last executing test programs: 3m10.19372623s ago: executing program 2 (id=2000): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, r1, &(0x7f00000001c0)=0x1, 0x8) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)=0xfffffffffffffddf) 3m10.105674495s ago: executing program 2 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x1f, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 3m10.105161888s ago: executing program 2 (id=2004): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "0f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 3m10.054535465s ago: executing program 2 (id=2006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='syzkaller0\x00', 0x10) syz_ublk_setup_io_uring(0x522a, &(0x7f0000000280)={0x0, 0x4c93, 0x2000, 0x3, 0xb6, 0x0, r2}, &(0x7f0000000300), 0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r2, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x12021, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, 0x0) 3m10.002478586s ago: executing program 2 (id=2009): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3m9.665702125s ago: executing program 2 (id=2015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000480)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m9.560876827s ago: executing program 32 (id=2015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000480)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m47.414108257s ago: executing program 0 (id=2434): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x3, 0x101081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4092, 0x1000}, {&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f00000014c0)=""/44, 0x2c}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/245, 0xf5}, {0x0, 0x20}, {&(0x7f0000003180)=""/246, 0xf6}], 0xa}, 0x81}], 0x400000000000043, 0x40012032, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000080)=0x2) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 2m47.365317918s ago: executing program 0 (id=2437): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b"], 0x40}, 0x1, 0xb6, 0x0, 0x20006911}, 0x0) 2m47.30516075s ago: executing program 0 (id=2438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000008430000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) 2m47.251677171s ago: executing program 0 (id=2441): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffd, 0x3, 0x0, 0x1}, 0x8) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 2m47.185167059s ago: executing program 0 (id=2443): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0xf9, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x6ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x71, 0x81, 0xe8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x80, 0x86, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x0, 0xb, 0x10, 0xfa}, 0xae, &(0x7f0000000140)={0x5, 0xf, 0xae, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "33d7b8a20e4561be1dbb51dd92598aae"}, @generic={0x76, 0x10, 0x3, "ec61fa6a17ba7f9479ed4519b7f6bd48f84559616db91044d15abbfaec0c7ea6e57ed23aade7b37d07cc5c66e603c2935576f677921e0725021d84dbde35795736916c1bb22fbb534b46177788112128e0f89787f28f8fa0d796394f035851e8e73b4af6371e89009844e6f78348555db8900b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xfa, 0x6, 0x2, 0x17}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2a7b4888a7b29e05911af05009e1cb63"}]}, 0x2, [{0x36, &(0x7f0000000200)=@string={0x36, 0x3, "f382a174acc8ce0e1d62dab7efd439ed25967be17254927ebf411abd96bf7b8bbe595685fc682fdf1e5c2ead0e626b6e224a8240"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="05000000010001", 0x7) 2m46.864218313s ago: executing program 0 (id=2454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x52, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x401, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x0, 0x7}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="00000000d977bad41c7320a8a3495688df33faf00978b693cf15957f1a6dd3efd8e5af3ea41ba10400a569eab696a4a562a401ddbbb2711e7df50358fdb88fc66c54401f6aaf7bceb8666e7cad6aff01df020a00e6e32728b118c59f673701e4e650", 0x62) 2m46.783465024s ago: executing program 33 (id=2454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x52, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x401, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x0, 0x7}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="00000000d977bad41c7320a8a3495688df33faf00978b693cf15957f1a6dd3efd8e5af3ea41ba10400a569eab696a4a562a401ddbbb2711e7df50358fdb88fc66c54401f6aaf7bceb8666e7cad6aff01df020a00e6e32728b118c59f673701e4e650", 0x62) 1m16.812735504s ago: executing program 1 (id=4046): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b"], 0x40}, 0x1, 0xffffffffffffffe4, 0x0, 0x20006911}, 0x0) 1m16.712812928s ago: executing program 1 (id=4048): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000004c0)) (async) keyctl$set_reqkey_keyring(0xe, 0x4) (async) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x21) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000080)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", "0500", ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "00000000d220b34b00", "081c18016476d41a3000"]}) (async) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) 1m16.653979967s ago: executing program 1 (id=4049): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000040)="736eeaa43a") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x44050}, 0x20000050) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0401000010000f0b00000000fbdbdf25ff02000000000000000000000000000164010119000000000000000000000000ffff00e712d4dc7d9549427443bf00000100000000202002000000", @ANYRES64=r1, @ANYRES64, @ANYRES64=r2], 0x104}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[], 0x104}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)=""/237, 0x75, 0xed, 0x0, 0xfffffffd}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m16.59347345s ago: executing program 1 (id=4052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlinkprop={0x44, 0x6c, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21000, 0x44102}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7a}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}]}, 0x44}}, 0x8008006) umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m16.593299955s ago: executing program 1 (id=4053): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x28180, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) (async, rerun: 64) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @empty}, 0x1c) 1m16.123671374s ago: executing program 1 (id=4058): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r5, &(0x7f0000002a80)={0x2020}, 0xfffffffe) (async) ioperm(0x0, 0x80, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x43067, 0x60b5}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x44, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000002) 1m16.025053673s ago: executing program 34 (id=4058): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r5, &(0x7f0000002a80)={0x2020}, 0xfffffffe) (async) ioperm(0x0, 0x80, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x43067, 0x60b5}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x44, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000002) 6.00209727s ago: executing program 6 (id=5444): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34324142, 0x500, 0x2d0, 0x3, @stepwise={{0x9, 0x8000ffe7}, {0x10001, 0x101}, {0x4, 0x805}}}) 6.001697389s ago: executing program 6 (id=5445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000800010091"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d", 0x9c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_open_dev$video4linux(0x0, 0x955a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="408146f50589f183b030f10ff02b", @ANYRESDEC=0x0]) r7 = accept4(r4, 0x0, 0x0, 0x800) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000e80)={{0x8, 0x7, 0x9, 0x10, 0xffffe42a}, 0x0}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.932679252s ago: executing program 6 (id=5447): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000180)={0x0, 0x26, &(0x7f0000000080)="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", {0x1751, 0x5f, 0x32344d59, 0x8, 0x61, 0xf, 0x2, 0xfff}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x1050c0, 0x0) 5.911365536s ago: executing program 6 (id=5449): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') prctl$PR_GET_SECCOMP(0x15) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') (async) prctl$PR_GET_SECCOMP(0x15) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) (async) 5.832536909s ago: executing program 6 (id=5452): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x200) syz_fuse_handle_req(r2, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119dd04000000bffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e42073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277c89204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c0e00c474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83ed2e256c954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74bae5f102c009ba75bb8ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x2a0091, 0x0, 0x0, 0x0, 0x3ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 5.58292503s ago: executing program 6 (id=5459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xff07}, 0x2000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 5.423672627s ago: executing program 35 (id=5459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xff07}, 0x2000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 1.603320751s ago: executing program 5 (id=5505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19", 0xc) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.602755242s ago: executing program 5 (id=5508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000800010091"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d", 0x9c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_open_dev$video4linux(0x0, 0x955a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="408146f50589f183b030f10ff02b", @ANYRESDEC=0x0]) r7 = accept4(r4, 0x0, 0x0, 0x800) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000e80)={{0x8, 0x7, 0x9, 0x10, 0xffffe42a}, 0x0}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.490059457s ago: executing program 7 (id=5511): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x2e7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f310", 0xd}, {&(0x7f00000003c0)="6822f74dba17e71f10cb86969f5a60ac16901dbccb915d9f7e4c165f1d829db60743a8add14758799f1f09905718bb93c1173ef3200bd6760c0ced78d2040cb3ccaddffa9518eb3d6baae0c38c1f7e8746f173b598e01077448453278a4549ffa4907559a214fed6327354122c38d1bbefe24cee4fd230dcc7c1d5d50d806790c6894f381d161d86c2297fa51373f64f0cb77ae881a77da0cb88f8d86d579449c0446f5f6205eb56e70b0a5e2dc7d2dbcf481fca71978329e60ee9", 0xbb}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62", 0x68}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000780)="6178dab25b1e508965872e433b8c8aca6bc7ae0558a8122324925c26cf54e1c762c77ccdb17e01f772dc4765598a721b0cdf879a300be0486f52fc677c846913c0863c48899297557217f83e8e1c8475d854cb3c5f75642021167494ab0654382496492f6068e8f6eca76d265c65e583c895a804ce83ad678034c8a47431e877c73e7cd1734c5e5d40dadd593175d0fd5fd8e4eb05a4f171f45b312bf2b1f5448b145552465d073123b91a69ab9160c390d0b9a1421316bbbcf74276e4a2f572e67a328bd43c2d627f50e6897edf73e5dd372fdd0174b126976200ba3ade60a3bad4e8a7f3c5fc5bae160833671054fa59b505a4d13485092a9da6aa", 0xfc}, {&(0x7f0000000880)="bdd5922278e7c5ceda3e650bc1c6c9a75df8307e48779f1599bbe3941e1c3c29f8a200ea7da6e6baa99415a47439a11885e06aef1432863aedc2662d1696e2ba3f44d91c77fba413c8ec6483", 0x4c}, {&(0x7f0000000980)}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a40000002600000125bd7002fbdbdf2506000000a42e3879dd32b3dcfc932398cfa7a24048f01a60bee47cf5a5701f5774129b7f521dc5548f539ebdfa0c12640026cb727226157876877348ff56c7ee083bb17f2da29e50abcdd75b9dbcc0de0d7cc512ed792a8a0e77013ea65de45076044e9b0edf78b8e99e7dfdede64b43b2f0de9ae2225850ce6972502530b688435dd6736012648093a731f5ec29bd09ed3b6e2e"], 0xa4}, 0x1, 0x0, 0x0, 0x40c4800}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x11, 0xffffffffffffffff, 0xef238000) 1.42053636s ago: executing program 7 (id=5512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f310", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000780)="6178dab25b1e508965872e433b8c8aca6bc7ae0558a8122324925c26cf54e1c762c77ccdb17e01f772dc4765598a721b0cdf879a300be0486f52fc677c846913c0863c48899297557217f83e8e1c8475d854cb3c5f75642021167494ab0654382496492f6068e8f6eca76d265c65e583c895a804ce83ad678034c8a47431e877c73e7cd1734c5e5d40dadd593175d0fd5fd8e4eb05a4f171f45b312bf2b1f5448b145552465d073123b91a69ab9160c390d0b9a1421316bbbcf74276e4a2f572e67a328bd43c2d627f50e6897edf73e5dd372fdd0174b126976200ba3ade60a3bad4", 0xe2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.419658414s ago: executing program 7 (id=5513): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f310", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="24acad", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000780)="6178dab25b1e508965872e433b8c8aca6bc7ae0558a8122324925c26cf54e1c762c77ccdb17e01f772dc4765598a721b0cdf879a300be0486f52fc677c846913c0863c48899297557217f83e8e1c8475d854cb3c5f75642021167494ab0654382496492f6068e8f6eca76d265c65e583c895a804ce83ad678034c8a47431e877c73e7cd1734c5e5d40dadd593175d0fd5fd8e4eb05a4f171f45b312bf2b1f5448b145552465d073123b91a69ab9160c390d0b9a1421316bbbcf74276e4a2f572e67a328bd43c2d627f50e6897edf73e5dd372fdd0174b126976200ba3a", 0xdd}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.342456126s ago: executing program 7 (id=5514): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x800) 1.341809944s ago: executing program 7 (id=5516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19", 0xc) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.243101939s ago: executing program 5 (id=5517): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000bdf6f032ac3dd36b0000000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0)="1044528b26a0fcae43178db1e22986372f37429313f7bdf9fb3c918668", &(0x7f0000000000)=""/6, 0x2}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@delchain={0x31c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x2e0, 0x2, [@TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4000}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x66}, @TCA_ROUTE4_ACT={0x2b8, 0x6, [@m_ct={0x174, 0x16, 0x0, 0x0, {{0x7}, {0x94, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000000, 0x0, 0x5, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "d3f7122af9adfa61a6918d202159b96e"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @empty}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0xb9, 0x6, "f5dd38793c7e2660e5831cf909c7d03c3a4a5ba4c8cdc5dbadef7ace6d48506612bd4fe5803e49db2ef65cb70d3d97730adfcca6e904b16ac231fcca4e571f45cb3dea7bdd14a4d81551afb6afc9f8cfd1a8cefd3fd842bfe622237ce2f9ea28ec93c7e3ac678b92e2aaf5fbefecca0d9e8de95d784143426fbd40d923ba12b00468e45722c64bb0b08dadef757cda994a227013db0f39651457d0f2ff431f24fa4204e547fc9d07377f5ce4a3dcc1824a222c1298"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x140, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x4, 0x3, 0x8, 0x3}, @empty, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x80000001, 0x2299}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffffff7, 0x6, 0x6, 0x5}, @empty, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x50b, 0x0, 0x7, 0x5}, @multicast2, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xa569, 0x1, 0xaf1, 0x4}, @empty, @multicast1, 0x5ddc9218d9651cfc, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x1, 0xffffffffdffffffd, 0x3, 0x1}, @rand_addr=0x64010100, @multicast2, 0xff000000}}]}, {0x25, 0x6, "2e6833ba5dee3c0bf23c6ace06b5ea48fbab7b7204e88be8adf271053929ed6316"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r10 = fsmount(r3, 0x0, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) setpgid(0x0, r11) fchdir(r10) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x40049366, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.242693363s ago: executing program 7 (id=5519): r0 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, &(0x7f00000009c0)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 'syz1\x00', 0x0, 0xffffffffffffffcc}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c88a807001000000028"], 0xffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) ioctl$COMEDI_SETRSUBD(r7, 0x6410) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x40010, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600ee"], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES16=r9, @ANYBLOB="02002abd7000fddbdf25080000000800040008000000050005000c0000000800030005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x2b}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000800)={'\x00', 0x4, 0x9, 0x40, 0x0, 0x5, 0x8080000, 0xdddd0000, '\x00', 0x654}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.059842097s ago: executing program 4 (id=5520): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000001b40), 0x101000, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7dd, 0x101100) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000001b80)) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0100fa0f00010000000000fddbdf25fc02000000000000000000e9ffffff000084f96436f20320566f30000000000000000000000040000000000300030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008001800e4090000630001007368613235362d636500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8000000eb7706a9637ef7af3ed95b65d694474888f6f9c230b79f20d02bdc00"], 0x15c}}, 0x20000000) 1.059692182s ago: executing program 4 (id=5521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a3100000000300000001a0a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) 951.999351ms ago: executing program 4 (id=5523): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x77e24c893308aa0}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x77e24c893308aa0}, 0x9c) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r10, &(0x7f0000000c40)=ANY=[], 0x13) (async) write$P9_RVERSION(r10, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r9, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000040)=0xd12, 0x4) (async) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000040)=0xd12, 0x4) connect$inet(r13, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r13, 0x1, 0x22, &(0x7f0000000000)=0x7b, 0x4) (async) setsockopt$sock_int(r13, 0x1, 0x22, &(0x7f0000000000)=0x7b, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xa, r2, 0x0, r1}) recvmmsg(r13, &(0x7f0000009600)=[{{0x0, 0xfffffffffffffe98, 0x0}, 0x1}], 0x1, 0x40012082, 0x0) 762.976636ms ago: executing program 4 (id=5525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000800010091"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d", 0x9c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_open_dev$video4linux(0x0, 0x955a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="408146f50589f183b030f10ff02b", @ANYRESDEC=0x0]) r7 = accept4(r4, 0x0, 0x0, 0x800) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000e80)={{0x8, 0x7, 0x9, 0x10, 0xffffe42a}, 0x0}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 465.169603ms ago: executing program 4 (id=5530): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x800}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x73622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0x2, 0x1, 0x33}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r11, 0x80685600, &(0x7f0000000040)) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r12, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r11, 0x4020565b, &(0x7f0000000100)={0x5}) 407.852623ms ago: executing program 5 (id=5533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 390.678135ms ago: executing program 4 (id=5534): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) 389.553936ms ago: executing program 3 (id=5535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x6, 0x4) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r6) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7], 0x48}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=@bridge_getvlan={0x40, 0x72, 0x301, 0x70bd28, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) 350.692113ms ago: executing program 5 (id=5536): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b"], 0x40}, 0x1, 0x0, 0x80000000080000, 0x20006911}, 0x0) 293.326667ms ago: executing program 5 (id=5537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xfbfb}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8864}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r5, 0x1e67b000) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 242.922796ms ago: executing program 3 (id=5538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000800010091"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d", 0x9c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_open_dev$video4linux(0x0, 0x955a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="408146f50589f183b030f10ff02b", @ANYRESDEC=0x0]) r7 = accept4(r4, 0x0, 0x0, 0x800) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000e80)={{0x8, 0x7, 0x9, 0x10, 0xffffe42a}, 0x0}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 63.163765ms ago: executing program 3 (id=5539): socket$alg(0x26, 0x5, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x6802, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0xffffffffffffff2f) 63.002163ms ago: executing program 3 (id=5540): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 231.565µs ago: executing program 3 (id=5541): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, 0xfbc}, 0x28) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8001, 0x38, {"f16b2400"}, 0x5, 0x2, 0x1ff}}}, 0x90) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f00000003c0)) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000180)={0x400, 0x6, 0x8001, 0xb, 0x6, 0x7}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0xa, 0x0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/6, 0x6}, {&(0x7f00000016c0)=""/105, 0x69}, {&(0x7f0000001740)=""/9, 0x9}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/153, 0x99}, {&(0x7f0000002840)=""/209, 0xd1}]}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x20, 0xffffffffffffffff, 0x0}) 0s ago: executing program 3 (id=5542): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x57) r3 = socket(0x1, 0x803, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000300)=0x9, 0x4) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000002c0)={0x50000010}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x68}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x8000) kernel console output (not intermixed with test programs): ered promiscuous mode [ 277.939596][T18783] xfrm1: entered allmulticast mode [ 278.373098][T18802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4347'. [ 278.688382][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4354'. [ 278.688788][T18817] validate_nla: 13 callbacks suppressed [ 278.688800][T18817] netlink: 'syz.3.4355': attribute type 12 has an invalid length. [ 278.698425][T18817] netlink: 'syz.3.4355': attribute type 29 has an invalid length. [ 278.700830][T18817] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4355'. [ 278.703519][T18817] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4355'. [ 278.829773][T18827] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4359'. [ 278.969886][T18843] netlink: 'syz.4.4366': attribute type 12 has an invalid length. [ 278.972651][T18843] netlink: 'syz.4.4366': attribute type 29 has an invalid length. [ 279.023824][ T5750] Bluetooth: hci2: command tx timeout [ 279.039575][T18851] netlink: 'syz.6.4370': attribute type 3 has an invalid length. [ 279.191824][T18873] netlink: 'syz.3.4379': attribute type 16 has an invalid length. [ 279.202482][T18869] veth0_to_team: entered promiscuous mode [ 279.206645][T18869] erspan0: entered promiscuous mode [ 279.210201][T18869] debugfs: 'hsr1' already exists in 'hsr' [ 279.212110][T18869] Cannot create hsr debugfs directory [ 279.334971][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 279.383384][T18880] could not allocate digest TFM handle cryptd(blake2b-160) [ 279.510370][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 279.510386][ T40] audit: type=1400 audit(2000000073.240:38131): avc: denied { prog_load } for pid=18897 comm="syz.4.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 279.524199][ T40] audit: type=1400 audit(2000000073.250:38132): avc: denied { perfmon } for pid=18897 comm="syz.4.4386" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.538801][ T40] audit: type=1400 audit(2000000073.250:38133): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 279.560969][ T40] audit: type=1400 audit(2000000073.290:38134): avc: denied { create } for pid=18901 comm="syz.3.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.563425][T18902] net_ratelimit: 173 callbacks suppressed [ 279.563440][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.569533][ T40] audit: type=1400 audit(2000000073.290:38135): avc: denied { name_bind } for pid=18901 comm="syz.3.4387" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 279.574301][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.583859][ T40] audit: type=1400 audit(2000000073.300:38136): avc: denied { write } for pid=18899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.584899][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.599541][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.607324][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.610807][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.614914][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.618779][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.622713][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.626671][ T40] audit: type=1400 audit(2000000073.360:38137): avc: denied { write } for pid=18904 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.626774][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.646988][ T40] audit: type=1400 audit(2000000073.380:38138): avc: denied { write } for pid=18901 comm="syz.3.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.748535][ T40] audit: type=1400 audit(2000000073.480:38139): avc: denied { write } for pid=18906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.758532][ T40] audit: type=1400 audit(2000000073.480:38140): avc: denied { create } for pid=18906 comm="dhcpcd-run-hook" name="resolv.conf.eth0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 281.094938][ T5750] Bluetooth: hci2: command tx timeout [ 283.174176][ T5750] Bluetooth: hci2: command tx timeout [ 284.774772][ T53] net_ratelimit: 23 callbacks suppressed [ 284.774786][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.414135][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.574612][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.701218][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 285.701232][ T40] audit: type=1400 audit(2000000079.430:38149): avc: denied { write } for pid=18919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.758200][ T40] audit: type=1400 audit(2000000079.490:38150): avc: denied { write } for pid=18922 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.791567][ T40] audit: type=1400 audit(2000000079.520:38151): avc: denied { search } for pid=18919 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.814161][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.218517][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.454437][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.854422][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.334587][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.494844][T13646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.894402][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.401161][ T40] audit: type=1400 audit(2000000083.130:38152): avc: denied { node_bind } for pid=18926 comm="syz.3.4391" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 289.410305][ T40] audit: type=1400 audit(2000000083.140:38153): avc: denied { create } for pid=18930 comm="syz.4.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.418889][ T40] audit: type=1400 audit(2000000083.140:38154): avc: denied { bind } for pid=18930 comm="syz.4.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.449352][ T40] audit: type=1400 audit(2000000083.180:38155): avc: denied { create } for pid=18934 comm="syz.6.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.452257][T18936] fuse: Bad value for 'fd' [ 289.457355][ T40] audit: type=1400 audit(2000000083.180:38156): avc: denied { mounton } for pid=18934 comm="syz.6.4393" path="/82/file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.471397][ T40] audit: type=1400 audit(2000000083.180:38157): avc: denied { read } for pid=18935 comm="syz.3.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.472511][T18932] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 289.480889][ T40] audit: type=1400 audit(2000000083.190:38158): avc: denied { watch watch_reads } for pid=18930 comm="syz.4.4390" path="/proc/51/net/dev_snmp6" dev="proc" ino=4026534625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 289.834833][T18975] fuse: Bad value for 'fd' [ 289.974188][ T53] net_ratelimit: 64 callbacks suppressed [ 289.974201][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.015140][T18981] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 290.363593][T18999] __nla_validate_parse: 3 callbacks suppressed [ 290.363605][T18999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4419'. [ 290.374382][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.457425][T19009] tipc: Enabling of bearer rejected, failed to enable media [ 290.615741][T19029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4430'. [ 290.623970][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.645249][T19032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.648518][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.676117][T19034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 290.682228][T19034] sock: sock_set_timeout: `syz.4.4433' (pid 19034) tries to set negative timeout [ 290.699696][T19037] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4434'. [ 290.724947][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 290.724959][ T40] audit: type=1400 audit(2000000084.460:38230): avc: denied { create } for pid=19038 comm="syz.4.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.733597][ T40] audit: type=1400 audit(2000000084.460:38231): avc: denied { setopt } for pid=19038 comm="syz.4.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.739935][ T40] audit: type=1400 audit(2000000084.460:38232): avc: denied { read append } for pid=19038 comm="syz.4.4435" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 290.741446][T19042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19042 comm=syz.3.4436 [ 290.748377][ T40] audit: type=1400 audit(2000000084.460:38233): avc: denied { open } for pid=19038 comm="syz.4.4435" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 290.825439][T19052] netlink: 'syz.6.4439': attribute type 7 has an invalid length. [ 290.826249][ T40] audit: type=1400 audit(2000000084.560:38234): avc: denied { node_bind } for pid=19049 comm="syz.4.4438" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 290.828268][T19052] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 290.869267][T19060] overlayfs: overlapping lowerdir path [ 290.893425][T19064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4443'. [ 290.904473][T19066] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4444'. [ 290.922494][ T40] audit: type=1400 audit(2000000084.650:38235): avc: denied { create } for pid=19067 comm="syz.6.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.923257][T19068] netlink: 'syz.6.4445': attribute type 1 has an invalid length. [ 290.930188][ T40] audit: type=1400 audit(2000000084.650:38236): avc: denied { bind } for pid=19067 comm="syz.6.4445" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.946361][ T40] audit: type=1400 audit(2000000084.650:38237): avc: denied { name_bind } for pid=19067 comm="syz.6.4445" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 290.958282][ T40] audit: type=1400 audit(2000000084.650:38238): avc: denied { node_bind } for pid=19067 comm="syz.6.4445" saddr=fc02:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 290.960557][T19068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.961930][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.962298][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.962612][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.966755][T19073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.971444][ T40] audit: type=1400 audit(2000000084.690:38239): avc: denied { map_read map_write } for pid=19073 comm="syz.3.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.988778][T19068] bond3: (slave geneve2): making interface the new active one [ 290.991319][T19068] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 291.066865][T19082] bond4: ARP target 9.0.0.0 is already present [ 291.069046][T19082] bond4: option arp_ip_target: invalid value (9) [ 291.077252][T19082] bond4 (unregistering): Released all slaves [ 291.184626][T19098] xt_hashlimit: size too large, truncated to 1048576 [ 291.191252][T19093] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.211301][T19103] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4457'. [ 291.345612][T19111] bond4: Unable to set down delay as MII monitoring is disabled [ 291.349760][T19111] bond4 (unregistering): Released all slaves [ 291.457779][T19124] overlayfs: failed to clone upperpath [ 291.914450][T19157] veth0_to_team: entered promiscuous mode [ 291.917005][T19157] erspan0: entered promiscuous mode [ 291.919663][T19157] debugfs: 'hsr1' already exists in 'hsr' [ 291.921847][T19157] Cannot create hsr debugfs directory [ 291.951774][T19160] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4479'. [ 291.973603][T19162] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 292.115992][T19176] SELinux: ebitmap: truncated map [ 292.118402][T19181] fuse: Bad value for 'fd' [ 292.142351][T19176] SELinux: failed to load policy [ 292.170925][T19185] overlayfs: failed to clone upperpath [ 292.395150][T19201] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4493'. [ 292.493203][T19210] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 292.734570][T19222] netlink: 'syz.4.4502': attribute type 5 has an invalid length. [ 292.761900][T19224] netlink: 'syz.6.4503': attribute type 12 has an invalid length. [ 292.765988][T19224] netlink: 'syz.6.4503': attribute type 29 has an invalid length. [ 292.769360][T19224] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4503'. [ 292.773412][T19224] netlink: 'syz.6.4503': attribute type 1 has an invalid length. [ 292.779629][T19224] netlink: 47 bytes leftover after parsing attributes in process `syz.6.4503'. [ 292.918720][T19239] syzkaller1: entered promiscuous mode [ 292.920865][T19239] syzkaller1: entered allmulticast mode [ 293.066812][T19254] netlink: 'syz.4.4515': attribute type 12 has an invalid length. [ 293.070048][T19254] netlink: 'syz.4.4515': attribute type 29 has an invalid length. [ 293.073285][T19254] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 293.148156][T19260] overlayfs: failed to resolve './file2': -2 [ 293.183128][T19262] could not open pipe file descriptor [ 293.214899][T19262] syzkaller0: entered promiscuous mode [ 293.216616][T19262] syzkaller0: entered allmulticast mode [ 293.320114][T15729] tipc: Subscription rejected, illegal request [ 293.444379][T19288] netlink: 'syz.3.4527': attribute type 12 has an invalid length. [ 293.575491][T19307] netlink: 'syz.6.4535': attribute type 11 has an invalid length. [ 293.939306][T19343] Bluetooth: MGMT ver 1.23 [ 293.951961][T19343] autofs4:pid:19343:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 293.963812][T19343] autofs4:pid:19343:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 294.012457][T19349] fuse: Bad value for 'fd' [ 294.027465][T19343] wg2 speed is unknown, defaulting to 1000 [ 294.385013][T19353] overlayfs: failed to resolve './file1/file0': -2 [ 295.175356][ T5829] net_ratelimit: 240 callbacks suppressed [ 295.175370][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.271846][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.276936][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.280813][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.287785][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.291329][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.295612][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.298940][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.301764][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.305247][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.348334][T19470] comedi comedi2: comedi_config --init_data is deprecated [ 295.371968][T19409] FAULT_INJECTION: forcing a failure. [ 295.371968][T19409] name fail_futex, interval 1, probability 0, space 0, times 1 [ 295.378486][T19474] FAULT_INJECTION: forcing a failure. [ 295.378486][T19474] name failslab, interval 1, probability 0, space 0, times 0 [ 295.386553][T19474] CPU: 2 UID: 0 PID: 19474 Comm: syz.3.4603 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.386584][T19474] Tainted: [L]=SOFTLOCKUP [ 295.386590][T19474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.386600][T19474] Call Trace: [ 295.386608][T19474] [ 295.386614][T19474] dump_stack_lvl+0x100/0x190 [ 295.386651][T19474] should_fail_ex.cold+0x5/0xa [ 295.386676][T19474] ? comedi_alloc_devpriv+0x22/0x60 [ 295.386708][T19474] should_failslab+0xc2/0x120 [ 295.386730][T19474] __kmalloc_noprof+0xe0/0x850 [ 295.386754][T19474] ? cred_has_capability.isra.0+0x186/0x300 [ 295.386794][T19474] comedi_alloc_devpriv+0x22/0x60 [ 295.386820][T19474] pcl812_attach+0x52/0x2300 [ 295.386850][T19474] ? lockdep_init_map_type+0x5c/0x250 [ 295.386877][T19474] comedi_device_attach+0x40e/0x6b0 [ 295.386908][T19474] do_devconfig_ioctl+0x1b3/0x6d0 [ 295.386929][T19474] ? comedi_unlocked_ioctl+0x180/0x3310 [ 295.386951][T19474] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 295.387008][T19474] ? find_held_lock+0x2b/0x80 [ 295.387030][T19474] comedi_unlocked_ioctl+0x860/0x3310 [ 295.387051][T19474] ? tomoyo_path_number_perm+0x188/0x580 [ 295.387077][T19474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 295.387107][T19474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.387129][T19474] ? do_vfs_ioctl+0x226/0x13e0 [ 295.387150][T19474] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.387172][T19474] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 295.387208][T19474] ? __fget_files+0x215/0x3d0 [ 295.387228][T19474] ? hook_file_ioctl_common+0x149/0x410 [ 295.387257][T19474] ? selinux_file_ioctl+0x13b/0x290 [ 295.387284][T19474] ? selinux_file_ioctl+0xb6/0x290 [ 295.387313][T19474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 295.387335][T19474] __x64_sys_ioctl+0x18e/0x210 [ 295.387354][T19474] do_syscall_64+0x115/0x870 [ 295.387383][T19474] ? clear_bhb_loop+0x40/0x90 [ 295.387411][T19474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.387431][T19474] RIP: 0033:0x7faa4719ce59 [ 295.387446][T19474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.387460][T19474] RSP: 002b:00007faa4813c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.387477][T19474] RAX: ffffffffffffffda RBX: 00007faa47415fa0 RCX: 00007faa4719ce59 [ 295.387489][T19474] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 295.387500][T19474] RBP: 00007faa4813c090 R08: 0000000000000000 R09: 0000000000000000 [ 295.387512][T19474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.387522][T19474] R13: 00007faa47416038 R14: 00007faa47415fa0 R15: 00007fff272bc888 [ 295.387548][T19474] [ 295.390895][T19409] CPU: 1 UID: 0 PID: 19409 Comm: syz.5.4573 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.390925][T19409] Tainted: [L]=SOFTLOCKUP [ 295.390932][T19409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.390949][T19409] Call Trace: [ 295.390982][T19409] [ 295.390991][T19409] dump_stack_lvl+0x100/0x190 [ 295.391019][T19409] should_fail_ex.cold+0x5/0xa [ 295.391045][T19409] get_futex_key+0x295/0x1510 [ 295.391073][T19409] ? __pfx_get_futex_key+0x10/0x10 [ 295.391096][T19409] ? lock_acquire+0x1b1/0x370 [ 295.391126][T19409] futex_wake+0xea/0x530 [ 295.391148][T19409] ? __pfx_futex_wake+0x10/0x10 [ 295.391165][T19409] ? exit_mm_release+0x19/0x30 [ 295.391202][T19409] do_futex+0x32b/0x350 [ 295.391227][T19409] ? __pfx_do_futex+0x10/0x10 [ 295.391250][T19409] ? __might_fault+0xc5/0x140 [ 295.391284][T19409] mm_release+0x24a/0x2f0 [ 295.391310][T19409] do_exit+0x707/0x2af0 [ 295.391332][T19409] ? __pfx_do_exit+0x10/0x10 [ 295.391351][T19409] ? do_raw_spin_lock+0x128/0x260 [ 295.391376][T19409] ? find_held_lock+0x2b/0x80 [ 295.391392][T19409] ? get_signal+0x7e5/0x2210 [ 295.391420][T19409] do_group_exit+0xd5/0x2a0 [ 295.391442][T19409] get_signal+0x20ff/0x2210 [ 295.391466][T19409] ? __local_bh_enable_ip+0x9e/0x120 [ 295.391493][T19409] ? __pfx_tcp_sendmsg+0x10/0x10 [ 295.391522][T19409] ? fput+0x79/0x100 [ 295.391548][T19409] ? __pfx_inet_sendmsg+0x10/0x10 [ 295.391574][T19409] ? __pfx_get_signal+0x10/0x10 [ 295.391607][T19409] arch_do_signal_or_restart+0x91/0x7e0 [ 295.391638][T19409] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 295.391676][T19409] ? rcu_is_watching+0x12/0xc0 [ 295.391707][T19409] exit_to_user_mode_loop+0x98/0x670 [ 295.391730][T19409] ? rcu_is_watching+0x12/0xc0 [ 295.391757][T19409] do_syscall_64+0x666/0x870 [ 295.391781][T19409] ? clear_bhb_loop+0x40/0x90 [ 295.391803][T19409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.391821][T19409] RIP: 0033:0x7faef599ce59 [ 295.391839][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.391857][T19409] RSP: 002b:00007faef67e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 295.391875][T19409] RAX: fffffffffffffe00 RBX: 00007faef5c16090 RCX: 00007faef599ce59 [ 295.391887][T19409] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 295.391897][T19409] RBP: 00007faef67e4090 R08: 0000000000000000 R09: 0000000000000000 [ 295.391908][T19409] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 295.391919][T19409] R13: 00007faef5c16128 R14: 00007faef5c16090 R15: 00007fffc0db74a8 [ 295.391951][T19409] [ 295.697082][T19492] support for cryptoloop has been removed. Use dm-crypt instead. [ 295.749212][ T40] kauditd_printk_skb: 274 callbacks suppressed [ 295.749229][ T40] audit: type=1400 audit(2000000089.480:38514): avc: denied { write } for pid=19501 comm="syz.3.4613" name="comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.763344][ T40] audit: type=1400 audit(2000000089.490:38515): avc: denied { open } for pid=19501 comm="syz.3.4613" path="/dev/comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.772939][ T40] audit: type=1400 audit(2000000089.490:38516): avc: denied { read } for pid=19501 comm="syz.3.4613" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.781032][ T40] audit: type=1400 audit(2000000089.490:38517): avc: denied { ioctl } for pid=19501 comm="syz.3.4613" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.789493][ T40] audit: type=1400 audit(2000000089.490:38518): avc: denied { create } for pid=19497 comm="syz.4.4611" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.796111][ T40] audit: type=1400 audit(2000000089.490:38519): avc: denied { map } for pid=19497 comm="syz.4.4611" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.803911][ T40] audit: type=1400 audit(2000000089.490:38520): avc: denied { read write } for pid=19497 comm="syz.4.4611" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.811349][ T40] audit: type=1400 audit(2000000089.520:38521): avc: denied { read } for pid=19497 comm="syz.4.4611" dev="nsfs" ino=4026533992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.818938][ T40] audit: type=1400 audit(2000000089.520:38522): avc: denied { open } for pid=19497 comm="syz.4.4611" path="net:[4026533992]" dev="nsfs" ino=4026533992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.826357][ T40] audit: type=1400 audit(2000000089.520:38523): avc: denied { create } for pid=19497 comm="syz.4.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.003955][ T56] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 296.074431][T19507] __nla_validate_parse: 20 callbacks suppressed [ 296.074451][T19507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4615'. [ 296.175577][ T56] usb 8-1: unable to get BOS descriptor or descriptor too short [ 296.178513][ T56] usb 8-1: not running at top speed; connect to a high speed hub [ 296.181863][ T56] usb 8-1: config 1 interface 0 altsetting 43 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.186111][ T56] usb 8-1: config 1 interface 0 has no altsetting 0 [ 296.190531][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.193858][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.196396][ T56] usb 8-1: Product: syz [ 296.198022][ T56] usb 8-1: Manufacturer: syz [ 296.199629][ T56] usb 8-1: SerialNumber: syz [ 296.444823][ T56] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 296.471411][ T56] usb 8-1: USB disconnect, device number 15 [ 296.490080][T19518] FAULT_INJECTION: forcing a failure. [ 296.490080][T19518] name failslab, interval 1, probability 0, space 0, times 0 [ 296.494063][T19518] CPU: 2 UID: 0 PID: 19518 Comm: syz.4.4619 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.494082][T19518] Tainted: [L]=SOFTLOCKUP [ 296.494087][T19518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.494094][T19518] Call Trace: [ 296.494099][T19518] [ 296.494105][T19518] dump_stack_lvl+0x100/0x190 [ 296.494123][T19518] should_fail_ex.cold+0x5/0xa [ 296.494139][T19518] should_failslab+0xc2/0x120 [ 296.494153][T19518] __kmalloc_cache_noprof+0x7a/0x6f0 [ 296.494169][T19518] ? __request_region+0x5c/0xf0 [ 296.494184][T19518] __request_region+0x5c/0xf0 [ 296.494197][T19518] __comedi_check_request_region+0xfb/0x130 [ 296.494217][T19518] comedi_check_request_region+0x3c/0xc0 [ 296.494235][T19518] pcl812_attach+0xe0/0x2300 [ 296.494254][T19518] ? lockdep_init_map_type+0x5c/0x250 [ 296.494271][T19518] comedi_device_attach+0x40e/0x6b0 [ 296.494293][T19518] do_devconfig_ioctl+0x1b3/0x6d0 [ 296.494304][T19518] ? comedi_unlocked_ioctl+0x180/0x3310 [ 296.494320][T19518] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 296.494341][T19518] ? find_held_lock+0x2b/0x80 [ 296.494354][T19518] comedi_unlocked_ioctl+0x860/0x3310 [ 296.494370][T19518] ? tomoyo_path_number_perm+0x188/0x580 [ 296.494389][T19518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 296.494407][T19518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.494421][T19518] ? do_vfs_ioctl+0x226/0x13e0 [ 296.494434][T19518] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.494446][T19518] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 296.494468][T19518] ? __fget_files+0x215/0x3d0 [ 296.494482][T19518] ? hook_file_ioctl_common+0x149/0x410 [ 296.494498][T19518] ? selinux_file_ioctl+0x13b/0x290 [ 296.494515][T19518] ? selinux_file_ioctl+0xb6/0x290 [ 296.494533][T19518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 296.494549][T19518] __x64_sys_ioctl+0x18e/0x210 [ 296.494561][T19518] do_syscall_64+0x115/0x870 [ 296.494576][T19518] ? clear_bhb_loop+0x40/0x90 [ 296.494590][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.494603][T19518] RIP: 0033:0x7f620df9ce59 [ 296.494613][T19518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.494623][T19518] RSP: 002b:00007f620ef3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.494634][T19518] RAX: ffffffffffffffda RBX: 00007f620e215fa0 RCX: 00007f620df9ce59 [ 296.494641][T19518] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 296.494648][T19518] RBP: 00007f620ef3e090 R08: 0000000000000000 R09: 0000000000000000 [ 296.494654][T19518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.494661][T19518] R13: 00007f620e216038 R14: 00007f620e215fa0 R15: 00007fff573e7668 [ 296.494675][T19518] [ 296.494683][T19518] comedi comedi2: pcl812: I/O port conflict (0x140,16) [ 296.613936][T19520] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4620'. [ 296.698787][ T53] IPVS: starting estimator thread 0... [ 296.803846][T19531] IPVS: using max 43 ests per chain, 103200 per kthread [ 296.842969][T19540] FAULT_INJECTION: forcing a failure. [ 296.842969][T19540] name failslab, interval 1, probability 0, space 0, times 0 [ 296.849903][T19540] CPU: 0 UID: 0 PID: 19540 Comm: syz.4.4628 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.849923][T19540] Tainted: [L]=SOFTLOCKUP [ 296.849927][T19540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.849933][T19540] Call Trace: [ 296.849938][T19540] [ 296.849942][T19540] dump_stack_lvl+0x100/0x190 [ 296.849959][T19540] should_fail_ex.cold+0x5/0xa [ 296.849975][T19540] should_failslab+0xc2/0x120 [ 296.849988][T19540] __kmalloc_cache_noprof+0x7a/0x6f0 [ 296.850004][T19540] ? __i8254_init.part.0+0x52/0x250 [ 296.850017][T19540] ? __request_region+0xb0/0xf0 [ 296.850031][T19540] ? __pfx_i8254_io8_cb+0x10/0x10 [ 296.850044][T19540] __i8254_init.part.0+0x52/0x250 [ 296.850056][T19540] ? __pfx_i8254_io8_cb+0x10/0x10 [ 296.850068][T19540] comedi_8254_io_alloc+0x5f/0x90 [ 296.850082][T19540] pcl812_attach+0x814/0x2300 [ 296.850099][T19540] ? lockdep_init_map_type+0x5c/0x250 [ 296.850117][T19540] comedi_device_attach+0x40e/0x6b0 [ 296.850137][T19540] do_devconfig_ioctl+0x1b3/0x6d0 [ 296.850149][T19540] ? comedi_unlocked_ioctl+0x180/0x3310 [ 296.850165][T19540] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 296.850186][T19540] ? find_held_lock+0x2b/0x80 [ 296.850198][T19540] comedi_unlocked_ioctl+0x860/0x3310 [ 296.850213][T19540] ? tomoyo_path_number_perm+0x188/0x580 [ 296.850232][T19540] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 296.850250][T19540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.850265][T19540] ? do_vfs_ioctl+0x226/0x13e0 [ 296.850277][T19540] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.850289][T19540] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 296.850312][T19540] ? __fget_files+0x215/0x3d0 [ 296.850325][T19540] ? hook_file_ioctl_common+0x149/0x410 [ 296.850341][T19540] ? selinux_file_ioctl+0x13b/0x290 [ 296.850357][T19540] ? selinux_file_ioctl+0xb6/0x290 [ 296.850375][T19540] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 296.850391][T19540] __x64_sys_ioctl+0x18e/0x210 [ 296.850404][T19540] do_syscall_64+0x115/0x870 [ 296.850418][T19540] ? clear_bhb_loop+0x40/0x90 [ 296.850432][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.850444][T19540] RIP: 0033:0x7f620df9ce59 [ 296.850454][T19540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.850465][T19540] RSP: 002b:00007f620ef3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.850476][T19540] RAX: ffffffffffffffda RBX: 00007f620e215fa0 RCX: 00007f620df9ce59 [ 296.850483][T19540] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 296.850490][T19540] RBP: 00007f620ef3e090 R08: 0000000000000000 R09: 0000000000000000 [ 296.850497][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.850503][T19540] R13: 00007f620e216038 R14: 00007f620e215fa0 R15: 00007fff573e7668 [ 296.850518][T19540] [ 296.952561][T19533] overlayfs: failed to clone lowerpath [ 297.233860][ T1480] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 297.393924][ T1480] usb 9-1: Using ep0 maxpacket: 8 [ 297.397372][ T1480] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 297.400436][ T1480] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.403476][ T1480] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.406639][ T1480] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.409611][ T1480] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.413665][ T1480] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.416745][ T1480] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.559547][T19572] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4639'. [ 297.614301][T19574] Invalid ELF header len 18 [ 297.623871][ T1480] usb 9-1: usb_control_msg returned -32 [ 297.626444][ T1480] usbtmc 9-1:16.0: can't read capabilities [ 298.238381][T19589] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4645'. [ 298.337022][T19596] usbtmc 9-1:16.0: usb_clear_halt returned -32 [ 298.348668][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4629'. [ 298.350615][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4648'. [ 298.355019][T19596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4629'. [ 298.538422][ T5829] usb 9-1: USB disconnect, device number 7 [ 298.605237][T19623] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4656'. [ 298.615693][T19622] overlayfs: failed to resolve './bus': -2 [ 298.697902][T19636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4659'. [ 298.809086][T19648] FAULT_INJECTION: forcing a failure. [ 298.809086][T19648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.813491][T19648] CPU: 0 UID: 0 PID: 19648 Comm: syz.3.4663 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.813510][T19648] Tainted: [L]=SOFTLOCKUP [ 298.813514][T19648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.813521][T19648] Call Trace: [ 298.813526][T19648] [ 298.813532][T19648] dump_stack_lvl+0x100/0x190 [ 298.813558][T19648] should_fail_ex.cold+0x5/0xa [ 298.813582][T19648] _copy_to_user+0x32/0xd0 [ 298.813606][T19648] simple_read_from_buffer+0xcb/0x170 [ 298.813630][T19648] proc_fail_nth_read+0x1af/0x230 [ 298.813651][T19648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.813670][T19648] ? rw_verify_area+0xce/0x6d0 [ 298.813704][T19648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.813725][T19648] vfs_read+0x1e4/0xb30 [ 298.813746][T19648] ? __pfx_vfs_read+0x10/0x10 [ 298.813763][T19648] ? __fget_files+0x215/0x3d0 [ 298.813788][T19648] ? __fget_files+0x21f/0x3d0 [ 298.813818][T19648] ksys_read+0x12a/0x250 [ 298.813836][T19648] ? __pfx_ksys_read+0x10/0x10 [ 298.813858][T19648] ? rcu_is_watching+0x12/0xc0 [ 298.813888][T19648] do_syscall_64+0x115/0x870 [ 298.813911][T19648] ? clear_bhb_loop+0x40/0x90 [ 298.813934][T19648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.813958][T19648] RIP: 0033:0x7faa4715d68e [ 298.813974][T19648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.813991][T19648] RSP: 002b:00007faa4813bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.814009][T19648] RAX: ffffffffffffffda RBX: 00007faa4813c6c0 RCX: 00007faa4715d68e [ 298.814021][T19648] RDX: 000000000000000f RSI: 00007faa4813c0a0 RDI: 0000000000000004 [ 298.814033][T19648] RBP: 00007faa4813c090 R08: 0000000000000000 R09: 0000000000000000 [ 298.814043][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.814052][T19648] R13: 00007faa47416038 R14: 00007faa47415fa0 R15: 00007fff272bc888 [ 298.814076][T19648] [ 299.442181][T19702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4679'. [ 299.650368][T19726] validate_nla: 14 callbacks suppressed [ 299.650462][T19726] netlink: 'syz.6.4685': attribute type 10 has an invalid length. [ 299.673407][T19726] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 299.737860][T19731] overlay: ./file0 is not a directory [ 299.957145][T19754] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 300.200718][T19789] xt_hashlimit: size too large, truncated to 1048576 [ 300.226332][T19792] UHID_CREATE from different security context by process 1585 (syz.3.4708), this is not allowed. [ 300.259912][T19794] pim6reg: entered allmulticast mode [ 300.375782][ T53] net_ratelimit: 93 callbacks suppressed [ 300.375798][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.397918][T19802] devpts: Bad value for 'max' [ 300.414340][T19806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.419168][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.419405][T19804] wg2 speed is unknown, defaulting to 1000 [ 300.528195][T19807] exFAT-fs (nbd4): unable to read boot sector [ 300.534054][T19807] exFAT-fs (nbd4): failed to read boot sector [ 300.536660][T19807] exFAT-fs (nbd4): failed to recognize exfat type [ 300.583102][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.599092][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.607923][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.614164][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.616750][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.728301][T19827] fuse: Bad value for 'user_id' [ 300.730405][T19827] fuse: Bad value for 'user_id' [ 300.757389][ T40] kauditd_printk_skb: 317 callbacks suppressed [ 300.757408][ T40] audit: type=1400 audit(2000000094.490:38841): avc: denied { getopt } for pid=19829 comm="syz.6.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.768777][ T40] audit: type=1400 audit(2000000094.500:38842): avc: denied { create } for pid=19829 comm="syz.6.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 300.815969][ T40] audit: type=1400 audit(2000000094.550:38843): avc: denied { read } for pid=19825 comm="syz.4.4720" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 300.826570][ T40] audit: type=1400 audit(2000000094.550:38844): avc: denied { open } for pid=19825 comm="syz.4.4720" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 300.836342][ T40] audit: type=1400 audit(2000000094.550:38845): avc: denied { ioctl } for pid=19825 comm="syz.4.4720" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=953 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 300.860641][ T40] audit: type=1400 audit(2000000094.590:38846): avc: denied { create } for pid=19825 comm="syz.4.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.886909][ T40] audit: type=1400 audit(2000000094.590:38847): avc: denied { setopt } for pid=19825 comm="syz.4.4720" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.934262][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.943856][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.944222][ T40] audit: type=1400 audit(2000000094.670:38848): avc: denied { allowed } for pid=19840 comm="syz.6.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 300.966260][ T40] audit: type=1400 audit(2000000094.700:38849): avc: denied { create } for pid=19840 comm="syz.6.4723" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 301.053796][T19816] wg2 speed is unknown, defaulting to 1000 [ 301.096536][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.200001][T19851] __nla_validate_parse: 6 callbacks suppressed [ 301.200019][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4726'. [ 301.206525][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4726'. [ 301.215477][T19851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.270732][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4726'. [ 301.274855][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4726'. [ 301.329516][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.332750][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.414216][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.446966][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.452250][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.488613][T19816] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.491693][T19816] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.495479][T19816] bridge_slave_0: entered allmulticast mode [ 301.499461][T19816] bridge_slave_0: entered promiscuous mode [ 301.511037][T19816] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.514009][T19816] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.516678][T19816] bridge_slave_1: entered allmulticast mode [ 301.520413][T19816] bridge_slave_1: entered promiscuous mode [ 301.529998][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.534435][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.576564][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.581233][T19816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.587070][T19816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.604736][T19816] team0: Port device team_slave_0 added [ 301.617016][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.620850][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.635691][T19816] team0: Port device team_slave_1 added [ 301.657202][T19816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.659868][T19816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.669015][T19816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.683090][T19816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.689814][T19816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.689948][ T40] audit: type=1400 audit(2000000095.420:38850): avc: denied { read write } for pid=18576 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.707837][T19816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.723314][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4727'. [ 301.754364][T19816] hsr_slave_0: entered promiscuous mode [ 301.756809][T19816] hsr_slave_1: entered promiscuous mode [ 301.759347][T19816] debugfs: 'hsr0' already exists in 'hsr' [ 301.761558][T19816] Cannot create hsr debugfs directory [ 301.880753][ T59] bridge_slave_1: left allmulticast mode [ 301.883098][ T59] bridge_slave_1: left promiscuous mode [ 301.885334][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.892396][ T59] bridge_slave_0: left allmulticast mode [ 301.894828][ T59] bridge_slave_0: left promiscuous mode [ 301.896808][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.955047][ T59] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 301.958101][ T59] ip6gre1 (unregistering): left promiscuous mode [ 302.013277][ T59] erspan0 (unregistering): left promiscuous mode [ 302.290347][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.295208][ T59] bond_slave_0: left promiscuous mode [ 302.299656][ T59] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 302.303549][ T59] @0Ù: left promiscuous mode [ 302.307238][ T59] bond0 (unregistering): Released all slaves [ 302.315179][ T59] bond1 (unregistering): Released all slaves [ 302.327550][ T59] bond2 (unregistering): Released all slaves [ 302.342268][ T59] bond3 (unregistering): Released all slaves [ 302.472762][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.475359][T19883] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4736'. [ 302.479128][ T59] : left promiscuous mode [ 302.622874][ T59] tipc: Disabling bearer [ 302.626582][ T59] tipc: Left network mode [ 302.701596][ T5750] Bluetooth: hci1: command tx timeout [ 302.857938][ T59] IPVS: stopping backup sync thread 16378 ... [ 302.865593][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 303.023608][T19918] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4745'. [ 303.295891][ T59] veth0_to_team: left promiscuous mode [ 303.301770][ T59] hsr_slave_0: left promiscuous mode [ 303.305698][ T59] hsr_slave_1: left promiscuous mode [ 303.308738][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.311549][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.314661][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.316969][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.327431][ T59] veth1_macvtap: left promiscuous mode [ 303.329486][ T59] veth0_macvtap: left promiscuous mode [ 303.331621][ T59] veth1_vlan: left promiscuous mode [ 303.333223][ T59] veth0_vlan: left promiscuous mode [ 303.497166][ T59] team0 (unregistering): Port device team_slave_1 removed [ 303.509521][ T59] team0 (unregistering): Port device team_slave_0 removed [ 303.658324][T19816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.663511][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.667788][T19816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.671904][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.677081][T19816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.683666][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.688588][T19816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.696602][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.801382][T19816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.811620][T19816] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.820151][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.822507][ T8468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.833319][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.835528][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.228415][T19816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.261549][T19816] veth0_vlan: entered promiscuous mode [ 304.266909][T20015] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4772'. [ 304.267363][T19816] veth1_vlan: entered promiscuous mode [ 304.290116][T19816] veth0_macvtap: entered promiscuous mode [ 304.295562][T19816] veth1_macvtap: entered promiscuous mode [ 304.308380][T19816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.318709][T19816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.330409][ T8466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.334640][ T8466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.338635][ T8466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.342279][ T8466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.409015][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.411395][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.415582][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4775'. [ 304.433413][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.436850][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.615193][T20035] ISOFS: Unable to identify CD-ROM format. [ 304.663798][T20041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4782'. [ 304.741266][T20048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 304.784215][ T5750] Bluetooth: hci1: command tx timeout [ 304.881783][T20056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20056 comm=syz.5.4788 [ 305.046470][T20067] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 305.050789][T20067] overlayfs: failed to set xattr on upper [ 305.053508][T20067] overlayfs: ...falling back to redirect_dir=nofollow. [ 305.060565][T20067] overlayfs: ...falling back to index=off. [ 305.063240][T20067] overlayfs: ...falling back to uuid=null. [ 305.067727][T20067] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 305.071450][T20067] overlayfs: maximum fs stacking depth exceeded [ 305.110714][T20072] tmpfs: Unknown parameter ''nÚä¯k)d–6H'…8Z‰¿_ƒ0éÏ5‚o)?ÞRh:Ÿjf´ŒÀ' [ 305.574406][ T1480] net_ratelimit: 3 callbacks suppressed [ 305.574431][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.579524][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.701115][T20121] fuse: fd is not a fuse device [ 305.853191][ T40] kauditd_printk_skb: 207 callbacks suppressed [ 305.853210][ T40] audit: type=1400 audit(2000000099.580:39058): avc: denied { create } for pid=20129 comm="syz.4.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.856776][T20130] vxcan0: tx address claim with dest, not broadcast [ 305.872492][ T40] audit: type=1400 audit(2000000099.590:39059): avc: denied { ioctl } for pid=20129 comm="syz.4.4817" path="socket:[106907]" dev="sockfs" ino=106907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.889880][ T40] audit: type=1400 audit(2000000099.590:39060): avc: denied { bind } for pid=20129 comm="syz.4.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.897795][ T40] audit: type=1400 audit(2000000099.590:39061): avc: denied { write } for pid=20129 comm="syz.4.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.905075][ T40] audit: type=1400 audit(2000000099.590:39062): avc: denied { read } for pid=20128 comm="syz.5.4818" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.913416][ T40] audit: type=1400 audit(2000000099.590:39063): avc: denied { open } for pid=20128 comm="syz.5.4818" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.923574][ T40] audit: type=1400 audit(2000000099.590:39064): avc: denied { ioctl } for pid=20128 comm="syz.5.4818" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.934229][ T40] audit: type=1400 audit(2000000099.610:39065): avc: denied { create } for pid=20132 comm="syz.3.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 305.943036][ T40] audit: type=1400 audit(2000000099.620:39066): avc: denied { write } for pid=20132 comm="syz.3.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 305.955821][ T40] audit: type=1400 audit(2000000099.640:39067): avc: denied { create } for pid=20134 comm="syz.4.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.016133][T20140] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.024618][T20139] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 306.030425][T20140] overlayfs: failed to set xattr on upper [ 306.033158][T20140] overlayfs: ...falling back to redirect_dir=nofollow. [ 306.040439][T20140] overlayfs: ...falling back to index=off. [ 306.043331][T20140] overlayfs: ...falling back to uuid=null. [ 306.048764][T20140] overlayfs: ...falling back to xino=off. [ 306.051107][T20140] overlayfs: maximum fs stacking depth exceeded [ 306.173007][T20154] wg2 speed is unknown, defaulting to 1000 [ 306.216818][T20161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.224919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.314230][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.316104][T20169] gtp0: entered promiscuous mode [ 306.320890][T20169] gtp0: entered allmulticast mode [ 306.430233][T20179] FAULT_INJECTION: forcing a failure. [ 306.430233][T20179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.439240][T20179] CPU: 1 UID: 0 PID: 20179 Comm: syz.4.4835 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.439268][T20179] Tainted: [L]=SOFTLOCKUP [ 306.439274][T20179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.439284][T20179] Call Trace: [ 306.439290][T20179] [ 306.439296][T20179] dump_stack_lvl+0x100/0x190 [ 306.439321][T20179] should_fail_ex.cold+0x5/0xa [ 306.439344][T20179] _copy_from_user+0x2e/0xd0 [ 306.439366][T20179] move_addr_to_kernel+0x65/0x170 [ 306.439387][T20179] __sys_connect+0xb5/0x170 [ 306.439409][T20179] ? __pfx___sys_connect+0x10/0x10 [ 306.439429][T20179] ? __fget_files+0x21f/0x3d0 [ 306.439459][T20179] ? __pfx_ksys_write+0x10/0x10 [ 306.439483][T20179] __x64_sys_connect+0x72/0xb0 [ 306.439504][T20179] ? lockdep_hardirqs_on+0x78/0x100 [ 306.439526][T20179] do_syscall_64+0x115/0x870 [ 306.439547][T20179] ? clear_bhb_loop+0x40/0x90 [ 306.439567][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.439585][T20179] RIP: 0033:0x7f620df9ce59 [ 306.439600][T20179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.439616][T20179] RSP: 002b:00007f620ef3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 306.439632][T20179] RAX: ffffffffffffffda RBX: 00007f620e215fa0 RCX: 00007f620df9ce59 [ 306.439643][T20179] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 306.439654][T20179] RBP: 00007f620ef3e090 R08: 0000000000000000 R09: 0000000000000000 [ 306.439664][T20179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.439673][T20179] R13: 00007f620e216038 R14: 00007f620e215fa0 R15: 00007fff573e7668 [ 306.439697][T20179] [ 306.534326][T20183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538686][T20183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.543407][T20183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.550370][T20183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.553067][T20183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.806640][T20202] FAULT_INJECTION: forcing a failure. [ 306.806640][T20202] name failslab, interval 1, probability 0, space 0, times 0 [ 306.813759][T20202] CPU: 1 UID: 0 PID: 20202 Comm: syz.4.4846 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.813781][T20202] Tainted: [L]=SOFTLOCKUP [ 306.813786][T20202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.813796][T20202] Call Trace: [ 306.813801][T20202] [ 306.813807][T20202] dump_stack_lvl+0x100/0x190 [ 306.813830][T20202] should_fail_ex.cold+0x5/0xa [ 306.813857][T20202] should_failslab+0xc2/0x120 [ 306.813882][T20202] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 306.813907][T20202] ? sock_alloc_inode+0x26/0x290 [ 306.813924][T20202] ? selinux_socket_create+0xec/0x590 [ 306.813952][T20202] ? __pfx_sock_alloc_inode+0x10/0x10 [ 306.813971][T20202] sock_alloc_inode+0x26/0x290 [ 306.813989][T20202] ? __pfx_sock_alloc_inode+0x10/0x10 [ 306.814006][T20202] alloc_inode+0x68/0x250 [ 306.814024][T20202] sock_alloc+0x44/0x280 [ 306.814038][T20202] ? security_socket_create+0x7f/0x250 [ 306.814062][T20202] __sock_create+0xc2/0x860 [ 306.814082][T20202] ? find_held_lock+0x2b/0x80 [ 306.814102][T20202] mptcp_subflow_create_socket+0xec/0xa30 [ 306.814133][T20202] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 306.814159][T20202] ? avc_has_perm_noaudit+0x145/0x3b0 [ 306.814179][T20202] ? look_up_lock_class+0x55/0x120 [ 306.814204][T20202] __mptcp_nmpc_sk+0x17f/0x880 [ 306.814224][T20202] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 306.814241][T20202] ? __lock_acquire+0x4a5/0x2630 [ 306.814267][T20202] mptcp_connect+0x7e/0xaf0 [ 306.814287][T20202] __inet_stream_connect+0x208/0xfa0 [ 306.814317][T20202] ? __pfx___inet_stream_connect+0x10/0x10 [ 306.814342][T20202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.814364][T20202] ? __pfx_inet_stream_connect+0x10/0x10 [ 306.814382][T20202] ? __local_bh_enable_ip+0x9e/0x120 [ 306.814401][T20202] ? __pfx_inet_stream_connect+0x10/0x10 [ 306.814416][T20202] inet_stream_connect+0x57/0xa0 [ 306.814433][T20202] __sys_connect_file+0x141/0x1a0 [ 306.814450][T20202] __sys_connect+0x141/0x170 [ 306.814466][T20202] ? __pfx___sys_connect+0x10/0x10 [ 306.814480][T20202] ? __fget_files+0x21f/0x3d0 [ 306.814500][T20202] ? __pfx_ksys_write+0x10/0x10 [ 306.814515][T20202] __x64_sys_connect+0x72/0xb0 [ 306.814530][T20202] ? lockdep_hardirqs_on+0x78/0x100 [ 306.814545][T20202] do_syscall_64+0x115/0x870 [ 306.814564][T20202] ? clear_bhb_loop+0x40/0x90 [ 306.814583][T20202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.814598][T20202] RIP: 0033:0x7f620df9ce59 [ 306.814613][T20202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.814629][T20202] RSP: 002b:00007f620ef3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 306.814641][T20202] RAX: ffffffffffffffda RBX: 00007f620e215fa0 RCX: 00007f620df9ce59 [ 306.814648][T20202] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 306.814655][T20202] RBP: 00007f620ef3e090 R08: 0000000000000000 R09: 0000000000000000 [ 306.814661][T20202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.814668][T20202] R13: 00007f620e216038 R14: 00007f620e215fa0 R15: 00007fff573e7668 [ 306.814683][T20202] [ 306.854129][ T5750] Bluetooth: hci1: command tx timeout [ 307.155337][T20226] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 307.967511][T20245] __nla_validate_parse: 4 callbacks suppressed [ 307.967524][T20245] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4863'. [ 308.088052][T20259] FAULT_INJECTION: forcing a failure. [ 308.088052][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 308.092840][T20259] CPU: 0 UID: 0 PID: 20259 Comm: syz.5.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.092866][T20259] Tainted: [L]=SOFTLOCKUP [ 308.092871][T20259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.092880][T20259] Call Trace: [ 308.092888][T20259] [ 308.092895][T20259] dump_stack_lvl+0x100/0x190 [ 308.092918][T20259] should_fail_ex.cold+0x5/0xa [ 308.092943][T20259] should_failslab+0xc2/0x120 [ 308.092962][T20259] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 308.092988][T20259] ? sk_prot_alloc+0x60/0x2a0 [ 308.093011][T20259] sk_prot_alloc+0x60/0x2a0 [ 308.093033][T20259] sk_alloc+0x36/0xe80 [ 308.093056][T20259] inet_create+0x3a0/0x1060 [ 308.093084][T20259] ? inet_create+0x94/0x1060 [ 308.093111][T20259] __sock_create+0x339/0x860 [ 308.093136][T20259] mptcp_subflow_create_socket+0xec/0xa30 [ 308.093161][T20259] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 308.093187][T20259] ? avc_has_perm_noaudit+0x145/0x3b0 [ 308.093207][T20259] ? look_up_lock_class+0x55/0x120 [ 308.093231][T20259] __mptcp_nmpc_sk+0x17f/0x880 [ 308.093251][T20259] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 308.093268][T20259] ? __lock_acquire+0x4a5/0x2630 [ 308.093294][T20259] mptcp_connect+0x7e/0xaf0 [ 308.093317][T20259] __inet_stream_connect+0x208/0xfa0 [ 308.093348][T20259] ? __pfx___inet_stream_connect+0x10/0x10 [ 308.093373][T20259] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.093398][T20259] ? __pfx_inet_stream_connect+0x10/0x10 [ 308.093420][T20259] ? __local_bh_enable_ip+0x9e/0x120 [ 308.093450][T20259] ? __pfx_inet_stream_connect+0x10/0x10 [ 308.093473][T20259] inet_stream_connect+0x57/0xa0 [ 308.093499][T20259] __sys_connect_file+0x141/0x1a0 [ 308.093525][T20259] __sys_connect+0x141/0x170 [ 308.093548][T20259] ? __pfx___sys_connect+0x10/0x10 [ 308.093571][T20259] ? __fget_files+0x21f/0x3d0 [ 308.093604][T20259] ? __pfx_ksys_write+0x10/0x10 [ 308.093629][T20259] __x64_sys_connect+0x72/0xb0 [ 308.093652][T20259] ? lockdep_hardirqs_on+0x78/0x100 [ 308.093673][T20259] do_syscall_64+0x115/0x870 [ 308.093709][T20259] ? clear_bhb_loop+0x40/0x90 [ 308.093731][T20259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.093750][T20259] RIP: 0033:0x7faef599ce59 [ 308.093764][T20259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.093781][T20259] RSP: 002b:00007faef6805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 308.093799][T20259] RAX: ffffffffffffffda RBX: 00007faef5c15fa0 RCX: 00007faef599ce59 [ 308.093810][T20259] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 308.093818][T20259] RBP: 00007faef6805090 R08: 0000000000000000 R09: 0000000000000000 [ 308.093826][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.093834][T20259] R13: 00007faef5c16038 R14: 00007faef5c15fa0 R15: 00007fffc0db74a8 [ 308.093860][T20259] [ 308.228233][T20274] netlink: 'syz.4.4875': attribute type 1 has an invalid length. [ 308.234033][T20274] netlink: 'syz.4.4875': attribute type 1 has an invalid length. [ 308.236535][T20274] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.4875'. [ 308.290576][T20278] hub 8-0:1.0: USB hub found [ 308.300344][T20278] hub 8-0:1.0: 1 port detected [ 308.439484][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4884'. [ 308.450921][T20302] FAULT_INJECTION: forcing a failure. [ 308.450921][T20302] name failslab, interval 1, probability 0, space 0, times 0 [ 308.459611][T20302] CPU: 1 UID: 0 PID: 20302 Comm: syz.3.4886 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.459643][T20302] Tainted: [L]=SOFTLOCKUP [ 308.459649][T20302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.459660][T20302] Call Trace: [ 308.459667][T20302] [ 308.459675][T20302] dump_stack_lvl+0x100/0x190 [ 308.459702][T20302] should_fail_ex.cold+0x5/0xa [ 308.459728][T20302] ? lsm_blob_alloc+0x68/0x90 [ 308.459747][T20302] should_failslab+0xc2/0x120 [ 308.459767][T20302] __kmalloc_noprof+0xe0/0x850 [ 308.459794][T20302] ? trace_kmem_cache_alloc+0xd5/0x100 [ 308.459819][T20302] lsm_blob_alloc+0x68/0x90 [ 308.459840][T20302] security_sk_alloc+0x2d/0x290 [ 308.459864][T20302] sk_prot_alloc+0x1d1/0x2a0 [ 308.459887][T20302] sk_alloc+0x36/0xe80 [ 308.459913][T20302] inet_create+0x3a0/0x1060 [ 308.459940][T20302] ? inet_create+0x94/0x1060 [ 308.459970][T20302] __sock_create+0x339/0x860 [ 308.459996][T20302] mptcp_subflow_create_socket+0xec/0xa30 [ 308.460029][T20302] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 308.460056][T20302] ? avc_has_perm_noaudit+0x145/0x3b0 [ 308.460078][T20302] ? look_up_lock_class+0x55/0x120 [ 308.460106][T20302] __mptcp_nmpc_sk+0x17f/0x880 [ 308.460126][T20302] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 308.460144][T20302] ? __lock_acquire+0x4a5/0x2630 [ 308.460172][T20302] mptcp_connect+0x7e/0xaf0 [ 308.460195][T20302] __inet_stream_connect+0x208/0xfa0 [ 308.460226][T20302] ? __pfx___inet_stream_connect+0x10/0x10 [ 308.460251][T20302] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.460280][T20302] ? __pfx_inet_stream_connect+0x10/0x10 [ 308.460307][T20302] ? __local_bh_enable_ip+0x9e/0x120 [ 308.460336][T20302] ? __pfx_inet_stream_connect+0x10/0x10 [ 308.460359][T20302] inet_stream_connect+0x57/0xa0 [ 308.460386][T20302] __sys_connect_file+0x141/0x1a0 [ 308.460418][T20302] __sys_connect+0x141/0x170 [ 308.460441][T20302] ? __pfx___sys_connect+0x10/0x10 [ 308.460460][T20302] ? __fget_files+0x21f/0x3d0 [ 308.460492][T20302] ? __pfx_ksys_write+0x10/0x10 [ 308.460518][T20302] __x64_sys_connect+0x72/0xb0 [ 308.460542][T20302] ? lockdep_hardirqs_on+0x78/0x100 [ 308.460564][T20302] do_syscall_64+0x115/0x870 [ 308.460587][T20302] ? clear_bhb_loop+0x40/0x90 [ 308.460610][T20302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.460628][T20302] RIP: 0033:0x7f21fa39ce59 [ 308.460645][T20302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.460663][T20302] RSP: 002b:00007f21fb325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 308.460680][T20302] RAX: ffffffffffffffda RBX: 00007f21fa615fa0 RCX: 00007f21fa39ce59 [ 308.460690][T20302] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 308.460702][T20302] RBP: 00007f21fb325090 R08: 0000000000000000 R09: 0000000000000000 [ 308.460713][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.460723][T20302] R13: 00007f21fa616038 R14: 00007f21fa615fa0 R15: 00007ffdae6b5198 [ 308.460748][T20302] [ 308.812298][T20318] syzkaller0: entered promiscuous mode [ 308.815547][T20318] syzkaller0: entered allmulticast mode [ 308.886013][T20320] netlink: 45 bytes leftover after parsing attributes in process `syz.6.4895'. [ 309.003449][ T1480] IPVS: starting estimator thread 0... [ 309.005906][T20329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4898'. [ 309.032842][T20329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20329 comm=syz.6.4898 [ 309.107510][T20330] IPVS: using max 42 ests per chain, 100800 per kthread [ 309.157732][T20343] 9pnet_fd: p9_fd_create_tcp (20343): problem binding to privport [ 309.273681][T20363] gfs2: gfs2 mount does not exist [ 309.322438][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4913'. [ 309.417037][ T1480] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 309.574162][ T1480] usb 10-1: Using ep0 maxpacket: 8 [ 309.579757][ T1480] usb 10-1: config 0 has no interfaces? [ 309.583872][ T1480] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 309.590602][ T1480] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 309.594335][ T1480] usb 10-1: Product: syz [ 309.596098][ T1480] usb 10-1: SerialNumber: syz [ 309.600788][ T1480] usb 10-1: config 0 descriptor?? [ 310.231261][ T56] usb 10-1: USB disconnect, device number 9 [ 310.323650][T20400] binder: 20399:20400 unknown command 0 [ 310.326986][T20400] binder: 20399:20400 ioctl c0306201 200000000480 returned -22 [ 310.336525][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4920'. [ 310.336564][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4920'. [ 310.502106][T15729] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.634718][T20429] fuse: fd is not a fuse device [ 310.694096][ T1480] net_ratelimit: 313 callbacks suppressed [ 310.694112][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.710490][T20441] netem: change failed [ 310.779383][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.887732][ T40] kauditd_printk_skb: 342 callbacks suppressed [ 310.887753][ T40] audit: type=1400 audit(2000000004.909:39410): avc: denied { unmount } for pid=12906 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 310.911204][ T40] audit: type=1400 audit(2000000004.929:39411): avc: denied { prog_load } for pid=20455 comm="syz.6.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.944402][ T40] audit: type=1400 audit(2000000004.969:39412): avc: denied { read open } for pid=20457 comm="syz.3.4937" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.955602][ T40] audit: type=1400 audit(2000000004.979:39413): avc: denied { ioctl } for pid=20457 comm="syz.3.4937" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.967026][ T40] audit: type=1400 audit(2000000004.979:39414): avc: denied { create } for pid=20457 comm="syz.3.4937" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 310.979006][ T40] audit: type=1400 audit(2000000004.979:39415): avc: denied { ioctl } for pid=20457 comm="syz.3.4937" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=109689 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 310.990613][ T40] audit: type=1400 audit(2000000004.989:39416): avc: denied { read write } for pid=20457 comm="syz.3.4937" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 311.013999][ T40] audit: type=1400 audit(2000000004.989:39417): avc: denied { open } for pid=20457 comm="syz.3.4937" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 311.021550][ T40] audit: type=1400 audit(2000000004.989:39418): avc: denied { create } for pid=20462 comm="syz.6.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.022830][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.025228][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.028395][ T40] audit: type=1400 audit(2000000004.999:39419): avc: denied { sys_module } for pid=20457 comm="syz.3.4937" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 311.054340][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.058083][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.061236][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.068539][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.072826][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.078652][T20472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.157693][T20478] netlink: 'syz.6.4943': attribute type 6 has an invalid length. [ 311.348557][T20492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4949'. [ 311.832436][T20518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4961'. [ 311.879261][T20523] CUSE: info not properly terminated [ 312.074040][T20537] fuse: fd is not a fuse device [ 312.084388][T20537] netlink: 'syz.6.4968': attribute type 12 has an invalid length. [ 312.536256][ T5754] Bluetooth: hci4: command 0x1003 tx timeout [ 312.540807][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 312.686168][T20577] qnx4: unable to read the superblock [ 312.701250][T20577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20577 comm=syz.3.4983 [ 312.952061][T20591] infiniband syz1: set active [ 312.954808][T20591] infiniband syz1: added bond0 [ 312.981775][T20591] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 312.987867][T20591] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 312.999648][T20591] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 313.051107][T20591] RDS/IB: syz1: added [ 313.053891][T20591] smc: adding ib device syz1 with port count 1 [ 313.056692][T20591] smc: ib device syz1 port 1 has no pnetid [ 313.136331][T20608] xt_time: unknown flags 0xc [ 313.320261][T20616] netlink: 'syz.6.4998': attribute type 12 has an invalid length. [ 313.328410][T20616] netlink: 'syz.6.4998': attribute type 29 has an invalid length. [ 313.331939][T20616] __nla_validate_parse: 2 callbacks suppressed [ 313.331955][T20616] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4998'. [ 313.377700][T20619] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4999'. [ 313.603901][ T53] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 313.766719][ T53] usb 8-1: not running at top speed; connect to a high speed hub [ 313.771502][ T53] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 313.778759][ T53] usb 8-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 313.783868][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.787434][ T53] usb 8-1: Product: syz [ 313.789203][ T53] usb 8-1: Manufacturer: syz [ 313.791266][ T53] usb 8-1: SerialNumber: syz [ 314.013360][ T53] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.017399][ T53] usb 8-1: MIDIStreaming interface descriptor not found [ 314.077412][ T53] usb 8-1: USB disconnect, device number 16 [ 314.145402][T20651] udevd[20651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.312738][T20664] team0: Device xfrm0 is of different type [ 314.343668][T20670] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5011'. [ 314.431781][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5015'. [ 314.437795][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5015'. [ 314.490966][T20682] xt_socket: unknown flags 0x48 [ 314.494293][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5017'. [ 314.733869][ T1480] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 314.779591][T20706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5025'. [ 314.783329][T20706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5025'. [ 314.842980][T20713] dlm: no locking on control device [ 314.886021][ T1480] usb 9-1: not running at top speed; connect to a high speed hub [ 314.889673][ T1480] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 314.893164][ T1480] usb 9-1: config 1 interface 0 has no altsetting 0 [ 314.898491][ T1480] usb 9-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.40 [ 314.901641][ T1480] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.904832][ T1480] usb 9-1: Product: éžê¤½í‹íž¢á —༂钎禄릃á¬å“«é³«î€œï¹—謳鬓ï·æ‘¸í€¬ì ´æ»œîƒ‚離ã”ïƒå¯žä†´â‰˜ëœ›ã¬¾ä†±ê£¹ëª’âªëžã¦ºä‘‡ï¾ææ«âƒžì¯¡È´ë€µÇ•à¶ˆë…™ášê€„댢阑㠥㧤ë³äŒ˜ëžâ¾µë¶‰å—˜í‰â¨£â–²ßžê«­ãˆ¡â´§åš¶â¼¡ïŠ¦æ†¹ãŒè‡´è´ˆé¡†á¶“ç‘£í¨æ«¨å¢ë–”첌â‘ᰆ锯陚㣻⼺çªæªè–—䆞䤆葅䩘è–즰ìµÒ·å´ƒé‹£éš¶á„ªâ¹Žå¤¹éƒ¥ìŽœé¬“隩æ„ꠢݞ䪑㓢䚥ὲἙꩥ몵싽ã³åŠ€ [ 314.916354][ T1480] usb 9-1: Manufacturer: ì“ë–⩠蹶ꬓ훺갣â¿ä¯‰æžˆì¶­ê³¯ãµœæ›“䳺êºæ©…ҭꕈå‰ë—Ò먛ﭩꠃ驷Ô쮥䛶禎꫽ë¸ì¼«é¸•à¤¶â¼îµ³ê…©ã£™Ð­ [ 314.920968][ T1480] usb 9-1: SerialNumber: ј [ 314.925516][T20684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.156210][ T1480] usbhid 9-1:1.0: can't add hid device: -71 [ 315.158200][ T1480] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 315.164932][ T1480] usb 9-1: USB disconnect, device number 8 [ 315.427623][T20737] FAULT_INJECTION: forcing a failure. [ 315.427623][T20737] name failslab, interval 1, probability 0, space 0, times 0 [ 315.432739][T20737] CPU: 0 UID: 0 PID: 20737 Comm: syz.3.5035 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.432768][T20737] Tainted: [L]=SOFTLOCKUP [ 315.432775][T20737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.432786][T20737] Call Trace: [ 315.432795][T20737] [ 315.432803][T20737] dump_stack_lvl+0x100/0x190 [ 315.432830][T20737] should_fail_ex.cold+0x5/0xa [ 315.432854][T20737] ? tomoyo_realpath_from_path+0xb6/0x690 [ 315.432883][T20737] should_failslab+0xc2/0x120 [ 315.432903][T20737] __kmalloc_noprof+0xe0/0x850 [ 315.432929][T20737] ? kfree+0x1dd/0x6c0 [ 315.432956][T20737] tomoyo_realpath_from_path+0xb6/0x690 [ 315.432989][T20737] tomoyo_path_number_perm+0x23c/0x580 [ 315.433012][T20737] ? tomoyo_path_number_perm+0x22e/0x580 [ 315.433037][T20737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.433087][T20737] ? find_held_lock+0x2b/0x80 [ 315.433104][T20737] ? __fget_files+0x215/0x3d0 [ 315.433126][T20737] ? hook_file_ioctl_common+0x149/0x410 [ 315.433144][T20737] ? __fget_files+0x215/0x3d0 [ 315.433170][T20737] ? __fget_files+0x21f/0x3d0 [ 315.433196][T20737] security_file_ioctl+0xd3/0x230 [ 315.433224][T20737] __x64_sys_ioctl+0xb7/0x210 [ 315.433246][T20737] do_syscall_64+0x115/0x870 [ 315.433269][T20737] ? clear_bhb_loop+0x40/0x90 [ 315.433292][T20737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.433316][T20737] RIP: 0033:0x7f21fa39ce59 [ 315.433333][T20737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.433350][T20737] RSP: 002b:00007f21fb325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.433369][T20737] RAX: ffffffffffffffda RBX: 00007f21fa615fa0 RCX: 00007f21fa39ce59 [ 315.433381][T20737] RDX: 0000200000000080 RSI: 00000000c034564b RDI: 0000000000000003 [ 315.433392][T20737] RBP: 00007f21fb325090 R08: 0000000000000000 R09: 0000000000000000 [ 315.433403][T20737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.433414][T20737] R13: 00007f21fa616038 R14: 00007f21fa615fa0 R15: 00007ffdae6b5198 [ 315.433440][T20737] [ 315.433448][T20737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.692185][T20750] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5041'. [ 315.697552][T20750] netlink: 'syz.4.5041': attribute type 1 has an invalid length. [ 315.701407][T20750] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5041'. [ 315.895186][ T1480] net_ratelimit: 247 callbacks suppressed [ 315.895203][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.898143][ T40] kauditd_printk_skb: 228 callbacks suppressed [ 315.898159][ T40] audit: type=1400 audit(2000000009.919:39648): avc: denied { block_suspend } for pid=20773 comm="syz.3.5052" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.938979][ T40] audit: type=1400 audit(2000000009.959:39649): avc: denied { read } for pid=20778 comm="syz.3.5054" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 315.952553][ T40] audit: type=1400 audit(2000000009.959:39650): avc: denied { open } for pid=20778 comm="syz.3.5054" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 315.968113][ T40] audit: type=1400 audit(2000000009.959:39651): avc: denied { ioctl } for pid=20778 comm="syz.3.5054" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x564b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 315.974957][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.977457][ T40] audit: type=1400 audit(2000000009.979:39652): avc: denied { node_bind } for pid=20780 comm="syz.6.5055" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 315.986630][ T40] audit: type=1400 audit(2000000009.989:39653): avc: denied { write } for pid=20763 comm="syz.4.5047" name="ip_tables_targets" dev="proc" ino=4026534610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.998044][ T40] audit: type=1400 audit(2000000009.989:39654): avc: denied { watch watch_reads } for pid=20783 comm="syz.3.5056" path="/88" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 316.057747][ T40] audit: type=1400 audit(2000000010.079:39655): avc: denied { bind } for pid=20789 comm="syz.6.5058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.065913][ T40] audit: type=1400 audit(2000000010.079:39656): avc: denied { name_bind } for pid=20789 comm="syz.6.5058" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 316.077464][ T40] audit: type=1400 audit(2000000010.079:39657): avc: denied { node_bind } for pid=20789 comm="syz.6.5058" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 316.165062][T20798] EXT4-fs (nbd3): unable to read superblock [ 316.170101][ T5750] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 316.181348][T20798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.187188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.262833][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.267677][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.273428][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.279965][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.288123][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.292510][T20804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.521910][T20830] fuse: Bad value for 'fd' [ 316.539398][T20826] veth0_to_team: entered promiscuous mode [ 316.542756][T20826] erspan0: entered promiscuous mode [ 316.548302][T20826] debugfs: 'hsr1' already exists in 'hsr' [ 316.555459][T20826] Cannot create hsr debugfs directory [ 316.604915][T20835] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 316.759432][T20852] fuse: Bad value for 'fd' [ 317.277991][T20892] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 317.289650][T20892] bond1: (slave lo): Enslaving as an active interface with an up link [ 317.765437][T20928] xt_l2tp: missing protocol rule (udp|l2tpip) [ 318.171302][T20962] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 318.175282][T20963] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 318.179657][T20961] sctp: [Deprecated]: syz.6.5115 (pid 20961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.179657][T20961] Use struct sctp_sack_info instead [ 318.267925][T20971] overlayfs: failed to clone lowerpath [ 318.271578][T20970] overlayfs: failed to clone lowerpath [ 318.275942][T20970] overlayfs: failed to clone lowerpath [ 318.282005][T20970] overlayfs: failed to clone lowerpath [ 318.288994][T20970] overlayfs: failed to clone lowerpath [ 318.292594][T20970] overlayfs: failed to clone lowerpath [ 318.297279][T20970] overlayfs: failed to clone lowerpath [ 318.300754][T20970] overlayfs: failed to clone lowerpath [ 318.304816][T20970] overlayfs: failed to clone lowerpath [ 318.308444][T20970] overlayfs: failed to clone lowerpath [ 318.312442][T20970] overlayfs: failed to clone lowerpath [ 318.316742][T20970] overlayfs: failed to clone lowerpath [ 318.319148][T20970] overlayfs: failed to clone lowerpath [ 318.321616][T20970] overlayfs: failed to clone lowerpath [ 318.325032][T20970] overlayfs: failed to clone lowerpath [ 318.328605][T20970] overlayfs: failed to clone lowerpath [ 318.332308][T20970] overlayfs: failed to clone lowerpath [ 318.337646][T20970] overlayfs: failed to clone lowerpath [ 318.341973][T20970] overlayfs: failed to clone lowerpath [ 318.346551][T20970] overlayfs: failed to clone lowerpath [ 318.350135][T20970] overlayfs: failed to clone lowerpath [ 318.353619][T20970] overlayfs: failed to clone lowerpath [ 318.357320][T20970] overlayfs: failed to clone lowerpath [ 318.360814][T20970] overlayfs: failed to clone lowerpath [ 318.365177][T20970] overlayfs: failed to clone lowerpath [ 318.368905][T20970] overlayfs: failed to clone lowerpath [ 318.374969][T20970] overlayfs: failed to clone lowerpath [ 318.378890][T20970] overlayfs: failed to clone lowerpath [ 318.382448][T20970] overlayfs: failed to clone lowerpath [ 318.386778][T20970] overlayfs: failed to clone lowerpath [ 318.390774][T20970] overlayfs: failed to clone lowerpath [ 318.393790][T20970] overlayfs: failed to clone lowerpath [ 318.396427][T20970] overlayfs: failed to clone lowerpath [ 318.399877][T20970] overlayfs: failed to clone lowerpath [ 318.404325][T20970] overlayfs: failed to clone lowerpath [ 318.407910][T20970] overlayfs: failed to clone lowerpath [ 318.411729][T20970] overlayfs: failed to clone lowerpath [ 318.420286][T20970] overlayfs: failed to clone lowerpath [ 318.424455][T20970] overlayfs: failed to clone lowerpath [ 318.429455][T20970] overlayfs: failed to clone lowerpath [ 318.432936][T20970] overlayfs: failed to clone lowerpath [ 318.436755][T20970] overlayfs: failed to clone lowerpath [ 318.439910][T20970] overlayfs: failed to clone lowerpath [ 318.445428][T20970] overlayfs: failed to clone lowerpath [ 318.449512][T20970] overlayfs: failed to clone lowerpath [ 318.452790][T20970] overlayfs: failed to clone lowerpath [ 318.453406][T20980] program syz.4.5124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.453404][T20982] sg_write: data in/out 101316379/147 bytes for SCSI command 0x77-- guessing data in; [ 318.453404][T20982] program syz.4.5124 not setting count and/or reply_len properly [ 318.468717][T20970] overlayfs: failed to clone lowerpath [ 318.472318][T20970] overlayfs: failed to clone lowerpath [ 318.478652][T20970] overlayfs: failed to clone lowerpath [ 318.482544][T20970] overlayfs: failed to clone lowerpath [ 318.496945][T20970] overlayfs: failed to clone lowerpath [ 318.499596][T20970] overlayfs: failed to clone lowerpath [ 318.502459][T20970] overlayfs: failed to clone lowerpath [ 318.506786][T20970] overlayfs: failed to clone lowerpath [ 318.510436][T20970] overlayfs: failed to clone lowerpath [ 318.514278][T20970] overlayfs: failed to clone lowerpath [ 318.518462][T20970] overlayfs: failed to clone lowerpath [ 318.522825][T20970] overlayfs: failed to clone lowerpath [ 318.526770][T20970] overlayfs: failed to clone lowerpath [ 318.530329][T20970] overlayfs: failed to clone lowerpath [ 318.534117][T20970] overlayfs: failed to clone lowerpath [ 318.537587][T20970] overlayfs: failed to clone lowerpath [ 318.540921][T20970] overlayfs: failed to clone lowerpath [ 318.547948][T20970] overlayfs: failed to clone lowerpath [ 318.552018][T20970] overlayfs: failed to clone lowerpath [ 318.557695][T20970] overlayfs: failed to clone lowerpath [ 319.133991][T21004] fuse: fd is not a fuse device [ 319.168417][T21008] netlink: 'syz.6.5129': attribute type 12 has an invalid length. [ 319.171664][T21008] netlink: 'syz.6.5129': attribute type 29 has an invalid length. [ 319.175743][T21008] __nla_validate_parse: 11 callbacks suppressed [ 319.175757][T21008] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5129'. [ 319.218568][T21010] netlink: 'syz.6.5130': attribute type 3 has an invalid length. [ 319.416975][T21029] kernel profiling enabled (shift: 5) [ 319.456338][T21029] fuse: Bad value for 'fd' [ 319.511415][T21037] netlink: 'syz.5.5138': attribute type 12 has an invalid length. [ 319.516966][T21037] netlink: 'syz.5.5138': attribute type 29 has an invalid length. [ 319.519770][T21037] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5138'. [ 319.561593][T21031] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.133008][T21076] netlink: 'syz.4.5151': attribute type 12 has an invalid length. [ 320.137303][T21076] netlink: 'syz.4.5151': attribute type 29 has an invalid length. [ 320.139937][T21076] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5151'. [ 320.741904][T21096] netlink: 'syz.5.5158': attribute type 4 has an invalid length. [ 320.815435][T21101] netlink: 'syz.5.5160': attribute type 12 has an invalid length. [ 320.817976][T21101] netlink: 'syz.5.5160': attribute type 29 has an invalid length. [ 320.820650][T21101] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5160'. [ 320.969221][ T40] kauditd_printk_skb: 288 callbacks suppressed [ 320.969239][ T40] audit: type=1400 audit(2000000014.989:39946): avc: denied { create } for pid=21102 comm="syz.4.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.980718][ T40] audit: type=1400 audit(2000000014.989:39947): avc: denied { write } for pid=21102 comm="syz.4.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.042491][ T40] audit: type=1400 audit(2000000015.059:39948): avc: denied { write } for pid=21106 comm="syz.4.5163" name="video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.058819][T21107] net_ratelimit: 148 callbacks suppressed [ 321.058839][T21107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.067101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.103968][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.104044][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5165'. [ 321.117565][ T40] audit: type=1400 audit(2000000015.139:39949): avc: denied { mounton } for pid=21110 comm="syz.5.5165" path="/419/file0" dev="tmpfs" ino=2218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.127422][ T40] audit: type=1400 audit(2000000015.139:39950): avc: denied { unlink } for pid=21110 comm="syz.5.5165" name="#cd" dev="tmpfs" ino=2222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 321.135293][ T40] audit: type=1400 audit(2000000015.139:39951): avc: denied { mount } for pid=21110 comm="syz.5.5165" name="/" dev="overlay" ino=2218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 321.138417][T21111] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 321.142480][ T40] audit: type=1400 audit(2000000015.149:39952): avc: denied { unmount } for pid=21110 comm="syz.5.5165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 321.161251][T21111] dummy0: left promiscuous mode [ 321.167754][T21111] bridge2: port 1(dummy0) entered blocking state [ 321.169901][T21111] bridge2: port 1(dummy0) entered disabled state [ 321.171976][T21111] dummy0: entered allmulticast mode [ 321.175298][T21111] dummy0: entered promiscuous mode [ 321.179746][T21111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5165'. [ 321.184137][T21111] bridge2: port 1(dummy0) entered blocking state [ 321.184260][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.186336][T21111] bridge2: port 1(dummy0) entered forwarding state [ 321.191638][T21111] dummy0: left allmulticast mode [ 321.193522][T21111] bridge2: port 1(dummy0) entered disabled state [ 321.212520][ T40] audit: type=1400 audit(2000000015.229:39953): avc: denied { module_request } for pid=21116 comm="syz.4.5168" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 321.247682][ T40] audit: type=1400 audit(2000000015.269:39954): avc: denied { read } for pid=21119 comm="syz.5.5169" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.261409][ T40] audit: type=1400 audit(2000000015.269:39955): avc: denied { open } for pid=21119 comm="syz.5.5169" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.736142][T21169] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.794982][T21182] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 321.845485][T21187] VFS: Mount too revealing [ 321.984898][T21198] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 321.988423][T21198] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 321.997371][T21209] IPVS: stopping backup sync thread 21182 ... [ 321.998352][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.011434][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.016186][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.038716][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.042221][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.046364][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.060465][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.432854][T21199] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 322.475570][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5203'. [ 322.481019][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5203'. [ 322.679141][T21260] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 323.241364][T21313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5229'. [ 323.515235][T21336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5238'. [ 323.609842][T21336] SELinux: ebitmap: truncated map [ 323.641523][T21336] SELinux: failed to load policy [ 324.221109][T21408] validate_nla: 4 callbacks suppressed [ 324.221121][T21408] netlink: 'syz.4.5270': attribute type 12 has an invalid length. [ 324.226431][T21408] netlink: 'syz.4.5270': attribute type 29 has an invalid length. [ 324.226827][T21410] netlink: 'syz.6.5271': attribute type 1 has an invalid length. [ 324.228967][T21408] __nla_validate_parse: 3 callbacks suppressed [ 324.228981][T21408] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5270'. [ 324.531516][T21429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5279'. [ 324.556210][T21432] netlink: 'syz.4.5280': attribute type 12 has an invalid length. [ 324.558736][T21432] netlink: 'syz.4.5280': attribute type 29 has an invalid length. [ 324.561255][T21432] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5280'. [ 325.014234][T21468] netlink: 'syz.4.5293': attribute type 12 has an invalid length. [ 325.018016][T21468] netlink: 'syz.4.5293': attribute type 29 has an invalid length. [ 325.020540][T21468] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5293'. [ 325.576838][T21498] netlink: 'syz.5.5305': attribute type 12 has an invalid length. [ 325.586106][T21498] netlink: 'syz.5.5305': attribute type 29 has an invalid length. [ 325.592485][T21498] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5305'. [ 325.791501][T21516] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 325.791864][T21519] netlink: 'syz.4.5311': attribute type 2 has an invalid length. [ 325.798199][T21519] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5311'. [ 325.882440][T21533] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5317'. [ 325.932614][T21537] overlayfs: regular lower layers cannot follow data lower layers [ 325.941940][ C2] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 325.946363][ C2] sr 2:0:0:0: [sr0] tag#0 CDB: Rebuild(16) 81 9b b2 45 b3 f7 6c c3 20 c7 07 16 [ 325.983899][ T40] kauditd_printk_skb: 213 callbacks suppressed [ 325.983917][ T40] audit: type=1400 audit(2000000019.999:40169): avc: denied { read } for pid=21546 comm="syz.5.5323" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 325.993674][ T40] audit: type=1400 audit(2000000019.999:40170): avc: denied { open } for pid=21546 comm="syz.5.5323" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.001503][ T40] audit: type=1400 audit(2000000020.009:40171): avc: denied { ioctl } for pid=21546 comm="syz.5.5323" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.012096][ T40] audit: type=1400 audit(2000000020.029:40172): avc: denied { read write } for pid=21536 comm="syz.3.5319" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 326.019697][ T40] audit: type=1400 audit(2000000020.029:40173): avc: denied { open } for pid=21536 comm="syz.3.5319" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 326.032487][T21537] i2c i2c-1: dtv_property_process_set: SET cmd 0x61686378 undefined [ 326.032503][ T40] audit: type=1400 audit(2000000020.049:40174): avc: denied { ioctl } for pid=21536 comm="syz.3.5319" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 326.058197][ T40] audit: type=1400 audit(2000000020.079:40175): avc: denied { accept } for pid=21542 comm="syz.6.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 326.110230][ T40] audit: type=1400 audit(2000000020.129:40176): avc: denied { node_bind } for pid=21557 comm="syz.3.5326" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 326.159293][ T40] audit: type=1400 audit(2000000020.179:40177): avc: denied { write } for pid=21562 comm="syz.3.5327" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 326.168802][ T40] audit: type=1400 audit(2000000020.189:40178): avc: denied { create } for pid=21562 comm="syz.3.5327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.253491][T21570] overlayfs: failed to clone upperpath [ 326.276191][T21575] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 326.305855][ T5849] net_ratelimit: 218 callbacks suppressed [ 326.305875][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.385018][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.411998][T21589] fuse: Bad value for 'fd' [ 326.444298][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 326.448870][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 326.689123][T21620] xt_hashlimit: size too large, truncated to 1048576 [ 326.804159][T21626] fuse: fd is not a fuse device [ 326.863978][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.944243][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.947033][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.333998][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.424235][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.374900][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.454067][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.424837][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.513772][T21600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.780099][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5364'. [ 329.783114][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5364'. [ 329.868727][T21693] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 329.881723][T21693] tmpfs: Unknown parameter 'grrqukta_inode_hardl1' [ 330.156477][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5376'. [ 330.159889][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5376'. [ 330.239910][T21729] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.5379'. [ 330.329504][T21738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5382'. [ 330.420062][T21741] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5384'. [ 330.501655][T21750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21750 comm=syz.4.5388 [ 330.548577][T21756] pimreg: entered allmulticast mode [ 330.551979][T21756] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 330.790120][T21778] overlayfs: failed to clone lowerpath [ 330.967031][T21781] fuse: Unknown parameter 'uwer_id' [ 331.021363][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 331.021380][ T40] audit: type=1400 audit(2000000025.039:40363): avc: denied { read write } for pid=21780 comm="syz.5.5402" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.023268][T21794] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 331.031944][ T40] audit: type=1400 audit(2000000025.039:40364): avc: denied { open } for pid=21780 comm="syz.5.5402" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.060799][ T40] audit: type=1400 audit(2000000025.039:40365): avc: denied { ioctl } for pid=21780 comm="syz.5.5402" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.072111][T21797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21797 comm=syz.6.5407 [ 331.081143][ T40] audit: type=1400 audit(2000000025.059:40366): avc: denied { watch_mount watch_reads } for pid=21780 comm="syz.5.5402" path="/467" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.103064][T21788] dvmrp0: entered allmulticast mode [ 331.143422][ T40] audit: type=1400 audit(2000000025.159:40367): avc: denied { write } for pid=21807 comm="syz.3.5411" name="ip_vs_stats_percpu" dev="proc" ino=4026534969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 331.157923][ T40] audit: type=1400 audit(2000000025.159:40368): avc: denied { sys_module } for pid=21803 comm="syz.6.5409" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.176139][ T40] audit: type=1400 audit(2000000025.199:40369): avc: denied { create } for pid=21810 comm="syz.4.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.210717][T21811] can: request_module (can-proto-0) failed. [ 331.225070][ T40] audit: type=1400 audit(2000000025.249:40371): avc: denied { create } for pid=21810 comm="syz.4.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.233524][ T40] audit: type=1400 audit(2000000025.249:40372): avc: denied { ioctl } for pid=21810 comm="syz.4.5412" path="socket:[116774]" dev="sockfs" ino=116774 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.246288][ T40] audit: type=1400 audit(2000000025.239:40370): avc: denied { execute } for pid=21807 comm="syz.3.5411" name="file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.270360][T21805] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5409'. [ 331.421433][T21829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21829 comm=syz.4.5417 [ 331.494227][ T5849] net_ratelimit: 41 callbacks suppressed [ 331.494251][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.583989][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.625521][T21849] bridge0: port 3(ipvlan2) entered blocking state [ 331.628574][T21849] bridge0: port 3(ipvlan2) entered disabled state [ 331.631594][T21849] ipvlan2: entered allmulticast mode [ 331.637275][T21849] bridge0: entered allmulticast mode [ 331.645829][T21849] ipvlan2: left allmulticast mode [ 331.648152][T21849] bridge0: left allmulticast mode [ 331.699822][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5425'. [ 331.782111][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.786662][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.789352][T21858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21858 comm=syz.3.5429 [ 331.793213][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.806280][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.810151][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.816714][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.820245][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.824000][T21859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.830894][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5430'. [ 331.948888][T21873] vxcan0: tx address claim with dlc 0 [ 332.161808][T21886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21886 comm=syz.5.5441 [ 332.547961][ T5750] Bluetooth: hci3: SCO packet for unknown connection handle 2248 [ 332.753399][T17659] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.918721][T17659] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.967138][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.976511][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.981958][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.993084][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.006612][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.036007][T17659] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.152667][T17659] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.254510][ T5829] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 333.277957][T21944] wg2 speed is unknown, defaulting to 1000 [ 333.390578][T17659] bridge_slave_1: left allmulticast mode [ 333.397728][T17659] bridge_slave_1: left promiscuous mode [ 333.402652][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.414266][T17659] bridge_slave_0: left allmulticast mode [ 333.419032][T17659] bridge_slave_0: left promiscuous mode [ 333.419696][ T5829] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.420933][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.424482][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.428582][ T5829] usb 9-1: Product: syz [ 333.429959][ T5829] usb 9-1: Manufacturer: syz [ 333.431566][ T5829] usb 9-1: SerialNumber: syz [ 333.448709][T17659] pimreg: left allmulticast mode [ 333.453046][ T5829] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.489708][ T29] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.602448][T17659] erspan0 (unregistering): left promiscuous mode [ 333.638132][T17659] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 333.652934][T17659] bond3 (unregistering): (slave geneve2): Releasing active interface [ 333.990679][T17659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.998851][T17659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.005949][T17659] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 334.011707][T17659] bond0 (unregistering): Released all slaves [ 334.022278][T17659] bond1 (unregistering): (slave bond2): Releasing backup interface [ 334.027777][T17659] bond1 (unregistering): Released all slaves [ 334.040689][T17659] bond2 (unregistering): Released all slaves [ 334.053286][T17659] bond3 (unregistering): Released all slaves [ 334.073287][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 334.234539][ T5821] usb 9-1: USB disconnect, device number 9 [ 334.347326][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 334.539148][T17659] veth0_to_team: left promiscuous mode [ 334.546430][T17659] hsr_slave_0: left promiscuous mode [ 334.548583][T17659] hsr_slave_1: left promiscuous mode [ 334.550557][T17659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.552853][T17659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.556380][T17659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.558957][T17659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.566441][T17659] veth1_macvtap: left promiscuous mode [ 334.568748][T17659] veth0_macvtap: left promiscuous mode [ 334.570501][T17659] veth1_vlan: left promiscuous mode [ 334.704239][ T29] usb 9-1: Service connection timeout for: 256 [ 334.713753][ T29] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 334.716768][ T29] ath9k_htc: Failed to initialize the device [ 334.719213][ T5821] usb 9-1: ath9k_htc: USB layer deinitialized [ 334.754609][T17659] team0 (unregistering): Port device team_slave_1 removed [ 334.765305][T17659] team0 (unregistering): Port device team_slave_0 removed [ 334.857683][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 334.892770][T21944] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.896129][T21944] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.899418][T21944] bridge_slave_0: entered allmulticast mode [ 334.903424][T21944] bridge_slave_0: entered promiscuous mode [ 334.910798][T21944] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.914099][T21944] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.920951][T21944] bridge_slave_1: entered allmulticast mode [ 334.924340][T21944] bridge_slave_1: entered promiscuous mode [ 334.947934][T21944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.952466][T21944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.963917][T22006] __nla_validate_parse: 3 callbacks suppressed [ 334.963930][T22006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5475'. [ 334.980157][T21944] team0: Port device team_slave_0 added [ 334.983373][T21944] team0: Port device team_slave_1 added [ 335.000014][T21944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.002206][T21944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.010435][T21944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.015208][T21944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.017419][T21944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.026075][T21944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.058225][T21944] hsr_slave_0: entered promiscuous mode [ 335.060760][T21944] hsr_slave_1: entered promiscuous mode [ 335.062931][T21944] debugfs: 'hsr0' already exists in 'hsr' [ 335.065031][T21944] Cannot create hsr debugfs directory [ 335.093882][ T5750] Bluetooth: hci0: command tx timeout [ 335.136924][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 335.152440][T17659] IPVS: stop unused estimator thread 0... [ 335.238277][T21944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 335.242347][T21944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.245526][T21944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.251458][T21944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.255441][T21944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.261413][T21944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.264421][T21944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.269253][T21944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.331784][T21944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.352451][T21944] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.361218][T17656] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.364356][T17656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.388259][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.390869][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.544634][T22055] binder: 22054:22055 ioctl c0306201 2000000001c0 returned -22 [ 335.714963][T21944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.796815][T22078] validate_nla: 2 callbacks suppressed [ 335.796826][T22078] netlink: 'syz.5.5484': attribute type 6 has an invalid length. [ 335.897378][T21944] veth0_vlan: entered promiscuous mode [ 335.906077][T21944] veth1_vlan: entered promiscuous mode [ 335.971071][T21944] veth0_macvtap: entered promiscuous mode [ 335.978370][T21944] veth1_macvtap: entered promiscuous mode [ 335.995236][T21944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.010156][T21944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.022265][ T8468] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.027715][ T40] kauditd_printk_skb: 303 callbacks suppressed [ 336.027730][ T40] audit: type=1400 audit(2000000030.049:40676): avc: denied { bind } for pid=22098 comm="syz.5.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.031005][ T8468] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.044068][ T40] audit: type=1400 audit(2000000030.059:40677): avc: denied { write } for pid=22098 comm="syz.5.5490" path="socket:[117256]" dev="sockfs" ino=117256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.045180][ T8468] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.066631][ T40] audit: type=1400 audit(2000000030.059:40678): avc: denied { kexec_image_load } for pid=22094 comm="syz.4.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 336.078427][ T8468] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.090263][ T40] audit: type=1400 audit(2000000030.059:40679): avc: denied { read write } for pid=22094 comm="syz.4.5488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.098336][ T40] audit: type=1400 audit(2000000030.059:40680): avc: denied { open } for pid=22094 comm="syz.4.5488" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.109162][ T40] audit: type=1400 audit(2000000030.059:40681): avc: denied { ioctl } for pid=22094 comm="syz.4.5488" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.125523][ T40] audit: type=1400 audit(2000000030.079:40682): avc: denied { bpf } for pid=22097 comm="syz.3.5489" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.148565][ T40] audit: type=1400 audit(2000000030.079:40683): avc: denied { read } for pid=22097 comm="syz.3.5489" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.176470][ T40] audit: type=1400 audit(2000000030.079:40684): avc: denied { open } for pid=22097 comm="syz.3.5489" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.183900][ T40] audit: type=1400 audit(2000000030.079:40685): avc: denied { create } for pid=22094 comm="syz.4.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 336.194529][T17645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.197531][T17645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.225252][T17656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.232539][T17656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.396593][T22126] veth0_to_team: entered promiscuous mode [ 336.399128][T22126] erspan0: entered promiscuous mode [ 336.401518][T22126] debugfs: 'hsr1' already exists in 'hsr' [ 336.403333][T22126] Cannot create hsr debugfs directory [ 336.499072][T22143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5502'. [ 336.574460][ T5750] block nbd2: Receive control failed (result -1) [ 336.665984][T22161] netlink: 'syz.7.5507': attribute type 13 has an invalid length. [ 336.668457][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5507'. [ 336.676062][T22161] netlink: 'syz.7.5507': attribute type 13 has an invalid length. [ 336.676071][ T8466] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.679355][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5507'. [ 336.684516][ T8466] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.688613][ T8466] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.691450][ T8466] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.691533][T22161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=22161 comm=syz.7.5507 [ 336.701220][T10620] net_ratelimit: 207 callbacks suppressed [ 336.701232][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.784978][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.787952][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.986309][T22188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5517'. [ 337.005471][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5518'. [ 337.031387][T22188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22188 comm=syz.5.5517 [ 337.164489][T22200] netlink: 'syz.5.5517': attribute type 39 has an invalid length. [ 337.173836][ T5750] Bluetooth: hci0: command tx timeout [ 337.309418][T22208] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 337.382053][T22208] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 337.388830][T22208] ref_ctr increment failed for inode: 0x65e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803500e200 [ 337.402458][T22208] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 337.406175][T22208] ref_ctr decrement failed for inode: 0x65e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803500e200 [ 337.411292][T22208] uprobe: syz.4.5523:22208 failed to unregister, leaking uprobe [ 337.421929][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.430122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.635179][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 337.638920][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 337.744046][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.815677][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.819277][T22230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.821974][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.840707][T22232] netlink: 146824 bytes leftover after parsing attributes in process `syz.3.5532'. [ 337.880609][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5533'. [ 338.281782][T22257] [ 338.282634][T22257] ====================================================== [ 338.284778][T22257] WARNING: possible circular locking dependency detected [ 338.287008][T22257] syzkaller #0 Tainted: G L [ 338.289133][T22257] ------------------------------------------------------ [ 338.291501][T22257] syz.3.5542/22257 is trying to acquire lock: [ 338.293401][T22257] ffffffff8e9b1de0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 338.296549][T22257] [ 338.296549][T22257] but task is already holding lock: [ 338.299273][T22257] ffffffff8e97f760 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 338.302922][T22257] [ 338.302922][T22257] which lock already depends on the new lock. [ 338.302922][T22257] [ 338.307136][T22257] [ 338.307136][T22257] the existing dependency chain (in reverse order) is: [ 338.310660][T22257] [ 338.310660][T22257] -> #8 (slab_mutex){+.+.}-{4:4}: [ 338.313525][T22257] __mutex_lock+0x1a4/0x1b10 [ 338.315582][T22257] kmem_cache_destroy+0x59/0x190 [ 338.317785][T22257] p9_client_destroy+0x20c/0x3a0 [ 338.320016][T22257] v9fs_session_close+0x49/0x2d0 [ 338.322255][T22257] v9fs_kill_super+0x4d/0xa0 [ 338.324420][T22257] deactivate_locked_super+0xc1/0x1b0 [ 338.327172][T22257] deactivate_super+0xe7/0x110 [ 338.329689][T22257] cleanup_mnt+0x21f/0x450 [ 338.331759][T22257] task_work_run+0x150/0x240 [ 338.333889][T22257] exit_to_user_mode_loop+0x157/0x670 [ 338.336380][T22257] do_syscall_64+0x666/0x870 [ 338.338496][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.341115][T22257] [ 338.341115][T22257] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 338.344230][T22257] cpus_read_lock+0x42/0x170 [ 338.346370][T22257] static_key_slow_inc+0x12/0x30 [ 338.348568][T22257] setup_udp_tunnel_sock+0x4f9/0x620 [ 338.351310][T22257] l2tp_tunnel_register+0x9e5/0xbe0 [ 338.353640][T22257] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 338.356492][T22257] pppol2tp_connect+0xaf0/0x1c20 [ 338.358731][T22257] __sys_connect_file+0x141/0x1a0 [ 338.360984][T22257] __sys_connect+0x141/0x170 [ 338.363013][T22257] __x64_sys_connect+0x72/0xb0 [ 338.364955][T22257] do_syscall_64+0x115/0x870 [ 338.366813][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.369123][T22257] [ 338.369123][T22257] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 338.371880][T22257] lock_sock_nested+0x41/0xf0 [ 338.373482][T22257] inet_shutdown+0x67/0x410 [ 338.375060][T22257] nbd_mark_nsock_dead+0xae/0x5c0 [ 338.376781][T22257] recv_work+0x5fb/0x8c0 [ 338.378300][T22257] process_one_work+0xa0e/0x1980 [ 338.380053][T22257] worker_thread+0x5ef/0xe50 [ 338.381671][T22257] kthread+0x370/0x450 [ 338.383302][T22257] ret_from_fork+0x72b/0xd50 [ 338.385226][T22257] ret_from_fork_asm+0x1a/0x30 [ 338.386930][T22257] [ 338.386930][T22257] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 338.389293][T22257] __mutex_lock+0x1a4/0x1b10 [ 338.390895][T22257] nbd_queue_rq+0x428/0x1080 [ 338.392472][T22257] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 338.394529][T22257] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 338.396683][T22257] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 338.398816][T22257] blk_mq_run_hw_queue+0x23c/0x670 [ 338.400593][T22257] blk_mq_dispatch_list+0x51d/0x1360 [ 338.402406][T22257] blk_mq_flush_plug_list+0x130/0x600 [ 338.404488][T22257] __blk_flush_plug+0x2c4/0x4b0 [ 338.406227][T22257] __submit_bio+0x584/0x6c0 [ 338.408208][T22257] submit_bio_noacct_nocheck+0x543/0xbf0 [ 338.410481][T22257] submit_bio_noacct+0xd18/0x2000 [ 338.412443][T22257] submit_bh_wbc+0x681/0x890 [ 338.414039][T22257] block_read_full_folio+0x264/0x8e0 [ 338.415880][T22257] filemap_read_folio+0xfc/0x3b0 [ 338.417603][T22257] do_read_cache_folio+0x2d7/0x6b0 [ 338.419422][T22257] read_part_sector+0xd1/0x370 [ 338.421034][T22257] adfspart_check_ICS+0x91/0x7d0 [ 338.422688][T22257] bdev_disk_changed+0x7a3/0x1250 [ 338.424396][T22257] blkdev_get_whole+0x187/0x290 [ 338.426005][T22257] bdev_open+0x2c7/0xe40 [ 338.427349][T22257] blkdev_open+0x34e/0x4f0 [ 338.428736][T22257] do_dentry_open+0x6ab/0x14d0 [ 338.430391][T22257] vfs_open+0x82/0x3f0 [ 338.431840][T22257] path_openat+0x208c/0x31a0 [ 338.433436][T22257] do_file_open+0x20e/0x430 [ 338.435019][T22257] do_sys_openat2+0x10d/0x1e0 [ 338.436608][T22257] __x64_sys_openat+0x12d/0x210 [ 338.438273][T22257] do_syscall_64+0x115/0x870 [ 338.439838][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.441746][T22257] [ 338.441746][T22257] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 338.443990][T22257] __mutex_lock+0x1a4/0x1b10 [ 338.445562][T22257] nbd_queue_rq+0xba/0x1080 [ 338.447095][T22257] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 338.448988][T22257] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 338.451031][T22257] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 338.452957][T22257] blk_mq_run_hw_queue+0x23c/0x670 [ 338.454643][T22257] blk_mq_dispatch_list+0x51d/0x1360 [ 338.456427][T22257] blk_mq_flush_plug_list+0x130/0x600 [ 338.458293][T22257] __blk_flush_plug+0x2c4/0x4b0 [ 338.459933][T22257] __submit_bio+0x584/0x6c0 [ 338.461469][T22257] submit_bio_noacct_nocheck+0x543/0xbf0 [ 338.463347][T22257] submit_bio_noacct+0xd18/0x2000 [ 338.465050][T22257] submit_bh_wbc+0x681/0x890 [ 338.466656][T22257] block_read_full_folio+0x264/0x8e0 [ 338.468462][T22257] filemap_read_folio+0xfc/0x3b0 [ 338.470120][T22257] do_read_cache_folio+0x2d7/0x6b0 [ 338.471924][T22257] read_part_sector+0xd1/0x370 [ 338.473572][T22257] adfspart_check_ICS+0x91/0x7d0 [ 338.475245][T22257] bdev_disk_changed+0x7a3/0x1250 [ 338.476997][T22257] blkdev_get_whole+0x187/0x290 [ 338.478679][T22257] bdev_open+0x2c7/0xe40 [ 338.480210][T22257] blkdev_open+0x34e/0x4f0 [ 338.481720][T22257] do_dentry_open+0x6ab/0x14d0 [ 338.483385][T22257] vfs_open+0x82/0x3f0 [ 338.484810][T22257] path_openat+0x208c/0x31a0 [ 338.486369][T22257] do_file_open+0x20e/0x430 [ 338.487884][T22257] do_sys_openat2+0x10d/0x1e0 [ 338.489475][T22257] __x64_sys_openat+0x12d/0x210 [ 338.491102][T22257] do_syscall_64+0x115/0x870 [ 338.492663][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.494694][T22257] [ 338.494694][T22257] -> #3 (set->srcu){.+.+}-{0:0}: [ 338.496923][T22257] __synchronize_srcu+0xa2/0x300 [ 338.498734][T22257] blk_mq_quiesce_queue+0x149/0x1c0 [ 338.500554][T22257] elevator_switch+0x17b/0x7e0 [ 338.502362][T22257] elevator_change+0x352/0x530 [ 338.504053][T22257] elevator_set_default+0x29e/0x360 [ 338.505886][T22257] blk_register_queue+0x48e/0x630 [ 338.507597][T22257] __add_disk+0x73f/0xe40 [ 338.509134][T22257] add_disk_fwnode+0x118/0x5c0 [ 338.510885][T22257] nbd_dev_add+0x77a/0xb10 [ 338.512580][T22257] nbd_init+0x291/0x2b0 [ 338.514156][T22257] do_one_initcall+0x121/0x750 [ 338.515785][T22257] kernel_init_freeable+0x6ea/0x7b0 [ 338.517516][T22257] kernel_init+0x1f/0x1e0 [ 338.519221][T22257] ret_from_fork+0x72b/0xd50 [ 338.520866][T22257] ret_from_fork_asm+0x1a/0x30 [ 338.522877][T22257] [ 338.522877][T22257] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 338.525871][T22257] __mutex_lock+0x1a4/0x1b10 [ 338.527713][T22257] elevator_change+0x1bc/0x530 [ 338.529370][T22257] elevator_set_none+0x92/0xf0 [ 338.531123][T22257] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 338.533524][T22257] nbd_start_device+0x1a6/0xbd0 [ 338.535186][T22257] nbd_genl_connect+0xff2/0x1a40 [ 338.536728][T22257] genl_family_rcv_msg_doit+0x214/0x300 [ 338.538821][T22257] genl_rcv_msg+0x560/0x800 [ 338.540638][T22257] netlink_rcv_skb+0x159/0x420 [ 338.542359][T22257] genl_rcv+0x28/0x40 [ 338.543958][T22257] netlink_unicast+0x585/0x850 [ 338.545868][T22257] netlink_sendmsg+0x8b0/0xda0 [ 338.547871][T22257] ____sys_sendmsg+0x9e1/0xb70 [ 338.549713][T22257] ___sys_sendmsg+0x190/0x1e0 [ 338.551307][T22257] __sys_sendmsg+0x170/0x220 [ 338.552907][T22257] do_syscall_64+0x115/0x870 [ 338.554474][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.556396][T22257] [ 338.556396][T22257] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 338.558891][T22257] blk_alloc_queue+0x610/0x790 [ 338.560485][T22257] blk_mq_alloc_queue+0x174/0x290 [ 338.562161][T22257] __blk_mq_alloc_disk+0x29/0x120 [ 338.563967][T22257] nbd_dev_add+0x492/0xb10 [ 338.565479][T22257] nbd_init+0x291/0x2b0 [ 338.566932][T22257] do_one_initcall+0x121/0x750 [ 338.568545][T22257] kernel_init_freeable+0x6ea/0x7b0 [ 338.570265][T22257] kernel_init+0x1f/0x1e0 [ 338.571765][T22257] ret_from_fork+0x72b/0xd50 [ 338.573368][T22257] ret_from_fork_asm+0x1a/0x30 [ 338.574983][T22257] [ 338.574983][T22257] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 338.577158][T22257] __lock_acquire+0x14b8/0x2630 [ 338.578794][T22257] lock_acquire+0x1b1/0x370 [ 338.580326][T22257] fs_reclaim_acquire+0xc4/0x100 [ 338.581974][T22257] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 338.584079][T22257] kstrdup+0x51/0xe0 [ 338.585437][T22257] kstrdup_const+0x63/0x80 [ 338.586946][T22257] __kmem_cache_create_args+0x118/0x420 [ 338.588781][T22257] bioset_init+0x5ee/0x8a0 [ 338.590286][T22257] mddev_init+0x17c/0x820 [ 338.591770][T22257] md_alloc+0xc7/0x10a0 [ 338.593233][T22257] md_probe+0x73/0xf0 [ 338.594623][T22257] blk_probe_dev+0x149/0x1e0 [ 338.596176][T22257] blk_request_module+0x16/0xc0 [ 338.597801][T22257] blkdev_get_no_open+0x9b/0xf0 [ 338.599433][T22257] bdev_file_open_by_dev+0x70/0x210 [ 338.601154][T22257] swsusp_check+0x72/0x470 [ 338.602788][T22257] software_resume+0x6f/0x330 [ 338.604705][T22257] resume_store+0x248/0x460 [ 338.606645][T22257] kobj_attr_store+0x58/0x80 [ 338.608459][T22257] sysfs_kf_write+0xf2/0x150 [ 338.610053][T22257] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.611861][T22257] vfs_write+0x6ac/0x1070 [ 338.613377][T22257] ksys_write+0x12a/0x250 [ 338.614891][T22257] do_syscall_64+0x115/0x870 [ 338.616709][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.618695][T22257] [ 338.618695][T22257] other info that might help us debug this: [ 338.618695][T22257] [ 338.621795][T22257] Chain exists of: [ 338.621795][T22257] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 338.621795][T22257] [ 338.625516][T22257] Possible unsafe locking scenario: [ 338.625516][T22257] [ 338.627783][T22257] CPU0 CPU1 [ 338.629411][T22257] ---- ---- [ 338.631059][T22257] lock(slab_mutex); [ 338.632310][T22257] lock(cpu_hotplug_lock); [ 338.634444][T22257] lock(slab_mutex); [ 338.636401][T22257] lock(fs_reclaim); [ 338.637643][T22257] [ 338.637643][T22257] *** DEADLOCK *** [ 338.637643][T22257] [ 338.640080][T22257] 9 locks held by syz.3.5542/22257: [ 338.642006][T22257] #0: ffff88805f400d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 338.644780][T22257] #1: ffff88802dad0410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 338.647530][T22257] #2: ffff888026c24c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 338.650460][T22257] #3: ffff88801c319878 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 338.653500][T22257] #4: ffffffff8e6a1f40 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 338.656583][T22257] #5: ffffffff8f311c40 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 338.659443][T22257] #6: ffffffff90151600 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 338.662081][T22257] #7: ffffffff8f2f89a0 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 338.665352][T22257] #8: ffffffff8e97f760 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 338.668478][T22257] [ 338.668478][T22257] stack backtrace: [ 338.670273][T22257] CPU: 2 UID: 0 PID: 22257 Comm: syz.3.5542 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.670290][T22257] Tainted: [L]=SOFTLOCKUP [ 338.670294][T22257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.670301][T22257] Call Trace: [ 338.670306][T22257] [ 338.670311][T22257] dump_stack_lvl+0x100/0x190 [ 338.670325][T22257] print_circular_bug.cold+0x178/0x1c7 [ 338.670367][T22257] check_noncircular+0x146/0x160 [ 338.670388][T22257] __lock_acquire+0x14b8/0x2630 [ 338.670409][T22257] ? trace_contention_end+0x122/0x170 [ 338.670427][T22257] lock_acquire+0x1b1/0x370 [ 338.670440][T22257] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 338.670463][T22257] ? __pfx___mutex_lock+0x10/0x10 [ 338.670487][T22257] fs_reclaim_acquire+0xc4/0x100 [ 338.670505][T22257] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 338.670529][T22257] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 338.670548][T22257] ? kstrdup_const+0x63/0x80 [ 338.670560][T22257] kstrdup+0x51/0xe0 [ 338.670570][T22257] kstrdup_const+0x63/0x80 [ 338.670581][T22257] __kmem_cache_create_args+0x118/0x420 [ 338.670598][T22257] bioset_init+0x5ee/0x8a0 [ 338.670609][T22257] ? __pfx_bioset_init+0x10/0x10 [ 338.670620][T22257] ? kasan_save_track+0x14/0x30 [ 338.670630][T22257] ? __kasan_kmalloc+0xaa/0xb0 [ 338.670640][T22257] ? percpu_ref_init+0x244/0x3f0 [ 338.670658][T22257] mddev_init+0x17c/0x820 [ 338.670669][T22257] md_alloc+0xc7/0x10a0 [ 338.670683][T22257] md_probe+0x73/0xf0 [ 338.670696][T22257] ? __pfx_md_probe+0x10/0x10 [ 338.670709][T22257] blk_probe_dev+0x149/0x1e0 [ 338.670725][T22257] blk_request_module+0x16/0xc0 [ 338.670735][T22257] blkdev_get_no_open+0x9b/0xf0 [ 338.670750][T22257] bdev_file_open_by_dev+0x70/0x210 [ 338.670765][T22257] swsusp_check+0x72/0x470 [ 338.670777][T22257] software_resume+0x6f/0x330 [ 338.670793][T22257] resume_store+0x248/0x460 [ 338.670808][T22257] ? __pfx_resume_store+0x10/0x10 [ 338.670826][T22257] ? find_held_lock+0x2b/0x80 [ 338.670835][T22257] ? sysfs_file_kobj+0xe4/0x290 [ 338.670846][T22257] ? sysfs_file_kobj+0xe4/0x290 [ 338.670862][T22257] ? __pfx_resume_store+0x10/0x10 [ 338.670877][T22257] kobj_attr_store+0x58/0x80 [ 338.670893][T22257] ? __pfx_kobj_attr_store+0x10/0x10 [ 338.670908][T22257] sysfs_kf_write+0xf2/0x150 [ 338.670920][T22257] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.670937][T22257] ? __pfx_sysfs_kf_write+0x10/0x10 [ 338.670949][T22257] vfs_write+0x6ac/0x1070 [ 338.670961][T22257] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 338.670979][T22257] ? __pfx_vfs_write+0x10/0x10 [ 338.670994][T22257] ksys_write+0x12a/0x250 [ 338.671006][T22257] ? __pfx_ksys_write+0x10/0x10 [ 338.671018][T22257] ? rcu_is_watching+0x12/0xc0 [ 338.671035][T22257] do_syscall_64+0x115/0x870 [ 338.671049][T22257] ? clear_bhb_loop+0x40/0x90 [ 338.671061][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.671073][T22257] RIP: 0033:0x7f21fa39ce59 [ 338.671082][T22257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.671093][T22257] RSP: 002b:00007f21fb325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.671104][T22257] RAX: ffffffffffffffda RBX: 00007f21fa615fa0 RCX: 00007f21fa39ce59 [ 338.671111][T22257] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 338.671118][T22257] RBP: 00007f21fa432d6f R08: 0000000000000000 R09: 0000000000000000 [ 338.671124][T22257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.671131][T22257] R13: 00007f21fa616038 R14: 00007f21fa615fa0 R15: 00007ffdae6b5198 [ 338.671141][T22257] [ 338.786308][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.794921][T22257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 338.798370][T22257] block device autoloading is deprecated and will be removed. [ 338.801141][T22257] PM: Image not found (code -5) [ 339.098676][T17645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.179005][T17645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.253973][ T5750] Bluetooth: hci0: command tx timeout [ 339.349055][T17645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.439523][T17645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.567517][T17645] bridge_slave_1: left allmulticast mode [ 339.569848][T17645] bridge_slave_1: left promiscuous mode [ 339.572234][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.577384][T17645] bridge_slave_0: left allmulticast mode [ 339.579691][T17645] bridge_slave_0: left promiscuous mode [ 339.582011][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.645630][T17645] erspan0 (unregistering): left promiscuous mode [ 339.776783][T17645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.781623][T17645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.785449][T17645] bond0 (unregistering): Released all slaves [ 339.788836][T17645] bond1 (unregistering): Released all slaves [ 339.910537][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 340.031942][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 340.159603][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 340.222351][T17645] veth0_to_team: left promiscuous mode [ 340.228107][T17645] hsr_slave_0: left promiscuous mode [ 340.230363][T17645] hsr_slave_1: left promiscuous mode [ 340.233579][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.236100][T17645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.244081][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.249201][T17645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.264172][T17645] veth1_macvtap: left promiscuous mode [ 340.265971][T17645] veth0_macvtap: left promiscuous mode [ 340.268155][T17645] veth1_vlan: left promiscuous mode [ 340.270372][T17645] veth0_vlan: left promiscuous mode [ 340.343303][T17645] team0 (unregistering): Port device team_slave_1 removed [ 340.350680][T17645] team0 (unregistering): Port device team_slave_0 removed [ 340.410398][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 340.888409][T17645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.969615][T17645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.047817][T17645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.098291][T17645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.186188][T17645] bridge_slave_1: left allmulticast mode [ 341.187964][T17645] bridge_slave_1: left promiscuous mode [ 341.189899][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.193196][T17645] bridge_slave_0: left allmulticast mode [ 341.195529][T17645] bridge_slave_0: left promiscuous mode [ 341.197348][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.239668][T17645] erspan0 (unregistering): left promiscuous mode [ 341.377458][ T59] smc: removing ib device syz1 [ 341.381251][T17645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.386603][T17645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.390365][T17645] bond0 (unregistering): Released all slaves [ 341.394852][T17645] bond1 (unregistering): (slave lo): Releasing backup interface [ 341.397708][T17645] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 341.401999][T17645] bond1 (unregistering): Released all slaves [ 341.415710][ T59] smbdirect: ib_dev[syz1] removed [ 341.454869][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 341.454886][ T40] audit: type=1400 audit(2000000035.479:40878): avc: denied { write } for pid=22297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.512199][ T40] audit: type=1400 audit(2000000035.529:40879): avc: denied { write } for pid=22300 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.543682][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 341.630804][ T40] audit: type=1400 audit(2000000035.649:40880): avc: denied { write } for pid=22307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.678698][ T40] audit: type=1400 audit(2000000035.699:40881): avc: denied { write } for pid=22310 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.725123][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 341.789824][ T40] audit: type=1400 audit(2000000035.809:40882): avc: denied { write } for pid=22313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.820707][ T40] audit: type=1400 audit(2000000035.839:40883): avc: denied { write } for pid=22316 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.855538][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 341.899453][T17645] veth0_to_team: left promiscuous mode [ 341.903259][T17645] hsr_slave_0: left promiscuous mode [ 341.905975][T17645] hsr_slave_1: left promiscuous mode [ 341.908340][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.910727][T17645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.913207][T17645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.915653][T17645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.920593][T17645] veth1_macvtap: left promiscuous mode [ 341.922583][T17645] veth0_macvtap: left promiscuous mode [ 341.923164][ T40] audit: type=1400 audit(2000000035.939:40884): avc: denied { write } for pid=22319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.924596][T17645] veth1_vlan: left promiscuous mode [ 341.924624][T17645] veth0_vlan: left promiscuous mode [ 341.970713][ T40] audit: type=1400 audit(2000000035.989:40885): avc: denied { write } for pid=22322 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.979887][ T5829] net_ratelimit: 8 callbacks suppressed [ 341.979910][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.983259][T17645] pim6reg (unregistering): left allmulticast mode [ 342.045183][T17645] team0 (unregistering): Port device team_slave_1 removed [ 342.052963][T17645] team0 (unregistering): Port device team_slave_0 removed [ 342.058230][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.109973][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 342.518597][T17645] IPVS: stop unused estimator thread 0... [ 343.014965][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.063966][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.094948][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.104034][T10620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.134105][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.368871][ T40] audit: type=1400 audit(2000000040.389:40886): avc: denied { write } for pid=22336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.407666][ T40] audit: type=1400 audit(2000000040.429:40887): avc: denied { write } for pid=22339 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.629837][ T40] audit: type=1400 audit(2000000040.649:40888): avc: denied { write } for pid=22344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.669000][ T40] audit: type=1400 audit(2000000040.689:40889): avc: denied { write } for pid=22347 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.174697][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.422665][ T40] audit: type=1400 audit(2000000041.439:40890): avc: denied { write } for pid=22352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.461707][ T40] audit: type=1400 audit(2000000041.479:40891): avc: denied { write } for pid=22355 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.527199][ T40] audit: type=1400 audit(2000000041.549:40892): avc: denied { write } for pid=22358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.578312][ T40] audit: type=1400 audit(2000000041.599:40893): avc: denied { write } for pid=22361 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.134028][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.214669][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog