last executing test programs: 58.959192115s ago: executing program 2 (id=200): mount$cgroup(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x10012, &(0x7f0000000380)={[{@none}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186b00000f0000000000000000000000183200000500000000000000000000001852000007000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000030170800f0ffffff9500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x5f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x1, 0x35d, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x20) 58.87963011s ago: executing program 2 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x40402) pread64(r2, 0x0, 0x0, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010c60e6d4c00a0f901dbdf2500007400298ae1", @ANYRES32=0x0, @ANYBLOB="00000000f3b20500200012800b0001006272696467650000100002800c0023000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) socket$nl_route(0x10, 0x3, 0x0) 56.120602837s ago: executing program 2 (id=229): io_setup(0x4a, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0xfffffffffffffffe, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x7]}, 0x8}) (async) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000180)='FREEZING\x00', 0x9) (async) io_getevents(r0, 0x9, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}) (async, rerun: 32) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x4000010, r1, 0xd168b000) (rerun: 32) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000300)={0x7, 0x5, "db7c7e0a17a0f85ac1bdc8774821407e774ea1d10f93ed85abf5ef1ca93e3c17", 0x6, 0x6, 0xd, 0xf46c, 0x80000804}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x2, {0x10, 0x794d6fd9, 0xfffffffffffffffe, 0x6, 0x2}}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000003c0)={{0x0, 0x3, 0x2, 0x0, 0x4}}) (async, rerun: 32) fcntl$lock(r2, 0x7, &(0x7f0000000400)={0x0, 0x4, 0x81, 0x2, 0xffffffffffffffff}) (async, rerun: 32) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000440)) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000480)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0x9, 0x1}}], 0x30}) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000500)) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, 0x453, 0x10, 0x70bd27, 0x25dfdbff, "c71af36ca7c6db27bd1fb10b0c841b1365fc1b5b6756241abb02912eef11a67e497117b88c61e9d87a67479e7e5978aa7101e10cccb2cfcb00ccb3c80b075dc3989de93c871a4a997cd4621237707a697468191f6f5366440b6ee9c6a27bcf4b76e887b6badb6ce33dfbffdebac419f5de1340a0d9cf8b06971357ca889cdcb4e1e84253de", ["", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async, rerun: 64) io_destroy(r0) (rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000700)=0x1, 0x4) (async, rerun: 64) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000740)=0x0) (rerun: 64) sched_rr_get_interval(r5, &(0x7f0000000780)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x472, 0x10, 0x100010, r3, 0x0) (async) write(r3, &(0x7f00000007c0)="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", 0x1000) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000017c0)={0x6, 0x0, 0x10001}) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000001800)={0x0, r6}) (async) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000001840)='./binderfs/features/transaction_report\x00', 0x0, 0x0) (async) migrate_pages(r5, 0x2, &(0x7f0000001880)=0x1, &(0x7f00000018c0)=0x6) (async) r7 = syz_open_dev$sndpcmc(&(0x7f0000001900), 0x9461, 0x4100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000001940)={0x0, [[0xf2d, 0x74, 0xfffffff9, 0x7, 0x13b, 0x10a, 0x0, 0x5], [0x7, 0x400, 0xffff, 0x8, 0x9, 0x7, 0x1ff], [0x1720000, 0x1, 0x10, 0x0, 0x9d5, 0xfa7, 0x7fffffff, 0xa]], '\x00', [{0x7f, 0x9, 0x1, 0x1, 0x1, 0x1}, {0xfff, 0x400, 0x1, 0x0, 0x1, 0x1}, {0x6558, 0x3, 0x1, 0x1}, {0xd, 0x4, 0x0, 0x0, 0x1}, {0x97, 0xb, 0x1}, {0x778b, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x54, 0x7, 0x1, 0x1}, {0x40, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x1, 0x0, 0x1}, {0x1, 0x1993, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x80000000, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x10}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 55.960444164s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x20000004, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1179901b3fffd060}, 0x94) syz_open_dev$vim2m(0x0, 0x800, 0x2) mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='270', 0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x189800, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0) chdir(&(0x7f00000008c0)='./file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000940)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000009c0)={0x1, 0x0, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaa7c3afd0350e627f80800450000140000000000679078ac141400ac1414aa"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r7, 0x400, 0x4, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/mtdblock0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000780)='xfs\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b2451ab66cd27989839fbdbc267fee478d8e6062f089253c9fcc2c42fa9b34aa96aa18f34d3b39dd1140", 0x2a, 0x40050, &(0x7f00000000c0)={0xa, 0x4e1e, 0x9, @remote, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.780043602s ago: executing program 2 (id=231): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c0005"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0xc0c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$netlink(r0, &(0x7f0000000a00)={&(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)=[{&(0x7f00000005c0)={0x1c, 0xd9, 0x2, 0x70bd29, 0x25dfdbfd, "", [@typed={0x4, 0x117}, @typed={0x8, 0x7c, 0x0, 0x0, @pid}]}, 0x1c}, {&(0x7f0000000600)={0x394, 0x3c, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0x2c, 0xf8, 0x0, 0x0, @str='./binderfs/features/freeze_notification\x00'}, @generic="9016b27c75473ee991466348f45a208ec6ff50b7398fcf88a25354520ade078b4fd14ef9c8322863a93b34219c5da1690156d2ad451fe98f7cb0861f8ced47760e8f077a1bfa2428", @generic="98cb84029b4735c96587b41e3d30c5423f03d773464b4a15119f1168cb03070974053bec8c6c311841c7f60c66fded3653ba576af3e201feb76dd907eeeb9a4a3f44477f400ed5125b2a749cf2718378dc0b23e3307f816df671d4e023fb1c47423c33fd343afdf88176aa697bf754adc87d670bb7a8", @nested={0x4, 0x148}, @nested={0x294, 0xd5, 0x0, 0x1, [@typed={0x2c, 0x42, 0x0, 0x0, @str='./binderfs/features/freeze_notification\x00'}, @nested={0x4, 0x130}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@local}, @generic="c60f9b6bb1148e1c865e20319dff90fea0761087d037488c8d27faf77a2abd904fc3411201dd421ee41386dce0e68ad9bb169c05be40959eab05fe6522cf409206b8bc86f9b8d1f1ab6577308560f550315b2a4096cf2b8d78cd39262b06e61fc9b7590bd28e043ab352c6cd99ef268508bffdfff9d2ec65a1fd52f4c056e896899c30b9840ec76aeb94c794a2d6631bf15cfc46fb57278c2c87779598c539cc72e5d0f344c54d85a7c527743f1010bd2e7574eb783ea9c656faa88e8bf7464ebfdf8c01ba8e6251f442603f41725f019a29a3", @generic="02471d7c11511b0103bacae1c535d4b5583c1dd9aaefb72a058912b0c2d37523f8c204517bcedd32663b1b72d463959f760bb3bf9b02205ca8f9219acb56a08e9e5a00788b6bd81452872304356e6fe3de4d1edee6cf0ee087d6a7345aa9c6085ffec76ded741d1465fb7b8f836477f01656dc4805ece6a96dc76ab159ed83f5d30f6197f376f9aa1aa399c271ddbd0b16697609149c6e206007ae90b6aac20c1ed4c256a61a20a3ce2d1058904cf9c20514c84a3987155db389ff8af20267c92eb0f968454db32fc3aa9100ec04c016", @generic="5429ed2e64493c67b91a9958cc796bc3d78b69b442e7830379c08afc175012925a02b103903233da2b10a44382856fb8f12f9693fbc9caf57c2ba118c7aa093608175c91604983fad8b6d790ff2af52e8e5c22cbc34ee9b991312fc9e6f7d9e5ff6dc2101a666370566fcde50b4adf87ab1448cb9ec3b4b0ca0a2ce229a878c2847b61916a0c463446fadf91d9e6af4d00ba4687b5545aa5bd69396c46c3ed7f7039ca00fdfbdfce8021a4dd0d5f0f5ffa3dd7297c"]}]}, 0x394}], 0x2}, 0x4845) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010427bd7000005fa415867288c923adf617734a1cdbbf4fa764570400000000b30783c57dbeeb2130d393b1f42bcc90334392bb399427b25a88d21f708451e647e87cead7a787d34ea9388992f6d201ee77db5ae7fcffb15e4c41a1c5d70bbdfc7897ae90ffb4c7518302b285f67ac39cb63b1c14e0cfb9903152c1350670894957b157a516977e9ba6c3f2d9721f841b953cf1eba7e107e0db7ae778d00164cca18755e68e42bd3b583a9b762839f311", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028008000700b1090000"], 0x3c}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0xd, 0x1, 0x6}, {0x2, 0x2, 0x32, 0x6}, {0x8, 0x1, 0x10, 0x1}, {0xb, 0x6, 0x2, 0x8}]}, 0x10) r6 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000b80)={0x1, 0x1}) read$snddsp(r6, &(0x7f0000000340)=""/6, 0x6) 55.440607714s ago: executing program 2 (id=232): mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000001740), &(0x7f0000001780)=@md5={0x1, "41f25b814bccba6c546944e7df068a37"}, 0x11, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300b9670e80be0dcc9fd5b008b48f6bbf95e22a4b8e55323900c14aec10671c2971d1650c21f16befba6afa18398ca28191cefce77bb97835d43648bd9984b7a86e4aa3a53c20389baa4e7fbb4516eca43b6a94018b3115071938c44f6cf63584dee0e6238df511f079f1ca29e3ab336b7bf2aeb63c4ed0bb94ae0e589103f9d592a210f7c5517fb8ecb4da02997e5e07292195e598f07f6b67cef2c4e989ae1729f991d6fa9b4ba2617f71bb18d2be12eee885ea8708eb086751503e9db9482cd3c5b95f47ed894b17", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x5, 0x0, 0x0, &(0x7f0000001c80)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f0000001cc0), 0x40000000000009f, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000017c0)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000001700)={&(0x7f0000000240)=@hci, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/40, 0x28}, {&(0x7f00000014c0)=""/3, 0x3}, {&(0x7f0000001500)=""/154, 0x9a}], 0x8, &(0x7f0000001640)=""/161, 0xa1}, 0x0) 55.367511081s ago: executing program 32 (id=232): mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000001740), &(0x7f0000001780)=@md5={0x1, "41f25b814bccba6c546944e7df068a37"}, 0x11, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300b9670e80be0dcc9fd5b008b48f6bbf95e22a4b8e55323900c14aec10671c2971d1650c21f16befba6afa18398ca28191cefce77bb97835d43648bd9984b7a86e4aa3a53c20389baa4e7fbb4516eca43b6a94018b3115071938c44f6cf63584dee0e6238df511f079f1ca29e3ab336b7bf2aeb63c4ed0bb94ae0e589103f9d592a210f7c5517fb8ecb4da02997e5e07292195e598f07f6b67cef2c4e989ae1729f991d6fa9b4ba2617f71bb18d2be12eee885ea8708eb086751503e9db9482cd3c5b95f47ed894b17", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x5, 0x0, 0x0, &(0x7f0000001c80)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f0000001cc0), 0x40000000000009f, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000017c0)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000001700)={&(0x7f0000000240)=@hci, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/40, 0x28}, {&(0x7f00000014c0)=""/3, 0x3}, {&(0x7f0000001500)=""/154, 0x9a}], 0x8, &(0x7f0000001640)=""/161, 0xa1}, 0x0) 47.510633687s ago: executing program 3 (id=305): setresgid(0xee00, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x27, &(0x7f0000000400)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'sh\x00', 0x1d, 0x0, 0x4}, 0x2c) r4 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) write$nsim_del_device(0xffffffffffffffff, &(0x7f0000000000)={0x0}, 0x1) 47.456981962s ago: executing program 3 (id=307): socket$kcm(0x11, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x62}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f00000000c0)={0x0, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_CARRIER={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 47.369285041s ago: executing program 3 (id=310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3a, 0x0, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f00000002c0)="d52fb5", 0x3) (async) write$9p(r1, &(0x7f00000002c0)="d52fb5", 0x3) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000340)=0x4) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000340)=0x4) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='utf8', &(0x7f00000001c0)='\x00V\x13\xdb\xbc', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 47.196631683s ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x9801) move_mount(r0, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x4) accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000180)=0x80, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10, 0x0) 47.168268274s ago: executing program 3 (id=318): r0 = socket$vsock_seqpacket(0x28, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond_slave_0\x00', 0x800}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x1}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000280)={'bond0\x00', 0x4000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@userptr={0x1, 0x0, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x7, 0x1, 0x7, 0x3, 0x1, 0xc, "708e6c00"}, 0x4, 0x2, {&(0x7f0000000340)}, 0x0, 0x0, r1}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'dvmrp0\x00', 0x102}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nicvf0\x00', 0x1432}) write(r1, &(0x7f0000000240)='3', 0x1) (async, rerun: 32) write$UHID_INPUT2(r1, &(0x7f0000001800)=ANY=[], 0xcd) (rerun: 32) 46.820147663s ago: executing program 3 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xbc, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @private1, 0x2}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4000100}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xffffffff}, @in6={0xa, 0x4e20, 0xe76, @empty, 0xa}, @in6={0xa, 0x4e22, 0x80000001, @private1, 0x1}, @in={0x2, 0x4e21, @broadcast}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r3, &(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000ac0)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f0000000b00)="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", 0x248) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000005c0)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000dc0)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x35, 0x0, "c98d95ee50c3a78294c18d072a0bae4428949225ff1fa090b9bbf971504b8b197a685cd1f2ec7e03f6530f044e4670cd195506482871d4c255105aec233f88ced3505e0f4e0c2d9a306d9f5dc2a08def"}, 0xd8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x1c00}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_TABLE={0x8, 0xf, 0x8}]}, 0x3c}}, 0x815) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000580)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) recvfrom$unix(r5, &(0x7f0000000740)=""/103, 0x67, 0x2041, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x2c5, &(0x7f0000001200)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28f, 0x6, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0xb}, {[@fragment={0x62, 0x0, 0xd, 0x1, 0x0, 0x4, 0x65}, @dstopts={0x89, 0x31, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @local}, @generic={0xe, 0xaa, "645c671bb9fcb8e2ec0bbb4df30c107841ba641779ee9cc097aa6c5392fd2cbd0da5e534e65470e8cc8514a241a3dafa71e9c9d9451562f99c6ab3eb88c48970f2e99ae951dddf06e38fe9070bcb3eed68e447152b13166bad88b7c1537ddd5adf4795deb03704b5296a1a76214e5a2fe5353cd8eec8d55490fa422e1eb1294569f101fa0adfd9811df8633a3959b163d18aeb6bd6792807f9fefde5fd5e0dac21bca7a523a534046afa"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x5, [0x4, 0x10001, 0x1, 0x6, 0x7, 0x1, 0xf91f, 0x8000, 0x1]}}, @generic={0xff, 0x60, "81cc272db1c9ab11aa3b69c7ebafb0e266e3218c02c3888eb7c5d97c2874a8fd27212434307e4d48f9acdf47d7b600aa29b3e950863a27b4dc9ccf46495918dc0cb572e332bebbc759e93e8e911e98ca7bdb2ea48c4c2f256f53025703a29dc5"}, @pad1]}, @dstopts={0x87}, @dstopts={0x0, 0x1, '\x00', [@jumbo, @ra={0x5, 0x2, 0x40a}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x7ff, {[@nop, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0xfffa}, @md5sig={0x13, 0x12, "73bc461436d4636dc7f0d24e2fd6d7f9"}, @nop]}}, {"60efbd1d37f699a55c174b639b646bd94dbddd6dca0757d15179cf4f8c97059743f906802d6d964fd97d2ea19750819e17fd59e0906c877b8bed21bb48c0c1503949b48c44f4126df963ef9792b830366dd48542ed7aca79791f492d8693c27be9ae435301da5d7fe113ccad9b93ffefe7f9e2187900e99084d404dcdc3f8098dccaf87055fa860543539e8bfb812f49510a6307ed0a1ffb5d9407"}}}}}}}, 0x0) 46.74566033s ago: executing program 33 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xbc, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @private1, 0x2}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4000100}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xffffffff}, @in6={0xa, 0x4e20, 0xe76, @empty, 0xa}, @in6={0xa, 0x4e22, 0x80000001, @private1, 0x1}, @in={0x2, 0x4e21, @broadcast}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r3, &(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000ac0)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f0000000b00)="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", 0x248) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000005c0)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000dc0)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x35, 0x0, "c98d95ee50c3a78294c18d072a0bae4428949225ff1fa090b9bbf971504b8b197a685cd1f2ec7e03f6530f044e4670cd195506482871d4c255105aec233f88ced3505e0f4e0c2d9a306d9f5dc2a08def"}, 0xd8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x1c00}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_TABLE={0x8, 0xf, 0x8}]}, 0x3c}}, 0x815) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000580)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) recvfrom$unix(r5, &(0x7f0000000740)=""/103, 0x67, 0x2041, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x2c5, &(0x7f0000001200)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28f, 0x6, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0xb}, {[@fragment={0x62, 0x0, 0xd, 0x1, 0x0, 0x4, 0x65}, @dstopts={0x89, 0x31, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @local}, @generic={0xe, 0xaa, "645c671bb9fcb8e2ec0bbb4df30c107841ba641779ee9cc097aa6c5392fd2cbd0da5e534e65470e8cc8514a241a3dafa71e9c9d9451562f99c6ab3eb88c48970f2e99ae951dddf06e38fe9070bcb3eed68e447152b13166bad88b7c1537ddd5adf4795deb03704b5296a1a76214e5a2fe5353cd8eec8d55490fa422e1eb1294569f101fa0adfd9811df8633a3959b163d18aeb6bd6792807f9fefde5fd5e0dac21bca7a523a534046afa"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x5, [0x4, 0x10001, 0x1, 0x6, 0x7, 0x1, 0xf91f, 0x8000, 0x1]}}, @generic={0xff, 0x60, "81cc272db1c9ab11aa3b69c7ebafb0e266e3218c02c3888eb7c5d97c2874a8fd27212434307e4d48f9acdf47d7b600aa29b3e950863a27b4dc9ccf46495918dc0cb572e332bebbc759e93e8e911e98ca7bdb2ea48c4c2f256f53025703a29dc5"}, @pad1]}, @dstopts={0x87}, @dstopts={0x0, 0x1, '\x00', [@jumbo, @ra={0x5, 0x2, 0x40a}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x7ff, {[@nop, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0xfffa}, @md5sig={0x13, 0x12, "73bc461436d4636dc7f0d24e2fd6d7f9"}, @nop]}}, {"60efbd1d37f699a55c174b639b646bd94dbddd6dca0757d15179cf4f8c97059743f906802d6d964fd97d2ea19750819e17fd59e0906c877b8bed21bb48c0c1503949b48c44f4126df963ef9792b830366dd48542ed7aca79791f492d8693c27be9ae435301da5d7fe113ccad9b93ffefe7f9e2187900e99084d404dcdc3f8098dccaf87055fa860543539e8bfb812f49510a6307ed0a1ffb5d9407"}}}}}}}, 0x0) 2.137941769s ago: executing program 0 (id=832): r0 = dup(0xffffffffffffffff) symlinkat(&(0x7f00000002c0)='.\x00', r0, &(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') unlink(&(0x7f0000000500)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) 2.059482052s ago: executing program 0 (id=833): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0x7, 0x1, 0x6fe, {{0x37, 0x4, 0x1, 0x3f, 0xdc, 0x68, 0x0, 0xb1, 0x2f, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x27, 0xf4, [@empty, @remote, @broadcast, @broadcast, @loopback, @remote, @local, @multicast1, @broadcast]}, @cipso={0x86, 0x51, 0xffffffffffffffff, [{0x0, 0x3, 'P'}, {0x0, 0x7, "93f59848e3"}, {0x0, 0xe, "dc538242085f172bb92728b4"}, {0x6, 0x11, "350be413177baf7dba6263661f69b8"}, {0x1, 0x2}, {0x5, 0x3, 's'}, {0x6, 0x10, "421d0c86745c8474a57486fb35ca"}, {0x6, 0xd, "e98dbfafb619813d7ef9a8"}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0xf, [{@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x34}}]}, @timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0x6, [{@local, 0x8}, {@remote, 0xfff}]}, @ssrr={0x89, 0x7, 0xea, [@multicast2]}, @noop, @generic={0x4a, 0xe, "7e3412ba15be69777beee262"}, @ssrr={0x89, 0xf, 0xc7, [@multicast1, @local, @private=0xa010101]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x302, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc85}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x2008080) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f00000009c0)={&(0x7f0000000400)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)="630d8dfe9cf1979fe2c839739c5c76a379c48f9c309a3de2cbb16a048c3108a2d51f137acf09cb9dbe1628528249e166bb3ed1bf6fe2d1aaa6b290929bcc1de76b8f79841c7b9ccbe7b21277d748e9f1d80629f57238d26ba88e9df0d84c84b9039cbe8cad3e0285ac460f519c2a2ac6591bd03eac786ca82f84f5400889c4e6fd569d29fa2aa4323a4ffa430202f9f8b1a7be65d493dfd00429c3dd8c50cdaeb1ea9b04019c2b816ad348107146dff02648ff6d29225e636f681dbe1b3e592b2f147081ac10a537e274ce94e7ed2360d0b4e08dda53e5", 0xd7}, {&(0x7f0000000580)="e3bf3c2a5bd20a331631df9f", 0xc}, {&(0x7f00000005c0)="a8e3dad31cd0d4babf8f2ecaf5441025489d28c171e079d9c381d49f4079a5f4d31e960db5f0c73e128ecadaef74d9a742e0652cc4842bf0491d2fba43b272edafc481803cafc205388533e487aada00dc1ad8bc02b6c9e8f2514e33d7d6d5894bd79bd4b8d8a45bc814ed2a91019701b1dab59d5c36bac3266e2e0063225f2b5844b77116ca7d61c6d77fd8c9fce88f48a6e0b52be81fb302b085e73f181be6c218f81c6951978a3eec9926c0ad6139e65493d66be1f813090a99d7169b6f995a18ddb83f249130905a94eaa2c91bdec9567a371378c62f7768fef7c95edd978223327d", 0xe4}, {&(0x7f00000006c0)="1a1176ba9bee0375896b428fe7463a23ef93c12501b01d1ef121e7a3d307d36386522063330d7163fc2a6f3cfafcd1979ba4152ec810eb6cf0f70c6ed72167751da3d7363e5d543a0af25f396de14caaa989874e22fe37a1327133bd1201d56b59e2df6c9ef15de4a5af748ce52a1675f037e5016f97a10d063b861c542d8bdaca50e7be356e39b45bd67582532c903cb2e9c7b0dfc230e35f3a25771114ffb07e53c39ec83d45ed10955cd0e979b8a09c7540a688a466bbfeb79b29299691a45d84c12067b9eabecd7655b3c43950bd2703c308", 0xd4}, {&(0x7f00000007c0)="95134b5d2bdbbf5cbafe3dff7dd2a98244fe374bf0293cf8282eee1c07d3ec287562ed1af2a461d9d2e200b5147663728d618dc22cbc416bb32ab73b70e53f203ec483af4592e13eebcaadf995b9e1802147b5ff74f4a1b6854d225721ff5f8fdc36453ae082d9edf8df9b113e5127735ad50db528ac304d96898d258346e49436aed986472691411c5e89", 0x8b}, {&(0x7f0000000880)="0789a0ae15316fe86ed3df9e6f14bf0c70ae428c898a48a8b6fed0357f65aff6b4a7c755a364478e34a7659e4c2587feaf142e88796d823744f4cf4e41b4a19f549cd72540a0523b953feffa9c837de17bb0329dd516dd0c983cbdd822a8252e327e67971990572bdf607996afd3f5f73e8e730aa5112a6c9ddeac863bf1ee9a155a8c46ed01fa87117a20e06c6cffe0f409ae9c43eebc06f4b959ee056ef5d0d0d4", 0xa2}], 0x6}, 0x20000040) getsockname$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) (async) syz_ublk_setup_io_uring(0x207b, &(0x7f0000000a80)={0x0, 0x4b06, 0x4000, 0x1, 0xd2}, &(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) r5 = syz_ublk_setup_io_uring(0x556c, &(0x7f0000000bc0)={0x0, 0x2791, 0x20, 0x0, 0x1be, 0x0, r0}, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) syz_io_uring_submit(r4, 0x0, r6, &(0x7f0000000d80)=@IORING_OP_WAITID={0x32, 0x8, 0x0, 0x3, &(0x7f0000000d00)={0x2a, 0x7, 0xfffffffc}, 0x0, 0x5}) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000e00)={0x1, 0x6}) (async, rerun: 64) r7 = accept$inet_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000e40)) (async, rerun: 64) close(r5) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000f00)={0x12, 0x10, 0xfa00, {&(0x7f0000000ec0), 0xffffffffffffffff, r0}}, 0x18) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000f40)={0x0, 0xffffffffffffffff}, &(0x7f0000000f80)=0xc) sendto$inet6(r9, &(0x7f0000000fc0)="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", 0x1000, 0x10, &(0x7f0000001fc0)={0xa, 0x4e20, 0x1, @empty, 0x7fff}, 0x1c) (async) writev(r5, &(0x7f0000002140)=[{&(0x7f0000002000)="0d8bf7f5050667a289e6934d5a32de6cc21ac5d12f404931f1f8af28fa9bf92956bc865bbae80dcde5b616e12e33de3e1f1ff016a45af5c8e86d9c1c07c8d4638fff168d703d8b0b87bd6b13ac9fee107ca6cdb7247b559e9c8cfbb0a0469867cfca619641542e785627e966c5c4f5c4d65f39ec564fbde7e327e36c167d886d05e8363902aa2460e23caf2d", 0x8c}, {&(0x7f00000020c0)="05b3ead7510139f99aa612080e57bbd2fd4718aad48b2fa03458794a4c5d18ec661422466ec43284598bcc8af41fa196576bac3f4e3d20f48cf5a11beddf40f676ba917ab704547f781192d1b2c2b7287e9603b4c3f1fb8fd8eec4327a35ac109ca0afa525d2108d7df8", 0x6a}], 0x2) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, 0x2, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xf}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) (async, rerun: 32) r10 = dup(r7) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000002300)={0xa, &(0x7f0000002280)=[{0x6, 0x5, 0xe, 0x3b0}, {0x2, 0x9, 0xc0, 0x9}, {0x1, 0xf, 0x3, 0x3}, {0x0, 0xd, 0x4a, 0x9}, {0xebb1, 0x6, 0xfd, 0x7e8}, {0x2, 0x5, 0xd, 0x10}, {0x0, 0x0, 0x6, 0x1}, {0x4, 0x3, 0x0, 0xdda0}, {0x4a, 0x8, 0x7, 0x7}, {0x1, 0xb, 0x1c, 0x8}]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000023c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x7c, r11, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5c, 0x78}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0x98, r11, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x98}, 0x1, 0x0, 0x0, 0x44800}, 0xc4) (async) r13 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000002680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r13, &(0x7f0000002740)={0x14, &(0x7f00000026c0)={0x0, 0x23, 0x36, {0x36, 0x30, "2db41b03acb7dd3b42854ba7a514ffc0a0a3676246e290bfb75cdf3a6d893ccaab188fde369e796231db1c6724dc2e5230082c87"}}, &(0x7f0000002700)={0x0, 0x3, 0x21, @string={0x21, 0x3, "6fe4a36536fd0d5ac4072ccc93d10b58ac73456512b0c5ae45cb268611b0d4"}}}, &(0x7f0000002980)={0x34, &(0x7f0000002780)={0x20, 0x18, 0x7d, "8cd6041781196a2c4791ee1bd29981045d9687e861d4fb67194e99bb66209461afde5ac46d69a24c8f16f5ac9b89fb8a626b11007b7253a263d88795ad711fe16d6e19dee40ba9736728db8b0fbe73b1b386df06fbd5155e6154d44bf149cb419ddfbd71911c494ef0679e2d763c76a09e969c7bb7cb9f18ae8551d9dc"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0xbe}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000028c0)={0xc0, 0xa1, 0x4, 0xfffffc01}, &(0x7f0000002900)={0x40, 0xa0, 0x4, 0x400}, &(0x7f0000002940)={0xc0, 0xa2, 0x2f, "a02bce1dfb68f93fe0f6b134db917595f5888e654ff656070dbf3f5b60d55c31cfaa37be4695740f2cfb74e72b55e5"}}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) (async, rerun: 64) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002a00)={0x250, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3fac}, @NFQA_PAYLOAD={0xb4, 0xa, "1406b8882f908239a3abd86078ef822d5472d44ae45fa6db86b5d7dc5baf901917f959c7306cb9e0633ae8a18503b7b23702e3c4add9e62dcf44afdf98ac6c5c98f4000f650cccf935a45dd9ae9ab2214359ff1cabe9d0ab331045314087803d1479d9e78e96107b0da2a9b7c29bba604c4d43b27c15aeb767d0eae26ccbeed305e2ba9358a4b8ee37baaeb79da15399bc8ea6df22ea6f953c5b811e18902975d3cef2aaa63dcc571a8e6e3d0d21a92f"}, @NFQA_EXP={0x174, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xb950}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7a3}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x1) (rerun: 64) 1.499035966s ago: executing program 1 (id=841): syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) syz_emit_ethernet(0xa6, &(0x7f00000003c0)={@random="f649ed21995b", @empty, @void, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x3, 0x7, 0x98, 0x68, 0x0, 0x7, 0x6, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x24, 0xe1, 0x3, 0x8, [{@multicast2, 0x8}, {@empty, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}, @ssrr={0x89, 0x7, 0xf0, [@local]}, @rr={0x7, 0xb, 0xb6, [@local, @empty]}, @ssrr={0x89, 0x7, 0x1a, [@remote]}]}}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7f, 0x0, 0x1, 0x4, 0xfff, 0x2, 0x4e22, 0x4e23, 0x4, 0x1}, [{0xfe000, 0x101, 0x1, 0x5, 0xff, 0x4, 0xb, 0x1}]}}}}}, &(0x7f0000000480)={0x1, 0x4, [0xa6f, 0xc49, 0x390, 0x52e]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') lseek(r4, 0x1000000, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 1.438074856s ago: executing program 1 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc\x00', 0x1ff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = fcntl$dupfd(r1, 0x0, r0) write$ppp(r3, 0x0, 0x1f) (async) mount(0x0, &(0x7f0000001600)='./proc\x00', &(0x7f0000001640)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000016c0)='100', 0x3) (async) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x40a40, 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='./file2\x00', 0x2c3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mount$overlay(0x0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0, &(0x7f0000001840)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.435835641s ago: executing program 1 (id=844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000bc0)=0x100000001, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv6_newroute={0x64, 0x18, 0x405, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x24, 0x16, 0x0, 0x1, @seg6={{0x20, 0x1, {0x1, {0x11, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, {@remote}}}}}}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0xd4, 0x24, 0x220, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x2, 0xfff1}, {0xc, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x780, 0x6, 0x200, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0x2, 0xb53, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0xa, 0x4, 0x0, 0x6}}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x0, 0xff, 0xfffffff9, 0x1, 0x1, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xd, 0x7, 0x9312, 0x10001, 0x1, 0xc, 0x1, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}]}]}, 0xd4}}, 0x0) (async) r4 = accept$inet_tcp(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) bind$inet(r0, &(0x7f0000000c00)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x21, 0x7}, 0x4) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) read$FUSE(r6, &(0x7f0000000d80)={0x2020}, 0x2020) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, 0x0, &(0x7f00000002c0)) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003e31050126bd70007bdbdf2511000d000100053e3e71ed07348ace0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) (async) ioctl$MEMERASE64(0xffffffffffffffff, 0x40104d14, 0x0) (async) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x9, @none, "81f70b17a78d69e405cd58ba2dd4633a34ade8f2eccadcc7b4a64557ac894e7b6fffa024dc775bc9d1743e1835a5cf8b261b10ad4846fabb43accba26f1ce4ee1d7c641fd2ed2223a80d0f5917f4587035bd40f8a671b5f200d610b051787d31f6a635bf16caa0e8960cde785876a11aba557889f7189349face559010659f42a161f3ca8a078e1e55b95c054ae721a81239c88b7d4d46f22997c9c10a4727be9e14d2aea363179eaf8c2f056cb4ed45dec940a764a22fb743acffa0d1d3a25f776d720368096632f6bd1a0e70463ae272e6f7cbc0daebb3b606f197679c56ec4386fe3a7a03608a8f09aeb5a898f19ed3d3d1d4fa2e1458"}}}, 0x102) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) connect$inet(r0, &(0x7f0000000c40)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000c80)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000cc0), 0x4) (async) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x68, &(0x7f0000000540), 0x4) (async) sendto$inet6(r10, &(0x7f0000000580)="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", 0xff, 0x40, &(0x7f0000000680)={0xa, 0x4e23, 0xff800000, @private0, 0x9}, 0x1c) (async) sendto$inet(r0, &(0x7f0000000d00), 0xffffffffffffff94, 0xb, 0x0, 0x0) 710.148449ms ago: executing program 0 (id=851): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058ff0b, &(0x7f0000000100)=@userptr={0xffffffff, 0x3, 0x4, 0x0, 0x93af, {0x0, 0xea60}, {0x3, 0x8, 0x1, 0x9, 0xfd, 0x8, "5ab96e73"}, 0x6, 0x2, {0x0}, 0x8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x1, 0x6, 0xee9, {{0x12, 0x4, 0x0, 0xa, 0x48, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x1c, 0x99, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x900000}, {@multicast2, 0xa}, {@local}]}, @lsrr={0x83, 0x17, 0x20, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@ipv6_getroute={0x128, 0x1a, 0x800, 0x70bd27, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x7, 0xfd, 0x9, 0x2a00}, [@RTA_NH_ID={0x8, 0x1e, 0x7f}, @RTA_ENCAP={0x48, 0x16, 0x0, 0x1, @ila=[@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x2}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x2}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_CSUM_MODE={0x5}]}, @RTA_SRC={0x14, 0x2, @mcast1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ip6=[@LWTUNNEL_IP6_TC={0x5, 0x5, 0x80}]}, @RTA_NH_ID={0x8, 0x1e, 0x7}, @RTA_PREFSRC={0x14, 0x7, @local}, @RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @ila=[@ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}, @ILA_ATTR_HOOK_TYPE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_HOOK_TYPE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}]}, @RTA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @RTA_TABLE={0x8, 0xf, 0x7f}, @RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x128}}, 0x0) 709.691909ms ago: executing program 0 (id=852): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000001c00)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001c40)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.net/syz0\x00', 0x1ff) r5 = syz_open_dev$video(&(0x7f0000002bc0), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000002c00)='O', 0x1) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x2, 0x0, 0x3}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000002c80)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "00009900"}, 0x0, 0x2, {&(0x7f0000000040)}, 0x8, 0x0, r1}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000002d40)=0x1000003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) syz_io_uring_setup(0x1af2, &(0x7f0000000380)={0x0, 0x4005c36, 0x200, 0x1, 0xa, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x32) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x2d) userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x39}) close(0x3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 409.961871ms ago: executing program 4 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x450, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x47}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x357}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3f2, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @device_b, @device_b, @initial, {0x2, 0x5}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x4, @random=0x75ad, 0x1080, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x24}, {0x9}]}, @void, @void, @val={0x6, 0x2, 0xf}, @val={0x5, 0x53, {0xf9, 0x5, 0xb2, "c1b7cbe8402b44f6f5d0aa3a23671a08da6ca7eebc2e433eb8a13812f408d4833399614efadcca275a7f5426be10f284c644c56eecd68555f2926d13af3d72940651a2fcfd6363adb06f82a4aa225c67"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x43, 0xb9, 0x9}}, @val={0x2d, 0x1a, {0x80, 0x0, 0x1, 0x0, {0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x3}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x52, "7b5fefbbf0f7942c04d7d6dae32682c2a47475e3a3cfcce61edf902fb8e5d892df5aafabc5ad2784cc57025015f4d90f4854a851e7c4e58e872e1ac0ba5c2f6117818a16f763bfe3c7b5d1c88934362dc70b"}, {0xdd, 0x16, "d73a87fb27a7aecfdca20a655e52901f52136994f1c2"}, {0xdd, 0x76, "fb0dcced4743257a44199d506dc7135d544ef1821293d7e0b31d48ea605816ec1c926f956b104afc7197086d74cc2af7780aefecb49d3cfac5ded28976c591f0901cbbfce6f34007a3232eccaaf71ba7943b2253b49d8a0190fae4345531856ef5d665b3dea5a74d98e698859be3a8086737c5eb0876"}, {0xdd, 0x9d, "f8d36b8aa3c9ffbfd45b4a52c82b9c81f947f23bed0d0a37011d0e11bc95a3fff8a5e349dc3a9f141474a935dde9a699e03bbd9b65fa9828bb27ce3ae913ac8957f313763bad3fa9f977ac50c0c811933660f9023bc03cb5a5ed586d4e46fd26cd68719d95b2c067230c5350267aa9e4833305ac66e688f15aea83a2c86d14d09de605208d31da07f5de2385a8010e974346389f5b112268c01e954160"}, {0xdd, 0xfb, "0602e4b7dabfd397c06b2f4e789c7304134a8998ea5053371d1caf3f03d202c759d833b16ac2faa1b22d5706bc77a9a2b49a00ccb47e3329a211c3d06a27d968f11e0b96d2529afcbbfa32463863cfc6fee6bbbaaa2417dc0985a32572abf8f094e4fbe94993188a0be2e7487032b7bb8fd846596db3f0002dac84c92aca727cfa0984dd788309e3ae65c0239249536e1418b2e60826ee9e947ebda6ecafcbe130f5c7c780d1da70a9433fc89d969a66373fe4379a0c5f333a99ae5c3a80fc21233de7117ff65e0640ddec14378dc087f9a24e7af8fc6cafe282fc0e411e0ed6e85b0ae0908d694b95cf5f6646983afbee7c7734d8730a6ce7508e"}, {0xdd, 0x9c, "2892649b4989b54fea31b114c7e72924c92448341ca57136ef35af41f64646dc5c57ccc81b52221f8680fe295ea867db0c89c2807fe28047640507117fe8260f8b1336a55d4c6d447a40f5905807f6e46bf305428cd3aa2fa6e9ed3d0cc51d1916ec0ee94614d19740a94c9ef1b4706f1c90f80258c713410b2379f79784856bf7958d184e0bea5d430cbb2993780a316d96aac7b47cf82018450602"}, {0xdd, 0x17, "93d94d53486de36c771bc403485d624e3948b179b690aa"}]}}]}, 0x450}}, 0x61) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0xb, 0x0, &(0x7f0000001a80)) 409.391032ms ago: executing program 0 (id=860): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYBLOB="840cd351e2bcf4c506b17b51cf12517ef73342b940165839c8aae5bde6799306f0fadf61bdc02de5b8421618f0d3e7340f2d425b6a5df5edccb56e178aba395949b346b5cee087ceef8120a2a622addb5b85e758c933d5156661007298ccfb2826c4f38c4408ac4e204cdb192311fc3dd45373d499f237ddf2eab51c64238fd92990cc29df33982c0d60c44ef68f5c876bc9054194da1a01f3b371f9a2be9290fc5f3b30a09ab0c0e32e6a3b01525d3033a7e5001da9c553ab7ed9bc84085dea3d387c35c22af65a60705ae85627b073b8e88c3b8b2ecfe6f360529d31b2da8513a5bba7b0df696836d29929e8e59a4c0a5cc303951966", @ANYRES64=r1], 0x24}}, 0x20000010) 347.532328ms ago: executing program 0 (id=862): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10ff43, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x2002}], 0x1, &(0x7f0000000100), 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000180)=[{{&(0x7f0000000240)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000380)={r5, 0x8}, 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000000)={0x650c, 0x1, 0x2}) 268.141005ms ago: executing program 4 (id=864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)='5', 0x1}], 0x1) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xf6}], 0x1, 0x40002001, 0x0) (async, rerun: 64) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000000051229dc9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000}, 0x50) 208.621665ms ago: executing program 4 (id=867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = timerfd_create(0x0, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000001f40)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x1, 0x2c45, 0x4, 0x0, 0x10, 0x2}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000008c0)={0x1, 0x200, 0x99e, 0x8}, 0x10) sendmmsg$inet(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040040) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 207.416263ms ago: executing program 5 (id=868): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x1, 0x200) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000180)=0x2) write(r1, &(0x7f0000000080)="3100e74feb8c91aa540379bbac746f72fd1d42edf507cc", 0x17) r5 = openat(r3, &(0x7f0000000000)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x84402, 0x18) symlink(&(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8e, 0x3, 0x7, @mcast2, @mcast2, 0x80, 0x1, 0x3, 0x401}}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x1}, {0x5, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(r5, &(0x7f0000000400)='0', 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) preadv2(r8, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/4096, 0xe0000}], 0xc4, 0x3000, 0x0, 0x9) 206.509855ms ago: executing program 4 (id=869): clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000004080), 0x2, 0x0) (async) r1 = open$dir(&(0x7f00000040c0)='./file0\x00', 0x800, 0x80) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004100), 0x459200, 0x0) (async) r3 = syz_open_pts(0xffffffffffffffff, 0xc0000) (async) r4 = socket(0x8, 0x2, 0x0) connect(r4, &(0x7f0000004140)=@ethernet={0x6, @multicast}, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000004200)) r6 = syz_open_pts(r5, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000004240)=0xf) (async) ioctl$TCSBRK(r6, 0x400455c8, 0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000004280)=0xc0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000042c0)=0x1) (async, rerun: 32) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000004300)=0x2f) (async, rerun: 32) r7 = fsopen(&(0x7f0000004500)='fuseblk\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000004540)='\x00I;\xf6\xc8\x15\x94\xfa,\xc8\xb6\xac\x96\x90\x12H\xa34:~\xb3\xcaJT\xe2\xac\x1e\rXk\xe2k\x86\xe0\xaf\xf4\xb46!\x00\x83U\xd8\x02\xe5gn)\xa4\xfe\x00E\xf7\\jgN\xe0D/oj\xad\xd2\x00\x00\x00\xa6U$\xc4\a\x02\x96\x1c\xa1\x1d\xef5\xe8\x7f\xe3\x90\xfd!\xdeZ\x06\x11\x83\xf47\x01\xe1R2\xc1\xae!\xb7\xf6A\xa30\x94\xa3\x1dj$\x914z\x7f\xa20{\xfa)\xb2j\xba\x1f\x97q\x9bG\xc6\xc0u\x89\'\r\x96#6\x1f\f.m+\xa7~w\xc8+\x99\x12\x7f\xc9\x89\x0f\x05\v)\x9fO\x048\xf4bf\x18\x8b\x99\xb8\v\xeaY\xb6\xccSR\xa5\x86\xdf\xb3\x16}BN\x82\xfam\nx\x9f\xe0o\xc4*\xf0\x8d18\xd8\xf2\x1fr\xd7i,\xb0\xe9\x19\x9b[\xbe\x16\xe6\xc3N\xcb0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x40000) (async) fstat(r1, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000004b80)='system.posix_acl_access\x00', &(0x7f0000004bc0)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="100006000000000020"], 0x54, 0x1) syz_open_dev$mtd(&(0x7f0000000040), 0x450, 0x4040) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r3, r3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000004a00)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 150.162981ms ago: executing program 5 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000000)) fallocate(r0, 0x0, 0x2000, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 70.038513ms ago: executing program 4 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000003d00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x17) mount(&(0x7f00000007c0)=@filename='mtd0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='jffs2\x00', 0x800000, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x80000000, 0x4, "af1086b36f959ba7a02bd1834b1d46e05b5028e783a67b9f731bebf90241258821a9dd19e71bd8058da24738ece5c8b76fdbb3c0a795d7cedb75c66c9e05e0ae84e9642e421f7a01b2f8764df079b5a81edc4003f289e28b2a115f8020dd0c1dbc7ee0276f8df20ccad67680ff2ce2810ec92f84d311c3ff0847c9399fabf91fcb928ae876f93f1910cd1531ac4c29812add1ae2cdac2cb3c61c4432632f6df413a19aa833e4d6981eefb957006c99191bf04528fe5f4f56ce1560e421562f6cd8df34e1d120dec604557ab5dadffd65191e26de98c5cb1ecd9e8eca6c433b4016e1dba15c045626714bc48c6b758edd3e7420334485ae536d776e43053fbc05", 0x1, 0x28, 0x17, 0x3, 0x7, 0xb, 0x0, 0x1}}}, 0x120) chdir(&(0x7f0000000880)='./file0\x00') syz_open_dev$dri(&(0x7f0000000100), 0x94, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000b44000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f00000020c0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '#\'}(^'}], 0xa, "41eaca4006d9ebe48fbabec7"}, 0x1003) mkdirat(0xffffffffffffff9c, &(0x7f0000003cc0)='./file1\x00', 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/7, 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000001c0)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000740)={0x0, 0x0}) mount$bind(&(0x7f0000000480)='mtd0\x00', &(0x7f00000004c0)='mtd0\x00', &(0x7f0000000500), 0x1000080, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000f80)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000fc0)={'veth0_virt_wifi\x00', 0x400}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001000)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd}, {0xe}, {0xe, 0x4}}, [{0x8, 0xb, 0x6}, {0x66, 0xb, 0xff}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x78d0}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x55}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000240)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r3}, 0x20) 69.355158ms ago: executing program 5 (id=873): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r0 = gettid() (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001dc0)={0x2020}, 0x2020) (async) rt_sigqueueinfo(r0, 0x21, &(0x7f0000003e00)={0x0, 0x0, 0xfffffffb}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='user.syz\x00') close(r2) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) (async) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 67.74894ms ago: executing program 1 (id=874): r0 = socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000010000104000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00400000444002003c0012800b000100697076746170"], 0x5c}}, 0x2000000) write(r1, &(0x7f0000000780)="260000c5a27413383aa0dab32b451948eee3e271da004703050000070000000000000120002b1f00fa5724f796804346d5011badab90118d31531c58379d86d924d27ebb5c276c52a64e7a6390a7103dfea29d", 0x53) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x1, 0x4) r2 = mq_open(&(0x7f00000000c0)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0xb}]}, {0x0, [0x0, 0x61, 0x2e, 0x30, 0x30]}}, &(0x7f0000000200)=""/8, 0x2b, 0x8, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000000007911b800000000000400000000bc39009500000c00000000af05e8898996865146e0856baaac48ea3ec5dc5e0be7ea530338ae8f40888b5bb2b3c42b8f6afb8bd6780a2a3b8294ae1d70a2ec27615ccca00f12386da2bf067224db586b5afa03ac780efe55af198d580a296b14bec20cfdba44caacee220feb850c804953587a48c3277da948488f2e61aa38450eb66979e7d1b670ddf3e205c56df4fce02c0fcd3e1128a9f7e016a93c40f15608762cde7b34e341d841c80379fbaf46303cbe5f2697"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r4, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 10.372281ms ago: executing program 5 (id=875): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000ac0)) r1 = memfd_create(&(0x7f0000000440)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x169380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000ec0)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000f40)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000f40)={'syzkaller0\x00', @link_local}) fsetxattr$security_capability(r1, &(0x7f0000000a40), &(0x7f0000000a80)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r1, 0x0, 0x0) (async) fchown(r1, 0x0, 0x0) creat(&(0x7f0000001480)='./file0\x00', 0x71) (async) creat(&(0x7f0000001480)='./file0\x00', 0x71) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x80, '\x00', 0x0, r6, 0x3, 0x1, 0x4}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x80, '\x00', 0x0, r6, 0x3, 0x1, 0x4}, 0x50) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001000), 0x2600, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000012c0)={'tunl0\x00', &(0x7f0000001140)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0xbe0e, 0xd137, {{0x4d, 0x4, 0x1, 0x3, 0x134, 0x67, 0x0, 0x8, 0x29, 0x0, @empty, @loopback, {[@noop, @timestamp={0x44, 0x20, 0xe5, 0x0, 0xb, [0x2ee4, 0x200, 0xf, 0x1, 0x9, 0x2, 0xe]}, @timestamp_prespec={0x44, 0x44, 0x9e, 0x3, 0x1, [{@remote, 0x1000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0xe}, {@private=0xa010102, 0x9}, {@local, 0xd}, {@local, 0x101}, {@empty, 0xe26a}, {@multicast2, 0xc}]}, @ra={0x94, 0x4}, @generic={0x83, 0x3, '('}, @timestamp={0x44, 0xc, 0xa0, 0x0, 0xf, [0xd6f, 0x8]}, @ssrr={0x89, 0x17, 0x1a, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @empty]}, @cipso={0x86, 0x38, 0x0, [{0x7, 0x9, "363d84c8eb4c49"}, {0x2, 0xc, "9322fd939b5a20fd0f2e"}, {0x0, 0xe, "bb278710345c11fd081f1247"}, {0x2, 0xf, "94c0fb0621fa90f5e083a1e06b"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0x70, 0x1, 0x0, [{@local, 0x1}, {@private=0xa010101, 0x8}, {@remote, 0xc}, {@multicast2, 0xb1}, {@broadcast, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x5}, {@loopback, 0x8000}, {@remote, 0x4aaf}, {@loopback, 0x98b}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x12, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd12, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001100)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x20, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x4, 0xa, 0x6e, 0xfffffffa}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001380)=[{0x94, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x1, 0x9}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x12, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd12, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001100)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x20, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x4, 0xa, 0x6e, 0xfffffffa}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001380)=[{0x94, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x1, 0x9}], 0x10, 0x9}, 0x94) 1.711661ms ago: executing program 1 (id=876): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x883, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20220, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x5000, 0x0, 0x0, @by_dev={r2}, [@raid={0x0, 0x34d8, 0x0, 0x88, 'raid\x00', {'raid10', 0x20, '3 64 stripe_cache 256', 0x20, 0x1, [{0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}}]}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$sysctl(r3, &(0x7f0000000100)='0', 0x2) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffdf, 0x3}, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x80, &(0x7f0000000300)="9133551b4761d03a2aa3195f920d24672cb091e44a76b47886772c9f5b4498c90fc106e04036bd21afe0d445b93cfd82029cd9a3697fb685f82eeed5fdc67f93cab29d5e8ffb6b545b00b5de7353bfb9b807265fff2ed08b4ada495c9e4964895bfc8733197b3dbfb6470c49450ff0a434090df43f561ce77dea73f760b24c12c5945c8eb77aed5b8c9e8cea7bf635e6d4ef8f214a2e63a0745fb734e55f2c2174d09857ef898619321190da5bab75129a573ffbe0631f19361d9179d17a17bb6f728934fe8b2dea0e", 0xc9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) write(r5, &(0x7f0000000240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000c80)=""/4096, 0x0, 0x1000, 0x3}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001c80)='attr\x00') write(r0, &(0x7f0000000040)="45000000040000000000", 0xa) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f00000002c0)=0x8000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x220201, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000c40)={0x0, 0x0, 0x8, 0x102, 0x2132}) 488.014µs ago: executing program 1 (id=877): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000001c0)=""/41, &(0x7f0000000200)=0x29) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 296.783µs ago: executing program 5 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x80000001, 0x8a8d}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'veth1_vlan\x00', 0x4000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = fsopen(&(0x7f0000000500)='sysfs\x00', 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000680)="4b0003000000", 0x6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x1) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000600)={0x0, 0x2, 0x10001, 0x2, 0x1002, 0xffffff73}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000000)={0x3, 0x4, 0xd}) write(r1, &(0x7f0000000140)="00008847d100582a", 0x8) 0s ago: executing program 4 (id=879): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x2001, 0x1, 0x1, 0x12, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00 \x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000092ff8200736f757263655f6d61635f69735f6d756c746963617374000400820004000000"], 0x58}}, 0x4010) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xd) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) r11 = syz_open_dev$admmidi(&(0x7f0000000bc0), 0x20, 0x0) readv(r11, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/144, 0x7c}], 0x1) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d00), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r12, 0x5100) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r10, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000880)={'syztnl0\x00', r7, 0x8080, 0x20, 0x8, 0x2, {{0x1a, 0x4, 0x3, 0x8, 0x68, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@timestamp={0x44, 0x20, 0xfe, 0x0, 0x9, [0x4, 0xd, 0x3, 0xffffffff, 0x0, 0xfffffff9, 0x6f0]}, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0x1a, 0x3, 0x7, [{@remote, 0xc2c}]}, @ssrr={0x89, 0x1b, 0x28, [@remote, @loopback, @rand_addr=0x64010100, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0x7, 0x2c, [@rand_addr=0x64010102]}, @end]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=@newtfilter={0x218, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10, 0xffff}, {0x0, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x1e8, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x10}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_mirred={0x15c, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x0, 0x4, 0x7fff}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x3, 0x1, 0x6, 0x3}, 0x7, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xbd, 0x1, 0x2, 0x6}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xfffffffa, 0x1, 0x8, 0x6}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xffffffff, 0x10000000, 0x2, 0x6}, 0x1, r7}}]}, {0x8f, 0x6, "b66488e5254832733717bb34fafdae9192d076614003cd7aaea7f07e791fc0ede56dbf7d80877770528a02ae9625d34ee3a22bb9e54d9fd377420d37aabe1ffb94d9038ba7b246dc33bdb0a2e5d0befb14ce22f7350393fbe4d446c6717dda17a1bf7c01e09924047190883c3a0e655ce84eda3aca8d5a7905c3a1f5f181cc3723b9ae740ec43b00981b28"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x6c, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x28, 0x6, "e3ecd83a5f6dd3d32bc85b00bc7879f79bab2988b71bc98f78607b18f295117acb029b80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x218}}, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r14, 0xffffffffffffffff, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000500)=0x2) kernel console output (not intermixed with test programs): tes in process `syz.3.307'. [ 76.672279][ T7291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.676670][ T7294] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 76.676687][ T7294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.308'. [ 76.677894][ T7294] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 76.683267][ T7294] FAULT_INJECTION: forcing a failure. [ 76.683267][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 76.683304][ T7294] CPU: 3 UID: 0 PID: 7294 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 76.683326][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.683338][ T7294] Call Trace: [ 76.683357][ T7294] [ 76.683365][ T7294] dump_stack_lvl+0x100/0x190 [ 76.683430][ T7294] should_fail_ex.cold+0x5/0xa [ 76.683448][ T7294] should_failslab+0xc2/0x120 [ 76.683478][ T7294] __kvmalloc_node_noprof+0x113/0x9b0 [ 76.683490][ T7294] ? do_raw_spin_lock+0x128/0x260 [ 76.683502][ T7294] ? find_held_lock+0x2b/0x80 [ 76.683513][ T7294] ? simple_xattr_alloc+0x6c/0xd0 [ 76.683529][ T7294] simple_xattr_alloc+0x6c/0xd0 [ 76.683540][ T7294] shmem_initxattrs+0x16a/0x650 [ 76.683556][ T7294] security_inode_init_security+0x242/0x370 [ 76.683592][ T7294] ? __pfx_shmem_initxattrs+0x10/0x10 [ 76.683606][ T7294] ? __pfx_security_inode_init_security+0x10/0x10 [ 76.683619][ T7294] ? selinux_determine_inode_label+0x1ab/0x400 [ 76.683637][ T7294] shmem_mknod+0x2ce/0x480 [ 76.683654][ T7294] ? __pfx_shmem_mknod+0x10/0x10 [ 76.683669][ T7294] ? inode_permission+0x377/0x630 [ 76.683682][ T7294] shmem_mkdir+0x31/0x80 [ 76.683696][ T7294] vfs_mkdir+0x36d/0x8a0 [ 76.683709][ T7294] ovl_workdir_create+0x447/0xaa0 [ 76.683746][ T7294] ? lock_acquire+0x1d1/0x380 [ 76.683762][ T7294] ? __pfx_ovl_workdir_create+0x10/0x10 [ 76.683775][ T7294] ? mnt_get_write_access+0x52/0x2f0 [ 76.683791][ T7294] ? mnt_get_write_access+0x1ec/0x2f0 [ 76.683805][ T7294] ovl_fill_super+0xf67/0x5fd0 [ 76.683831][ T7294] ? __pfx_ovl_fill_super+0x10/0x10 [ 76.683845][ T7294] ? __pfx_sget_fc+0x10/0x10 [ 76.683855][ T7294] ? hook_capable+0x1bc/0x500 [ 76.683876][ T7294] ? rcu_is_watching+0x13/0xc0 [ 76.683887][ T7294] ? cap_capable+0x107/0x430 [ 76.683904][ T7294] ? __pfx_ovl_fill_super+0x10/0x10 [ 76.683918][ T7294] get_tree_nodev+0xe3/0x190 [ 76.683930][ T7294] vfs_get_tree+0x92/0x320 [ 76.683946][ T7294] path_mount+0x7d0/0x2850 [ 76.683965][ T7294] ? __pfx_path_mount+0x10/0x10 [ 76.683980][ T7294] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.684029][ T7294] ? putname+0xb1/0x110 [ 76.684042][ T7294] ? kmem_cache_free+0x127/0x6c0 [ 76.684063][ T7294] ? __x64_sys_mount+0x293/0x310 [ 76.684078][ T7294] __x64_sys_mount+0x293/0x310 [ 76.684095][ T7294] ? __pfx___x64_sys_mount+0x10/0x10 [ 76.684117][ T7294] do_syscall_64+0x123/0x7b0 [ 76.684132][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.684143][ T7294] RIP: 0033:0x7fef46da8f19 [ 76.684153][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.684163][ T7294] RSP: 002b:00007fef47cbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.684174][ T7294] RAX: ffffffffffffffda RBX: 00007fef47025fa0 RCX: 00007fef46da8f19 [ 76.684180][ T7294] RDX: 0000200000001100 RSI: 00002000000010c0 RDI: 0000000000000000 [ 76.684186][ T7294] RBP: 00007fef46e37f6d R08: 0000200000001140 R09: 0000000000000000 [ 76.684192][ T7294] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 76.684199][ T7294] R13: 00007fef47026038 R14: 00007fef47025fa0 R15: 00007fff44be9098 [ 76.684214][ T7294] [ 76.684884][ T7294] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 76.785489][ T855] usb 5-1: not running at top speed; connect to a high speed hub [ 76.785518][ T855] usb 5-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 76.786457][ T855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.786501][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.788048][ T7305] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 76.806881][ T855] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 76.819822][ T855] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 76.870906][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 76.959980][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960151][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960307][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960374][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960429][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960481][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.960537][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 76.971769][ T7316] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 77.003941][ T5789] batman_adv: batadv0: Interface deactivated: syz_tun [ 77.025126][ T5789] batman_adv: batadv0: Removing interface: syz_tun [ 77.026613][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.027009][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.032087][ T35] usb 5-1: USB disconnect, device number 16 [ 77.041095][ T35] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 77.041609][ T35] cyberjack 5-1:1.0: device disconnected [ 77.171907][ T5783] Bluetooth: hci2: command tx timeout [ 77.253640][ T5859] team0: Port device netdevsim3 removed [ 77.254536][ T5859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.355218][ T5859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.425889][ T5859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.478800][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.490360][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.497962][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.509366][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.509937][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.512505][ T5859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.700332][ T5859] bridge_slave_1: left allmulticast mode [ 77.700354][ T5859] bridge_slave_1: left promiscuous mode [ 77.700548][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.713207][ T5859] bridge_slave_0: left allmulticast mode [ 77.713229][ T5859] bridge_slave_0: left promiscuous mode [ 77.713423][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.850190][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.856024][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.857437][ T5859] bond0 (unregistering): Released all slaves [ 77.869682][ T5859] bond1 (unregistering): Released all slaves [ 77.881774][ T5859] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 77.883147][ T5859] bond2 (unregistering): Released all slaves [ 77.894070][ T5859] bond3 (unregistering): Released all slaves [ 77.987463][ T7369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=7369 comm=syz.0.323 [ 78.015891][ T43] kauditd_printk_skb: 110 callbacks suppressed [ 78.015904][ T43] audit: type=1400 audit(1794415817.377:670): avc: denied { write } for pid=7377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.016080][ T43] audit: type=1400 audit(1794415817.377:671): avc: denied { add_name } for pid=7377 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.016272][ T43] audit: type=1400 audit(1794415817.377:672): avc: denied { create } for pid=7377 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.016803][ T43] audit: type=1400 audit(1794415817.377:673): avc: denied { write } for pid=7377 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth6.link" dev="tmpfs" ino=2456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.017176][ T43] audit: type=1400 audit(1794415817.377:674): avc: denied { append } for pid=7377 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" dev="tmpfs" ino=2456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.051974][ T43] audit: type=1400 audit(1794415817.417:675): avc: denied { connect } for pid=7375 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.089133][ T43] audit: type=1400 audit(1794415817.447:676): avc: denied { write } for pid=7387 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.089643][ T43] audit: type=1400 audit(1794415817.447:677): avc: denied { remove_name } for pid=7387 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=2456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.089735][ T43] audit: type=1400 audit(1794415817.447:678): avc: denied { unlink } for pid=7387 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=2456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.095156][ T7346] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.148851][ T43] audit: type=1400 audit(1794415817.507:679): avc: denied { read write } for pid=7391 comm="syz.4.326" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 78.156630][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.173195][ T7393] tmpfs: Using encoding : utf8-12.1.0 [ 78.176036][ T7393] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.233749][ T7392] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 78.393697][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.469226][ T5859] hsr_slave_0: left promiscuous mode [ 78.471316][ T5859] hsr_slave_1: left promiscuous mode [ 78.471698][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.471709][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.476986][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.476998][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.486765][ T5859] veth1_macvtap: left promiscuous mode [ 78.486795][ T5859] veth0_macvtap: left promiscuous mode [ 78.486900][ T5859] veth1_vlan: left promiscuous mode [ 78.486951][ T5859] veth0_vlan: left promiscuous mode [ 78.542328][ T7419] input: syz1 as /devices/virtual/input/input17 [ 78.727557][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 78.736311][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 78.872807][ T7426] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.922667][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 78.922687][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 79.049492][ T5491] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.057800][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.057895][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.057982][ T7346] bridge_slave_0: entered allmulticast mode [ 79.059283][ T7346] bridge_slave_0: entered promiscuous mode [ 79.060965][ T7451] cgroup: Unknown subsys name 'obj_type' [ 79.061435][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.061526][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.061605][ T7346] bridge_slave_1: entered allmulticast mode [ 79.061943][ T7451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 79.061978][ T7451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 79.062860][ T7346] bridge_slave_1: entered promiscuous mode [ 79.099919][ T5859] IPVS: stop unused estimator thread 0... [ 79.106607][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.129130][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.150437][ T7346] team0: Port device team_slave_0 added [ 79.152600][ T7346] team0: Port device team_slave_1 added [ 79.173803][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.173837][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.173856][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.175161][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.175172][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.175191][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.234115][ T7346] hsr_slave_0: entered promiscuous mode [ 79.234547][ T7346] hsr_slave_1: entered promiscuous mode [ 79.234852][ T7346] debugfs: 'hsr0' already exists in 'hsr' [ 79.234861][ T7346] Cannot create hsr debugfs directory [ 79.239022][ T7461] nvme_fabrics: found same hostid 6243fa42-f385-490c-9481-53d23688f2d6 but different hostnqn n [ 79.331838][ T5491] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.511997][ T7346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.513778][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.514192][ T7346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.515713][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.516088][ T7346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.517693][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.518088][ T7346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.519669][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.530675][ T5782] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 79.537603][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.537652][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.537755][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.537798][ T7346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.567225][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.570840][ T5783] Bluetooth: hci3: command tx timeout [ 79.579653][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.580149][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.591425][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.597524][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.597571][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.602059][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.602104][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.670775][ T5782] usb 5-1: device descriptor read/64, error -71 [ 79.875728][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.941376][ T5782] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 79.990296][ T7500] Cannot find add_set index 1 as target [ 80.050289][ T7346] veth0_vlan: entered promiscuous mode [ 80.054959][ T7346] veth1_vlan: entered promiscuous mode [ 80.070573][ T7346] veth0_macvtap: entered promiscuous mode [ 80.071930][ T5782] usb 5-1: device descriptor read/64, error -71 [ 80.075170][ T7346] veth1_macvtap: entered promiscuous mode [ 80.083263][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.088542][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.105840][ T7506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56595 sclass=netlink_route_socket pid=7506 comm=syz.1.343 [ 80.140807][ T5859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.140846][ T5859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.140872][ T5859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.167953][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.167972][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.190424][ T6242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.190438][ T6242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.193133][ T5782] usb usb5-port1: attempt power cycle [ 80.211358][ T5859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.344777][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.344'. [ 80.347320][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.344'. [ 80.541458][ T5782] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 80.562480][ T5782] usb 5-1: device descriptor read/8, error -71 [ 80.600813][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.760805][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 80.763465][ T50] usb 6-1: New USB device found: idVendor=046d, idProduct=c215, bcdDevice=0.00 [ 80.764541][ T50] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 80.764570][ T50] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 80.764593][ T50] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.764614][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.764639][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.769080][ T50] usb 6-1: config 0 descriptor?? [ 80.770302][ T7517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.820930][ T5782] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 80.855432][ T5782] usb 5-1: device descriptor read/8, error -71 [ 80.971778][ T5782] usb usb5-port1: unable to enumerate USB device [ 81.184783][ T50] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:046D:C215.0002/input/input18 [ 81.276029][ T50] logitech 0003:046D:C215.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 81.290593][ T7551] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000008' [ 81.297616][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.297802][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.540712][ T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 81.650816][ T5783] Bluetooth: hci3: command tx timeout [ 81.710854][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 81.711635][ T50] usb 9-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 81.712667][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 81.714508][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.714526][ T50] usb 9-1: Product: syz [ 81.714537][ T50] usb 9-1: Manufacturer: syz [ 81.714548][ T50] usb 9-1: SerialNumber: syz [ 81.717738][ T50] usb 9-1: config 0 descriptor?? [ 81.721846][ T50] hub 9-1:0.0: bad descriptor, ignoring hub [ 81.721864][ T50] hub 9-1:0.0: probe with driver hub failed with error -5 [ 81.730415][ T50] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.773799][ T7570] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.922575][ T855] usb 9-1: USB disconnect, device number 4 [ 82.266855][ T7594] overlayfs: conflicting lowerdir path [ 82.320553][ T7599] __nla_validate_parse: 1 callbacks suppressed [ 82.320571][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.361'. [ 82.329543][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 82.431619][ T7612] loop4: detected capacity change from 0 to 7 [ 82.442459][ T5782] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 82.445963][ T7612] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 82.445985][ T7612] loop4: partition table partially beyond EOD, truncated [ 82.447579][ T7612] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 82.484792][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 82.561945][ T7621] usb 1-1: USB disconnect, device number 2 [ 82.720760][ T42] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 82.881453][ T42] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 82.882583][ T42] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 82.882604][ T42] usb 5-1: config 1 has no interface number 0 [ 82.884959][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.884981][ T42] usb 5-1: Product: syz [ 82.884995][ T42] usb 5-1: Manufacturer: syz [ 82.885007][ T42] usb 5-1: SerialNumber: syz [ 82.893580][ T42] usb 5-1: 3:1 : does not exist [ 82.893610][ T42] usb 5-1: 3:2 : does not exist [ 83.093891][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.094572][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.150322][ T7629] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 83.368549][ T43] kauditd_printk_skb: 140 callbacks suppressed [ 83.368562][ T43] audit: type=1400 audit(1794415822.727:820): avc: denied { mount } for pid=7633 comm="syz.1.369" name="/" dev="overlay" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.370317][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 83.730745][ T5783] Bluetooth: hci3: command tx timeout [ 84.116907][ T50] usb 6-1: USB disconnect, device number 7 [ 85.539728][ T11] usb 5-1: USB disconnect, device number 21 [ 85.589442][ T43] audit: type=1400 audit(1794415824.947:821): avc: denied { write } for pid=7645 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.668380][ T7655] FAULT_INJECTION: forcing a failure. [ 85.668380][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 85.668407][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.5.373 Not tainted syzkaller #0 PREEMPT(full) [ 85.668420][ T7655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.668427][ T7655] Call Trace: [ 85.668440][ T7655] [ 85.668445][ T7655] dump_stack_lvl+0x100/0x190 [ 85.668490][ T7655] should_fail_ex.cold+0x5/0xa [ 85.668507][ T7655] should_failslab+0xc2/0x120 [ 85.668535][ T7655] __kvmalloc_node_noprof+0x113/0x9b0 [ 85.668547][ T7655] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 85.668562][ T7655] ? percpu_ref_init+0xec/0x3f0 [ 85.668594][ T7655] ? io_alloc_cache_init+0x38/0x170 [ 85.668613][ T7655] io_alloc_cache_init+0x38/0x170 [ 85.668630][ T7655] io_uring_setup.cold+0x450/0x1c7e [ 85.668643][ T7655] ? lock_acquire+0x1d1/0x380 [ 85.668657][ T7655] ? avc_has_perm_noaudit+0x56/0x470 [ 85.668688][ T7655] ? __pfx_io_uring_setup+0x10/0x10 [ 85.668701][ T7655] ? find_held_lock+0x2b/0x80 [ 85.668711][ T7655] ? avc_has_perm_noaudit+0x11e/0x470 [ 85.668724][ T7655] ? avc_has_perm_noaudit+0x11e/0x470 [ 85.668745][ T7655] ? xfd_validate_state+0x129/0x190 [ 85.668762][ T7655] __x64_sys_io_uring_setup+0xc2/0x170 [ 85.668776][ T7655] do_syscall_64+0x123/0x7b0 [ 85.668828][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.668839][ T7655] RIP: 0033:0x7fa27c7a8f19 [ 85.668849][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.668859][ T7655] RSP: 002b:00007fa27d629fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 85.668870][ T7655] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fa27c7a8f19 [ 85.668876][ T7655] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000000000000020 [ 85.668882][ T7655] RBP: 00007fa27c837f6d R08: 0000000000000000 R09: 0000000000000000 [ 85.668889][ T7655] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 85.668895][ T7655] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffeb7bd3728 [ 85.668908][ T7655] [ 85.708035][ T43] audit: type=1400 audit(1794415825.067:822): avc: denied { unmount } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.773290][ T7660] PM: Enabling pm_trace changes system date and time during resume. [ 85.773290][ T7660] PM: Correct system time has to be restored manually after resume. [ 85.775120][ T43] audit: type=1400 audit(1794415825.137:823): avc: denied { read write } for pid=7657 comm="syz.5.375" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.775498][ T43] audit: type=1400 audit(1794415825.137:824): avc: denied { open } for pid=7657 comm="syz.5.375" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.809128][ T7661] netlink: 'syz.0.374': attribute type 30 has an invalid length. [ 85.812792][ T43] audit: type=1400 audit(1794415825.167:825): avc: denied { link } for pid=7657 comm="syz.5.375" name="#f" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.815206][ T5783] Bluetooth: hci3: command tx timeout [ 85.836208][ T43] audit: type=1400 audit(1794415825.207:826): avc: denied { rename } for pid=7657 comm="syz.5.375" name="#10" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.837528][ T43] audit: type=1400 audit(1794415825.207:827): avc: denied { execute } for pid=7657 comm="syz.5.375" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.862264][ T7661] netlink: 'syz.0.374': attribute type 30 has an invalid length. [ 85.911645][ T43] audit: type=1400 audit(1794415825.277:828): avc: denied { mount } for pid=7667 comm="syz.5.377" name="/" dev="autofs" ino=21116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.916870][ T7669] FAULT_INJECTION: forcing a failure. [ 85.916870][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 85.917133][ T7669] CPU: 2 UID: 0 PID: 7669 Comm: syz.5.377 Not tainted syzkaller #0 PREEMPT(full) [ 85.917155][ T7669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.917166][ T7669] Call Trace: [ 85.917172][ T7669] [ 85.917180][ T7669] dump_stack_lvl+0x100/0x190 [ 85.917217][ T7669] should_fail_ex.cold+0x5/0xa [ 85.917246][ T7669] should_failslab+0xc2/0x120 [ 85.917268][ T7669] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.917298][ T7669] ? create_new_namespaces+0x30/0xac0 [ 85.917329][ T7669] create_new_namespaces+0x30/0xac0 [ 85.917354][ T7669] ? bpf_lsm_capable+0x9/0x10 [ 85.917373][ T7669] ? security_capable+0x80/0x260 [ 85.917401][ T7669] unshare_nsproxy_namespaces+0xf6/0x210 [ 85.917430][ T7669] ksys_unshare+0x44f/0x980 [ 85.917454][ T7669] ? __pfx_ksys_unshare+0x10/0x10 [ 85.917492][ T7669] __x64_sys_unshare+0x31/0x40 [ 85.917515][ T7669] do_syscall_64+0x123/0x7b0 [ 85.917540][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.917560][ T7669] RIP: 0033:0x7fa27c7a8f19 [ 85.917575][ T7669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.917593][ T7669] RSP: 002b:00007fa27d62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 85.917611][ T7669] RAX: ffffffffffffffda RBX: 00007fa27ca25fa0 RCX: 00007fa27c7a8f19 [ 85.917624][ T7669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 85.917634][ T7669] RBP: 00007fa27c837f6d R08: 0000000000000000 R09: 0000000000000000 [ 85.917645][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.917656][ T7669] R13: 00007fa27ca26038 R14: 00007fa27ca25fa0 R15: 00007ffeb7bd3728 [ 85.917683][ T7669] [ 85.935334][ T43] audit: type=1400 audit(1794415825.297:829): avc: denied { remount } for pid=7670 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.997007][ T7683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.997022][ T7683] IPv6: NLM_F_CREATE should be set when creating new route [ 86.004403][ T7676] net_ratelimit: 58 callbacks suppressed [ 86.004420][ T7676] ip_tables: iptables: counters copy to user failed while replacing table [ 86.060427][ T6348] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.238166][ T7702] warning: `syz.0.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.272821][ T7702] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.272839][ T7702] overlayfs: failed to set xattr on upper [ 86.272843][ T7702] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.272847][ T7702] overlayfs: ...falling back to metacopy=off. [ 86.272850][ T7702] overlayfs: ...falling back to index=off. [ 86.272854][ T7702] overlayfs: ...falling back to uuid=null. [ 86.279069][ T7705] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 86.279719][ T7705] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 86.283756][ T7707] overlay: filesystem on ./file0 not supported as upperdir [ 86.319491][ T7718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.389'. [ 86.375044][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 86.386794][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 86.465660][ T7735] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7735 comm=syz.4.395 [ 86.561388][ T7739] syz.1.397: attempt to access beyond end of device [ 86.561388][ T7739] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 86.561428][ T7739] gfs2: error -5 reading superblock [ 86.630327][ T7746] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 86.657964][ T7749] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 86.960725][ T64] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 87.069992][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 87.070885][ T7764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.404'. [ 87.111769][ T64] usb 6-1: not running at top speed; connect to a high speed hub [ 87.111789][ T64] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 87.112660][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.112671][ T64] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 87.114389][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.114401][ T64] usb 6-1: Product: syz [ 87.114409][ T64] usb 6-1: Manufacturer: syz [ 87.114419][ T64] usb 6-1: SerialNumber: syz [ 87.120686][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.120872][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.121032][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.121179][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.121336][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.121482][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.121635][ T7767] ip_tables: iptables: counters copy to user failed while replacing table [ 87.333731][ T64] usb 6-1: USB disconnect, device number 8 [ 87.412142][ T7804] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 87.412163][ T7804] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 87.412178][ T7804] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 87.412187][ T7804] One or more global auth toks could not properly register; rc = [-22] [ 87.412213][ T7804] Error validating options; rc = [-22] [ 87.418521][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 87.430428][ T7776] cgroup: fork rejected by pids controller in /syz0 [ 88.022436][ T7857] exFAT-fs (nullb0): invalid boot record signature [ 88.022446][ T7857] exFAT-fs (nullb0): failed to read boot sector [ 88.022451][ T7857] exFAT-fs (nullb0): failed to recognize exfat type [ 88.023976][ T7857] netlink: 80 bytes leftover after parsing attributes in process `syz.1.412'. [ 88.130810][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 88.133071][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.232032][ T7876] null_blk: disk my_nullb created [ 88.341444][ T7879] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 88.344753][ T7878] mmap: syz.1.418 (7878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.404284][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 88.404301][ T43] audit: type=1400 audit(1794415827.767:870): avc: denied { mounton } for pid=7885 comm="syz.0.420" path="/79/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 88.484295][ T7895] syzkaller0: entered promiscuous mode [ 88.484308][ T7895] syzkaller0: entered allmulticast mode [ 88.487346][ T43] audit: type=1400 audit(1794415827.847:871): avc: denied { create } for pid=7894 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.528649][ T43] audit: type=1400 audit(1794415827.887:872): avc: denied { read } for pid=7898 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.543139][ T43] audit: type=1400 audit(1794415827.907:873): avc: denied { setopt } for pid=7894 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.668717][ T43] audit: type=1400 audit(1794415828.027:874): avc: denied { bind } for pid=7907 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.670052][ T43] audit: type=1400 audit(1794415828.027:875): avc: denied { setopt } for pid=7907 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.680721][ T7906] netlink: 52 bytes leftover after parsing attributes in process `syz.0.425'. [ 88.684262][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.685294][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.722405][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 88.729638][ T43] audit: type=1400 audit(1794415828.087:876): avc: denied { ioctl } for pid=7909 comm="syz.0.428" path="socket:[22981]" dev="sockfs" ino=22981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.729949][ T43] audit: type=1400 audit(1794415828.087:877): avc: denied { connect } for pid=7909 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.743768][ T7912] dns_resolver: Unsupported content type (234) [ 88.779315][ T7916] FAULT_INJECTION: forcing a failure. [ 88.779315][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 88.779348][ T7916] CPU: 3 UID: 0 PID: 7916 Comm: syz.5.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.779374][ T7916] Tainted: [L]=SOFTLOCKUP [ 88.779381][ T7916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.779391][ T7916] Call Trace: [ 88.779398][ T7916] [ 88.779406][ T7916] dump_stack_lvl+0x100/0x190 [ 88.779446][ T7916] should_fail_ex.cold+0x5/0xa [ 88.779477][ T7916] should_failslab+0xc2/0x120 [ 88.779500][ T7916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.779528][ T7916] ? __pfx_map_id_range_down+0x10/0x10 [ 88.779557][ T7916] ? security_inode_alloc+0x3b/0x2c0 [ 88.779590][ T7916] security_inode_alloc+0x3b/0x2c0 [ 88.779618][ T7916] inode_init_always_gfp+0xc75/0xfb0 [ 88.779645][ T7916] alloc_inode+0x8e/0x250 [ 88.779662][ T7916] new_inode+0x22/0x1c0 [ 88.779683][ T7916] autofs_get_inode+0x20/0x340 [ 88.779745][ T7916] autofs_fill_super+0x1a7/0x8f0 [ 88.779763][ T7916] ? rcu_is_watching+0x13/0xc0 [ 88.779787][ T7916] ? __pfx_autofs_fill_super+0x10/0x10 [ 88.779806][ T7916] get_tree_nodev+0xe3/0x190 [ 88.779829][ T7916] autofs_get_tree+0x1b9/0x2b0 [ 88.779856][ T7916] vfs_get_tree+0x92/0x320 [ 88.779887][ T7916] vfs_cmd_create+0xd7/0x2a0 [ 88.779910][ T7916] __do_sys_fsconfig+0x55a/0xcb0 [ 88.779934][ T7916] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 88.779967][ T7916] do_syscall_64+0x123/0x7b0 [ 88.779994][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.780014][ T7916] RIP: 0033:0x7fa27c7a8f19 [ 88.780030][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.780048][ T7916] RSP: 002b:00007fa27d62a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 88.780067][ T7916] RAX: ffffffffffffffda RBX: 00007fa27ca25fa0 RCX: 00007fa27c7a8f19 [ 88.780079][ T7916] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 88.780088][ T7916] RBP: 00007fa27c837f6d R08: 0000000000000000 R09: 0000000000000000 [ 88.780100][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.780110][ T7916] R13: 00007fa27ca26038 R14: 00007fa27ca25fa0 R15: 00007ffeb7bd3728 [ 88.780136][ T7916] [ 88.786070][ T43] audit: type=1400 audit(1794415828.147:878): avc: denied { write } for pid=7909 comm="syz.0.428" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.856056][ T43] audit: type=1400 audit(1794415828.217:879): avc: denied { write } for pid=7919 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.957539][ T7925] netlink: 120 bytes leftover after parsing attributes in process `syz.5.433'. [ 89.069800][ T7346] svc: failed to register nfsdv3 RPC service (errno 5). [ 89.069816][ T7346] failed to unregister tcp with rpcbind [ 89.163121][ T7935] comedi comedi2: comedi_config --init_data is deprecated [ 89.220840][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.437'. [ 89.220930][ T7937] nftables ruleset with unbound chain [ 89.417383][ T7948] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 89.446366][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 89.447784][ T7951] netlink: 'syz.4.441': attribute type 30 has an invalid length. [ 89.630737][ T5782] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 89.645403][ T5491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.735523][ T7968] overlay: ./file0 is not a directory [ 89.738964][ T7968] overlay: ./file0 is not a directory [ 89.743425][ T7968] overlay: ./file0 is not a directory [ 89.746680][ T7968] overlay: ./file0 is not a directory [ 89.747659][ T7968] overlay: ./file0 is not a directory [ 89.751481][ T7968] overlay: ./file0 is not a directory [ 89.752149][ T7968] overlay: ./file0 is not a directory [ 89.756492][ T7968] overlay: ./file0 is not a directory [ 89.757079][ T7968] overlay: ./file0 is not a directory [ 89.761768][ T7968] overlay: ./file0 is not a directory [ 89.765398][ T7968] overlay: ./file0 is not a directory [ 89.772768][ T7968] overlay: ./file0 is not a directory [ 89.776122][ T7968] overlay: ./file0 is not a directory [ 89.777221][ T7968] overlay: ./file0 is not a directory [ 89.777580][ T7968] overlay: ./file0 is not a directory [ 89.777982][ T7968] overlay: ./file0 is not a directory [ 89.778338][ T7968] overlay: ./file0 is not a directory [ 89.778722][ T7968] overlay: ./file0 is not a directory [ 89.779192][ T7968] overlay: ./file0 is not a directory [ 89.779498][ T7968] overlay: ./file0 is not a directory [ 89.780951][ T5782] usb 10-1: Using ep0 maxpacket: 8 [ 89.783352][ T5782] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.783678][ T7968] overlay: ./file0 is not a directory [ 89.784143][ T5782] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 89.784165][ T5782] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.784176][ T5782] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.784187][ T5782] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.784197][ T5782] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.784216][ T5782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.792515][ T7968] overlay: ./file0 is not a directory [ 89.796532][ T7968] overlay: ./file0 is not a directory [ 89.799993][ T7968] overlay: ./file0 is not a directory [ 89.803659][ T7968] overlay: ./file0 is not a directory [ 89.810149][ T7968] overlay: ./file0 is not a directory [ 89.818210][ T7968] overlay: ./file0 is not a directory [ 89.819238][ T7968] overlay: ./file0 is not a directory [ 89.822725][ T7968] overlay: ./file0 is not a directory [ 89.826445][ T7968] overlay: ./file0 is not a directory [ 89.831104][ T7968] overlay: ./file0 is not a directory [ 89.834134][ T7968] overlay: ./file0 is not a directory [ 89.836586][ T7968] overlay: ./file0 is not a directory [ 89.838371][ T7968] overlay: ./file0 is not a directory [ 89.842015][ T7968] overlay: ./file0 is not a directory [ 89.845818][ T7968] overlay: ./file0 is not a directory [ 89.848131][ T7968] overlay: ./file0 is not a directory [ 89.850095][ T7968] overlay: ./file0 is not a directory [ 89.852501][ T7968] overlay: ./file0 is not a directory [ 89.854389][ T7968] overlay: ./file0 is not a directory [ 89.858769][ T7968] overlay: ./file0 is not a directory [ 89.860538][ T7968] overlay: ./file0 is not a directory [ 89.867902][ T7968] overlay: ./file0 is not a directory [ 89.869818][ T7968] overlay: ./file0 is not a directory [ 89.871990][ T7968] overlay: ./file0 is not a directory [ 89.873987][ T7968] overlay: ./file0 is not a directory [ 89.875927][ T7968] overlay: ./file0 is not a directory [ 89.879965][ T7968] overlay: ./file0 is not a directory [ 89.891750][ T7968] overlay: ./file0 is not a directory [ 89.892574][ T7968] overlay: ./file0 is not a directory [ 89.893983][ T7968] overlay: ./file0 is not a directory [ 89.896067][ T7968] overlay: ./file0 is not a directory [ 89.898367][ T7968] overlay: ./file0 is not a directory [ 89.913311][ T7968] overlay: ./file0 is not a directory [ 89.914247][ T7968] overlay: ./file0 is not a directory [ 89.915536][ T7968] overlay: ./file0 is not a directory [ 89.916304][ T7968] overlay: ./file0 is not a directory [ 89.916855][ T7968] overlay: ./file0 is not a directory [ 89.918467][ T7968] overlay: ./file0 is not a directory [ 89.919119][ T7968] overlay: ./file0 is not a directory [ 89.919892][ T7968] overlay: ./file0 is not a directory [ 89.920526][ T7968] overlay: ./file0 is not a directory [ 89.922076][ T7968] overlay: ./file0 is not a directory [ 89.923369][ T7968] overlay: ./file0 is not a directory [ 89.925234][ T7968] overlay: ./file0 is not a directory [ 89.989266][ T5782] usb 10-1: usb_control_msg returned -32 [ 89.989323][ T5782] usbtmc 10-1:16.0: can't read capabilities [ 90.251945][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'. [ 90.314046][ T7997] netlink: 14 bytes leftover after parsing attributes in process `syz.4.449'. [ 90.366757][ T7999] tipc: Started in network mode [ 90.366781][ T7999] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 90.367826][ T7999] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 90.368008][ T7999] tipc: Enabled bearer , priority 10 [ 90.390212][ T7999] FAULT_INJECTION: forcing a failure. [ 90.390212][ T7999] name failslab, interval 1, probability 0, space 0, times 0 [ 90.390272][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.390299][ T7999] Tainted: [L]=SOFTLOCKUP [ 90.390305][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.390316][ T7999] Call Trace: [ 90.390323][ T7999] [ 90.390331][ T7999] dump_stack_lvl+0x100/0x190 [ 90.390364][ T7999] should_fail_ex.cold+0x5/0xa [ 90.390392][ T7999] should_failslab+0xc2/0x120 [ 90.390414][ T7999] __kmalloc_noprof+0xfc/0x840 [ 90.390429][ T7999] ? rcu_is_watching+0x13/0xc0 [ 90.390448][ T7999] ? tomoyo_realpath_from_path+0xb6/0x690 [ 90.390477][ T7999] tomoyo_realpath_from_path+0xb6/0x690 [ 90.390508][ T7999] tomoyo_check_open_permission+0x2af/0x3c0 [ 90.390540][ T7999] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 90.390576][ T7999] ? hook_file_open+0x245/0x8e0 [ 90.390614][ T7999] ? avc_has_perm_noaudit+0x11e/0x470 [ 90.390653][ T7999] ? __pfx_selinux_inode_permission+0x10/0x10 [ 90.390676][ T7999] tomoyo_file_open+0x6b/0x90 [ 90.390699][ T7999] security_file_open+0xb5/0x1e0 [ 90.390720][ T7999] do_dentry_open+0x552/0x1470 [ 90.390749][ T7999] vfs_open_consume+0xcc/0x460 [ 90.390779][ T7999] path_openat+0x1547/0x23f0 [ 90.390805][ T7999] ? __pfx_path_openat+0x10/0x10 [ 90.390834][ T7999] do_file_open+0x20e/0x430 [ 90.390859][ T7999] ? __pfx_do_file_open+0x10/0x10 [ 90.390898][ T7999] ? _raw_spin_unlock+0x28/0x50 [ 90.390919][ T7999] ? alloc_fd+0x471/0x7a0 [ 90.390948][ T7999] do_sys_openat2+0x163/0x1d0 [ 90.390973][ T7999] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.391006][ T7999] __x64_sys_openat+0x12d/0x210 [ 90.391031][ T7999] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.391064][ T7999] do_syscall_64+0x123/0x7b0 [ 90.391087][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.391105][ T7999] RIP: 0033:0x7f7e641a8f19 [ 90.391236][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.391253][ T7999] RSP: 002b:00007f7e650f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.391272][ T7999] RAX: ffffffffffffffda RBX: 00007f7e64426090 RCX: 00007f7e641a8f19 [ 90.391282][ T7999] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 90.391294][ T7999] RBP: 00007f7e64237f6d R08: 0000000000000000 R09: 0000000000000000 [ 90.391304][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.391313][ T7999] R13: 00007f7e64426128 R14: 00007f7e64426090 R15: 00007ffe7404a768 [ 90.391339][ T7999] [ 90.393749][ T7999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.553074][ T1361] usb 10-1: USB disconnect, device number 2 [ 90.559038][ T7998] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -71 [ 90.939101][ T8035] fuseblk: Bad value for 'group_id' [ 90.939115][ T8035] fuseblk: Bad value for 'group_id' [ 91.143688][ T8044] fuse: Unknown parameter '00000000000000000003017777777777777777777770x000000000000000300000000000000000000' [ 91.144187][ T8045] fuse: Unknown parameter '00000000000000000003017777777777777777777770x000000000000000300000000000000000000' [ 91.363019][ T1361] tipc: Node number set to 1 [ 91.745897][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 91.882359][ T8067] netlink: 'syz.0.464': attribute type 13 has an invalid length. [ 92.316674][ T8090] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 92.648020][ T8099] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 92.690141][ T8099] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 92.696061][ T8099] kvm [8096]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 92.696645][ T8099] kvm [8096]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 92.747892][ T8099] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 92.782806][ T8103] netlink: 'syz.0.475': attribute type 9 has an invalid length. [ 92.782822][ T8103] __nla_validate_parse: 1 callbacks suppressed [ 92.782828][ T8103] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.475'. [ 92.810165][ T8103] evm: overlay not supported [ 92.881041][ T855] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 92.893417][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.477'. [ 92.924083][ T8109] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 92.924097][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 92.972105][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 93.030697][ T855] usb 9-1: Using ep0 maxpacket: 8 [ 93.031160][ T855] usb 9-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.032381][ T855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.032404][ T855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.033801][ T855] usb 9-1: config 0 descriptor?? [ 93.112420][ T8121] SELinux: Context system_u:object_r:default_context_t:s0 is not valid (left unmapped). [ 93.146085][ T8124] program syz.1.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.241591][ T855] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.248459][ T8133] FAULT_INJECTION: forcing a failure. [ 93.248459][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 93.248502][ T8133] CPU: 3 UID: 0 PID: 8133 Comm: syz.4.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.248525][ T8133] Tainted: [L]=SOFTLOCKUP [ 93.248531][ T8133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.248541][ T8133] Call Trace: [ 93.248562][ T8133] [ 93.248569][ T8133] dump_stack_lvl+0x100/0x190 [ 93.248634][ T8133] should_fail_ex.cold+0x5/0xa [ 93.248661][ T8133] should_failslab+0xc2/0x120 [ 93.248705][ T8133] kmem_cache_alloc_noprof+0x92/0x6a0 [ 93.248733][ T8133] ? __pfx_map_id_range_down+0x10/0x10 [ 93.248759][ T8133] ? rcu_is_watching+0x13/0xc0 [ 93.248778][ T8133] ? security_inode_alloc+0x3b/0x2c0 [ 93.248838][ T8133] security_inode_alloc+0x3b/0x2c0 [ 93.248864][ T8133] inode_init_always_gfp+0xc75/0xfb0 [ 93.248893][ T8133] alloc_inode+0x8e/0x250 [ 93.248910][ T8133] sock_alloc+0x42/0x240 [ 93.248992][ T8133] __sock_create+0xc2/0x860 [ 93.249023][ T8133] __sys_socket+0x14d/0x260 [ 93.249041][ T8133] ? __pfx___sys_socket+0x10/0x10 [ 93.249066][ T8133] __x64_sys_socket+0x72/0xb0 [ 93.249082][ T8133] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.249150][ T8133] do_syscall_64+0x123/0x7b0 [ 93.249175][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.249193][ T8133] RIP: 0033:0x7f7e641aa787 [ 93.249208][ T8133] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.249224][ T8133] RSP: 002b:00007f7e650d1f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 93.249243][ T8133] RAX: ffffffffffffffda RBX: 00007f7e64426180 RCX: 00007f7e641aa787 [ 93.249254][ T8133] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 93.249264][ T8133] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 93.249275][ T8133] R10: 0000200000000a80 R11: 0000000000000286 R12: 0000000000000000 [ 93.249298][ T8133] R13: 00007f7e64426218 R14: 00007f7e64426180 R15: 00007ffe7404a768 [ 93.249322][ T8133] [ 93.249498][ T8133] net_ratelimit: 29 callbacks suppressed [ 93.249519][ T8133] socket: no more sockets [ 93.442317][ T855] usb 9-1: USB disconnect, device number 5 [ 93.721330][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 93.721344][ T43] audit: type=1400 audit(1794415833.087:938): avc: denied { ioctl } for pid=8136 comm="syz.1.487" path="socket:[24943]" dev="sockfs" ino=24943 ioctlcmd=0x40406f06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.824965][ T43] audit: type=1400 audit(1794415833.187:939): avc: denied { read write } for pid=8138 comm="syz.1.488" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.825300][ T43] audit: type=1400 audit(1794415833.187:940): avc: denied { open } for pid=8138 comm="syz.1.488" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.964970][ T43] audit: type=1400 audit(1794415833.327:941): avc: denied { setopt } for pid=8145 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.984571][ T8149] bond1 (unregistering): Released all slaves [ 94.008967][ T8156] program syz.4.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.014940][ T8146] bridge0: port 3(syz_tun) entered blocking state [ 94.014986][ T8146] bridge0: port 3(syz_tun) entered disabled state [ 94.015190][ T8146] syz_tun: entered allmulticast mode [ 94.017526][ T8146] syz_tun: entered promiscuous mode [ 94.018532][ T8146] bridge0: port 3(syz_tun) entered blocking state [ 94.018594][ T8146] bridge0: port 3(syz_tun) entered forwarding state [ 94.063904][ T43] audit: type=1400 audit(1794415833.427:942): avc: denied { open } for pid=8157 comm="syz.4.493" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 94.091377][ T8161] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.091412][ T8161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.133175][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 94.133206][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 94.155390][ T43] audit: type=1400 audit(1794415833.517:943): avc: denied { remount } for pid=8167 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.155490][ T8168] tmpfs: Unknown parameter 'Euge@aä[kse' [ 94.171560][ T43] audit: type=1400 audit(1794415833.527:944): avc: denied { view } for pid=8159 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.183180][ T8164] gretap0: entered promiscuous mode [ 94.188632][ T8164] gretap0: left promiscuous mode [ 94.280255][ T43] audit: type=1400 audit(1794415833.637:945): avc: denied { write } for pid=8173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.302067][ T5900] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 94.335017][ T43] audit: type=1400 audit(1794415833.697:946): avc: denied { write } for pid=8181 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.366535][ T5491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.451792][ T8189] exfat: Unknown parameter 'J`ýŸ5„‰ZZ-ú´4Ïm{<¿»þv¡ÜØ1eéB£EG%Ñ+„¨·Òßàhìâ”õåÈJ´H0³ [ 94.451792][ T8189] ' [ 94.454983][ T5900] usb 9-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 94.458941][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 94.458959][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.458969][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 94.458981][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 94.466338][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.466352][ T5900] usb 9-1: Product: syz [ 94.466360][ T5900] usb 9-1: Manufacturer: syz [ 94.466366][ T5900] usb 9-1: SerialNumber: syz [ 94.469041][ T5900] usb 9-1: config 0 descriptor?? [ 94.482699][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.483458][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.483480][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.483494][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.521776][ T43] audit: type=1326 audit(1794415833.887:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8182 comm="syz.1.500" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x0 [ 94.676871][ T5900] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 95.060684][ T5900] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 95.237675][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.238076][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.241689][ T8195] FAULT_INJECTION: forcing a failure. [ 95.241689][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 95.241705][ T8195] CPU: 2 UID: 0 PID: 8195 Comm: syz.5.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.241720][ T8195] Tainted: [L]=SOFTLOCKUP [ 95.241723][ T8195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.241729][ T8195] Call Trace: [ 95.241733][ T8195] [ 95.241737][ T8195] dump_stack_lvl+0x100/0x190 [ 95.241788][ T8195] should_fail_ex.cold+0x5/0xa [ 95.241805][ T8195] should_failslab+0xc2/0x120 [ 95.241819][ T8195] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 95.241832][ T8195] ? string+0x201/0x4d0 [ 95.241842][ T8195] ? kstrdup_const+0x63/0x80 [ 95.241857][ T8195] kstrdup+0x51/0xe0 [ 95.241869][ T8195] kstrdup_const+0x63/0x80 [ 95.241880][ T8195] __kernfs_new_node+0x9b/0xa10 [ 95.241914][ T8195] ? __pfx___kernfs_new_node+0x10/0x10 [ 95.241926][ T8195] ? lock_acquire+0x1d1/0x380 [ 95.241941][ T8195] ? kernfs_root+0x23/0x2a0 [ 95.241957][ T8195] ? find_held_lock+0x2b/0x80 [ 95.241969][ T8195] ? kernfs_root+0xee/0x2a0 [ 95.241984][ T8195] ? kernfs_root+0xee/0x2a0 [ 95.242009][ T8195] kernfs_new_node+0x194/0x200 [ 95.242022][ T8195] ? __pfx_kernfs_new_node+0x10/0x10 [ 95.242033][ T8195] ? kernfs_create_link+0xe4/0x280 [ 95.242046][ T8195] ? kernfs_create_link+0xe4/0x280 [ 95.242063][ T8195] kernfs_create_link+0x100/0x280 [ 95.242078][ T8195] sysfs_do_create_link_sd+0x90/0x140 [ 95.242096][ T8195] sysfs_create_link+0x61/0xc0 [ 95.242113][ T8195] module_add_driver+0x1c0/0x420 [ 95.242147][ T8195] bus_add_driver+0x374/0x620 [ 95.242162][ T8195] driver_register+0x1e2/0x360 [ 95.242176][ T8195] ? rcu_is_watching+0x13/0xc0 [ 95.242190][ T8195] usb_gadget_register_driver_owner+0x132/0x210 [ 95.242219][ T8195] raw_ioctl+0x1a85/0x2b80 [ 95.242234][ T8195] ? __pfx_raw_ioctl+0x10/0x10 [ 95.242244][ T8195] ? selinux_file_ioctl+0x1e0/0x290 [ 95.242256][ T8195] ? selinux_file_ioctl+0x1e7/0x290 [ 95.242268][ T8195] ? __pfx_raw_ioctl+0x10/0x10 [ 95.242279][ T8195] __x64_sys_ioctl+0x18e/0x210 [ 95.242293][ T8195] do_syscall_64+0x123/0x7b0 [ 95.242309][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.242320][ T8195] RIP: 0033:0x7fa27c7a8bab [ 95.242329][ T8195] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 95.242339][ T8195] RSP: 002b:00007fa27d627f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.242350][ T8195] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fa27c7a8bab [ 95.242356][ T8195] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000e [ 95.242362][ T8195] RBP: 00007fa27d628fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 95.242368][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.242374][ T8195] R13: 0000200000001580 R14: 0000000000000000 R15: 0000000000001938 [ 95.242388][ T8195] [ 95.242426][ T8195] bus_add_driver: failed to create module links for raw-gadget.3 [ 95.242470][ T8195] UDC core: USB Raw Gadget: driver registration failed: -12 [ 95.242479][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 95.260035][ T5900] usb 10-1: unable to get BOS descriptor or descriptor too short [ 95.260061][ T5900] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 95.261168][ T5900] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 95.261186][ T5900] usb 10-1: can't read configurations, error -71 [ 95.891448][ T8217] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 95.891475][ T8217] Error validating options; rc = [-22] [ 96.058586][ T8225] overlay: filesystem on ./bus is read-only [ 96.339752][ T8229] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 96.341204][ T8229] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 96.400771][ T5900] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 96.502734][ T8235] xt_policy: neither incoming nor outgoing policy selected [ 96.530797][ T5900] usb 10-1: device descriptor read/64, error -71 [ 96.530796][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 96.534137][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.644886][ T8237] fuse: fd is not a fuse device [ 96.790682][ T5900] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 96.941120][ T5900] usb 10-1: device descriptor read/64, error -71 [ 97.051097][ T5900] usb usb10-port1: attempt power cycle [ 97.064437][ T5568] usb 9-1: USB disconnect, device number 6 [ 97.118678][ T8245] gadgetfs: bound to dummy_udc driver [ 97.182687][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 97.386954][ T8263] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.390762][ T5900] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 97.411761][ T5900] usb 10-1: device descriptor read/8, error -71 [ 97.510516][ T8272] tmpfs: Bad value for 'mpol' [ 97.683261][ T5900] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 97.739099][ T5900] usb 10-1: device descriptor read/8, error -71 [ 97.841013][ T5900] usb usb10-port1: unable to enumerate USB device [ 98.113014][ T8282] ip6gretap0: entered promiscuous mode [ 98.166131][ T8284] xt_hashlimit: size too large, truncated to 1048576 [ 98.220822][ T8286] macvtap1: entered promiscuous mode [ 98.221811][ T8286] macvtap1: entered allmulticast mode [ 98.221831][ T8286] veth1_vlan: entered allmulticast mode [ 98.749363][ T8307] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 98.755795][ T8307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.757795][ T8307] team0: Port device netdevsim0 added [ 98.838392][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 98.838409][ T43] audit: type=1400 audit(1794415838.207:956): avc: denied { watch watch_reads } for pid=8314 comm="syz.4.536" path="pipe:[15931]" dev="pipefs" ino=15931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 99.064386][ T43] audit: type=1400 audit(1794415838.427:957): avc: denied { append } for pid=8332 comm="syz.4.541" name="001" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.079359][ T8333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.541'. [ 99.085515][ T43] audit: type=1400 audit(1794415838.447:958): avc: denied { ioctl } for pid=8332 comm="syz.4.541" path="socket:[24388]" dev="sockfs" ino=24388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.086552][ T43] audit: type=1400 audit(1794415838.447:959): avc: denied { mount } for pid=8332 comm="syz.4.541" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 99.087269][ T43] audit: type=1400 audit(1794415838.447:960): avc: denied { remount } for pid=8332 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 99.226557][ T8347] Could not find key with description: [syz] [ 99.226583][ T8347] process_request_key_err: No key [ 99.226588][ T8347] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 99.226594][ T8347] One or more global auth toks could not properly register; rc = [-2] [ 99.226615][ T8347] Error validating options; rc = [-2] [ 99.228036][ T43] audit: type=1400 audit(1794415838.587:961): avc: denied { create } for pid=8343 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.246210][ T8351] ip_tables: iptables: counters copy to user failed while replacing table [ 99.278107][ T8353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.584226][ T35] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 99.616470][ T43] audit: type=1400 audit(1794415838.977:962): avc: denied { unmount } for pid=6874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 99.732287][ T35] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 99.733320][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.733359][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 99.733381][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.733414][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.856732][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.856746][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.978283][ T43] audit: type=1400 audit(1794415839.337:963): avc: denied { create } for pid=8355 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.190709][ T5568] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 100.222279][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.222494][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.222642][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.222779][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.222916][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.223048][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.223177][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.223306][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.223439][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.223573][ T8356] openvswitch: netlink: Unknown nsh attribute 0 [ 100.224137][ T43] audit: type=1400 audit(1794415839.587:964): avc: denied { create } for pid=8389 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.224591][ T43] audit: type=1400 audit(1794415839.587:965): avc: denied { write } for pid=8389 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.272474][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.300304][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.328718][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.341500][ T5568] usb 9-1: Using ep0 maxpacket: 16 [ 100.342306][ T5568] usb 9-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 100.345899][ T5568] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.345911][ T5568] usb 9-1: Product: syz [ 100.345918][ T5568] usb 9-1: Manufacturer: syz [ 100.345925][ T5568] usb 9-1: SerialNumber: syz [ 100.349947][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.376554][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.399188][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.419910][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.436332][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 100.763138][ T5568] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 100.765131][ T5568] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 100.765280][ T5568] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 100.765309][ T5568] usb 9-1: media controller created [ 100.770236][ T5568] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.785159][ T5568] zl10353_read_register: readreg error (reg=127, ret==-71) [ 100.801704][ T5568] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 100.807202][ T5568] usb 9-1: USB disconnect, device number 7 [ 100.964762][ T35] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 100.964776][ T35] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 100.969075][ T35] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 100.974765][ T35] usb 5-1: USB disconnect, device number 23 [ 101.144169][ T8444] erspan0: entered promiscuous mode [ 101.398665][ T8456] ip6tnl0: entered allmulticast mode [ 101.506328][ T6243] IPVS: starting estimator thread 0... [ 101.640813][ T8467] IPVS: using max 45 ests per chain, 108000 per kthread [ 101.888131][ T8512] qnx4: no qnx4 filesystem (no root dir). [ 103.860964][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 103.860983][ T43] audit: type=1400 audit(1794415843.217:984): avc: denied { getattr } for pid=8543 comm="syz.1.582" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.918091][ T43] audit: type=1400 audit(1794415843.277:985): avc: denied { setopt } for pid=8554 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.922675][ T43] audit: type=1400 audit(1794415843.287:986): avc: denied { connect } for pid=8554 comm="syz.5.585" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.003276][ T43] audit: type=1400 audit(1794415843.367:987): avc: denied { ioctl } for pid=8558 comm="syz.5.587" path="/67/trace/events/irq/irq_handler_entry/filter" dev="tracefs" ino=19680823 ioctlcmd=0xc018937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 104.052236][ T43] audit: type=1400 audit(1794415843.417:988): avc: denied { mounton } for pid=8564 comm="syz.0.588" path="/117/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 104.172314][ T5900] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 104.238327][ T43] audit: type=1400 audit(1794415843.597:989): avc: denied { read } for pid=8578 comm="syz.4.592" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 104.271188][ T43] audit: type=1400 audit(1794415843.637:990): avc: denied { watch watch_reads } for pid=8583 comm="syz.5.594" path="/69" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.352453][ T5900] usb 6-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.354564][ T5900] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.354608][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.359079][ T5900] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.359103][ T5900] usb 6-1: Manufacturer: syz [ 104.360823][ T43] audit: type=1400 audit(1794415843.727:991): avc: denied { getopt } for pid=8590 comm="syz.5.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.365365][ T5900] usb 6-1: config 0 descriptor?? [ 104.376709][ T8591] loop0: detected capacity change from 0 to 4096 [ 104.421943][ T5900] rc_core: IR keymap rc-hauppauge not found [ 104.421955][ T5900] Registered IR keymap rc-empty [ 104.428122][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 104.429166][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 104.435384][ T8592] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 104.435399][ T8592] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 104.435405][ T8592] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 104.435439][ T8592] loop0: [ 104.471608][ T855] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 104.481530][ T5938] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 104.493425][ T8599] __nla_validate_parse: 32 callbacks suppressed [ 104.493437][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 104.571398][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 104.571662][ T8553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=8553 comm=syz.1.584 [ 104.573435][ T5568] usb 6-1: USB disconnect, device number 9 [ 104.621523][ T855] usb 5-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 104.623096][ T855] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.623255][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.624146][ T43] audit: type=1400 audit(1794415843.987:992): avc: denied { map } for pid=8600 comm="syz.5.597" path="socket:[27886]" dev="sockfs" ino=27886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.632046][ T855] usb 5-1: config 0 descriptor?? [ 104.650733][ T5938] usb 9-1: Using ep0 maxpacket: 8 [ 104.651427][ T5938] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.653911][ T5938] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.653931][ T5938] usb 9-1: config 0 has no interface number 0 [ 104.653965][ T5938] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.653982][ T5938] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.653998][ T5938] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.654016][ T5938] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.654046][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.658738][ T5938] usb 9-1: config 0 descriptor?? [ 104.681337][ T5938] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.707438][ T64] net_ratelimit: 25 callbacks suppressed [ 104.707450][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.872620][ T35] usb 9-1: USB disconnect, device number 8 [ 104.876382][ T35] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 105.001167][ T8617] device-mapper: table: 248:6: multipath: invalid initial priority group (-EINVAL) [ 105.001192][ T8617] device-mapper: ioctl: error adding target to table [ 105.025423][ T67] Bluetooth: hci4: sending frame failed (-49) [ 105.030005][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 105.123999][ T8621] nfsd: exp_rootfh path not found \ [ 105.174606][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.207295][ T8631] ip_tables: iptables: counters copy to user failed while replacing table [ 105.404129][ T8640] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 105.473213][ T8647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.609'. [ 105.479025][ T8647] syzkaller1: entered promiscuous mode [ 105.479037][ T8647] syzkaller1: entered allmulticast mode [ 105.482282][ T8647] ip_tables: iptables: counters copy to user failed while replacing table [ 105.483479][ T8647] ptrace attach of "/syz-executor exec"[5776] was attempted by ""[8647] [ 105.726684][ T43] audit: type=1400 audit(1794415845.087:993): avc: denied { create } for pid=8576 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.766103][ T8667] netlink: 'syz.4.616': attribute type 11 has an invalid length. [ 105.834220][ T8667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.835074][ T8667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.853072][ T5939] sony 0005:054C:03D5.0003: UNIQ does not contain a MAC address; duplicate check skipped [ 105.885058][ T5939] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0003/input/input23 [ 105.916954][ T5939] sony 0005:054C:03D5.0003: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 105.930770][ T11] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.952608][ T8669] fido_id[8669]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.049663][ T8674] ublk_ctrl_add_dev: dev id not match 4294967295 4 [ 106.081023][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 106.082836][ T11] usb 6-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 106.083888][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 106.085643][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.085661][ T11] usb 6-1: Product: syz [ 106.085673][ T11] usb 6-1: Manufacturer: syz [ 106.085684][ T11] usb 6-1: SerialNumber: syz [ 106.087756][ T11] usb 6-1: config 0 descriptor?? [ 106.096149][ T11] hub 6-1:0.0: bad descriptor, ignoring hub [ 106.096171][ T11] hub 6-1:0.0: probe with driver hub failed with error -5 [ 106.097718][ T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.102547][ T8672] FAULT_INJECTION: forcing a failure. [ 106.102547][ T8672] name fail_futex, interval 1, probability 0, space 0, times 1 [ 106.102604][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz.4.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.102625][ T8672] Tainted: [L]=SOFTLOCKUP [ 106.102630][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.102638][ T8672] Call Trace: [ 106.102657][ T8672] [ 106.102664][ T8672] dump_stack_lvl+0x100/0x190 [ 106.102729][ T8672] should_fail_ex.cold+0x5/0xa [ 106.102753][ T8672] get_futex_key+0x1c9/0x13e0 [ 106.102787][ T8672] ? __pfx_get_futex_key+0x10/0x10 [ 106.102807][ T8672] ? enqueue_task+0x1dc/0x4f0 [ 106.102834][ T8672] futex_wait_setup+0x91/0x540 [ 106.102867][ T8672] __futex_wait+0x19f/0x360 [ 106.102893][ T8672] ? __pfx___futex_wait+0x10/0x10 [ 106.102913][ T8672] ? __pfx_try_to_wake_up+0x10/0x10 [ 106.102935][ T8672] ? futex_hash+0x311/0x400 [ 106.102953][ T8672] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.102979][ T8672] ? find_held_lock+0x2b/0x80 [ 106.102994][ T8672] ? futex_wake+0x4ea/0x5e0 [ 106.103019][ T8672] futex_wait+0xe6/0x370 [ 106.103043][ T8672] ? __pfx_futex_wait+0x10/0x10 [ 106.103074][ T8672] do_futex+0x265/0x440 [ 106.103093][ T8672] ? __pfx_do_futex+0x10/0x10 [ 106.103110][ T8672] ? kasan_quarantine_put+0x104/0x240 [ 106.103142][ T8672] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.103215][ T8672] __x64_sys_futex+0x34f/0x4d0 [ 106.103238][ T8672] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.103259][ T8672] ? __pfx___x64_sys_mount+0x10/0x10 [ 106.103289][ T8672] do_syscall_64+0x123/0x7b0 [ 106.103310][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.103329][ T8672] RIP: 0033:0x7f7e641a8f19 [ 106.103344][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.103363][ T8672] RSP: 002b:00007f7e651150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.103382][ T8672] RAX: ffffffffffffffda RBX: 00007f7e64425fa8 RCX: 00007f7e641a8f19 [ 106.103395][ T8672] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e64425fa8 [ 106.103406][ T8672] RBP: 00007f7e64425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 106.103415][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.103422][ T8672] R13: 00007f7e64426038 R14: 00007ffe7404a680 R15: 00007ffe7404a768 [ 106.103436][ T8672] [ 106.223693][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.243462][ T8683] SELinux: DCCP has been removed, pid=8683 comm=syz.4.620 [ 106.282602][ T5783] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 106.597406][ T8693] netlink: 'syz.5.624': attribute type 1 has an invalid length. [ 106.612926][ T5568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.613293][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.618455][ T8693] bond1: entered promiscuous mode [ 106.618675][ T8693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.644936][ T8693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.645352][ T8693] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 106.645431][ T8693] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 106.662760][ T8693] bond1: (slave xfrm1): making interface the new active one [ 106.662777][ T8693] xfrm1: entered promiscuous mode [ 106.668680][ T8693] xfrm1: left promiscuous mode [ 106.848852][ T8702] FAULT_INJECTION: forcing a failure. [ 106.848852][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 106.848882][ T8702] CPU: 3 UID: 0 PID: 8702 Comm: syz.4.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.848906][ T8702] Tainted: [L]=SOFTLOCKUP [ 106.848911][ T8702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.848921][ T8702] Call Trace: [ 106.848927][ T8702] [ 106.848934][ T8702] dump_stack_lvl+0x100/0x190 [ 106.848967][ T8702] should_fail_ex.cold+0x5/0xa [ 106.848998][ T8702] should_failslab+0xc2/0x120 [ 106.849022][ T8702] __kmalloc_noprof+0xfc/0x840 [ 106.849040][ T8702] ? __alloc_workqueue+0x66d/0x1900 [ 106.849075][ T8702] __alloc_workqueue+0x66d/0x1900 [ 106.849111][ T8702] ? __pfx_persistent_ctr+0x10/0x10 [ 106.849189][ T8702] alloc_workqueue_noprof+0xc7/0x130 [ 106.849230][ T8702] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 106.849258][ T8702] ? __kasan_kmalloc+0xaa/0xb0 [ 106.849275][ T8702] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 106.849301][ T8702] ? persistent_ctr+0x52/0x480 [ 106.849321][ T8702] ? persistent_ctr+0x1e7/0x480 [ 106.849342][ T8702] persistent_ctr+0x256/0x480 [ 106.849363][ T8702] ? __pfx_persistent_ctr+0x10/0x10 [ 106.849379][ T8702] dm_exception_store_create+0x442/0x790 [ 106.849399][ T8702] ? __pfx_dm_exception_store_create+0x10/0x10 [ 106.849417][ T8702] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 106.849448][ T8702] ? snapshot_ctr+0x16b/0x1fd0 [ 106.849478][ T8702] snapshot_ctr+0x408/0x1fd0 [ 106.849513][ T8702] ? __pfx_snapshot_ctr+0x10/0x10 [ 106.849540][ T8702] ? skip_spaces+0xee/0x130 [ 106.849596][ T8702] ? dm_split_args+0x3a1/0x4e0 [ 106.849619][ T8702] ? __pfx_dm_split_args+0x10/0x10 [ 106.849642][ T8702] ? get_target_type+0x102/0x140 [ 106.849667][ T8702] dm_table_add_target+0x58b/0xee0 [ 106.849715][ T8702] ? __pfx_dm_table_add_target+0x10/0x10 [ 106.849740][ T8702] ? dm_table_create+0x2d3/0x3d0 [ 106.849765][ T8702] table_load+0x3b9/0x7b0 [ 106.849790][ T8702] ? __pfx_table_load+0x10/0x10 [ 106.849807][ T8702] ? __might_fault+0xc5/0x140 [ 106.849830][ T8702] ? __might_fault+0xc5/0x140 [ 106.849860][ T8702] ctl_ioctl+0x4d2/0xcc0 [ 106.849885][ T8702] ? __pfx_table_load+0x10/0x10 [ 106.849903][ T8702] ? __pfx_ctl_ioctl+0x10/0x10 [ 106.849955][ T8702] ? selinux_file_ioctl+0x1e0/0x290 [ 106.849977][ T8702] dm_ctl_ioctl+0x22/0x30 [ 106.850001][ T8702] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 106.850027][ T8702] __x64_sys_ioctl+0x18e/0x210 [ 106.850049][ T8702] do_syscall_64+0x123/0x7b0 [ 106.850072][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.850089][ T8702] RIP: 0033:0x7f7e641a8f19 [ 106.850105][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.850123][ T8702] RSP: 002b:00007f7e65115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.850142][ T8702] RAX: ffffffffffffffda RBX: 00007f7e64425fa0 RCX: 00007f7e641a8f19 [ 106.850157][ T8702] RDX: 0000200000000d00 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 106.850169][ T8702] RBP: 00007f7e64237f6d R08: 0000000000000000 R09: 0000000000000000 [ 106.850181][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.850189][ T8702] R13: 00007f7e64426038 R14: 00007f7e64425fa0 R15: 00007ffe7404a768 [ 106.850216][ T8702] [ 106.850283][ T8702] device-mapper: persistent snapshot: couldn't start header metadata update thread [ 106.901261][ T8702] device-mapper: table: 248:4: snapshot-merge: Couldn't create exception store (-EINVAL) [ 106.901281][ T8702] device-mapper: ioctl: error adding target to table [ 107.253654][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.257408][ T35] usb 5-1: USB disconnect, device number 24 [ 107.360982][ T8662] sound midiC3D0: rawmidi drain error (avail = 3987, buffer_size = 4096) [ 107.444444][ T8711] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 107.495181][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 107.496152][ T8713] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 107.683606][ T5568] usb 6-1: USB disconnect, device number 10 [ 107.742664][ T8726] netlink: 180 bytes leftover after parsing attributes in process `syz.5.632'. [ 107.762839][ T8724] Could not find key with description: [syz] [ 107.762849][ T8724] process_request_key_err: No key [ 107.762853][ T8724] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 107.762858][ T8724] One or more global auth toks could not properly register; rc = [-2] [ 107.762873][ T8724] Error validating options; rc = [-2] [ 107.765995][ T8726] No source specified [ 108.109109][ T8744] syzkaller0: entered promiscuous mode [ 108.109127][ T8744] syzkaller0: entered allmulticast mode [ 108.307109][ T8751] ip_tables: iptables: counters copy to user failed while replacing table [ 108.307181][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.324787][ T8751] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 108.377812][ T8760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.637'. [ 108.702491][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.640'. [ 109.405644][ T8751] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.431396][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 109.431412][ T43] audit: type=1400 audit(1794415848.797:999): avc: denied { unmount } for pid=7346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 109.441555][ T8768] lo: entered promiscuous mode [ 109.442166][ T8768] tunl0: entered promiscuous mode [ 109.442527][ T8768] gre0: entered promiscuous mode [ 109.442998][ T8768] gretap0: entered promiscuous mode [ 109.443935][ T8768] erspan0: entered promiscuous mode [ 109.444857][ T8768] ip_vti0: entered promiscuous mode [ 109.445257][ T8768] ip6_vti0: entered promiscuous mode [ 109.445521][ T8768] sit0: entered promiscuous mode [ 109.445827][ T8768] ip6tnl0: entered promiscuous mode [ 109.446090][ T8768] ip6gre0: entered promiscuous mode [ 109.446351][ T8768] syz_tun: entered promiscuous mode [ 109.446786][ T8768] ip6gretap0: entered promiscuous mode [ 109.447337][ T8768] bridge0: entered promiscuous mode [ 109.447867][ T8768] vcan0: entered promiscuous mode [ 109.448157][ T8768] bond0: entered promiscuous mode [ 109.448166][ T8768] bond_slave_0: entered promiscuous mode [ 109.448249][ T8768] bond_slave_1: entered promiscuous mode [ 109.449023][ T8768] team0: entered promiscuous mode [ 109.449033][ T8768] team_slave_0: entered promiscuous mode [ 109.449111][ T8768] team_slave_1: entered promiscuous mode [ 109.449188][ T8768] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 109.449994][ T8768] nlmon0: entered promiscuous mode [ 109.450264][ T8768] batadv0: entered promiscuous mode [ 109.450905][ T8768] vxcan0: entered promiscuous mode [ 109.451211][ T8768] vxcan1: entered promiscuous mode [ 109.451476][ T8768] veth0: entered promiscuous mode [ 109.452016][ T8768] veth1: entered promiscuous mode [ 109.452454][ T8768] wg0: entered promiscuous mode [ 109.452726][ T8768] wg1: entered promiscuous mode [ 109.453194][ T8768] wg2: entered promiscuous mode [ 109.453462][ T8768] veth0_to_bridge: entered promiscuous mode [ 109.454500][ T8768] veth1_to_bridge: entered promiscuous mode [ 109.458779][ T8768] veth0_to_bond: entered promiscuous mode [ 109.459527][ T8768] veth1_to_bond: entered promiscuous mode [ 109.460218][ T8768] veth0_to_team: entered promiscuous mode [ 109.461375][ T8768] veth1_to_team: entered promiscuous mode [ 109.462309][ T8768] veth0_to_batadv: entered promiscuous mode [ 109.462754][ T8768] batadv_slave_0: entered promiscuous mode [ 109.464079][ T8768] veth1_to_batadv: entered promiscuous mode [ 109.464520][ T8768] batadv_slave_1: entered promiscuous mode [ 109.464960][ T8768] xfrm0: entered promiscuous mode [ 109.465285][ T8768] veth0_to_hsr: entered promiscuous mode [ 109.466148][ T8768] veth1_to_hsr: entered promiscuous mode [ 109.467067][ T8768] hsr0: entered promiscuous mode [ 109.467682][ T8768] veth1_virt_wifi: entered promiscuous mode [ 109.468120][ T8768] veth0_virt_wifi: entered promiscuous mode [ 109.468554][ T8768] virt_wifi0: entered promiscuous mode [ 109.469897][ T8768] vlan0: entered promiscuous mode [ 109.470457][ T8768] vlan1: entered promiscuous mode [ 109.471825][ T8768] macvlan0: entered promiscuous mode [ 109.472811][ T8768] macvlan1: entered promiscuous mode [ 109.473333][ T8768] ipvtap0: entered promiscuous mode [ 109.473619][ T8768] ipvlan0: entered promiscuous mode [ 109.473934][ T8768] ipvlan1: entered promiscuous mode [ 109.475083][ T8768] macvtap0: entered promiscuous mode [ 109.475604][ T8768] macsec0: entered promiscuous mode [ 109.476082][ T8768] geneve0: entered promiscuous mode [ 109.476533][ T8768] geneve1: entered promiscuous mode [ 109.477741][ T8768] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 109.478777][ T8768] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 109.479773][ T8768] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 109.483031][ T8768] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 109.483835][ T8768] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 109.484402][ T8768] bridge1: entered promiscuous mode [ 109.485427][ T8768] bridge2: entered promiscuous mode [ 109.486309][ T8768] bridge3: entered promiscuous mode [ 109.487168][ T8768] bridge4: entered promiscuous mode [ 109.488127][ T8768] bridge5: entered promiscuous mode [ 109.488988][ T8768] bridge6: entered promiscuous mode [ 109.489880][ T8768] bridge7: entered promiscuous mode [ 109.497504][ T8768] bridge8: entered promiscuous mode [ 109.498730][ T8768] bridge9: entered promiscuous mode [ 109.499332][ T43] audit: type=1400 audit(1794415848.867:1000): avc: denied { read } for pid=8773 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.499558][ T8768] bridge10: entered promiscuous mode [ 109.500575][ T8768] bridge11: entered promiscuous mode [ 109.506105][ T8768] bridge12: entered promiscuous mode [ 109.508794][ T8768] bridge13: entered promiscuous mode [ 109.517482][ T8768] bridge14: entered promiscuous mode [ 109.518419][ T8768] bridge15: entered promiscuous mode [ 109.519311][ T8768] bridge16: entered promiscuous mode [ 109.521632][ T8768] bridge17: entered promiscuous mode [ 109.522463][ T8768] bridge18: entered promiscuous mode [ 109.523511][ T8768] bridge19: entered promiscuous mode [ 109.524518][ T8768] bridge20: entered promiscuous mode [ 109.525340][ T8768] bridge21: entered promiscuous mode [ 109.526221][ T8768] bridge22: entered promiscuous mode [ 109.527190][ T8768] bridge23: entered promiscuous mode [ 109.528504][ T8768] bridge24: entered promiscuous mode [ 109.529357][ T8768] bridge25: entered promiscuous mode [ 109.530108][ T8768] bridge26: entered promiscuous mode [ 109.530889][ T8768] bridge27: entered promiscuous mode [ 109.531527][ T8768] bridge28: entered promiscuous mode [ 109.532135][ T8768] bridge29: entered promiscuous mode [ 109.532736][ T8768] bridge30: entered promiscuous mode [ 109.533477][ T8768] bridge31: entered promiscuous mode [ 109.534130][ T8768] bridge32: entered promiscuous mode [ 109.534971][ T8768] bridge33: entered promiscuous mode [ 109.535817][ T8768] bridge34: entered promiscuous mode [ 109.536534][ T8768] gtp0: entered promiscuous mode [ 109.536978][ T8768] veth2: entered promiscuous mode [ 109.537672][ T8768] veth3: entered promiscuous mode [ 109.538300][ T8768] bond1: entered promiscuous mode [ 109.538855][ T8768] bond2: entered promiscuous mode [ 109.539392][ T8768] syztnl0: entered promiscuous mode [ 109.539775][ T8768] M: entered promiscuous mode [ 109.543781][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.544065][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.557420][ T8776] gadgetfs: bound to dummy_udc driver [ 109.579839][ T8781] Bluetooth: MGMT ver 1.23 [ 109.589111][ T13] ip6_tunnel: M xmit: Local address not yet configured! [ 109.589545][ T8782] netlink: 72 bytes leftover after parsing attributes in process `syz.4.644'. [ 109.645591][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.653356][ T8793] netlink: 'syz.4.646': attribute type 10 has an invalid length. [ 109.653368][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.646'. [ 109.659776][ T8790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.660210][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.660296][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.660380][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.660461][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.660573][ T8790] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 109.715981][ T43] audit: type=1400 audit(1794415849.077:1001): avc: denied { read } for pid=8794 comm="syz.1.647" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.752661][ T8807] geneve0: entered promiscuous mode [ 109.772368][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772622][ T13] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772667][ T13] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772684][ T13] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772699][ T13] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772715][ T13] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772731][ T13] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772746][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.772763][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 109.823633][ T5568] net_ratelimit: 2 callbacks suppressed [ 109.823645][ T5568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.853846][ T8821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.650'. [ 109.928146][ T43] audit: type=1400 audit(1794415849.287:1002): avc: denied { write } for pid=8822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.978481][ T43] audit: type=1400 audit(1794415849.337:1003): avc: denied { write } for pid=8831 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.036916][ T43] audit: type=1400 audit(1794415849.397:1004): avc: denied { append } for pid=8839 comm="syz.5.654" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 110.095758][ T43] audit: type=1326 audit(1794415849.457:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.5.654" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa27c7a8f19 code=0x0 [ 110.101177][ T5782] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 110.263872][ T5782] usb 6-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 110.265156][ T5782] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 110.265199][ T5782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 110.265223][ T5782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 110.265246][ T5782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 110.265269][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.265292][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 110.265317][ T5782] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 110.270930][ T5782] usb 6-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 110.270953][ T5782] usb 6-1: Product: syz [ 110.270967][ T5782] usb 6-1: Manufacturer: syz [ 110.270980][ T5782] usb 6-1: SerialNumber: syz [ 110.282401][ T8821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.282563][ T8821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.282707][ T8821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.282858][ T8821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.284861][ T5782] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 110.285265][ T5782] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 110.289010][ T5782] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 110.289102][ T5782] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 110.291520][ T5782] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 110.372808][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.461332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.465127][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.487838][ T8862] netlink: 116 bytes leftover after parsing attributes in process `syz.0.660'. [ 110.598558][ T5568] usb 6-1: USB disconnect, device number 11 [ 110.613824][ T5568] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 110.614578][ T5568] keyspan 6-1:1.0: device disconnected [ 110.817226][ T8866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.817270][ T8866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.902848][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 110.956645][ T43] audit: type=1400 audit(1794415850.317:1006): avc: denied { write } for pid=8874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.004242][ T43] audit: type=1400 audit(1794415850.367:1007): avc: denied { write } for pid=8881 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.056286][ T43] audit: type=1400 audit(1794415850.417:1008): avc: denied { read append } for pid=8884 comm="syz.0.666" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 111.142706][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.142850][ T8897] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 111.144892][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.145333][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.145833][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.146223][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.146697][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.147213][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.147634][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.148070][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.148497][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.148765][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.149018][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.149312][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.149625][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.149962][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.150218][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.150487][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.151342][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.151786][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.152359][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.154781][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.155120][ T8896] overlay: filesystem on ./file0 not supported as upperdir [ 111.230042][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 111.419512][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.433531][ T8922] netlink: 204 bytes leftover after parsing attributes in process `syz.1.675'. [ 111.488890][ T8934] libceph: resolve '0' (ret=-3): failed [ 111.525888][ T8940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.679'. [ 111.597078][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 111.656226][ T8953] xt_hashlimit: max too large, truncated to 1048576 [ 111.656470][ T8953] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 111.930115][ T8993] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 111.932960][ T8985] overlayfs: failed lookup in lower (newroot/96, name='bus', err=-40): overlapping layers [ 111.936293][ T8992] overlayfs: failed lookup in lower (newroot/96, name='bus', err=-40): overlapping layers [ 111.942006][ T8994] overlayfs: failed lookup in lower (newroot/96, name='bus', err=-40): overlapping layers [ 111.947570][ T8990] macvtap1: entered promiscuous mode [ 111.953292][ T8990] team0: Device macvtap1 failed to register rx_handler [ 112.147211][ T9005] device-mapper: ioctl: populate_table: next target spec (offset 208) overlaps 'struct dm_ioctl' [ 112.153937][ T5938] hid-sensor-hub 0003:1234:5678.0004: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 112.189885][ T9012] 9pnet_virtio: no channels available for device syz [ 112.384787][ T9017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.385283][ T9017] gre0: entered promiscuous mode [ 112.385295][ T9017] gre0: entered allmulticast mode [ 112.453881][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.530891][ T5938] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 112.621838][ T9029] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.691875][ T5938] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 112.692683][ T5938] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.693426][ T5938] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.694962][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.694975][ T5938] usb 6-1: Product: syz [ 112.694983][ T5938] usb 6-1: Manufacturer: syz [ 112.694990][ T5938] usb 6-1: SerialNumber: syz [ 112.701461][ T5938] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 112.704267][ T5938] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 112.709906][ T5938] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 112.825238][ T9037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.825556][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.852398][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.913562][ T9040] sd 0:0:0:0: PR command failed: 1026 [ 112.913603][ T9040] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 112.913749][ T9040] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 113.054512][ T855] bridge0: entered promiscuous mode [ 113.365526][ T9070] Config c/1 of g1 needs at least one function. [ 113.367016][ T9070] udc dummy_udc.0: failed to start g1: -22 [ 113.367037][ T9070] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 113.373460][ T9070] UDC core: g1: couldn't find an available UDC or it's busy [ 113.499177][ T9080] loop2: detected capacity change from 0 to 7 [ 113.502677][ T9080] Dev loop2: unable to read RDB block 7 [ 113.502710][ T9080] loop2: unable to read partition table [ 113.502874][ T9080] loop2: partition table beyond EOD, truncated [ 113.502919][ T9080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.650958][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 114.063775][ T9087] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 114.063796][ T9087] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 114.218299][ T9091] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 114.218366][ T9091] device-mapper: ioctl: error adding target to table [ 114.321984][ T9096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.322328][ T9096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.333496][ T9096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.340381][ T9096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.340418][ T9096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.346847][ T9096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.353712][ T9096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.353797][ T9096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.360838][ T5938] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 114.365872][ T9096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.522128][ T5938] usb 9-1: Using ep0 maxpacket: 32 [ 114.522595][ T5938] usb 9-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 114.524126][ T5938] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.524146][ T5938] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.524163][ T5938] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.524198][ T5938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.524216][ T5938] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.524235][ T5938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.524252][ T5938] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.524270][ T5938] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.524304][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.526753][ T5938] usb 9-1: config 0 descriptor?? [ 114.737944][ T5938] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.938158][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 114.938233][ T43] audit: type=1400 audit(1794415854.297:1033): avc: denied { read write } for pid=9088 comm="syz.4.716" name="lp0" dev="devtmpfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.938277][ T43] audit: type=1400 audit(1794415854.297:1034): avc: denied { open } for pid=9088 comm="syz.4.716" path="/dev/usb/lp0" dev="devtmpfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.996548][ T5568] usb 9-1: USB disconnect, device number 9 [ 114.999969][ T5568] usblp0: removed [ 115.304134][ T5938] usb 6-1: USB disconnect, device number 12 [ 115.309351][ T5938] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 115.314153][ T5938] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 115.315354][ T5938] ti_usb_3410_5052 6-1:2.0: device disconnected [ 115.425952][ T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.439688][ T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.553471][ T9135] trusted_key: encrypted_key: master key parameter 'èŠÑ Ú"«™<$ÍÑ, ™}éÊF4éo‹Ï¹«^¥––®»äÈ' is invalid [ 115.694175][ T5938] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.726832][ T9143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17547 sclass=netlink_route_socket pid=9143 comm=syz.4.728 [ 115.731662][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731723][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731770][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731819][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731870][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731917][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.731962][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.732008][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 115.732053][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.4.728 [ 116.153877][ T43] audit: type=1400 audit(1794415855.517:1035): avc: denied { getopt } for pid=9159 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.211580][ T5938] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 116.226292][ T9162] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.226316][ T9162] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.226337][ T9162] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.231204][ T9126] ceph: No mds server is up or the cluster is laggy [ 116.258481][ T9162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.733'. [ 116.278312][ T9162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.286006][ T9162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.295166][ T9162] bond0 (unregistering): Released all slaves [ 116.302238][ T6341] smbdirect: ib_dev[syz1] removed [ 116.306783][ T35] infiniband syz1: ib_query_port failed (-19) [ 116.309252][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 116.310199][ T9164] IPv6: sit1: Disabled Multicast RS [ 116.370869][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.370909][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.370999][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.451756][ T9174] validate_nla: 27 callbacks suppressed [ 116.451853][ T9174] netlink: 'syz.1.736': attribute type 63 has an invalid length. [ 116.451867][ T9174] netlink: 5 bytes leftover after parsing attributes in process `syz.1.736'. [ 116.451888][ T9174] gretap0: entered allmulticast mode [ 116.452167][ T9174] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.744277][ T9189] xt_NFQUEUE: number of total queues is 0 [ 116.843647][ T43] audit: type=1400 audit(1794415856.207:1036): avc: denied { ioctl } for pid=9194 comm="syz.1.743" path="socket:[31472]" dev="sockfs" ino=31472 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.846352][ T43] audit: type=1400 audit(1794415856.207:1037): avc: denied { getopt } for pid=9194 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.926227][ T43] audit: type=1326 audit(1794415856.287:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.1.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x7ff00000 [ 116.926337][ T43] audit: type=1326 audit(1794415856.287:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.1.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x7ff00000 [ 116.926424][ T43] audit: type=1326 audit(1794415856.287:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.1.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x7ff00000 [ 116.926516][ T43] audit: type=1326 audit(1794415856.287:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.1.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x7ff00000 [ 116.926603][ T43] audit: type=1326 audit(1794415856.287:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.1.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46da8f19 code=0x7ff00000 [ 117.000942][ T5568] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 117.136609][ T9218] xt_hashlimit: max too large, truncated to 1048576 [ 117.136839][ T9218] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 117.171466][ T5568] usb 10-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 117.176843][ T5568] usb 10-1: config index 0 descriptor too short (expected 65445, got 45) [ 117.178870][ T5568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.178888][ T5568] usb 10-1: Product: syz [ 117.178899][ T5568] usb 10-1: Manufacturer: syz [ 117.178909][ T5568] usb 10-1: SerialNumber: syz [ 117.227406][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.753'. [ 117.227812][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 117.320869][ T9232] netlink: del zone limit has 4 unknown bytes [ 117.418428][ T9238] netlink: 'syz.4.758': attribute type 46 has an invalid length. [ 117.447243][ T5568] rtl8150 10-1:1.0: couldn't reset the device [ 117.447488][ T5568] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 117.451818][ T5568] usb 10-1: USB disconnect, device number 9 [ 117.488090][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.488846][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.489335][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.490873][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491024][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491129][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491237][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491417][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491524][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491625][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491729][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491831][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.491941][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.492043][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.492149][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.492254][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.492357][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.492779][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.493391][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.493580][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.493823][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.495627][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.495834][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496029][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496221][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496402][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496580][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496755][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.496929][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.497096][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.497258][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.497429][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.497594][ T9245] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.865284][ T9263] syzkaller1: entered promiscuous mode [ 117.865302][ T9263] syzkaller1: entered allmulticast mode [ 117.964867][ T9271] ima: policy update failed [ 117.966361][ T9274] ima: policy update failed [ 117.988982][ T9269] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.011430][ T9277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb66d instead [ 118.011453][ T9277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 118.011466][ T9277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 118.012140][ T9277] jffs2: notice: (9277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 118.100125][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 118.409190][ T9300] FAULT_INJECTION: forcing a failure. [ 118.409190][ T9300] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.409237][ T9300] CPU: 2 UID: 0 PID: 9300 Comm: syz.0.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.409264][ T9300] Tainted: [L]=SOFTLOCKUP [ 118.409276][ T9300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.409287][ T9300] Call Trace: [ 118.409308][ T9300] [ 118.409316][ T9300] dump_stack_lvl+0x100/0x190 [ 118.409374][ T9300] should_fail_ex.cold+0x5/0xa [ 118.409404][ T9300] get_futex_key+0x1c9/0x13e0 [ 118.409442][ T9300] ? __pfx_get_futex_key+0x10/0x10 [ 118.409462][ T9300] ? __smp_call_single_queue+0x17e/0x450 [ 118.409481][ T9300] ? __pfx___smp_call_single_queue+0x10/0x10 [ 118.409502][ T9300] futex_wait_setup+0x91/0x540 [ 118.409537][ T9300] __futex_wait+0x19f/0x360 [ 118.409566][ T9300] ? __pfx___futex_wait+0x10/0x10 [ 118.409592][ T9300] ? __pfx_try_to_wake_up+0x10/0x10 [ 118.409619][ T9300] ? futex_hash+0x311/0x400 [ 118.409665][ T9300] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.409698][ T9300] ? find_held_lock+0x2b/0x80 [ 118.409720][ T9300] ? futex_wake+0x4ea/0x5e0 [ 118.409753][ T9300] futex_wait+0xe6/0x370 [ 118.409779][ T9300] ? __pfx_futex_wait+0x10/0x10 [ 118.409812][ T9300] ? find_held_lock+0x2b/0x80 [ 118.409838][ T9300] do_futex+0x265/0x440 [ 118.409861][ T9300] ? __pfx_do_futex+0x10/0x10 [ 118.409885][ T9300] ? fput+0x7c/0x100 [ 118.409922][ T9300] __x64_sys_futex+0x34f/0x4d0 [ 118.409947][ T9300] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.409980][ T9300] do_syscall_64+0x123/0x7b0 [ 118.410034][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.410054][ T9300] RIP: 0033:0x7fb6241a8f19 [ 118.410071][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.410089][ T9300] RSP: 002b:00007fb624f990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.410109][ T9300] RAX: ffffffffffffffda RBX: 00007fb624425fa8 RCX: 00007fb6241a8f19 [ 118.410123][ T9300] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb624425fa8 [ 118.410134][ T9300] RBP: 00007fb624425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 118.410147][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.410157][ T9300] R13: 00007fb624426038 R14: 00007ffec53a0f50 R15: 00007ffec53a1038 [ 118.410183][ T9300] [ 118.450821][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.450853][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.452262][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.666830][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 118.770445][ T9324] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 118.862125][ T5764] af_packet: tpacket_rcv: packet too big, clamped from 5194 to 3956. macoff=92 [ 119.005007][ T9345] xt_bpf: check failed: parse error [ 119.019370][ T9345] xt_bpf: check failed: parse error [ 119.058228][ T9357] ±ÿ: renamed from lo (while UP) [ 119.076531][ T9360] netlink: 'syz.5.795': attribute type 2 has an invalid length. [ 119.106493][ T9367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 119.140685][ T9377] syzkaller0: left promiscuous mode [ 119.140705][ T9377] syzkaller0: left allmulticast mode [ 119.149175][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.149187][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 119.452835][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 119.540743][ T5568] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 119.670716][ T5568] usb 9-1: device descriptor read/64, error -71 [ 119.910798][ T5568] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 120.000839][ T9415] netlink: 80 bytes leftover after parsing attributes in process `syz.1.807'. [ 120.000909][ T9415] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.040703][ T5568] usb 9-1: device descriptor read/64, error -71 [ 120.047657][ T43] kauditd_printk_skb: 2640 callbacks suppressed [ 120.047668][ T43] audit: type=1326 audit(1794415859.407:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.5.809" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa27c7a8f19 code=0x800000 [ 120.049797][ T43] audit: type=1400 audit(1794415859.407:3682): avc: denied { ioctl } for pid=9420 comm="syz.0.810" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x40603d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.150878][ T5568] usb usb9-port1: attempt power cycle [ 120.154172][ T43] audit: type=1400 audit(1794415859.517:3683): avc: denied { read } for pid=9433 comm="syz.0.811" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.154222][ T43] audit: type=1400 audit(1794415859.517:3684): avc: denied { open } for pid=9433 comm="syz.0.811" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.156007][ T43] audit: type=1400 audit(1794415859.517:3685): avc: denied { write } for pid=9433 comm="syz.0.811" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.156920][ T43] audit: type=1400 audit(1794415859.517:3686): avc: denied { ioctl } for pid=9433 comm="syz.0.811" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xc02063a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.271013][ T50] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 120.325090][ T43] audit: type=1400 audit(1794415859.687:3687): avc: denied { write } for pid=9442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.390721][ T43] audit: type=1400 audit(1794415859.747:3688): avc: denied { write } for pid=9445 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.441432][ T50] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 120.442665][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.442698][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 120.442727][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.449387][ T50] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 120.456288][ T50] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 120.490858][ T5568] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 120.511178][ T5568] usb 9-1: device descriptor read/8, error -71 [ 120.530851][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.530877][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.530891][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.615951][ T43] audit: type=1400 audit(1794415859.977:3689): avc: denied { write } for pid=9448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.678898][ T43] audit: type=1400 audit(1794415860.037:3690): avc: denied { write } for pid=9451 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.770701][ T5568] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 120.792916][ T5568] usb 9-1: device descriptor read/8, error -71 [ 120.813162][ T9417] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 120.813859][ T9417] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 120.814572][ T9417] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 120.873697][ T9457] netlink: 'syz.5.814': attribute type 1 has an invalid length. [ 120.888659][ T9457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.895783][ T9457] netlink: 'syz.5.814': attribute type 10 has an invalid length. [ 120.895797][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.814'. [ 120.895876][ T9457] dummy0: entered promiscuous mode [ 120.900966][ T5568] usb usb9-port1: unable to enumerate USB device [ 120.914131][ T9417] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 120.970925][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 121.022305][ T9416] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 121.024809][ T5568] usb 6-1: USB disconnect, device number 13 [ 121.037829][ T5568] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 121.038311][ T5568] spcp8x5 6-1:1.0: device disconnected [ 121.201379][ T9477] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 121.226650][ T9479] sctp: [Deprecated]: syz.5.823 (pid 9479) Use of int in maxseg socket option. [ 121.226650][ T9479] Use struct sctp_assoc_value instead [ 121.460862][ T5568] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 121.640754][ T5568] usb 10-1: Using ep0 maxpacket: 32 [ 121.641325][ T5568] usb 10-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00 [ 121.642271][ T5568] usb 10-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 121.642291][ T5568] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.642303][ T5568] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 121.642315][ T5568] usb 10-1: config 0 interface 0 has no altsetting 0 [ 121.642329][ T5568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.644043][ T5568] usb 10-1: config 0 descriptor?? [ 121.728401][ T9490] qnx6: unable to read the first superblock [ 121.728473][ T9490] qnx6: unable to read the first superblock [ 121.728478][ T9490] qnx6: unable to read the first superblock [ 121.736172][ T9489] qnx6: unable to read the first superblock [ 121.736188][ T9489] qnx6: unable to read the first superblock [ 121.736194][ T9489] qnx6: unable to read the first superblock [ 121.894103][ T9496] netlink: 'syz.0.828': attribute type 5 has an invalid length. [ 121.895544][ T9496] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 121.895604][ T9496] ALSA: mixer_oss: invalid index 137438 [ 121.895613][ T9496] ALSA: mixer_oss: invalid OSS volume '' [ 121.895620][ T9496] ALSA: mixer_oss: invalid OSS volume '' [ 121.896095][ T9496] ALSA: mixer_oss: invalid OSS volume '' [ 121.902245][ T9496] FAULT_INJECTION: forcing a failure. [ 121.902245][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 121.902273][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.0.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.902290][ T9496] Tainted: [L]=SOFTLOCKUP [ 121.902293][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.902299][ T9496] Call Trace: [ 121.902304][ T9496] [ 121.902309][ T9496] dump_stack_lvl+0x100/0x190 [ 121.902330][ T9496] should_fail_ex.cold+0x5/0xa [ 121.902347][ T9496] should_failslab+0xc2/0x120 [ 121.902360][ T9496] kmem_cache_alloc_noprof+0x92/0x6a0 [ 121.902379][ T9496] ? do_getname+0x35/0x390 [ 121.902396][ T9496] do_getname+0x35/0x390 [ 121.902412][ T9496] do_sys_openat2+0xc3/0x1d0 [ 121.902427][ T9496] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.902441][ T9496] ? find_held_lock+0x2b/0x80 [ 121.902456][ T9496] __x64_sys_openat+0x12d/0x210 [ 121.902471][ T9496] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.902491][ T9496] do_syscall_64+0x123/0x7b0 [ 121.902505][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.902516][ T9496] RIP: 0033:0x7fb6241a8f19 [ 121.902525][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.902534][ T9496] RSP: 002b:00007fb624f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.902545][ T9496] RAX: ffffffffffffffda RBX: 00007fb624425fa0 RCX: 00007fb6241a8f19 [ 121.902551][ T9496] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 121.902557][ T9496] RBP: 00007fb624237f6d R08: 0000000000000000 R09: 0000000000000000 [ 121.902563][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.902568][ T9496] R13: 00007fb624426038 R14: 00007fb624425fa0 R15: 00007ffec53a1038 [ 121.902583][ T9496] [ 121.903111][ T9496] fuse: Bad value for 'fd' [ 121.971160][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 121.999411][ T9508] overlayfs: failed to resolve './file1': -2 [ 122.010011][ T9506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.010112][ T9506] block device autoloading is deprecated and will be removed. [ 122.016941][ T9509] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb66d instead [ 122.016954][ T9509] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 122.016963][ T9509] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 122.017876][ T9509] jffs2: notice: (9509) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 122.121251][ T5568] hid-multitouch 0003:1FD2:6007.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 122.131924][ T9509] md: md1 stopped. [ 122.291756][ T50] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 122.399758][ T9524] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=3537391390 (14149565560 ns) > initial count (1640997352 ns). Using initial count to start timer. [ 122.441455][ T50] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 122.444167][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.444189][ T50] usb 5-1: Product: syz [ 122.444201][ T50] usb 5-1: Manufacturer: syz [ 122.444214][ T50] usb 5-1: SerialNumber: syz [ 122.514236][ T5782] usb 10-1: USB disconnect, device number 10 [ 122.688982][ T9552] selinux_netlink_send: 26 callbacks suppressed [ 122.689000][ T9552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=12606 sclass=netlink_tcpdiag_socket pid=9552 comm=syz.1.844 [ 122.696245][ T9546] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 122.696527][ T9546] qnx6: wrong signature (magic) in superblock #1. [ 122.696537][ T9546] qnx6: unable to read the first superblock [ 122.704457][ T9557] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 122.704611][ T9557] qnx6: wrong signature (magic) in superblock #1. [ 122.704618][ T9557] qnx6: unable to read the first superblock [ 122.860249][ T50] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 122.860307][ T50] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 122.864635][ T50] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 122.864661][ T50] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.865600][ T50] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.881879][ T50] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 122.890049][ T50] usb 5-1: USB disconnect, device number 26 [ 123.228982][ T9577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.547618][ T9593] CIFS: Attempting to mount //127.0.0.1/share [ 123.555822][ T5859] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 123.555838][ T5859] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 123.561762][ T9593] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 123.562772][ T5859] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 123.562787][ T5859] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 123.563313][ T9593] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 123.563535][ T9593] CIFS: VFS: cifs_mount failed w/return code = -2 [ 123.568298][ T9593] CIFS: Attempting to mount //127.0.0.1/share [ 123.568715][ T5859] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 123.568736][ T5859] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 123.570242][ T9593] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 123.579041][ T5859] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 123.579056][ T5859] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 123.585149][ T9593] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 123.585328][ T9593] CIFS: VFS: cifs_mount failed w/return code = -2 [ 123.943419][ T9634] Bluetooth: (null): Invalid header checksum [ 124.053511][ T9651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.874'. [ 124.137540][ T9663] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 124.200507][ T9663] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 124.363964][ T9669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62290 sclass=netlink_route_socket pid=9669 comm=syz.5.880 [ 124.397865][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.406547][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.407155][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.407631][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.411922][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.412303][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.412750][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.413104][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.413450][ T9677] netlink: 112 bytes leftover after parsing attributes in process `syz.4.883'. [ 124.417407][ T9672] syz_tun: left allmulticast mode [ 124.417470][ T9672] syz_tun: left promiscuous mode [ 124.417676][ T9672] bridge0: port 3(syz_tun) entered disabled state [ 124.435588][ T9672] batman_adv: batadv0: Adding interface: syz_tun [ 124.435623][ T9672] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.435649][ T9672] batman_adv: batadv0: Interface activated: syz_tun [ 125.050843][ T43] kauditd_printk_skb: 5444 callbacks suppressed [ 125.050864][ T43] audit: type=1400 audit(1794415864.417:8958): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.050981][ T43] audit: type=1400 audit(1794415864.417:8959): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.051165][ T43] audit: type=1400 audit(1794415864.417:8960): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.051339][ T43] audit: type=1400 audit(1794415864.417:8961): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.051510][ T43] audit: type=1400 audit(1794415864.417:8962): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.051695][ T43] audit: type=1400 audit(1794415864.417:8963): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.052487][ T43] audit: type=1400 audit(1794415864.417:8964): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.052711][ T43] audit: type=1400 audit(1794415864.417:8965): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.052887][ T43] audit: type=1400 audit(1794415864.417:8966): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.053086][ T43] audit: type=1400 audit(1794415864.417:8967): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.060817][ T43] kauditd_printk_skb: 37434 callbacks suppressed [ 130.060837][ T43] audit: type=1400 audit(1794415869.417:46402): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.060874][ T43] audit: type=1400 audit(1794415869.427:46403): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.060991][ T43] audit: type=1400 audit(1794415869.427:46404): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.061288][ T43] audit: type=1400 audit(1794415869.427:46405): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.061326][ T43] audit: type=1400 audit(1794415869.427:46406): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.062899][ T43] audit: type=1400 audit(1794415869.427:46407): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.062961][ T43] audit: type=1400 audit(1794415869.427:46408): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.062996][ T43] audit: type=1400 audit(1794415869.427:46409): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.063029][ T43] audit: type=1400 audit(1794415869.427:46410): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.063062][ T43] audit: type=1400 audit(1794415869.427:46411): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.931972][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932027][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.228364][ T7346] batman_adv: batadv0: Interface deactivated: syz_tun [ 133.343259][ T7346] batman_adv: batadv0: Removing interface: syz_tun [ 134.028568][ T5888] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.394592][ T5888] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.533204][ T5888] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.665506][ T5888] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.946891][ T5859] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 20003 - 0 [ 134.946953][ T5859] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 20003 - 0 [ 134.946986][ T5859] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 20003 - 0 [ 134.951381][ T14] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 20003 - 0 [ 135.025029][ T5888] bridge_slave_1: left allmulticast mode [ 135.025052][ T5888] bridge_slave_1: left promiscuous mode [ 135.025232][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.075689][ T43] kauditd_printk_skb: 7270 callbacks suppressed [ 135.075708][ T43] audit: type=1400 audit(1794415874.447:53376): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.077748][ T43] audit: type=1400 audit(1794415874.447:53377): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.078948][ T43] audit: type=1400 audit(1794415874.447:53378): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.080060][ T43] audit: type=1400 audit(1794415874.447:53379): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096095][ T43] audit: type=1400 audit(1794415874.457:53380): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096137][ T43] audit: type=1400 audit(1794415874.457:53381): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096166][ T43] audit: type=1400 audit(1794415874.457:53382): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096194][ T43] audit: type=1400 audit(1794415874.457:53383): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096223][ T43] audit: type=1400 audit(1794415874.457:53384): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.096253][ T43] audit: type=1400 audit(1794415874.457:53385): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.098031][ T5888] bridge_slave_0: left allmulticast mode [ 135.098055][ T5888] bridge_slave_0: left promiscuous mode [ 135.116885][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.929310][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.984894][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.986299][ T5888] bond0 (unregistering): Released all slaves [ 135.993835][ T5888] bond1 (unregistering): Released all slaves [ 136.020185][ T5888] bond2 (unregistering): Released all slaves [ 136.690412][ T5888] hsr_slave_0: left promiscuous mode [ 136.706530][ T5888] hsr_slave_1: left promiscuous mode [ 136.707409][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.707428][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.718717][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.718740][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.772806][ T5888] veth1_macvtap: left promiscuous mode [ 136.772842][ T5888] veth0_macvtap: left promiscuous mode [ 136.773021][ T5888] veth0_vlan: left promiscuous mode [ 137.397087][ T5888] team0 (unregistering): Port device team_slave_1 removed [ 137.425239][ T5888] team0 (unregistering): Port device team_slave_0 removed [ 138.642178][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 138.792374][ T5888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.024739][ T5888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.283242][ T5888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.423388][ T5888] team0: Port device netdevsim0 removed [ 139.424167][ T5888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.571107][ T14] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 20003 - 0 [ 139.617817][ T5888] bridge_slave_1: left allmulticast mode [ 139.619481][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.662051][ T5888] bridge_slave_0: left allmulticast mode [ 139.662254][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.086602][ T43] kauditd_printk_skb: 9887 callbacks suppressed [ 140.086623][ T43] audit: type=1400 audit(1794415879.457:61758): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.086670][ T43] audit: type=1400 audit(1794415879.457:61759): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.086709][ T43] audit: type=1400 audit(1794415879.457:61760): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.086740][ T43] audit: type=1400 audit(1794415879.457:61761): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.086774][ T43] audit: type=1400 audit(1794415879.457:61762): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.086806][ T43] audit: type=1400 audit(1794415879.457:61763): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.087152][ T43] audit: type=1400 audit(1794415879.457:61764): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.087188][ T43] audit: type=1400 audit(1794415879.457:61765): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.087309][ T43] audit: type=1400 audit(1794415879.457:61766): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.087343][ T43] audit: type=1400 audit(1794415879.457:61767): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.089949][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.218829][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.259420][ T5888] bond0 (unregistering): Released all slaves [ 141.264956][ T5888] bond1 (unregistering): Released all slaves [ 141.295042][ T5888] bond2 (unregistering): Released all slaves [ 141.340981][ T5888] bond3 (unregistering): Released all slaves [ 141.402494][ T13] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 20003 - 0 [ 141.402531][ T13] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 20003 - 0 [ 141.402556][ T13] netdevsim netdevsim4 eth17: set [1, 0] type 2 family 0 port 20003 - 0 [ 141.539982][ T5888] tipc: Disabling bearer [ 141.540261][ T5888] tipc: Left network mode [ 142.380090][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.380114][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.409335][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.409355][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.051180][ T5888] team0 (unregistering): Port device team_slave_1 removed [ 143.066465][ T5888] team0 (unregistering): Port device team_slave_0 removed [ 145.094627][ T43] kauditd_printk_skb: 7928 callbacks suppressed [ 145.094645][ T43] audit: type=1400 audit(1794415884.467:69693): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.096701][ T43] audit: type=1400 audit(1794415884.467:69694): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.098910][ T43] audit: type=1400 audit(1794415884.467:69695): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.101822][ T43] audit: type=1400 audit(1794415884.467:69696): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.101870][ T43] audit: type=1400 audit(1794415884.467:69697): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.101903][ T43] audit: type=1400 audit(1794415884.467:69698): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.101936][ T43] audit: type=1400 audit(1794415884.467:69699): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.101969][ T43] audit: type=1400 audit(1794415884.467:69700): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.102002][ T43] audit: type=1400 audit(1794415884.467:69701): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.102035][ T43] audit: type=1400 audit(1794415884.467:69702): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.100960][ T43] kauditd_printk_skb: 10587 callbacks suppressed [ 150.100980][ T43] audit: type=1400 audit(1794415889.457:80290): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103327][ T43] audit: type=1400 audit(1794415889.467:80291): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103365][ T43] audit: type=1400 audit(1794415889.467:80292): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103397][ T43] audit: type=1400 audit(1794415889.467:80293): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103427][ T43] audit: type=1400 audit(1794415889.467:80294): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103456][ T43] audit: type=1400 audit(1794415889.467:80295): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103486][ T43] audit: type=1400 audit(1794415889.467:80296): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103518][ T43] audit: type=1400 audit(1794415889.467:80297): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103548][ T43] audit: type=1400 audit(1794415889.467:80298): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.103579][ T43] audit: type=1400 audit(1794415889.467:80299): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.112239][ T43] kauditd_printk_skb: 10617 callbacks suppressed [ 155.112258][ T43] audit: type=1400 audit(1794415894.477:90125): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.113430][ T43] audit: type=1400 audit(1794415894.477:90126): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.115203][ T43] audit: type=1400 audit(1794415894.477:90127): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.116448][ T43] audit: type=1400 audit(1794415894.477:90128): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.117656][ T43] audit: type=1400 audit(1794415894.477:90129): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.119535][ T43] audit: type=1400 audit(1794415894.477:90130): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.121188][ T43] audit: type=1400 audit(1794415894.477:90131): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.134839][ T43] audit: type=1400 audit(1794415894.497:90132): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.136292][ T43] audit: type=1400 audit(1794415894.497:90133): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.136344][ T43] audit: type=1400 audit(1794415894.497:90134): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0