last executing test programs: 51.447027842s ago: executing program 1 (id=296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback, 0xfffffffd}, 0x1c) 51.347986138s ago: executing program 1 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x4082}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x1f0}}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close(0x3) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="02000000010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x4, 0x100000001, 0x0, 0xffffffffffffffff}) 51.347059249s ago: executing program 1 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback, 0xfffffffd}, 0x1c) (fail_nth: 3) 51.26804823s ago: executing program 1 (id=301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000009"], 0x14}}, 0x0) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) (async) read(r2, &(0x7f0000000b00), 0x64) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x200200, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc92612d4c77c48430ccac04143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a4610bd7813544e1e4bf994e14a519c2654ff20b42bdb69c26d9dd5d5eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b08686a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d9083323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c262197925ecbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547cd9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c91fc76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff0000000000000004d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c838073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc505f19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857c4504000000000000f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb5457fa10410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc329874af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8631ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d9801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d3ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b59047ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe1fe92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed681413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d5201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca0000000000000000000000000000000000000000000000000000004744095900", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x7, 0x0, 0x6, 0x8, 0x4, {0x4, 0x8000, 0x100000000, 0x0, 0x203, 0x55d, 0xfffffffa, 0x0, 0x80010000, 0x2000, 0x1002, 0x0, r6, 0xa7b, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x2d, 0x3, 0x440400, 0x0, 0x82, 0x8fbd, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='dir0/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000080), 0x1092, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',directio,c\ache=mmap,noxattr,smackfshat=\',,pcr=00000000000000000006,dont_measure,smackfstransmute=tracefs\x00,uid<', @ANYRESDEC=r7, @ANYBLOB=',permit_directio,\x00']) 51.139465249s ago: executing program 1 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) 50.435764102s ago: executing program 1 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback={0x3f00}, 0xfffffffd}, 0x1c) 50.397022879s ago: executing program 32 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback={0x3f00}, 0xfffffffd}, 0x1c) 6.002173893s ago: executing program 2 (id=688): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x4042, 0x3e, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x139) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r4) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x20080, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x5, r2, r3, 0x7, 0x5, 0x8000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xcc}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) io_submit(0x0, 0x8, &(0x7f0000001f40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000240)="1262a4abf61974ce451e7560daeecba61296786b1273cad1", 0x18, 0x40, 0x0, 0x1, r1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000ac0)="7569cdb641b56e60354e125e73bacf1ce064c59291da393e3c5ae0f20222883d5fc5e22ad399daeb80c69674b5c20f751460d901a5722cc26f7a1d394f1f2bbf7e564d563f526750075942a0c9d32e65679ee938acdf2558521da17801812bf85a6264812cda75b67e6a604f7cfcb2c2c549f9e6bab91cc2bd64d4b11e38cd03ca1d48d75d12c3ef3508ef9fe39cde6bb05ee76476a82fde8b0f9cc2a14e6de73d351d2119411ded8c3dad3a1f2bf218dd8452039e8d52ca1d70285a17f334", 0xbf, 0x14, 0x0, 0x0, r0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000001f80)="a0e320683ada02d6eb0a36892680ddf124a27c679a5af444fb63dca57fb560c6014fb1894826abd784a87ebc405910c25c11eed8fd8c7602c3eab4127be04ffa8cebfd9eafe7a92adac124fd1c9666bd6a2fcd2ac3f284f1d2787106844172b28b37bed2c3827816c75ade4e07bc86eabec275021e4d2335eea6e1dcb0a4d3b30e00b993c0b97cfb008d05cfbfc817a3b303b0df91e4c0bd08fe30e9858552049f89d8174c5f213b3f3e82905377678544f00f06be4cf6b6953f29a9f649649193f7", 0xc2, 0xf3f, 0x0, 0x3, r0}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2, 0xffff, r5, &(0x7f0000000c00)="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", 0xffd, 0x2, 0x0, 0x2, r1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xc, r5, &(0x7f0000001c40)="a54dc4625e5ff11cbb689302c36daa52cbbc11", 0x13, 0x9, 0x0, 0x2, r1}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000002080)="fad3bd9ce4e8ec4533acf17a9cb60636824acec69ca9f41f46224d3db956310ec099c063424c87bfe2956cf6996867b4f9860d616e80a28baeafa5d72f465faf82aa6bb3a89e13332258da2e93ab69a08cc3893d99107b6502b27537b4a57c98e771abff0e48e9bb7f40c6c65de3c3d293a99039b987aa0f2cfc1da87b6e23e38e9bd52a4c508e825f7f262b4fd21241bb2156da7564d255240bc4d4a2bfd2cfeb2fbc3e49bc1280e9956be09f0e05a64710c6f78201401aa85c843496b0812296bd0a88ff17c21f2ac3", 0xca, 0x4, 0x0, 0x0, r1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000001e00)="6c12d37c9dc0c5252ab9cf3a0e564da9e66cc9b0bc93bae3bb517d93ac494ebc7f865079c2b68878ca35bc280b30c8eb38acc1699fa69746fbc72b2578c1cf263b451386b82b5da3fcc3a94ee1bd91ea8fa010304dcfea1d9fb6175c83c9eab01b7c", 0x62, 0x5, 0x0, 0x1, r0}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x8, 0x10, r1, &(0x7f0000001ec0)="8bcb4c4b2f94c2ac71cb7d", 0xb, 0x6, 0x0, 0x3, r1}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x6e8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet6(r5, &(0x7f0000000040)="d0948bb7a894218649bc7077e98cf183c5000000000000c0f278010000000000008000000000", 0x26, 0x480c1, &(0x7f0000000140)={0xa, 0x3ffe, 0xb81, @private2, 0xffeffffa}, 0x1c) 4.373655479s ago: executing program 2 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000003) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 4.296823302s ago: executing program 2 (id=724): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000002000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='\\\r\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0xd5c}, 0x1, 0x0, 0x0, 0x20000041}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 4.222815986s ago: executing program 2 (id=736): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a0012000a002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@llc={0x1a, 0x8, 0x9, 0x6, 0x7, 0x2, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="31afbfcecda1032583134667c12d4bde222e6008235fe8602adbf2f78a5154e869d92cb76960a1d96f63490f1b809c3b2b91fe342a73981da6113913eb7350b3b12945660b2f39380a79e525b4c70373410593cf791af2b8dd7dcb9a379e44330c58e56a142b3a86b6f778fe373ec84344c4c783ee1ef77983ba219a66a0d330a771950ee57d40b5bf6029dea34336b53aedad9aeef5bb98f28a2aebd3566b35b70746c9a6dd2201ffd8252d6ce09e1fd23774ff93d133ef68cf53d38c880a88366198390653cc98165e", 0xca}], 0x1, &(0x7f0000000340)=[{0xe0, 0xb, 0xffffffff, "926b4887091ebe9fd53fe96ce3310c757bee21c5c53f4069e2440951fb6684656623e79ac2e553531d6eba3eb57c260966ab8c6bec4492e28916f972a0bbd08fe8a5087e158a883579301a3b53e10cf20cbea54f754d659394ee4ac46b1ae56e06a585dde6534ebee2fc8456d2ed67855712a6ed8cc400cd45e53f42d636b45ca32d92b379ceabf4739e25dbe75ebeffbb797459d262ae2d77a4d94fc568efd1d8bbbd1c55a66470515796e288a008f9e72b6599d72d10bd4d05a2c19e73acb62cea8484447351de3411a2"}, {0x110, 0x84, 0x5, "bc2070b31e011f39e94575dfc1f4ce09998b671f682f065c1a4a8de60199f17e46cbc58961eb1818d17a6684a4c92c6b42071fc059405df290a97c7aa207e6a73c1a18384eae734723a277f4b241655bfe67e961f1a47a0ed2b3319bd1b4d8ec0978fc0b25efb0251e4d2fb0276a4bd910215efca570d650bf1a564b6aacd6a2cea4f8ccef068f01c110d12c609e0d53db46909bb3f72f9611b9aad36858a62c4a3673c6b60591bb35265b382a01d32cc1fb91c46170363ed8bc8b8dbc8f6bc63646c8878eb5131528605c53e4bd1c71c9ad14df05e1c39d1a4570d8642e8fba4fe3a10a480bce06132920636f12bd52c4855078e4c7324226"}, {0x90, 0x29, 0x4, "45aea414feb84759e4a8d7515f31fae9b4f8e3c9a227073dee627c16696f3a5f98c7dac41442978a42a662c2d02189017bc44e99b207c735fe762ff4183f98725477608626996ecb7d797b2d14131cb8370b862273dbf4d5665c819439e786717197533db314257fc9b12fcf9a00a11709e789d6677c256435"}, {0xd0, 0x111, 0x7, "bea1e22b63de54886a76770e8e65b02112057daf3297f1a0de77351f4fe196197c95fd35a144964dabfa4ab8f0b27b332c9a22e0b2c6246f94b5b5d8f403641d41c6277dc40aa24717a13f676003da6fc10521e705acc83123af06b7f8d84a1fc631a3bfcb4ebeb87c4d9c4b68f7dc3573535d26d00ef033138b98aac5934f1a7b8fe65362d21b31ae048127a2542c0c6314ba32bcb2b60a857fd7d5d4397961d29b7be3c55a4309e086bac7d1422167e3befb6efc241ad372801d"}, {0x60, 0x1, 0x3, "ba42ea80d24c513abf830b05a245f75fab57db74ea3583d0d7392abf0bb950d3975b2a8b2dc54fa6daa19db057fea20c8062a3ad1665c52b78f4ffa1a8e1e2a909fe929d47465ed77df7e7ae"}, {0xa0, 0x117, 0x1, "9047dc13246935a7f4a4e4d857fbddde1e80418611274f482ed072f96e39b47346c416a22c584be85191da307048a4d713d59a733b6d00e17dc92fb679e9e6453834500a6a718316f313664ad684fef69652abd07ab6d8eb4d9333a665e4c78310121efd6ef1a87ab95efa10c360d587296e26048559544c72e11f6187f8e54a49af300a3f228b751786a16fd27c4f2d"}], 0x450}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000008c0), &(0x7f0000000940)=0x68) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001425bd7000fedbdf253600000408000300", @ANYRES32=r5, @ANYBLOB="0c0099000700000058000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone3(&(0x7f00000029c0)={0xb003000, &(0x7f00000009c0)=0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a40), {0x36}, &(0x7f0000000a80)=""/92, 0x5c, &(0x7f0000001980)=""/4096, &(0x7f0000002980)=[r6, r6, r6], 0x3, {r3}}, 0x58) pidfd_getfd(r7, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000f40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b80)={0x36c, r4, 0xd00, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x4ee, 0x0, 0x2, 0x101, 0x2, 0x9]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x7, 0xa}, {0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x3}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x9, 0x7f, 0x8001, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x3}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x9}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b, 0x6, 0xa490, 0x2, 0x5, 0x8, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb4de, 0xa, 0x3cb0, 0x5, 0x4, 0x401, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x3, 0x18, 0x6c, 0xf, 0x35, 0xc, 0x5, 0x1, 0xc, 0x1, 0x24, 0x6c, 0x4, 0x36, 0x16, 0x1b, 0x2, 0x43, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x5}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x3}, {0x6, 0x8}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x6, 0x9, 0x2, 0x8001, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x48, 0x2, 0x9, 0x4, 0x24, 0x9, 0x6, 0x16, 0x6c, 0x48, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x0, 0x9, 0x18, 0x0]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x36, 0x18, 0x60, 0x18, 0xb, 0x5, 0x36, 0x36, 0x60, 0x16, 0x24, 0x48, 0xc, 0x1, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x18, 0x1, 0x12, 0x0, 0x9, 0x3cd9ed2d684a42c0, 0x30, 0x5, 0x30, 0x26]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x7, 0x4, 0x4895, 0x401, 0x5, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x9, 0x7, 0x1, 0x0, 0x1b70, 0x5bf4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x2, 0x60, 0x30, 0x24, 0x5, 0x36, 0x4, 0x60, 0xb, 0x4, 0x1b, 0x12, 0x38, 0x6c, 0x12, 0x12, 0x4, 0x0, 0x4, 0x0, 0x5c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0xd, 0xfffb, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x9, 0x4, 0xfff6, 0xfffa, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xff, 0x1000, 0x40, 0x8, 0x2, 0x9, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x12, 0x60, 0x2, 0x5, 0x9, 0x3, 0x3, 0x5, 0x1, 0xc, 0x1, 0x5, 0x4, 0x24, 0x16, 0x16, 0x1, 0x16, 0x3, 0x9, 0x18, 0x4, 0x6c, 0x16, 0x18, 0x1b, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x7}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {}, {0x5, 0x6}, {0x3, 0x3}, {0x1, 0xa}, {}, {0x5}, {0x0, 0x6}, {0x5}, {0x1}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x4}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x2}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x9}, {0x4}, {0x5, 0xa}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x5a9674730277f8c2, 0x48, 0x2, 0x48, 0xb, 0x16, 0x2d4ca089fb6ba7c6, 0x12, 0x36, 0x30, 0x0, 0x5, 0xc, 0xc, 0x16, 0x6c]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x4672367cbc1aff85, 0x0, 0x6c, 0xb, 0x18, 0x1b, 0x36, 0x30, 0xc, 0x6, 0x12, 0x60, 0x24, 0xb, 0x27, 0x3, 0x24, 0x3, 0x3]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x9}, {0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x3}]}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) syz_open_procfs(r6, &(0x7f0000000980)='net/bnep\x00') 4.10320488s ago: executing program 2 (id=735): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x8a00, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000240)="0b000300010001a7ca759b346944ba602830b2f4ad14e798617567e9db8bbe21a241953d90d40e4402082db2eb3af9f0773d8fd87bc01a3eb8a27024a1f99cd7b3a99b203254db31b3cbcdf9512b65f649bf852b2695f6c2e45268a99747c25b1b99f4e37fe9365109ffb2f699e673791f65bb6bb813e433d9ab4aca649b6eeee90850b091462cc871ccd139670b58c788b698", 0x93) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03f2ffffffff6a00280012b684a4800a00010076686c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$CDROM_SELECT_SPEED(r0, 0x5326, 0x3) 3.737081631s ago: executing program 2 (id=745): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f00000003c0)={0x1}) r1 = socket(0x10, 0x80000, 0x7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500e0179", @ANYRES16=r4, @ANYBLOB="010030bd7000fddbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="05003800000000000500370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0xf, 0x0, &(0x7f0000000080)) (async) bind$inet(r6, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) close(r2) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) (async) sendmmsg$inet(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 3.671823503s ago: executing program 33 (id=745): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f00000003c0)={0x1}) r1 = socket(0x10, 0x80000, 0x7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500e0179", @ANYRES16=r4, @ANYBLOB="010030bd7000fddbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="05003800000000000500370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0xf, 0x0, &(0x7f0000000080)) (async) bind$inet(r6, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) close(r2) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) (async) sendmmsg$inet(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 3.539607446s ago: executing program 4 (id=749): openat$audio(0xffffffffffffff9c, 0x0, 0x149842, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback={0x40000000}, 0xfffffffd}, 0x1c) 3.539063211s ago: executing program 4 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x184) (async) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) setresuid(r1, r2, r3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0a000000000000ffff0000000000060400"/38], 0x0, 0xfffffffffffffe50}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021280011800b0001006f626a726566000018000280080003"], 0xac}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setreuid(r2, r1) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004340)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x4000800) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x115}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cbc6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d60ddb3514870d74268c552", 0xca}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610", 0x7e}], 0x2}}], 0x3, 0x14042082) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r9, 0x3b87, &(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, 0x4}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 3.469079871s ago: executing program 4 (id=752): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x99c7, 0x4) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xfe, 0x1007}]}) (async) syz_open_dev$MSR(0x0, 0xc, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0xb}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) (async, rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 64) 2.582403047s ago: executing program 4 (id=755): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 2.582166725s ago: executing program 4 (id=756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c091}, 0x48800) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0) 2.391250136s ago: executing program 4 (id=761): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x4042, 0x3e, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x139) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r4) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x20080, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x5, r2, r3, 0x7, 0x5, 0x8000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xcc}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) io_submit(0x0, 0x8, &(0x7f0000001f40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000240)="1262a4abf61974ce451e7560daeecba61296786b1273cad1", 0x18, 0x40, 0x0, 0x1, r1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000ac0)="7569cdb641b56e60354e125e73bacf1ce064c59291da393e3c5ae0f20222883d5fc5e22ad399daeb80c69674b5c20f751460d901a5722cc26f7a1d394f1f2bbf7e564d563f526750075942a0c9d32e65679ee938acdf2558521da17801812bf85a6264812cda75b67e6a604f7cfcb2c2c549f9e6bab91cc2bd64d4b11e38cd03ca1d48d75d12c3ef3508ef9fe39cde6bb05ee76476a82fde8b0f9cc2a14e6de73d351d2119411ded8c3dad3a1f2bf218dd8452039e8d52ca1d70285a17f334", 0xbf, 0x14, 0x0, 0x0, r0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000001f80)="a0e320683ada02d6eb0a36892680ddf124a27c679a5af444fb63dca57fb560c6014fb1894826abd784a87ebc405910c25c11eed8fd8c7602c3eab4127be04ffa8cebfd9eafe7a92adac124fd1c9666bd6a2fcd2ac3f284f1d2787106844172b28b37bed2c3827816c75ade4e07bc86eabec275021e4d2335eea6e1dcb0a4d3b30e00b993c0b97cfb008d05cfbfc817a3b303b0df91e4c0bd08fe30e9858552049f89d8174c5f213b3f3e82905377678544f00f06be4cf6b6953f29a9f649649193f7", 0xc2, 0xf3f, 0x0, 0x3, r0}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2, 0xffff, r5, &(0x7f0000000c00)="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", 0xffd, 0x2, 0x0, 0x2, r1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xc, r5, &(0x7f0000001c40)="a54dc4625e5ff11cbb689302c36daa52cbbc11", 0x13, 0x9, 0x0, 0x2, r1}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000002080)="fad3bd9ce4e8ec4533acf17a9cb60636824acec69ca9f41f46224d3db956310ec099c063424c87bfe2956cf6996867b4f9860d616e80a28baeafa5d72f465faf82aa6bb3a89e13332258da2e93ab69a08cc3893d99107b6502b27537b4a57c98e771abff0e48e9bb7f40c6c65de3c3d293a99039b987aa0f2cfc1da87b6e23e38e9bd52a4c508e825f7f262b4fd21241bb2156da7564d255240bc4d4a2bfd2cfeb2fbc3e49bc1280e9956be09f0e05a64710c6f78201401aa85c843496b0812296bd0a88ff17c21f2ac3", 0xca, 0x4, 0x0, 0x0, r1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000001e00)="6c12d37c9dc0c5252ab9cf3a0e564da9e66cc9b0bc93bae3bb517d93ac494ebc7f865079c2b68878ca35bc280b30c8eb38acc1699fa69746fbc72b2578c1cf263b451386b82b5da3fcc3a94ee1bd91ea8fa010304dcfea1d9fb6175c83c9eab01b7c", 0x62, 0x5, 0x0, 0x1, r0}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x8, 0x10, r1, &(0x7f0000001ec0)="8bcb4c4b2f94c2ac71cb7d", 0xb, 0x6, 0x0, 0x3, r1}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)=ANY=[@ANYBLOB="e806000036000100fcff0700040000000100000004004880440601807d88a116a3bf647d6dfcc76cceac143493251ce847ff23b4ea4ec73d0f80beec67b4b715255c02e166dc915532bfd828ca94fd0ab7cd8a4cd08c0103df3d1d0ef9a86734ed6b19eaadd35a65c6f4aca4214d8b19e22a71cde632cb474572c3f75b54c69de2b172880f85428b136100aa616813ab88185dceda8df8f697dc00651baea42a762daf1d80b915e5a0cc899f44afeba5f0807ebbe9c7699a43e83889818c48b4b1768a90a031c7c1dd703bfebf3e6171d679dd888c365ad6713aff911a3a7c4b18718c0d5226034e839d3d0e2b7a1f2c46b2b7ae4a3ee2acbd9364951588241aa5c10e820ad8d34a34f323bdf72522312dd6ad9a80a3895ddea35ac0db1c6ffb834eec59b9ac4b2ce3013515cd6abbb409b324fa79bd7e6bd2d010ea623ce8ec8b917c984b7b7b09980174568402e704264802b2eb50c849dec0e65098cacedd2103ed5ffa0ca8fc2eb2089501101dcf7951dba816318407c63ad9e954db47a368770f9a006850b5b252fac6eeff3ddcecbf4f41018b5b750db04569a502c8405575714884795fde1c06ae7d72c94984ab8b4dbd063c9b17bf43a0a1b9e4c029bf4140c11050b47ee332eb4762539fc3504842948628691e62c86bd560c990a51586f732d22410f886c9fbc48b799c16b9a9a2f0af25ebbe14b7464ec784ec737956eb05f12bc2cff20088e4c5d8ca0360cf8590df5b20ae97bb8f4a8fc43f5a951be12f87908c47f5e0fb28b6f53147e6a6f7f97cb0db7fb332aecc4abf515939e136110afc99e00fc3b139d7812027e71b2ae15da023cbd51275544ba509c536f2dda1a3efc942ec222332a277ef2f5ae9f86766c617bd0c03d5851da326c08fdecf48a5dd9e53b3da6f6d0e71c48ea38b2cf9e8c8a55f35703e617ba5146238eea0b61e93e08d35e6d910fda20c800ddfc242d5867c3e1b3a15a726dafd36f0c576fa9061a1620b6be7c2ee45fea354310e26f3dc97faf0a72a479c28f08175c3d05219c8b47d806273cd3d737418be7255d2c0cb1aa7d5872f167230a3134468c622a9c50b8c8a9e568afeb229dcf4f711d5cc5bc506b72b8a09710e8d7c7aea6025c2a71dfe1ed2ba4e88f03616d373a36d65e266fe82f4721563324049b872b4491f80ff5f1cf041da466aeb970cf0908050eca857747459c7c2fb9cc5e9f59e34b930ea58bef9d06c796ed7369be48d5e442c4da8e647e3fe4f1273737d4643b114b1f3fbbf4119a3efd9582f73b4d8480623497023c4c4d2a9f75d4f202024777464d23e61a9c7c26463a93bab3ba18c07e6dcbe4e1c3771dacb7f2e83fa3fbc4f7d82abf023cf17b743aa7787cb6d8c2c1569689de4553c9d35e9661b63cb0f8e4391494cea6e1846d904dc41c505d2dd753dc22ec6cc18cf06b3ca8e30bbda4c1fa937ae8305a1dfbbb44f9e9126cd5f45dccad02b3f106ebfdbe91d34b8212681d9a938a372ec5c11d1dec4bc7fe64e2cc67fc68aa81b1819964c9dcba6769175daedc77db9fd8eff49faf25a63646f0b3e1416633f085e33dd65edf8f582ab13bc9b57fc591ea08cfffc946e867d90dadf81134e435f31b9c86d517c1315eed1744289e1709af48059591a753fbf62f030a62d6d0e646241339211a9c5e344a0045934d5fd9b54c91f446a4a0181179730a851d6fe12686d28e02d88dd447cd129c9e1714edae9cafbda177b62a583663b8faec6a9edbbde0439565613136aca691d420c5163ad62c38cf1475db3d834a3c6ba8a4ce9bd5b3c3dcbe17c2365bd0372a807d6c9bbdc86c1a950739160c95dc571c42b2b7cddf2a414158cb72f01a8e836b7ed2e556d62301a2c5aacfdbd7bca5062ea0e144c9347a1950e98ae02a946e23957e68e8d3254bff29e6641ac1db075f7942c2e32128d63b97d0d297b98c9b36ded3eba880fd15cfecec2de711973c6e105ca2c2d0979e7f5944825add8fd54ce9dcc4f68cf9ce1f5ea78f755cff737fbf7d3cd34ca12cccebf5f3f624f4d976f4755ce4ed84082a22a16cfedf779cd8e9dc097f08f083a087fbab202f0eea12143788040a4c3c4bbe72271c97a0f10c5709dec5c3d79205b2d76567662fbd1c86998c7140e78ed2f9f1a37b43b8de107dffb5b0bb1e4ac16bed218aa72027af548b04c6796e8786c6e830a417c518ee079b0953b0a0abbe90cc20fe2744ee941dce26f26557a7082a2b8cd986945cd8bf48b633ed37e94e53ce9ef8f07c8b5bf7b31e81929d40ca667ec0eecc4d70cae52268a00020062095244a4b07e544a98d99eb057c0c5f95e619a6e903064a2d3c5bac633a811b85871544c10394e42e183ec4542f47f2fc241df4529c3815c5048db4c879c27d1cd193764ed0b82ed0fe9be970157cdf51914d7ea22a90d22f72f33864fac9735f1e79e84d882ec0f83dc62a4f1e129ec1ee33ffa8f9864c555a84fcc7a73dff52106dd32cb000069779cce3eb78ea8588773457439ed5259b349da941a33cf5fb503a7af26f6d4c8917e25a9d5b649da79d7870700bb622d28b1e7d40fed6afaa45bb947e0e154d2eaa8f06551753cd0417491d267"], 0x6e8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet6(r5, &(0x7f0000000040)="d0948bb7a894218649bc7077e98cf183c5000000000000c0f278010000000000008000000000", 0x26, 0x480c1, &(0x7f0000000140)={0xa, 0x3ffe, 0xb81, @private2, 0xffeffffa}, 0x1c) 1.336298912s ago: executing program 0 (id=772): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xf24, 0x4) syz_open_dev$dmmidi(&(0x7f0000000000), 0x7, 0x4080) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1) 1.236392983s ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x5, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000a00)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x34, 0x0, 0x5, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) fcntl$notify(r6, 0x402, 0x8000003d) close_range(r6, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x1, @val=@netkit={@void, @value=r6, @void, @void, r5}}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r1}, 0x38) 1.235894209s ago: executing program 0 (id=774): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e5ab, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x1001, 0x4, 0xc, 0x8}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e5ab, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x1001, 0x4, 0xc, 0x8}], 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) (async) r11 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004081}, 0x2400c804) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004081}, 0x2400c804) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44800, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44800, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x10) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x3b) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x400000b3, 0x3}}], 0x20}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 937.549257ms ago: executing program 0 (id=775): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@delchain={0x2c, 0x65, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0x2, 0xb}, {0x9, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x24000845) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08003500000000000a000600ffffffffffff00000500080001000000110007007ecc5a19f535f80efab61a1e9f0000000800090005ac0f0008002600850900000a0034000101010101010000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082bbd7000fbdbdf255900000008000300", @ANYRES32=r5, @ANYBLOB="0c009900eb7f00005a000000e8345bd33c88bb1129d0736138da34d9df1b3f6156c39031"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x24000004) r6 = fanotify_init(0x8, 0x40000) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3048002}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r6, 0x2, 0x100018, r7, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 851.398709ms ago: executing program 0 (id=778): openat$audio(0xffffffffffffff9c, 0x0, 0x149842, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback={0x20000000000}, 0xfffffffd}, 0x1c) 774.65196ms ago: executing program 0 (id=780): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000", 0x3}], 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1f1581, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="470f01c8410fab23660f21e066b85f008ee80f79a4928000c0fe3e410f32f3430f09400f01f866b813018ed8f2f32643d9dd", 0x32}], 0x1, 0x43, 0x0, 0x0) 564.605097ms ago: executing program 3 (id=786): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000004c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc00, 0xe9, 0x9, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xb, 0x10001, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x5e9, 0x2, 0x7, 0x100000001}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xfec22002, 0x1e08}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xa0e, 0x18bcdd55}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x441, 0x6, 0xc8e5, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x53, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_amd_vmload={0x182, 0x18}]}}], 0x208}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x2180}, &(0x7f0000000480)=0x8) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000380)=""/164, &(0x7f0000000440)=0xa4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x10000, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e20, 0x3, @private2, 0x8}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0x4ca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0], 0x96) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r8 = io_uring_setup(0x1b81, &(0x7f0000000700)={0x0, 0xb9b6, 0x0, 0x3, 0xb0}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r8, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 476.565677ms ago: executing program 3 (id=788): openat$audio(0xffffffffffffff9c, 0x0, 0x149842, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback={0x2000000000000}, 0xfffffffd}, 0x1c) 476.233738ms ago: executing program 3 (id=789): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x4001) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) (async, rerun: 64) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)) (async, rerun: 64) r2 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@dev}}, {{@in6=@local}}}, &(0x7f0000000380)=0xe8) 399.193739ms ago: executing program 3 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x3, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x4, 0x9, 0x4, 0x0, 0x3, 0x2, 0x7fffffff], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x10, 0x0, 0x2, 0x0, 0x8, 0x9, 0xf}, {0x80a0000, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc}, {0xe000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x3}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0xe, 0x8, 0x0, 0x2, 0x0, 0x3d, 0x83}, {0x0, 0x60000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xca, 0x26, 0x0, 0x0, 0xfd}, {0x80a0000}, {0x7000, 0x9fa}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x5, 0xa, '\x00', 0x3ff}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) 317.985749ms ago: executing program 5 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000dff908500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 258.179016ms ago: executing program 3 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4a102) (async) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x4000009b, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x666690f, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 257.709032ms ago: executing program 5 (id=793): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) fallocate(r2, 0x9, 0xf0, 0x8) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r4, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r4}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400)="a4e8c4d182c80b77d0b245c9a5f51b0ea0dcba199cf13afa31c5294a80d49f917b7e1eafeaa4269305742375a5680dd339aa538c7343f442f8d4476613557cebc6c58dac39a9d98b1f371314d1d1208739e6dfb5111b03897d4141adba01dc663028d769417485998c6f814865e3c101bbb9eb22c4d92a5d5985ead2119da7cf013d55cbb4bcd65809ae7ae7cdc0773e9db8d6284f0c6e121eff90aec35515f63113781b299607298515282bcf94db", 0xaf, r1}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x2b}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000680)="8db07317a6f4dfd5f151f68fed69357f7439c1da24b9a7631a8b4fa4d1afc65c1e98bd99b952d169a96ed4ed247ba4c0ffd71cadbf75f202268bc008b632e278d551c6a9a590f270c4651a8b6f96f0742a978dbe5a52a9e80dab3aef71e5e66d60c47d72361bb8368b20c4cb92ff559a99ef", 0x72}, {&(0x7f0000000880)="fc5f28d72aa871e3e79446c76a1bad28d5a5bcfa17977d0ae01989b5b9f903e3cdb8fcb772fd11bc1ed290cb3a285ed03485c1cfeb755453aca06cffa2c03af1aadbe687bd13f480c8d9e025f6", 0x4d}, {&(0x7f0000000940)="b89bfb3a487b559d00e0a1df4fba5ea72121ad13c5c607219eb521f9e1bb501b9ebc858a863fbddd7da3cdb2b661df9923ddd7c1029dd6e4144fa69d533448506b2617c476b2757c4623f3728b1f74d061e11d588c0a528322544046b9666441a50ddf3ae5853d0212519dd06eee17b11c154297695722f430f8ed1d6a72240a098f91bc513162fdd5b5e4e15a3924abaa7042d59667e93f0da47f38efd92ee491fe039a6477c0", 0xa7}, {&(0x7f0000000a00)="2836f16b9af5aafaaf75c4791928a21508914a3616f2686f6d94744d045cf5372efa73a4981fc4a608e88953d4f95fdaf196fdd8e2741872798d00f5cdd449c36d1a3d0758253546df4a3d8a4a5652918ba8b3ff794f333138617b4bc3b3f57dd4ccce1e47fb313f3d00972353ba343e31bb5dbd8cd12e8d2821b440db03c844660b6e9d1d3f2d0745b283c563ddbf2e600cba8d5da64e25fd6eba44bce09370118aa816a627cd86c81685875d55b7fd02854bca49494e119f1b6967c92febc825f7be54f0f92126092b134a213dc41d0e4ea6ed8e10b8506ac65e3f1918d178d3e87d3b51a6523ec8a89ec088bbe647", 0xf0}], 0x4}, 0x24040084) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = syz_ublk_setup_io_uring(0x223c, &(0x7f0000000200)={0x0, 0x7442, 0x0, 0x0, 0x3c1}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000740)={0x1, 0xfb, 0x2, '\x00', 0xd}, 0x1) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000280)="94072b5845c2e016b7b8256407532f930a1acbd1228dd536b3b5840c76c9de1642878b53abc39c1376cf3f64ea939e2ff4a7860e65ba1138062320953443bd192a7ccbbdcefe6a47d1aea3f97c3817c7801f6c01000000000000", 0x5a}], 0x1) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r8, 0xc0) r9 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca58f06ff48ec680e835e75dd8f93283cb0a2dcaaa4b234ff4b0f3df4f6acb709814f10551e1dafebdc2eb668fb61299fde349f6369835385ad6f01175108ebc6e7784a273fe398c930c8d00fb927c0", 0x52}], 0x1}], 0x1, 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_rdma(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x80, &(0x7f0000000900)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}]}}) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfffffffffffffe88}, {&(0x7f0000000380)=""/99, 0x63}], 0x2}, 0x0) 189.292795ms ago: executing program 5 (id=794): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x7b, "d8750b064e322bc82c513d6b9b24fbf336c1a677ae96a7a20da34162159907c93c01fbd354ac6fc6376bd2c409abbe26b2bc96c7cfce1b0375beceb7ff5b422cd058f9d24beeb4a8444b32c7780a4692be0590de40c56c7db4fd1505da17d33b872bd9ca30bf7a1a8e6f62d659d852acf2ca5fe81329f98410bd7d"}, &(0x7f0000000340)=0x83) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x7}, 0x8) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close_range(r0, 0xffffffffffffffff, 0x0) 189.071822ms ago: executing program 5 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="7f7827835a17650d2182156c2a0a96f10d204b8961fea8381333fa7dbdd66ba8f899351d75d52eb3fb39cc838e11cfafb308379ec5047410d6e1870ba4b15bde18d67586624dea6340ca1dd672d6cf2d6f8adf45ff05a77831a854c6947f493d2d3baa32e3e4740076894cd427293027896097d1975490ad0ea1a508ec2ed214699c84ffffd0200cbeb854ce789efa606aea06e9d9a5b081b988d66b48c770a13c4d4c9dc7352eef5d38fdadafebe2983ec0aa0eee24acd5a51640de462b830566f45af46b0d92ef326ccb87fda09b9a0b264de6e363b2b6b949a23b50240b6f0ef1ba1c351660860e88bbecd766c925c875704b541d8ab528939dfaf221b7b49efb514c7b470ba4cf316520e2358a6435c9f60a7185d553a4e057f7e46a8cc3492aac696db1b78769d7fe4127700e316f59096f7381cec05f40cf7d41bc0b7535fb5a3808adcdfe41fdde26b91acb3ee8328f6cc335a4c0482c12181be134c832d537a185af3e9766436c40d86a67642e42313060ee31c1c49d07ae30d0b4ab3556861e4c12e05f3fcd25f1ddaea81d2003acda780af3620aa8eda0ba48de4399639fb9f93cd4204d46c84a517a97d79fb39abe05ae29a859956b73cb578ec28c877f50229e6719d97014dd2b4d96ce2e710b97e9068e0e2372fcf3979bd0c7df1d69542dfd4837f2b735967af14e8e950e46fb4f8b4b0c900003e9005366c09496b808a30e293cd084b561156c45f3be9002b78d613c4907d422f1cbe4682494294a86b20f266ac72a79e6996737d2f6324581cb1b9e7529e56ee8a87e4578e2b08d80e6903206ce5d8ef3c4679bd2d48aef11f731cacf9480676b7b37ec4bb710b5e9832943c5435e983d23b1d242e97d5e999f2de751ca61c12916431260fe6360a6058ea12dfb912096bfff7f67b46df54b22c122b641c6d9caa3398cc1f395890f27626e332c277f5f768a764ece78a99fbea1b406c8a20d5dca9bb7c41249e57da279ae9f31a56a929cfb7f1823245916a4b24b75ba7f78010cfe61006ab2710b670a134cc67741759192fc3bb1e60643f9dd7e02c0c9227d5eea938bdce2ab0d307e7ba8448daeb3d5e2eca5803ea5a72c50e3cf531162fc8d9871abe819846dc520516fb6d35b1f92677e734ae1102ee965c5e0b36a66c90ba5d645c3b04e7a972ca2acfee4d2454f71a40eee53fbe29e70465a9a6b5880147b1c3ace25d76a5902d59a00faa04aa1059b2115ad1a266f597ce7a69a567da8b0751c6d95e7cb4a57b55029c9a2e89a257581ba07d3d328d44f016dca0e6152cb75b5630ea6fef9f0bf64b420ed92e56f7775f382014c44cc23b75f3f409a40ab53a823061a2e4efc391b4a34e2e5c73200e607437a456cd43b733c39549a6251a7b46fa942a52885128a43e07056afb41c8103178dea155b6c1df5b317fcbd70d6959e519f007fcefdcc48881374f7f6c1323e76a0b1bc5927d43eaf017a0b64a5792c008fc7459469bc3f68ef8e4923679f1df3b16e74532e75e2b3c7f3bb632e5e91b4353e2c329db897e900e0ba5a346c5309ac9e06e23932ad01ced299b63239a4a75b9ff0c8ad16df4fcd6ded596edacbd0dd64cc964cdd6e23eb6c2f092a2f4b5f34cd3696c444121f81f0e5df826b4eb217b3e7e8ccde3697b14b67e09d57324888b9645ada1d5ffcbdd3c9ed9e494052209d2fc3c054e41c8c69cad2ba2e85a96c857688916615f87c644c13ed3c26829fb95c354e047d0c5ef929da92fe4a68ea80d40d0136045dcf139ae2b95c2164f465664b3c54511caa138f3b760f178c26b54c848e994574138e8633bfa40e47f05da233d5c66e56e5de10afbad47c24f4432a6bf9587aa8419e768a7cc89d8616347a900a233bb869fb8caa23d2528efe197987a0f5ec23285985b79edf4598f72e1baa355e81ba665fcb4ee5104efe16dd1d818b7dc05bb5a3b5865bb3784a4e87efd3970128414b5a065e0456f44f3ea2851e0502b0ca427dd3ad7d74105c8e1e33fb7678ae78e88c95bb24451c9d2daedf8a94cbc308dd00bd0bee8caa2d2a262aaab57489b77dd14ee5286c6f18bd79a0045ec14e84662d6f65f4d0dca0cfdbdff26f38016c762514c1305bd20e4ee910118677cd1ff4f81e9e5c4c061d3b1254240f6f0113be21df10981c6ac763ed5626aff0743eaf908206b1699218d96b81703beed8860e5439dadce2ab28763e5adb4f1ffa513bac101196c218f669601765de3591ce43a4ef1d3eeb71e02c3fb98d1b4d03ac0e18b0a92c27e9e0781474e5a595a9041fe5c95b4c3d30e49876fd19777de6952f5e558d812387efafd3374455c92dc2d6c0085bff88b30711931c5890d76917d0957e6dfe214aa5beb3f5b393e7b577befee0010c0e29469aba50d1b30e61af59a3e7c928774ec83c339018bc41cc92db76b6ef45923306cc1aefd8c194c456246a2bbdc0f33d4c7d8a10ece1cde43af0953799954030106e0671a4378157825c5b04972d7f0de9c135d2ddf0bc0f7f6b5cd9bcf68e948ed7a06d2e416e6bbfe6880f7d59d86e8b6492b1167a940d00a879623d353612ff9e50f313d750e655ea5b68271703654ae1d274a8dfcc2b594b6487a30fe02a02773e6e199ce29261e2de87a87a5f506646928bf6e26c69aebf9d5426b943b40f95c598037feb0abd93a61988005b8521423baad3dfe5d3cb73400e1062fd477b32da3e309dcf726f604c4b84239d0eca3b8c24267bcb8fd3135c40a23f51b049bf373b96a9800bddd144b57fe151a62075b665862f34c8c80f25f2ccda777665a559b41c967d9d823691fc12a2bd", 0x7d0}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002280)=""/4088, 0xff8}], 0x1}, 0x40002160) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) write$nci(r4, &(0x7f0000000580)=ANY=[@ANYRES16], 0xcc) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) 79.787941ms ago: executing program 3 (id=796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x38, 0x1b}, {0xdddd1000, 0x70000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x22, 0xab, 0x5, 0x46}, {0x30000, 0x7000, 0x3, 0x1, 0x4, 0x43, 0x9, 0xfb, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0x2, 0xe}, {0xdddd1000, 0x80a0000, 0x8, 0x20, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x100000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x19}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x42024, 0xb, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x5b3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r4, 0x0, &(0x7f00000a0000)='LLL', 0x3}) memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 79.401134ms ago: executing program 5 (id=797): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x22180, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYRES32=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)="b7a55f77cf7fe7da7297da5b47b6c9dd15534a1a68d7f24cbd269d7fa1396fa33914ef176a4e0977897e18063bc128f3e1665d07f2272af3c0be7de9b0a2991ebb24c78f7c3fdb5853cd45e2f58bd3491780611030a189295b9c0eb8307097631406b1e896f71f16684956c3c9cbdfa8707e9cd5085f7871f40d0f2d6b995912672e1d3819863ece8b7ba1", &(0x7f0000000380)=""/15, 0x2}, 0x20) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x1f, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x2, 0xffff, 0x7ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r5}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0xd7, 0xa}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0xffeffffa) 0s ago: executing program 5 (id=798): clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffd, 0x20, 0x401, 0x4, 0x9, 0x0, 0x9, 0x5a236fbe, 0x101, 0x5, 0x63f1, 0x5, 0xb1be, 0x6, 0xfffffffffffffffb, 0xffffffff00000001, 0x5, 0x573, 0xb2, 0x0, 0xe47, 0x2, 0x7d0a, 0x8, 0x8}) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000000)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000000c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f00000007c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f00000007c0)}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x100000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r6}}, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0x2}}, 0x20) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000000a80)={0x0, [{0x7, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xc93, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x2, 0x0, 0xfffffffc, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x178, 0x1, &(0x7f0000000080)="8afbd516721dd6bc5f3bdc9aed7439f35e86869993cde82b1fdeb7b6b65433bc7246f99e016b7039d2cbbbbfd41630"}, {0x0, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x344, 0x0}, {0x0, 0x0, 0x12, 0x0}, {0x1, 0x0, 0x5c, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4ca, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x0, 0x0, 0x4, 0x0}]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000021020000c1"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x43000000, 0x0, 0x0, 0xd, 0x3}]}}, &(0x7f00000007c0)=""/235, 0x26, 0xeb, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x43000000, 0x0, 0x0, 0xd, 0x3}]}}, &(0x7f00000007c0)=""/235, 0x26, 0xeb, 0x1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r10}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r10}, 0x38) kernel console output (not intermixed with test programs): 000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.015910][ T6600] R13: 00007f6bc5026128 R14: 00007f6bc5026090 R15: 00007ffd79509d38 [ 65.015925][ T6600] [ 65.016003][ T6600] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.016272][ T6579] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 65.070124][ T6604] fuse: Unknown parameter 'f' [ 65.081983][ T6579] UDC core: g1: couldn't find an available UDC or it's busy [ 65.179256][ T6604] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 65.311190][ T6616] netlink: 104 bytes leftover after parsing attributes in process `syz.0.191'. [ 65.361585][ T6622] ªªªªªª: renamed from vlan0 (while UP) [ 65.415719][ T6629] binder: 6628:6629 ioctl c0109428 200000000100 returned -22 [ 65.452818][ T6629] binder: 6628:6629 ioctl c0306201 200000000040 returned -22 [ 65.458315][ T6629] binder: 6628:6629 ioctl c0306201 200000000640 returned -22 [ 65.502355][ T6640] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 65.530737][ T6640] bond1: entered promiscuous mode [ 65.532462][ T6640] bond1: entered allmulticast mode [ 65.536218][ T6640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.542333][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.199'. [ 65.671900][ T5094] Bluetooth: hci0: adv larger than maximum supported [ 65.750222][ T6654] CIFS: Attempting to mount //127.0.0.1/share [ 65.755268][ T6654] CIFS: VFS: Error connecting to socket. Aborting operation. [ 65.758682][ T6654] CIFS: VFS: cifs_mount failed w/return code = -111 [ 65.763979][ T6656] CIFS: Attempting to mount //127.0.0.1/share [ 65.767166][ T6656] CIFS: VFS: Error connecting to socket. Aborting operation. [ 65.770234][ T6656] CIFS: VFS: cifs_mount failed w/return code = -111 [ 65.828616][ T6665] netlink: 'syz.1.207': attribute type 34 has an invalid length. [ 65.831029][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 65.942197][ T6671] vxcan1: entered allmulticast mode [ 66.135288][ T6681] CIFS: Attempting to mount //127.0.0.1/share [ 66.139440][ T6681] CIFS: VFS: Error connecting to socket. Aborting operation. [ 66.141941][ T6681] CIFS: VFS: cifs_mount failed w/return code = -111 [ 66.149701][ T6683] Cannot find add_set index 65532 as target [ 66.174397][ T6686] CIFS: Attempting to mount //127.0.0.1/share [ 66.179683][ T6686] CIFS: VFS: Error connecting to socket. Aborting operation. [ 66.182043][ T6686] CIFS: VFS: cifs_mount failed w/return code = -111 [ 66.260030][ T6697] pim6reg: entered allmulticast mode [ 66.263409][ T6697] pim6reg: left allmulticast mode [ 66.322386][ T6700] comedi comedi2: board detection failed [ 66.576085][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.711905][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 66.727420][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.735561][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.739960][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.743180][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.749102][ T6702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.764183][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.767029][ T6728] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.823248][ T6730] netdevsim netdevsim3: Direct firmware load for . [ 66.823248][ T6730] failed with error -2 [ 66.831673][ T6730] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 66.831673][ T6730] [ 66.844062][ T6732] CIFS: Attempting to mount //127.0.0.1/share [ 66.848563][ T6732] CIFS: VFS: Error connecting to socket. Aborting operation. [ 66.851803][ T6732] CIFS: VFS: cifs_mount failed w/return code = -111 [ 66.881374][ T5094] Bluetooth: hci0: Dropping invalid advertising data [ 66.884329][ T5094] Bluetooth: hci0: Malformed LE Event: 0x02 [ 66.890466][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 66.919461][ T6739] CIFS: Attempting to mount //127.0.0.1/share [ 66.922402][ T6739] FAULT_INJECTION: forcing a failure. [ 66.922402][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 66.930649][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.1.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.930666][ T6739] Tainted: [L]=SOFTLOCKUP [ 66.930670][ T6739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.930676][ T6739] Call Trace: [ 66.930685][ T6739] [ 66.930690][ T6739] dump_stack_lvl+0x100/0x190 [ 66.930755][ T6739] should_fail_ex.cold+0x5/0xa [ 66.930776][ T6739] should_failslab+0xc2/0x120 [ 66.930800][ T6739] kmem_cache_alloc_noprof+0x91/0x6a0 [ 66.930814][ T6739] ? __pfx_map_id_range_down+0x10/0x10 [ 66.930833][ T6739] ? security_inode_alloc+0x3b/0x2c0 [ 66.930870][ T6739] security_inode_alloc+0x3b/0x2c0 [ 66.930886][ T6739] inode_init_always_gfp+0xc77/0xfb0 [ 66.930906][ T6739] alloc_inode+0x8e/0x250 [ 66.930921][ T6739] sock_alloc+0x44/0x280 [ 66.930965][ T6739] ? security_socket_create+0x7f/0x250 [ 66.930980][ T6739] __sock_create+0xc2/0x860 [ 66.930996][ T6739] ? iput+0x3a/0x40 [ 66.931011][ T6739] generic_ip_connect+0x826/0x1810 [ 66.931047][ T6739] cifs_get_tcp_session+0x17a1/0x1f20 [ 66.931067][ T6739] cifs_mount_get_session+0xc9/0x460 [ 66.931079][ T6739] dfs_mount_share+0x200/0x1e20 [ 66.931102][ T6739] ? do_raw_spin_lock+0x128/0x260 [ 66.931124][ T6739] ? __pfx_dfs_mount_share+0x10/0x10 [ 66.931139][ T6739] ? __lock_acquire+0x49f/0x1a40 [ 66.931152][ T6739] ? lockdep_hardirqs_on+0x78/0x100 [ 66.931194][ T6739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.931207][ T6739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.931221][ T6739] cifs_mount+0xc4/0xdb0 [ 66.931230][ T6739] ? find_held_lock+0x2b/0x80 [ 66.931239][ T6739] ? find_nls+0x125/0x170 [ 66.931254][ T6739] ? find_nls+0x125/0x170 [ 66.931268][ T6739] ? __pfx_cifs_mount+0x10/0x10 [ 66.931277][ T6739] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.931295][ T6739] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 66.931307][ T6739] cifs_smb3_do_mount+0x2c0/0x1b20 [ 66.931318][ T6739] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 66.931348][ T6739] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 66.931364][ T6739] smb3_get_tree+0x1fd/0x440 [ 66.931381][ T6739] vfs_get_tree+0x92/0x320 [ 66.931397][ T6739] path_mount+0x7d0/0x23d0 [ 66.931414][ T6739] ? __pfx_path_mount+0x10/0x10 [ 66.931426][ T6739] ? lockdep_hardirqs_on+0x78/0x100 [ 66.931439][ T6739] ? putname+0xb1/0x110 [ 66.931451][ T6739] ? kmem_cache_free+0x127/0x6b0 [ 66.931466][ T6739] ? __x64_sys_mount+0x293/0x310 [ 66.931478][ T6739] __x64_sys_mount+0x293/0x310 [ 66.931492][ T6739] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.931509][ T6739] do_syscall_64+0x115/0x870 [ 66.931522][ T6739] ? clear_bhb_loop+0x40/0x90 [ 66.931535][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.931546][ T6739] RIP: 0033:0x7fef2279e019 [ 66.931557][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.931567][ T6739] RSP: 002b:00007fef2374e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.931585][ T6739] RAX: ffffffffffffffda RBX: 00007fef22a25fa0 RCX: 00007fef2279e019 [ 66.931592][ T6739] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 66.931598][ T6739] RBP: 00007fef2374e090 R08: 0000000000000000 R09: 0000000000000000 [ 66.931618][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.931625][ T6739] R13: 00007fef22a26038 R14: 00007fef22a25fa0 R15: 00007ffef595f658 [ 66.931639][ T6739] [ 66.931680][ T6739] socket: no more sockets [ 67.035640][ T34] usb 7-1: USB disconnect, device number 3 [ 67.037558][ T6739] CIFS: VFS: \\127.0.0.1 Error -23 creating socket [ 67.058306][ T6739] CIFS: VFS: Error connecting to socket. Aborting operation. [ 67.061463][ T6739] CIFS: VFS: cifs_mount failed w/return code = -23 [ 67.330704][ T42] kauditd_printk_skb: 282 callbacks suppressed [ 67.330715][ T42] audit: type=1400 audit(1785550080.681:692): avc: denied { execute } for pid=6750 comm="syz.1.239" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 67.333551][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 67.407419][ T42] audit: type=1800 audit(1785550080.761:693): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 67.424726][ T42] audit: type=1400 audit(1785550080.771:694): avc: denied { setopt } for pid=6753 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.466274][ T42] audit: type=1800 audit(1785550080.821:695): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 67.556174][ T42] audit: type=1800 audit(1785550080.911:696): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 67.574623][ T42] audit: type=1800 audit(1785550080.911:697): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 67.598366][ T42] audit: type=1800 audit(1785550080.951:698): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 67.647554][ T6765] bridge1: port 1(macvlan2) entered blocking state [ 67.650152][ T6765] bridge1: port 1(macvlan2) entered disabled state [ 67.652420][ T6765] macvlan2: entered allmulticast mode [ 67.680663][ T42] audit: type=1800 audit(1785550081.031:699): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 67.697671][ T6767] FAULT_INJECTION: forcing a failure. [ 67.697671][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 67.705323][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.0.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.705340][ T6767] Tainted: [L]=SOFTLOCKUP [ 67.705344][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.705357][ T6767] Call Trace: [ 67.705373][ T6767] [ 67.705382][ T6767] dump_stack_lvl+0x100/0x190 [ 67.705453][ T6767] should_fail_ex.cold+0x5/0xa [ 67.705477][ T6767] should_failslab+0xc2/0x120 [ 67.705505][ T6767] kmem_cache_alloc_noprof+0x91/0x6a0 [ 67.705518][ T6767] ? __pfx_map_id_range_down+0x10/0x10 [ 67.705537][ T6767] ? security_inode_alloc+0x3b/0x2c0 [ 67.705579][ T6767] security_inode_alloc+0x3b/0x2c0 [ 67.705602][ T6767] inode_init_always_gfp+0xc77/0xfb0 [ 67.705634][ T6767] alloc_inode+0x8e/0x250 [ 67.705650][ T6767] sock_alloc+0x44/0x280 [ 67.705691][ T6767] ? security_socket_create+0x7f/0x250 [ 67.705706][ T6767] __sock_create+0xc2/0x860 [ 67.705722][ T6767] ? iput+0x3a/0x40 [ 67.705750][ T6767] generic_ip_connect+0x826/0x1810 [ 67.705806][ T6767] cifs_get_tcp_session+0x17a1/0x1f20 [ 67.705827][ T6767] cifs_mount_get_session+0xc9/0x460 [ 67.705840][ T6767] dfs_mount_share+0x200/0x1e20 [ 67.705881][ T6767] ? do_raw_spin_lock+0x128/0x260 [ 67.705905][ T6767] ? __pfx_dfs_mount_share+0x10/0x10 [ 67.705920][ T6767] ? __lock_acquire+0x49f/0x1a40 [ 67.705932][ T6767] ? lockdep_hardirqs_on+0x78/0x100 [ 67.705978][ T6767] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.705990][ T6767] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.706004][ T6767] cifs_mount+0xc4/0xdb0 [ 67.706013][ T6767] ? find_held_lock+0x2b/0x80 [ 67.706022][ T6767] ? find_nls+0x125/0x170 [ 67.706038][ T6767] ? find_nls+0x125/0x170 [ 67.706054][ T6767] ? __pfx_cifs_mount+0x10/0x10 [ 67.706063][ T6767] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.706081][ T6767] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 67.706092][ T6767] cifs_smb3_do_mount+0x2c0/0x1b20 [ 67.706105][ T6767] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 67.706136][ T6767] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 67.706152][ T6767] smb3_get_tree+0x1fd/0x440 [ 67.706175][ T6767] vfs_get_tree+0x92/0x320 [ 67.706192][ T6767] path_mount+0x7d0/0x23d0 [ 67.706209][ T6767] ? __pfx_path_mount+0x10/0x10 [ 67.706222][ T6767] ? lockdep_hardirqs_on+0x78/0x100 [ 67.706235][ T6767] ? putname+0xb1/0x110 [ 67.706246][ T6767] ? kmem_cache_free+0x127/0x6b0 [ 67.706261][ T6767] ? __x64_sys_mount+0x293/0x310 [ 67.706273][ T6767] __x64_sys_mount+0x293/0x310 [ 67.706287][ T6767] ? __pfx___x64_sys_mount+0x10/0x10 [ 67.706305][ T6767] do_syscall_64+0x115/0x870 [ 67.706317][ T6767] ? clear_bhb_loop+0x40/0x90 [ 67.706331][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.706341][ T6767] RIP: 0033:0x7fb3cf99e019 [ 67.706357][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.706367][ T6767] RSP: 002b:00007fb3d08fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.706385][ T6767] RAX: ffffffffffffffda RBX: 00007fb3cfc25fa0 RCX: 00007fb3cf99e019 [ 67.706392][ T6767] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 67.706398][ T6767] RBP: 00007fb3d08fc090 R08: 0000000000000000 R09: 0000000000000000 [ 67.706404][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.706410][ T6767] R13: 00007fb3cfc26038 R14: 00007fb3cfc25fa0 R15: 00007ffec4944bd8 [ 67.706424][ T6767] [ 67.836001][ T6767] socket: no more sockets [ 67.837612][ T6767] CIFS: VFS: \\127.0.0.1 Error -23 creating socket [ 67.854435][ T42] audit: type=1800 audit(1785550081.201:700): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 67.879745][ T42] audit: type=1800 audit(1785550081.231:701): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 68.195187][ T6791] kvm: user requested TSC rate below hardware speed [ 68.445857][ T846] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 68.597698][ T846] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 68.600146][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.603402][ T846] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.607056][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.610502][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.615527][ T846] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 68.618048][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.621355][ T846] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.624887][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.628408][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.632852][ T846] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 68.635232][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.638576][ T846] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.642234][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.645612][ T846] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.651235][ T846] usb 6-1: string descriptor 0 read error: -22 [ 68.653235][ T846] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.656183][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.673074][ T846] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.723577][ T6773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.731917][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.739302][ T6803] tipc: Started in network mode [ 68.741956][ T6803] tipc: Node identity 5e0004, cluster identity 4711 [ 68.744054][ T6803] tipc: Node number set to 6160388 [ 68.812780][ T6819] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 68.818058][ T1353] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 68.852436][ T6819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.886931][ T6819] bond1: (slave geneve2): making interface the new active one [ 68.893156][ T6819] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 68.935290][ T6831] netlink: 'syz.0.263': attribute type 15 has an invalid length. [ 68.938213][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 68.952688][ T6831] netlink: 'syz.0.263': attribute type 15 has an invalid length. [ 68.955219][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 68.980772][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 68.984026][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 68.987143][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 68.991215][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 69.173357][ T6843] kvm: user requested TSC rate below hardware speed [ 69.177333][ T6843] netlink: 'syz.0.266': attribute type 63 has an invalid length. [ 69.179880][ T6843] netlink: 5 bytes leftover after parsing attributes in process `syz.0.266'. [ 69.482256][ T6861] syzkaller1: entered promiscuous mode [ 69.484160][ T6861] syzkaller1: entered allmulticast mode [ 70.033057][ T6875] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 70.101200][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 70.104267][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 70.513001][ T6898] file system registered [ 70.522151][ T6898] read descriptors [ 71.069540][ T5883] usb 6-1: USB disconnect, device number 3 [ 71.087632][ T5737] ffs_data_put(): freeing [ 71.230689][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.233469][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261520][ T6927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=6927 comm=syz.2.297 [ 71.299961][ T6930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.298'. [ 71.336319][ T6933] cifs_smb3_do_mount: 1 callbacks suppressed [ 71.336329][ T6933] CIFS: Attempting to mount //127.0.0.1/share [ 71.337741][ T6934] FAULT_INJECTION: forcing a failure. [ 71.337741][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 71.339587][ T6933] FAULT_INJECTION: forcing a failure. [ 71.339587][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 71.342338][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.1.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.342356][ T6934] Tainted: [L]=SOFTLOCKUP [ 71.342360][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.342367][ T6934] Call Trace: [ 71.342372][ T6934] [ 71.342377][ T6934] dump_stack_lvl+0x100/0x190 [ 71.342443][ T6934] should_fail_ex.cold+0x5/0xa [ 71.342472][ T6934] should_failslab+0xc2/0x120 [ 71.342512][ T6934] kmem_cache_alloc_noprof+0x91/0x6a0 [ 71.342533][ T6934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.342573][ T6934] ? __inet_hash_connect+0x6da/0x2000 [ 71.342637][ T6934] __inet_hash_connect+0x6da/0x2000 [ 71.342671][ T6934] ? __pfx___inet6_check_established+0x10/0x10 [ 71.342710][ T6934] ? __pfx___inet_hash_connect+0x10/0x10 [ 71.342737][ T6934] ? inet6_ehashfn+0x25/0x3e0 [ 71.342762][ T6934] ? inet6_hash_connect+0xe7/0x180 [ 71.342786][ T6934] tcp_v6_connect+0x166f/0x2660 [ 71.342814][ T6934] ? __pfx_tcp_v6_connect+0x10/0x10 [ 71.342842][ T6934] __inet_stream_connect+0x208/0xfa0 [ 71.342879][ T6934] ? __pfx___inet_stream_connect+0x10/0x10 [ 71.342901][ T6934] ? kasan_save_track+0x14/0x30 [ 71.342920][ T6934] ? __kasan_kmalloc+0xaa/0xb0 [ 71.342933][ T6934] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 71.342951][ T6934] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 71.342972][ T6934] tcp_sendmsg_fastopen+0x3ed/0x750 [ 71.342998][ T6934] tcp_sendmsg_locked+0x276d/0x44d0 [ 71.343023][ T6934] ? __lock_acquire+0x49f/0x1a40 [ 71.343042][ T6934] ? __lock_acquire+0x49f/0x1a40 [ 71.343062][ T6934] ? reacquire_held_locks+0xce/0x1e0 [ 71.343082][ T6934] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 71.343105][ T6934] ? do_raw_spin_lock+0x128/0x260 [ 71.343135][ T6934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.343162][ T6934] ? __local_bh_enable_ip+0x9e/0x120 [ 71.343189][ T6934] tcp_sendmsg+0x2e/0x50 [ 71.343210][ T6934] ? __pfx_tcp_sendmsg+0x10/0x10 [ 71.343231][ T6934] inet6_sendmsg+0xb9/0x140 [ 71.343257][ T6934] __sys_sendto+0x36d/0x4e0 [ 71.343297][ T6934] ? __pfx___sys_sendto+0x10/0x10 [ 71.343319][ T6934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.343389][ T6934] ? ksys_write+0x1ac/0x250 [ 71.343416][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 71.343439][ T6934] __x64_sys_sendto+0xe0/0x1c0 [ 71.343451][ T6934] ? do_syscall_64+0x90/0x870 [ 71.343464][ T6934] ? lockdep_hardirqs_on+0x78/0x100 [ 71.343477][ T6934] do_syscall_64+0x115/0x870 [ 71.343489][ T6934] ? clear_bhb_loop+0x40/0x90 [ 71.343503][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.343514][ T6934] RIP: 0033:0x7fef2279e019 [ 71.343525][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.343536][ T6934] RSP: 002b:00007fef2374e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.343547][ T6934] RAX: ffffffffffffffda RBX: 00007fef22a25fa0 RCX: 00007fef2279e019 [ 71.343554][ T6934] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 71.343561][ T6934] RBP: 00007fef2374e090 R08: 0000200000000140 R09: 000000000000001c [ 71.343567][ T6934] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 71.343573][ T6934] R13: 00007fef22a26038 R14: 00007fef22a25fa0 R15: 00007ffef595f658 [ 71.343587][ T6934] [ 71.472987][ T6933] CPU: 2 UID: 0 PID: 6933 Comm: syz.3.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.473014][ T6933] Tainted: [L]=SOFTLOCKUP [ 71.473020][ T6933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.473030][ T6933] Call Trace: [ 71.473036][ T6933] [ 71.473043][ T6933] dump_stack_lvl+0x100/0x190 [ 71.473071][ T6933] should_fail_ex.cold+0x5/0xa [ 71.473095][ T6933] should_failslab+0xc2/0x120 [ 71.473119][ T6933] kmem_cache_alloc_noprof+0x91/0x6a0 [ 71.473140][ T6933] ? inet_bind2_bucket_create+0x36/0x5f0 [ 71.473171][ T6933] inet_bind2_bucket_create+0x36/0x5f0 [ 71.473199][ T6933] __inet_hash_connect+0x1527/0x2000 [ 71.473232][ T6933] ? __pfx___inet_check_established+0x10/0x10 [ 71.473259][ T6933] ? __pfx___inet_hash_connect+0x10/0x10 [ 71.473288][ T6933] ? inet_init_ehash_secret+0xd/0x60 [ 71.473310][ T6933] ? inet_hash_connect+0x9f/0x340 [ 71.473341][ T6933] tcp_v4_connect+0xeb3/0x1b40 [ 71.473372][ T6933] ? __pfx_tcp_v4_connect+0x10/0x10 [ 71.473395][ T6933] ? __lock_acquire+0x49f/0x1a40 [ 71.473421][ T6933] __inet_stream_connect+0x208/0xfa0 [ 71.473448][ T6933] ? __pfx___inet_stream_connect+0x10/0x10 [ 71.473469][ T6933] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.473499][ T6933] ? __local_bh_enable_ip+0x9e/0x120 [ 71.473530][ T6933] inet_stream_connect+0x57/0xa0 [ 71.473552][ T6933] kernel_connect+0x107/0x160 [ 71.473579][ T6933] ? __pfx_kernel_connect+0x10/0x10 [ 71.473600][ T6933] ? dfs_mount_share+0x200/0x1e20 [ 71.473672][ T6933] ? lockdep_init_map_type+0x5c/0x250 [ 71.473697][ T6933] generic_ip_connect+0x407/0x1810 [ 71.473740][ T6933] cifs_get_tcp_session+0x17a1/0x1f20 [ 71.473772][ T6933] cifs_mount_get_session+0xc9/0x460 [ 71.473792][ T6933] dfs_mount_share+0x200/0x1e20 [ 71.473818][ T6933] ? do_raw_spin_lock+0x128/0x260 [ 71.473842][ T6933] ? __pfx_dfs_mount_share+0x10/0x10 [ 71.473865][ T6933] ? __lock_acquire+0x49f/0x1a40 [ 71.473886][ T6933] ? lockdep_hardirqs_on+0x78/0x100 [ 71.473906][ T6933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.473926][ T6933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.473948][ T6933] cifs_mount+0xc4/0xdb0 [ 71.473963][ T6933] ? find_held_lock+0x2b/0x80 [ 71.473978][ T6933] ? find_nls+0x125/0x170 [ 71.474002][ T6933] ? find_nls+0x125/0x170 [ 71.474024][ T6933] ? __pfx_cifs_mount+0x10/0x10 [ 71.474040][ T6933] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.474070][ T6933] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 71.474088][ T6933] cifs_smb3_do_mount+0x2c0/0x1b20 [ 71.474108][ T6933] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 71.474185][ T6933] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 71.474213][ T6933] smb3_get_tree+0x1fd/0x440 [ 71.474240][ T6933] vfs_get_tree+0x92/0x320 [ 71.474265][ T6933] path_mount+0x7d0/0x23d0 [ 71.474300][ T6933] ? __pfx_path_mount+0x10/0x10 [ 71.474320][ T6933] ? lockdep_hardirqs_on+0x78/0x100 [ 71.474341][ T6933] ? putname+0xb1/0x110 [ 71.474360][ T6933] ? kmem_cache_free+0x127/0x6b0 [ 71.474385][ T6933] ? __x64_sys_mount+0x293/0x310 [ 71.474405][ T6933] __x64_sys_mount+0x293/0x310 [ 71.474428][ T6933] ? __pfx___x64_sys_mount+0x10/0x10 [ 71.474457][ T6933] do_syscall_64+0x115/0x870 [ 71.474477][ T6933] ? clear_bhb_loop+0x40/0x90 [ 71.474498][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.474515][ T6933] RIP: 0033:0x7fe2bc99e019 [ 71.474534][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.474551][ T6933] RSP: 002b:00007fe2bd7c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.474568][ T6933] RAX: ffffffffffffffda RBX: 00007fe2bcc25fa0 RCX: 00007fe2bc99e019 [ 71.474579][ T6933] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 71.474589][ T6933] RBP: 00007fe2bd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 71.474600][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.474610][ T6933] R13: 00007fe2bcc26038 R14: 00007fe2bcc25fa0 R15: 00007ffc4fe4c558 [ 71.474633][ T6933] [ 71.487357][ T6933] cifs_get_tcp_session: 1 callbacks suppressed [ 71.487369][ T6933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 71.607880][ T1044] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.607942][ T6933] cifs_smb3_do_mount: 1 callbacks suppressed [ 71.607954][ T6933] CIFS: VFS: cifs_mount failed w/return code = -12 [ 71.663902][ T6954] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 71.775508][ T1044] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.779150][ T1044] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.779700][ T6940] bridge0: port 3(syz_tun) entered disabled state [ 71.782320][ T1044] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.782335][ T1044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.785663][ T6928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.791636][ T1044] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.805336][ T6940] syz_tun (unregistering): left allmulticast mode [ 71.808593][ T6940] syz_tun (unregistering): left promiscuous mode [ 71.808996][ T6960] FAULT_INJECTION: forcing a failure. [ 71.808996][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 71.811453][ T6940] bridge0: port 3(syz_tun) entered disabled state [ 71.815058][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.2.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.815075][ T6960] Tainted: [L]=SOFTLOCKUP [ 71.815079][ T6960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.815085][ T6960] Call Trace: [ 71.815090][ T6960] [ 71.815094][ T6960] dump_stack_lvl+0x100/0x190 [ 71.815113][ T6960] should_fail_ex.cold+0x5/0xa [ 71.815129][ T6960] should_failslab+0xc2/0x120 [ 71.815144][ T6960] kmem_cache_alloc_noprof+0x91/0x6a0 [ 71.815158][ T6960] ? inet_bind2_bucket_create+0x36/0x5f0 [ 71.815177][ T6960] inet_bind2_bucket_create+0x36/0x5f0 [ 71.815194][ T6960] __inet_hash_connect+0x1527/0x2000 [ 71.815215][ T6960] ? __pfx___inet6_check_established+0x10/0x10 [ 71.815234][ T6960] ? __pfx___inet_hash_connect+0x10/0x10 [ 71.815250][ T6960] ? inet6_ehashfn+0x25/0x3e0 [ 71.815281][ T6960] ? inet6_hash_connect+0xe7/0x180 [ 71.815298][ T6960] tcp_v6_connect+0x166f/0x2660 [ 71.815314][ T6960] ? __pfx_tcp_v6_connect+0x10/0x10 [ 71.815330][ T6960] __inet_stream_connect+0x208/0xfa0 [ 71.815348][ T6960] ? __pfx___inet_stream_connect+0x10/0x10 [ 71.815361][ T6960] ? kasan_save_track+0x14/0x30 [ 71.815373][ T6960] ? __kasan_kmalloc+0xaa/0xb0 [ 71.815385][ T6960] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 71.815403][ T6960] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 71.815421][ T6960] tcp_sendmsg_fastopen+0x3ed/0x750 [ 71.815439][ T6960] tcp_sendmsg_locked+0x276d/0x44d0 [ 71.815456][ T6960] ? __lock_acquire+0x49f/0x1a40 [ 71.815470][ T6960] ? __lock_acquire+0x49f/0x1a40 [ 71.815484][ T6960] ? reacquire_held_locks+0xce/0x1e0 [ 71.815498][ T6960] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 71.815514][ T6960] ? do_raw_spin_lock+0x128/0x260 [ 71.815529][ T6960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.815547][ T6960] ? __local_bh_enable_ip+0x9e/0x120 [ 71.815564][ T6960] tcp_sendmsg+0x2e/0x50 [ 71.815577][ T6960] ? __pfx_tcp_sendmsg+0x10/0x10 [ 71.815591][ T6960] inet6_sendmsg+0xb9/0x140 [ 71.815603][ T6960] __sys_sendto+0x36d/0x4e0 [ 71.815617][ T6960] ? __pfx___sys_sendto+0x10/0x10 [ 71.815632][ T6960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.815651][ T6960] ? ksys_write+0x1ac/0x250 [ 71.815668][ T6960] ? __pfx_ksys_write+0x10/0x10 [ 71.815686][ T6960] __x64_sys_sendto+0xe0/0x1c0 [ 71.815697][ T6960] ? do_syscall_64+0x90/0x870 [ 71.815710][ T6960] ? lockdep_hardirqs_on+0x78/0x100 [ 71.815722][ T6960] do_syscall_64+0x115/0x870 [ 71.815746][ T6960] ? clear_bhb_loop+0x40/0x90 [ 71.815760][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.815771][ T6960] RIP: 0033:0x7f6bc4d9e019 [ 71.815781][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.815792][ T6960] RSP: 002b:00007f6bc5cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.815803][ T6960] RAX: ffffffffffffffda RBX: 00007f6bc5025fa0 RCX: 00007f6bc4d9e019 [ 71.815810][ T6960] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 71.815816][ T6960] RBP: 00007f6bc5cb3090 R08: 0000200000000140 R09: 000000000000001c [ 71.815822][ T6960] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 71.815828][ T6960] R13: 00007f6bc5026038 R14: 00007f6bc5025fa0 R15: 00007ffd79509d38 [ 71.815841][ T6960] [ 71.991695][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 72.012455][ T1044] usb 5-1: USB disconnect, device number 3 [ 72.039344][ T6979] CIFS: Attempting to mount //127.0.0.1/share [ 72.042895][ T6979] FAULT_INJECTION: forcing a failure. [ 72.042895][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 72.048191][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.3.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.048237][ T6979] Tainted: [L]=SOFTLOCKUP [ 72.048243][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.048253][ T6979] Call Trace: [ 72.048260][ T6979] [ 72.048267][ T6979] dump_stack_lvl+0x100/0x190 [ 72.048294][ T6979] should_fail_ex.cold+0x5/0xa [ 72.048318][ T6979] should_failslab+0xc2/0x120 [ 72.048342][ T6979] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.048361][ T6979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.048387][ T6979] ? __inet_hash_connect+0x6da/0x2000 [ 72.048416][ T6979] __inet_hash_connect+0x6da/0x2000 [ 72.048449][ T6979] ? __pfx___inet_check_established+0x10/0x10 [ 72.048474][ T6979] ? __pfx___inet_hash_connect+0x10/0x10 [ 72.048503][ T6979] ? inet_init_ehash_secret+0xd/0x60 [ 72.048523][ T6979] ? inet_hash_connect+0x9f/0x340 [ 72.048549][ T6979] tcp_v4_connect+0xeb3/0x1b40 [ 72.048579][ T6979] ? __pfx_tcp_v4_connect+0x10/0x10 [ 72.048601][ T6979] ? __lock_acquire+0x49f/0x1a40 [ 72.048626][ T6979] __inet_stream_connect+0x208/0xfa0 [ 72.048651][ T6979] ? __pfx___inet_stream_connect+0x10/0x10 [ 72.048672][ T6979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.048701][ T6979] ? __local_bh_enable_ip+0x9e/0x120 [ 72.048727][ T6979] inet_stream_connect+0x57/0xa0 [ 72.048749][ T6979] kernel_connect+0x107/0x160 [ 72.048772][ T6979] ? __pfx_kernel_connect+0x10/0x10 [ 72.048793][ T6979] ? dfs_mount_share+0x200/0x1e20 [ 72.048841][ T6979] ? lockdep_init_map_type+0x5c/0x250 [ 72.048866][ T6979] generic_ip_connect+0x407/0x1810 [ 72.048895][ T6979] cifs_get_tcp_session+0x17a1/0x1f20 [ 72.048926][ T6979] cifs_mount_get_session+0xc9/0x460 [ 72.048947][ T6979] dfs_mount_share+0x200/0x1e20 [ 72.048977][ T6979] ? do_raw_spin_lock+0x128/0x260 [ 72.049000][ T6979] ? __pfx_dfs_mount_share+0x10/0x10 [ 72.049022][ T6979] ? __lock_acquire+0x49f/0x1a40 [ 72.049042][ T6979] ? lockdep_hardirqs_on+0x78/0x100 [ 72.049063][ T6979] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.049083][ T6979] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.049106][ T6979] cifs_mount+0xc4/0xdb0 [ 72.049121][ T6979] ? find_held_lock+0x2b/0x80 [ 72.049134][ T6979] ? find_nls+0x125/0x170 [ 72.049156][ T6979] ? find_nls+0x125/0x170 [ 72.049178][ T6979] ? __pfx_cifs_mount+0x10/0x10 [ 72.049194][ T6979] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.049224][ T6979] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 72.049241][ T6979] cifs_smb3_do_mount+0x2c0/0x1b20 [ 72.049260][ T6979] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 72.049291][ T6979] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 72.049318][ T6979] smb3_get_tree+0x1fd/0x440 [ 72.049344][ T6979] vfs_get_tree+0x92/0x320 [ 72.049368][ T6979] path_mount+0x7d0/0x23d0 [ 72.049394][ T6979] ? __pfx_path_mount+0x10/0x10 [ 72.049413][ T6979] ? lockdep_hardirqs_on+0x78/0x100 [ 72.049435][ T6979] ? putname+0xb1/0x110 [ 72.049454][ T6979] ? kmem_cache_free+0x127/0x6b0 [ 72.049478][ T6979] ? __x64_sys_mount+0x293/0x310 [ 72.049496][ T6979] __x64_sys_mount+0x293/0x310 [ 72.049517][ T6979] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.049546][ T6979] do_syscall_64+0x115/0x870 [ 72.049565][ T6979] ? clear_bhb_loop+0x40/0x90 [ 72.049587][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.049604][ T6979] RIP: 0033:0x7fe2bc99e019 [ 72.049618][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.049633][ T6979] RSP: 002b:00007fe2bd7c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.049651][ T6979] RAX: ffffffffffffffda RBX: 00007fe2bcc25fa0 RCX: 00007fe2bc99e019 [ 72.049662][ T6979] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 72.049672][ T6979] RBP: 00007fe2bd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 72.049683][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.049692][ T6979] R13: 00007fe2bcc26038 R14: 00007fe2bcc25fa0 R15: 00007ffc4fe4c558 [ 72.049716][ T6979] [ 72.057526][ T6979] CIFS: VFS: Error connecting to socket. Aborting operation. [ 72.185066][ T6979] CIFS: VFS: cifs_mount failed w/return code = -12 [ 72.254377][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.318052][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.320'. [ 72.351622][ T42] kauditd_printk_skb: 346 callbacks suppressed [ 72.351636][ T42] audit: type=1800 audit(1785550085.701:1048): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118062 res=0 errno=0 [ 72.355546][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.370710][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.377956][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.382711][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.387610][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.400709][ T42] audit: type=1800 audit(1785550085.721:1049): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118073 res=0 errno=0 [ 72.416971][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.420137][ T42] audit: type=1800 audit(1785550085.761:1050): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 72.429663][ T42] audit: type=1800 audit(1785550085.761:1051): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118092 res=0 errno=0 [ 72.439158][ T42] audit: type=1800 audit(1785550085.791:1052): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 72.448285][ T42] audit: type=1800 audit(1785550085.801:1053): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118103 res=0 errno=0 [ 72.474118][ T42] audit: type=1400 audit(1785550085.821:1054): avc: denied { name_connect } for pid=7007 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.479497][ T7005] kvm: user requested TSC rate below hardware speed [ 72.485399][ T42] audit: type=1800 audit(1785550085.831:1055): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118114 res=0 errno=0 [ 72.491830][ T42] audit: type=1800 audit(1785550085.841:1056): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118126 res=0 errno=0 [ 72.496756][ T42] audit: type=1800 audit(1785550085.841:1057): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=118138 res=0 errno=0 [ 72.537460][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.595034][ T7013] __nla_validate_parse: 1 callbacks suppressed [ 72.595043][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 72.635601][ T7023] CIFS: Attempting to mount //127.0.0.1/share [ 72.639316][ T7023] FAULT_INJECTION: forcing a failure. [ 72.639316][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 72.643401][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.327 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.643418][ T7023] Tainted: [L]=SOFTLOCKUP [ 72.643422][ T7023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.643428][ T7023] Call Trace: [ 72.643433][ T7023] [ 72.643437][ T7023] dump_stack_lvl+0x100/0x190 [ 72.643456][ T7023] should_fail_ex.cold+0x5/0xa [ 72.643471][ T7023] should_failslab+0xc2/0x120 [ 72.643486][ T7023] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.643500][ T7023] ? inet_bind2_bucket_create+0x36/0x5f0 [ 72.643519][ T7023] inet_bind2_bucket_create+0x36/0x5f0 [ 72.643536][ T7023] __inet_hash_connect+0x1527/0x2000 [ 72.643556][ T7023] ? __pfx___inet_check_established+0x10/0x10 [ 72.643577][ T7023] ? __pfx___inet_hash_connect+0x10/0x10 [ 72.643595][ T7023] ? inet_init_ehash_secret+0xd/0x60 [ 72.643609][ T7023] ? inet_hash_connect+0x9f/0x340 [ 72.643625][ T7023] tcp_v4_connect+0xeb3/0x1b40 [ 72.643644][ T7023] ? __pfx_tcp_v4_connect+0x10/0x10 [ 72.643658][ T7023] ? __lock_acquire+0x49f/0x1a40 [ 72.643674][ T7023] __inet_stream_connect+0x208/0xfa0 [ 72.643691][ T7023] ? __pfx___inet_stream_connect+0x10/0x10 [ 72.643704][ T7023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.643723][ T7023] ? __local_bh_enable_ip+0x9e/0x120 [ 72.643740][ T7023] inet_stream_connect+0x57/0xa0 [ 72.643754][ T7023] kernel_connect+0x107/0x160 [ 72.643770][ T7023] ? __pfx_kernel_connect+0x10/0x10 [ 72.643783][ T7023] ? dfs_mount_share+0x200/0x1e20 [ 72.643803][ T7023] ? lockdep_init_map_type+0x5c/0x250 [ 72.643818][ T7023] generic_ip_connect+0x407/0x1810 [ 72.643838][ T7023] cifs_get_tcp_session+0x17a1/0x1f20 [ 72.643858][ T7023] cifs_mount_get_session+0xc9/0x460 [ 72.643871][ T7023] dfs_mount_share+0x200/0x1e20 [ 72.643884][ T7023] ? find_held_lock+0x2b/0x80 [ 72.643894][ T7023] ? pcpu_alloc+0x23b/0x350 [ 72.643922][ T7023] ? __pfx_dfs_mount_share+0x10/0x10 [ 72.643949][ T7023] ? __lock_acquire+0x49f/0x1a40 [ 72.643963][ T7023] ? lockdep_hardirqs_on+0x78/0x100 [ 72.643977][ T7023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.643989][ T7023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.644003][ T7023] cifs_mount+0xc4/0xdb0 [ 72.644012][ T7023] ? find_held_lock+0x2b/0x80 [ 72.644021][ T7023] ? find_nls+0x125/0x170 [ 72.644035][ T7023] ? find_nls+0x125/0x170 [ 72.644049][ T7023] ? __pfx_cifs_mount+0x10/0x10 [ 72.644058][ T7023] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.644077][ T7023] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 72.644088][ T7023] cifs_smb3_do_mount+0x2c0/0x1b20 [ 72.644100][ T7023] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 72.644120][ T7023] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 72.644136][ T7023] smb3_get_tree+0x1fd/0x440 [ 72.644153][ T7023] vfs_get_tree+0x92/0x320 [ 72.644169][ T7023] path_mount+0x7d0/0x23d0 [ 72.644186][ T7023] ? __pfx_path_mount+0x10/0x10 [ 72.644213][ T7023] ? lockdep_hardirqs_on+0x78/0x100 [ 72.644229][ T7023] ? putname+0xb1/0x110 [ 72.644241][ T7023] ? kmem_cache_free+0x127/0x6b0 [ 72.644256][ T7023] ? __x64_sys_mount+0x293/0x310 [ 72.644268][ T7023] __x64_sys_mount+0x293/0x310 [ 72.644283][ T7023] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.644301][ T7023] do_syscall_64+0x115/0x870 [ 72.644313][ T7023] ? clear_bhb_loop+0x40/0x90 [ 72.644327][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.644338][ T7023] RIP: 0033:0x7fe2bc99e019 [ 72.644348][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.644358][ T7023] RSP: 002b:00007fe2bd7c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.644369][ T7023] RAX: ffffffffffffffda RBX: 00007fe2bcc25fa0 RCX: 00007fe2bc99e019 [ 72.644376][ T7023] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 72.644383][ T7023] RBP: 00007fe2bd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 72.644389][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.644395][ T7023] R13: 00007fe2bcc26038 R14: 00007fe2bcc25fa0 R15: 00007ffc4fe4c558 [ 72.644408][ T7023] [ 72.645398][ T7023] CIFS: VFS: Error connecting to socket. Aborting operation. [ 72.825463][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.827664][ T7023] CIFS: VFS: cifs_mount failed w/return code = -12 [ 72.828710][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.837171][ T6996] bridge_slave_0: entered allmulticast mode [ 72.840141][ T6996] bridge_slave_0: entered promiscuous mode [ 72.864227][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.878040][ T7033] binder: 7032:7033 unknown command 0 [ 72.878066][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.880391][ T7033] binder: 7032:7033 ioctl c0306201 200000000040 returned -22 [ 72.882818][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.888332][ T6996] bridge_slave_1: entered allmulticast mode [ 72.891124][ T6996] bridge_slave_1: entered promiscuous mode [ 72.918842][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.925698][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.967170][ T6996] team0: Port device team_slave_0 added [ 72.978827][ T6996] team0: Port device team_slave_1 added [ 73.005709][ T7041] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 73.024801][ T7043] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 73.028690][ T7043] udc usbip-vudc.0: failed to start g1: -19 [ 73.029630][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.033891][ T7043] UDC core: g1: couldn't find an available UDC or it's busy [ 73.034667][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.046019][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.057330][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.062250][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.077458][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.135331][ T7052] CIFS: Attempting to mount //127.0.0.1/share [ 73.141463][ T7052] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.144753][ T7052] CIFS: VFS: cifs_mount failed w/return code = -105 [ 73.164562][ T6996] hsr_slave_0: entered promiscuous mode [ 73.167962][ T6996] hsr_slave_1: entered promiscuous mode [ 73.171005][ T6996] debugfs: 'hsr0' already exists in 'hsr' [ 73.173070][ T6996] Cannot create hsr debugfs directory [ 73.266706][ T13] bridge_slave_1: left allmulticast mode [ 73.269952][ T13] bridge_slave_1: left promiscuous mode [ 73.273236][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.293199][ T7064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7064 comm=syz.3.340 [ 73.293897][ T13] bridge_slave_0: left allmulticast mode [ 73.299001][ T7064] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 73.302163][ T13] bridge_slave_0: left promiscuous mode [ 73.303968][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.416468][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.421342][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.425850][ T13] bond0 (unregistering): Released all slaves [ 73.431446][ T13] bond1 (unregistering): Released all slaves [ 73.480827][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.510801][ T7075] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 73.514288][ T7075] udc usbip-vudc.0: failed to start g1: -19 [ 73.528686][ T7075] UDC core: g1: couldn't find an available UDC or it's busy [ 73.631076][ T7086] CIFS: Attempting to mount //127.0.0.1/share [ 73.633978][ T7086] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.637049][ T7086] CIFS: VFS: cifs_mount failed w/return code = -111 [ 73.739920][ T7100] ubi16: attaching mtd0 [ 73.747704][ T7100] ubi16: scanning is finished [ 73.750162][ T6996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.751938][ T7100] ubi16: empty MTD device detected [ 73.756689][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.774234][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.777158][ T6996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.781702][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.784350][ T6996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.792033][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.811377][ T7104] binder: 7099:7104 ioctl 4018620d 0 returned -22 [ 73.814873][ T6996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.818641][ T7104] binder_alloc: binder_alloc_mmap_handler: 7099 200000fff000-200001000000 already mapped failed -16 [ 73.826542][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.846571][ T7112] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.351'. [ 73.850331][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 73.886442][ T7112] gadgetfs: bound to dummy_udc driver [ 73.929243][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.953550][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.971156][ T13] hsr_slave_0: left promiscuous mode [ 73.980004][ T13] hsr_slave_1: left promiscuous mode [ 73.982265][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.985842][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.992801][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.995340][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.007246][ T13] veth1_vlan: left promiscuous mode [ 74.009791][ T13] veth0_vlan: left promiscuous mode [ 74.058586][ T7100] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.063682][ T7100] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.067050][ T7100] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.069345][ T7100] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 74.071676][ T7100] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.073846][ T7100] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.076545][ T7100] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1467874365 [ 74.079840][ T7100] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.084056][ T7122] ubi16: background thread "ubi_bgt16d" started, PID 7122 [ 74.091821][ T7104] infiniband syz1: set down [ 74.096761][ T7104] infiniband syz1: added ipvlan0 [ 74.121744][ T7104] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.127430][ T7104] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.133237][ T7104] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.146383][ T846] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 74.153265][ C3] gadgetfs: connected [ 74.157076][ T846] gadgetfs: disconnected [ 74.179545][ T7104] RDS/IB: syz1: added [ 74.181754][ T7104] smc: adding ib device syz1 with port count 1 [ 74.186913][ T7104] smc: ib device syz1 port 1 has no pnetid [ 74.218332][ T13] team0 (unregistering): Port device team_slave_1 removed [ 74.228515][ T13] team0 (unregistering): Port device team_slave_0 removed [ 74.336540][ C3] gadgetfs: connected [ 74.342071][ T846] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 74.349251][ T846] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 74.357122][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.366792][ C3] gadgetfs: configuration #1 [ 74.372062][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.374564][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.383543][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.389707][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.392464][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.415901][ T5094] Bluetooth: hci2: command tx timeout [ 74.612348][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.625093][ T7102] gadgetfs: suspended from state 3 [ 74.628011][ T846] usb 5-1: can't set config #1, error -71 [ 74.631016][ T7102] gadgetfs: disconnected [ 74.636479][ T846] usb 5-1: USB disconnect, device number 4 [ 74.722684][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.925640][ T6996] veth0_vlan: entered promiscuous mode [ 74.938067][ T6996] veth1_vlan: entered promiscuous mode [ 74.958783][ T6996] veth0_macvtap: entered promiscuous mode [ 74.963383][ T6996] veth1_macvtap: entered promiscuous mode [ 74.980569][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.991716][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.056721][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.070049][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.097962][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.103353][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.135876][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.135979][ T5094] Bluetooth: hci4: command 0x1003 tx timeout [ 75.151878][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.154498][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.157711][ T7161] CIFS: Attempting to mount //127.0.0.1/share [ 75.159321][ T7161] CIFS: VFS: Error connecting to socket. Aborting operation. [ 75.163476][ T7161] CIFS: VFS: cifs_mount failed w/return code = -111 [ 75.224348][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.229417][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.343078][ T7183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.361'. [ 75.374319][ T7183] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 75.439087][ T7193] CIFS: Attempting to mount //127.0.0.1/share [ 75.442074][ T7193] CIFS: VFS: Error connecting to socket. Aborting operation. [ 75.444597][ T7193] CIFS: VFS: cifs_mount failed w/return code = -111 [ 75.448176][ T7193] FAULT_INJECTION: forcing a failure. [ 75.448176][ T7193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.452991][ T7193] CPU: 3 UID: 0 PID: 7193 Comm: syz.2.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.453009][ T7193] Tainted: [L]=SOFTLOCKUP [ 75.453013][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.453020][ T7193] Call Trace: [ 75.453031][ T7193] [ 75.453036][ T7193] dump_stack_lvl+0x100/0x190 [ 75.453103][ T7193] should_fail_ex.cold+0x5/0xa [ 75.453124][ T7193] _copy_to_user+0x32/0xd0 [ 75.453164][ T7193] simple_read_from_buffer+0xcb/0x170 [ 75.453194][ T7193] proc_fail_nth_read+0x1af/0x230 [ 75.453218][ T7193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.453235][ T7193] ? rw_verify_area+0xce/0x6d0 [ 75.453250][ T7193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.453267][ T7193] vfs_read+0x1e4/0xb40 [ 75.453285][ T7193] ? __pfx_vfs_read+0x10/0x10 [ 75.453300][ T7193] ? __fget_files+0x215/0x3d0 [ 75.453315][ T7193] ? __fget_files+0x21f/0x3d0 [ 75.453329][ T7193] ksys_read+0x12a/0x250 [ 75.453344][ T7193] ? __pfx_ksys_read+0x10/0x10 [ 75.453364][ T7193] do_syscall_64+0x115/0x870 [ 75.453410][ T7193] ? clear_bhb_loop+0x40/0x90 [ 75.453424][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.453435][ T7193] RIP: 0033:0x7f6bc4d5e84e [ 75.453445][ T7193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.453456][ T7193] RSP: 002b:00007f6bc5cb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.453472][ T7193] RAX: ffffffffffffffda RBX: 00007f6bc5cb36c0 RCX: 00007f6bc4d5e84e [ 75.453479][ T7193] RDX: 000000000000000f RSI: 00007f6bc5cb30a0 RDI: 0000000000000003 [ 75.453485][ T7193] RBP: 00007f6bc5cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 75.453491][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.453497][ T7193] R13: 00007f6bc5026038 R14: 00007f6bc5025fa0 R15: 00007ffd79509d38 [ 75.453511][ T7193] [ 75.813682][ T7218] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 75.816869][ T7218] udc usbip-vudc.0: failed to start g1: -19 [ 75.822820][ T7218] UDC core: g1: couldn't find an available UDC or it's busy [ 75.825571][ T7217] CacheFiles: Empty directory specified [ 75.868662][ T7221] bridge0: port 3(syz_tun) entered blocking state [ 75.871080][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 75.871520][ T7221] bridge0: port 3(syz_tun) entered disabled state [ 75.877485][ T7221] syz_tun: entered allmulticast mode [ 75.884934][ T7221] syz_tun: entered promiscuous mode [ 75.887759][ T7221] bridge0: port 3(syz_tun) entered blocking state [ 75.890393][ T7221] bridge0: port 3(syz_tun) entered forwarding state [ 75.903466][ T7222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.954210][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 75.964729][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 76.155362][ T7243] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 76.158677][ T7243] ref_ctr increment failed for inode: 0x20e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e86a640 [ 76.170204][ T7243] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 76.175002][ T7243] ref_ctr decrement failed for inode: 0x20e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e86a640 [ 76.178835][ T7243] uprobe: syz.0.383:7243 failed to unregister, leaking uprobe [ 76.244995][ T7258] No control pipe specified [ 76.266276][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 76.335348][ T7267] ucma_write: process 270 (syz.0.390) changed security contexts after opening file descriptor, this is not allowed. [ 76.495901][ T64] Bluetooth: hci2: command tx timeout [ 76.773067][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.798235][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 76.962760][ T7297] overlayfs: failed lookup in lower (newroot/108, name='file1', err=-40): overlapping layers [ 76.968625][ T7297] overlayfs: failed lookup in lower (newroot/108, name='file1', err=-40): overlapping layers [ 77.371686][ T42] kauditd_printk_skb: 184 callbacks suppressed [ 77.371707][ T42] audit: type=1400 audit(1785550090.701:1242): avc: denied { append } for pid=7310 comm="syz.4.408" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.395073][ T42] audit: type=1400 audit(1785550090.741:1243): avc: denied { read } for pid=7310 comm="syz.4.408" path="socket:[19628]" dev="sockfs" ino=19628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.505854][ T42] audit: type=1400 audit(1785550090.851:1244): avc: denied { setopt } for pid=7310 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.583571][ T42] audit: type=1800 audit(1785550090.931:1245): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 77.599985][ T42] audit: type=1800 audit(1785550090.951:1246): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 77.688968][ T7317] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 77.693368][ T7317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.731410][ T7316] __nla_validate_parse: 2 callbacks suppressed [ 77.731422][ T7316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 77.774490][ T42] audit: type=1800 audit(1785550091.111:1247): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 77.792659][ T42] audit: type=1800 audit(1785550091.141:1248): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 77.811168][ T42] audit: type=1400 audit(1785550091.151:1249): avc: denied { create } for pid=7324 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 77.819687][ T42] audit: type=1400 audit(1785550091.171:1250): avc: denied { sys_admin } for pid=7324 comm="syz.4.412" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 77.832109][ T7325] capability: warning: `syz.4.412' uses 32-bit capabilities (legacy support in use) [ 77.878604][ T42] audit: type=1800 audit(1785550091.231:1251): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 78.039036][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.166723][ T7338] wg0: entered allmulticast mode [ 78.188202][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.192057][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 78.202892][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 78.215836][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.241294][ T9] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 78.271882][ T7342] openvswitch: netlink: Key type 30 is not supported [ 78.275612][ T9] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 78.576214][ T64] Bluetooth: hci2: command tx timeout [ 78.631420][ T7323] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 78.637277][ T7323] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 78.648632][ T7323] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 78.672687][ T7349] kernel read not supported for file /policy (pid: 7349 comm: syz.2.421) [ 78.681026][ T7348] block nbd2: shutting down sockets [ 78.840367][ T7323] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 78.856589][ T24] usb 5-1: USB disconnect, device number 5 [ 78.869943][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 78.873453][ T24] spcp8x5 5-1:1.0: device disconnected [ 78.931716][ T7360] SELinux: failed to load policy [ 78.932269][ T7305] Set syz1 is full, maxelem 65536 reached [ 79.111888][ T7370] binder: BINDER_SET_CONTEXT_MGR already set [ 79.113999][ T7370] binder: 7369:7370 ioctl 4018620d 200000004a80 returned -16 [ 79.117123][ T7370] binder: 7369:7370 ioctl c0306201 200000004a40 returned -22 [ 79.464509][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 79.576814][ T7404] binder: 7403:7404 ioctl c0306201 0 returned -14 [ 79.651701][ T7408] loop5: detected capacity change from 0 to 15 [ 79.655236][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 79.660988][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 79.662110][ T7408] loop5: p1 < > p3 p4 [ 79.665569][ T7409] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 79.669702][ T7409] UDF-fs: Scanning with blocksize 512 failed [ 79.680245][ T7408] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 79.687564][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 79.699131][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 79.702925][ T7409] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 79.705215][ T7409] UDF-fs: Scanning with blocksize 1024 failed [ 79.711535][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 79.726803][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 79.735953][ T7409] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 79.745807][ T7409] UDF-fs: Scanning with blocksize 2048 failed [ 79.751956][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 79.765994][ T7409] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 79.769052][ T7409] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 79.773423][ T7409] UDF-fs: Scanning with blocksize 4096 failed [ 79.775269][ T7409] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 80.115917][ T5734] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 80.156144][ T7432] netlink: 'syz.3.449': attribute type 4 has an invalid length. [ 80.168399][ T7432] netlink: 'syz.3.449': attribute type 4 has an invalid length. [ 80.288573][ T5734] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 80.292081][ T5734] usb 7-1: config 0 has no interface number 0 [ 80.294686][ T5734] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.299212][ T5734] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 80.303241][ T5734] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 58744, setting to 64 [ 80.306720][ T5734] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.311823][ T5734] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice= 8.6a [ 80.314894][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 80.318114][ T5734] usb 7-1: Manufacturer: syz [ 80.323180][ T5734] usb 7-1: config 0 descriptor?? [ 80.325291][ T7425] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.330041][ T5734] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 80.537852][ T7425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.446'. [ 80.542523][ T7425] syzkaller0: entered promiscuous mode [ 80.544741][ T7425] syzkaller0: entered allmulticast mode [ 80.552864][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 80.569539][ T7425] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 80.574625][ T7425] bond2 (unregistering): Released all slaves [ 80.665898][ T64] Bluetooth: hci2: command tx timeout [ 81.462812][ T61] cfg80211: failed to load regulatory.db [ 82.666329][ T42] kauditd_printk_skb: 91 callbacks suppressed [ 82.666343][ T42] audit: type=1400 audit(1785550096.021:1343): avc: denied { read write } for pid=7446 comm="syz.4.452" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 82.666991][ T7449] size and base must be multiples of 4 kiB [ 82.667027][ T7448] size and base must be multiples of 4 kiB [ 82.667051][ T7448] CPU: 3 UID: 0 PID: 7448 Comm: syz.4.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.667074][ T7448] Tainted: [L]=SOFTLOCKUP [ 82.667080][ T7448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.667089][ T7448] Call Trace: [ 82.667095][ T7448] [ 82.667100][ T7448] dump_stack_lvl+0x100/0x190 [ 82.667129][ T7448] mtrr_add.cold+0x74/0x87 [ 82.667148][ T7448] mtrr_ioctl+0x25a/0xcf0 [ 82.667172][ T7448] ? __pfx_mtrr_ioctl+0x10/0x10 [ 82.667207][ T7448] ? __pfx_mtrr_ioctl+0x10/0x10 [ 82.667228][ T7448] proc_reg_unlocked_ioctl+0x229/0x320 [ 82.667249][ T7448] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 82.667271][ T7448] __x64_sys_ioctl+0x18e/0x210 [ 82.667298][ T7448] do_syscall_64+0x115/0x870 [ 82.667319][ T7448] ? clear_bhb_loop+0x40/0x90 [ 82.667340][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.667357][ T7448] RIP: 0033:0x7f137559e019 [ 82.667371][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.667387][ T7448] RSP: 002b:00007f1376430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.667403][ T7448] RAX: ffffffffffffffda RBX: 00007f1375826090 RCX: 00007f137559e019 [ 82.667414][ T7448] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 000000000000000e [ 82.667424][ T7448] RBP: 00007f137563500c R08: 0000000000000000 R09: 0000000000000000 [ 82.667434][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.667444][ T7448] R13: 00007f1375826128 R14: 00007f1375826090 R15: 00007fff3210e878 [ 82.667467][ T7448] [ 82.668324][ T42] audit: type=1400 audit(1785550096.021:1344): avc: denied { open } for pid=7446 comm="syz.4.452" path="/27/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 82.675006][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.4.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.675024][ T7449] Tainted: [L]=SOFTLOCKUP [ 82.675028][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.675035][ T7449] Call Trace: [ 82.675039][ T7449] [ 82.675044][ T7449] dump_stack_lvl+0x100/0x190 [ 82.675064][ T7449] mtrr_add.cold+0x74/0x87 [ 82.675076][ T7449] mtrr_ioctl+0x25a/0xcf0 [ 82.675092][ T7449] ? __pfx_mtrr_ioctl+0x10/0x10 [ 82.675114][ T7449] ? __pfx_mtrr_ioctl+0x10/0x10 [ 82.675128][ T7449] proc_reg_unlocked_ioctl+0x229/0x320 [ 82.675142][ T7449] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 82.675155][ T7449] __x64_sys_ioctl+0x18e/0x210 [ 82.675173][ T7449] do_syscall_64+0x115/0x870 [ 82.675187][ T7449] ? clear_bhb_loop+0x40/0x90 [ 82.675200][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.675211][ T7449] RIP: 0033:0x7f137559e019 [ 82.675222][ T7449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.675233][ T7449] RSP: 002b:00007f137640f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.675243][ T7449] RAX: ffffffffffffffda RBX: 00007f1375826180 RCX: 00007f137559e019 [ 82.675250][ T7449] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 000000000000000e [ 82.675256][ T7449] RBP: 00007f137563500c R08: 0000000000000000 R09: 0000000000000000 [ 82.675262][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.675268][ T7449] R13: 00007f1375826218 R14: 00007f1375826180 R15: 00007fff3210e878 [ 82.675282][ T7449] [ 82.716728][ T7417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.717866][ T42] audit: type=1400 audit(1785550096.021:1345): avc: denied { ioctl } for pid=7446 comm="syz.4.452" path="/27/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 82.791703][ T7454] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 82.795869][ T42] audit: type=1400 audit(1785550096.021:1346): avc: denied { ioctl } for pid=7446 comm="syz.4.452" path="/27/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 82.813821][ T42] audit: type=1800 audit(1785550096.121:1347): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 82.822415][ T42] audit: type=1800 audit(1785550096.141:1348): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 82.849468][ T42] audit: type=1800 audit(1785550096.201:1349): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 82.857859][ T42] audit: type=1800 audit(1785550096.211:1350): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 82.871632][ T42] audit: type=1400 audit(1785550096.211:1351): avc: denied { sqpoll } for pid=7463 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.891476][ T42] audit: type=1800 audit(1785550096.241:1352): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 82.900975][ T7470] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 83.141442][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 83.185147][ T7497] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 83.209355][ T7497] team0: Port device dummy0 added [ 83.274723][ T7500] openvswitch: netlink: IP tunnel dst address not specified [ 83.302228][ T7504] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 83.455992][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.457666][ T7511] IPVS: persistence engine module ip_vs_pe_s not found [ 83.516478][ T7513] netlink: 'syz.3.471': attribute type 21 has an invalid length. [ 83.606596][ T60] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 83.610991][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.614907][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.619384][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.623060][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.626736][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.630995][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.634774][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.638495][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.642761][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.646706][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.650458][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.654878][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.658703][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.662324][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.666772][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.670514][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.674309][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.678857][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.682679][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.686416][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.690670][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.694314][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.700238][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.704611][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.709352][ T60] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.713028][ T60] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.716454][ T60] usb 5-1: Product: syz [ 83.718136][ T60] usb 5-1: Manufacturer: syz [ 83.720054][ T60] usb 5-1: SerialNumber: syz [ 83.724724][ T60] usb 5-1: config 0 descriptor?? [ 83.731398][ T60] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 83.743024][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-1) [ 83.747521][ T61] usb 7-1: USB disconnect, device number 4 [ 83.753341][ T61] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 83.854796][ T7515] EXT4-fs (nbd2): unable to read superblock [ 83.861203][ T7515] netlink: 'syz.2.472': attribute type 10 has an invalid length. [ 83.866840][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.870739][ T7515] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.011380][ T5734] usb 5-1: USB disconnect, device number 6 [ 84.019997][ T5734] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 84.540440][ T7534] warning: `syz.0.478' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.550000][ T7534] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 84.885881][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.046021][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 85.050566][ T9] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 150, changing to 11 [ 85.054077][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 85.058339][ T9] usb 7-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.40 [ 85.061121][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.063497][ T9] usb 7-1: Product: С [ 85.064711][ T9] usb 7-1: Manufacturer: â°‰ [ 85.066352][ T9] usb 7-1: SerialNumber: syz [ 85.279145][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.282406][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.294850][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 85.296894][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 85.307102][ T7562] netlink: 596 bytes leftover after parsing attributes in process `syz.0.485'. [ 85.309371][ T9] usb 7-1: USB disconnect, device number 5 [ 85.313827][ T7562] bpf: Bad value for 'uid' [ 85.814291][ T7570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.486'. [ 85.818502][ T7570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.486'. [ 86.056222][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 86.207660][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 86.214221][ T9] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 86.220289][ T9] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 86.223239][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.227655][ T9] usb 7-1: Product: syz [ 86.229562][ T9] usb 7-1: Manufacturer: syz [ 86.231509][ T9] usb 7-1: SerialNumber: syz [ 86.465369][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.468873][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 86.520298][ T9] usb 7-1: USB disconnect, device number 6 [ 86.560991][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.596593][ T7599] netlink: 'syz.4.493': attribute type 12 has an invalid length. [ 86.660082][ T59] wlan1: Trigger new scan to find an IBSS to join [ 87.043531][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 87.200575][ T34] IPVS: starting estimator thread 0... [ 87.305932][ T7657] IPVS: using max 45 ests per chain, 108000 per kthread [ 87.472815][ T7678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.519'. [ 87.569373][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 87.572213][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 87.687743][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 87.687761][ T42] audit: type=1400 audit(1785550101.041:1469): avc: denied { bind } for pid=7691 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.705491][ T42] audit: type=1400 audit(1785550101.041:1470): avc: denied { name_bind } for pid=7691 comm="syz.0.524" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.715303][ T42] audit: type=1400 audit(1785550101.041:1471): avc: denied { node_bind } for pid=7691 comm="syz.0.524" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.722039][ T42] audit: type=1400 audit(1785550101.051:1472): avc: denied { create } for pid=7691 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.814644][ T42] audit: type=1800 audit(1785550101.161:1473): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 87.850737][ T42] audit: type=1800 audit(1785550101.201:1474): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 87.976614][ T7698] SELinux: failed to load policy [ 88.009552][ T42] audit: type=1800 audit(1785550101.361:1475): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 88.132496][ T42] audit: type=1800 audit(1785550101.481:1476): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 88.146676][ T42] audit: type=1800 audit(1785550101.501:1477): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.528" name="new_array" dev="sysfs" ino=65143 res=0 errno=0 [ 88.164785][ T42] audit: type=1800 audit(1785550101.511:1478): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147508 res=0 errno=0 [ 88.173943][ T7705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.487682][ T7738] program syz.2.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.634742][ T7756] netlink: 'syz.0.548': attribute type 322 has an invalid length. [ 88.725911][ T7772] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.733009][ T7772] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.737655][ T7772] use the actual size instead. [ 88.864304][ T7782] vxcan0: tx address claim with different name [ 89.058368][ T7796] vivid-001: ================= START STATUS ================= [ 89.060972][ T7796] vivid-001: RDS Tx I/O Mode: Controls [ 89.064438][ T7796] vivid-001: RDS Program ID: 32904 [ 89.068076][ T7796] vivid-001: RDS Program Type: 3 [ 89.069927][ T7796] vivid-001: RDS PS Name: VIVID-TX [ 89.071586][ T7796] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 89.074817][ T7796] vivid-001: RDS Stereo: true [ 89.078258][ T7796] vivid-001: RDS Artificial Head: false [ 89.080079][ T7796] vivid-001: RDS Compressed: false [ 89.081749][ T7796] vivid-001: RDS Dynamic PTY: false [ 89.083397][ T7796] vivid-001: RDS Traffic Announcement: false [ 89.085290][ T7796] vivid-001: RDS Traffic Program: true [ 89.087301][ T7796] vivid-001: RDS Music: true [ 89.088799][ T7796] vivid-001: ================== END STATUS ================== [ 89.200207][ T7808] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 89.206529][ T7808] CPU: 2 UID: 0 PID: 7808 Comm: syz.3.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.206556][ T7808] Tainted: [L]=SOFTLOCKUP [ 89.206564][ T7808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.206573][ T7808] Call Trace: [ 89.206579][ T7808] [ 89.206585][ T7808] dump_stack_lvl+0x100/0x190 [ 89.206686][ T7808] sysfs_warn_dup.cold+0x1c/0x28 [ 89.206720][ T7808] sysfs_create_dir_ns+0x24b/0x2b0 [ 89.206780][ T7808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 89.206806][ T7808] ? find_held_lock+0x2b/0x80 [ 89.206838][ T7808] ? kobject_add_internal+0x25f/0x930 [ 89.206909][ T7808] ? kobject_add_internal+0x25f/0x930 [ 89.206938][ T7808] ? class_dir_child_ns_type+0xd/0x60 [ 89.207015][ T7808] kobject_add_internal+0x2c8/0x930 [ 89.207046][ T7808] kobject_add+0x16a/0x1e0 [ 89.207091][ T7808] ? __pfx_kobject_add+0x10/0x10 [ 89.207121][ T7808] ? get_device_parent+0x1b3/0x4c0 [ 89.207153][ T7808] ? kobject_put+0xb9/0x640 [ 89.207179][ T7808] ? device_add+0xc4d/0x1970 [ 89.207206][ T7808] device_add+0x294/0x1970 [ 89.207232][ T7808] ? lockdep_init_map_type+0x5c/0x250 [ 89.207256][ T7808] ? __pfx_device_add+0x10/0x10 [ 89.207279][ T7808] ? lockdep_init_map_type+0x5c/0x250 [ 89.207302][ T7808] ? __init_waitqueue_head+0xca/0x150 [ 89.207342][ T7808] tty_register_device_attr+0x388/0x7f0 [ 89.207380][ T7808] ? lockdep_init_map_type+0x5c/0x250 [ 89.207400][ T7808] ? __pfx_tty_register_device_attr+0x10/0x10 [ 89.207427][ T7808] ? tty_port_init+0x156/0x1c0 [ 89.207461][ T7808] gsm_activate_mux+0x155/0x2a0 [ 89.207483][ T7808] gsmld_ioctl+0xbbc/0x15c0 [ 89.207507][ T7808] ? kasan_quarantine_put+0x104/0x240 [ 89.207525][ T7808] ? __pfx_gsmld_ioctl+0x10/0x10 [ 89.207547][ T7808] ? __ldsem_down_read_nested+0xf3/0x890 [ 89.207570][ T7808] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 89.207595][ T7808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.207617][ T7808] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 89.207638][ T7808] ? __pfx_gsmld_ioctl+0x10/0x10 [ 89.207661][ T7808] tty_ioctl+0x11b4/0x1640 [ 89.207683][ T7808] ? __pfx_tty_ioctl+0x10/0x10 [ 89.207704][ T7808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 89.207779][ T7808] ? __fget_files+0x215/0x3d0 [ 89.207807][ T7808] ? hook_file_ioctl_common+0x140/0x440 [ 89.207844][ T7808] ? selinux_file_ioctl+0x13b/0x290 [ 89.207871][ T7808] ? selinux_file_ioctl+0xb6/0x290 [ 89.207900][ T7808] ? __pfx_tty_ioctl+0x10/0x10 [ 89.207921][ T7808] __x64_sys_ioctl+0x18e/0x210 [ 89.207949][ T7808] do_syscall_64+0x115/0x870 [ 89.207978][ T7808] ? clear_bhb_loop+0x40/0x90 [ 89.208000][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.208018][ T7808] RIP: 0033:0x7fe2bc99e019 [ 89.208055][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.208069][ T7808] RSP: 002b:00007fe2bd7a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.208086][ T7808] RAX: ffffffffffffffda RBX: 00007fe2bcc26090 RCX: 00007fe2bc99e019 [ 89.208095][ T7808] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 89.208103][ T7808] RBP: 00007fe2bca3500c R08: 0000000000000000 R09: 0000000000000000 [ 89.208112][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.208121][ T7808] R13: 00007fe2bcc26128 R14: 00007fe2bcc26090 R15: 00007ffc4fe4c558 [ 89.208164][ T7808] [ 89.210965][ T7808] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.634759][ T7841] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 89.693790][ T7841] bond2: entered promiscuous mode [ 89.694220][ T7841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.710995][ T1170] wlan1: Trigger new scan to find an IBSS to join [ 90.012438][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 90.015975][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 90.029264][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 90.032381][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 90.039205][ T5840] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.042912][ T5840] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.046610][ T5840] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.050743][ T5840] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.064022][ T7870] netlink: 'syz.4.584': attribute type 21 has an invalid length. [ 90.067364][ T7870] netlink: 156 bytes leftover after parsing attributes in process `syz.4.584'. [ 90.187552][ T7890] bad cache= option: noneÿÿ [ 90.187552][ T7890] [ 90.190722][ T7890] CIFS: VFS: bad cache= option: noneÿÿ [ 92.175928][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.176011][ T7860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.577344][ T1179] wlan1: Creating new IBSS network, BSSID f2:50:ca:92:f5:60 [ 92.907671][ T7860] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.922188][ T7860] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.928843][ T7860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.931354][ T7860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.934260][ T7860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.942050][ T7860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.944074][ T7860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.947733][ T7860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.953697][ T7860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.955933][ T7860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.960191][ T7860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.988542][ T42] kauditd_printk_skb: 202 callbacks suppressed [ 92.988554][ T42] audit: type=1800 audit(1785550106.341:1681): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 93.002399][ T42] audit: type=1800 audit(1785550106.351:1682): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 93.021658][ T42] audit: type=1800 audit(1785550106.371:1683): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 93.024404][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 93.040587][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 93.057949][ T42] audit: type=1800 audit(1785550106.411:1684): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 93.075955][ T42] audit: type=1800 audit(1785550106.421:1685): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 93.085505][ T7921] netlink: 'syz.3.597': attribute type 8 has an invalid length. [ 93.088189][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 93.094526][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 93.100022][ T42] audit: type=1800 audit(1785550106.451:1686): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149484 res=0 errno=0 [ 93.105694][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 93.111582][ T42] audit: type=1800 audit(1785550106.451:1687): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149503 res=0 errno=0 [ 93.121631][ T42] audit: type=1800 audit(1785550106.451:1688): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.593" name="new_device" dev="sysfs" ino=45835 res=0 errno=0 [ 93.130106][ T42] audit: type=1400 audit(1785550106.471:1689): avc: denied { mounton } for pid=7912 comm="syz.4.595" path="/58/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 93.138950][ T42] audit: type=1800 audit(1785550106.481:1690): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 93.369614][ T7943] IPVS: length: 34 != 24 [ 93.650802][ T7957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7957 comm=syz.3.607 [ 93.684449][ T7961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7961 comm=syz.3.608 [ 93.693521][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.699214][ T7961] bridge_slave_0 (unregistering): left allmulticast mode [ 93.702554][ T7961] bridge_slave_0 (unregistering): left promiscuous mode [ 93.707399][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.989363][ T7975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.003055][ T7975] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 94.125620][ T7990] loop9: detected capacity change from 0 to 255852544 [ 94.175940][ T7989] Invalid logical block size (4) [ 94.255913][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.345501][ T8007] binder: 8005:8007 ioctl c0306201 0 returned -14 [ 94.347154][ T8006] binder: 8005:8006 ioctl c0306201 0 returned -14 [ 94.376893][ T8006] ALSA: seq fatal error: cannot create timer (-19) [ 94.380882][ T64] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 94.381505][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.392961][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.436727][ T34] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 94.439410][ T8018] netlink: 'syz.3.627': attribute type 4 has an invalid length. [ 94.595946][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 94.735831][ T34] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 94.824187][ T8037] netlink: 'syz.4.635': attribute type 2 has an invalid length. [ 94.829473][ T8037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 94.869695][ T8037] overlayfs: missing 'lowerdir' [ 94.906010][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 94.909198][ T34] usb usb7-port1: attempt power cycle [ 94.975882][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.976012][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.977787][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.255980][ T34] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 95.277261][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 95.415849][ T34] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 95.438693][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 95.442567][ T34] usb usb7-port1: unable to enumerate USB device [ 95.443435][ T8062] __nla_validate_parse: 16 callbacks suppressed [ 95.443446][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 95.626549][ T8065] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 95.906321][ T8070] netlink: 260 bytes leftover after parsing attributes in process `syz.4.647'. [ 96.271561][ T8087] overlay: Unknown parameter '/' [ 96.273824][ T8089] overlay: Unknown parameter '/' [ 96.320252][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 96.345885][ T5094] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.368511][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 96.371344][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 96.374139][ T8111] netlink: 'syz.0.657': attribute type 19 has an invalid length. [ 96.384806][ T1179] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.390801][ T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 96.402356][ T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 96.426051][ T13] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 96.429128][ T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 96.666952][ T8124] overlayfs: missing 'lowerdir' [ 96.707219][ T8125] futex_wake_op: syz.4.663 tries to shift op by 32; fix this program [ 96.804187][ T8132] syzkaller1: entered promiscuous mode [ 96.806604][ T8132] syzkaller1: entered allmulticast mode [ 96.946998][ T8139] tipc: Started in network mode [ 96.949030][ T8139] tipc: Node identity ac14142f, cluster identity 4711 [ 96.952145][ T8139] tipc: New replicast peer: 127.0.0.1 [ 96.954268][ T8139] tipc: Enabled bearer , priority 10 [ 96.996016][ T5734] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 97.017305][ T8141] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0005 [ 97.056020][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.056167][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.056222][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.158173][ T5734] usb 8-1: Using ep0 maxpacket: 8 [ 97.162360][ T5734] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 97.165384][ T5734] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.170399][ T5734] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.173498][ T5734] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.176858][ T5734] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.180939][ T5734] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.183781][ T5734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.205713][ T8145] MTD: Couldn't look up './cgroup': -15 [ 97.207657][ T8145] ./cgroup: Can't lookup blockdev [ 97.394994][ T5734] usb 8-1: usb_control_msg returned -32 [ 97.396831][ T5734] usbtmc 8-1:16.0: can't read capabilities [ 97.407606][ T5734] usb 8-1: USB disconnect, device number 4 [ 97.694254][ T8168] bond0: entered allmulticast mode [ 97.696047][ T8168] bond_slave_0: entered allmulticast mode [ 97.697944][ T8168] bond_slave_1: entered allmulticast mode [ 97.699683][ T8168] team0: entered allmulticast mode [ 97.701487][ T8168] team_slave_0: entered allmulticast mode [ 97.703380][ T8168] team_slave_1: entered allmulticast mode [ 97.875803][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'. [ 97.970817][ T5734] tipc: Node number set to 2886997039 [ 98.088706][ T42] kauditd_printk_skb: 109 callbacks suppressed [ 98.088724][ T42] audit: type=1800 audit(1785550111.441:1800): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 98.151178][ T42] audit: type=1800 audit(1785550111.501:1801): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 98.299498][ T42] audit: type=1800 audit(1785550111.651:1802): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 98.421730][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 98.422513][ T5094] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.460635][ T42] audit: type=1800 audit(1785550111.811:1803): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 98.486439][ T42] audit: type=1800 audit(1785550111.841:1804): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 99.139359][ T5094] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.145918][ T5094] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.146145][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.686242][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 116.688288][ T42] audit: type=1400 audit(1785550130.041:1805): avc: denied { ioctl } for pid=8193 comm="syz.0.686" path="socket:[22368]" dev="sockfs" ino=22368 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.690021][ T8199] netlink: 14 bytes leftover after parsing attributes in process `syz.3.689'. [ 116.712858][ T42] audit: type=1400 audit(1785550130.061:1806): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.731286][ T42] audit: type=1800 audit(1785550130.081:1807): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 116.754692][ T42] audit: type=1800 audit(1785550130.091:1808): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.688" name="resume" dev="sysfs" ino=891 res=0 errno=0 [ 116.765157][ T8205] cgroup: Need name or subsystem set [ 116.797958][ T8201] block device autoloading is deprecated and will be removed. [ 116.799481][ T42] audit: type=1800 audit(1785550130.151:1809): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 116.811938][ T8212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.692'. [ 116.815314][ T8212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.692'. [ 116.818074][ T42] audit: type=1800 audit(1785550130.151:1810): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151041 res=0 errno=0 [ 116.837492][ T42] audit: type=1800 audit(1785550130.161:1811): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 116.844732][ T42] audit: type=1800 audit(1785550130.181:1812): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150950 res=0 errno=0 [ 116.852047][ T42] audit: type=1800 audit(1785550130.181:1813): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 116.858102][ T8200] efs: device does not support 512 byte blocks [ 116.861409][ T8200] device does not support 512 byte blocks [ 116.861409][ T8200] [ 116.869155][ T42] audit: type=1400 audit(1785550130.221:1814): avc: denied { write } for pid=8197 comm="syz.2.688" name="cluster" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.888189][ T8211] kvm: apic: phys broadcast and lowest prio [ 116.893876][ T8211] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 (while UP) [ 116.904218][ T8211] netlink: 'syz.0.693': attribute type 13 has an invalid length. [ 116.907978][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 116.911910][ T8211] netlink: 'syz.0.693': attribute type 13 has an invalid length. [ 116.915165][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 117.069169][ T8227] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 117.112971][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 117.116752][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 117.119965][ T8232] netlink: 14 bytes leftover after parsing attributes in process `syz.4.702'. [ 117.224417][ T5735] Bluetooth: hci0: unexpected event for opcode 0x200f [ 117.231486][ T5735] Bluetooth: hci0: unexpected event for opcode 0x200f [ 117.270768][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.276274][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.281467][ T24] usb 7-1: Product: syz [ 117.282871][ T24] usb 7-1: Manufacturer: syz [ 117.287375][ T24] usb 7-1: SerialNumber: syz [ 117.322165][ T5734] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.365010][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 117.412254][ T8254] syzkaller0: entered promiscuous mode [ 117.417017][ T8254] syzkaller0: entered allmulticast mode [ 117.546950][ T24] usb 7-1: USB disconnect, device number 11 [ 117.760957][ T8200] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 117.763746][ T8200] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 118.194675][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 118.245552][ T8287] tmpfs: Bad value for 'mpol' [ 118.262740][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.345928][ T5734] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 118.357792][ T5734] ath9k_htc: Failed to initialize the device [ 118.365674][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 118.375049][ T8303] overlayfs: failed to resolve 'subj_type=': -2 [ 118.474637][ T8315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8315 comm=syz.2.736 [ 118.575339][ T8320] efs: device does not support 512 byte blocks [ 118.578191][ T8320] device does not support 512 byte blocks [ 118.578191][ T8320] [ 118.630976][ T8324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8324 comm=syz.3.733 [ 118.736280][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.845347][ T5734] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.913534][ T8352] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 118.916315][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.920713][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 118.926953][ T8354] SQUASHFS error: Failed to read block 0x0: -5 [ 118.928419][ T8352] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 118.931650][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.934152][ T8354] unable to read squashfs_super_block [ 118.969083][ T5840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.000826][ T5734] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.008409][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.024692][ T5734] usb 5-1: Product: syz [ 119.026494][ T5734] usb 5-1: Manufacturer: syz [ 119.028466][ T5734] usb 5-1: SerialNumber: syz [ 119.061316][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.098096][ T5840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.133054][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.143628][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.148742][ T8372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.150007][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.158877][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.161811][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.212962][ T5840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.270841][ T61] usb 5-1: USB disconnect, device number 7 [ 119.308859][ T5840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.474385][ T8320] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 119.476922][ T8320] netlink: 'syz.0.731': attribute type 2 has an invalid length. [ 119.507170][ T5840] bridge_slave_1: left allmulticast mode [ 119.508988][ T5840] bridge_slave_1: left promiscuous mode [ 119.510820][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.521300][ T5840] bridge_slave_0: left allmulticast mode [ 119.525130][ T5840] bridge_slave_0: left promiscuous mode [ 119.532078][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.665224][ T5840] bond1 (unregistering): (slave geneve2): Releasing active interface [ 119.697577][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.701461][ T5840] bond_slave_0: left allmulticast mode [ 119.710760][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.714921][ T5840] bond_slave_1: left allmulticast mode [ 119.719335][ T5840] bond0 (unregistering): (slave team0): Releasing backup interface [ 119.723159][ T5840] team0: left allmulticast mode [ 119.724766][ T5840] team_slave_0: left allmulticast mode [ 119.726533][ T5840] team_slave_1: left allmulticast mode [ 119.733117][ T5840] bond0 (unregistering): Released all slaves [ 119.746631][ T5840] bond1 (unregistering): Released all slaves [ 119.759539][ T5840] bond2 (unregistering): Released all slaves [ 119.773087][ T1353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.777389][ T5840] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 119.786334][ T5840] bond3 (unregistering): Released all slaves [ 119.812978][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 119.862692][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.055073][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 120.101448][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 120.105231][ T24] ath9k_htc: Failed to initialize the device [ 120.111566][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.113901][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.116379][ T8368] bridge_slave_0: entered allmulticast mode [ 120.116806][ T61] usb 5-1: ath9k_htc: USB layer deinitialized [ 120.119706][ T8368] bridge_slave_0: entered promiscuous mode [ 120.124539][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.126958][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.129463][ T8368] bridge_slave_1: entered allmulticast mode [ 120.151290][ T8409] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 120.195662][ T8368] bridge_slave_1: entered promiscuous mode [ 120.232222][ T8424] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 120.235405][ T8424] SELinux: invalid class [ 120.239566][ T8424] SELinux: failed to load policy [ 120.299578][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.317445][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.419828][ T8368] team0: Port device team_slave_0 added [ 120.432878][ T8442] binder: BC_ACQUIRE_RESULT not supported [ 120.434902][ T8442] binder: 8440:8442 ioctl c0306201 2000000003c0 returned -22 [ 120.435541][ T8368] team0: Port device team_slave_1 added [ 120.466005][ T8432] efs: device does not support 512 byte blocks [ 120.471031][ T8432] device does not support 512 byte blocks [ 120.471031][ T8432] [ 120.500296][ T7067] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.515224][ T8448] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 120.522346][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.525214][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.535106][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.542643][ T5840] hsr_slave_0: left promiscuous mode [ 120.547365][ T5840] hsr_slave_1: left promiscuous mode [ 120.550089][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.552823][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.556339][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.558755][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.572786][ T5840] veth1_macvtap: left promiscuous mode [ 120.574650][ T5840] veth0_macvtap: left promiscuous mode [ 120.576489][ T5840] veth1_vlan: left promiscuous mode [ 120.578515][ T5840] veth0_vlan: left promiscuous mode [ 120.631556][ T8460] syz.0.766 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.679508][ T7067] usb 8-1: Using ep0 maxpacket: 8 [ 120.683206][ T7067] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 120.686075][ T7067] usb 8-1: config 0 has no interface number 0 [ 120.688151][ T7067] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.692318][ T7067] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.695495][ T7067] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 120.699376][ T7067] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 120.703297][ T7067] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 26613, setting to 1024 [ 120.707037][ T7067] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.712990][ T7067] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 120.716114][ T7067] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.716415][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 120.719546][ T7067] usb 8-1: Product: syz [ 120.722382][ T7067] usb 8-1: Manufacturer: syz [ 120.724039][ T7067] usb 8-1: SerialNumber: syz [ 120.725852][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 120.728555][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 120.732536][ T7067] usb 8-1: config 0 descriptor?? [ 120.735235][ T8424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.810423][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.817621][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.820124][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.829820][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.836025][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 120.896884][ T8368] hsr_slave_0: entered promiscuous mode [ 120.899696][ T8368] hsr_slave_1: entered promiscuous mode [ 120.901783][ T8368] debugfs: 'hsr0' already exists in 'hsr' [ 120.903678][ T8368] Cannot create hsr debugfs directory [ 120.907530][ T8469] SET target dimension over the limit! [ 120.914308][ T8469] /dev/nullb0: Can't open blockdev [ 120.921972][ T8202] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 120.957706][ T7067] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 121.073420][ T8482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.077584][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.085848][ T8482] 9pnet_fd: p9_fd_create_tcp (8482): problem connecting socket to 127.0.0.1 [ 121.119215][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.147151][ T8430] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 121.159808][ T8368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.170362][ T61] usb 8-1: USB disconnect, device number 5 [ 121.174688][ T8368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.180689][ T8368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.196857][ T8368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.201387][ T8368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.208931][ T8368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.210740][ T5735] Bluetooth: hci1: command tx timeout [ 121.212020][ T8368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.219657][ T8486] ftl_cs: FTL header not found. [ 121.227132][ T8368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.266913][ T8486] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 121.288733][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.288854][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.310795][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.315737][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.318091][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.325259][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.327563][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.479528][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.575511][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.700969][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 121.700982][ T42] audit: type=1800 audit(1785552456.060:1979): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 121.723094][ T42] audit: type=1800 audit(1785552456.080:1980): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 121.739648][ T8368] veth0_vlan: entered promiscuous mode [ 121.751348][ T8368] veth1_vlan: entered promiscuous mode [ 121.770712][ T8368] veth0_macvtap: entered promiscuous mode [ 121.776879][ T8368] veth1_macvtap: entered promiscuous mode [ 121.779937][ T42] audit: type=1800 audit(1785552456.141:1981): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 121.791191][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.797416][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.803586][ T5840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.808259][ T42] audit: type=1400 audit(1785552456.171:1982): avc: denied { getopt } for pid=8537 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.808389][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.832932][ T42] audit: type=1800 audit(1785552456.191:1983): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 121.860805][ T42] audit: type=1800 audit(1785552456.221:1984): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 121.882747][ T42] audit: type=1800 audit(1785552456.241:1985): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162525 res=0 errno=0 [ 121.902947][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.905478][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.907954][ T42] audit: type=1800 audit(1785552456.261:1986): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 121.918158][ T42] audit: type=1800 audit(1785552456.281:1987): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162659 res=0 errno=0 [ 121.939226][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.941846][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.948655][ T42] audit: type=1400 audit(1785552456.311:1988): avc: denied { mounton } for pid=8368 comm="syz-executor" path="/syzkaller.0j4own/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 121.965890][ T5840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.968767][ T5840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.989387][ T24] IPVS: starting estimator thread 0... [ 122.066552][ T8553] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 122.095719][ T8550] IPVS: using max 45 ests per chain, 108000 per kthread [ 122.118787][ T8565] input: syz0 as /devices/virtual/input/input9 [ 122.155841][ T61] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.255745][ T8581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.325526][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 122.328828][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.332289][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.335536][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.338568][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.342572][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.345507][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.417241][ T5884] net_ratelimit: 2 callbacks suppressed [ 122.417255][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.456778][ T8593] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.561436][ T61] usb 5-1: GET_CAPABILITIES returned 0 [ 122.563481][ T61] usbtmc 5-1:16.0: can't read capabilities [ 122.648621][ T8607] Mass Storage Function, version: 2009/09/11 [ 122.651212][ T8607] LUN: removable file: (no medium) [ 122.657264][ T8607] __nla_validate_parse: 7 callbacks suppressed [ 122.657274][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 122.661786][ T8607] netlink: 'syz.5.798': attribute type 10 has an invalid length. [ 122.664865][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.798'. [ 122.670664][ T8607] [ 122.671409][ T8607] ====================================================== [ 122.673431][ T8607] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.675632][ T8607] syzkaller #0 Tainted: G L [ 122.677689][ T8607] ------------------------------------------------------ [ 122.679744][ T8607] syz.5.798/8607 is trying to acquire lock: [ 122.681445][ T8607] ffff888034cac450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 122.684008][ T8607] [ 122.684008][ T8607] but task is already holding lock: [ 122.686102][ T8607] ffff888059b68120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 122.688802][ T8607] [ 122.688802][ T8607] which lock already depends on the new lock. [ 122.688802][ T8607] [ 122.691600][ T8607] [ 122.691600][ T8607] the existing dependency chain (in reverse order) is: [ 122.694182][ T8607] [ 122.694182][ T8607] -> #3 (&common->filesem){++++}-{4:4}: [ 122.696382][ T8607] lock_acquire+0x1b9/0x370 [ 122.697851][ T8607] down_read+0x99/0x4c0 [ 122.699198][ T8607] fsg_show_file+0x20/0x180 [ 122.700617][ T8607] configfs_read_iter+0x426/0x6f0 [ 122.702214][ T8607] __kernel_read+0x397/0xad0 [ 122.703689][ T8607] integrity_kernel_read+0x7e/0xb0 [ 122.705372][ T8607] ima_calc_file_hash_tfm+0x25e/0x350 [ 122.707062][ T8607] ima_calc_file_hash+0x167/0x380 [ 122.708681][ T8607] ima_collect_measurement+0x94f/0xb30 [ 122.710389][ T8607] process_measurement+0xdfe/0x2350 [ 122.712030][ T8607] ima_file_check+0xc3/0x110 [ 122.713493][ T8607] security_file_post_open+0xc4/0x210 [ 122.715216][ T8607] path_openat+0x985/0x4280 [ 122.716671][ T8607] do_file_open+0x20e/0x430 [ 122.718117][ T8607] do_sys_openat2+0x10f/0x1e0 [ 122.719649][ T8607] __x64_sys_openat+0x12d/0x210 [ 122.721202][ T8607] do_syscall_64+0x115/0x870 [ 122.722675][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.724522][ T8607] [ 122.724522][ T8607] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 122.726621][ T8607] lock_acquire+0x1b9/0x370 [ 122.728077][ T8607] down_read+0x99/0x4c0 [ 122.729475][ T8607] __configfs_open_file+0xe8/0x9c0 [ 122.731089][ T8607] do_dentry_open+0x6ab/0x14d0 [ 122.732618][ T8607] vfs_open+0x82/0x3f0 [ 122.733971][ T8607] dentry_open+0x71/0xd0 [ 122.735353][ T8607] ima_calc_file_hash+0xe1/0x380 [ 122.736956][ T8607] ima_collect_measurement+0x94f/0xb30 [ 122.738704][ T8607] process_measurement+0xdfe/0x2350 [ 122.740347][ T8607] ima_file_check+0xc3/0x110 [ 122.741821][ T8607] security_file_post_open+0xc4/0x210 [ 122.743518][ T8607] path_openat+0x985/0x4280 [ 122.744976][ T8607] do_file_open+0x20e/0x430 [ 122.746419][ T8607] do_sys_openat2+0x10f/0x1e0 [ 122.747920][ T8607] __x64_sys_openat+0x12d/0x210 [ 122.749512][ T8607] do_syscall_64+0x115/0x870 [ 122.751004][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.752847][ T8607] [ 122.752847][ T8607] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 122.755295][ T8607] lock_acquire+0x1b9/0x370 [ 122.756827][ T8607] __mutex_lock+0x1a4/0x1bd0 [ 122.758355][ T8607] process_measurement+0x5ab/0x2350 [ 122.760115][ T8607] ima_file_check+0xc3/0x110 [ 122.761660][ T8607] security_file_post_open+0xc4/0x210 [ 122.763375][ T8607] path_openat+0x985/0x4280 [ 122.764874][ T8607] do_file_open+0x20e/0x430 [ 122.766331][ T8607] do_sys_openat2+0x10f/0x1e0 [ 122.767834][ T8607] __x64_sys_openat+0x12d/0x210 [ 122.769460][ T8607] do_syscall_64+0x115/0x870 [ 122.771022][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.773220][ T8607] [ 122.773220][ T8607] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 122.775509][ T8607] check_prev_add+0xeb/0xe60 [ 122.777005][ T8607] __lock_acquire+0x136c/0x1a40 [ 122.778587][ T8607] lock_acquire+0x1b9/0x370 [ 122.779990][ T8607] mnt_want_write+0x6f/0x410 [ 122.781467][ T8607] path_openat+0xad9/0x4280 [ 122.783116][ T8607] do_file_open+0x20e/0x430 [ 122.784753][ T8607] file_open_name+0x1c3/0x3e0 [ 122.786469][ T8607] filp_open+0x2e/0x50 [ 122.787989][ T8607] fsg_lun_open+0x6b/0x7b0 [ 122.789551][ T8607] fsg_store_file+0x1e7/0x450 [ 122.791006][ T8607] configfs_write_iter+0x302/0x4e0 [ 122.792752][ T8607] vfs_write+0x6ac/0x1050 [ 122.794335][ T8607] ksys_write+0x12a/0x250 [ 122.795942][ T8607] do_syscall_64+0x115/0x870 [ 122.797635][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.799736][ T8607] [ 122.799736][ T8607] other info that might help us debug this: [ 122.799736][ T8607] [ 122.803009][ T8607] Chain exists of: [ 122.803009][ T8607] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 122.803009][ T8607] [ 122.807024][ T8607] Possible unsafe locking scenario: [ 122.807024][ T8607] [ 122.809421][ T8607] CPU0 CPU1 [ 122.811146][ T8607] ---- ---- [ 122.812941][ T8607] lock(&common->filesem); [ 122.814497][ T8607] lock(&p->frag_sem); [ 122.816523][ T8607] lock(&common->filesem); [ 122.818640][ T8607] rlock(sb_writers#6); [ 122.819884][ T8607] [ 122.819884][ T8607] *** DEADLOCK *** [ 122.819884][ T8607] [ 122.822452][ T8607] 5 locks held by syz.5.798/8607: [ 122.824098][ T8607] #0: ffff88802eb1b5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 122.826970][ T8607] #1: ffff8880236f4450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 122.829531][ T8607] #2: ffff888036f6e480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 122.832214][ T8607] #3: ffff888032dfec70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 122.834891][ T8607] #4: ffff888059b68120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 122.837946][ T8607] [ 122.837946][ T8607] stack backtrace: [ 122.839781][ T8607] CPU: 2 UID: 0 PID: 8607 Comm: syz.5.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.839797][ T8607] Tainted: [L]=SOFTLOCKUP [ 122.839801][ T8607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.839808][ T8607] Call Trace: [ 122.839822][ T8607] [ 122.839827][ T8607] dump_stack_lvl+0x100/0x190 [ 122.839851][ T8607] print_circular_bug.cold+0x178/0x1c7 [ 122.839868][ T8607] check_noncircular+0x146/0x160 [ 122.839881][ T8607] ? __lock_acquire+0xd5b/0x1a40 [ 122.839895][ T8607] check_prev_add+0xeb/0xe60 [ 122.839907][ T8607] __lock_acquire+0x136c/0x1a40 [ 122.839921][ T8607] ? try_to_unlazy+0x296/0x910 [ 122.839937][ T8607] lock_acquire+0x1b9/0x370 [ 122.839949][ T8607] ? path_openat+0xad9/0x4280 [ 122.839960][ T8607] ? __pfx___might_resched+0x10/0x10 [ 122.839992][ T8607] mnt_want_write+0x6f/0x410 [ 122.840003][ T8607] ? path_openat+0xad9/0x4280 [ 122.840013][ T8607] path_openat+0xad9/0x4280 [ 122.840026][ T8607] ? __pfx_path_openat+0x10/0x10 [ 122.840037][ T8607] ? kasan_save_stack+0x30/0x50 [ 122.840050][ T8607] ? kasan_save_track+0x14/0x30 [ 122.840061][ T8607] ? __kasan_slab_alloc+0x89/0x90 [ 122.840073][ T8607] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 122.840085][ T8607] ? do_getname_kernel+0x5d/0x250 [ 122.840097][ T8607] ? filp_open+0x1d/0x50 [ 122.840109][ T8607] ? fsg_lun_open+0x6b/0x7b0 [ 122.840120][ T8607] ? fsg_store_file+0x1e7/0x450 [ 122.840132][ T8607] do_file_open+0x20e/0x430 [ 122.840143][ T8607] ? __pfx_do_file_open+0x10/0x10 [ 122.840159][ T8607] ? rcu_is_watching+0x12/0xc0 [ 122.840176][ T8607] file_open_name+0x1c3/0x3e0 [ 122.840189][ T8607] ? __pfx_file_open_name+0x10/0x10 [ 122.840201][ T8607] ? do_getname_kernel+0x5d/0x250 [ 122.840213][ T8607] ? __asan_memcpy+0x3c/0x60 [ 122.840223][ T8607] ? do_getname_kernel+0x1be/0x250 [ 122.840240][ T8607] filp_open+0x2e/0x50 [ 122.840252][ T8607] fsg_lun_open+0x6b/0x7b0 [ 122.840263][ T8607] ? __pfx_down_read+0x10/0x10 [ 122.840278][ T8607] fsg_store_file+0x1e7/0x450 [ 122.840290][ T8607] configfs_write_iter+0x302/0x4e0 [ 122.840303][ T8607] vfs_write+0x6ac/0x1050 [ 122.840319][ T8607] ? __pfx_configfs_write_iter+0x10/0x10 [ 122.840332][ T8607] ? __pfx_vfs_write+0x10/0x10 [ 122.840351][ T8607] ksys_write+0x12a/0x250 [ 122.840366][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 122.840383][ T8607] do_syscall_64+0x115/0x870 [ 122.840396][ T8607] ? clear_bhb_loop+0x40/0x90 [ 122.840407][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.840418][ T8607] RIP: 0033:0x7eff9d79e019 [ 122.840428][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.840439][ T8607] RSP: 002b:00007eff9e5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.840457][ T8607] RAX: ffffffffffffffda RBX: 00007eff9da25fa0 RCX: 00007eff9d79e019 [ 122.840464][ T8607] RDX: 000000000000000c RSI: 0000200000000380 RDI: 0000000000000003 [ 122.840470][ T8607] RBP: 00007eff9d83500c R08: 0000000000000000 R09: 0000000000000000 [ 122.840476][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.840482][ T8607] R13: 00007eff9da26038 R14: 00007eff9da25fa0 R15: 00007ffc2becef38 [ 122.840492][ T8607] [ 122.936359][ T1353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.939947][ T8607] mass_storage.usb0/lun.0: unable to open backing file: [ 122.939947][ T8607] [ 122.943366][ T8608] mass_storage.usb0/lun.0: unable to open backing file: [ 122.943366][ T8608] [ 122.958026][ T10] usb 5-1: USB disconnect, device number 8 [ 123.196477][ T8439] bridge0: port 3(syz_tun) entered disabled state [ 123.200060][ T8439] syz_tun (unregistering): left allmulticast mode [ 123.202034][ T8439] syz_tun (unregistering): left promiscuous mode [ 123.204358][ T8439] bridge0: port 3(syz_tun) entered disabled state [ 123.268425][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 123.272519][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 123.276550][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.404694][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 123.407905][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 123.411074][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.545839][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 123.550201][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 123.554654][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.605663][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 123.609032][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 123.612370][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.789682][ T13] bridge_slave_1: left allmulticast mode [ 123.792279][ T13] bridge_slave_1: left promiscuous mode [ 123.794493][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.797475][ T13] bridge_slave_0: left allmulticast mode [ 123.799295][ T13] bridge_slave_0: left promiscuous mode [ 123.801082][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.804879][ T13] macvlan2: left allmulticast mode [ 123.806545][ T13] bridge1: port 1(macvlan2) entered disabled state [ 123.858046][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.861837][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.865427][ T13] bond0 (unregistering): Released all slaves [ 123.869238][ T13] bond1 (unregistering): Released all slaves [ 123.876120][ T13] bond2 (unregistering): Released all slaves [ 123.880218][ T13] bond3 (unregistering): Released all slaves [ 123.885247][ T13] bond4 (unregistering): Released all slaves [ 123.981423][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 124.081487][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 124.191361][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 124.254860][ T13] hsr_slave_0: left promiscuous mode [ 124.257188][ T13] hsr_slave_1: left promiscuous mode [ 124.259388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.262393][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.265280][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.267943][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.273137][ T13] veth1_macvtap: left promiscuous mode [ 124.274950][ T13] veth0_macvtap: left promiscuous mode [ 124.276725][ T13] veth1_vlan: left promiscuous mode [ 124.279484][ T13] veth0_vlan: left promiscuous mode [ 124.346914][ T13] team0 (unregistering): Port device team_slave_1 removed [ 124.351475][ T13] team0 (unregistering): Port device team_slave_0 removed [ 124.379725][ T13] team0 (unregistering): Port device dummy0 removed [ 124.401203][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 124.722186][ T13] IPVS: stop unused estimator thread 0... [ 124.794231][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.964583][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.072297][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.122512][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.226423][ T13] bridge_slave_1: left allmulticast mode [ 125.228255][ T13] bridge_slave_1: left promiscuous mode [ 125.230019][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.233221][ T13] bridge_slave_0: left allmulticast mode [ 125.235018][ T13] bridge_slave_0: left promiscuous mode [ 125.236779][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.285218][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.290462][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.294709][ T13] bond0 (unregistering): Released all slaves [ 125.415986][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 125.542227][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 125.641127][ T13] hsr_slave_0: left promiscuous mode [ 125.643609][ T13] hsr_slave_1: left promiscuous mode [ 125.646060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.648974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.652149][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.654987][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.660530][ T13] veth1_macvtap: left promiscuous mode [ 125.662673][ T13] veth0_macvtap: left promiscuous mode [ 125.664804][ T13] veth1_vlan: left promiscuous mode [ 125.666864][ T13] veth0_vlan: left promiscuous mode [ 125.757203][ T13] team0 (unregistering): Port device team_slave_1 removed [ 125.761935][ T13] team0 (unregistering): Port device team_slave_0 removed [ 125.797448][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 125.919936][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.526310][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 131.526323][ T42] audit: type=1400 audit(1785552465.899:2096): avc: denied { write } for pid=8686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.554501][ T42] audit: type=1400 audit(1785552465.929:2097): avc: denied { write } for pid=8689 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.126965][ T42] audit: type=1400 audit(1785552466.500:2098): avc: denied { write } for pid=8693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.161295][ T42] audit: type=1400 audit(1785552466.540:2099): avc: denied { write } for pid=8696 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.638076][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640281][ T1445] ieee802154 phy1 wpan1: encryption failed: -22