9c48702d6ed32221c8587cccc211a67e5ee27a46d3f5d03dd24b6316e82df9aa9ea430067542477803d3a39a7dbe33333a5d4b0adcf8045ea7aa264934e753ebcd29bde0afe9af0440f5cd2cfc60716221ae093f5187de6c47fc679f88af6ff77324eb9709215472e386504ceffbe494937e5b6e4558904527c6da4ca4edc73a7c93ff41cfcd49b25a41f69bcbbd99a6ae74bafff9b654db001a5ebdd40163e50d9fb797790c049e57e0a560f5d2b399c993bd67ff63dd5894aed5106b0a839489aa78bc97fe93e4efb28ea5fbe2420f6d220a09c5c033dc2c4bb248c440c7b5bc292ada1ece2f48b488948f1f5b3955fc4a2d81c2503f4dc06cb09ab11e88ea7013b2045b3acc531a3297a7a5907d9167d5061f3613ed3fbfd6c4d3c12542982bdd8f2a07484b79f84cf3153c140e947caf76043639b9832fd4a18e62e81ee82b0962b90627414f7dd8730e31e66e17c4641855148a924e8b301c71f0818b1c8f66920b32fee24610b50ecacf3d249fd0126d088ccd369db3c3c91b239633c054d292a649de87a92b08a204009fe2dc01261dbc145347925a8df3cc18a1c9f96b963463f79e98f4414a454e37ddfbc594fd1e064b33c27f4e438cc90decb16137237ceac74da994d3bb07f34c53a9de9ecd3544d4afac7e0c796d9655d6fc3fe3e2802f4ca98a2762813e658da5b1557c7bfbc0325c332b789576d3121fd30515c27ca0cb451f080f9a51b6b56d93b32f74a734c7a9dd524ff00d451d888a8d918361f2b6073725ee9783462347170616c04a05026ff4f6ade368c874db5d0fb573fa742702c632d3acfd9e148df3234f8783d8be0481747363f125630fd30b5f3591862936ab5aa707fddf8296ffeafe09ad6601023bb49274ccf7f7c8e7c2440119e34bd3463a70565d46da57c96e1da0dd6e9e4e3d2e535152d6ec538bb006be06cca5c457878827b9f02d8903eaa774d685ead50ae0f1a8eacdfda6d46ee97f9428279fa5a5069f907cc4f28044df9391c2425793d15bae08abe0138d25719e0e04111d6206c003153853ee7daab39de17ae6a1848b41c13e1367f08abef4331375cc37fa8b0c1df66ca6c6b99d98d22a7c04a99eb4b7e4abbcc139021d5ea7303e335b8ecc05de9509275f98f7af9c8d27b2e9e36471a1e04887ebfdd430419b69d431b8a97e42738723ae315a5ae3f4bdc4664f879e8447aebc9c786437018bdf128b579ca60b0b97b5e0a03be06554c89a17766a306cdabe05c52f2ac78d34b4ae4c7c34018689080c055c6472bb05501d0457760f12e4c02ef83ff4777f59e496e09ebb07c65f84bd5b6b50141e131a573812e2b8a599a971b9a693513a7f0884cd1c1b96ff72b90b2146a481578821f65e3c5869d0bbb312f8b2d516713adba1ca00bedafdb3084bc3f08e4c8e5a235759b0bd93b3cf2dda1ce7e840e701d8187f96c5d5870f76f062b51fbb13395ea88fb649cf98e603585727f0c015bcf1caad3e7170bed7f8106a17a1eb93eb05eedfd99a457374eae0239f7bda30ccd9d03d1046e5af066ded3840794f2b01cdc5085d303ef51586a7f7b3461cd783c003e46f5e22f03afc1c5050a7d8de365389f0dea78cb45028203f6d32bf42580ad0d13c6402b4b3fe061ccb46eb12933624a3432a18694efee46a1512d76d2f2d52e3372a220cb0f94d221b8e7cfa5718e81754111ef9ebc3939166ca85a6a53d510293b9e9b5851b4071a3a49cfea1810bc081ae8f62f76a81f2e48ba69a3ad3f43c98adafc717950bdc67cf75f4e0d829dff9530f2cd49f5cd673f74c525b00e8aee139e54da4fdb7dd078f5c166decae235f876ec0550d1dc5d19f9f503b60fd4e35bde95f15abf6d99b068451d8ff495d7e9a20786ab70c9d90883ffa97fd2350e59a9d5bacc8d85dce5219bbabb27a55c8520824c36e5d78f635ac62a1ce05c093694e3561bb4c60944c184653886aa1982642cdadfc351e6dae4e091d6aae17bce48522bd7787b8371dce4c690bf4b435ad05e2fd3aea03f0fb87867b6768dc4cc26c8cf072ac15c470f5cc2af493a26ad5ae69bb6d96c687539008da6aa340b3fa1c2990a1a434cd4730d96f3f54c76cc426c4748ae06f9c6b32d1b350ce87f58235196b0370de575647aceb58d84bb2a8bf9387468e4ad1de4fced876b8c79a001a6fb192fac7268815606db239fa9099df7ef616b65d7158cadc1ff2b9ca3ef687e07a602f646952f6277132be3aa69e8ea51327a4a8aeb278be2c79c94a1c5997d380b57bfc2cdc179a1def56d30d794e6d8986e5c0460e3a1b94c432111b9eda179ab4d11397b248e5c0495dbc0a62023439b91374515462d4371d35a91308e419c6bd664cbf59423a0f0b4988b20257fa0d9d9a2734114e9a253a4904fb1b5d0c4feb722a7c402788544070c50d8bb782129869605ce047798d2dd802008cc6e966d7bde76d5f31c75b635a82e740ae6c52b1e111668c8a88e44011902c6f78d9c27aa7acb5877dc507d7f311b20deb83184f6e86f02ec377d93d3c0f76d5b4708dd568aad94dd9a7e6c18e0cd9b9f9053345246191ab2fba9dbeb5ccb47a4f6499378759020e576c5e2ab23b79ce587e4bfc5313ef0fed31fb666f57e85565a53a1e040b7823a658975658c29d2c866c73dc8ceef3792f739a069e370df2c6f26a4064ec50a325a80843e791988a5f2f25b779a2b237038446bd979379f3c217e02f93ae7ad6a63ad3817bb44333804ed1d25af6d5ff53da37325c2f23505d03c2e6fb687a4ecdf94da0901157033f207aad64696028a2c8575a01032f5bc0183e5ff9feac74279b01f8cf7029435a73e59cf52b96bc694f310a7b17666d636ce3d96a192f34d8f394d8f4463e32517613ac7e98a83d0ef82d6fb340d31f9adcf5c46532f6e6fbee6b6cdfa6e5253f70dd249bf0fd6a55b3128a014207f5e38aa7d779f1a8c2859efaf2862290da3ec4ef79a723c434df0abc2cb2a7beafe7c382bbdaaa6a36bcd889d4b221ffa8e9ecebc869d5e9c7f27ecf501ef3c3b89c37fe6ea3b37609da9c26d3002fd1ec70bd08219dd5451b80459ac10e2587206bd990541be3f5a95e74b704f83e310898d53f84d84160f295d3b49dcb970ddb0600044cce87d2ed9971c98e0669a971bee68aa7a74177b46962bd7fb1acb0311bd9d54bc0fc1ca90e6212b5160b66318ff9d251d34a530e495fb937a1e2790e5d20304be9b585d8f6785b7a932e19be6870097e019f2a7ecffd2eddddef619b3ea06186d7fbd8cfc563399d35c0cb8ba1ac755f24c2133e5f881c436fe033ab0fa5479b0b094f2e31b1176c0ce883b561353b88e9df7d324b6ade0b82b29109b3013f96265dab42fae6e1b03d64b5aa32ff13f141cad92ead9516c5e328f7b41877c254724222c36ed93f5d5df7acbcbecf7c22cf355fa5c3785bdca0b5a920510af5907ba0e39c87de6f4dfd87f3e09eb6d5e3680bf3e2da5ada265ce09496add3f4438f5165064b2c2a0d6069c393477add913bc2000160337768c5135c6f642827ee94f7e59d5d72a5a5114a360f6140914eee73331f2d5420aa488ffe2849702965004e20f9491de035ebe516f9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0xcc, 0x1, [@m_bpf={0xc8, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0x7, 0x6, '.\x02\x00'}]}, {0x83, 0x6, "c7adbd2ece9aba3b285695f011834f8728c4792338b0d41c1902f66cc94e3624f69b5e446fad7876806441a064ec8f4765a6f51477f8e544bd6ae1fe308fe7e540849cb440d4c3a7430a21f5bb36dba42172af8ed241afbb642e8c475c887e83999b5d18791857851a7d480023215fca45e88145b1ccdb9e870777979700cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1ddc}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) mount(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000200)='.\x02\x00', 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000000207010400000000000000000500000a080005c0000000020900010073797a30000000000900010073797a3000000000"], 0x34}}, 0x40844) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010003904000000000000000000000097", @ANYRES32=r10, @ANYBLOB="01980000000000002c001a80100002800c00018008001900080000001800028014000180080019007f00000008001f000d000000"], 0x4c}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) keyctl$invalidate(0x15, r5) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r5}, 0x0, 0x0, 0x0) 368.554115ms ago: executing program 5 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6=@remote}}, {{@in6=@private0}}}, &(0x7f0000000540)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [{@appraise}, {@dont_hash}, {@hash}, {@pcr={'pcr', 0x3d, 0x2c}}, {@subj_role}, {@measure}, {@hash}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x1cc) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) 360.115452ms ago: executing program 5 (id=1339): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0xffffffffffffffa9, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x400000c, 0x4fbee}, 0x13, 0x1, 0x3, 0x2, 0x10, 0x4, 0x1b, 0x1c, 0x5, 0x9, {0x6, 0x8001, 0x5, 0x0, 0x9, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4000880) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r6, @ANYRES8=r0, @ANYRES16=r0], 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x24004800) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x200b, 0x2, 0x100000}, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x13e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$BLKPG(r9, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) lseek(r10, 0xff, 0x1) (async) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x9}}, 0x20) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)}, {&(0x7f0000000380)="aade1c7e9f0f327a9f91f519f466eb7a42cef4a59bec91de80ded16b6aa212a13367c1376f98ef79fbb6d41dbf21f744c05adac3da16bb4314c44e6db24ac25f5960d26e968968d1336b0e782635df5b083de90e5820542ed1aa9a4a26e4560ecb35507394ba5c33189befc801b9812e014a6631", 0x74}], 0x2) 208.734496ms ago: executing program 0 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) (async) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100283d7000fddbdf250c000000180005800c00028008000400041c000008000100756470"], 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100283d7000fddbdf250c000000180005800c00028008000400041c000008000100756470"], 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 99.939412ms ago: executing program 4 (id=1341): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 0s ago: executing program 4 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888) kernel console output (not intermixed with test programs): [ 135.983665][ T9209] RIP: 0033:0x7f6150f9e159 [ 135.983681][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.983698][ T9209] RSP: 002b:00007f6151ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 135.983717][ T9209] RAX: ffffffffffffffda RBX: 00007f6151225fa0 RCX: 00007f6150f9e159 [ 135.983729][ T9209] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 135.983740][ T9209] RBP: 00007f615103506b R08: 0000000000000000 R09: 0000000000000000 [ 135.983751][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.983761][ T9209] R13: 00007f6151226038 R14: 00007f6151225fa0 R15: 00007ffecf622478 [ 135.983787][ T9209] [ 136.042029][ C3] net_ratelimit: 346 callbacks suppressed [ 136.124130][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 136.158787][ T9218] program syz.1.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.924117][ T9260] __nla_validate_parse: 1 callbacks suppressed [ 136.924129][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 136.924141][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 136.924164][ T9260] netlink: 'syz.4.835': attribute type 7 has an invalid length. [ 136.995003][ T9264] FAULT_INJECTION: forcing a failure. [ 136.995003][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 136.995037][ T9264] CPU: 3 UID: 0 PID: 9264 Comm: syz.4.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.995074][ T9264] Tainted: [L]=SOFTLOCKUP [ 136.995082][ T9264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.995093][ T9264] Call Trace: [ 136.995099][ T9264] [ 136.995106][ T9264] dump_stack_lvl+0x100/0x190 [ 136.995135][ T9264] should_fail_ex.cold+0x5/0xa [ 136.995159][ T9264] should_failslab+0xc2/0x120 [ 136.995183][ T9264] __kmalloc_cache_noprof+0x91/0x6d0 [ 136.995209][ T9264] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 136.995241][ T9264] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 136.995268][ T9264] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.995295][ T9264] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 136.995315][ T9264] ? snd_pcm_oss_change_params_locked+0x9e0/0x39f0 [ 136.995334][ T9264] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 136.995360][ T9264] ? kfree+0x22b/0x6d0 [ 136.995388][ T9264] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 136.995420][ T9264] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 136.995438][ T9264] ? __pfx___mutex_lock+0x10/0x10 [ 136.995448][ T9264] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 136.995472][ T9264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.995486][ T9264] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 136.995506][ T9264] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 136.995526][ T9264] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 136.995546][ T9264] ? selinux_file_ioctl+0x13b/0x290 [ 136.995563][ T9264] ? selinux_file_ioctl+0xb6/0x290 [ 136.995585][ T9264] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 136.995612][ T9264] __x64_sys_ioctl+0x18e/0x210 [ 136.995633][ T9264] do_syscall_64+0x123/0x790 [ 136.995652][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.995664][ T9264] RIP: 0033:0x7f14dad9e159 [ 136.995674][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.995685][ T9264] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.995696][ T9264] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 136.995704][ T9264] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 136.995717][ T9264] RBP: 00007f14dbca1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.995724][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.995731][ T9264] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 136.995746][ T9264] [ 137.032037][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.079007][ T9267] lo speed is unknown, defaulting to 1000 [ 137.085708][ T9267] lo speed is unknown, defaulting to 1000 [ 137.088996][ T9267] lo speed is unknown, defaulting to 1000 [ 137.278148][ T5810] lo speed is unknown, defaulting to 1000 [ 137.278259][ T9267] infiniband sz1: set active [ 137.278277][ T9267] infiniband sz1: added lo [ 137.305285][ T9267] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 137.305321][ T9267] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 137.305383][ T9267] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 137.350773][ T9267] RDS/IB: sz1: added [ 137.351258][ T9267] smc: adding ib device sz1 with port count 1 [ 137.351367][ T9267] smc: ib device sz1 port 1 has no pnetid [ 137.352111][ T5879] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 137.355181][ T5810] lo speed is unknown, defaulting to 1000 [ 137.361715][ T9267] lo speed is unknown, defaulting to 1000 [ 137.502054][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 137.503995][ T5879] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 137.505122][ T5879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.505177][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.508763][ T5879] usb 6-1: config 0 descriptor?? [ 137.523384][ T5879] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 137.548582][ T9267] lo speed is unknown, defaulting to 1000 [ 137.688460][ T9267] lo speed is unknown, defaulting to 1000 [ 137.833471][ T9267] lo speed is unknown, defaulting to 1000 [ 138.000214][ T9267] lo speed is unknown, defaulting to 1000 [ 138.170524][ T5879] usb 6-1: USB disconnect, device number 7 [ 138.429615][ T9291] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 138.677240][ T9302] FAULT_INJECTION: forcing a failure. [ 138.677240][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 138.677267][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.4.846 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.677291][ T9302] Tainted: [L]=SOFTLOCKUP [ 138.677298][ T9302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.677310][ T9302] Call Trace: [ 138.677317][ T9302] [ 138.677324][ T9302] dump_stack_lvl+0x100/0x190 [ 138.677355][ T9302] should_fail_ex.cold+0x5/0xa [ 138.677381][ T9302] should_failslab+0xc2/0x120 [ 138.677405][ T9302] __kmalloc_noprof+0xfc/0x840 [ 138.677427][ T9302] ? constrain_params_by_rules+0x175/0xd20 [ 138.677459][ T9302] constrain_params_by_rules+0x175/0xd20 [ 138.677490][ T9302] ? __pfx_stack_trace_save+0x10/0x10 [ 138.677513][ T9302] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 138.677542][ T9302] ? kasan_save_stack+0x30/0x50 [ 138.677562][ T9302] ? kasan_save_track+0x14/0x30 [ 138.677585][ T9302] ? snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 138.677613][ T9302] ? snd_pcm_oss_ioctl+0x25aa/0x3790 [ 138.677639][ T9302] ? __x64_sys_ioctl+0x18e/0x210 [ 138.677657][ T9302] ? do_syscall_64+0x123/0x790 [ 138.677684][ T9302] ? snd_interval_refine+0x2d0/0x580 [ 138.677708][ T9302] snd_pcm_hw_refine+0x82a/0xb40 [ 138.677738][ T9302] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 138.677775][ T9302] ? kasan_save_track+0x14/0x30 [ 138.677795][ T9302] ? __kasan_kmalloc+0xaa/0xb0 [ 138.677819][ T9302] snd_pcm_hw_param_first+0x2b0/0x680 [ 138.677857][ T9302] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 138.677886][ T9302] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.677915][ T9302] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 138.677942][ T9302] ? snd_pcm_oss_change_params_locked+0x9e0/0x39f0 [ 138.677969][ T9302] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 138.677996][ T9302] ? kfree+0x22b/0x6d0 [ 138.678027][ T9302] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 138.678066][ T9302] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 138.678093][ T9302] ? __pfx___mutex_lock+0x10/0x10 [ 138.678109][ T9302] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 138.678148][ T9302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.678171][ T9302] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 138.678221][ T9302] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 138.678253][ T9302] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 138.678285][ T9302] ? selinux_file_ioctl+0x13b/0x290 [ 138.678306][ T9302] ? selinux_file_ioctl+0xb6/0x290 [ 138.678329][ T9302] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 138.678357][ T9302] __x64_sys_ioctl+0x18e/0x210 [ 138.678379][ T9302] do_syscall_64+0x123/0x790 [ 138.678397][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.678415][ T9302] RIP: 0033:0x7f14dad9e159 [ 138.678430][ T9302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.678447][ T9302] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.678465][ T9302] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 138.678478][ T9302] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 138.678489][ T9302] RBP: 00007f14dbca1090 R08: 0000000000000000 R09: 0000000000000000 [ 138.678500][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.678510][ T9302] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 138.678536][ T9302] [ 138.726752][ T9304] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 138.778674][ T9304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.800469][ T9308] bond2: (slave geneve2): making interface the new active one [ 138.809837][ T9308] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 138.862581][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.862601][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.862620][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.862637][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.864321][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 138.864330][ T42] audit: type=1400 audit(1790363409.829:1048): avc: denied { map } for pid=9311 comm="syz.1.850" path="pipe:[31104]" dev="pipefs" ino=31104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 138.864530][ T42] audit: type=1400 audit(1790363409.829:1049): avc: denied { execute } for pid=9311 comm="syz.1.850" path="pipe:[31104]" dev="pipefs" ino=31104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 138.866552][ T9312] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 (while UP) [ 138.884573][ T9312] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 138.884623][ T9312] SELinux: failed to load policy [ 138.894473][ T42] audit: type=1400 audit(1790363409.859:1050): avc: denied { mounton } for pid=9311 comm="syz.1.850" path="/242/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.894745][ T9314] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 138.894772][ T9314] SELinux: failed to load policy [ 138.900748][ T62] usb 5-1: USB disconnect, device number 6 [ 138.936204][ T62] usblp0: removed [ 139.020240][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'. [ 139.074488][ T5730] Bluetooth: hci0: command 0x1003 tx timeout [ 139.074504][ T5084] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.275682][ T9336] netlink: 156 bytes leftover after parsing attributes in process `syz.0.855'. [ 139.899499][ T42] audit: type=1400 audit(1790363410.859:1051): avc: denied { ioctl } for pid=9357 comm="syz.0.864" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.997133][ T9360] bridge0: port 3(team0) entered disabled state [ 140.005724][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.007774][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.039885][ T9361] CIFS: iocharset name too long [ 140.185533][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 140.185579][ T9363] IPv6: Can't replace route, no match found [ 140.186153][ T9363] fuse: Unknown parameter 'groFp_id' [ 140.284261][ T9365] bond4: entered promiscuous mode [ 140.509306][ T42] audit: type=1326 audit(1790363411.469:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.5.871" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec8b9e159 code=0x0 [ 140.556827][ T9383] overlayfs: cannot append lower layer [ 141.058540][ T9391] FAULT_INJECTION: forcing a failure. [ 141.058540][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 141.058566][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.4.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.058592][ T9391] Tainted: [L]=SOFTLOCKUP [ 141.058599][ T9391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.058610][ T9391] Call Trace: [ 141.058616][ T9391] [ 141.058625][ T9391] dump_stack_lvl+0x100/0x190 [ 141.058656][ T9391] should_fail_ex.cold+0x5/0xa [ 141.058682][ T9391] should_failslab+0xc2/0x120 [ 141.058710][ T9391] __kmalloc_cache_noprof+0x91/0x6d0 [ 141.058739][ T9391] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 141.058769][ T9391] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 141.058802][ T9391] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 141.058834][ T9391] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 141.058869][ T9391] ? snd_pcm_oss_change_params_locked+0x9e0/0x39f0 [ 141.058898][ T9391] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 141.058925][ T9391] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 141.058942][ T9391] ? kfree+0x22b/0x6d0 [ 141.058965][ T9391] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 141.058989][ T9391] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 141.059030][ T9391] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 141.059058][ T9391] ? __pfx___mutex_lock+0x10/0x10 [ 141.059077][ T9391] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 141.059119][ T9391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.059143][ T9391] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 141.059177][ T9391] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 141.059210][ T9391] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 141.059242][ T9391] ? selinux_file_ioctl+0x13b/0x290 [ 141.059265][ T9391] ? selinux_file_ioctl+0xb6/0x290 [ 141.059286][ T9391] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 141.059316][ T9391] __x64_sys_ioctl+0x18e/0x210 [ 141.059339][ T9391] do_syscall_64+0x123/0x790 [ 141.059359][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.059379][ T9391] RIP: 0033:0x7f14dad9e159 [ 141.059396][ T9391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.059414][ T9391] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.059434][ T9391] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 141.059447][ T9391] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 141.059459][ T9391] RBP: 00007f14dbca1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.059471][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.059483][ T9391] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 141.059510][ T9391] [ 141.132433][ T5575] net_ratelimit: 205 callbacks suppressed [ 141.132444][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 141.242450][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 141.322049][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.344093][ T5810] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 141.352667][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 141.366180][ T9404] FAULT_INJECTION: forcing a failure. [ 141.366180][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 141.366330][ T9404] CPU: 2 UID: 0 PID: 9404 Comm: syz.0.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.366361][ T9404] Tainted: [L]=SOFTLOCKUP [ 141.366373][ T9404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.366385][ T9404] Call Trace: [ 141.366393][ T9404] [ 141.366401][ T9404] dump_stack_lvl+0x100/0x190 [ 141.366437][ T9404] should_fail_ex.cold+0x5/0xa [ 141.366465][ T9404] should_failslab+0xc2/0x120 [ 141.366492][ T9404] __kmalloc_noprof+0xfc/0x840 [ 141.366516][ T9404] ? asymmetric_key_generate_id+0x7e/0x180 [ 141.366570][ T9404] asymmetric_key_generate_id+0x7e/0x180 [ 141.366605][ T9404] pkcs7_note_signed_info+0x18f/0x5c0 [ 141.366636][ T9404] asn1_ber_decoder+0x14cf/0x2170 [ 141.366681][ T9404] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 141.366717][ T9404] ? kasan_save_track+0x14/0x30 [ 141.366742][ T9404] ? __kasan_kmalloc+0xaa/0xb0 [ 141.366766][ T9404] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 141.366799][ T9404] ? pkcs7_parse_message+0x15f/0x870 [ 141.366828][ T9404] pkcs7_parse_message+0x289/0x870 [ 141.366855][ T9404] ? down_read+0x13b/0x4c0 [ 141.366886][ T9404] verify_pkcs7_signature+0x30/0xa0 [ 141.366921][ T9404] pkcs7_preparse+0x88/0xc0 [ 141.366946][ T9404] ? __pfx_pkcs7_view_content+0x10/0x10 [ 141.366974][ T9404] ? __pfx_pkcs7_preparse+0x10/0x10 [ 141.367002][ T9404] __key_create_or_update+0x463/0xe30 [ 141.367036][ T9404] ? __pfx___key_create_or_update+0x10/0x10 [ 141.367065][ T9404] ? lookup_user_key+0x3f3/0x1300 [ 141.367101][ T9404] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 141.367126][ T9404] ? __pfx_keyring_search_iterator+0x10/0x10 [ 141.367160][ T9404] key_create_or_update+0x42/0x60 [ 141.367190][ T9404] __do_sys_add_key+0x2e8/0x460 [ 141.367222][ T9404] ? __pfx___do_sys_add_key+0x10/0x10 [ 141.367264][ T9404] do_syscall_64+0x123/0x790 [ 141.367286][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.367307][ T9404] RIP: 0033:0x7f769ed9e159 [ 141.367325][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.367346][ T9404] RSP: 002b:00007f769cff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 141.367366][ T9404] RAX: ffffffffffffffda RBX: 00007f769f025fa0 RCX: 00007f769ed9e159 [ 141.367379][ T9404] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 141.367392][ T9404] RBP: 00007f769ee3506b R08: 0000000007f06586 R09: 0000000000000000 [ 141.367404][ T9404] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 141.367417][ T9404] R13: 00007f769f026038 R14: 00007f769f025fa0 R15: 00007ffc112e52d8 [ 141.367446][ T9404] [ 141.421777][ T9408] syzkaller0: entered promiscuous mode [ 141.421792][ T9408] syzkaller0: entered allmulticast mode [ 141.445390][ T9408] tipc: Started in network mode [ 141.445418][ T9408] tipc: Node identity 16f3df25fe04, cluster identity 4711 [ 141.445608][ T9408] tipc: Enabled bearer , priority 0 [ 141.446378][ T42] audit: type=1400 audit(1790363412.409:1053): avc: denied { nlmsg_read } for pid=9406 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.447141][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 141.453361][ T42] audit: type=1400 audit(1790363412.409:1054): avc: denied { read } for pid=9403 comm="syz.0.881" path="socket:[30517]" dev="sockfs" ino=30517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.458323][ T9406] tipc: Resetting bearer [ 141.488014][ T9406] tipc: Disabling bearer [ 141.493459][ T5810] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 141.494462][ T5810] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.494516][ T5810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.515701][ T5810] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 141.515808][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 141.515845][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 141.526592][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 141.526667][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 141.531601][ T5810] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 141.534246][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 141.545895][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 141.545937][ T5810] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 141.548988][ T5810] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.657429][ T9422] batadv_slave_0: Caught tx_queue_len zero misconfig [ 141.684731][ T42] audit: type=1400 audit(1790363412.649:1055): avc: denied { create } for pid=9426 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.685170][ T9427] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 141.685189][ T9427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.686401][ T9427] vhci_hcd vhci_hcd.0: Device attached [ 141.689988][ T9429] vhci_hcd: connection closed [ 141.692290][ T5575] vhci_hcd vhci_hcd.5: stop threads [ 141.692307][ T5575] vhci_hcd vhci_hcd.5: release socket [ 141.692317][ T5575] vhci_hcd vhci_hcd.5: disconnect device [ 141.784242][ T42] audit: type=1400 audit(1790363412.749:1056): avc: denied { getattr } for pid=9394 comm="syz.4.878" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.267164][ T9448] IPVS: Unknown mcast interface: netpci0 [ 142.323117][ T42] audit: type=1400 audit(1790363413.289:1057): avc: denied { read } for pid=9452 comm="syz.0.891" path="socket:[30647]" dev="sockfs" ino=30647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.352699][ T9460] 9p: Bad value for 'port' [ 142.392840][ T9462] FAULT_INJECTION: forcing a failure. [ 142.392840][ T9462] name failslab, interval 1, probability 0, space 0, times 0 [ 142.392870][ T9462] CPU: 1 UID: 0 PID: 9462 Comm: syz.5.893 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.392894][ T9462] Tainted: [L]=SOFTLOCKUP [ 142.392908][ T9462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.392920][ T9462] Call Trace: [ 142.392927][ T9462] [ 142.392935][ T9462] dump_stack_lvl+0x100/0x190 [ 142.392967][ T9462] should_fail_ex.cold+0x5/0xa [ 142.392995][ T9462] should_failslab+0xc2/0x120 [ 142.393021][ T9462] __kmalloc_noprof+0xfc/0x840 [ 142.393041][ T9462] ? kernel_text_address+0x8d/0x100 [ 142.393070][ T9462] ? constrain_params_by_rules+0x175/0xd20 [ 142.393104][ T9462] constrain_params_by_rules+0x175/0xd20 [ 142.393140][ T9462] ? __pfx_stack_trace_save+0x10/0x10 [ 142.393159][ T9462] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 142.393202][ T9462] ? __mutex_lock+0x26c/0x1bd0 [ 142.393220][ T9462] ? snd_interval_refine+0x2d0/0x580 [ 142.393246][ T9462] snd_pcm_hw_refine+0x82a/0xb40 [ 142.393276][ T9462] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 142.393306][ T9462] ? do_raw_spin_lock+0x128/0x260 [ 142.393334][ T9462] ? mark_held_locks+0x40/0x70 [ 142.393358][ T9462] snd_pcm_hw_params+0x3b4/0x1cd0 [ 142.393381][ T9462] ? do_raw_spin_lock+0x128/0x260 [ 142.393405][ T9462] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 142.393429][ T9462] ? mark_held_locks+0x40/0x70 [ 142.393449][ T9462] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 142.393475][ T9462] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.393504][ T9462] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 142.393533][ T9462] snd_pcm_kernel_ioctl+0x104/0x280 [ 142.393556][ T9462] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 142.393597][ T9462] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 142.393624][ T9462] ? __pfx___mutex_lock+0x10/0x10 [ 142.393641][ T9462] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 142.393681][ T9462] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.393705][ T9462] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 142.393737][ T9462] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 142.393769][ T9462] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 142.393803][ T9462] ? selinux_file_ioctl+0x13b/0x290 [ 142.393825][ T9462] ? selinux_file_ioctl+0xb6/0x290 [ 142.393848][ T9462] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 142.393878][ T9462] __x64_sys_ioctl+0x18e/0x210 [ 142.393905][ T9462] do_syscall_64+0x123/0x790 [ 142.393925][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.393944][ T9462] RIP: 0033:0x7efec8b9e159 [ 142.393960][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.393977][ T9462] RSP: 002b:00007efec9b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.393996][ T9462] RAX: ffffffffffffffda RBX: 00007efec8e25fa0 RCX: 00007efec8b9e159 [ 142.394008][ T9462] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 142.394019][ T9462] RBP: 00007efec9b06090 R08: 0000000000000000 R09: 0000000000000000 [ 142.394030][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.394041][ T9462] R13: 00007efec8e26038 R14: 00007efec8e25fa0 R15: 00007ffdb970ac68 [ 142.394067][ T9462] [ 142.509437][ T9466] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 142.509451][ T9466] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 142.580977][ T9471] deleting an unspecified loop device is not supported. [ 142.648964][ T5575] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 142.795764][ T9489] FAULT_INJECTION: forcing a failure. [ 142.795764][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 142.795790][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.5.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.795805][ T9489] Tainted: [L]=SOFTLOCKUP [ 142.795810][ T9489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.795817][ T9489] Call Trace: [ 142.795821][ T9489] [ 142.795826][ T9489] dump_stack_lvl+0x100/0x190 [ 142.795846][ T9489] should_fail_ex.cold+0x5/0xa [ 142.795863][ T9489] should_failslab+0xc2/0x120 [ 142.795878][ T9489] __kmalloc_noprof+0xfc/0x840 [ 142.795891][ T9489] ? constrain_params_by_rules+0x175/0xd20 [ 142.795911][ T9489] constrain_params_by_rules+0x175/0xd20 [ 142.795927][ T9489] ? kfree+0x22b/0x6d0 [ 142.795946][ T9489] ? constrain_params_by_rules+0xa88/0xd20 [ 142.795964][ T9489] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 142.795984][ T9489] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 142.796006][ T9489] ? snd_interval_refine+0x2d0/0x580 [ 142.796022][ T9489] snd_pcm_hw_refine+0x82a/0xb40 [ 142.796040][ T9489] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 142.796056][ T9489] ? snd_pcm_hw_refine+0x35c/0xb40 [ 142.796074][ T9489] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 142.796093][ T9489] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 142.796112][ T9489] snd_pcm_hw_param_first+0x2b0/0x680 [ 142.796132][ T9489] snd_pcm_hw_params+0x45c/0x1cd0 [ 142.796146][ T9489] ? do_raw_spin_lock+0x128/0x260 [ 142.796184][ T9489] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 142.796201][ T9489] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 142.796218][ T9489] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.796235][ T9489] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 142.796253][ T9489] snd_pcm_kernel_ioctl+0x104/0x280 [ 142.796267][ T9489] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 142.796291][ T9489] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 142.796309][ T9489] ? __pfx___mutex_lock+0x10/0x10 [ 142.796319][ T9489] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 142.796343][ T9489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.796357][ T9489] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 142.796377][ T9489] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 142.796400][ T9489] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 142.796420][ T9489] ? selinux_file_ioctl+0x13b/0x290 [ 142.796446][ T9489] ? selinux_file_ioctl+0xb6/0x290 [ 142.796461][ T9489] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 142.796480][ T9489] __x64_sys_ioctl+0x18e/0x210 [ 142.796494][ T9489] do_syscall_64+0x123/0x790 [ 142.796506][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.796518][ T9489] RIP: 0033:0x7efec8b9e159 [ 142.796528][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.796539][ T9489] RSP: 002b:00007efec9b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.796551][ T9489] RAX: ffffffffffffffda RBX: 00007efec8e25fa0 RCX: 00007efec8b9e159 [ 142.796559][ T9489] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 142.796565][ T9489] RBP: 00007efec9b06090 R08: 0000000000000000 R09: 0000000000000000 [ 142.796572][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.796579][ T9489] R13: 00007efec8e26038 R14: 00007efec8e25fa0 R15: 00007ffdb970ac68 [ 142.796594][ T9489] [ 143.111747][ T9511] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 143.237573][ T9518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 143.267163][ T9525] FAULT_INJECTION: forcing a failure. [ 143.267163][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 143.267194][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.5.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.267221][ T9525] Tainted: [L]=SOFTLOCKUP [ 143.267228][ T9525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.267240][ T9525] Call Trace: [ 143.267247][ T9525] [ 143.267255][ T9525] dump_stack_lvl+0x100/0x190 [ 143.267301][ T9525] should_fail_ex.cold+0x5/0xa [ 143.267329][ T9525] should_failslab+0xc2/0x120 [ 143.267360][ T9525] __kvmalloc_node_noprof+0x113/0x9b0 [ 143.267383][ T9525] ? snd_pcm_oss_change_params_locked+0x21e0/0x39f0 [ 143.267418][ T9525] ? snd_pcm_oss_change_params_locked+0x22d6/0x39f0 [ 143.267446][ T9525] ? snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 143.267479][ T9525] snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 143.267519][ T9525] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 143.267546][ T9525] ? __pfx___mutex_lock+0x10/0x10 [ 143.267570][ T9525] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 143.267612][ T9525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.267637][ T9525] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 143.267671][ T9525] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 143.267725][ T9525] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 143.267782][ T9525] ? selinux_file_ioctl+0x13b/0x290 [ 143.267806][ T9525] ? selinux_file_ioctl+0xb6/0x290 [ 143.267830][ T9525] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 143.267861][ T9525] __x64_sys_ioctl+0x18e/0x210 [ 143.267885][ T9525] do_syscall_64+0x123/0x790 [ 143.267906][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.267931][ T9525] RIP: 0033:0x7efec8b9e159 [ 143.267949][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.267967][ T9525] RSP: 002b:00007efec9b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.267987][ T9525] RAX: ffffffffffffffda RBX: 00007efec8e25fa0 RCX: 00007efec8b9e159 [ 143.268000][ T9525] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 143.268012][ T9525] RBP: 00007efec9b06090 R08: 0000000000000000 R09: 0000000000000000 [ 143.268023][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.268033][ T9525] R13: 00007efec8e26038 R14: 00007efec8e25fa0 R15: 00007ffdb970ac68 [ 143.268058][ T9525] [ 143.403850][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.251287][ T6961] usb 9-1: USB disconnect, device number 5 [ 144.256690][ T6961] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 144.263111][ T6961] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 144.263485][ T6961] keyspan 9-1:1.0: device disconnected [ 144.291832][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 144.291851][ T42] audit: type=1400 audit(1790363671.246:1069): avc: denied { create } for pid=9568 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.637415][ T9608] cifs_smb3_do_mount: 13 callbacks suppressed [ 144.637430][ T9608] CIFS: Attempting to mount //127.0.0.1/share [ 144.890826][ T42] audit: type=1326 audit(1790363671.846:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.5.935" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec8b9e159 code=0x0 [ 144.979912][ T42] audit: type=1400 audit(1790363671.936:1071): avc: denied { create } for pid=9622 comm="syz.0.936" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.980823][ T42] audit: type=1400 audit(1790363671.936:1072): avc: denied { link } for pid=9622 comm="syz.0.936" name="#18" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.982567][ T42] audit: type=1400 audit(1790363671.936:1073): avc: denied { rename } for pid=9622 comm="syz.0.936" name="#19" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.022391][ T9623] gre0: Caught tx_queue_len zero misconfig [ 145.122656][ T9626] ceph: Path missing in source [ 145.232132][ T9513] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 145.233860][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.461478][ T9638] loop6: detected capacity change from 0 to 7 [ 145.466536][ T9608] cifs_get_tcp_session: 13 callbacks suppressed [ 145.466553][ T9608] CIFS: VFS: Error connecting to socket. Aborting operation. [ 145.466588][ T9608] cifs_smb3_do_mount: 13 callbacks suppressed [ 145.466600][ T9608] CIFS: VFS: cifs_mount failed w/return code = -4 [ 145.469244][ C0] blk_print_req_error: 59 callbacks suppressed [ 145.469261][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.469341][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.473371][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.473453][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.475228][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.475290][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.475479][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.475527][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.476547][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.476598][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.476819][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.476866][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.477057][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.477102][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.477173][ T9638] ldm_validate_partition_table(): Disk read failed. [ 145.477326][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.477378][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.477555][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.477602][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.481802][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.481866][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.492436][ T9638] Dev loop6: unable to read RDB block 0 [ 145.493134][ T9638] loop6: unable to read partition table [ 145.493289][ T9638] loop6: partition table beyond EOD, truncated [ 145.493329][ T9638] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 145.511523][ T9638] ldm_validate_partition_table(): Disk read failed. [ 145.512297][ T9638] Dev loop6: unable to read RDB block 0 [ 145.513039][ T9638] loop6: unable to read partition table [ 145.513203][ T9638] loop6: partition table beyond EOD, truncated [ 145.573635][ T42] audit: type=1400 audit(1790363672.536:1074): avc: denied { mounton } for pid=9639 comm="syz.4.943" path="/178/sec/tomoyo/exception_policy" dev="securityfs" ino=3081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 145.573692][ T9640] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.816485][ T42] audit: type=1400 audit(1790363672.776:1075): avc: denied { getopt } for pid=9652 comm="syz.4.947" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.971872][ T9679] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.020274][ T9683] loop7: detected capacity change from 0 to 7 [ 146.034766][ T9679] use of bytesused == 0 is deprecated and will be removed in the future, [ 146.034774][ T9679] use the actual size instead. [ 146.193181][ T9689] FAULT_INJECTION: forcing a failure. [ 146.193181][ T9689] name failslab, interval 1, probability 0, space 0, times 0 [ 146.193212][ T9689] CPU: 3 UID: 0 PID: 9689 Comm: syz.4.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.193233][ T9689] Tainted: [L]=SOFTLOCKUP [ 146.193238][ T9689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.193247][ T9689] Call Trace: [ 146.193253][ T9689] [ 146.193259][ T9689] dump_stack_lvl+0x100/0x190 [ 146.193285][ T9689] should_fail_ex.cold+0x5/0xa [ 146.193314][ T9689] should_failslab+0xc2/0x120 [ 146.193335][ T9689] __kmalloc_noprof+0xfc/0x840 [ 146.193354][ T9689] ? constrain_params_by_rules+0x175/0xd20 [ 146.193384][ T9689] constrain_params_by_rules+0x175/0xd20 [ 146.193411][ T9689] ? stack_depot_save_flags+0x27/0x9f0 [ 146.193444][ T9689] ? __kasan_kmalloc+0xaa/0xb0 [ 146.193465][ T9689] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 146.193492][ T9689] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 146.193514][ T9689] ? __x64_sys_ioctl+0x18e/0x210 [ 146.193533][ T9689] ? do_syscall_64+0x123/0x790 [ 146.193551][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.193583][ T9689] ? rcu_is_watching+0x13/0xc0 [ 146.193608][ T9689] ? snd_interval_refine+0x2d0/0x580 [ 146.193659][ T9689] snd_pcm_hw_refine+0x82a/0xb40 [ 146.193689][ T9689] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 146.193719][ T9689] ? kasan_save_track+0x14/0x30 [ 146.193739][ T9689] ? __kasan_kmalloc+0xaa/0xb0 [ 146.193764][ T9689] ? __asan_memset+0x23/0x50 [ 146.193783][ T9689] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 146.193813][ T9689] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 146.193847][ T9689] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 146.193876][ T9689] ? snd_pcm_oss_get_active_substream+0x17f/0x1d0 [ 146.193904][ T9689] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 146.193931][ T9689] ? __pfx___mutex_lock+0x10/0x10 [ 146.193953][ T9689] ? __mutex_unlock_slowpath+0x35d/0x930 [ 146.193976][ T9689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.193997][ T9689] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 146.194028][ T9689] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 146.194058][ T9689] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 146.194090][ T9689] ? selinux_file_ioctl+0x13b/0x290 [ 146.194111][ T9689] ? selinux_file_ioctl+0xb6/0x290 [ 146.194135][ T9689] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 146.194165][ T9689] __x64_sys_ioctl+0x18e/0x210 [ 146.194187][ T9689] do_syscall_64+0x123/0x790 [ 146.194207][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.194226][ T9689] RIP: 0033:0x7f14dad9e159 [ 146.194243][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.194261][ T9689] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.194281][ T9689] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 146.194298][ T9689] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 146.194309][ T9689] RBP: 00007f14dbca1090 R08: 0000000000000000 R09: 0000000000000000 [ 146.194321][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.194332][ T9689] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 146.194358][ T9689] [ 146.232129][ T13] net_ratelimit: 119 callbacks suppressed [ 146.232136][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 146.342261][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 146.373110][ T42] audit: type=1400 audit(1790363673.336:1076): avc: denied { remount } for pid=9699 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 146.454721][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 146.562332][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 146.633018][ T9711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.962'. [ 146.636391][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 146.676390][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 146.892609][ T42] audit: type=1400 audit(1790363673.846:1077): avc: denied { write } for pid=9726 comm="syz.4.967" name="nullb" dev="configfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.919632][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 146.945080][ T9730] mmap: syz.0.965 (9730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.061129][ T9728] null_blk: disk rnullb0 created [ 147.191452][ T9734] FAULT_INJECTION: forcing a failure. [ 147.191452][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 147.191475][ T9734] CPU: 3 UID: 0 PID: 9734 Comm: syz.4.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.191490][ T9734] Tainted: [L]=SOFTLOCKUP [ 147.191495][ T9734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.191502][ T9734] Call Trace: [ 147.191506][ T9734] [ 147.191511][ T9734] dump_stack_lvl+0x100/0x190 [ 147.191531][ T9734] should_fail_ex.cold+0x5/0xa [ 147.191549][ T9734] should_failslab+0xc2/0x120 [ 147.191564][ T9734] __kmalloc_cache_noprof+0x91/0x6d0 [ 147.191581][ T9734] ? __asan_memset+0x23/0x50 [ 147.191593][ T9734] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 147.191614][ T9734] snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 147.191634][ T9734] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 147.191653][ T9734] ? snd_pcm_oss_get_active_substream+0x17f/0x1d0 [ 147.191671][ T9734] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 147.191689][ T9734] ? __pfx___mutex_lock+0x10/0x10 [ 147.191701][ T9734] ? __mutex_unlock_slowpath+0x35d/0x930 [ 147.191718][ T9734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.191732][ T9734] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 147.191751][ T9734] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 147.191771][ T9734] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 147.191791][ T9734] ? selinux_file_ioctl+0x13b/0x290 [ 147.191804][ T9734] ? selinux_file_ioctl+0xb6/0x290 [ 147.191819][ T9734] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 147.191837][ T9734] __x64_sys_ioctl+0x18e/0x210 [ 147.191850][ T9734] do_syscall_64+0x123/0x790 [ 147.191862][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.191874][ T9734] RIP: 0033:0x7f14dad9e159 [ 147.191884][ T9734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.191895][ T9734] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.191927][ T9734] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 147.191935][ T9734] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 147.191942][ T9734] RBP: 00007f14dbca1090 R08: 0000000000000000 R09: 0000000000000000 [ 147.191949][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.191955][ T9734] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 147.191971][ T9734] [ 147.313500][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.497408][ T42] audit: type=1400 audit(1790363674.456:1078): avc: denied { unlink } for pid=9735 comm="syz.4.969" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 147.548283][ T9740] 9p: Bad value for 'rfdno' [ 147.771656][ T9752] netlink: 'syz.0.975': attribute type 4 has an invalid length. [ 147.771667][ T9752] netlink: 17 bytes leftover after parsing attributes in process `syz.0.975'. [ 148.449025][ T9769] FAULT_INJECTION: forcing a failure. [ 148.449025][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 148.449106][ T9769] CPU: 2 UID: 0 PID: 9769 Comm: syz.1.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.449134][ T9769] Tainted: [L]=SOFTLOCKUP [ 148.449142][ T9769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.449155][ T9769] Call Trace: [ 148.449163][ T9769] [ 148.449171][ T9769] dump_stack_lvl+0x100/0x190 [ 148.449356][ T9769] should_fail_ex.cold+0x5/0xa [ 148.449387][ T9769] should_failslab+0xc2/0x120 [ 148.449414][ T9769] __kmalloc_cache_noprof+0x91/0x6d0 [ 148.449447][ T9769] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 148.449485][ T9769] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 148.449518][ T9769] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.449551][ T9769] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 148.449581][ T9769] ? snd_pcm_oss_change_params_locked+0x9e0/0x39f0 [ 148.449613][ T9769] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 ** 21 printk messages dropped ** ** 206 printk messages dropped ** ** 211 printk messages dropped ** ** 245 printk messages dropped ** ** 244 printk messages dropped ** ** 224 printk messages dropped ** ** 208 printk messages dropped ** ** 199 printk messages dropped ** ** 159 printk messages dropped ** ** 74 printk messages dropped ** ** 423 printk messages dropped ** ** 160 printk messages dropped ** ** 156 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 137 printk messages dropped ** ** 148 printk messages dropped ** ** 179 printk messages dropped ** ** 173 printk messages dropped ** ** 143 printk messages dropped ** ** 122 printk messages dropped ** ** 121 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 121 printk messages dropped ** ** 131 printk messages dropped ** ** 126 printk messages dropped ** ** 131 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 124 printk messages dropped ** ** 133 printk messages dropped ** ** 131 printk messages dropped ** ** 138 printk messages dropped ** ** 162 printk messages dropped ** ** 201 printk messages dropped ** ** 173 printk messages dropped ** ** 165 printk messages dropped ** ** 209 printk messages dropped ** ** 218 printk messages dropped ** ** 480 printk messages dropped ** ** 199 printk messages dropped ** ** 189 printk messages dropped ** ** 189 printk messages dropped ** ** 92 printk messages dropped ** ** 196 printk messages dropped ** ** 207 printk messages dropped ** ** 217 printk messages dropped ** ** 224 printk messages dropped ** ** 199 printk messages dropped ** ** 197 printk messages dropped ** ** 188 printk messages dropped ** ** 212 printk messages dropped ** ** 255 printk messages dropped ** ** 218 printk messages dropped ** ** 192 printk messages dropped ** ** 158 printk messages dropped ** ** 169 printk messages dropped ** ** 161 printk messages dropped ** ** 183 printk messages dropped ** ** 159 printk messages dropped ** ** 184 printk messages dropped ** ** 166 printk messages dropped ** ** 183 printk messages dropped ** ** 206 printk messages dropped ** ** 194 printk messages dropped ** ** 185 printk messages dropped ** ** 219 printk messages dropped ** ** 208 printk messages dropped ** ** 190 printk messages dropped ** ** 200 printk messages dropped ** ** 213 printk messages dropped ** ** 225 printk messages dropped ** ** 221 printk messages dropped ** ** 200 printk messages dropped ** ** 113 printk messages dropped ** [ 148.991069][ T9780] db_root: cannot be changed because it's in use [ 149.118661][ T9780] db_root: cannot be changed because it's in use [ 149.257541][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 149.258781][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 149.281517][ T9786] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 149.359027][ T9786] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 149.392975][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.493781][ T9792] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 149.516503][ T9792] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 149.526471][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 149.672730][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.692568][ T9786] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 149.706814][ T9786] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 149.799932][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.819118][ T9804] ptp ptp0: new virtual clock ptp2 [ 149.819141][ T9804] ptp ptp0: guarantee physical clock free running [ 149.862720][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.124799][ T5810] hsr0: entered promiscuous mode [ 150.191465][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.237870][ T9839] xt_MASQUERADE: bad MAP_IPS. [ 150.239054][ T9839] netlink: 112 bytes leftover after parsing attributes in process `syz.5.996'. [ 150.400811][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 150.400824][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 150.425933][ T9842] netlink: 96 bytes leftover after parsing attributes in process `syz.5.997'. [ 150.429631][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 150.429640][ T42] audit: type=1400 audit(1790363677.386:1082): avc: denied { read } for pid=9843 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.882437][ T9858] loop8: detected capacity change from 0 to 16384 [ 150.953147][ T9858] loop8: detected capacity change from 16384 to 16383 [ 151.009114][ T9861] FAULT_INJECTION: forcing a failure. [ 151.009114][ T9861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.009144][ T9861] CPU: 2 UID: 0 PID: 9861 Comm: syz.5.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.009169][ T9861] Tainted: [L]=SOFTLOCKUP [ 151.009176][ T9861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.009187][ T9861] Call Trace: [ 151.009193][ T9861] [ 151.009202][ T9861] dump_stack_lvl+0x100/0x190 [ 151.009234][ T9861] should_fail_ex.cold+0x5/0xa [ 151.009261][ T9861] _copy_to_user+0x32/0xd0 [ 151.009304][ T9861] tomoyo_flush+0x161/0x520 [ 151.009336][ T9861] tomoyo_read_exception+0x8a9/0x15e0 [ 151.009371][ T9861] tomoyo_read_control+0x29c/0x540 [ 151.009401][ T9861] ? __pfx_tomoyo_read+0x10/0x10 [ 151.009426][ T9861] vfs_read+0x1e4/0xb40 [ 151.009447][ T9861] ? lock_acquire+0x1d1/0x380 [ 151.009466][ T9861] ? __fget_files+0x34/0x3d0 [ 151.009489][ T9861] ? __pfx_vfs_read+0x10/0x10 [ 151.009506][ T9861] ? find_held_lock+0x2b/0x80 [ 151.009533][ T9861] ? __fget_files+0x215/0x3d0 [ 151.009560][ T9861] ? __fget_files+0x21f/0x3d0 [ 151.009590][ T9861] ksys_read+0x12a/0x250 [ 151.009609][ T9861] ? __pfx_ksys_read+0x10/0x10 [ 151.009638][ T9861] do_syscall_64+0x123/0x790 [ 151.009659][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.009678][ T9861] RIP: 0033:0x7efec8b9e159 [ 151.009699][ T9861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.009717][ T9861] RSP: 002b:00007efec9b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.009735][ T9861] RAX: ffffffffffffffda RBX: 00007efec8e25fa0 RCX: 00007efec8b9e159 [ 151.009747][ T9861] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 151.009759][ T9861] RBP: 00007efec9b06090 R08: 0000000000000000 R09: 0000000000000000 [ 151.009770][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.009782][ T9861] R13: 00007efec8e26038 R14: 00007efec8e25fa0 R15: 00007ffdb970ac68 [ 151.009809][ T9861] [ 151.057703][ T42] audit: type=1400 audit(1790363678.016:1083): avc: denied { mounton } for pid=9863 comm="syz.5.1003" path="/139/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 151.239430][ T9875] lo speed is unknown, defaulting to 1000 [ 151.262173][ T6818] net_ratelimit: 120 callbacks suppressed [ 151.262180][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 151.402297][ T42] audit: type=1400 audit(1790363678.366:1084): avc: denied { mounton } for pid=9884 comm="syz.0.1008" path="/230/file0" dev="9p" ino=71827829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.402806][ T9885] overlayfs: workdir and upperdir must reside under the same mount [ 151.455919][ T42] audit: type=1400 audit(1790363678.416:1085): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.472219][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.518683][ T42] audit: type=1400 audit(1790363678.476:1086): avc: denied { write } for pid=9889 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.586952][ T42] audit: type=1400 audit(1790363678.536:1087): avc: denied { name_bind } for pid=9892 comm="syz.4.1010" src=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 151.692685][ T9901] xt_socket: unknown flags 0x48 [ 151.845516][ T42] audit: type=1400 audit(1790363678.806:1088): avc: denied { create } for pid=9919 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.848680][ T42] audit: type=1400 audit(1790363678.806:1089): avc: denied { bind } for pid=9919 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.851310][ T42] audit: type=1400 audit(1790363678.806:1090): avc: denied { accept } for pid=9919 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.853344][ T42] audit: type=1400 audit(1790363678.816:1091): avc: denied { write } for pid=9919 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.140219][ T9942] FAULT_INJECTION: forcing a failure. [ 152.140219][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.140239][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.0.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.140255][ T9942] Tainted: [L]=SOFTLOCKUP [ 152.140259][ T9942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.140266][ T9942] Call Trace: [ 152.140271][ T9942] [ 152.140275][ T9942] dump_stack_lvl+0x100/0x190 [ 152.140296][ T9942] should_fail_ex.cold+0x5/0xa [ 152.140312][ T9942] _copy_to_user+0x32/0xd0 [ 152.140327][ T9942] tomoyo_flush+0x161/0x520 [ 152.140345][ T9942] tomoyo_read_exception+0x5cd/0x15e0 [ 152.140367][ T9942] tomoyo_read_control+0x29c/0x540 [ 152.140385][ T9942] ? __pfx_tomoyo_read+0x10/0x10 [ 152.140401][ T9942] vfs_read+0x1e4/0xb40 [ 152.140414][ T9942] ? lock_acquire+0x1d1/0x380 [ 152.140426][ T9942] ? __fget_files+0x34/0x3d0 [ 152.140440][ T9942] ? __pfx_vfs_read+0x10/0x10 [ 152.140451][ T9942] ? find_held_lock+0x2b/0x80 [ 152.140467][ T9942] ? __fget_files+0x215/0x3d0 [ 152.140484][ T9942] ? __fget_files+0x21f/0x3d0 [ 152.140503][ T9942] ksys_read+0x12a/0x250 [ 152.140514][ T9942] ? __pfx_ksys_read+0x10/0x10 [ 152.140530][ T9942] do_syscall_64+0x123/0x790 [ 152.140543][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.140556][ T9942] RIP: 0033:0x7f769ed9e159 [ 152.140566][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.140577][ T9942] RSP: 002b:00007f769cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.140589][ T9942] RAX: ffffffffffffffda RBX: 00007f769f025fa0 RCX: 00007f769ed9e159 [ 152.140596][ T9942] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 152.140603][ T9942] RBP: 00007f769cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.140610][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.140616][ T9942] R13: 00007f769f026038 R14: 00007f769f025fa0 R15: 00007ffc112e52d8 [ 152.140631][ T9942] [ 152.368047][ T9965] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 152.389598][ T9965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.437487][ T9965] can: request_module (can-proto-0) failed. [ 152.627110][ T9981] gadgetfs: bound to dummy_udc driver [ 152.865513][ T9987] can0: slcan on ttynull. [ 152.872071][ T5096] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.874117][ C3] gadgetfs: connected [ 152.875452][ T5096] gadgetfs: disconnected [ 152.903120][ T9986] can0 (unregistered): slcan off ttynull. [ 152.904659][ T5730] Bluetooth: hci4: link tx timeout [ 152.904817][ T5730] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.907126][ T5730] Bluetooth: hci4: link tx timeout [ 152.907132][ T5730] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.912444][ T9989] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 152.975876][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 153.032243][ C3] gadgetfs: connected [ 153.032446][ T5096] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 153.033227][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.036677][ C3] gadgetfs: configuration #1 [ 153.050063][ T5096] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input16 [ 153.088937][ C3] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 153.177946][T10005] tipc: Enabled bearer , priority 0 [ 153.179109][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 153.179121][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 153.179675][T10005] scsi_strcpy_devinfo: vendor string '¼Q<ò?ÎÝ�cS4¶F6o+É,r' is too long [ 153.179686][T10005] scsi_strcpy_devinfo: model string ']RT6XåÕà‡öQÔ囿œü…ôÆ2Ë�½2?j†d‡}u8�9Oÿuû’dG4ñäÄÎS­4�hx­ªõ¯Ilà§\jª/K#WX[Ïjõ—*¨óé0Õi�C' is too long [ 153.193939][T10004] tipc: Disabling bearer [ 153.217319][ C1] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 153.219691][T10008] binder: BINDER_SET_CONTEXT_MGR already set [ 153.219698][T10008] binder: 10002:10008 ioctl 4018620d 200000000240 returned -16 [ 153.350635][ T9977] gadgetfs: suspended from state 3 [ 153.351247][ T5810] usb 5-1: USB disconnect, device number 7 [ 153.353324][ T9977] gadgetfs: disconnected [ 153.355635][ T5730] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 153.357457][T10023] FAULT_INJECTION: forcing a failure. [ 153.357457][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 153.357478][T10023] CPU: 3 UID: 0 PID: 10023 Comm: syz.4.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.357495][T10023] Tainted: [L]=SOFTLOCKUP [ 153.357500][T10023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.357507][T10023] Call Trace: [ 153.357525][T10023] [ 153.357532][T10023] dump_stack_lvl+0x100/0x190 [ 153.357556][T10023] should_fail_ex.cold+0x5/0xa [ 153.357575][T10023] should_failslab+0xc2/0x120 [ 153.357594][T10023] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.357611][T10023] ? anon_vma_clone+0x2b3/0xca0 [ 153.357631][T10023] anon_vma_clone+0x2b3/0xca0 [ 153.357653][T10023] __split_vma+0x750/0x1de0 [ 153.357675][T10023] ? __lock_acquire+0x5c0/0x1f40 [ 153.357690][T10023] ? __pfx___split_vma+0x10/0x10 [ 153.357712][T10023] ? unwind_next_frame+0x3be/0x2090 [ 153.357729][T10023] ? rcu_is_watching+0x13/0xc0 [ 153.357746][T10023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.357770][T10023] vms_gather_munmap_vmas+0x1d2/0x1720 [ 153.357795][T10023] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 153.357814][T10023] ? mtree_range_walk+0x72b/0xb70 [ 153.357842][T10023] ? mas_walk+0x260/0x310 [ 153.357865][T10023] __mmap_region+0x4cc/0x32e0 [ 153.357886][T10023] ? __pfx_check_buffer+0x10/0x10 [ 153.357906][T10023] ? __pfx___mmap_region+0x10/0x10 [ 153.357925][T10023] ? __pfx_trace_clock_local+0x10/0x10 [ 153.357942][T10023] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 153.357961][T10023] ? __lock_acquire+0x5c0/0x1f40 [ 153.357985][T10023] ? __lock_acquire+0x5c0/0x1f40 [ 153.358000][T10023] ? do_raw_spin_unlock+0x145/0x1e0 [ 153.358015][T10023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.358039][T10023] ? rcu_is_watching+0x13/0xc0 [ 153.358054][T10023] ? trace_hrtimer_start+0x77/0x220 [ 153.358072][T10023] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 153.358110][T10023] ? avc_has_perm_noaudit+0x145/0x470 [ 153.358134][T10023] mmap_region+0x3db/0x6d0 [ 153.358148][T10023] ? __pfx_mmap_region+0x10/0x10 [ 153.358159][T10023] ? rcu_is_watching+0x13/0xc0 [ 153.358175][T10023] ? cap_capable+0x107/0x430 [ 153.358187][T10023] ? bpf_lsm_capable+0x9/0x10 [ 153.358204][T10023] ? security_capable+0x80/0x260 [ 153.358224][T10023] do_mmap+0x12c7/0x1c30 [ 153.358243][T10023] ? lock_acquire+0x1d1/0x380 [ 153.358256][T10023] ? __pfx_do_mmap+0x10/0x10 [ 153.358272][T10023] ? __pfx___might_resched+0x10/0x10 [ 153.358288][T10023] ? __pfx_down_write_killable+0x10/0x10 [ 153.358304][T10023] vm_mmap_pgoff+0x28d/0x470 [ 153.358320][T10023] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 153.358336][T10023] ? __pfx_do_futex+0x10/0x10 [ 153.358355][T10023] ksys_mmap_pgoff+0xe4/0x610 [ 153.358369][T10023] ? __x64_sys_futex+0x358/0x4d0 [ 153.358386][T10023] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 153.358400][T10023] ? xfd_validate_state+0x129/0x190 [ 153.358415][T10023] __x64_sys_mmap+0x125/0x190 [ 153.358430][T10023] do_syscall_64+0x123/0x790 [ 153.358443][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.358455][T10023] RIP: 0033:0x7f14dad9e159 [ 153.358466][T10023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.358477][T10023] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 153.358489][T10023] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 153.358496][T10023] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 153.358503][T10023] RBP: 00007f14dae3506b R08: ffffffffffffffff R09: 0000000000000000 [ 153.358511][T10023] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 153.358518][T10023] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 153.358533][T10023] [ 154.022059][T10056] No source specified [ 154.205793][T10058] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 154.767076][T10068] __nla_validate_parse: 5 callbacks suppressed [ 154.767091][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 154.768848][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1059'. [ 154.885516][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1061'. [ 154.900590][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803687d000: rx timeout, send abort [ 154.903061][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88803687d000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.912848][T10078] netlink: 'syz.5.1062': attribute type 2 has an invalid length. [ 155.002172][ T5730] Bluetooth: hci4: command 0x0406 tx timeout [ 155.063243][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.063953][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.067797][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.067888][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.067968][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.068048][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.068154][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.160878][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 155.164931][T10108] batman_adv: batadv0: Adding interface: veth0 [ 155.164937][T10108] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.165855][T10108] batman_adv: batadv0: Interface activated: veth0 [ 155.168871][T10108] batman_adv: batadv0: Interface deactivated: veth0 [ 155.168883][T10108] batman_adv: batadv0: Removing interface: veth0 [ 155.590260][T10129] trusted_key: encrypted_key: master key parameter 'deftu{t' is invalid [ 155.885505][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 155.885516][ T42] audit: type=1400 audit(1790363682.846:1102): avc: denied { write } for pid=10137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.925824][ T42] audit: type=1400 audit(1790363682.886:1103): avc: denied { write } for pid=10141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.004356][T10150] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 156.022289][ T42] audit: type=1400 audit(1790363682.986:1104): avc: denied { write } for pid=10148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.075519][ T42] audit: type=1400 audit(1790363683.036:1105): avc: denied { write } for pid=10155 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.119743][T10160] hsr_slave_1 (unregistering): left promiscuous mode [ 156.195434][ T1133] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 156.200714][ T1133] ata1.00: configured for UDMA/100 [ 156.254809][ T42] audit: type=1400 audit(1790363683.216:1106): avc: denied { write } for pid=10161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.272491][ C1] net_ratelimit: 1355 callbacks suppressed [ 156.303620][ T42] audit: type=1400 audit(1790363683.266:1107): avc: denied { write } for pid=10173 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.319201][T10170] netlink: 'syz.4.1084': attribute type 4 has an invalid length. [ 156.319224][T10170] netlink: 'syz.4.1084': attribute type 8 has an invalid length. [ 156.336660][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 156.352277][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 156.418693][ T42] audit: type=1400 audit(1790363683.376:1108): avc: denied { write } for pid=10176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.478889][ T42] audit: type=1400 audit(1790363683.436:1109): avc: denied { write } for pid=10182 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.557963][ T42] audit: type=1400 audit(1790363683.516:1110): avc: denied { write } for pid=10186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.579514][ T42] audit: type=1400 audit(1790363683.536:1111): avc: denied { cmd } for pid=10189 comm="iou-wrk-10190" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 156.784860][T10207] Could not find key with description: [syz] [ 156.784870][T10207] process_request_key_err: No key [ 156.784876][T10207] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 156.784883][T10207] One or more global auth toks could not properly register; rc = [-2] [ 156.784902][T10207] Error validating options; rc = [-2] [ 157.045335][ T229] IPVS: starting estimator thread 0... [ 157.069520][T10216] tc action pedit offset 132 out of bounds [ 157.152029][T10220] IPVS: using max 44 ests per chain, 105600 per kthread [ 157.207716][T10223] netlink: 'syz.4.1094': attribute type 3 has an invalid length. [ 157.277974][T10221] fuse: blksize only supported for fuseblk [ 157.306859][T10228] rdma_rxe: rxe_newlink: failed to add lo [ 157.377030][T10231] FAULT_INJECTION: forcing a failure. [ 157.377030][T10231] name failslab, interval 1, probability 0, space 0, times 0 [ 157.377048][T10231] CPU: 2 UID: 0 PID: 10231 Comm: syz.0.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.377065][T10231] Tainted: [L]=SOFTLOCKUP [ 157.377070][T10231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.377077][T10231] Call Trace: [ 157.377081][T10231] [ 157.377086][T10231] dump_stack_lvl+0x100/0x190 [ 157.377106][T10231] should_fail_ex.cold+0x5/0xa [ 157.377122][T10231] should_failslab+0xc2/0x120 [ 157.377145][T10231] __kmalloc_cache_noprof+0x91/0x6d0 [ 157.377165][T10231] ? pty_common_install+0xdf/0xb30 [ 157.377181][T10231] pty_common_install+0xdf/0xb30 [ 157.377195][T10231] ? __pfx_pty_unix98_install+0x10/0x10 [ 157.377208][T10231] tty_init_dev.part.0+0x9e/0x470 [ 157.377226][T10231] tty_init_dev+0x60/0x80 [ 157.377242][T10231] ? __pfx_ptmx_open+0x10/0x10 [ 157.377252][T10231] ptmx_open+0x128/0x360 [ 157.377268][T10231] ? __pfx_ptmx_open+0x10/0x10 [ 157.377279][T10231] chrdev_open+0x234/0x6a0 [ 157.377295][T10231] ? __pfx_chrdev_open+0x10/0x10 [ 157.377310][T10231] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 157.377331][T10231] do_dentry_open+0x6ab/0x14d0 [ 157.377343][T10231] ? __pfx_chrdev_open+0x10/0x10 [ 157.377362][T10231] vfs_open+0x82/0x3f0 [ 157.377379][T10231] path_openat+0x19fa/0x2440 [ 157.377397][T10231] ? __pfx_path_openat+0x10/0x10 [ 157.377416][T10231] do_file_open+0x20e/0x430 [ 157.377432][T10231] ? __pfx_do_file_open+0x10/0x10 [ 157.377458][T10231] ? _raw_spin_unlock+0x28/0x50 [ 157.377474][T10231] ? alloc_fd+0x471/0x7a0 [ 157.377493][T10231] do_sys_openat2+0x10f/0x1e0 [ 157.377510][T10231] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.377532][T10231] __x64_sys_openat+0x12d/0x210 [ 157.377548][T10231] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.377570][T10231] do_syscall_64+0x123/0x790 [ 157.377583][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.377595][T10231] RIP: 0033:0x7f769ed9e159 [ 157.377604][T10231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.377615][T10231] RSP: 002b:00007f769cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.377627][T10231] RAX: ffffffffffffffda RBX: 00007f769f025fa0 RCX: 00007f769ed9e159 [ 157.377634][T10231] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 157.377660][T10231] RBP: 00007f769ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 157.377667][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.377673][T10231] R13: 00007f769f026038 R14: 00007f769f025fa0 R15: 00007ffc112e52d8 [ 157.377689][T10231] [ 157.379998][T10231] FAULT_INJECTION: forcing a failure. [ 157.379998][T10231] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.380015][T10231] CPU: 2 UID: 60928 PID: 10231 Comm: syz.0.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.380031][T10231] Tainted: [L]=SOFTLOCKUP [ 157.380035][T10231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.380041][T10231] Call Trace: [ 157.380045][T10231] [ 157.380050][T10231] dump_stack_lvl+0x100/0x190 [ 157.380068][T10231] should_fail_ex.cold+0x5/0xa [ 157.380086][T10231] get_futex_key+0x1d0/0x14f0 [ 157.380130][T10231] ? __pfx_get_futex_key+0x10/0x10 [ 157.380145][T10231] ? xdp_umem_create+0xc99/0x1200 [ 157.380161][T10231] ? kasan_save_stack+0x3f/0x50 [ 157.380174][T10231] ? kasan_save_stack+0x30/0x50 [ 157.380190][T10231] futex_wait_setup+0x91/0x540 [ 157.380205][T10231] __futex_wait+0x19f/0x300 [ 157.380218][T10231] ? __pfx___futex_wait+0x10/0x10 [ 157.380228][T10231] ? futex_hash+0x311/0x400 [ 157.380243][T10231] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.380256][T10231] ? __pfx_futex_hash+0x10/0x10 [ 157.380287][T10231] ? find_held_lock+0x2b/0x80 [ 157.380303][T10231] ? xsk_setsockopt+0x9ef/0xab0 [ 157.380317][T10231] ? xsk_setsockopt+0x9ef/0xab0 [ 157.380334][T10231] futex_wait+0xe6/0x370 [ 157.380346][T10231] ? __pfx_futex_wait+0x10/0x10 [ 157.380365][T10231] do_futex+0x265/0x440 [ 157.380380][T10231] ? __pfx_do_futex+0x10/0x10 [ 157.380396][T10231] ? rcu_is_watching+0x13/0xc0 [ 157.380411][T10231] ? do_sock_setsockopt+0x101/0x1d0 [ 157.380428][T10231] ? kfree+0x1e5/0x6d0 [ 157.380443][T10231] ? selinux_socket_setsockopt+0x6a/0x80 [ 157.380458][T10231] __x64_sys_futex+0x34f/0x4d0 [ 157.380475][T10231] ? __pfx___x64_sys_futex+0x10/0x10 [ 157.380492][T10231] ? __sys_setsockopt+0x1b5/0x220 [ 157.380510][T10231] do_syscall_64+0x123/0x790 [ 157.380522][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.380534][T10231] RIP: 0033:0x7f769ed9e159 [ 157.380543][T10231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.380554][T10231] RSP: 002b:00007f769cff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.380566][T10231] RAX: ffffffffffffffda RBX: 00007f769f025fa8 RCX: 00007f769ed9e159 [ 157.380573][T10231] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f769f025fa8 [ 157.380580][T10231] RBP: 00007f769f025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.380586][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.380593][T10231] R13: 00007f769f026038 R14: 00007ffc112e51f0 R15: 00007ffc112e52d8 [ 157.380608][T10231] [ 157.423061][T10236] xt_cgroup: invalid path, errno=-2 [ 157.602055][ T5809] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 157.752206][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 157.752910][ T5809] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 157.753769][ T5809] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.753802][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.755328][ T5809] usb 9-1: config 0 descriptor?? [ 157.761476][ T5809] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 157.997625][T10228] lo speed is unknown, defaulting to 1000 [ 158.179141][T10259] cgroup: fork rejected by pids controller in /syz5 [ 158.434574][ T1143] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 158.434609][ T1143] sr 2:0:0:0: [sr0] tag#7 Sense Key : Illegal Request [current] [ 158.434637][ T1143] sr 2:0:0:0: [sr0] tag#7 Add. Sense: Invalid command operation code [ 158.434664][ T1143] sr 2:0:0:0: [sr0] tag#7 CDB: Send OPC info 54 68 6e 84 0f 91 b9 5b b8 a7 09 9d [ 158.605198][T10324] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 158.610096][T10324] nbd: must specify a device to reconfigure [ 158.796945][ T1848] usb 9-1: USB disconnect, device number 6 [ 158.949282][T10347] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 158.949304][T10347] bond1: entered allmulticast mode [ 158.949546][T10345] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 159.021223][T10361] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 159.276754][T10379] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 159.545500][T10387] netlink: 'syz.5.1126': attribute type 4 has an invalid length. [ 159.775655][T10392] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 159.775669][T10392] __nla_validate_parse: 69 callbacks suppressed [ 159.775676][T10392] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1128'. [ 160.737964][T10479] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `€Ý—‚Õb—¢áì"^‰é¶ø6Có�2W [ 160.737964][T10479] ø¬Ò7 [ 160.776219][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 160.816652][T10481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1145'. [ 160.978179][T10485] tipc: MTU too low for tipc bearer [ 161.079040][T10492] Trying to write to read-only block-device nullb0 [ 161.087376][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 161.087392][ T42] audit: type=1400 audit(1790363688.046:1126): avc: denied { bind } for pid=10486 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.088045][ T42] audit: type=1400 audit(1790363688.046:1127): avc: denied { connect } for pid=10486 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.088728][ T42] audit: type=1400 audit(1790363688.046:1128): avc: denied { ioctl } for pid=10486 comm="syz.4.1149" path="socket:[37759]" dev="sockfs" ino=37759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.296838][T10501] No control pipe specified [ 161.360444][T10504] net_ratelimit: 147 callbacks suppressed [ 161.373987][T10504] lo speed is unknown, defaulting to 1000 [ 161.524329][T10514] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1158'. [ 161.524329][T10518] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1158'. [ 161.553798][T10521] netlink: 'syz.5.1157': attribute type 1 has an invalid length. [ 161.652369][ T5096] bridge0: entered promiscuous mode [ 162.116823][T10536] No control pipe specified [ 162.237739][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 162.305757][ T42] audit: type=1400 audit(1790363689.266:1129): avc: denied { watch watch_reads } for pid=10549 comm="syz.0.1168" path="/289/file5" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.463196][T10561] No control pipe specified [ 162.503319][ T42] audit: type=1400 audit(1790363689.466:1130): avc: denied { call } for pid=10564 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 162.503697][T10565] jffs2: notice: (10565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 162.565332][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.565775][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.678016][T10575] FAULT_INJECTION: forcing a failure. [ 162.678016][T10575] name failslab, interval 1, probability 0, space 0, times 0 [ 162.678032][T10575] CPU: 0 UID: 0 PID: 10575 Comm: syz.4.1176 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.678050][T10575] Tainted: [L]=SOFTLOCKUP [ 162.678055][T10575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.678063][T10575] Call Trace: [ 162.678068][T10575] [ 162.678073][T10575] dump_stack_lvl+0x100/0x190 [ 162.678095][T10575] should_fail_ex.cold+0x5/0xa [ 162.678112][T10575] should_failslab+0xc2/0x120 [ 162.678147][T10575] kmem_cache_alloc_noprof+0x92/0x6a0 [ 162.678161][T10575] ? __asan_memcpy+0x3c/0x60 [ 162.678173][T10575] ? __kernfs_new_node+0xd2/0xa10 [ 162.678196][T10575] __kernfs_new_node+0xd2/0xa10 [ 162.678218][T10575] ? __pfx___kernfs_new_node+0x10/0x10 [ 162.678239][T10575] ? lock_acquire+0x1d1/0x380 [ 162.678251][T10575] ? kernfs_root+0x23/0x2a0 [ 162.678268][T10575] ? find_held_lock+0x2b/0x80 [ 162.678284][T10575] ? kernfs_root+0xee/0x2a0 [ 162.678300][T10575] ? kernfs_root+0xee/0x2a0 [ 162.678321][T10575] kernfs_new_node+0x117/0x150 [ 162.678335][T10575] kernfs_create_link+0xcc/0x240 [ 162.678351][T10575] sysfs_do_create_link_sd+0x90/0x140 [ 162.678368][T10575] sysfs_create_link+0x61/0xc0 [ 162.678385][T10575] device_add+0x675/0x1970 [ 162.678403][T10575] ? __pfx_device_add+0x10/0x10 [ 162.678419][T10575] ? kfree_const+0x5a/0x70 [ 162.678429][T10575] ? kfree+0x1e5/0x6d0 [ 162.678450][T10575] device_create_groups_vargs+0x1f8/0x270 [ 162.678471][T10575] device_create+0xed/0x130 [ 162.678490][T10575] ? __pfx_device_create+0x10/0x10 [ 162.678525][T10575] ? lockdep_init_map_type+0x5c/0x250 [ 162.678542][T10575] ? timer_init_key+0x150/0x310 [ 162.678559][T10575] ? ieee80211_roc_setup+0x136/0x270 [ 162.678577][T10575] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 162.678592][T10575] mac80211_hwsim_new_radio+0x37c/0x6510 [ 162.678617][T10575] ? __asan_memset+0x23/0x50 [ 162.678629][T10575] ? __nla_validate_parse+0x1e7/0x28b0 [ 162.678644][T10575] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 162.678666][T10575] hwsim_new_radio_nl+0xc6b/0x13f0 [ 162.678683][T10575] ? trace_kmalloc+0xeb/0x110 [ 162.678699][T10575] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 162.678720][T10575] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 162.678737][T10575] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 162.678757][T10575] genl_family_rcv_msg_doit+0x214/0x300 [ 162.678775][T10575] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.678796][T10575] ? bpf_lsm_capable+0x9/0x10 [ 162.678813][T10575] ? security_capable+0x80/0x260 [ 162.678832][T10575] ? ns_capable+0xd2/0xf0 [ 162.678846][T10575] genl_rcv_msg+0x560/0x800 [ 162.678864][T10575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.678879][T10575] ? __lock_acquire+0x5c0/0x1f40 [ 162.678891][T10575] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 162.678913][T10575] netlink_rcv_skb+0x159/0x420 [ 162.678928][T10575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.678944][T10575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.678965][T10575] ? netlink_deliver_tap+0x1ae/0xcc0 [ 162.678980][T10575] genl_rcv+0x28/0x40 [ 162.678995][T10575] netlink_unicast+0x585/0x850 [ 162.679012][T10575] ? __pfx_netlink_unicast+0x10/0x10 [ 162.679030][T10575] netlink_sendmsg+0x8b0/0xda0 [ 162.679048][T10575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.679063][T10575] ? selinux_socket_sendmsg+0x198/0x2f0 [ 162.679080][T10575] ____sys_sendmsg+0xa4d/0xbe0 [ 162.679090][T10575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.679105][T10575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.679123][T10575] ___sys_sendmsg+0x190/0x1e0 [ 162.679142][T10575] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.679154][T10575] ? futex_wait+0x11e/0x370 [ 162.679172][T10575] ? find_held_lock+0x2b/0x80 [ 162.679200][T10575] __sys_sendmsg+0x160/0x210 [ 162.679218][T10575] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.679243][T10575] do_syscall_64+0x123/0x790 [ 162.679257][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.679269][T10575] RIP: 0033:0x7f14dad9e159 [ 162.679280][T10575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.679291][T10575] RSP: 002b:00007f14dbca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.679303][T10575] RAX: ffffffffffffffda RBX: 00007f14db025fa0 RCX: 00007f14dad9e159 [ 162.679311][T10575] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 162.679318][T10575] RBP: 00007f14dae3506b R08: 0000000000000000 R09: 0000000000000000 [ 162.679325][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.679332][T10575] R13: 00007f14db026038 R14: 00007f14db025fa0 R15: 00007ffe727d0398 [ 162.679348][T10575] [ 162.728203][ T6961] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 162.812193][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.896107][T10579] gfs2: error -5 reading superblock [ 162.900440][T10581] UBIFS error (pid: 10581): cannot open "ubi0:test", error -19 [ 162.967006][T10587] syzkaller0: entered promiscuous mode [ 162.967014][T10587] syzkaller0: entered allmulticast mode [ 162.972642][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 162.980716][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 162.981002][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.005786][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 163.010009][ T10] gspca_spca501: reg write: error -32 [ 163.010023][ T10] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 163.010085][ T10] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 163.046445][ T6961] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.049886][ T6961] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.049911][ T6961] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.049928][ T6961] usb 6-1: config 0 interface 0 has no altsetting 0 [ 163.053200][ T6961] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.053219][ T6961] usb 6-1: Product: syz [ 163.053233][ T6961] usb 6-1: Manufacturer: syz [ 163.053246][ T6961] usb 6-1: SerialNumber: syz [ 163.059741][ T6961] usb 6-1: config 0 descriptor?? [ 163.065539][ T6961] usb 6-1: selecting invalid altsetting 0 [ 163.313653][ T42] audit: type=1400 audit(1790363690.276:1131): avc: denied { write } for pid=10604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.342286][ T6961] usb 6-1: USB disconnect, device number 8 [ 163.389868][ T42] audit: type=1400 audit(1790363690.346:1132): avc: denied { write } for pid=10607 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.422140][ T5096] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 163.593689][ T5096] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 163.594506][ T5096] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.594530][ T5096] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 163.594543][ T5096] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.595765][ T5096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.595776][ T5096] usb 9-1: Product: syz [ 163.595783][ T5096] usb 9-1: Manufacturer: syz [ 163.597954][T10601] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.599062][ T5096] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 163.607147][ T5096] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 164.103092][ T42] audit: type=1400 audit(1790363691.066:1133): avc: denied { ioctl } for pid=10621 comm="syz.0.1190" path="socket:[36758]" dev="sockfs" ino=36758 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.178026][ T1086] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.178846][T10627] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.192134][ T42] audit: type=1400 audit(1790363691.146:1134): avc: denied { write } for pid=10629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.240875][ T42] audit: type=1400 audit(1790363691.196:1135): avc: denied { write } for pid=10634 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.266863][T10637] ptrace attach of "/syz-executor exec"[7995] was attempted by "/syz-executor exec"[10637] [ 164.311607][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 164.311640][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 164.552080][ T6961] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 164.682464][ T6961] usb 10-1: device descriptor read/64, error -71 [ 164.922600][ T6961] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 165.052213][ T6961] usb 10-1: device descriptor read/64, error -71 [ 165.163515][ T6961] usb usb10-port1: attempt power cycle [ 165.502023][ T6961] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 165.523155][ T6961] usb 10-1: device descriptor read/8, error -71 [ 165.762506][ T6961] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 165.782737][ T6961] usb 10-1: device descriptor read/8, error -71 [ 165.892952][ T6961] usb usb10-port1: unable to enumerate USB device [ 166.075921][ T6961] usb 9-1: USB disconnect, device number 7 [ 166.082958][ T6961] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 166.083334][ T6961] garmin_gps 9-1:1.0: device disconnected [ 166.193644][ T5084] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.193682][ T5730] Bluetooth: hci0: command 0x1003 tx timeout [ 166.247761][T10667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 166.247782][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 166.247882][T10667] vhci_hcd vhci_hcd.0: Device attached [ 166.252088][T10670] vhci_hcd: connection closed [ 166.253711][T10661] vhci_hcd vhci_hcd.0: stop threads [ 166.253726][T10661] vhci_hcd vhci_hcd.0: release socket [ 166.253742][T10661] vhci_hcd vhci_hcd.0: disconnect device [ 166.372243][ T5575] net_ratelimit: 166 callbacks suppressed [ 166.372254][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 166.492208][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 166.586226][ T6961] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 166.699267][T10681] overlayfs: conflicting lowerdir path [ 166.740135][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 166.752700][ T6961] usb 9-1: Using ep0 maxpacket: 8 [ 166.753548][ T6961] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.754624][ T6961] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.754648][ T6961] usb 9-1: config 0 has no interface number 0 [ 166.754677][ T6961] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.754720][ T6961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.758751][ T6961] usb 9-1: config 0 descriptor?? [ 166.777517][ T6961] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.044016][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 167.044028][ T42] audit: type=1400 audit(1790363694.006:1139): avc: denied { setattr } for pid=10699 comm="syz.0.1211" name="CAN_J1939" dev="sockfs" ino=41990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.116164][T10703] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 167.177437][T10705] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 167.177459][T10705] bond3: entered allmulticast mode [ 167.195379][T10705] bridge2: entered promiscuous mode [ 167.199812][T10705] bridge2: entered allmulticast mode [ 167.200151][T10705] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 167.257967][T10707] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1213'. [ 167.356417][T10712] autofs: Unknown parameter '0x0000000000000000' [ 167.436898][T10714] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 167.438459][T10714] fuse: blksize only supported for fuseblk [ 167.480236][T10717] FAULT_INJECTION: forcing a failure. [ 167.480236][T10717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.480265][T10717] CPU: 3 UID: 0 PID: 10717 Comm: syz.5.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.480289][T10717] Tainted: [L]=SOFTLOCKUP [ 167.480296][T10717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.480307][T10717] Call Trace: [ 167.480314][T10717] [ 167.480321][T10717] dump_stack_lvl+0x100/0x190 [ 167.480353][T10717] should_fail_ex.cold+0x5/0xa [ 167.480379][T10717] _copy_to_user+0x32/0xd0 [ 167.480402][T10717] simple_read_from_buffer+0xcb/0x170 [ 167.480428][T10717] proc_fail_nth_read+0x1af/0x230 [ 167.480453][T10717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.480478][T10717] ? rw_verify_area+0xce/0x6d0 [ 167.480506][T10717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.480530][T10717] vfs_read+0x1e4/0xb40 [ 167.480550][T10717] ? lock_acquire+0x1d1/0x380 [ 167.480569][T10717] ? __fget_files+0x34/0x3d0 [ 167.480593][T10717] ? __pfx_vfs_read+0x10/0x10 [ 167.480609][T10717] ? find_held_lock+0x2b/0x80 [ 167.480635][T10717] ? __fget_files+0x215/0x3d0 [ 167.480663][T10717] ? __fget_files+0x21f/0x3d0 [ 167.480693][T10717] ksys_read+0x12a/0x250 [ 167.480712][T10717] ? __pfx_ksys_read+0x10/0x10 [ 167.480741][T10717] do_syscall_64+0x123/0x790 [ 167.480762][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.480782][T10717] RIP: 0033:0x7efec8b5e98e [ 167.480799][T10717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.480817][T10717] RSP: 002b:00007efec9b05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.480836][T10717] RAX: ffffffffffffffda RBX: 00007efec9b066c0 RCX: 00007efec8b5e98e [ 167.480849][T10717] RDX: 000000000000000f RSI: 00007efec9b060a0 RDI: 0000000000000004 [ 167.480861][T10717] RBP: 00007efec9b06090 R08: 0000000000000000 R09: 0000000000000000 [ 167.480873][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.480885][T10717] R13: 00007efec8e26038 R14: 00007efec8e25fa0 R15: 00007ffdb970ac68 [ 167.480914][T10717] [ 167.579423][ T5810] usb 9-1: USB disconnect, device number 8 [ 167.652406][T10725] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1219'. [ 167.698598][ T42] audit: type=1400 audit(1790363694.656:1140): avc: denied { wake_alarm } for pid=10726 comm="syz.5.1220" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.806031][ T5096] libceph: connect (1)[c::]:6789 error -101 [ 167.806202][ T5096] libceph: mon0 (1)[c::]:6789 connect error [ 167.809498][ T5096] libceph: connect (1)[c::]:6789 error -101 [ 167.809606][ T5096] libceph: mon0 (1)[c::]:6789 connect error [ 168.047961][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 168.047977][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 168.047998][T10735] netlink: 'syz.1.1222': attribute type 19 has an invalid length. [ 168.057549][T10735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.067171][ T5096] libceph: connect (1)[c::]:6789 error -101 [ 168.067350][ T5096] libceph: mon0 (1)[c::]:6789 connect error [ 168.164131][T10738] autofs: Unknown parameter 'fd0x0000000000000000' [ 168.277217][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880408b6800: rx timeout, send abort [ 168.573879][ T62] libceph: connect (1)[c::]:6789 error -101 [ 168.574059][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 168.602919][T10729] ceph: No mds server is up or the cluster is laggy [ 168.777342][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880408b6800: abort rx timeout. Force session deactivation [ 171.392367][ T5575] net_ratelimit: 221 callbacks suppressed [ 171.392378][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 171.502143][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 171.612267][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 171.722230][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 171.832851][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 171.942350][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 176.462210][ T6818] net_ratelimit: 140 callbacks suppressed [ 176.462217][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 176.572674][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 176.685833][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 176.792235][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 176.912216][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 177.022325][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 181.482943][ T6818] net_ratelimit: 106 callbacks suppressed [ 181.482951][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 181.592288][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 181.702340][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 181.812966][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 181.922281][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 183.872253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.836187][ T42] audit: type=1400 audit(1790363712.796:1141): avc: denied { mounton } for pid=10762 comm="syz.4.1231" path="/252/file0" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.841106][ T42] audit: type=1400 audit(1790363712.796:1142): avc: denied { read write } for pid=10762 comm="syz.4.1231" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 185.841482][ T42] audit: type=1400 audit(1790363712.796:1143): avc: denied { open } for pid=10762 comm="syz.4.1231" path="/252/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 185.920868][T10776] autofs: Unknown parameter 'fd0x0000000000000000' [ 185.974177][ T42] audit: type=1400 audit(1790363712.936:1144): avc: denied { setopt } for pid=10785 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.160185][ T42] audit: type=1400 audit(1790363713.116:1145): avc: denied { setopt } for pid=10795 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 186.250525][ T42] audit: type=1400 audit(1790363713.206:1146): avc: denied { accept } for pid=10809 comm="syz.5.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.253518][ T42] audit: type=1400 audit(1790363713.216:1147): avc: denied { write } for pid=10809 comm="syz.5.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.311183][T10812] mmap: syz.4.1244 (10812): VmData 37855232 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 186.315595][ T6818] nvme nvme0: rdma_resolve_route failed (-110). [ 186.321187][T10810] nvme nvme0: rdma connection establishment failed (-19) [ 186.429659][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1246'. [ 186.475891][T10825] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 186.492311][ T6818] net_ratelimit: 165 callbacks suppressed [ 186.492319][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 186.531305][ T42] audit: type=1326 audit(1790363713.486:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.5.1247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec8b9e159 code=0x0 [ 186.600099][T10827] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1248'. [ 186.602674][ T25] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 186.603137][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 186.640325][T10829] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 186.662241][ T42] audit: type=1326 audit(1790363713.616:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.5.1247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec8b9e159 code=0x0 [ 186.712175][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 186.773473][ T25] usb 9-1: not running at top speed; connect to a high speed hub [ 186.773499][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.777209][ T25] usb 9-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.777232][ T25] usb 9-1: config 1 interface 0 has no altsetting 0 [ 186.779549][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.779565][ T25] usb 9-1: Product: syz [ 186.779578][ T25] usb 9-1: Manufacturer: syz [ 186.779591][ T25] usb 9-1: SerialNumber: syz [ 186.822423][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 186.878884][T10835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1251'. [ 186.944102][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 186.995523][ T25] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 187.002909][ T25] usb 9-1: USB disconnect, device number 9 [ 187.041872][T10847] FAULT_INJECTION: forcing a failure. [ 187.041872][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 187.041922][T10847] CPU: 1 UID: 0 PID: 10847 Comm: syz.0.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.041949][T10847] Tainted: [L]=SOFTLOCKUP [ 187.041956][T10847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.041967][T10847] Call Trace: [ 187.041974][T10847] [ 187.041981][T10847] dump_stack_lvl+0x100/0x190 [ 187.042012][T10847] should_fail_ex.cold+0x5/0xa [ 187.042038][T10847] should_failslab+0xc2/0x120 [ 187.042062][T10847] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 187.042084][T10847] ? __d_alloc+0x35/0xa50 [ 187.042114][T10847] __d_alloc+0x35/0xa50 [ 187.042142][T10847] d_alloc_pseudo+0x1c/0xc0 [ 187.042161][T10847] alloc_file_pseudo+0x118/0x290 [ 187.042189][T10847] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 187.042215][T10847] ? alloc_fd+0x471/0x7a0 [ 187.042243][T10847] sock_alloc_file+0x50/0x210 [ 187.042271][T10847] __sys_socket+0x1c0/0x260 [ 187.042290][T10847] ? __pfx___sys_socket+0x10/0x10 [ 187.042315][T10847] __x64_sys_socket+0x72/0xb0 [ 187.042333][T10847] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.042362][T10847] do_syscall_64+0x123/0x790 [ 187.042380][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.042399][T10847] RIP: 0033:0x7f769ed9e159 [ 187.042414][T10847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.042431][T10847] RSP: 002b:00007f769cf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 187.042449][T10847] RAX: ffffffffffffffda RBX: 00007f769f026270 RCX: 00007f769ed9e159 [ 187.042462][T10847] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 187.042472][T10847] RBP: 00007f769ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.042483][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.042494][T10847] R13: 00007f769f026308 R14: 00007f769f026270 R15: 00007ffc112e52d8 [ 187.042520][T10847] [ 187.044656][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 187.063185][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 187.172388][ T5575] bond1: (slave dummy0): failed to get link speed/duplex [ 187.586833][T10855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 187.891688][T10860] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1258'. [ 187.926812][ T42] audit: type=1400 audit(1790363714.886:1150): avc: denied { cmd } for pid=10858 comm="iou-wrk-10860" path="socket:[42163]" dev="sockfs" ino=42163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.927283][T10871] 9pnet_virtio: no channels available for device 127.0.0.1 [ 188.009648][T10871] kvm [10870]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 188.010769][T10871] kvm [10870]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 188.268521][ T1086] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.326478][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 188.326497][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 188.455168][T10897] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 188.456498][ T5730] Bluetooth: hci1: connection err: -111 [ 188.478486][T10897] dlm: no local IP address has been set [ 188.478499][T10897] dlm: cannot start dlm midcomms -107 [ 188.479588][T10897] (syz.4.1267,10897,1):user_dlm_register:674 ERROR: status = -107 [ 188.479617][T10897] (syz.4.1267,10897,1):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "domain1" [ 189.420015][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.423432][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.427028][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.427575][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.991167][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.991671][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.272428][ T5084] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.371171][T10948] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.381047][T10950] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 190.459287][T10954] netlink: 'syz.5.1279': attribute type 23 has an invalid length. [ 190.459303][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1279'. [ 190.607027][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 190.650048][T10960] ./cgroup: Can't lookup blockdev [ 190.703494][T10968] Process accounting resumed [ 190.788998][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.828801][ T7628] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.831201][ T229] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.932702][T10975] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1285'. [ 191.244693][T10993] FAULT_INJECTION: forcing a failure. [ 191.244693][T10993] name failslab, interval 1, probability 0, space 0, times 0 [ 191.244711][T10993] CPU: 1 UID: 0 PID: 10993 Comm: syz.0.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.244726][T10993] Tainted: [L]=SOFTLOCKUP [ 191.244731][T10993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.244738][T10993] Call Trace: [ 191.244742][T10993] [ 191.244747][T10993] dump_stack_lvl+0x100/0x190 [ 191.244767][T10993] should_fail_ex.cold+0x5/0xa [ 191.244784][T10993] should_failslab+0xc2/0x120 [ 191.244809][T10993] __kmalloc_noprof+0xfc/0x840 [ 191.244821][T10993] ? rcu_is_watching+0x13/0xc0 [ 191.244837][T10993] ? tomoyo_realpath_from_path+0xb6/0x690 [ 191.244856][T10993] tomoyo_realpath_from_path+0xb6/0x690 [ 191.244874][T10993] tomoyo_path_number_perm+0x23c/0x580 [ 191.244886][T10993] ? tomoyo_path_number_perm+0x22e/0x580 [ 191.244904][T10993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.244932][T10993] ? __lock_acquire+0x5c0/0x1f40 [ 191.244954][T10993] ? __fget_files+0x34/0x3d0 [ 191.244969][T10993] ? find_held_lock+0x2b/0x80 [ 191.244985][T10993] ? hook_file_ioctl_common+0x140/0x440 [ 191.245004][T10993] ? __fget_files+0x21f/0x3d0 [ 191.245021][T10993] security_file_ioctl+0xd3/0x230 [ 191.245037][T10993] __x64_sys_ioctl+0xb7/0x210 [ 191.245050][T10993] do_syscall_64+0x123/0x790 [ 191.245063][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.245075][T10993] RIP: 0033:0x7f769ed9e159 [ 191.245085][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.245096][T10993] RSP: 002b:00007f769cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.245108][T10993] RAX: ffffffffffffffda RBX: 00007f769f025fa0 RCX: 00007f769ed9e159 [ 191.245116][T10993] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 191.245123][T10993] RBP: 00007f769cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.245129][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.245136][T10993] R13: 00007f769f026038 R14: 00007f769f025fa0 R15: 00007ffc112e52d8 [ 191.245151][T10993] [ 191.245156][T10993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.434227][T10996] could not open pipe file descriptor [ 191.502681][ T6818] net_ratelimit: 93 callbacks suppressed [ 191.502691][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 191.528829][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 191.529081][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 191.612325][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 191.817453][T11016] netlink: 'syz.4.1293': attribute type 3 has an invalid length. [ 191.817469][T11016] netlink: 'syz.4.1293': attribute type 6 has an invalid length. [ 191.817481][T11016] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1293'. [ 191.859708][T11018] ªªªªª): renamed from hsr0 (while UP) [ 191.984823][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 191.984844][ T42] audit: type=1400 audit(2000000000.449:1153): avc: denied { append } for pid=11021 comm="syz.4.1296" name="uprobe_events" dev="tracefs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 192.075648][ T5810] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 192.103881][T11024] MTD: Couldn't look up './dev/mtdblock0': -2 [ 192.233299][T11027] fido_id[11027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.426326][T11040] block nbd4: Device being setup by another task [ 192.590379][T11038] block nbd4: shutting down sockets [ 192.712545][T11050] Cannot find set identified by id 0 to match [ 192.762672][ T42] audit: type=1400 audit(2000000001.229:1154): avc: denied { write } for pid=11053 comm="syz.5.1306" name="functions" dev="configfs" ino=12677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.796202][T11057] netlink: 'syz.4.1307': attribute type 3 has an invalid length. [ 192.801762][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.802401][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.821612][T11064] kAFS: Can only specify source 'none' with -o dyn [ 192.832143][ T5738] Bluetooth: hci0: command 0xfc11 tx timeout [ 192.834667][ T5730] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 192.881101][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1309'. [ 192.946094][T11066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11066 comm=syz.5.1309 [ 193.042183][ T62] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 193.156900][T11088] syzkaller0: entered promiscuous mode [ 193.156911][T11088] syzkaller0: entered allmulticast mode [ 193.167030][T11088] overlayfs: cannot append lower layer [ 193.172081][ T62] usb 9-1: device descriptor read/64, error -71 [ 193.312121][ T5730] Bluetooth: hci5: command 0x1003 tx timeout [ 193.312272][ T5084] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.339359][ T42] audit: type=1400 audit(2000000001.799:1155): avc: denied { write } for pid=11085 comm="syz.5.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 193.349520][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1313'. [ 193.351162][T11086] bridge_slave_1: left promiscuous mode [ 193.351365][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.379563][T11086] bridge_slave_0: left allmulticast mode [ 193.379576][T11086] bridge_slave_0: left promiscuous mode [ 193.379717][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.404351][T11094] rnbd_client L202: map_device: Unknown parameter or missing value 'ssnÇ`Gjô¸Þµ=/' [ 193.422094][ T62] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 193.552319][ T62] usb 9-1: device descriptor read/64, error -71 [ 193.662292][ T62] usb usb9-port1: attempt power cycle [ 194.012196][ T62] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 194.032925][ T62] usb 9-1: device descriptor read/8, error -71 [ 194.115773][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.115820][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.138224][ T5084] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 194.194450][ T5084] Bluetooth: hci2: unexpected event for opcode 0x200c [ 194.294002][ T62] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 194.312723][ T62] usb 9-1: device descriptor read/8, error -71 [ 194.352957][T11123] No control pipe specified [ 194.397228][T11125] sctp: [Deprecated]: syz.1.1322 (pid 11125) Use of int in max_burst socket option. [ 194.397228][T11125] Use struct sctp_assoc_value instead [ 194.434063][ T62] usb usb9-port1: unable to enumerate USB device [ 194.742160][T11137] lo speed is unknown, defaulting to 1000 [ 195.144387][ T42] audit: type=1400 audit(2000000003.609:1156): avc: denied { connect } for pid=11153 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 195.259124][T11161] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 195.381064][T11164] smpboot: CPU 1 is now offline [ 195.499493][T11171] trusted_key: encrypted_key: insufficient parameters specified [ 195.568823][T11175] overlay: Unknown parameter 'appraise' [ 195.694186][ T42] audit: type=1400 audit(2000000004.159:1157): avc: denied { write } for pid=11176 comm="syz.5.1339" name="file0" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.694213][ T42] audit: type=1400 audit(2000000004.159:1158): avc: denied { open } for pid=11176 comm="syz.5.1339" path="/243/file0" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.699867][ T42] audit: type=1400 audit(2000000004.159:1159): avc: denied { ioctl } for pid=11176 comm="syz.5.1339" path="/243/file0" dev="tmpfs" ino=1356 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.800280][ T42] audit: type=1400 audit(2000000004.259:1160): avc: denied { mount } for pid=11183 comm="syz.0.1340" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configf ** replaying previous printk message ** [ 195.800280][ T42] audit: type=1400 audit(2000000004.259:1160): avc: denied { mount } for pid=11183 comm="syz.0.1340" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 195.800301][ T12] kernfs 987: removing [ 195.800322][ T12] kernfs 988: removing [ 195.800343][ T12] kernfs 989: removing [ 195.800365][ T12] kernfs 990: removing [ 195.800386][ T12] kernfs 991: removing [ 195.800408][ T12] kernfs 992: removing [ 195.800429][ T12] kernfs 993: removing [ 195.800451][ T12] kernfs 994: removing [ 195.800474][ T12] kernfs 995: removing [ 195.800497][ T12] kernfs 996: removing [ 195.800518][ T12] kernfs 997: removing [ 195.800539][ T12] kernfs 998: removing [ 195.800561][ T12] kernfs 999: removing [ 195.800583][ T12] kernfs 1000: removing [ 195.800604][ T12] kernfs 1001: removing [ 195.800625][ T12] kernfs 1002: removing [ 195.800646][ T12] kernfs 1003: removing [ 195.800670][ T12] kernfs 1004: removing [ 195.800691][ T12] kernfs 1005: removing [ 195.800713][ T12] kernfs 1006: removing [ 195.800734][ T12] kernfs 1007: removing [ 195.800755][ T12] kernfs 1008: removing [ 195.801170][T11057] raw-gadget.0 gadget.4: event fetching interrupted [ 195.806908][ T12] kernfs 1009: removing [ 195.806938][ T12] kernfs 1010: removing [ 195.806963][ T12] kernfs 1011: removing [ 195.806990][ T12] kernfs 1012: removing [ 195.807012][ T12] kernfs 1013: removing [ 195.807033][ T12] kernfs 1014: removing [ 195.807054][ T12] kernfs 1015: removing [ 195.807075][ T12] kernfs 1016: removing [ 195.807096][ T12] kernfs 1017: removing [ 195.807118][ T12] kernfs 1018: removing [ 195.807123][T11185] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1048 [ 195.807139][ T12] kernfs 1019: removing [ 195.807160][ T12] kernfs 1020: removing [ 195.807181][ T12] kernfs 1021: removing [ 195.807202][ T12] kernfs 1022: removing [ 195.807224][ T12] kernfs 1023: removing [ 195.807224][ T10] nfc: nfc_urelease_event_work: portid 1048 [ 195.807244][ T12] kernfs gids: removing [ 195.807270][ T12] kernfs 0: removing [ 195.807290][ T12] kernfs pkeys: removing [ 195.807321][ T12] kernfs state: removing [ 195.807344][ T12] kernfs lid: removing [ 195.807366][ T12] kernfs lid_mask_count: removing [ 195.807389][ T12] kernfs sm_lid: removing [ 195.807410][ T12] kernfs sm_sl: removing [ 195.807432][ T12] kernfs cap_mask: removing [ 195.807477][ T12] kernfs rate: removing [ 195.807500][ T12] kernfs phys_state: removing [ 195.807522][ T12] kernfs link_layer: removing [ 195.807544][ T12] kernfs 1: removing [ 195.807564][ T12] kobject: '1' (ffff888050360000): kobject_cleanup, parent 0000000000000000 [ 195.807575][ T12] kobject: '1' (ffff888050360000): calling ktype release [ 195.807655][ T12] kobject: '1': free name [ 195.807666][ T12] kobject: 'ports' (ffff88805a0f1000): kobject_cleanup, parent ffff88805955e000 [ 195.807676][ T12] kobject: 'ports' (ffff88805a0f1000): auto cleanup kobject_del [ 195.807686][ T12] kernfs ports: removing [ 195.807956][T11184] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1048 [ 195.808037][ T10] nfc: nfc_urelease_event_work: portid 1048 [ 195.809469][ T42] audit: type=1400 audit(2000000004.269:1161): avc: denied { write } for pid=11183 comm="syz.0.1340" name="naa.6001405c935d7912" dev="configfs" ino=15401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.809796][T11184] [ 195.809986][ T12] kobject: 'ports' (ffff88805a0f1000): calling ktype release [ 195.809997][ T12] kobject: (ffff88805a0f1000): dynamic_kobj_release [ 195.810009][ T12] kobject: 'ports': free name [ 195.810023][ T12] kernfs runtime_status: removing [ 195.810036][ T12] kernfs control: removing [ 195.810047][ T12] kernfs runtime_suspended_time: removing [ 195.810058][ T12] kernfs runtime_active_time: removing [ 195.810070][ T12] kernfs autosuspend_delay_ms: removing [ 195.810086][ T12] kernfs power: removing [ 195.810103][ T12] kernfs subsystem: removing [ 195.810116][ T12] kernfs sz1: removing [ 195.810128][ T12] kernfs uevent: removing [ 195.810142][ T12] kernfs node_type: removing [ 195.810153][ T12] kernfs node_guid: removing [ 195.810164][ T12] kernfs sys_image_guid: removing [ 195.810175][ T12] kernfs fw_ver: removing [ 195.810186][ T12] kernfs node_desc: removing [ 195.810197][ T12] kernfs parent: removing [ 195.810208][ T12] PM: Removing info for No Bus:sz1 [ 195.810220][ T12] kobject: 'sz1' (ffff88805955e000): kobject_uevent_env [ 195.810237][ T12] kobject: 'sz1' (ffff88805955e000): fill_kobj_path: path = '/devices/virtual/infiniband/sz1' [ 195.810276][ T12] kernfs sz1: removing [ 195.810289][ T12] kobject: 'sz1' (ffff88805955e000): kobject_cleanup, parent 0000000000000000 [ 195.810299][ T12] kobject: 'sz1' (ffff88805955e000): calling ktype release [ 195.810313][ T12] kobject: 'sz1': free name [ 195.823279][T11071] bus: 'gadget': remove driver raw-gadget.0 [ 195.823295][T11071] kernfs bind: removing [ 195.823313][T11071] kernfs unbind: removing [ 195.823326][T11071] kernfs uevent: removing [ 195.823341][T11071] kernfs gadget.4: removing [ 195.823354][T11071] kernfs driver: removing [ 195.823370][T11071] udc dummy_udc.4: unbinding gadget driver [USB Raw Gadget] [ 195.823386][T11071] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 195.823431][ T5809] usb usb9: usb wakeup-resume [ 195.823443][ T5809] usb usb9: usb auto-resume [ 195.823456][ T5809] usb usb9: dummy_bus_resume [ 195.823467][ T5809] hub 9-0:1.0: hub_resume [ 195.823494][ T5809] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 195.823625][T11071] raw-gadget.0 gadget.4: gadget disconnected [ 195.823640][T11071] kobject: 'dummy_udc.4' (ffff88802bb9b018): kobject_uevent_env [ 195.823658][T11071] kobject: 'dummy_udc.4' (ffff88802bb9b018): fill_kobj_path: path = '/devices/platform/dummy_udc.4/udc/dummy_udc.4' [ 195.825537][T11071] kobject: 'gadget.4' (ffff88802c2c0cd8): kobject_uevent_env [ 195.825556][T11071] kobject: 'gadget.4' (ffff88802c2c0cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.4/gadget.4' [ 195.825693][T11071] kernfs module: removing [ 195.825726][T11071] kernfs gadget:raw-gadget.0: removing [ 195.825741][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): kobject_cleanup, parent ffff88801cf87050 [ 195.825751][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): auto cleanup kobject_del [ 195.825759][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): auto cleanup 'remove' event [ 195.825767][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): kobject_uevent_env [ 195.825782][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.0' [ 195.825822][T11071] kernfs raw-gadget.0: removing [ 195.825832][T11071] kobject: 'raw-gadget.0' (ffff88802dd91c00): calling ktype release [ 195.825840][T11071] driver: 'raw-gadget.0': driver_release [ 195.825850][T11071] kobject: 'raw-gadget.0': free name [ 195.912357][ T5809] hub 9-0:1.0: state 7 ports 1 chg 0002 evt 0000 [ 195.912468][ T5809] usb usb9-port1: status 0100, change 0000, 12 Mb/s [ 195.930421][T11187] kcov: kcov_start: t = ffff8880287d8000, size = 524288, area = ffffc90030e01000 [ 195.930910][T11187] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1005 [ 195.931007][ T25] nfc: nfc_urelease_event_work: portid 1005 [ 195.933439][T11187] kcov: kcov_task_exit: t = ffff8880287d8000, kcov->t = ffff8880287d8000 [ 195.956248][T11189] kcov: kcov_start: t = ffff888030ba8000, size = 524288, area = ffffc90030e01000 [ 196.103629][T11184] ====================================================== [ 196.105853][T11184] WARNING: possible circular locking dependency detected [ 196.108036][T11184] syzkaller #0 Tainted: G L [ 196.110038][T11184] ------------------------------------------------------ [ 196.112236][T11184] syz.0.1340/11184 is trying to acquire lock: [ 196.114391][T11184] ffff88802048c3c0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 196.118120][T11184] [ 196.118120][T11184] but task is already holding lock: [ 196.120471][T11184] ffffffff904808c0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 196.123652][T11184] [ 196.123652][T11184] which lock already depends on the new lock. [ 196.123652][T11184] [ 196.126959][T11184] [ 196.126959][T11184] the existing dependency chain (in reverse order) is: [ 196.129857][T11184] [ 196.129857][T11184] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 196.132409][T11184] lock_acquire+0x1d1/0x380 [ 196.134185][T11184] __mutex_lock+0x1a4/0x1bd0 [ 196.136357][T11184] usbg_make_tpg+0x10b/0x610 [ 196.138560][T11184] target_fabric_make_tpg+0xab/0x8c0 [ 196.141041][T11184] configfs_mkdir+0x525/0xd40 [ 196.143267][T11184] vfs_mkdir+0x364/0x850 [ 196.145330][T11184] filename_mkdirat+0x48b/0x5e0 [ 196.147765][T11184] __x64_sys_mkdirat+0x89/0xc0 [ 196.150366][T11184] do_syscall_64+0x123/0x790 [ 196.153600][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.156865][T11184] [ 196.156865][T11184] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 196.159247][T11184] lock_acquire+0x1d1/0x380 [ 196.161340][T11184] __mutex_lock+0x1a4/0x1bd0 [ 196.162934][ T5575] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 196.162972][ T5575] geneve2: no tunnel metadata [ 196.167731][T11184] configfs_rmdir+0x5ae/0x950 [ 196.169384][T11184] vfs_rmdir+0x328/0x8a0 [ 196.170947][T11184] filename_rmdir+0x31a/0x5c0 [ 196.172563][T11184] __x64_sys_rmdir+0x46/0x70 [ 196.174215][T11184] do_syscall_64+0x123/0x790 [ 196.175836][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.177980][T11184] [ 196.177980][T11184] -> #0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 196.181206][T11184] check_prev_add+0xeb/0xe60 [ 196.183450][T11184] __lock_acquire+0x1528/0x1f40 [ 196.185904][T11184] lock_acquire+0x1d1/0x380 [ 196.188253][T11184] down_write+0x8b/0x1f0 [ 196.190304][T11184] configfs_depend_item_unlocked+0xf3/0x6a0 [ 196.193027][T11184] usbg_make_tpg+0x251/0x610 [ 196.195251][T11184] target_fabric_make_tpg+0xab/0x8c0 [ 196.197749][T11184] configfs_mkdir+0x525/0xd40 [ 196.199968][T11184] vfs_mkdir+0x364/0x850 [ 196.201971][T11184] filename_mkdirat+0x48b/0x5e0 [ 196.204250][T11184] __x64_sys_mkdirat+0x89/0xc0 [ 196.206496][T11184] do_syscall_64+0x123/0x790 [ 196.208704][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.211338][T11184] [ 196.211338][T11184] other info that might help us debug this: [ 196.211338][T11184] [ 196.215606][T11184] Chain exists of: [ 196.215606][T11184] &sb->s_type->i_mutex_key#27 --> &subsys->su_mutex --> tpg_instances_lock [ 196.215606][T11184] [ 196.221635][T11184] Possible unsafe locking scenario: [ 196.221635][T11184] [ 196.224737][T11184] CPU0 CPU1 [ 196.226987][T11184] ---- ---- [ 196.229290][T11184] lock(tpg_instances_lock); [ 196.231304][T11184] lock(&subsys->su_mutex); [ 196.234755][T11184] lock(tpg_instances_lock); [ 196.237889][T11184] lock(&sb->s_type->i_mutex_key#27); [ 196.240246][T11184] [ 196.240246][T11184] *** DEADLOCK *** [ 196.240246][T11184] [ 196.243449][T11184] locks held by syz.0.1340/11184: 4, last CPU#0: [ 196.246021][T11184] #0: ffff888023e78460 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 196.249935][T11184] #1: ffff888057c75200 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 196.254364][T11184] #2: ffffffff8ffb3728 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 196.258363][T11184] #3: ffffffff904808c0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 196.262324][T11184] [ 196.262324][T11184] stack backtrace: [ 196.264787][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.0.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.269267][T11184] Tainted: [L]=SOFTLOCKUP [ 196.271194][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.275625][T11184] Call Trace: [ 196.277252][T11184] [ 196.278539][T11184] dump_stack_lvl+0x100/0x190 [ 196.280585][T11184] print_circular_bug.cold+0x178/0x1be [ 196.282862][T11184] check_noncircular+0x146/0x160 [ 196.284968][T11184] check_prev_add+0xeb/0xe60 [ 196.286959][T11184] __lock_acquire+0x1528/0x1f40 [ 196.289143][T11184] ? rcu_is_watching+0x13/0xc0 [ 196.291237][T11184] lock_acquire+0x1d1/0x380 [ 196.293214][T11184] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 196.295978][T11184] ? __pfx___might_resched+0x10/0x10 [ 196.298185][T11184] down_write+0x8b/0x1f0 [ 196.299997][T11184] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 196.302430][T11184] ? __pfx_down_write+0x10/0x10 [ 196.304473][T11184] ? kstrtou16+0xde/0x130 [ 196.306259][T11184] configfs_depend_item_unlocked+0xf3/0x6a0 [ 196.308650][T11184] usbg_make_tpg+0x251/0x610 [ 196.310634][T11184] ? __pfx_usbg_make_tpg+0x10/0x10 [ 196.312264][T11191] kcov: kcov_start: t = ffff88802759a580, size = 524288, area = ffffc90031603000 [ 196.312396][ T6818] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 196.320983][T11184] ? preempt_schedule_common+0x3c/0xb0 [ 196.323425][T11184] ? __pfx_usbg_make_tpg+0x10/0x10 [ 196.325654][T11184] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 196.328150][T11184] target_fabric_make_tpg+0xab/0x8c0 [ 196.330426][T11184] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 196.333214][T11184] configfs_mkdir+0x525/0xd40 [ 196.335316][T11184] ? may_create+0x285/0x440 [ 196.337256][T11184] ? __pfx_configfs_mkdir+0x10/0x10 [ 196.339492][T11184] vfs_mkdir+0x364/0x850 [ 196.341442][T11184] filename_mkdirat+0x48b/0x5e0 [ 196.343582][T11184] ? __pfx_filename_mkdirat+0x10/0x10 [ 196.345913][T11184] ? strncpy_from_user+0x19d/0x2d0 [ 196.348180][T11184] ? do_getname+0x191/0x390 [ 196.350362][T11184] __x64_sys_mkdirat+0x89/0xc0 [ 196.352938][T11184] do_syscall_64+0x123/0x790 [ 196.355165][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.357743][T11184] RIP: 0033:0x7f769ed9e159 [ 196.359666][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.367652][T11184] RSP: 002b:00007f769cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 196.371602][T11184] RAX: ffffffffffffffda RBX: 00007f769f025fa0 RCX: 00007f769ed9e159 [ 196.375412][T11184] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 196.378717][T11184] RBP: 00007f769ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 196.382034][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.385470][T11184] R13: 00007f769f026038 R14: 00007f769f025fa0 R15: 00007ffc112e52d8 [ 196.388868][T11184] [ 196.391150][ T112] hub 9-0:1.0: hub_suspend [ 196.391216][ T112] usb usb9: bus auto-suspend, wakeup 1 [ 196.391227][ T112] usb usb9: dummy_bus_suspend [ 196.391550][ C0] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 196.391630][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9) [ 196.392097][T11190] kcov: kcov_start: t = ffff88802759cb00, size = 524288, area = ffffc90031202000 [ 196.392636][T11192] kcov: kcov_start: t = ffff88802f050000, size = 524288, area = ffffc90031a04000 [ 196.394016][T11184] TARGET_CORE[usb_gadget]: Allocated portal_group for endpoint: 6001405c935d7912, Proto: 6, Portal Tag: 1 [ 196.394813][T11183] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1048 [ 196.394918][ T1848] nfc: nfc_urelease_event_work: portid 1048 [ 196.398284][ T10] Added buffer head 2 to ffff888027202400 [ 196.398320][ T10] Added buffer head 3 to ffff888027202400 [ 196.399178][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 196.399257][ T1848] No more buffers in queue [ 196.405881][ T42] audit: type=1400 audit(2000000004.869:1162): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.421087][ T12] lo (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 196.421120][ T12] net lo: siw: event 6 [ 196.421592][ T12] lo (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 196.421606][ T12] net lo: siw: event 18 [ 196.421631][ T12] kernfs rps_cpus: removing [ 196.421650][ T12] kernfs rps_flow_cnt: removing [ 196.421661][ T12] kobject: 'rx-0' (ffff8880135d5650): kobject_cleanup, parent ffff888036e66f50 [ 196.421671][ T12] kobject: 'rx-0' (ffff8880135d5650): auto cleanup kobject_del [ 196.421679][ T12] kobject: 'rx-0' (ffff8880135d5650): auto cleanup 'remove' event [ 196.421686][ T12] kobject: 'rx-0' (ffff8880135d5650): kobject_uevent_env [ 196.421694][ T12] kobject: 'rx-0' (ffff8880135d5650): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.421703][ T12] kernfs rx-0: removing [ 196.421715][ T12] kobject: 'rx-0' (ffff8880135d5650): calling ktype release [ 196.421725][ T12] kobject: 'rx-0': free name [ 196.421737][ T12] kernfs tx_timeout: removing [ 196.421868][ T12] kernfs traffic_class: removing [ 196.421886][ T12] kernfs xps_cpus: removing [ 196.421897][ T12] kernfs xps_rxqs: removing [ 196.422384][ T6818] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 196.423802][ T12] kernfs tx_maxrate: removing [ 196.423817][ T12] kobject: 'tx-0' (ffff88804efa8420): kobject_cleanup, parent ffff888036e66f50 [ 196.423828][ T12] kobject: 'tx-0' (ffff88804efa8420): auto cleanup kobject_del [ 196.423835][ T12] kobject: 'tx-0' (ffff88804efa8420): auto cleanup 'remove' event [ 196.423843][ T12] kobject: 'tx-0' (ffff88804efa8420): kobject_uevent_env [ 196.423850][ T12] kobject: 'tx-0' (ffff88804efa8420): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.423860][ T12] kernfs tx-0: removing [ 196.423871][ T12] kobject: 'tx-0' (ffff88804efa8420): calling ktype release [ 196.423881][ T12] kobject: 'tx-0': free name [ 196.423891][ T12] kernfs queues: removing [ 196.423902][ T12] kobject: 'queues' (ffff888036e66f50): kobject_cleanup, parent 0000000000000000 [ 196.423939][ T12] kobject: 'queues' (ffff888036e66f50): calling ktype release [ 196.423950][ T12] kobject: 'queues' (ffff888036e66f50): kset_release [ 196.423969][ T12] kobject: 'queues': free name [ 196.423992][ T12] kernfs runtime_status: removing [ 196.424009][ T12] kernfs control: removing [ 196.424020][ T12] kernfs runtime_suspended_time: removing [ 196.424031][ T12] kernfs runtime_active_time: removing [ 196.424043][ T12] kernfs autosuspend_delay_ms: removing [ 196.424059][ T12] kernfs power: removing [ 196.424077][ T12] kernfs subsystem: removing [ 196.424090][ T12] kernfs lo: removing [ 196.424103][ T12] kernfs uevent: removing [ 196.424118][ T12] kernfs rx_packets: removing [ 196.424130][ T12] kernfs tx_packets: removing [ 196.424141][ T12] kernfs rx_bytes: removing [ 196.424152][ T12] kernfs tx_bytes: removing [ 196.424164][ T12] kernfs rx_errors: removing [ 196.424175][ T12] kernfs tx_errors: removing [ 196.424186][ T12] kernfs rx_dropped: removing [ 196.424197][ T12] kernfs tx_dropped: removing [ 196.424209][ T12] kernfs multicast: removing [ 196.424220][ T12] kernfs collisions: removing [ 196.424233][ T12] kernfs rx_length_errors: removing [ 196.424245][ T12] kernfs rx_over_errors: removing [ 196.424257][ T12] kernfs rx_crc_errors: removing [ 196.424269][ T12] kernfs rx_frame_errors: removing [ 196.424281][ T12] kernfs rx_fifo_errors: removing [ 196.424292][ T12] kernfs rx_missed_errors: removing [ 196.424304][ T12] kernfs tx_aborted_errors: removing [ 196.424316][ T12] kernfs tx_carrier_errors: removing [ 196.424328][ T12] kernfs tx_fifo_errors: removing [ 196.424340][ T12] kernfs tx_heartbeat_errors: removing [ 196.424352][ T12] kernfs tx_window_errors: removing [ 196.424363][ T12] kernfs rx_compressed: removing [ 196.424376][ T12] kernfs tx_compressed: removing [ 196.424387][ T12] kernfs rx_nohandler: removing [ 196.424402][ T12] kernfs statistics: removing [ 196.424416][ T12] kernfs netdev_group: removing [ 196.424428][ T12] kernfs type: removing [ 196.424439][ T12] kernfs dev_id: removing [ 196.424456][ T12] kernfs dev_port: removing [ 196.424468][ T12] kernfs iflink: removing [ 196.424479][ T12] kernfs ifindex: removing [ 196.424490][ T12] kernfs name_assign_type: removing [ 196.424502][ T12] kernfs addr_assign_type: removing [ 196.424513][ T12] kernfs addr_len: removing [ 196.424525][ T12] kernfs link_mode: removing [ 196.424536][ T12] kernfs address: removing [ 196.424548][ T12] kernfs broadcast: removing [ 196.424559][ T12] kernfs speed: removing [ 196.424572][ T12] kernfs duplex: removing [ 196.424677][ T12] kernfs dormant: removing [ 196.424691][ T12] kernfs testing: removing [ 196.424703][ T12] kernfs operstate: removing [ 196.424715][ T12] kernfs carrier_changes: removing [ 196.424727][ T12] kernfs ifalias: removing [ 196.424738][ T12] kernfs carrier: removing [ 196.424749][ T12] kernfs mtu: removing [ 196.424760][ T12] kernfs flags: removing [ 196.424772][ T12] kernfs tx_queue_len: removing [ 196.424784][ T12] kernfs gro_flush_timeout: removing [ 196.424795][ T12] kernfs napi_defer_hard_irqs: removing [ 196.424807][ T12] kernfs proto_down: removing [ 196.424819][ T12] kernfs carrier_up_count: removing [ 196.424830][ T12] kernfs carrier_down_count: removing [ 196.424842][ T12] kernfs threaded: removing [ 196.424853][ T12] PM: Removing info for No Bus:lo [ 196.424865][ T12] kobject: 'lo' (ffff888058b587c0): kobject_uevent_env [ 196.424874][ T12] kobject: 'lo' (ffff888058b587c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.424883][ T12] kernfs lo: removing [ 196.425350][ T5731] send_to_group: group=ffff888036f3f000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880137eb200 data_type=2 dir=0000000000000000 cookie=0 [ 196.425384][ T5731] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff888022cf8a28 mask=8 [ 196.425409][ T5731] fsnotify_insert_event: group=ffff888036f3f000 event=ffff888059e97b00 [ 196.425569][ T5137] get_one_event: group=ffff888036f3f000 event=ffff888059e97b00 [ 196.425583][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff888059e97b00 [ 196.425593][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff888059e97b00 [ 196.425601][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff888059e97b00 [ 196.425619][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.438372][ T5137] kobject: 'loop0' (ffff8880280bafe0): kobject_uevent_env [ 196.438408][ T5137] kobject: 'loop0' (ffff8880280bafe0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 196.439199][T11189] debugfs: creating file 'netdev@ffff888059a08700' [ 196.439568][T11189] syzkaller0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 196.439594][T11189] (null): siw: event 17 [ 196.439652][T11189] device: 'syzkaller0': device_add [ 196.439673][T11189] kobject: 'syzkaller0' (ffff888059a087c0): kobject_add_internal: parent: 'net', set: 'devices' [ 196.439726][T11189] net syzkaller0: No ACPI support [ 196.440485][T11189] PM: Adding info for No Bus:syzkaller0 [ 196.440504][T11189] kobject: 'syzkaller0' (ffff888059a087c0): kobject_uevent_env [ 196.440520][T11189] kobject: 'syzkaller0' (ffff888059a087c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.440550][T11189] kobject: 'queues' (ffff8880348cef50): kobject_add_internal: parent: 'syzkaller0', set: '' [ 196.440581][T11189] kobject: 'queues' (ffff8880348cef50): kobject_uevent_env [ 196.440596][T11189] kobject: 'queues' (ffff8880348cef50): kobject_uevent_env: filter function caused the event to drop! [ 196.440631][T11189] kobject: 'rx-0' (ffff88805aaa0050): kobject_add_internal: parent: 'queues', set: 'queues' [ 196.440697][T11189] kobject: 'rx-0' (ffff88805aaa0050): kobject_uevent_env [ 196.440725][T11189] kobject: 'rx-0' (ffff88805aaa0050): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 196.440812][T11189] kobject: 'tx-0' (ffff888050360020): kobject_add_internal: parent: 'queues', set: 'queues' [ 196.440931][T11189] kobject: 'tx-0' (ffff888050360020): kobject_uevent_env [ 196.440957][T11189] kobject: 'tx-0' (ffff888050360020): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 196.441019][T11189] syzkaller0: Features changed: 0x000020020c1548c9 -> 0x00002000000048c1 [ 196.441247][T11189] Registering net sysctl (net ffff88802275cf80): net/ipv4/neigh/syzkaller0 [ 196.441264][T11189] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce160 [ 196.441296][T11189] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce164 [ 196.441322][T11189] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce168 [ 196.441347][T11189] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce16c [ 196.441372][T11189] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce170 [ 196.441397][T11189] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff8880348ce174 [ 196.441422][T11189] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880348ce178 [ 196.441446][T11189] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff8880348ce17c [ 196.441470][T11189] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880348ce180 [ 196.441491][T11189] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce184 [ 196.441514][T11189] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce188 [ 196.441537][T11189] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce18c [ 196.441560][T11189] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce190 [ 196.441583][T11189] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce194 [ 196.441606][T11189] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff8880348ce184 [ 196.441629][T11189] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff8880348ce170 [ 196.441652][T11189] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff8880348ce174 [ 196.441728][T11189] Registering net sysctl (net ffff88802275cf80): net/ipv4/conf/syzkaller0 [ 196.441743][T11189] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff888061845960 [ 196.441778][T11189] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff888061845964 [ 196.441810][T11189] Not writable by anyone [ 196.441818][T11189] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff8880618459dc [ 196.441849][T11189] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88806184596c [ 196.441880][T11189] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888061845970 [ 196.444000][T10845] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff888022cf8a28 mask=8000 [ 196.444023][T10845] fsnotify_insert_event: group=ffff888036f3f000 event=ffff88805a18a9c0 [ 196.444866][T11189] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff888061845978 [ 196.444907][T11189] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88806184597c [ 196.444939][T11189] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888061845974 [ 196.444970][T11189] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff888061845980 [ 196.445002][T11189] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff8880618459b8 [ 196.445035][T11189] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff8880618459bc [ 196.445139][T11189] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff888061845968 [ 196.445175][T11189] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff888061845994 [ 196.445206][T11189] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff888061845984 [ 196.445239][T11189] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff888061845988 [ 196.445272][T11189] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff88806184598c [ 196.445301][T11189] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888061845990 [ 196.445340][ T5137] get_one_event: group=ffff888036f3f000 event=ffff88805a18a9c0 [ 196.445332][T11189] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff8880618459a4 [ 196.445353][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff88805a18a9c0 [ 196.445363][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff88805a18a9c0 [ 196.445371][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff88805a18a9c0 [ 196.445366][T11189] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff8880618459a8 [ 196.445386][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.445400][T11189] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff8880618459b0 [ 196.445439][T11189] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff8880618459b4 [ 196.445471][T11189] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff8880618459e0 [ 196.445504][T11189] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff8880618459c0 [ 196.445537][T11189] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff8880618459a0 [ 196.445572][T11189] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff8880618459c8 [ 196.448221][T11189] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff8880618459cc [ 196.448267][T11189] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff8880618459d0 [ 196.448303][T11189] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff8880618459d8 [ 196.448340][T11189] procname=disable_xfrm mode=644 proc_handler=devinet_conf_proc data=ffff888061845998 [ 196.448375][T11189] procname=disable_policy mode=644 proc_handler=devinet_conf_proc data=ffff88806184599c [ 196.448409][T11189] procname=promote_secondaries mode=644 proc_handler=devinet_conf_proc data=ffff8880618459ac [ 196.448443][T11189] procname=route_localnet mode=644 proc_handler=devinet_conf_proc data=ffff8880618459c4 [ 196.448477][T11189] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=devinet_conf_proc data=ffff8880618459d4 [ 196.448615][T11189] syzkaller0: bond_netdev_event received NETDEV_REGISTER [ 196.448645][T11189] net syzkaller0: siw: event 5 [ 196.448787][T11189] Registering net sysctl (net ffff88802275cf80): net/ipv6/neigh/syzkaller0 [ 196.448806][T11189] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce060 [ 196.448837][T11189] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce064 [ 196.450763][T11189] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce068 [ 196.450796][T11189] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce06c [ 196.450826][T11189] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff8880348ce070 [ 196.450863][T11189] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff8880348ce074 [ 196.450899][T11189] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880348ce078 [ 196.450924][T11189] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff8880348ce07c [ 196.450954][T11189] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880348ce080 [ 196.450979][T11189] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce084 [ 196.451005][T11189] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880348ce088 [ 196.451030][T11189] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce08c [ 196.451057][T11189] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce090 [ 196.451085][T11189] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880348ce094 [ 196.451122][T11189] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff8880348ce084 [ 196.451149][T11189] procname=retrans_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff8880348ce070 [ 196.451186][T11189] procname=base_reachable_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff8880348ce074 [ 196.451285][T11189] Registering net sysctl (net ffff88802275cf80): net/ipv6/conf/syzkaller0 [ 196.451302][T11189] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=ffff8880576b45e4 [ 196.451332][T11189] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=ffff8880576b45dc [ 196.451372][T11189] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=ffff8880576b45e0 [ 196.451409][T11189] procname=accept_ra mode=644 proc_handler=proc_dointvec data=ffff8880576b45f4 [ 196.451444][T11189] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=ffff8880576b45f8 [ 196.451479][T11189] procname=autoconf mode=644 proc_handler=proc_dointvec data=ffff8880576b45fc [ 196.451512][T11189] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=ffff8880576b4600 [ 196.451542][T11189] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=ffff8880576b4604 [ 196.451576][T11189] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff8880576b4608 [ 196.451610][T11189] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff8880576b460c [ 196.451645][T11189] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=ffff8880576b4610 [ 196.451677][T11189] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=ffff8880576b4614 [ 196.451707][T11189] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff8880576b4618 [ 196.451739][T11189] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff8880576b461c [ 196.451772][T11189] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=ffff8880576b4620 [ 196.451804][T11189] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=ffff8880576b4624 [ 196.451865][T11189] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=ffff8880576b4628 [ 196.453807][T11189] procname=regen_min_advance mode=644 proc_handler=proc_dointvec data=ffff8880576b462c [ 196.453845][T11189] procname=regen_max_retry mode=644 proc_handler=proc_dointvec data=ffff8880576b4630 [ 196.453878][T11189] procname=max_desync_factor mode=644 proc_handler=proc_dointvec data=ffff8880576b4634 [ 196.453907][T11189] procname=max_addresses mode=644 proc_handler=proc_dointvec data=ffff8880576b4638 [ 196.453938][T11189] procname=accept_ra_defrtr mode=644 proc_handler=proc_dointvec data=ffff8880576b463c [ 196.453970][T11189] procname=ra_defrtr_metric mode=644 proc_handler=proc_douintvec_minmax data=ffff8880576b4640 [ 196.454005][T11189] procname=accept_ra_min_hop_limit mode=644 proc_handler=proc_dointvec data=ffff8880576b4644 [ 196.454038][T11189] procname=accept_ra_min_lft mode=644 proc_handler=proc_dointvec data=ffff8880576b4648 [ 196.454069][T11189] procname=accept_ra_pinfo mode=644 proc_handler=proc_dointvec data=ffff8880576b464c [ 196.454105][T11189] procname=ra_honor_pio_life mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880576b46d6 [ 196.454138][T11189] procname=ra_honor_pio_pflag mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880576b46d7 [ 196.454172][T11189] procname=accept_ra_rtr_pref mode=644 proc_handler=proc_dointvec data=ffff8880576b4654 [ 196.454206][T11189] procname=router_probe_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff8880576b4658 [ 196.454241][T11189] procname=accept_ra_rt_info_min_plen mode=644 proc_handler=proc_dointvec data=ffff8880576b465c [ 196.454274][T11189] procname=accept_ra_rt_info_max_plen mode=644 proc_handler=proc_dointvec data=ffff8880576b4660 [ 196.454305][T11189] procname=proxy_ndp mode=644 proc_handler=addrconf_sysctl_proxy_ndp data=ffff8880576b45f0 [ 196.454330][T11189] procname=accept_source_route mode=644 proc_handler=proc_dointvec data=ffff8880576b4664 [ 196.454359][T11189] procname=optimistic_dad mode=644 proc_handler=proc_dointvec data=ffff8880576b466c [ 196.454389][T11189] procname=use_optimistic mode=644 proc_handler=proc_dointvec data=ffff8880576b4670 [ 196.454419][T11189] procname=mc_forwarding mode=444 proc_handler=proc_dointvec data=ffff8880576b4674 [ 196.454449][T11189] Not writable by anyone [ 196.454458][T11189] procname=disable_ipv6 mode=644 proc_handler=addrconf_sysctl_disable data=ffff8880576b45d8 [ 196.454487][T11189] procname=accept_dad mode=644 proc_handler=proc_dointvec data=ffff8880576b467c [ 196.454518][T11189] procname=force_tllao mode=644 proc_handler=proc_dointvec data=ffff8880576b4680 [ 196.454549][T11189] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=ffff8880576b4684 [ 196.454579][T11189] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff8880576b4688 [ 196.454608][T11189] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff8880576b4668 [ 196.454640][T11189] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff8880576b468c [ 196.454671][T11189] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff8880576b4698 [ 196.454695][T11189] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff8880576b46ac [ 196.456473][ T5735] send_to_group: group=ffff888036f3f000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880250ed3c0 data_type=2 dir=0000000000000000 cookie=0 [ 196.456502][ T5735] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff88805a4a94b0 mask=8 [ 196.456525][ T5735] fsnotify_insert_event: group=ffff888036f3f000 event=ffff88805a18ad80 [ 196.457046][T11189] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff8880576b4650 [ 196.457081][T11189] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff8880576b4678 [ 196.457121][T11189] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff8880576b4690 [ 196.457155][T11189] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff8880576b46b0 [ 196.457187][T11189] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff8880576b46b4 [ 196.457216][ T5137] get_one_event: group=ffff888036f3f000 event=ffff88805a18ad80 [ 196.457219][T11189] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff8880576b46b8 [ 196.457233][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff88805a18ad80 [ 196.457247][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff88805a18ad80 [ 196.457260][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff88805a18ad80 [ 196.457252][T11189] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff8880576b46bc [ 196.457281][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.457288][T11189] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff8880576b46c0 [ 196.457317][T11189] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff8880576b45ec [ 196.457344][T11189] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff8880576b46c4 [ 196.457377][T11189] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff8880576b46c8 [ 196.457407][T11189] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880576b46d4 [ 196.457439][T11189] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff8880576b46cc [ 196.457471][T11189] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff8880576b46d0 [ 196.457504][T11189] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880576b46d5 [ 196.457538][T11189] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff8880576b4694 [ 196.457571][T11189] procname=force_forwarding mode=644 proc_handler=addrconf_sysctl_force_forwarding data=ffff8880576b45e8 [ 196.457828][T11189] Registering net sysctl (net ffff88802275cf80): net/mpls/conf/syzkaller0 [ 196.457844][T11189] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff88804d277600 [ 196.457921][T11189] kobject: 'syzkaller0' (ffff888059a087c0): kobject_uevent_env [ 196.457948][T11189] kobject: 'syzkaller0' (ffff888059a087c0): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 196.465547][ T5137] kobject: 'loop1' (ffff8880280ba460): kobject_uevent_env [ 196.465580][ T5137] kobject: 'loop1' (ffff8880280ba460): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.467765][T10845] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff88805a4a94b0 mask=8000 [ 196.467793][T10845] fsnotify_insert_event: group=ffff888036f3f000 event=ffff88805a75fb40 [ 196.467845][ T5137] get_one_event: group=ffff888036f3f000 event=ffff88805a75fb40 [ 196.467861][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff88805a75fb40 [ 196.467876][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff88805a75fb40 [ 196.467891][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff88805a75fb40 [ 196.467958][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.468495][T11176] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 196.468524][T11176] net syzkaller0: siw: event 6 [ 196.469077][T11176] syzkaller0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 196.469105][T11176] net syzkaller0: siw: event 18 [ 196.469756][T11176] kernfs rps_cpus: removing [ 196.469938][T11176] kernfs rps_flow_cnt: removing [ 196.469970][T11176] kobject: 'rx-0' (ffff8880572f0050): kobject_cleanup, parent ffff888034901450 [ 196.469988][T11176] kobject: 'rx-0' (ffff8880572f0050): auto cleanup kobject_del [ 196.470002][T11176] kobject: 'rx-0' (ffff8880572f0050): auto cleanup 'remove' event [ 196.470015][T11176] kobject: 'rx-0' (ffff8880572f0050): kobject_uevent_env [ 196.470046][T11176] kobject: 'rx-0' (ffff8880572f0050): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 196.470124][T11176] kernfs rx-0: removing [ 196.470150][T11176] kobject: 'rx-0' (ffff8880572f0050): calling ktype release [ 196.470168][T11176] kobject: 'rx-0': free name [ 196.470187][T11176] kernfs tx_timeout: removing [ 196.470210][T11176] kernfs traffic_class: removing [ 196.470232][T11176] kernfs xps_cpus: removing [ 196.470253][T11176] kernfs xps_rxqs: removing [ 196.470273][T11176] kernfs tx_maxrate: removing [ 196.470292][T11176] kobject: 'tx-0' (ffff88805aae0020): kobject_cleanup, parent ffff888034901450 [ 196.470307][T11176] kobject: 'tx-0' (ffff88805aae0020): auto cleanup kobject_del [ 196.470319][T11176] kobject: 'tx-0' (ffff88805aae0020): auto cleanup 'remove' event [ 196.470330][T11176] kobject: 'tx-0' (ffff88805aae0020): kobject_uevent_env [ 196.470356][T11176] kobject: 'tx-0' (ffff88805aae0020): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 196.470422][T11176] kernfs tx-0: removing [ 196.470441][T11176] kobject: 'tx-0' (ffff88805aae0020): calling ktype release [ 196.470458][T11176] kobject: 'tx-0': free name [ 196.470474][T11176] kernfs queues: removing [ 196.470494][T11176] kobject: 'queues' (ffff888034901450): kobject_cleanup, parent 0000000000000000 [ 196.470509][T11176] kobject: 'queues' (ffff888034901450): calling ktype release [ 196.470521][T11176] kobject: 'queues' (ffff888034901450): kset_release [ 196.470541][T11176] kobject: 'queues': free name [ 196.470571][T11176] kernfs runtime_status: removing [ 196.470593][T11176] kernfs control: removing [ 196.470611][T11176] kernfs runtime_suspended_time: removing [ 196.470633][T11176] kernfs runtime_active_time: removing [ 196.470652][T11176] kernfs autosuspend_delay_ms: removing [ 196.470680][T11176] kernfs power: removing [ 196.470705][T11176] kernfs subsystem: removing [ 196.470727][T11176] kernfs syzkaller0: removing [ 196.470749][T11176] kernfs uevent: removing [ 196.470829][T11176] kernfs tun_flags: removing [ 196.470852][T11176] kernfs owner: removing [ 196.470870][T11176] kernfs group: removing [ 196.470890][T11176] kernfs rx_packets: removing [ 196.470908][T11176] kernfs tx_packets: removing [ 196.470927][T11176] kernfs rx_bytes: removing [ 196.470945][T11176] kernfs tx_bytes: removing [ 196.470964][T11176] kernfs rx_errors: removing [ 196.470984][T11176] kernfs tx_errors: removing [ 196.471005][T11176] kernfs rx_dropped: removing [ 196.471026][T11176] kernfs tx_dropped: removing [ 196.471047][T11176] kernfs multicast: removing [ 196.471067][T11176] kernfs collisions: removing [ 196.471088][T11176] kernfs rx_length_errors: removing [ 196.471110][T11176] kernfs rx_over_errors: removing [ 196.471131][T11176] kernfs rx_crc_errors: removing [ 196.471152][T11176] kernfs rx_frame_errors: removing [ 196.471174][T11176] kernfs rx_fifo_errors: removing [ 196.471195][T11176] kernfs rx_missed_errors: removing [ 196.471216][T11176] kernfs tx_aborted_errors: removing [ 196.471243][T11176] kernfs tx_carrier_errors: removing [ 196.471264][T11176] kernfs tx_fifo_errors: removing [ 196.471285][T11176] kernfs tx_heartbeat_errors: removing [ 196.471306][T11176] kernfs tx_window_errors: removing [ 196.471328][T11176] kernfs rx_compressed: removing [ 196.471349][T11176] kernfs tx_compressed: removing [ 196.471369][T11176] kernfs rx_nohandler: removing [ 196.471389][T11176] kernfs statistics: removing [ 196.471415][T11176] kernfs netdev_group: removing [ 196.471436][T11176] kernfs type: removing [ 196.471457][T11176] kernfs dev_id: removing [ 196.471477][T11176] kernfs dev_port: removing [ 196.471498][T11176] kernfs iflink: removing [ 196.471519][T11176] kernfs ifindex: removing [ 196.471550][T11176] kernfs name_assign_type: removing [ 196.471577][T11176] kernfs addr_assign_type: removing [ 196.471598][T11176] kernfs addr_len: removing [ 196.471619][T11176] kernfs link_mode: removing [ 196.471641][T11176] kernfs address: removing [ 196.471662][T11176] kernfs broadcast: removing [ 196.471682][T11176] kernfs speed: removing [ 196.471702][T11176] kernfs duplex: removing [ 196.471723][T11176] kernfs dormant: removing [ 196.471743][T11176] kernfs testing: removing [ 196.471765][T11176] kernfs operstate: removing [ 196.471785][T11176] kernfs carrier_changes: removing [ 196.471807][T11176] kernfs ifalias: removing [ 196.471828][T11176] kernfs carrier: removing [ 196.471848][T11176] kernfs mtu: removing [ 196.471869][T11176] kernfs flags: removing [ 196.471889][T11176] kernfs tx_queue_len: removing [ 196.475370][ T12] kobject: 'lo' (ffff888058b587c0): kobject_cleanup, parent 0000000000000000 [ 196.475394][ T12] kobject: 'lo' (ffff888058b587c0): calling ktype release [ 196.475419][ T12] kobject: 'lo': free name [ 196.475545][ T12] sctp: sctp_close: sk:ffff888035048940, timeout:0 [ 196.475566][ T12] sctp: sctp_destroy_sock: sk:ffff888035048940 [ 196.476105][T11176] kernfs gro_flush_timeout: removing [ 196.476132][T11176] kernfs napi_defer_hard_irqs: removing [ 196.476207][T11176] kernfs proto_down: removing [ 196.476231][T11176] kernfs carrier_up_count: removing [ 196.476253][T11176] kernfs carrier_down_count: removing [ 196.476276][T11176] kernfs threaded: removing [ 196.476298][T11176] PM: Removing info for No Bus:syzkaller0 [ 196.476317][T11176] kobject: 'syzkaller0' (ffff88802bafc7c0): kobject_uevent_env [ 196.476352][T11176] kobject: 'syzkaller0' (ffff88802bafc7c0): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 196.476431][T11176] kernfs syzkaller0: removing [ 196.490549][T11188] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 196.490581][T11188] net syzkaller0: siw: event 6 [ 196.491128][T11188] syzkaller0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 196.491150][T11188] net syzkaller0: siw: event 18 [ 196.492890][T11188] kernfs rps_cpus: removing [ 196.492925][T11188] kernfs rps_flow_cnt: removing [ 196.492947][T11188] kobject: 'rx-0' (ffff88805aaa0050): kobject_cleanup, parent ffff8880348cef50 [ 196.492996][T11188] kobject: 'rx-0' (ffff88805aaa0050): auto cleanup kobject_del [ 196.493012][T11188] kobject: 'rx-0' (ffff88805aaa0050): auto cleanup 'remove' event [ 196.493025][T11188] kobject: 'rx-0' (ffff88805aaa0050): kobject_uevent_env [ 196.493087][T11188] kobject: 'rx-0' (ffff88805aaa0050): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 196.493192][T11188] kernfs rx-0: removing [ 196.493243][T11188] kobject: 'rx-0' (ffff88805aaa0050): calling ktype release [ 196.493279][T11188] kobject: 'rx-0': free name [ 196.493299][T11188] kernfs tx_timeout: removing [ 196.493338][T11188] kernfs traffic_class: removing [ 196.493361][T11188] kernfs xps_cpus: removing [ 196.493382][T11188] kernfs xps_rxqs: removing [ 196.493403][T11188] kernfs tx_maxrate: removing [ 196.493420][T11188] kobject: 'tx-0' (ffff888050360020): kobject_cleanup, parent ffff8880348cef50 [ 196.493435][T11188] kobject: 'tx-0' (ffff888050360020): auto cleanup kobject_del [ 196.493447][T11188] kobject: 'tx-0' (ffff888050360020): auto cleanup 'remove' event [ 196.493459][T11188] kobject: 'tx-0' (ffff888050360020): kobject_uevent_env [ 196.493894][T11188] kobject: 'tx-0' (ffff888050360020): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 196.494086][T11188] kernfs tx-0: removing [ 196.494120][T11188] kobject: 'tx-0' (ffff888050360020): calling ktype release [ 196.494138][T11188] kobject: 'tx-0': free name [ 196.494154][T11188] kernfs queues: removing [ 196.494174][T11188] kobject: 'queues' (ffff8880348cef50): kobject_cleanup, parent 0000000000000000 [ 196.494189][T11188] kobject: 'queues' (ffff8880348cef50): calling ktype release [ 196.494201][T11188] kobject: 'queues' (ffff8880348cef50): kset_release [ 196.494219][T11188] kobject: 'queues': free name [ 196.494244][T11188] kernfs runtime_status: removing [ 196.494266][T11188] kernfs control: removing [ 196.494288][T11188] kernfs runtime_suspended_time: removing [ 196.494309][T11188] kernfs runtime_active_time: removing [ 196.494331][T11188] kernfs autosuspend_delay_ms: removing [ 196.494362][T11188] kernfs power: removing [ 196.494388][T11188] kernfs subsystem: removing [ 196.494411][T11188] kernfs syzkaller0: removing [ 196.494434][T11188] kernfs uevent: removing [ 196.494460][T11188] kernfs tun_flags: removing [ 196.494489][T11188] kernfs owner: removing [ 196.494508][T11188] kernfs group: removing [ 196.494531][T11188] kernfs rx_packets: removing [ 196.494552][T11188] kernfs tx_packets: removing [ 196.494570][T11188] kernfs rx_bytes: removing [ 196.494591][T11188] kernfs tx_bytes: removing [ 196.494613][T11188] kernfs rx_errors: removing [ 196.494634][T11188] kernfs tx_errors: removing [ 196.494654][T11188] kernfs rx_dropped: removing [ 196.494675][T11188] kernfs tx_dropped: removing [ 196.494696][T11188] kernfs multicast: removing [ 196.494716][T11188] kernfs collisions: removing [ 196.494735][T11188] kernfs rx_length_errors: removing [ 196.494756][T11188] kernfs rx_over_errors: removing [ 196.494778][T11188] kernfs rx_crc_errors: removing [ 196.494800][T11188] kernfs rx_frame_errors: removing [ 196.494821][T11188] kernfs rx_fifo_errors: removing [ 196.494842][T11188] kernfs rx_missed_errors: removing [ 196.494862][T11188] kernfs tx_aborted_errors: removing [ 196.494883][T11188] kernfs tx_carrier_errors: removing [ 196.494904][T11188] kernfs tx_fifo_errors: removing [ 196.494924][T11188] kernfs tx_heartbeat_errors: removing [ 196.494945][T11188] kernfs tx_window_errors: removing [ 196.494966][T11188] kernfs rx_compressed: removing [ 196.494987][T11188] kernfs tx_compressed: removing [ 196.495007][T11188] kernfs rx_nohandler: removing [ 196.495028][T11188] kernfs statistics: removing [ 196.495160][T11188] kernfs netdev_group: removing [ 196.495186][T11188] kernfs type: removing [ 196.495207][T11188] kernfs dev_id: removing [ 196.495228][T11188] kernfs dev_port: removing [ 196.495248][T11188] kernfs iflink: removing [ 196.495268][T11188] kernfs ifindex: removing [ 196.495289][T11188] kernfs name_assign_type: removing [ 196.495310][T11188] kernfs addr_assign_type: removing [ 196.495330][T11188] kernfs addr_len: removing [ 196.495351][T11188] kernfs link_mode: removing [ 196.495372][T11188] kernfs address: removing [ 196.495393][T11188] kernfs broadcast: removing [ 196.495414][T11188] kernfs speed: removing [ 196.495435][T11188] kernfs duplex: removing [ 196.495456][T11188] kernfs dormant: removing [ 196.495483][T11188] kernfs testing: removing [ 196.495505][T11188] kernfs operstate: removing [ 196.495526][T11188] kernfs carrier_changes: removing [ 196.495547][T11188] kernfs ifalias: removing [ 196.495566][T11188] kernfs carrier: removing [ 196.495587][T11188] kernfs mtu: removing [ 196.495608][T11188] kernfs flags: removing [ 196.495627][T11188] kernfs tx_queue_len: removing [ 196.495647][T11188] kernfs gro_flush_timeout: removing [ 196.495666][T11188] kernfs napi_defer_hard_irqs: removing [ 196.495687][T11188] kernfs proto_down: removing [ 196.495707][T11188] kernfs carrier_up_count: removing [ 196.495728][T11188] kernfs carrier_down_count: removing [ 196.495747][T11188] kernfs threaded: removing [ 196.495774][T11188] PM: Removing info for No Bus:syzkaller0 [ 196.495793][T11188] kobject: 'syzkaller0' (ffff888059a087c0): kobject_uevent_env [ 196.495821][T11188] kobject: 'syzkaller0' (ffff888059a087c0): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 196.495888][T11188] kernfs syzkaller0: removing [ 196.502983][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 196.503005][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 196.503018][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 196.503164][T11176] kobject: 'syzkaller0' (ffff88802bafc7c0): kobject_cleanup, parent 0000000000000000 [ 196.503185][T11176] kobject: 'syzkaller0' (ffff88802bafc7c0): calling ktype release [ 196.503220][T11176] kobject: 'syzkaller0': free name [ 196.503286][T11176] nfc: rawsock_release: sock=ffff88803b3c9180 sk=ffff88802ba60000 [ 196.503302][T11176] nfc: rawsock_destruct: sk=ffff88802ba60000 [ 196.503500][T11176] sctp: sctp_close: sk:ffff888034580940, timeout:0 [ 196.503519][T11176] sctp: sctp_destroy_sock: sk:ffff888034580940 [ 196.503588][T11176] sctp: sctp_close: sk:ffff888034581280, timeout:0 [ 196.503605][T11176] sctp: sctp_destroy_sock: sk:ffff888034581280 [ 196.504661][ T12] kobject: 'nfs_client' (ffff88802b57ba00): kobject_uevent_env [ 196.504691][ T12] kobject: 'nfs_client' (ffff88802b57ba00): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 196.504806][ T12] kernfs identifier: removing [ 196.504833][ T12] kernfs nfs_client: removing [ 196.504852][ T12] kobject: 'nfs_client' (ffff88802b57ba00): kobject_cleanup, parent 0000000000000000 [ 196.504869][ T12] kobject: 'nfs_client' (ffff88802b57ba00): calling ktype release [ 196.504881][ T12] kobject: 'nfs_client': free name [ 196.504891][ T12] kernfs net: removing [ 196.504917][ T12] kobject: 'net' (ffff88802b57ba40): kobject_cleanup, parent 0000000000000000 [ 196.504932][ T12] kobject: 'net' (ffff88802b57ba40): calling ktype release [ 196.504947][ T12] kobject: 'net': free name [ 196.527627][ T7995] send_to_group: group=ffff888036f3f000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888023cb2e80 data_type=2 dir=0000000000000000 cookie=0 [ 196.527662][ T7995] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff888022cf8af0 mask=8 [ 196.527684][ T7995] fsnotify_insert_event: group=ffff888036f3f000 event=ffff88805a75fa00 [ 196.527824][ T5137] get_one_event: group=ffff888036f3f000 event=ffff88805a75fa00 [ 196.527845][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff88805a75fa00 [ 196.527860][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff88805a75fa00 [ 196.527874][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff88805a75fa00 [ 196.527904][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.534765][ T5137] kobject: 'loop5' (ffff8880206174e0): kobject_uevent_env [ 196.534799][ T5137] kobject: 'loop5' (ffff8880206174e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 196.536449][T10845] inotify_handle_inode_event: group=ffff888036f3f000 mark=ffff888022cf8af0 mask=8000 [ 196.536475][T10845] fsnotify_insert_event: group=ffff888036f3f000 event=ffff88802a169540 [ 196.538173][ T5137] get_one_event: group=ffff888036f3f000 event=ffff88802a169540 [ 196.538190][ T5137] fsnotify_remove_first_event: group=ffff888036f3f000 event=ffff88802a169540 [ 196.538205][ T5137] inotify_read: group=ffff888036f3f000 kevent=ffff88802a169540 [ 196.538218][ T5137] copy_event_to_user: group=ffff888036f3f000 event=ffff88802a169540 [ 196.538239][ T5137] inotify_read: group=ffff888036f3f000 kevent=0000000000000000 [ 196.564116][T11188] kobject: 'syzkaller0' (ffff888059a087c0): kobject_cleanup, parent 0000000000000000 [ 196.564142][T11188] kobject: 'syzkaller0' (ffff888059a087c0): calling ktype release [ 196.564171][T11188] kobject: 'syzkaller0': free name [ 196.564382][T11188] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1007 [ 196.564626][T11190] kcov: kcov_task_exit: t = ffff88802759cb00, kcov->t = ffff88802759cb00 [ 196.564642][T11192] kcov: kcov_task_exit: t = ffff88802f050000, kcov->t = ffff88802f050000 [ 196.564821][T11191] kcov: kcov_task_exit: t = ffff88802759a580, kcov->t = ffff88802759a580 [ 196.565095][T11189] kcov: kcov_task_exit: t = ffff888030ba8000, kcov->t = ffff888030ba8000 [ 196.565138][ T5809] nfc: nfc_urelease_event_work: portid 1007 [ 196.592014][ C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 11) [ 196.592643][ T7608] net_ratelimit: 173 callbacks suppressed [ 196.592655][ T7608] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 196.610588][ T1848] Added buffer head 3 to ffff888027202400 [ 196.610613][ T1848] Added buffer head 2 to ffff888027202400 [ 196.611406][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 196.611459][ T10] No more buffers in queue [ 196.612272][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 196.612286][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 196.612294][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 196.612304][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 196.671992][ C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 196.672205][ T7608] wireguard: wg1: Sending handshake initiation to peer 4 (127.0.0.1:20003) [ 196.722143][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 196.722167][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 196.722180][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 196.722198][ T6818] bond1: (slave dummy0): failed to get link speed/duplex [ 196.823971][ T1848] Added buffer head 2 to ffff888027202400 [ 196.824000][ T1848] Added buffer head 3 to ffff888027202400 [ 196.824776][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 196.824843][ T10] No more buffers in queue [ 196.832016][ C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 196.832579][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 196.832598][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 196.832606][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 196.832616][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 196.832680][ T175] wireguard: wg1: Sending handshake initiation to peer 34 (127.0.0.1:20003) [ 196.833185][ T175] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 196.834242][ C2] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 196.834524][ T5819] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 196.911966][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 196.912709][ T175] wireguard: wg1: Sending handshake initiation to peer 28 (127.0.0.1:20003) [ 196.942156][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 196.942181][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 196.942198][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.024071][ T1848] Added buffer head 3 to ffff888027202400 [ 197.024096][ T1848] Added buffer head 2 to ffff888027202400 [ 197.024951][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 197.025025][ T10] No more buffers in queue [ 197.052494][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.052518][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.052531][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.172216][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.172233][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.172242][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.234273][ C2] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3) [ 197.234395][ C2] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8) [ 197.237319][ T1848] Added buffer head 2 to ffff888027202400 [ 197.237341][ T1848] Added buffer head 3 to ffff888027202400 [ 197.238146][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 197.238199][ T10] No more buffers in queue [ 197.282390][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.282414][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.282427][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.322241][ T6818] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 197.322269][ T6818] geneve2: no tunnel metadata [ 197.392075][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.392093][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.392102][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.432541][ T6818] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 197.450750][ T1848] Added buffer head 3 to ffff888027202400 [ 197.450788][ T1848] Added buffer head 2 to ffff888027202400 [ 197.451599][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 197.451671][ T10] No more buffers in queue [ 197.512047][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.512066][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.512075][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.542186][ T5575] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 197.632147][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.632165][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.632174][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.664117][ T1848] Added buffer head 2 to ffff888027202400 [ 197.664140][ T1848] Added buffer head 3 to ffff888027202400 [ 197.664947][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 197.664993][ T10] No more buffers in queue [ 197.742151][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.742169][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.742177][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.852470][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.852495][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.852506][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 197.864041][ T1848] Added buffer head 3 to ffff888027202400 [ 197.864064][ T1848] Added buffer head 2 to ffff888027202400 [ 197.864902][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 197.864956][ T10] No more buffers in queue [ 197.952002][ C0] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 197.953715][ C2] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 197.962779][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 197.962802][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 197.962814][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.072197][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.072222][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.072235][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.077844][ T1848] Added buffer head 2 to ffff888027202400 [ 198.077875][ T1848] Added buffer head 3 to ffff888027202400 [ 198.078825][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 198.078889][ T10] No more buffers in queue [ 198.182217][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.182245][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.182260][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.290795][ T1848] Added buffer head 3 to ffff888027202400 [ 198.290820][ T1848] Added buffer head 2 to ffff888027202400 [ 198.291702][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 198.291774][ T10] No more buffers in queue [ 198.292570][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.292590][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.292604][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.402280][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.402310][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.402325][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.432443][ T6818] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 198.432479][ T6818] geneve2: no tunnel metadata [ 198.504423][ T1848] Added buffer head 2 to ffff888027202400 [ 198.504452][ T1848] Added buffer head 3 to ffff888027202400 [ 198.505419][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 198.505509][ T10] No more buffers in queue [ 198.512839][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.512864][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.512878][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.542678][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 198.622112][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.622139][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.622153][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.652254][ T12] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 198.704264][ T10] Added buffer head 3 to ffff888027202400 [ 198.704303][ T10] Added buffer head 2 to ffff888027202400 [ 198.705184][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 198.705257][ T1848] No more buffers in queue [ 198.742166][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.742193][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.742207][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.862129][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.862156][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.862169][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 198.917534][ T10] Added buffer head 2 to ffff888027202400 [ 198.917560][ T10] Added buffer head 3 to ffff888027202400 [ 198.918422][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 198.918492][ T1848] No more buffers in queue [ 198.982073][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 198.982102][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 198.982116][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.102105][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.102129][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.102143][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.130846][ T10] Added buffer head 3 to ffff888027202400 [ 199.130870][ T10] Added buffer head 2 to ffff888027202400 [ 199.131665][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 199.131725][ T1848] No more buffers in queue [ 199.151992][ C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 10) [ 199.212292][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.212327][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.212336][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.322592][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.322610][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.322619][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.344192][ T10] Added buffer head 2 to ffff888027202400 [ 199.344216][ T10] Added buffer head 3 to ffff888027202400 [ 199.345158][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 199.345219][ T1848] No more buffers in queue [ 199.432129][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.432157][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.432170][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.542149][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.542177][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.542190][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.546015][ T10] Added buffer head 3 to ffff888027202400 [ 199.546052][ T10] Added buffer head 2 to ffff888027202400 [ 199.546967][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 199.548835][ T1848] No more buffers in queue [ 199.572231][ T12] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 199.572256][ T12] geneve2: no tunnel metadata [ 199.652554][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.652574][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.652582][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.682505][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 199.757523][ T10] Added buffer head 2 to ffff888027202400 [ 199.757547][ T10] Added buffer head 3 to ffff888027202400 [ 199.758315][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 199.758361][ T5879] No more buffers in queue [ 199.762135][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.762158][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.762172][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.792263][ T12] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 199.882290][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.882315][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.882329][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 199.971116][ T10] Added buffer head 3 to ffff888027202400 [ 199.971210][ T10] Added buffer head 2 to ffff888027202400 [ 199.972034][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 199.972343][ T5879] No more buffers in queue [ 199.992075][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 199.992100][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 199.992113][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.102395][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.102413][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.102422][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.184527][ T10] Added buffer head 2 to ffff888027202400 [ 200.184565][ T10] Added buffer head 3 to ffff888027202400 [ 200.185347][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 200.185399][ T5879] No more buffers in queue [ 200.212168][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.212187][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.212196][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.322078][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.322098][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.322106][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.384895][ T10] Added buffer head 3 to ffff888027202400 [ 200.384930][ T10] Added buffer head 2 to ffff888027202400 [ 200.385754][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 200.385865][ T5879] No more buffers in queue [ 200.432031][ C3] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 200.432257][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.432275][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.432288][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.542131][ T5575] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.542153][ T5575] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.542166][ T5575] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.611071][ T10] Added buffer head 2 to ffff888027202400 [ 200.611109][ T10] Added buffer head 3 to ffff888027202400 [ 200.611998][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 200.612167][ T5879] No more buffers in queue [ 200.652710][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.652735][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.652748][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.702178][ T5575] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 200.702212][ T5575] geneve2: no tunnel metadata [ 200.762151][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.762170][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.762179][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.802224][T10661] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 200.824252][ T10] Added buffer head 3 to ffff888027202400 [ 200.824277][ T10] Added buffer head 2 to ffff888027202400 [ 200.825153][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 200.825213][ T5879] No more buffers in queue [ 200.872701][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.872729][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.872743][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 200.932547][T10661] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 200.982140][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 200.982160][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 200.982169][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.024402][ T10] Added buffer head 2 to ffff888027202400 [ 201.024440][ T10] Added buffer head 3 to ffff888027202400 [ 201.025301][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 201.025382][ T5879] No more buffers in queue [ 201.092172][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.092191][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.092199][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.202465][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.202483][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.202492][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.237708][ T10] Added buffer head 3 to ffff888027202400 [ 201.237732][ T10] Added buffer head 2 to ffff888027202400 [ 201.238518][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 201.238592][ T5879] No more buffers in queue [ 201.312201][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.312224][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.312234][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.422089][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.422107][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.422116][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.451030][ T10] Added buffer head 2 to ffff888027202400 [ 201.451057][ T10] Added buffer head 3 to ffff888027202400 [ 201.451845][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 201.452063][ T5879] No more buffers in queue [ 201.532106][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.532125][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.532134][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.631993][ C2] net_ratelimit: 109 callbacks suppressed [ 201.632022][ C3] wireguard: wg0: Sending keepalive packet to peer 31 (127.0.0.1:20002) [ 201.632052][ C2] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 201.632960][ T62] wireguard: wg0: No route to 127.0.0.1:20002, error -101 [ 201.642733][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.642758][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.642772][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.642788][T10661] bond1: (slave dummy0): failed to get link speed/duplex [ 201.664422][ T5879] Added buffer head 3 to ffff888027202400 [ 201.664457][ T5879] Added buffer head 2 to ffff888027202400 [ 201.665266][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 201.665334][ T10] No more buffers in queue [ 201.752086][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.752108][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.752117][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.752128][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 201.791970][ C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 201.792307][ T175] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 201.801947][ C2] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 10) [ 201.802035][ C2] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 201.802053][ T112] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 201.802236][ T112] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 201.802266][ T112] wireguard: wg1: Sending handshake initiation to peer 3 ([::1]:20001/0%0) [ 201.802398][ T112] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 201.832291][ T12] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 201.832325][ T12] geneve2: no tunnel metadata [ 201.862078][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.862097][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.862105][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 201.864439][ T5879] Added buffer head 2 to ffff888027202400 [ 201.864467][ T5879] Added buffer head 3 to ffff888027202400 [ 201.865302][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 201.865357][ T10] No more buffers in queue [ 201.922221][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 201.972468][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 201.972487][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 201.972495][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.052270][T10661] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 202.077817][ T5879] Added buffer head 3 to ffff888027202400 [ 202.077858][ T5879] Added buffer head 2 to ffff888027202400 [ 202.078774][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 202.078851][ T10] No more buffers in queue [ 202.082155][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.082192][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.082202][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.192146][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.192165][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.192173][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.272579][ C0] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9) [ 202.302110][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.302135][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.302143][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.305153][ T5879] Added buffer head 2 to ffff888027202400 [ 202.305188][ T5879] Added buffer head 3 to ffff888027202400 [ 202.305984][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 202.306049][ T10] No more buffers in queue [ 202.412108][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.412126][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.412134][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.431981][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 11) [ 202.432104][ C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 9) [ 202.432175][ C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 11) [ 202.505135][ T5879] Added buffer head 3 to ffff888027202400 [ 202.505176][ T5879] Added buffer head 2 to ffff888027202400 [ 202.505958][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 202.506023][ T10] No more buffers in queue [ 202.522084][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.522102][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.522111][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.632226][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.632252][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.632266][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.731214][ T5879] Added buffer head 2 to ffff888027202400 [ 202.731251][ T5879] Added buffer head 3 to ffff888027202400 [ 202.732125][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 202.732258][ T10] No more buffers in queue [ 202.752870][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.752896][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.752909][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.862176][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.862202][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.862216][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 202.944456][ T5879] Added buffer head 3 to ffff888027202400 [ 202.944482][ T5879] Added buffer head 2 to ffff888027202400 [ 202.945241][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 202.945297][ T10] No more buffers in queue [ 202.952152][ T12] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 202.952173][ T12] geneve2: no tunnel metadata [ 202.972109][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 202.972133][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 202.972145][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.032213][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 203.071953][ C0] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 203.072015][ C0] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 203.082875][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.082898][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.082910][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.144500][ T5879] Added buffer head 2 to ffff888027202400 [ 203.144525][ T5879] Added buffer head 3 to ffff888027202400 [ 203.145316][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 203.145368][ T10] No more buffers in queue [ 203.172418][ T12] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 203.192428][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.192461][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.192469][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.302181][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.302207][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.302221][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.357861][ T5879] Added buffer head 3 to ffff888027202400 [ 203.357885][ T5879] Added buffer head 2 to ffff888027202400 [ 203.358647][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 203.358698][ T10] No more buffers in queue [ 203.412219][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.412245][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.412258][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.532642][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.532669][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.532682][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.571179][ T5879] Added buffer head 2 to ffff888027202400 [ 203.571210][ T5879] Added buffer head 3 to ffff888027202400 [ 203.572065][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 203.575838][ T10] No more buffers in queue [ 203.642540][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.642569][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.642583][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.711993][ C0] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 203.762620][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.762650][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.762663][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.784529][ T10] Added buffer head 3 to ffff888027202400 [ 203.784555][ T10] Added buffer head 2 to ffff888027202400 [ 203.785408][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 203.785464][ T5879] No more buffers in queue [ 203.872120][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.872147][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.872159][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.982147][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 203.982174][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 203.982187][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 203.999591][ T10] Added buffer head 2 to ffff888027202400 [ 203.999629][ T10] Added buffer head 3 to ffff888027202400 [ 204.000479][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 204.000538][ T5879] No more buffers in queue [ 204.072186][ T12] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 204.072211][ T12] geneve2: no tunnel metadata [ 204.092382][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.092398][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.092407][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.132110][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 204.202519][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.202538][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.202546][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.211273][ T10] Added buffer head 3 to ffff888027202400 [ 204.211297][ T10] Added buffer head 2 to ffff888027202400 [ 204.212131][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 204.212575][ T5879] No more buffers in queue [ 204.292206][ T12] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 204.312206][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.312225][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.312234][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.352256][ C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 11) [ 204.422455][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.422473][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.422481][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.424860][ T10] Added buffer head 2 to ffff888027202400 [ 204.424898][ T10] Added buffer head 3 to ffff888027202400 [ 204.425699][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 204.425772][ T5879] No more buffers in queue [ 204.542801][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.542827][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.542840][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.624562][ T10] Added buffer head 3 to ffff888027202400 [ 204.624587][ T10] Added buffer head 2 to ffff888027202400 [ 204.625366][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 204.625426][ T5879] No more buffers in queue [ 204.652107][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.652126][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.652135][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.762479][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.762497][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.762505][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.838015][ T10] Added buffer head 2 to ffff888027202400 [ 204.838052][ T10] Added buffer head 3 to ffff888027202400 [ 204.838884][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 204.838957][ T5879] No more buffers in queue [ 204.872169][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.872188][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.872196][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.982107][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 204.982133][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 204.982146][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 204.992597][T10661] IPv6: now = 4294957632, schedule = 4294969691, rounded schedule = 4294969791 => 4294969691 [ 205.051641][ T10] Added buffer head 3 to ffff888027202400 [ 205.051666][ T10] Added buffer head 2 to ffff888027202400 [ 205.052449][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 205.054433][ T5879] No more buffers in queue [ 205.092185][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.092210][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.092224][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.182142][ T12] bond2: (slave geneve2): Send learning packet: mac 0e:a7:31:0f:70:a8 vlan 0 [ 205.182178][ T12] geneve2: no tunnel metadata [ 205.202439][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.202464][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.202484][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.242212][ T12] bond2: (slave veth5): Send learning packet: mac ee:17:07:00:65:f2 vlan 0 [ 205.265690][ T10] Added buffer head 2 to ffff888027202400 [ 205.265715][ T10] Added buffer head 3 to ffff888027202400 [ 205.266819][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 205.266960][ T5879] No more buffers in queue [ 205.312187][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.312209][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.312221][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.392092][ T12] bond1: (slave veth0_to_bond): Send learning packet: mac aa:aa:aa:aa:aa:bb vlan 0 [ 205.422142][T10661] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.422161][T10661] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.422170][T10661] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.464659][ T10] Added buffer head 3 to ffff888027202400 [ 205.464684][ T10] Added buffer head 2 to ffff888027202400 [ 205.465543][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 205.465648][ T5879] No more buffers in queue [ 205.471999][ C3] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 205.532608][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.532635][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.532648][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.642117][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.642135][ T12] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.642144][ T12] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.678377][ T10] Added buffer head 2 to ffff888027202400 [ 205.678401][ T10] Added buffer head 3 to ffff888027202400 [ 205.679297][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 205.679359][ T5879] No more buffers in queue [ 205.752134][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.752162][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.752176][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.862372][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.862389][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.862398][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 205.891494][ T10] Added buffer head 3 to ffff888027202400 [ 205.891519][ T10] Added buffer head 2 to ffff888027202400 [ 205.892356][ C0] virtqueue callback for ffff888027202400 (ffffffff86658b20) [ 205.893266][ T5879] No more buffers in queue [ 205.972126][ T6818] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter [ 205.972144][ T6818] bond1: (slave veth3): Port 1 Received status full duplex update from adapter [ 205.972153][ T6818] bond1: (slave veth3): Port 1 changed speed/duplex [ 206.092165][ T12] bond1: (slave veth3): Port 1 Received link speed 7 update from adapter