last executing test programs: 26.090891701s ago: executing program 3 (id=36): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_iommufd/times\x00', 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0xf09d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e5b, 0x0, @local, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) connect$unix(r1, &(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r0) r2 = socket$inet6(0xa, 0x805, 0x0) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000380)=@default_ap_ssid, 0x6, 0x1) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 26.031569244s ago: executing program 3 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x20, r2, 0x7ff, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) 26.023085794s ago: executing program 3 (id=38): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_usb_connect$uac3(0x2, 0x103, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x84, 0x5, 0x5, 0x8, 0xfb}, 0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x67, &(0x7f0000000600)=@string={0x67, 0x3, "556ba986ed95e488ab859c32cef6b774f6d7fa7af721ac88e9e363c86973b8cf1caca31de76286b92ac110dd4ba5aad7d6d5f3cb120505afcc6fa47e3817b9bca9fe51c7860720f02094aa08fbf804bc91deb04151e9ca6ce84f2d03e84e8d93fa4f71d379"}}]}) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000700000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079001a0000"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x3, &(0x7f00000001c0)=[{0x3, 0x7, 0xf, 0x10}, {0x3, 0x1, 0x2, 0x5}, {0x3ff, 0x7, 0x0, 0xfbb}]}) (async) syz_usb_control_io(r2, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x21, 0x8c, {0x8c, 0x1e, "5f8c9a48176cd1fd20864cb2e25bf8daa86ee2062016f3e3878202711f4accb55254b4e0a339d9061bb2d2b50799ad0530e31ee0d4c2f8f845a42314c8bf616e24a7ea2a0a438bc97591f55e6df0a25704fc1dd712bdfb5ec6cc4f0acebf73018ced88832556a09afcab34206ff90fe29a2a190799507a97ffd795be2e99b447021fe172d0ea6d3d0df2"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000900)={0x0, 0xf, 0x69, {0x5, 0xf, 0x69, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x9, 0xf, 0x9, [0x6000, 0xc00f, 0xc000, 0xff0f, 0x101c000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x3e, 0x10, 0xa, "7e7ca3b45ae6d9a0cb349f7d73a150bcf48f976be37dd444dd88e49b3fb106a10141b27bbc7f22962c64a6e827184aaf070cc2f505d2248487d946"}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x7f, 0x1, "1d842a9b", "db8f78d2"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x7, 0xa9, 0x3, 0x0, 0x4a9, 0x8c6b}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)=ANY=[@ANYBLOB="400ae5000000e42c0857f462743d1072ada026fb0da299539a03854f157cc32fcee09a02e625f10cd96c4c823520ad13ef5091abdbe2b73ee9a3aa797810ffc0d1d9e91b5af9b365fe409f50223f5a8c718fc745cbf006c2c5c87114530872846474fa4f7c5415b3694e65763582ca8e038641e18cdc4af8423544a3c481f3890a58281241ab53ff939b5e7234af7ec7b6185e0ad6a0fc6065668d7be7bb479c38d57bcde976a23a8538bea20871532013b74ee7179ed0ba9de4f0a37182be19c1b624d34bca8213c6f30ca1568a61bf16fbd443c6c38d15f23ca1442f93cc8c78aed1e4611386560d111f"], &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x9b}, &(0x7f0000000c00)={0x20, 0x0, 0x4}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x160, 0x10, [0xff00]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "7cee"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "0ff9"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0xd}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x4c}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x3}}) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e29, 0xf, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r5, r5, 0x0, 0x6) getsockname$inet6(r4, &(0x7f0000000540), &(0x7f0000001000)=0x1c) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r3, 0x2f}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r0, r7, 0x0, 0x7ffff004) 23.140290138s ago: executing program 1 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000008, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0x781b2528, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x6, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1, 0x9, 0x4, 0x6, 0x2, 0x8, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x6, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0xb, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0xffff84a7, 0xca1, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x570, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0x10, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x1, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x1003, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x5, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x10, 0xceb6, 0x5, 0x7, 0x8, 0x6, 0x5, 0xd, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x7, 0x18, 0x8, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x21af, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0xfff, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x7, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x7, 0x80000002, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x6, 0x4d2, 0x4000000, {0x8, 0x1, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000008, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0x781b2528, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x6, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1, 0x9, 0x4, 0x6, 0x2, 0x8, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x6, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0xb, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0xffff84a7, 0xca1, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x570, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0x10, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x1, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x1003, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x5, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x10, 0xceb6, 0x5, 0x7, 0x8, 0x6, 0x5, 0xd, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x7, 0x18, 0x8, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x21af, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0xfff, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x7, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x7, 0x80000002, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x6, 0x4d2, 0x4000000, {0x8, 0x1, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) io_uring_setup(0x24f6, &(0x7f0000000100)={0x0, 0x8389, 0x8000, 0x1, 0x35a}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="4000f20f"], &(0x7f0000000200)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.95113159s ago: executing program 3 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0xf3, 0x0, 0x7fff0006}]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/100, 0x64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @sit={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xa5}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x3}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESHEX=r2, @ANYBLOB], 0x28}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/brport/root_block\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) syz_emit_ethernet(0x38, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000002000000000100264242030000000000000000000000000100000000000000000000000180010000140002000f000000"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0x80fc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="27eef29319eded8ab98f190de98dbb4aed142d5ac05f6b9c960b05ed5b5cc5c7759eab594ca7493b142dec43d451320388a53e23d80641c512d5bb1c5b289fe2b5a98defe64a45d2b47d07f10b9d18731315d1a031342b0e71e15379027f987d1daee7cc167b2e4f0fa567fc26a9f05965d43e25713cd2c2fbfa70082b49b16ed2f5ba3b824d361c6bb7cae157c78ad9000c5588f152b5db210f151f2fbcf2164493780bb657921a895bf182492a0e62affc28696e863720098d0000000000000000"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x10}, 0xc804) 22.901155308s ago: executing program 3 (id=75): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$mtd(0x0, 0x7fffffffffffffff, 0x1835a0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x4880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000050500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) 22.900353362s ago: executing program 1 (id=76): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) r1 = syz_usb_connect(0x0, 0x16b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0xaf, 0xa3, 0x10, 0x499, 0x5000, 0x35f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x1, 0x81, 0x3, 0x0, 0x6, "", [{{0x9, 0x4, 0xf4, 0x8, 0x1, 0x5d, 0x1, 0x98, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xf32b}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0xdcf, 0xfe}, {0x6, 0x24, 0x1a, 0x6, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0xda0b, 0xd, 0xa, 0x40, 0x8, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x9, 0xf1, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0xff, 0x7, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0xc}]}, @uac_control={{0xa, 0x24, 0x1, 0x8d88, 0x34}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x378a60610c34cc2a, 0x4, 0xea, 0x9, 0x2, 0x4}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x6, 0x6, "5d5f9460"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x3, "70d2"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x3, 0x3, 0x4, 0x9, 0x1}]}], [{{0x9, 0x5, 0x9, 0x1, 0x20, 0x3, 0xb5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9}, @generic={0xbb, 0x23, "aed3c489c8d4af16714945e2dbdb5bcf96ab970a318ad6a75df20a4689abe2d5c8bab8304c955e4d4754f98eec9794c9f0af72c7cff03c24b71c111f91398decc3fe03475a712a12910dcf31fe3e7641fe601e958295c4d724ed0ca1fb5a36168b45dfb0e4fcb1b7a080e8caf6910259b28bbc4767a4edf5942dda64778b3b196d15ae0bb3b228245e597c39b8c1fbf5dbbe9ea3034911c93d1a0beff2c59ca892ca0b8fa30d87c940333579d2e8b756d9f0045c5540817405"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xf, 0x40, 0x0, 0x8, 0x9}, 0x49, &(0x7f0000000600)={0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x780, 0x1f9, [0x3f07, 0xc0a0, 0x3fc0]}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x7, 0xf000, 0xfffe, [0xff0000, 0xff3fcf]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x0, 0xff0f, 0xad97, [0x0, 0x0, 0x6f807b3a146a73eb]}]}, 0x8, [{0x6, &(0x7f0000000400)=@string={0x6, 0x3, "e450c959"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x9a, &(0x7f0000000480)=@string={0x9a, 0x3, "a142af61de736d3aaa0d0000b298bc7dc4350047aefbbd557c92991896e380c747862e956543074f09fcdddeaa20887710142c9d4091de6c8dbc46281cacc1e4e7ea36fbd0c048721d81d7c1f152651af554e83f1c38a98f1faa6d3f04cab372ee0c42abc73cd5e7bbde304ff033dfe57912891181a53910349974507916e9b0c39ea74f9f728bba4def777b6004c154d2063206a4ebe189"}}, {0x20, &(0x7f0000000540)=@string={0x20, 0x3, "bd7f18d5fda9f4222a8a5f41dfd38f4ef3a445dba4de49dcba796244af3a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x76, &(0x7f0000000740)=@string={0x76, 0x3, "b605f5e13958ad0beb5eab0fe73f75ca2f1e8c129fca69db431e625610ec94cb7184fcf65af516deeee690e5e99c4beae2d9c202bb54e89724cbd1cdabfbe7cc97fd5e3e51026144e37437445e9719a1fb0ccfd2080915b12babad74f6fc7a630e27e6da79d24376fd0931fce437d74256365ba1"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xffffffffffffffff) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) sendmsg$kcm(r2, &(0x7f0000003c80)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x8040) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = syz_open_dev$loop(0x0, 0x1d, 0x81) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x4, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x5, {0x0, 0x0, 0x0, 0x4, 0xb, 0x0, 0x0, 0x6, 0x1e, "ca2ee8f2c84cc6da928a807925b74482ff8a3f70e303ea066db43040669503485516e231c58573688c70ff7d43827b01b64debd34b50c8c5317757fedeec3258", "284770d1c5c30e0b3f97e5349e8599b0c3dc84dc5c8d94da79af08cd068024c9b0eea58f1c94e6a56fbac1d669cec7b5f13ffda304f2e718dbaaf9991103018a", "68fcee82e0f374474ddcd8501d607f7cef7450408cb8ce8d7a682707a30ae97e", [0x4, 0x5]}}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="65fa260f01c40f209466b8bd008ed00f238ab9de080000b800000000ba000000800f30660fe586290000009ad5a51bf33e01c4e11df66af866bad10466ed", 0x3e}], 0x1, 0x27, 0x0, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r6 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r5], 0x0) write$usbip_server(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_emit_ethernet(0x1fd, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa"], 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22.601723067s ago: executing program 3 (id=77): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/226, 0x36000, 0x1000, 0x9}, 0x1c) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 22.530026465s ago: executing program 32 (id=77): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/226, 0x36000, 0x1000, 0x9}, 0x1c) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 19.100666307s ago: executing program 1 (id=118): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000000)='0:,:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='0:,:\x00', &(0x7f00000000c0)='source', 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000000)='0:,:\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='0:,:\x00', &(0x7f00000000c0)='source', 0x0) (async) 19.020847425s ago: executing program 1 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xe, 0x60}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4054}, 0x24004141) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4c, 0xfffffffffffffffc, &(0x7f0000000440)=""/76}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="df258100"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 18.660967355s ago: executing program 0 (id=124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000e400)={0x2020}, 0x2020) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 18.206871893s ago: executing program 1 (id=128): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x4, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x20008010) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 17.781646414s ago: executing program 0 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[], 0x3c}}, 0x24008084) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24004804) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="28004075bf7491cd31eb06a7c771eab35cabdd00", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf252700000008000300", @ANYRES32=r5, @ANYBLOB="0a0006005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0x11, 0x82, 0x200, 0x0, 0xffff, 0x4}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r7, 0x800452d3, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 17.089765947s ago: executing program 4 (id=137): r0 = mmap$IORING_OFF_SQ_RING(0x1000000, 0x2, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x130) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=1']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) munmap$IORING_OFF_CQ_RING(r0, 0x80000000) 17.031831329s ago: executing program 0 (id=138): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3e6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c840}, 0x20008800) sched_setparam(r0, &(0x7f0000000040)=0x6f0) mmap$IORING_OFF_SQ_RING(0x0, 0x8001002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 356.796425ms ago: executing program 4 (id=139): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}, 0x23}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000001f80)=""/4108, 0x100c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001b"]) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x4000004) socket$packet(0x11, 0x2, 0x300) 356.351876ms ago: executing program 4 (id=141): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3000000012000100000800002000000a14a800000c00000000000000000000000d000700d0403a2d7d2d2b2900000000"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ff5000/0x1000)=nil) shmat(r2, &(0x7f0000ff3000/0x4000)=nil, 0x7000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) mlockall(0x6) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r5, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/67, 0x43}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000340)={0x8000, 0x0, r0}) write$nci(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="4106dfef"], 0x4) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="5525cb7f1108181d5f15a00bf1bfafce7b646f941e525a31a9691d70586638407c442fbdd49bd2708aa40c45d7d93a587120230c4974234a5f29a8fd48df68205756ed4057689d1fc77725c3e56d89fa647d1a398b9a6c1c2a20c6ce41bf915ca4796795b0544747e3595e5e256ac9", 0x6f}, {&(0x7f00000000c0)="0f065861c2be2dc48c7215482f546728ef664a210b12095bcce8e73a3ede14e102a0ea467ce3ea656d6832ef911b2410da40f021d44010313338cc60e73b51b623a29403110f9dac5723cf572b4721f800", 0x51}, {&(0x7f0000000180)="341f57e3434c5cb1bfe7147cc25970bd5c8f11e1bcd99583d51cdbab06470aba42bb04a7269453f7a13ee5ecf2267e4e954c174d0e403bd6450e1fe147eaa1cabcf0b82953d50108905200c594992032e3f56141e555eef27cabc0d0d029678777f20367fd03a72b6464f9b9b0d9", 0x6e}, {&(0x7f0000000200)="38c58e8ecbe6e12ec4122513586cff6ab3d637a5ec029e77bffa78e540f77f0c9207c580359d8fb353bc70654a76564d376e5ae158121d477f524ee0031e9ad40cfffef2206dca6ecc94775ed8dab317207dee857d9ab34405b26944e3e0ae8c13cd57439efb7270cbea2b802c8e8687fb7ce494eb07ca29f21ebbfbfc4d6ff200398a30d5ca7c409a69c0079f0a5844331b3ab0aa91693e0e0f2908cd599a", 0x9f}, {&(0x7f00000002c0)="7ee9cc6adb5c18857cca632cc54c68c4", 0x10}, {&(0x7f0000000800)="04847e7416ad05f45e4287008423e4cda0f25030e3188d42b1785b0410dbdfbd64d182815e83bf9cf0790770028de0899f2b672ef38e9638aa2e110b049c381479997c7a5f4f5150e58563cca732d188e6f09d76dac501a750e68faa91468e38d967d8065cdb726371c83ac070e61c3441650dcde4c5f7f648109c6ba8a7d172f44c5e2fb82c04847ad087f7a08bcb3abe4a5ec3c4820cb49ff10b5fb10c44caf9a722e0ecb883a84dfefd774a25ecce5d02d49c5b9fa99c4b7dce548bf31b280c856cd54905650cc7fba2b21c43b2d5aa9927ce6b8650ab5095b67ee38c0b3e146acbfa9e911b67d65a98e9553f", 0xee}, {&(0x7f0000000500)="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", 0x2de}], 0x7, 0x0, 0xfffffffffffffd61}}], 0x1, 0x4400c800) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)="81e9341d53f18338217f28ac2f876388560c6907de93f04ade50d89fdf130664260f4e53cea0c113117fb6f61251d018cb2db1ecae51bc1733d215fa21650ebbb245a317741135a1581e9e7997c6625f7e97a3fb84f30e002d6ffdf1bc63bccd954100c17ff2da07d1cc71b39c8774c6f4b4823e095fdf9b4f712f9b3e44d3a6d52d63b059a0ca04311cf7e586efbb4367399cff26de5e5a99c52e8b33af183e9e1d66e8153f244fb2c17eda21fdc83316b7183608df73439f7c1280b8a6cc16627e8a52e2ec63c61be5a31940c9d1362c6703553e78e2ca1d", 0xd9}, {&(0x7f0000000a00)="4409d6017c0d13c8659c2bb064e341e3d46602c5e2436c8aaaeaf44a011b81710846a5006247e630610bd56bd99c9e8f2c73ef771b4c462fedceefda358bf0d64a73c1488d7603f807ad499546dff391f8af2ccc206c6fa057e753d0a7b1d02c19e5c1813e2c3e2f496b908d46a7d584c7e870842576ce55c356f12e3dc85eb496118248e87c847eaaab7e45fb5bda3e49a84c1c7ba7f2c0ceda9d8b12110aceac6ef44b45d7418e7c1dc9aa96ee026b03a9b4553cc214439cf01ada4a5c650764b798203f50272c6eb30cdc3cfa", 0xce}], 0x2, &(0x7f0000001600)=[{0x1010, 0x10b, 0x7ff, "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"}, {0x78, 0x0, 0x2, "92612b1c0d35f71958bc7a7b02cdf97f75b90571ba080704348b83b415bc192746901f52d46c45a1d83dfff70f8c054d3b4a741a2c5c55428261b13f8eff4b9ff47d251868d7afb27316fdf70032e5ebedb70345741b507534c9c12264ef7bb5a9145da267"}], 0x1088}, 0x4040050) sendto$inet6(r0, &(0x7f0000000140)="6ec30803003dca5b6fb8b688", 0xc, 0x3b00, 0x0, 0x0) 356.253065ms ago: executing program 2 (id=142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="44010000190001000000000010000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000020a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001910be1a0000000000000000000000000000000000000000080000000000000002259a6e00000000fdffffffffffffff00000000000000000000000000000000000000000000350b000000000000000000000000b86b6e0000010001000000008c00080088"], 0x144}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) 355.864954ms ago: executing program 2 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x7e}}, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r3 = socket$kcm(0x29, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)={0x10, 0xfffffff5, 0x3}, 0x10) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000021000), &(0x7f000001fffe)}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000600)={0x1, r6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) write$tun(r6, &(0x7f0000000800)=ANY=[], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 353.880517ms ago: executing program 2 (id=144): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="d684", 0x2}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f00000004c0)=""/90, 0x5a}, 0x7}], 0x1, 0x40000000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x3f}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x40004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'caif0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @broadcast}}) 353.81319ms ago: executing program 2 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) 351.917255ms ago: executing program 0 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x0, 0x8010, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0c0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) fsopen(&(0x7f0000000800)='hfs\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000ff7f0000000000000500080001000000", @ANYRES32, @ANYBLOB="e8ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r1}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000111240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000112240)={0xe61f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x4, "3a8a5ee7cea0c5"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x1c, 0x2b, 0xfc, @local, @local, {[@hopopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x7f) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x54, r6, 0x209, 0x0, 0x2, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040c80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@bridge_delvlan={0x64, 0x71, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xd6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7a}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x49, 0x2}}}]}, 0x64}}, 0x20048041) 348.370926ms ago: executing program 1 (id=147): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000001010000117f0000cc"], 0x50) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty, 0x5, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x108}}], 0x2, 0xc040) syz_usb_connect$midi(0x5, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201010200000010820560004000010203010902270001010980e8090400000101030002072401ac00070009058f0208001afc0005250111"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 303.556246ms ago: executing program 2 (id=148): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000440)=[{&(0x7f00000001c0)="c021", 0x2}], 0x1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r5}) close_range(r0, r2, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc06c4124, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x2000) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r8, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x0, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000840)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000800)=0x81}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000101010100000000000000000a000000040002800c00198081"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) 303.242012ms ago: executing program 4 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000f80)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000080)={0x18, r2, 0x1, 0x0, &(0x7f0000000040)=[{0x1, 0x1ff}]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)="54449c19218d63a6498634306578cc911f049913bc96e81680b3b12f71ebab51d62a72fa17fa06535e7de1f69857be99173004b527fc385dcf52c509e50370", 0x3f}], 0x1) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$CDROMVOLCTRL(r3, 0x5392, &(0x7f0000000b80)={0x7, 0x7, 0x0, 0x2}) r4 = socket(0x18, 0x2, 0x2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000631150000000000004000000009500"/32, @ANYRES8=r4], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x654}, 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffe2b}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 204.186585ms ago: executing program 0 (id=150): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x301080, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xc, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x72, 0xc6, &(0x7f0000000240)="1cf46d23d3efc0ffcdee192feb0cb6977920aa91139435080a0f4ee3ca6d3cc02ba3c2221a209b29aeb4f9f2fb12b4a41ffec11d7b5ab1c246c85fcb73e0e22aa840d6068b4c5520f0c81a6c3340b1169cf34e99766b150d511ec3ea46ab7ca240e063760d6b704def86c9c3233631f4ee16", &(0x7f0000000300)=""/198, 0x7e, 0x0, 0x43, 0xf3, &(0x7f0000000500)="ddbf9ed79c92253cb076a992548ca0bbf8b88d44c4bbf456c7e16c399625884e0ec88d38b0fe22ea0d37cb18be91bf77f56e733d751a24df45bd1916b825bddcd6b249", &(0x7f0000000580)="ce377b795914a741016902dcb09e5e38032e2dc47d5592c9ca3903d4e6dd292091688af5957b4664d9e4212504324e19f325501878e78b590b37652a4dcb93adf1d1e9505de6fdec859d9093dd2716529366bbb248946e45ea668c7939dc9918f94e11674a272aa024996fe7e44cb1a5447a84202223284f54b8669b606f15ec379f018aaa9c940822bbdb04e5a4a652dfb4968c23e82fc329491c9004a40a6dc49837f77aaac3d3d1ba11b49a7d9f83f7987afb40b517b597119eacf0f086b2d37a7e64f7c5b978d657020df164cf3a370336f751d3ffa85c8b8a47d8e3fe34e6ea04f4fd27ed7d626bc36e1d630965c54471", 0x2, 0x0, 0x2}, 0x50) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010825bd700003000000070000000500130005000000140008"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000000)={@msf={0x10, 0x9, 0x2}, 0x1, 0x0, 0x0}) 131.735265ms ago: executing program 2 (id=151): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sysfs$1(0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x8001, 0x200080) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000740)={0x27, &(0x7f0000000480)=[{0x31, '\x00', @st={0x4, [{0x0, @uvalue=0x99}, {0x1, @svalue=0x47}, {0x3, @svalue=0x80000001}, {0x0, @svalue=0xb9}]}, 0x6}, {0x1f, '\x00', @data=0xffff, 0x7}, {0x18, '\x00', @st={0x4, [{0x2, @uvalue=0x94a5}, {0x3, @svalue=0x6}, {0x3, @svalue=0x8}, {0x3, @svalue}]}, 0x945}, {0x2f, '\x00', @st={0x4, [{0x2, @uvalue=0x2b8}, {0x1, @uvalue=0x40000000}, {0x687f9d754403acec, @svalue=0xdfc1}, {0x0, @svalue}]}}, {0x35, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x0, @svalue=0x8}, {0x3, @svalue=0x4}, {0x2, @uvalue=0x6db4}]}}, {0x2e, '\x00', @buffer={"dcd2e506f25289e2ab6f603a93285ec441303efd21878287eb3df0066ec77a8d", 0x20}}, {0x36, '\x00', @buffer={"95f3f321603a9bae645b7494341e32d46c48a96af93c359998ebe990bceb4d45", 0x20}, 0xfd2a}, {0x0, '\x00', @buffer={"c8c5a8742dd4e5d6c8ec5e93056595663a079b96e8de932a7b96452f15500c62", 0x20}, 0x3d54c252}, {0x19, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x1, @svalue=0x10}, {0x3}, {0x1, @svalue=0x4d94}]}, 0x6}]}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r8, 0x8b32, &(0x7f0000000040)) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000002360007012dbd7000fb5b0a3447000000000001800800020001000000172aaf277558624fc3692ac16cf42bd04a663927f9281208b6e7c77d1735b6f7184fc81df6eed109671b542945dd94"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) openat$mice(0xffffffffffffff9c, 0x0, 0xc8c01) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r6, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600010008000300", @ANYRES32=r3, @ANYBLOB="0500530001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 76.343769ms ago: executing program 4 (id=152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="44010000190001000000000010000000e0000002000000000000000000000000fc010000000000000000000000000000ffffffffffffff800a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001910be1a0000000000000000000000000000000000000000080000000000000002259a6e00000000fdffffffffffffff00000000000000000000000000000000000000000000350b000000000000000000000000b86b6e0000010001000000008c00080088"], 0x144}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) 261.76µs ago: executing program 4 (id=153): r0 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) setsockopt(r3, 0x8, 0xec, &(0x7f0000000080)='L;', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x1}, {0xa, 0x4e23, 0xfffffff0, @empty, 0x800}, 0xffffffffffffffff, 0xc}}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_uring_enter(r6, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000007de98d4f9b9bcdb9a567cd05001100"/42], 0x0, 0x35}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x6, 0x8, 0x4, {0x2, @sliced={0x7, [0x0, 0x80, 0xfa, 0x5, 0x5, 0x8, 0x80, 0xc, 0xfffb, 0x400, 0xfffd, 0xa54b, 0xb208, 0x6, 0x3ff, 0x401, 0x1, 0x9, 0x6, 0x9, 0x7, 0xcb2c, 0x773f, 0x9abd, 0x5, 0x4, 0x3, 0x2, 0x80, 0x8, 0xc, 0xe9, 0x1, 0x5, 0x1, 0x0, 0x1000, 0xfbff, 0x5, 0x0, 0x8c08, 0xfff7, 0x3, 0x7, 0x0, 0x1, 0x4, 0x400], 0x7fffffff}}, 0x7}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001d00080026bd4305c4abadf3a2a60000b20813b399eabd639313e29fbbf0adbc4b6b59a2f6cee6470694b491cb20932627a614455ced71d9868e5cfeedc85118cbfc61bb4b23b31768c3848e23b0", @ANYRES32, @ANYBLOB="40008102080007000900000008000f000000000008000f000100000008000b000a00000008000b00f8f8ffff0600050000000000"], 0x4c}}, 0x0) ptrace(0x4208, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff85000000cf009b37f68ebd00009500000000000000", @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7199e5b6}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) eventfd(0x0) poll(&(0x7f0000000280)=[{r1, 0x4000}, {r1, 0x2}, {r0, 0x120}, {r0, 0x82}], 0x4, 0xc6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0x2201, &(0x7f00000002c0)={0x2, 0x6, 0x0, 0x0}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) write(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x14b) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x280) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x82, &(0x7f0000000300)={r10, 0x10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000200)=0x100, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x2800, 0x2, 0x5, 0x9, 0x8, 0xb, 0x6, r10}, 0x20) 0s ago: executing program 4 (id=155): socketpair(0x28, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000040), 0x4) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="44785ed41e225298670dffc0d5780304000000400040068d36000000", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c00028008000400010001000800040000000000"], 0x44}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x480) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f00000001c0)={0x1f, 0xe9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x9, 0x2}, 0xe) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x83}, 0xa) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000680), &(0x7f0000000700)=0x8) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r9, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r11, r9, 0x1c, 0x2, 0x2}) set_mempolicy(0x4000, &(0x7f0000000000)=0x2000009, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000001, 0x42031, 0xffffffffffffffff, 0x180000000) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) connect$bt_rfcomm(r12, &(0x7f00000005c0)={0x1f, @none, 0x11}, 0xa) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) setxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)=@known='trusted.overlay.opaque\x00', &(0x7f0000001180)='GPL\x00', 0x4, 0x0) read$FUSE(r3, &(0x7f0000004740)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [ 37.707920][ T43] audit: type=1400 audit(1791301395.565:135): avc: denied { write } for pid=5708 comm="sh" path="pipe:[1707]" dev="pipefs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.708161][ T43] audit: type=1400 audit(1791301395.565:136): avc: denied { rlimitinh } for pid=5708 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.708245][ T43] audit: type=1400 audit(1791301395.565:137): avc: denied { siginh } for pid=5708 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:18248' (ED25519) to the list of known hosts. [ 38.656856][ T43] audit: type=1400 audit(1791301396.515:138): avc: denied { name_bind } for pid=5715 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.694029][ T43] audit: type=1400 audit(1791301396.545:139): avc: denied { execute } for pid=5716 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.694376][ T43] audit: type=1400 audit(1791301396.555:140): avc: denied { execute_no_trans } for pid=5716 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.815190][ T43] audit: type=1400 audit(1791301398.665:141): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.816185][ T43] audit: type=1400 audit(1791301398.675:142): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.819604][ T5716] cgroup: Unknown subsys name 'net' [ 40.978646][ T5716] cgroup: Unknown subsys name 'cpuset' [ 40.982774][ T5716] cgroup: Unknown subsys name 'rlimit' [ 41.244486][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.952668][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.637060][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 45.637077][ T43] audit: type=1400 audit(1791301403.495:158): avc: denied { execmem } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.793264][ T43] audit: type=1400 audit(1791301403.645:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.793706][ T43] audit: type=1400 audit(1791301403.645:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.794163][ T43] audit: type=1400 audit(1791301403.645:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.802705][ T43] audit: type=1400 audit(1791301403.655:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[6758]" dev="sockfs" ino=6758 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.810529][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.812025][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.814141][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.814865][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.815386][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.824146][ T43] audit: type=1400 audit(1791301403.685:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.824174][ T43] audit: type=1400 audit(1791301403.685:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.826077][ T43] audit: type=1400 audit(1791301403.685:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.831065][ T43] audit: type=1400 audit(1791301403.685:166): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.847742][ T5729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.851755][ T43] audit: type=1400 audit(1791301403.705:167): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.857685][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.858547][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.859069][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.859261][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.859913][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.860049][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.861758][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.862965][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.863342][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.863570][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.868195][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.870161][ T5729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.870575][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.871535][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.342829][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.342936][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.343028][ T5728] bridge_slave_0: entered allmulticast mode [ 46.343912][ T5728] bridge_slave_0: entered promiscuous mode [ 46.353861][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.353942][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.354330][ T5728] bridge_slave_1: entered allmulticast mode [ 46.355778][ T5728] bridge_slave_1: entered promiscuous mode [ 46.403725][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.420139][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.501663][ T5728] team0: Port device team_slave_0 added [ 46.528430][ T5728] team0: Port device team_slave_1 added [ 46.552957][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.553035][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.553185][ T5736] bridge_slave_0: entered allmulticast mode [ 46.553949][ T5736] bridge_slave_0: entered promiscuous mode [ 46.555896][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.555936][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.555989][ T5736] bridge_slave_1: entered allmulticast mode [ 46.556818][ T5736] bridge_slave_1: entered promiscuous mode [ 46.604003][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.604020][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.604040][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.625796][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.625806][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.625819][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.632482][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.632567][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.632637][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.632697][ T5733] bridge_slave_0: entered allmulticast mode [ 46.633415][ T5733] bridge_slave_0: entered promiscuous mode [ 46.654387][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.654434][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.654495][ T5732] bridge_slave_0: entered allmulticast mode [ 46.655251][ T5732] bridge_slave_0: entered promiscuous mode [ 46.657864][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.658033][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.658152][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.658241][ T5732] bridge_slave_1: entered allmulticast mode [ 46.659471][ T5732] bridge_slave_1: entered promiscuous mode [ 46.660747][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.660786][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.660864][ T5733] bridge_slave_1: entered allmulticast mode [ 46.661620][ T5733] bridge_slave_1: entered promiscuous mode [ 46.710567][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.712001][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.727749][ T5736] team0: Port device team_slave_0 added [ 46.732781][ T5728] hsr_slave_0: entered promiscuous mode [ 46.733243][ T5728] hsr_slave_1: entered promiscuous mode [ 46.736219][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.739032][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.751799][ T5736] team0: Port device team_slave_1 added [ 46.770989][ T5732] team0: Port device team_slave_0 added [ 46.777568][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.777578][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.777590][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.778928][ T5733] team0: Port device team_slave_0 added [ 46.785913][ T5732] team0: Port device team_slave_1 added [ 46.791883][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.791891][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.791904][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.797477][ T5733] team0: Port device team_slave_1 added [ 46.808424][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.808433][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.808445][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.841631][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.841642][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.841655][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.851424][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.851435][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.851448][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.852368][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.852375][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.852387][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.876110][ T5736] hsr_slave_0: entered promiscuous mode [ 46.876975][ T5736] hsr_slave_1: entered promiscuous mode [ 46.877548][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 46.877618][ T5736] Cannot create hsr debugfs directory [ 46.927940][ T5733] hsr_slave_0: entered promiscuous mode [ 46.928367][ T5733] hsr_slave_1: entered promiscuous mode [ 46.928721][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 46.928732][ T5733] Cannot create hsr debugfs directory [ 46.967572][ T5732] hsr_slave_0: entered promiscuous mode [ 46.968313][ T5732] hsr_slave_1: entered promiscuous mode [ 46.969041][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 46.969057][ T5732] Cannot create hsr debugfs directory [ 47.225839][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.230758][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.231418][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.233860][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.243381][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.248768][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.249478][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.252557][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.303521][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.308286][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.309068][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.310754][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.311158][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.314471][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.314913][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.318384][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.385637][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.389573][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.390254][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.393166][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.402893][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.407832][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.408539][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.411081][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.417824][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.466315][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.477519][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.480344][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.481516][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.483123][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.487716][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.487937][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.490593][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.496110][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.496578][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.502372][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.512992][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.513043][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.559787][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.577188][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.590718][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.590763][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.606677][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.606723][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.611516][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.637436][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.640923][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.657580][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.657624][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.661501][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.671575][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.671659][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.690986][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.691031][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.705320][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.705439][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.836431][ T5741] Bluetooth: hci0: command tx timeout [ 47.839191][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.886600][ T5728] veth0_vlan: entered promiscuous mode [ 47.891629][ T5728] veth1_vlan: entered promiscuous mode [ 47.900375][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.914774][ T5089] Bluetooth: hci1: command tx timeout [ 47.914905][ T5089] Bluetooth: hci3: command tx timeout [ 47.917814][ T5741] Bluetooth: hci2: command tx timeout [ 47.919695][ T5728] veth0_macvtap: entered promiscuous mode [ 47.924852][ T5728] veth1_macvtap: entered promiscuous mode [ 47.938216][ T5736] veth0_vlan: entered promiscuous mode [ 47.941104][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.947527][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.948763][ T5736] veth1_vlan: entered promiscuous mode [ 47.987793][ T5736] veth0_macvtap: entered promiscuous mode [ 47.997707][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.998488][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.998870][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.001521][ T5736] veth1_macvtap: entered promiscuous mode [ 48.005470][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.037298][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.042975][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.042988][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.043061][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.065688][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.073890][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.073903][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.074966][ T5803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.132722][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.157963][ T5733] veth0_vlan: entered promiscuous mode [ 48.159357][ T5732] veth0_vlan: entered promiscuous mode [ 48.163304][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.163318][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.168847][ T5733] veth1_vlan: entered promiscuous mode [ 48.177253][ T5732] veth1_vlan: entered promiscuous mode [ 48.203287][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.203308][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.230586][ T5733] veth0_macvtap: entered promiscuous mode [ 48.230957][ T5874] openvswitch: netlink: ufid size 141 bytes exceeds the range (1, 16) [ 48.238152][ T5732] veth0_macvtap: entered promiscuous mode [ 48.240069][ T5733] veth1_macvtap: entered promiscuous mode [ 48.241761][ T5732] veth1_macvtap: entered promiscuous mode [ 48.255600][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.260127][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.264717][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264813][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264913][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.265023][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.266631][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.267802][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.361542][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.361556][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.381873][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.382377][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.383479][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.387988][ T5877] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 48.388010][ T5877] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 48.388034][ T5877] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 48.392678][ T5877] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.400175][ T5877] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.408305][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.408317][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.408424][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.408432][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.409399][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.409687][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.428471][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.428489][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.431677][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.441404][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.442340][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.443082][ T5877] wg1 speed is unknown, defaulting to 1000 [ 48.445758][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446167][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446605][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446814][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446863][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446889][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.559348][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.752994][ T5886] FAULT_INJECTION: forcing a failure. [ 48.752994][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.753026][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 48.753050][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.753061][ T5886] Call Trace: [ 48.753070][ T5886] [ 48.753079][ T5886] dump_stack_lvl+0x100/0x190 [ 48.753112][ T5886] should_fail_ex.cold+0x5/0xa [ 48.753143][ T5886] _copy_from_user+0x2e/0xd0 [ 48.753169][ T5886] sk_setsockopt+0x2f2/0x5e60 [ 48.753207][ T5886] ? __pfx_sk_setsockopt+0x10/0x10 [ 48.753235][ T5886] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 48.753282][ T5886] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 48.753318][ T5886] ? find_held_lock+0x2b/0x80 [ 48.753350][ T5886] ? __fget_files+0x215/0x3d0 [ 48.753381][ T5886] ? selinux_socket_setsockopt+0x6a/0x80 [ 48.753408][ T5886] do_sock_setsockopt+0x193/0x1d0 [ 48.753431][ T5886] __sys_setsockopt+0x195/0x220 [ 48.753462][ T5886] __x64_sys_setsockopt+0xbd/0x160 [ 48.753490][ T5886] do_syscall_64+0x123/0x790 [ 48.753516][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.753537][ T5886] RIP: 0033:0x7f8eeb39e199 [ 48.753555][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.753571][ T5886] RSP: 002b:00007f8eec256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.753592][ T5886] RAX: ffffffffffffffda RBX: 00007f8eeb625fa0 RCX: 00007f8eeb39e199 [ 48.753606][ T5886] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000007 [ 48.753616][ T5886] RBP: 00007f8eeb4358e0 R08: 0000000000000048 R09: 0000000000000000 [ 48.753628][ T5886] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 48.753641][ T5886] R13: 00007f8eeb626038 R14: 00007f8eeb625fa0 R15: 00007fffb8620ce8 [ 48.753665][ T5886] [ 48.782986][ T5886] wg1 speed is unknown, defaulting to 1000 [ 48.909178][ T5896] batman_adv: batadv0: Adding interface: syzkaller0 [ 48.909190][ T5896] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.909206][ T5896] batman_adv: batadv0: Interface activated: syzkaller0 [ 48.917747][ T5896] FAULT_INJECTION: forcing a failure. [ 48.917747][ T5896] name failslab, interval 1, probability 0, space 0, times 1 [ 48.917767][ T5896] CPU: 3 UID: 0 PID: 5896 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 48.917779][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.917786][ T5896] Call Trace: [ 48.917790][ T5896] [ 48.917794][ T5896] dump_stack_lvl+0x100/0x190 [ 48.917814][ T5896] should_fail_ex.cold+0x5/0xa [ 48.917830][ T5896] should_failslab+0xc2/0x120 [ 48.917846][ T5896] __kmalloc_cache_noprof+0x91/0x6d0 [ 48.917859][ T5896] ? io_manage_buffers_legacy+0x415/0xf50 [ 48.917879][ T5896] io_manage_buffers_legacy+0x415/0xf50 [ 48.917900][ T5896] __io_issue_sqe+0xe8/0x7a0 [ 48.917913][ T5896] io_issue_sqe+0x88/0x1540 [ 48.917927][ T5896] ? io_provide_buffers_prep+0x373/0x430 [ 48.917945][ T5896] io_submit_sqes+0xb17/0x2480 [ 48.917965][ T5896] __do_sys_io_uring_enter+0xa88/0x1b10 [ 48.917982][ T5896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 48.917997][ T5896] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 48.918011][ T5896] ? __x64_sys_futex+0x34f/0x4d0 [ 48.918027][ T5896] ? __x64_sys_futex+0x358/0x4d0 [ 48.918044][ T5896] ? xfd_validate_state+0x129/0x190 [ 48.918061][ T5896] do_syscall_64+0x123/0x790 [ 48.918074][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.918086][ T5896] RIP: 0033:0x7f8eeb39e199 [ 48.918095][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.918106][ T5896] RSP: 002b:00007f8eec256028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 48.918117][ T5896] RAX: ffffffffffffffda RBX: 00007f8eeb625fa0 RCX: 00007f8eeb39e199 [ 48.918124][ T5896] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 48.918131][ T5896] RBP: 00007f8eeb4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 48.918137][ T5896] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 48.918144][ T5896] R13: 00007f8eeb626038 R14: 00007f8eeb625fa0 R15: 00007fffb8620ce8 [ 48.918158][ T5896] [ 48.925624][ T5895] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 48.939605][ T5895] batman_adv: batadv0: Removing interface: syzkaller0 [ 48.943199][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 48.948212][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 49.057713][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.558384][ T5928] netlink: zone id is out of range [ 49.558398][ T5928] netlink: zone id is out of range [ 49.558494][ T5928] netlink: zone id is out of range [ 49.558498][ T5928] netlink: zone id is out of range [ 49.558501][ T5928] netlink: zone id is out of range [ 49.558601][ T5928] netlink: zone id is out of range [ 49.558740][ T5928] netlink: zone id is out of range [ 49.559097][ T5928] netlink: zone id is out of range [ 49.559258][ T5928] netlink: zone id is out of range [ 49.571541][ T5929] 9pnet_virtio: no channels available for device syz [ 49.571755][ T5929] 9pnet_virtio: no channels available for device syz [ 49.571957][ T5929] 9pnet_virtio: no channels available for device syz [ 49.572124][ T5929] 9pnet_virtio: no channels available for device syz [ 49.572287][ T5929] 9pnet_virtio: no channels available for device syz [ 49.572466][ T5929] 9pnet_virtio: no channels available for device syz [ 49.572754][ T5929] 9pnet_virtio: no channels available for device syz [ 49.572923][ T5929] 9pnet_virtio: no channels available for device syz [ 49.573082][ T5929] 9pnet_virtio: no channels available for device syz [ 49.573263][ T5929] 9pnet_virtio: no channels available for device syz [ 49.573426][ T5929] 9pnet_virtio: no channels available for device syz [ 49.573603][ T5929] 9pnet_virtio: no channels available for device syz [ 49.573878][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575021][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575206][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575387][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575579][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575740][ T5929] 9pnet_virtio: no channels available for device syz [ 49.575979][ T5929] 9pnet_virtio: no channels available for device syz [ 49.576742][ T5929] 9pnet_virtio: no channels available for device syz [ 49.577053][ T5929] 9pnet_virtio: no channels available for device syz [ 49.577417][ T5929] 9pnet_virtio: no channels available for device syz [ 49.577728][ T5929] 9pnet_virtio: no channels available for device syz [ 49.578036][ T5929] 9pnet_virtio: no channels available for device syz [ 49.578365][ T5929] 9pnet_virtio: no channels available for device syz [ 49.578677][ T5929] 9pnet_virtio: no channels available for device syz [ 49.579027][ T5929] 9pnet_virtio: no channels available for device syz [ 49.579331][ T5929] 9pnet_virtio: no channels available for device syz [ 49.579638][ T5929] 9pnet_virtio: no channels available for device syz [ 49.579947][ T5929] 9pnet_virtio: no channels available for device syz [ 49.580250][ T5929] 9pnet_virtio: no channels available for device syz [ 49.580558][ T5929] 9pnet_virtio: no channels available for device syz [ 49.580858][ T5929] 9pnet_virtio: no channels available for device syz [ 49.581175][ T5929] 9pnet_virtio: no channels available for device syz [ 49.581484][ T5929] 9pnet_virtio: no channels available for device syz [ 49.581783][ T5929] 9pnet_virtio: no channels available for device syz [ 49.582114][ T5929] 9pnet_virtio: no channels available for device syz [ 49.582433][ T5929] 9pnet_virtio: no channels available for device syz [ 49.582737][ T5929] 9pnet_virtio: no channels available for device syz [ 49.583062][ T5929] 9pnet_virtio: no channels available for device syz [ 49.583367][ T5929] 9pnet_virtio: no channels available for device syz [ 49.583683][ T5929] 9pnet_virtio: no channels available for device syz [ 49.583988][ T5929] 9pnet_virtio: no channels available for device syz [ 49.586485][ T5929] 9pnet_virtio: no channels available for device syz [ 49.586940][ T5929] 9pnet_virtio: no channels available for device syz [ 49.587263][ T5929] 9pnet_virtio: no channels available for device syz [ 49.587594][ T5929] 9pnet_virtio: no channels available for device syz [ 49.588029][ T5929] 9pnet_virtio: no channels available for device syz [ 49.588424][ T5929] 9pnet_virtio: no channels available for device syz [ 49.588732][ T5929] 9pnet_virtio: no channels available for device syz [ 49.589099][ T5929] 9pnet_virtio: no channels available for device syz [ 49.589775][ T5929] 9pnet_virtio: no channels available for device syz [ 49.590092][ T5929] 9pnet_virtio: no channels available for device syz [ 49.590412][ T5929] 9pnet_virtio: no channels available for device syz [ 49.590747][ T5929] 9pnet_virtio: no channels available for device syz [ 49.591072][ T5929] 9pnet_virtio: no channels available for device syz [ 49.591382][ T5929] 9pnet_virtio: no channels available for device syz [ 49.591838][ T5929] 9pnet_virtio: no channels available for device syz [ 49.592171][ T5929] 9pnet_virtio: no channels available for device syz [ 49.592489][ T5929] 9pnet_virtio: no channels available for device syz [ 49.592896][ T5929] 9pnet_virtio: no channels available for device syz [ 49.593296][ T5929] 9pnet_virtio: no channels available for device syz [ 49.593614][ T5929] 9pnet_virtio: no channels available for device syz [ 49.829802][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 49.914682][ T5741] Bluetooth: hci0: command tx timeout [ 49.990652][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.994249][ T5741] Bluetooth: hci2: command tx timeout [ 49.994270][ T5741] Bluetooth: hci3: command tx timeout [ 49.994282][ T5741] Bluetooth: hci1: command tx timeout [ 50.148310][ T5958] ======================================================= [ 50.148310][ T5958] WARNING: The mand mount option has been deprecated and [ 50.148310][ T5958] and is ignored by this kernel. Remove the mand [ 50.148310][ T5958] option from the mount to silence this warning. [ 50.148310][ T5958] ======================================================= [ 50.148382][ T5958] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 50.149385][ T5958] cramfs: wrong magic [ 50.163410][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 50.163425][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 50.183600][ T5729] Bluetooth: unknown link type 128 [ 50.371538][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 50.485682][ T5965] NILFS (nullb0): couldn't find nilfs on the device [ 50.633574][ T5976] capability: warning: `syz.3.37' uses 32-bit capabilities (legacy support in use) [ 50.668813][ T43] kauditd_printk_skb: 115 callbacks suppressed [ 50.668825][ T43] audit: type=1400 audit(1791301408.525:283): avc: denied { read write } for pid=5977 comm="syz.3.38" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.669133][ T43] audit: type=1400 audit(1791301408.525:284): avc: denied { open } for pid=5977 comm="syz.3.38" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.670038][ T43] audit: type=1400 audit(1791301408.525:285): avc: denied { ioctl } for pid=5977 comm="syz.3.38" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.719084][ T43] audit: type=1400 audit(1791301408.575:286): avc: denied { create } for pid=5981 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.722799][ T43] audit: type=1400 audit(1791301408.575:287): avc: denied { mount } for pid=5981 comm="syz.1.39" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.724881][ T5982] bonding: b% is being created... [ 50.727526][ T5982] bonding: b% creation failed [ 50.728103][ T43] audit: type=1400 audit(1791301408.585:288): avc: denied { setopt } for pid=5981 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.731432][ T1161] IPVS: starting estimator thread 0... [ 50.734711][ T5982] lo: entered allmulticast mode [ 50.735664][ T5982] bond0: entered allmulticast mode [ 50.736477][ T5982] dummy0: entered allmulticast mode [ 50.736786][ T5982] eql: entered allmulticast mode [ 50.736879][ T5982] ifb0: entered allmulticast mode [ 50.737314][ T5982] ifb1: entered allmulticast mode [ 50.740851][ T5982] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 50.752402][ T5982] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 50.758714][ T5982] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 50.760101][ T5982] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 50.760531][ T5982] hwsim0: entered allmulticast mode [ 50.760635][ T5982] ieee802154 phy0 wpan0: entered allmulticast mode [ 50.760787][ T5982] ieee802154 phy1 wpan1: entered allmulticast mode [ 50.760928][ T5982] teql0: entered allmulticast mode [ 50.761029][ T5982] tunl0: entered allmulticast mode [ 50.761128][ T5982] gre0: entered allmulticast mode [ 50.761204][ T5982] gretap0: entered allmulticast mode [ 50.761274][ T5982] erspan0: entered allmulticast mode [ 50.761348][ T5982] ip_vti0: entered allmulticast mode [ 50.761445][ T5982] ip6_vti0: entered allmulticast mode [ 50.761522][ T5982] sit0: entered allmulticast mode [ 50.761630][ T5982] ip6tnl0: entered allmulticast mode [ 50.761705][ T5982] ip6gre0: entered allmulticast mode [ 50.761779][ T5982] lapb0: entered allmulticast mode [ 50.761930][ T5982] lapb1: entered allmulticast mode [ 50.762073][ T5982] lapb2: entered allmulticast mode [ 50.763945][ T5982] lapb3: entered allmulticast mode [ 50.765285][ T5982] lapb4: entered allmulticast mode [ 50.765585][ T5982] lapb5: entered allmulticast mode [ 50.765725][ T5982] lapb6: entered allmulticast mode [ 50.766047][ T5982] lowpan0: entered allmulticast mode [ 50.790578][ T43] audit: type=1400 audit(1791301408.645:289): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.819183][ T43] audit: type=1400 audit(1791301408.675:290): avc: denied { create } for pid=5984 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.823248][ T43] audit: type=1400 audit(1791301408.675:291): avc: denied { write } for pid=5984 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.824708][ T5983] IPVS: using max 42 ests per chain, 100800 per kthread [ 50.867075][ T43] audit: type=1400 audit(1791301408.725:292): avc: denied { name_bind } for pid=5986 comm="syz.1.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.867270][ T5987] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 50.914159][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 51.032869][ T5990] tc_dump_action: action bad kind [ 51.044620][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.269457][ T6004] loop5: detected capacity change from 0 to 7 [ 51.272811][ T6004] loop5: [ 51.272889][ T6004] loop5: partition table partially beyond EOD, truncated [ 51.284195][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 51.414201][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.535792][ T9] usb usb8-port1: attempt power cycle [ 51.625683][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.699285][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.804180][ T5803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.814296][ T5803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.814337][ T5803] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.814365][ T5803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.906404][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 51.925774][ T9] usb 8-1: device descriptor read/8, error -71 [ 52.074245][ T66] Bluetooth: hci1: command tx timeout [ 52.074291][ T5089] Bluetooth: hci3: command 0x040f tx timeout [ 52.074372][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 52.094205][ T5738] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 52.174264][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 52.194987][ T9] usb 8-1: device descriptor read/8, error -71 [ 52.264905][ T5738] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 52.264940][ T5738] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 52.267322][ T5738] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 52.267344][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.267358][ T5738] usb 7-1: config 0 has no interfaces? [ 52.268774][ T5738] usb 7-1: config index 1 descriptor too short (expected 28277, got 36) [ 52.268793][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.268807][ T5738] usb 7-1: config 0 has no interfaces? [ 52.269708][ T5738] usb 7-1: config index 2 descriptor too short (expected 28277, got 36) [ 52.269729][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.269744][ T5738] usb 7-1: config 0 has no interfaces? [ 52.270641][ T5738] usb 7-1: config index 3 descriptor too short (expected 28277, got 36) [ 52.270660][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.270672][ T5738] usb 7-1: config 0 has no interfaces? [ 52.271498][ T5738] usb 7-1: config index 4 descriptor too short (expected 28277, got 36) [ 52.271513][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.271524][ T5738] usb 7-1: config 0 has no interfaces? [ 52.272309][ T5738] usb 7-1: config index 5 descriptor too short (expected 28277, got 36) [ 52.272324][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.272335][ T5738] usb 7-1: config 0 has no interfaces? [ 52.273163][ T5738] usb 7-1: config index 6 descriptor too short (expected 28277, got 36) [ 52.273178][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.273189][ T5738] usb 7-1: config 0 has no interfaces? [ 52.273972][ T5738] usb 7-1: config index 7 descriptor too short (expected 28277, got 36) [ 52.273987][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.273998][ T5738] usb 7-1: config 0 has no interfaces? [ 52.274016][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.280595][ T5738] usb 7-1: config 0 descriptor?? [ 52.304397][ T9] usb usb8-port1: unable to enumerate USB device [ 52.512913][ T5738] usb 7-1: string descriptor 0 read error: -71 [ 52.516096][ T5738] usb 7-1: USB disconnect, device number 2 [ 52.700344][ T6041] syzkaller0: entered promiscuous mode [ 52.700366][ T6041] syzkaller0: entered allmulticast mode [ 52.949019][ T6049] syz_tun: entered allmulticast mode [ 52.951403][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 52.951655][ T6049] wg1 speed is unknown, defaulting to 1000 [ 52.952239][ T6048] syz_tun: left allmulticast mode [ 53.128044][ T6055] wg1 speed is unknown, defaulting to 1000 [ 53.256513][ T6066] Zero length message leads to an empty skb [ 53.323634][ T6069] netlink: 76 bytes leftover after parsing attributes in process `syz.2.66'. [ 53.506993][ T6082] syzkaller0: entered promiscuous mode [ 53.507012][ T6082] syzkaller0: entered allmulticast mode [ 53.641370][ T6091] nvme_fabrics: missing parameter 'host_traddr=%s' [ 53.914242][ T66] Bluetooth: hci0: command tx timeout [ 53.994218][ T71] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.118053][ T5803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.154247][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 54.164319][ T66] Bluetooth: hci1: command tx timeout [ 54.164891][ T71] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 54.167203][ T71] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.167225][ T71] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 54.167253][ T71] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.182755][ T71] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 54.206567][ T5803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.229145][ T5729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.230658][ T5729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.231468][ T5729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.232449][ T5729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.232684][ T5729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.268335][ T5803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.329085][ T5803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.379075][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.382390][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.397094][ T6102] wg1 speed is unknown, defaulting to 1000 [ 54.467344][ T5803] bridge_slave_1: left allmulticast mode [ 54.467371][ T5803] bridge_slave_1: left promiscuous mode [ 54.467908][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.469998][ T5803] bridge_slave_0: left allmulticast mode [ 54.470010][ T5803] bridge_slave_0: left promiscuous mode [ 54.470094][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.607199][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.609036][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.610009][ T5803] bond0 (unregistering): Released all slaves [ 54.657291][ T6121] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.678557][ T6121] gfs2: error -5 reading superblock [ 54.813602][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.824798][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.824910][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.825003][ T6102] bridge_slave_0: entered allmulticast mode [ 54.826034][ T6102] bridge_slave_0: entered promiscuous mode [ 54.828752][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.828826][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.828902][ T6102] bridge_slave_1: entered allmulticast mode [ 54.830140][ T6102] bridge_slave_1: entered promiscuous mode [ 54.851659][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.853487][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.881163][ T6102] team0: Port device team_slave_0 added [ 54.883580][ T6102] team0: Port device team_slave_1 added [ 54.908334][ T5803] hsr_slave_0: left promiscuous mode [ 54.908827][ T5803] hsr_slave_1: left promiscuous mode [ 54.909305][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.909328][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.909948][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.909962][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.932698][ T5803] veth1_macvtap: left promiscuous mode [ 54.932728][ T5803] veth0_macvtap: left promiscuous mode [ 54.932774][ T5803] veth1_vlan: left promiscuous mode [ 54.932813][ T5803] veth0_vlan: left promiscuous mode [ 54.946783][ T6145] 9p: Bad value for 'wfdno' [ 54.975272][ T6145] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.086066][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 55.091729][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 55.123131][ T6153] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 55.154010][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.154022][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.154950][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.158024][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.158032][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.158045][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.162058][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.215299][ T6102] hsr_slave_0: entered promiscuous mode [ 55.216102][ T6102] hsr_slave_1: entered promiscuous mode [ 55.216737][ T6102] debugfs: 'hsr0' already exists in 'hsr' [ 55.216754][ T6102] Cannot create hsr debugfs directory [ 55.248309][ T6156] Illegal XDP return value 9 on prog (id 6) dev N/A, expect packet loss! [ 55.249471][ T6156] process 'syz.2.84' launched './file0' with NULL argv: empty string added [ 55.378983][ T6102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.381422][ T6102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.382950][ T6102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.389541][ T6102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.390780][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.391048][ T6102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.395777][ T6102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.396388][ T6102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.399327][ T6102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.423093][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.423196][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.423678][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.423768][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.436899][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.437485][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.452206][ T6181] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 55.452223][ T6181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.452727][ T6181] vhci_hcd vhci_hcd.0: Device attached [ 55.454875][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.455074][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.455925][ T6182] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 55.457654][ T5803] vhci_hcd vhci_hcd.1: stop threads [ 55.457664][ T5803] vhci_hcd vhci_hcd.1: release socket [ 55.457678][ T5803] vhci_hcd vhci_hcd.1: disconnect device [ 55.486021][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.500029][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.505590][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.505676][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.515273][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.515389][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.550214][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.771582][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.942144][ T6102] veth0_vlan: entered promiscuous mode [ 55.948401][ T6102] veth1_vlan: entered promiscuous mode [ 55.964124][ T6102] veth0_macvtap: entered promiscuous mode [ 55.966158][ T6102] veth1_macvtap: entered promiscuous mode [ 55.972090][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.977254][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.005135][ T5803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.005159][ T5803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015923][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.015936][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.030600][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.030613][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.045850][ T5803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.045876][ T5803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.073091][ T43] kauditd_printk_skb: 207 callbacks suppressed [ 56.073103][ T43] audit: type=1400 audit(1791301413.925:500): avc: denied { append } for pid=6217 comm="syz.4.85" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.109953][ T6218] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 56.120078][ T6218] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.244443][ T5729] Bluetooth: hci2: command 0x040f tx timeout [ 56.254675][ T6227] netlink: 52 bytes leftover after parsing attributes in process `syz.4.91'. [ 56.283558][ T6225] team0: entered allmulticast mode [ 56.283575][ T6225] team_slave_0: entered allmulticast mode [ 56.283585][ T6225] team_slave_1: entered allmulticast mode [ 56.283904][ T6225] team0: Cannot enslave team device to itself [ 56.315064][ T5729] Bluetooth: hci3: command tx timeout [ 56.395989][ T6234] netlink: 'syz.0.94': attribute type 15 has an invalid length. [ 56.401059][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 56.411158][ T43] audit: type=1400 audit(1791301414.265:501): avc: denied { bind } for pid=6233 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.411771][ T43] audit: type=1400 audit(1791301414.265:502): avc: denied { name_bind } for pid=6233 comm="syz.0.94" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.411807][ T43] audit: type=1400 audit(1791301414.265:503): avc: denied { node_bind } for pid=6233 comm="syz.0.94" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.494034][ T6247] overlayfs: cannot append lower layer [ 56.503998][ T43] audit: type=1400 audit(1791301414.355:504): avc: denied { ioctl } for pid=6246 comm="syz.0.96" path="socket:[13689]" dev="sockfs" ino=13689 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.620668][ T43] audit: type=1400 audit(1791301414.475:505): avc: denied { setopt } for pid=6250 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.620757][ T43] audit: type=1400 audit(1791301414.475:506): avc: denied { write } for pid=6250 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.700002][ T6256] pim6reg: entered allmulticast mode [ 56.701918][ T6256] pim6reg: left allmulticast mode [ 56.841923][ T43] audit: type=1400 audit(1791301414.695:507): avc: denied { bind } for pid=6261 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.842251][ T43] audit: type=1400 audit(1791301414.695:508): avc: denied { write } for pid=6261 comm="syz.4.100" path="socket:[14474]" dev="sockfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.842409][ T6262] Bluetooth: MGMT ver 1.23 [ 56.860196][ T6262] ip6tnl0: Master is either lo or non-ether device [ 56.910639][ T43] audit: type=1400 audit(1791301414.765:509): avc: denied { create } for pid=6265 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.132385][ T6280] overlayfs: upper fs does not support file handles, falling back to index=off. [ 57.250179][ T6289] affs: No valid root block on device sr0 [ 57.280979][ T6293] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 57.454243][ T6274] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 57.552165][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 57.563730][ T5864] usb 6-1: USB disconnect, device number 2 [ 57.576332][ T5864] idmouse 6-1:1.0: disconnected [ 57.592542][ T6296] cgroup: fork rejected by pids controller in /syz2 [ 57.593729][ T6338] libceph: resolve '0' (ret=-3): failed [ 57.595551][ T6341] libceph: resolve '0' (ret=-3): failed [ 57.628468][ T6345] binder_alloc: 6344: pid 6344 spamming oneway? 1 buffers allocated for a total size of 4096 [ 57.636269][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 57.638449][ T6348] IPv6: sit1: Disabled Multicast RS [ 57.638965][ T6348] sit1: entered allmulticast mode [ 57.730139][ T6357] netdevsim netdevsim4: Direct firmware load for . [ 57.730139][ T6357] failed with error -2 [ 57.731857][ T6357] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 57.731857][ T6357] [ 58.053039][ T6379] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 58.075141][ T6379] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 58.404187][ T5729] Bluetooth: hci3: command tx timeout [ 58.475441][ T6391] syz_tun: entered allmulticast mode [ 58.536599][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.571346][ T6395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.682737][ T6400] use of bytesused == 0 is deprecated and will be removed in the future, [ 58.682748][ T6400] use the actual size instead. [ 59.376410][ T6405] overlayfs: overlapping lowerdir path [ 59.441587][ T6411] capability: warning: `syz.4.133' uses deprecated v2 capabilities in a way that may be insecure [ 59.525550][ T6409] macsec1: entered promiscuous mode [ 59.525574][ T6409] macsec1: entered allmulticast mode [ 59.668620][ T6426] program syz.4.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.696602][ T6429] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 59.737798][ T6430] qnx4: unable to read the superblock [ 60.484206][ T5729] Bluetooth: hci3: command tx timeout [ 61.074129][ T43] kauditd_printk_skb: 25206 callbacks suppressed [ 61.074148][ T43] audit: type=1326 audit(1791301418.925:25716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074222][ T43] audit: type=1326 audit(1791301418.935:25717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074292][ T43] audit: type=1326 audit(1791301418.935:25718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074365][ T43] audit: type=1326 audit(1791301418.935:25719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074436][ T43] audit: type=1326 audit(1791301418.935:25720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074523][ T43] audit: type=1326 audit(1791301418.935:25721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074593][ T43] audit: type=1326 audit(1791301418.935:25722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074633][ T43] audit: type=1326 audit(1791301418.935:25723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074705][ T43] audit: type=1326 audit(1791301418.935:25724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 61.074798][ T43] audit: type=1326 audit(1791301418.935:25725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.1.128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eeb39e199 code=0x50000 [ 62.554441][ T5729] Bluetooth: hci3: command tx timeout [ 66.640450][ T43] kauditd_printk_skb: 5096 callbacks suppressed [ 66.640469][ T43] audit: type=1400 audit(1791301424.495:30822): avc: denied { write } for pid=6451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.692135][ T43] audit: type=1400 audit(1791301424.545:30823): avc: denied { write } for pid=6454 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.769110][ T43] audit: type=1400 audit(1791301424.625:30824): avc: denied { write } for pid=6457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.813655][ T43] audit: type=1400 audit(1791301424.665:30825): avc: denied { write } for pid=6460 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.128018][ T43] audit: type=1400 audit(1791301424.985:30826): avc: denied { write } for pid=6463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.185981][ T43] audit: type=1400 audit(1791301425.045:30827): avc: denied { write } for pid=6466 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.256015][ T43] audit: type=1400 audit(1791301425.115:30828): avc: denied { write } for pid=6469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.300969][ T43] audit: type=1400 audit(1791301425.155:30829): avc: denied { write } for pid=6472 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.436636][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436685][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.348336][ T43] audit: type=1400 audit(1791301434.205:30830): avc: denied { read } for pid=6476 comm="syz.2.148" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.362839][ T6481] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.384318][ T43] audit: type=1400 audit(1791301434.235:30831): avc: denied { read write } for pid=6476 comm="syz.2.148" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.384556][ T43] audit: type=1400 audit(1791301434.235:30832): avc: denied { open } for pid=6476 comm="syz.2.148" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.397119][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 76.417402][ T43] audit: type=1400 audit(1791301434.275:30833): avc: denied { listen } for pid=6479 comm="syz.0.146" lport=54755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.419132][ T43] audit: type=1400 audit(1791301434.275:30834): avc: denied { accept } for pid=6479 comm="syz.0.146" lport=54755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.419959][ T43] audit: type=1400 audit(1791301434.275:30835): avc: denied { getopt } for pid=6479 comm="syz.0.146" lport=54755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 76.553311][ T43] audit: type=1400 audit(1791301434.405:30836): avc: denied { write } for pid=6491 comm="syz.0.150" path="socket:[15498]" dev="sockfs" ino=15498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.562019][ T852] cfg80211: failed to load regulatory.db [ 76.619046][ T6495] warning: `syz.2.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.641844][ T43] audit: type=1400 audit(1791301434.495:30837): avc: denied { map } for pid=6494 comm="syz.2.151" path="socket:[12844]" dev="sockfs" ino=12844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.641886][ T43] audit: type=1400 audit(1791301434.495:30838): avc: denied { read } for pid=6494 comm="syz.2.151" path="socket:[12844]" dev="sockfs" ino=12844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.660140][ T43] audit: type=1400 audit(1791301434.515:30839): avc: denied { write } for pid=6498 comm="syz.0.154" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.852003][ T6506] [ 76.852828][ T6506] ====================================================== [ 76.855047][ T6506] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.857262][ T6506] syzkaller #0 Tainted: G L [ 76.859464][ T6506] ------------------------------------------------------ [ 76.861657][ T6506] syz.4.155/6506 is trying to acquire lock: [ 76.863551][ T6506] ffff88802f3700b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 76.866432][ T6506] [ 76.866432][ T6506] but task is already holding lock: [ 76.868857][ T6506] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 76.871670][ T6506] [ 76.871670][ T6506] which lock already depends on the new lock. [ 76.871670][ T6506] [ 76.874926][ T6506] [ 76.874926][ T6506] the existing dependency chain (in reverse order) is: [ 76.877728][ T6506] [ 76.877728][ T6506] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 76.880166][ T6506] lock_acquire+0x1d1/0x380 [ 76.881777][ T6506] __mutex_lock+0x1a4/0x1bd0 [ 76.883643][ T6506] rfcomm_security_cfm+0x3f/0x4b0 [ 76.885401][ T6506] hci_encrypt_cfm+0x18e/0x740 [ 76.887084][ T6506] hci_encrypt_change_evt+0x92c/0xfb0 [ 76.888980][ T6506] hci_event_packet+0x8e9/0xcd0 [ 76.890713][ T6506] hci_rx_work+0x451/0xfc0 [ 76.892301][ T6506] process_one_work+0xac7/0x1b10 [ 76.894040][ T6506] worker_thread+0x5ef/0xe50 [ 76.895816][ T6506] kthread+0x373/0x450 [ 76.897289][ T6506] ret_from_fork+0x730/0xd60 [ 76.898950][ T6506] ret_from_fork_asm+0x1a/0x30 [ 76.900617][ T6506] [ 76.900617][ T6506] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 76.903054][ T6506] lock_acquire+0x1d1/0x380 [ 76.904651][ T6506] __mutex_lock+0x1a4/0x1bd0 [ 76.906276][ T6506] hci_remote_features_evt+0x485/0x9b0 [ 76.908171][ T6506] hci_event_packet+0x8e9/0xcd0 [ 76.909890][ T6506] hci_rx_work+0x451/0xfc0 [ 76.911489][ T6506] process_one_work+0xac7/0x1b10 [ 76.913227][ T6506] worker_thread+0x5ef/0xe50 [ 76.914857][ T6506] kthread+0x373/0x450 [ 76.916331][ T6506] ret_from_fork+0x730/0xd60 [ 76.917961][ T6506] ret_from_fork_asm+0x1a/0x30 [ 76.919660][ T6506] [ 76.919660][ T6506] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 76.921938][ T6506] check_prev_add+0xeb/0xe60 [ 76.923580][ T6506] __lock_acquire+0x1528/0x1f40 [ 76.925278][ T6506] lock_acquire+0x1d1/0x380 [ 76.926885][ T6506] __mutex_lock+0x1a4/0x1bd0 [ 76.928496][ T6506] l2cap_chan_connect+0xac/0x2110 [ 76.930249][ T6506] l2cap_sock_connect+0x37a/0x770 [ 76.931995][ T6506] kernel_connect+0x107/0x160 [ 76.933650][ T6506] rfcomm_dlc_open+0x838/0xac0 [ 76.935334][ T6506] rfcomm_sock_connect+0x42c/0x690 [ 76.937098][ T6506] __sys_connect_file+0x146/0x1a0 [ 76.938845][ T6506] __sys_connect+0x141/0x170 [ 76.940450][ T6506] __x64_sys_connect+0x72/0xb0 [ 76.942102][ T6506] do_syscall_64+0x123/0x790 [ 76.943741][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.945742][ T6506] [ 76.945742][ T6506] other info that might help us debug this: [ 76.945742][ T6506] [ 76.948893][ T6506] Chain exists of: [ 76.948893][ T6506] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 76.948893][ T6506] [ 76.952758][ T6506] Possible unsafe locking scenario: [ 76.952758][ T6506] [ 76.955076][ T6506] CPU0 CPU1 [ 76.956757][ T6506] ---- ---- [ 76.958435][ T6506] lock(rfcomm_mutex); [ 76.959764][ T6506] lock(hci_cb_list_lock); [ 76.961936][ T6506] lock(rfcomm_mutex); [ 76.964022][ T6506] lock(&hdev->lock); [ 76.965310][ T6506] [ 76.965310][ T6506] *** DEADLOCK *** [ 76.965310][ T6506] [ 76.967817][ T6506] locks held by syz.4.155/6506: 1, last CPU#2: [ 76.969722][ T6506] #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 76.972610][ T6506] [ 76.972610][ T6506] stack backtrace: [ 76.974458][ T6506] CPU: 2 UID: 0 PID: 6506 Comm: syz.4.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.977780][ T6506] Tainted: [L]=SOFTLOCKUP [ 76.979167][ T6506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.982293][ T6506] Call Trace: [ 76.983375][ T6506] [ 76.984318][ T6506] dump_stack_lvl+0x100/0x190 [ 76.985802][ T6506] print_circular_bug.cold+0x178/0x1be [ 76.987530][ T6506] check_noncircular+0x146/0x160 [ 76.989132][ T6506] check_prev_add+0xeb/0xe60 [ 76.990602][ T6506] __lock_acquire+0x1528/0x1f40 [ 76.992159][ T6506] lock_acquire+0x1d1/0x380 [ 76.993614][ T6506] ? l2cap_chan_connect+0xac/0x2110 [ 76.995278][ T6506] ? __pfx___might_resched+0x10/0x10 [ 76.996940][ T6506] __mutex_lock+0x1a4/0x1bd0 [ 76.998405][ T6506] ? l2cap_chan_connect+0xac/0x2110 [ 77.000098][ T6506] ? l2cap_chan_connect+0xac/0x2110 [ 77.001737][ T6506] ? hci_get_route+0x368/0x520 [ 77.003269][ T6506] ? hci_get_route+0x368/0x520 [ 77.004756][ T6506] ? __pfx___mutex_lock+0x10/0x10 [ 77.006321][ T6506] ? _raw_read_unlock+0x28/0x50 [ 77.007866][ T6506] ? hci_get_route+0x368/0x520 [ 77.009418][ T6506] ? __pfx_hci_get_route+0x10/0x10 [ 77.011069][ T6506] ? reacquire_held_locks+0xdd/0x1f0 [ 77.012742][ T6506] ? release_sock+0x21/0x280 [ 77.014206][ T6506] ? l2cap_chan_connect+0xac/0x2110 [ 77.015854][ T6506] l2cap_chan_connect+0xac/0x2110 [ 77.017440][ T6506] ? __local_bh_enable_ip+0xa5/0x120 [ 77.019128][ T6506] l2cap_sock_connect+0x37a/0x770 [ 77.020709][ T6506] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 77.022442][ T6506] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.024294][ T6506] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.026123][ T6506] kernel_connect+0x107/0x160 [ 77.027632][ T6506] ? __pfx_kernel_connect+0x10/0x10 [ 77.029306][ T6506] ? timer_init_key+0x150/0x310 [ 77.030894][ T6506] rfcomm_dlc_open+0x838/0xac0 [ 77.032415][ T6506] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 77.034091][ T6506] ? rfcomm_sock_connect+0x3e8/0x690 [ 77.035765][ T6506] ? find_held_lock+0x2b/0x80 [ 77.037229][ T6506] ? rfcomm_sock_connect+0x3e8/0x690 [ 77.038904][ T6506] ? __local_bh_enable_ip+0xa5/0x120 [ 77.040378][ T6506] rfcomm_sock_connect+0x42c/0x690 [ 77.041991][ T6506] __sys_connect_file+0x146/0x1a0 [ 77.043598][ T6506] __sys_connect+0x141/0x170 [ 77.045059][ T6506] ? __pfx___sys_connect+0x10/0x10 [ 77.046682][ T6506] __x64_sys_connect+0x72/0xb0 [ 77.048225][ T6506] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.049872][ T6506] do_syscall_64+0x123/0x790 [ 77.051362][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.053235][ T6506] RIP: 0033:0x7f0a9139e199 [ 77.054646][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.060429][ T6506] RSP: 002b:00007f0a922b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 77.062928][ T6506] RAX: ffffffffffffffda RBX: 00007f0a91625fa0 RCX: 00007f0a9139e199 [ 77.065316][ T6506] RDX: 000000000000000a RSI: 00002000000005c0 RDI: 000000000000000c [ 77.067691][ T6506] RBP: 00007f0a914358e0 R08: 0000000000000000 R09: 0000000000000000 [ 77.070100][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.072548][ T6506] R13: 00007f0a91626038 R14: 00007f0a91625fa0 R15: 00007ffeaa9863a8 [ 77.075027][ T6506] [ 77.079104][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.193174][ T6495] syz_tun (unregistering): left allmulticast mode [ 77.392753][ T5803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.453391][ T5803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.508362][ T5803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.636882][ T5803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.705222][ T5803] bridge_slave_1: left allmulticast mode [ 77.705238][ T5803] bridge_slave_1: left promiscuous mode [ 77.705341][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.706089][ T5803] bridge_slave_0: left allmulticast mode [ 77.706101][ T5803] bridge_slave_0: left promiscuous mode [ 77.706175][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.740929][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.741942][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.742565][ T5803] bond0 (unregistering): Released all slaves [ 77.743981][ T5803] bond1 (unregistering): Released all slaves [ 77.854642][ T5803] IPVS: stopping backup sync thread 6429 ... [ 77.862711][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 77.960653][ T5803] hsr_slave_0: left promiscuous mode [ 77.960954][ T5803] hsr_slave_1: left promiscuous mode [ 77.961237][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.961246][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.961649][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.961657][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.963650][ T5803] veth1_macvtap: left promiscuous mode [ 77.963666][ T5803] veth0_macvtap: left promiscuous mode [ 77.963772][ T5803] veth1_vlan: left promiscuous mode [ 77.963794][ T5803] veth0_vlan: left promiscuous mode [ 78.028883][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 78.032297][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 78.058732][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.185838][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.301976][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.313192][ T5803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.366121][ T5803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.417809][ T5803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.468651][ T5803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.526504][ T5803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.577641][ T5803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.608577][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 78.650938][ T5803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.689971][ T5803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.716693][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 78.752610][ T5803] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.816450][ T5803] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.836423][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 78.849227][ T5803] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.907806][ T5803] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.967665][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 78.971946][ T5803] bridge_slave_1: left allmulticast mode [ 78.971968][ T5803] bridge_slave_1: left promiscuous mode [ 78.972106][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.973446][ T5803] bridge_slave_0: left allmulticast mode [ 78.973463][ T5803] bridge_slave_0: left promiscuous mode [ 78.973559][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.981376][ T5803] bridge_slave_1: left allmulticast mode [ 78.981397][ T5803] bridge_slave_1: left promiscuous mode [ 78.981504][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.987093][ T5803] bridge_slave_0: left allmulticast mode [ 78.987107][ T5803] bridge_slave_0: left promiscuous mode [ 78.987173][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.003136][ T5803] bridge_slave_1: left allmulticast mode [ 79.003179][ T5803] bridge_slave_1: left promiscuous mode [ 79.003250][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.008518][ T5803] bridge_slave_0: left allmulticast mode [ 79.008537][ T5803] bridge_slave_0: left promiscuous mode [ 79.008619][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.105156][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.107252][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.108277][ T5803] bond0 (unregistering): Released all slaves [ 79.110259][ T5803] bond1 (unregistering): Released all slaves [ 79.145518][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.147038][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.147988][ T5803] bond0 (unregistering): Released all slaves [ 79.180700][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.182115][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.183015][ T5803] bond0 (unregistering): Released all slaves [ 79.294586][ T5803] rxrpc: Leaked peer c5 {1} 127.0.0.1:7003 [ 79.315148][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 79.457337][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15 [ 79.595299][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 79.622491][ T5803] hsr_slave_0: left promiscuous mode [ 79.622966][ T5803] hsr_slave_1: left promiscuous mode [ 79.623361][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.623374][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.623937][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.623949][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.632471][ T5803] hsr_slave_0: left promiscuous mode [ 79.634950][ T5803] hsr_slave_1: left promiscuous mode [ 79.636190][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.636205][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.637585][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.637597][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.647586][ T5803] hsr_slave_0: left promiscuous mode [ 79.650078][ T5803] hsr_slave_1: left promiscuous mode [ 79.650483][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.650496][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.651896][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.651910][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.660886][ T5803] veth1_macvtap: left promiscuous mode [ 79.660912][ T5803] veth0_macvtap: left promiscuous mode [ 79.660970][ T5803] veth1_vlan: left promiscuous mode [ 79.661004][ T5803] veth0_vlan: left promiscuous mode [ 79.668001][ T5803] veth1_macvtap: left promiscuous mode [ 79.668025][ T5803] veth0_macvtap: left promiscuous mode [ 79.668072][ T5803] veth1_vlan: left promiscuous mode [ 79.668116][ T5803] veth0_vlan: left promiscuous mode [ 79.674907][ T5803] veth1_macvtap: left promiscuous mode [ 79.674924][ T5803] veth0_macvtap: left promiscuous mode [ 79.782989][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 79.789069][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 79.805780][ T1168] smbdirect: ib_dev[syz2] removed [ 79.877725][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 79.880517][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 79.944973][ T5803] team_slave_1 (unregistering): left allmulticast mode [ 79.946864][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 79.948440][ T5803] team_slave_0 (unregistering): left allmulticast mode [ 79.949290][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 79.969875][ T63] infiniband syz2: ib_query_port failed (-19) [ 79.970779][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 80.112089][ T5442] 8021q: adding VLAN 0 to HW filter on device eth18 [ 80.246470][ T5442] 8021q: adding VLAN 0 to HW filter on device eth19 [ 80.362010][ T5442] 8021q: adding VLAN 0 to HW filter on device eth21 [ 80.496807][ T5442] 8021q: adding VLAN 0 to HW filter on device eth20 [ 80.804968][ T5803] IPVS: stop unused estimator thread 0...