last executing test programs: 1m26.91012557s ago: executing program 0 (id=317): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x2000, r0, 0x0, 0x2, 0x0) 1m26.889958547s ago: executing program 0 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4094, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="2c67726f75705f76de56", @ANYRESDEC=0x0, @ANYRES32, @ANYRES8=r0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKSECTGET(r4, 0x40084d06, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f000010b000/0x3000)=nil, 0x3000, 0x0, 0x30, r5, 0xf688000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000180)=0x1) (async) timer_create(0x1, 0x0, &(0x7f00000000c0)=0x0) (async) r9 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) (async) timer_delete(r8) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f00000000c0)={{}, {r10, r11+10000000}}, &(0x7f0000000140)) (async) dup(r7) r12 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r13) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xfffffffc, '\x00', @string=&(0x7f0000000080)=0x11}}) (async) dup(r12) 1m26.749212738s ago: executing program 0 (id=320): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x3403f, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m26.748757948s ago: executing program 0 (id=321): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5392, &(0x7f0000000880)=@manufact={0x4, 0x0, 0xfffffffffffffefd, "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"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffe, 0x6, 0xaf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="1205b16291fe", 0x0, 0x1, 0x10, 0x3, 0x0}) close(0x3) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x7}}]}, 0x8c}}, 0x800) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x2000008}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) close(0x4) 1m26.158809535s ago: executing program 0 (id=325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="5fc5f6", 0x3}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x1, 0x4800) 1m25.597314457s ago: executing program 0 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) 1m25.541474649s ago: executing program 32 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) 6.555700977s ago: executing program 1 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x51, 0x1, [{0xcfa, 0x8}]}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x4}, 0xfd}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r4, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}], 0x4000000000002ce, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) 6.38881426s ago: executing program 1 (id=1043): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0xf5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.328741154s ago: executing program 1 (id=1044): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x1, 0x13000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0xa0117e908a83e382}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x12, r8, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000000)={0x30, 0x6, 0xfb2}) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r9, 0x40187013, &(0x7f00000000c0)) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0xa0100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0xf) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 6.146709513s ago: executing program 1 (id=1051): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.788773302s ago: executing program 1 (id=1059): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x1, 0x13000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000340), &(0x7f0000000440)=r4}, 0x20) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0xa0117e908a83e382}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x12, r8, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000000)={0x30, 0x6, 0xfb2}) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r9, 0x40187013, &(0x7f00000000c0)) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0xa0100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0xf) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 5.508231801s ago: executing program 1 (id=1064): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) write$dsp(r0, &(0x7f0000000680)="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", 0x1000) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1c) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x1) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async) sendto$inet(r6, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) listen(r6, 0x89) (async) pwritev2(r5, &(0x7f0000002e40)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000400)="4a8a2f8401c2c6f3120db0fe140ab078958f4ba861d6bb8e82758ca763df43a4b4bd20", 0x23}, {&(0x7f0000000380)="a39c3045d0a67cda77fc38307c1b305d57a2da4c11d21335cdb6587cf2f95d35bd7364ca0ea3d77510126264c632e969abaed0d6a26c73f1f541bd8e1883bda8a9696f4b62b431", 0x47}, {&(0x7f0000000c40)="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", 0xb2f}], 0x5, 0x5, 0xa, 0x14) (async) mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000040)) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x10000, &(0x7f0000000380)='nocase') (async) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x50a) 2.773583009s ago: executing program 3 (id=1109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb6040000000000", 0xf9}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb1", 0x161}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cec", 0xb0}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.247128378s ago: executing program 2 (id=1121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x1, 0x13000}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0xa0117e908a83e382}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x12, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000000)={0x30, 0x6, 0xfb2}) r7 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r7, 0x40187013, &(0x7f00000000c0)) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0xa0100, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0xf) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 2.076852504s ago: executing program 2 (id=1124): symlink(0x0, &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffff9, 0x5}, 0x9c) write$P9_RSTATFS(r1, &(0x7f00000005c0)={0x43, 0x9, 0x2, {0x6, 0x3, 0x4, 0xa38c, 0xfffffffffffffe01, 0x5, 0x8001, 0x3, 0x5}}, 0x43) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) recvmmsg(r2, &(0x7f0000002f80)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/68, 0x44}], 0x4, &(0x7f0000001900)=""/82, 0x52}, 0x1}, {{&(0x7f0000001980)=@tipc=@name, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/6, 0x6}, {&(0x7f0000001a40)=""/60, 0x3c}, {&(0x7f0000001a80)=""/144, 0x90}], 0x3, &(0x7f0000001b80)=""/16, 0x10}, 0x6}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=""/116, 0x74}, 0x5}, {{&(0x7f0000002d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/80, 0x50}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/227, 0xe3}], 0x3}, 0x9}], 0x4, 0x12103, &(0x7f0000003080)={0x77359400}) 2.076505452s ago: executing program 2 (id=1125): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2000008}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x47e947930257e4f3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4, 0x12) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) preadv(r5, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) write$sndseq(r5, &(0x7f00000000c0)=[{0x6, 0x7f, 0x2, 0xc6, @time={0x4, 0x4}, {0x9, 0x8}, {0xf, 0x2}, @result={0x9, 0x29}}], 0x1c) listen(r2, 0x80) close(0x4) 1.830822568s ago: executing program 3 (id=1126): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) waitid(0x1, r0, &(0x7f0000000040), 0x2, &(0x7f0000000100)) setns(r1, 0x24020000) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x9, {0xa4, 0x800, 0x8, 0x1}}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {r5}}, './file0\x00'}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)=@overlay={0x1000, 0x3, 0x4, 0x37225f25b3d0ec50, 0x7, {}, {0x5, 0x2, 0x4, 0x9, 0x0, 0xff, "118fb34b"}, 0xeb, 0x3, {}, 0x100, 0x0, r6}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 1.82792075s ago: executing program 3 (id=1127): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}}, 0x4080) r1 = dup2(0xffffffffffffffff, r0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000240)={0x8, r1, 0x8, {0x7, 0x7}, 0x6}, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000280)="5e1e84e5f923e588e0a9f9bf4e8253d376d29383f1cfb46028eb90b5809f1d298f8e64a7166bd99a86415b4caa996be973a264d1190893bcd116b106e391919712b6af57d549198aa77c8713f4f61ed94d371fb759cd4877b7bba3ed", 0x5c) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000340)=0x1, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$nl_generic(r1, 0x0, 0x24044881) r2 = socket(0xf, 0x2, 0x7f) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000e80)={0x0, &(0x7f0000000980)=[@nested_load_code={0x12e, 0x66, {0x2, "3400420f01c266ba420066b8070066ef4d0fc79f56d9000090c74424001a010000c744240237210000ff2c24b8010000000f01d9f047800e02b9800000c00f3235004000000f3066b8b8000f00d8"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c00, 0x5, 0x800, 0x7}}, @nested_vmresume={0x130, 0x18}, @set_irq_handler={0xc8, 0x20, {0x13, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2b, 0x3, 0x8000000000000000, 0x1}}, @code={0xa, 0x49, {"400f06670f142a0f30440fc72c1500000000b9260a00000f32640f30670f10b2020000000f73f0e00f20c035100000000f22c0c481455907"}}, @nested_vmresume={0x130, 0x18}, @set_irq_handler={0xc8, 0x20, {0x46, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x0, 0xc2}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x0, 0xfd}}, @set_irq_handler={0xc8, 0x20, {0x84, 0x2}}, @code={0xa, 0x72, {"66b815000f00d0c744240081000000c74424020d000000ff1c240f01cbb805000000b9008000000f01d948b89eb50000000000000f23d00f21f8350000000b0f23f80f01c566baf80cb890ebf08def66bafc0c66ed0f060f01c9c0890040000007"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6404, 0x41, 0x1, 0x4000}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_load_syzos={0x136, 0x48, {0x2, 0xfa0d, [@out_dx={0x6a, 0x28, {0xa5a9, 0x1, 0x1}}]}}, @out_dx={0x6a, 0x28, {0x47e9, 0x2, 0x7}}, @in_dx={0x69, 0x20, {0x4fea, 0x1}}, @rdmsr={0x66, 0x18, {0x180}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x99, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x80000001}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x2, 0x64, 0x2}}, @uexit={0x0, 0x18, 0x9}], 0x4d9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 1.766320735s ago: executing program 2 (id=1128): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.76572135s ago: executing program 3 (id=1129): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000000)={@msf={0x7, 0x4, 0xa}, 0x0, 0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000080)={0x3, 0x8001, 0x5, 0x7ff, 0x101, 0x5, 0x9, 0x4}, 0x0, &(0x7f0000000180), 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.764919875s ago: executing program 2 (id=1130): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = io_uring_setup(0x1e5c, &(0x7f0000000180)={0x0, 0x9a5e, 0x2000, 0xc0, 0x0, 0x0, r0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f00000000c0)=""/160, &(0x7f0000000240)=0xa0) sendto$inet6(r2, &(0x7f0000000000)="f611305c", 0x4, 0x20048081, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.764317567s ago: executing program 3 (id=1131): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x408b2, 0x400, 0xfffffffe, 0x304}, 0x0, &(0x7f0000001880), &(0x7f0000000000)) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 814.812718ms ago: executing program 3 (id=1134): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0xfb}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb1", 0x161}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cec", 0xb0}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 812.11005ms ago: executing program 2 (id=1135): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0xb14, @mcast2}}, {{0xa, 0x4e20, 0x8, @private0}}}, 0x108) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r3, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000180)) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 291.746593ms ago: executing program 4 (id=1140): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8011005, 0x98}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="221094b1b2c0fb38f944621515383c32", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 238.719654ms ago: executing program 4 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0xfff}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0xcc, 0x24, 0xf62}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x64}}, 0x0) 163.431302ms ago: executing program 4 (id=1142): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x280) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x801, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x13, 0xc, 0x6, 0x80, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, 0x0}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}, {{&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x3b}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000300)="a48843e7d079693b894bce027d374cf482f12033398added02a58cd55cacccc8b0cf53094e16dff05245e7d8b9bd31c8a6b838241a40ff58489733e26474565bc3f26ab898c3f78766a6ba083f15f5f0aa7ab96cd4658cbd25dbe5f6332fbb545562d621cd", 0x65}, {&(0x7f0000000780)="e74ee666470c479d16d67170f408cbe5da4564cac55ae20941aa47743e971289252d9ecb75bf2c0126e6f5fa12dde39c4ca3ee77a31202964586a6b5f7aec2210639196321990c75c23e0c71ac5eddb3612761c02797d9783a0c472100b8521c529f24786add21e847892111460c53bcdff2026e3bf28d1c33d20c32e4194f6ea0f93d2463caa86bc89294bf49f48fb13cffcd4957399fc020406b61b1acf29b35c4fdbb1406e6b49d64b10b23721a3cf808498d08bcd20656e8d094b9acf1e3e331e4426154dec2d7b2ccae03083305d0c01fe143843e4dee51cbfb0139d66d111d", 0xe2}, {&(0x7f0000000880)="adbec1cb566704e7dc6c1c2a5c81fffbf6520c3dd79ad4f1248aa787733678fc7c3e5a2d99708460e1ed3ebfa4e74f5d4ff0ac1c8c09f6a9004ba7cea1bc979ef4205954f98aa94540e6b2228a9962bc36f3afc4e650f550be5b481b555b0464bdf3e2e946144ddd5158f11362037313e2691cb1cc7b7932350f9c5af754035824546dab8a277c2b647728e23352a05dfe16a8365d51b8", 0x97}, {&(0x7f0000000940)="91a7a5dc65e151f05d5a5dc8359311bf2d2ddfdbe1c7e85aa671bd8303a582f58afdf295dd88f02dad09a7c66b2deb56b8b28d027189c4fc1e0f0b02638334374dc343155a1ac166207fae235a63aab29373b35082f73954061bb9529d64801262490f3e387e5017f568f95fff3747ead5fe5e0ad45fce118d4d14489225c945ee2a80a2bf9a40d24084a77ca10d8e17976454b02437a859943f0184210bf54fe34bbeb2236d3dc74d59dc92d978b2269d2a7e53255bdd7b8123014c8e341f124807c067e24a4f343f3ffac94b805b807ff2223d6f81fd1ae9e1bfc11a5e3b0000", 0xe1}, {&(0x7f00000022c0)="f3fe66133eed9c5580fec7608aff3d8f2b57639529214335961d8077e4e736e40113c0e35532c5674643fd7bd35d1de57e2fc001973418c8126447fcc2f85aa15ca5045d4742d595af755c73fe7138b7cf1aedd3bfe9cb49ba21c8f5ffa5f7ce2bee0f483cbf44fe4c30652e2c9fffe057025f4faa73a3204df87a94026ad3d3de15012ee9d48aca187566a44a35afc7fa1a61aa988d10fdb18767bb094d40bdcef3c38050b2f5bf3256aae7038b1da0f62fa5c7ce45a200a488c0254bdc06e82f50b25d0d166bb21e161bcecab71b39b3c399ffd95af2a9dbdc8dcfcabe6475c5524449e58503f45a79490b727a3fe1b544c8c3388df3e42749279a70079c0cfc19e670cda5e88b9e56600e7e958390a29d44a6f9f11027efe3bbfd533ac423df21a821f1723d99909a813d6ac6d17cf84ff0123b4746286aba57dfe4f00fe960f761f510338f0f1c16bd6c502fa3e4c9d8d068d4702408e750d35b8aa7a79508876171ca509170251f0319e65d005597608120076aed24d92ef74e89d211bdf4fbbbe0064b244840b2e0f9b4987f57d6840927b0de5f87bcae53ef9578e3b96ec1858e96ee45c38ab4f8f17f056cfde8fddf152455c101c296dade1f514f60b6514a672eefc55023feec6ad8de50ba39b147ebb214312504bc7a9ce12d002a78eb41ea17cec2ec09da13d5b9a0bcc37f99b1135a73d2173cec9f125061a5c08475df089578129a61c857b6b2076cf1bc20508fc962e4ea0fbf61555e61e14142c60a826e474aecb9c85b6e24f1644276047c859d72953ee51fcfa14fb20b91e3db9940467b8740f2b53ab26064e33227d0795f10fa154ed03774f89be64797e32fec0e5571c5a507afb15d5ac736d3ed6b1d8b920d85278ea597e7011c4102685843d752ccd13468d7a9cbaba6b790edb5fc52141e1337ac87aea2f10e39dbfcdae1516985740ffc19215160cd2fb3d45c944578613700e453a9f79777d497ebf7451cd469530e3128c5067e1f31a66215a0f4dad20f13489e92efd4abb22ecf3ae030c03cde4a9b6b60c5d291f4fb44d996da7727cc747371961d22fa5e8ab6431a01c65032046ee6d4a39e6e029bf0293cad4d3779b62321eea292b9f09b416e7d5ea5351403012b8e2c0c799b9405dbc6e4dc61f126c94798262c88662994bb4e610aa066efb82f2a421c8f94c1d5ab9ed2cd3a60af8a1950aab9fd70df4b0d414704f985b4a43045f28d1e76e93428d6e6ff6698b588c2ad04971fea15f4968d0ffdcfa616c20fe301aed2993a51596a7f1f99f53ceebfb68ebcbb9018874eaa0d86a32e304e6af4fed295f202b4cd43b6c18e8e5c5fcf74abf80763373a36ce5e9509d25d20e86c905497cc6cf76d184c86c28e2d3c29764ed98fdc26a21ef5a640ff1a4fc529984687530388b2d961900f1fc39bf8ee5af53db54b63bcca672dc9bdea56286c6215238ff7478796583e578851f59b49c5f3f4edceb8ed3a916b9c13889db40f8bc681e373294d885a3072d75a18bf7bc870590da3138046c6ddb29e4dfa00dc1d52c7e94ce5c246cfa9d5ddb8a3dc57417ba3c14f1836b4b4344ae0d5c178e1cf03b226ee2d009c9d0ba9e8e394740686a3546e60b8b03faa452d4a52527ee430d1f6fc62611a701b2a81930e8c3592b133b4b9637d15eb99b1fba7d9e7f1297117f29fedb7e901adba089cf2fe68c3628fe5192dd532a0db99288733950b102dcf722edb51a358c1616b1b306003b7cf6eac969a34c43b446b1958f6f604e6f522f5911fc9db9e710ac55436c7d774cc8a55c02f0063942bcb16832ec0b41a3fbbc36c681fc0500fe08e01bdcfaad264f98df826e33fccb22ca8ab96831d60504313269331ce8e2f6c3dab26d13b47fe6072331243632db81a6c5022f58420419a024e08e7ed16213d057e13c06b96fa3f4c25730228dc4895f908e2278ab1fadfe9a55d3f427262016bc396f8e2668362bca3c12f9c7efa4340bdece5c00333931cf0036594762386a61e701c9a160b5d5a5c25f71d68d226cbe883c6bc5fd4cdc2487a3929b4bd66ec5b56630042d42b14637e39c52a48b1b48d50972fadb6f0ae5c0262fd0886dbffc03dbc58b815c4ee5d44cfe73167bf301231f370e6b87e4046d0eb8d2fba64040e94e5b6bb74b1dd85aaa71886acf8aef3858531cb739e2047c2e3cda74aec59a5e08e8f28c538c326a4a3568eafa5e9615eddb71762b99159641e50571939ef37d8d3ac93ae29d3ef4d354fc4356f6b57fbecfbd38e85b475bcc41cc5bec83a2fec1ae3df167e504db2c5b15544eafbf0d53c2dcdac1dce446dfb98811b9f1d4afd7d714fa4efccb85e4a7ad3ddfe15f4604b086e2d054530cc0fb8f6ae6c1a9ad6ab6188738ca0bf0383ac5a53d625f31871f8b769d246a642e83dec11a703848b601efddb788f1260b0eedde80747c11ccf44d046875102907ed56336f19a9822c49db5500a5f0e14b2a2a84db3265213bba1898a0bc051bf5f40035ce9523f9f678522196c37a4c3e6d726e0b50bddf5860e27d26650cb3d93a8c541b494a0f2ed48945b58b74d1df484a94072748d3aeb9fbcf838679e7848fc17ef1ac01ac2619487850f4f2b8e295995c23391e52eddb9a1b6a3bbf3b928d4c1cefac4a21ed260c75ee346e37520594890d54b69efa035229ad9ebb96d7216c035d3ebb8c0800f91c73a15f527acc84aaec44ab4cd1addc193b71660e92dd9a93f1baa3bc59b9307cf9f395774303c71111abd3c8f5acca22376daa9a7f09acd98595538b38308f3f7b5f8baa86bc585820bb0e5ac161119dcc51eec52a32350df54cbddbaff35c832022a13322dfcd0a676ae867de2c8d0486dfa6274a929c62ef3d1976eadd1ace6e467e648dcc8122928d1d6065bc759f0dcb5b2deec9a958dcc106140f6c8e353e7c9ce0503bef077f541e537219afe8409b4bab01bfd0a844033b14992a4b481e696ab6d5f7a64d7202df20e33484d05c65520171b5814f9c64126cae4992e529329659ad2af81b97cee4927509ed3667e2b09c742c8a334ea7a2cf77fc9fb5a5d00905dc300c5661f344a967897714a58937a137704e2849dfc23877aae8beb66a7639639f10e19ab73a527c06f218d8314f61c91f5fb394b4aaa57723ae22074c38c6f5945deb8934a2a75e051b510c6fa65b641ece125a055ad631d65b609a97d7c37cc76014ff4482b29c26e62ce7833f622ea24aa3dc0118532de6b3b5de92dfee621037d9c54e6ea0867653a7e2d8ba9ce86c9daba2dac5d362559a2d27fee1563ccc9839cd48e2d3085c70e6aa5e95a4ddb66f4e2128d64aad5d7eb09e418c96d52c34bbeab92466deb1b2ebf4238550bad62d64e295fcd59935561ba3d6b1907ee4239c904a437acd90c6c94a35f67f94398f0354e1de03770e4fa2b1dcc48fd4beb0816a977b517963cc133c2fb78d95adbefe02639f7ac2aff1c819a8322a36d0dc61516822a01411c642fa659618c6afabf08dd4d91788888ce04d367891775d986d085b43a4a8d95d4bb0c2d31fe851a7bb1a44b0aab847218ef26bb21127f8c9aa5705423c840def96d1f0967a91076b61df92f0ec7bcca3d0107d0a7265f5b35c5fbfda0dffe808eb13892d4ef81ef9cd6f18c9a6e105a5cf077e83415930b4ce56a135873473e3667f06b40b8871da8d768b2482d664dfa1194b81c8749ab0c6b91990a4672a6205903478d729618f23e8f4201f43f97021327288032d3c08cfe1f00652820ed453e6ff04905a284d006da66e52e75bc60535e71646bb7340fe577335402d26e6904e0d87c64fb5670494a5bc147bc4bbda8ca6d69d853bfb20f0d19482af47705e3d7bb9b3dfc81068d573c4d0e9b6f6ff7590cf4343becb43cf72675e2175bee4c30dc2eccdf190e714bb1acb91488f032bc9c8bf4ff4a809ae6eee18242f6bd7083a0cf9916611037a193db9e76ccc95f15839fa09b1e8f61909f57cf37dd57c016feec391c5a94800fa555131ae1a10275c5022d3460a72f201c017bbfc66b23eadd9e75017531ec3b187675d9fd47dfe56da20d2f896c9d1f93db0b9bc91b72458adb07acf4e9cd7c16cbe8b1ae030a86022dae7613b54625794a685a7a162f9fd1f606fcae7bb9ab7d368a82c3bfc42c855316cf2520a49408976af58426053db9bf3fd1ac162273dbdd29dabd774d1daa45cf2846141bdb91c8ac63eb0bffe01f79173a2a0ddc6fdb72db805631424ef0c38a80354b0b318fe9261b07041257c00537cc2c21025ad75ee5c611870c1979da7ab8e830b7e900c843f6d5bcb22e3475e5d0ee2ba6d4dd9b0c825f7757f4a5433da6dd7627bacc951dbadafb70b977100a9b5b266caf2217df5705e22a279f156212a32b193549f0e3a9ee9cad30a6c38748af124c7b2bc785eed8b591df0cef1d019b1ba1405fe0b654d26b67e94c17b283e6a666cd2e5a97d5d8cb2342edb13a62e1b9e4cb1df6ca6940603b9d5bf1af9e12eaa7d3c0e85bc3b66a8d17d3e68a124893e6cc04f07ec9b82bb0306d3edb3378fc8857dc35feb8ef96bbbe594109ebde17a7bb7d2250cffb177b94aa1ddce81a85a35edc85074465fe322761524dd8c7292ddcd40493c9c594a13397f6650e503b267216bd5ee37b5b6384bc2bbd6bdc119935aeda30542f1668e596ddd5d028317a13ab48858eb37d8620980cc9a483fe39c01c088f8487424f1390e33fbfac6ace6308db308d29d2557dadab4bf64f981d9325042e3b46511206566cf57c201477cae103046b9921584abb9bc3d2c84af83b5dad097cab493831afa5067f11d3bc351cfd56821e3281ea89ecb2d01248360524fd91752c99e1212f26ce95f762c98a213110ab0b42d5009f89250f46410bc3d53ca7212eda556ab648e8004334cffe427ac97b1197101dd27a6d64a0151c1c32e7d1c7d462db459960edfdd5ac94bd8666d4fed3059e7dc25993f09d61aa1da845e0815a959d041e674efb5380d4aa135f8657888ac12687adc58a2ff5d02e0a81b3e20a80981d43fcfd6981fe857513d8b4eecc7d33122b65051be4440d0cdb58ac7099b35ea699af47f3b15f6d1432f788e6b6ca903fd61a63750ab89b5d4c2ff637923b291582e478771851f2f5f10aca40c2536b8be0d024ddadd8fe789324fad9274c508dc0a16cb1fd6f1ed6d66a3069f3033edd75ec4be3f6398e89ca39b7307e8eebf8fb94880df77ff7581c0455975856c18137923971c11197137a04daff48b8727cc426d1d52192bd368b5b2a80d6c0b9625ad449841be5742edff9ce9ce778805c3485fd540b06e24a77cabda993f8a5c9f7d4c3ceb7b977b2b351d0145e0ea2f96e72f7a5da44346b05040997ece8ad71eba97a968f394dd99a91293e8238ba2e6462e13e86b84cad640939a378c53ef25e4ce7db8129b9029763a8b0054812dd2f074e20a188a2ea92e39c116fccdbbff8e7880e1cdf3c4218c6c14e7a57fd28363b29b3b1312bb21bab127193f5c0e54140505489b287a1d0215ffa562a380169b6a04d0f28eba9c119b3ad57ae6ce8998945efaf362f3ade66eeb7ab4316cec0b5abf84dc49c9664fac7e102d30b99a4468bd7a515121d5d4b3f9be96b5d17ed2c0e5a8639dc79177f707420a1022e1887f8991f1acd1ae495d7d5c90ff1680760535b57d81a902b367becce68630a49e756109c420b07480940e9427419d5f0c569bb31814499e3c4fddb56340f428394813de7e5080aa7ad253871425363b9d3a9becb5f389053640c3ad592568da9d2c781", 0x1000}], 0x5, &(0x7f0000003340), 0x48}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) getpeername$unix(r8, 0x0, &(0x7f0000000400)) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000680)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b103cb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048f62e3fb58cf831f60e02fc5bfab91d26df6ed9f96bca801c26aa12c3dd1e956eb9d547e0b4484a6a6f93759a2f43a825a3f5da45f2b63d164d2c201a844f251bca4d5a9205490e9fd9440dad3f13efcddcbd9968f607e4647e763385380c43dce8c77732d42ec5764ab7e061d1014f9f99656cc3f1c03383c3c0690055ac7e647f09b715ec19e1df53008da62859aa2ff15cca", 0xe2}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x2000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x4090) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x4b564dff, 0x0, 0x5e}]}) 110.280681ms ago: executing program 4 (id=1143): socket$inet(0x2, 0x3, 0x40) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f00005a5000/0x12000)=nil, 0x12000, 0x8, 0x13, r1, 0xb44f2000) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000280)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000900020073797a3100000000050004000000000010000300686173683a69702c6d6163eb0b000780080008400000000805000500020000000500010006000000"], 0x54}}, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x4}], 0x1, 0xcb, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) 3.433456ms ago: executing program 4 (id=1144): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0xf4da2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x39c}}, 0x40400d0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000040)=0x1fe, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x190, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x60085) 0s ago: executing program 4 (id=1145): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x0, 0xfffff000}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x5, 0xa, 0x0, 0x6, 0x20000, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) kernel console output (not intermixed with test programs): 0x215/0x3d0 [ 80.430268][ T6411] ? __fget_files+0x21f/0x3d0 [ 80.430291][ T6411] security_file_ioctl+0xd3/0x230 [ 80.430319][ T6411] __x64_sys_ioctl+0xb7/0x210 [ 80.430349][ T6411] do_syscall_64+0x10b/0xf80 [ 80.431246][ T6411] ? clear_bhb_loop+0x40/0x90 [ 80.431272][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.431292][ T6411] RIP: 0033:0x7f539619c819 [ 80.431309][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.431327][ T6411] RSP: 002b:00007f5396ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.431462][ T6411] RAX: ffffffffffffffda RBX: 00007f5396415fa0 RCX: 00007f539619c819 [ 80.431474][ T6411] RDX: 0000200000000000 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 80.431485][ T6411] RBP: 00007f5396ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 80.431496][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.431507][ T6411] R13: 00007f5396416038 R14: 00007f5396415fa0 R15: 00007ffc2a587a48 [ 80.431533][ T6411] [ 80.431711][ T6411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.516380][ T6411] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.688286][ T61] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.855698][ T61] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 80.861230][ T61] usb 7-1: config 1 has no interface number 0 [ 80.861622][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 80.866314][ T61] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 80.874909][ T61] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 80.889698][ T61] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 80.895844][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.899865][ T61] usb 7-1: Product: syz [ 80.901530][ T61] usb 7-1: Manufacturer: syz [ 80.903125][ T61] usb 7-1: SerialNumber: syz [ 80.915771][ T6412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.925050][ T61] usb 7-1: Error in usbnet_get_endpoints (-22) [ 81.441554][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 81.515087][ T6436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6436 comm=syz.2.121 [ 81.807546][ T6447] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.133'. [ 81.813038][ T6447] process 'syz.0.133' launched './file0' with NULL argv: empty string added [ 81.957394][ T110] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.972232][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 81.976004][ T6458] netlink: 'syz.0.136': attribute type 29 has an invalid length. [ 81.978583][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 82.119035][ T110] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.125655][ T110] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.129180][ T110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 82.132073][ T110] usb 6-1: Product: syz [ 82.133794][ T110] usb 6-1: Manufacturer: syz [ 82.135727][ T110] usb 6-1: SerialNumber: syz [ 82.354095][ T110] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 82.621731][ T6030] usb 6-1: USB disconnect, device number 6 [ 82.631927][ T6030] usblp0: removed [ 82.895022][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 82.997292][ T6478] block nbd0: not configured, cannot reconfigure [ 83.081540][ T6480] warning: `syz.0.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.209877][ T6490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.215411][ T6489] batadv_slave_0: entered promiscuous mode [ 83.304799][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 83.323937][ T6487] batadv_slave_0: left promiscuous mode [ 83.371913][ T6496] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.446721][ T24] usb 7-1: USB disconnect, device number 3 [ 83.775459][ T6514] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 83.931285][ T6519] netlink: 'syz.2.154': attribute type 5 has an invalid length. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xda000) [ 84.522140][ T1123] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 84.525827][ T1123] ata1: failed to read log page 10h (errno=-5) [ 84.530524][ T1123] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 84.533924][ T1123] ata1.00: irq_stat 0x40000000 [ 84.536158][ T1123] ata1.00: failed command: WRITE FPDMA QUEUED [ 84.541143][ T1123] ata1.00: cmd 61/d0:70:46:1a:08/06:00:00:00:00/40 tag 14 ncq dma 892928 out [ 84.541143][ T1123] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 84.550332][ T1123] ata1.00: status: { DRDY } [ 84.553543][ T1123] ata1.00: failed command: WRITE FPDMA QUEUED [ 84.556165][ T1123] ata1.00: cmd 61/58:78:16:21:08/03:00:00:00:00/40 tag 15 ncq dma 438272 out [ 84.556165][ T1123] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 84.562728][ T1123] ata1.00: status: { DRDY } [ 84.564281][ T1123] ata1.00: error: { ABRT } [ 84.569054][ T1123] ata1.00: configured for UDMA/100 [ 84.572472][ T1123] ata1: EH complete [ 84.768037][ T6012] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.795534][ T6548] Cannot find add_set index 0 as target [ 84.927466][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 84.931925][ T6012] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 84.935674][ T6012] usb 6-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.940734][ T6012] usb 6-1: config 1 interface 0 has no altsetting 0 [ 84.945356][ T6012] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.949916][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.952679][ T6012] usb 6-1: Product: ံ [ 84.954425][ T6012] usb 6-1: Manufacturer: ᐇ [ 84.956101][ T6012] usb 6-1: SerialNumber: syz [ 84.973516][ T6540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.978062][ T6540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.394810][ T6012] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.412183][ T6012] usb 6-1: USB disconnect, device number 7 [ 85.498822][ T6560] syz.0.167 uses obsolete (PF_INET,SOCK_PACKET) [ 85.842128][ T6570] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 85.845981][ T6570] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 85.846014][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 85.846032][ T40] audit: type=1400 audit(85.761:381): avc: denied { firmware_load } for pid=6567 comm="syz.3.170" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.935488][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 85.941207][ T6574] netlink: 'syz.1.171': attribute type 7 has an invalid length. [ 85.944961][ T6574] netlink: 'syz.1.171': attribute type 8 has an invalid length. [ 85.948115][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 85.960374][ T6574] syz_tun: entered promiscuous mode [ 85.964387][ T6574] syz_tun: left promiscuous mode [ 86.215484][ T40] audit: type=1400 audit(86.131:382): avc: denied { read } for pid=6582 comm="syz.1.173" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.223505][ T40] audit: type=1400 audit(86.131:383): avc: denied { open } for pid=6582 comm="syz.1.173" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.513345][ T6586] IPv6: addrconf: prefix option has invalid lifetime [ 86.526835][ T40] audit: type=1400 audit(86.441:384): avc: denied { write } for pid=6585 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.533805][ T40] audit: type=1400 audit(86.441:385): avc: denied { nlmsg_write } for pid=6585 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.683735][ T6602] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 86.706195][ T40] audit: type=1400 audit(86.621:386): avc: denied { write } for pid=6603 comm="syz.3.179" lport=44653 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 86.950754][ T40] audit: type=1400 audit(86.871:387): avc: denied { getopt } for pid=6610 comm="syz.3.181" lport=34035 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.141324][ T40] audit: type=1400 audit(87.061:388): avc: denied { connect } for pid=6619 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.321976][ T6638] sctp: [Deprecated]: syz.3.190 (pid 6638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.321976][ T6638] Use struct sctp_sack_info instead [ 87.395330][ T6030] IPVS: starting estimator thread 0... [ 87.411196][ T6638] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 87.497460][ T6641] IPVS: using max 44 ests per chain, 105600 per kthread [ 88.050095][ T1033] cfg80211: failed to load regulatory.db [ 88.601890][ T6617] Set syz1 is full, maxelem 65536 reached [ 88.649634][ T40] audit: type=1400 audit(88.571:389): avc: denied { read } for pid=6651 comm="syz.1.194" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.660209][ T40] audit: type=1400 audit(88.571:390): avc: denied { ioctl } for pid=6651 comm="syz.1.194" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.138441][ T6623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.199793][ T6675] syzkaller0: entered promiscuous mode [ 90.202547][ T6675] syzkaller0: entered allmulticast mode [ 90.211731][ T6677] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.294011][ T6689] IPVS: nq: FWM 3 0x00000003 - no destination available [ 90.296554][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 90.363754][ T6695] nbd: socks must be embedded in a SOCK_ITEM attr [ 90.384807][ T6695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6695 comm=syz.3.209 [ 90.495499][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.530549][ T6708] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.539580][ T6708] xt_bpf: check failed: parse error [ 90.601120][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 90.618901][ T6716] xt_policy: output policy not valid in PREROUTING and INPUT [ 90.701495][ T5958] block nbd0: Receive control failed (result -104) [ 90.730759][ T6724] sctp: [Deprecated]: syz.0.219 (pid 6724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.730759][ T6724] Use struct sctp_sack_info instead [ 90.740565][ T6724] Bluetooth: MGMT ver 1.23 [ 90.881373][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 90.881386][ T40] audit: type=1400 audit(90.801:398): avc: denied { getopt } for pid=6728 comm="syz.3.221" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.925165][ T6734] block nbd2: not configured, cannot reconfigure [ 90.930280][ T40] audit: type=1400 audit(90.851:399): avc: denied { write } for pid=6733 comm="syz.2.223" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.931064][ T6734] random: crng reseeded on system resumption [ 90.939360][ T40] audit: type=1400 audit(90.851:400): avc: denied { open } for pid=6733 comm="syz.2.223" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.966873][ T40] audit: type=1400 audit(90.881:401): avc: denied { ioctl } for pid=6733 comm="syz.2.223" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.972777][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 91.044546][ T6744] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 91.097712][ T6747] syzkaller0: entered promiscuous mode [ 91.099709][ T6747] syzkaller0: entered allmulticast mode [ 91.103205][ T40] audit: type=1400 audit(91.021:402): avc: denied { read write } for pid=6748 comm="syz.1.229" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.113086][ T40] audit: type=1400 audit(91.021:403): avc: denied { open } for pid=6748 comm="syz.1.229" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.121721][ T40] audit: type=1400 audit(91.021:404): avc: denied { ioctl } for pid=6748 comm="syz.1.229" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.162434][ T6747] tc action pedit offset must be on 32 bit boundaries [ 91.277431][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 91.291794][ T6756] support for cryptoloop has been removed. Use dm-crypt instead. [ 91.301838][ T6756] syz.0.231 uses old SIOCAX25GETINFO [ 91.305606][ T40] audit: type=1400 audit(91.221:405): avc: denied { ioctl } for pid=6755 comm="syz.0.231" path="socket:[12113]" dev="sockfs" ino=12113 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.361119][ T6758] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 91.368772][ T6758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.376185][ T6758] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.413536][ T40] audit: type=1400 audit(91.331:406): avc: denied { write } for pid=6764 comm="syz.0.235" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.427101][ T40] audit: type=1400 audit(91.331:407): avc: denied { open } for pid=6764 comm="syz.0.235" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.443501][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.454031][ T61] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 91.459454][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 91.466991][ T61] usb 7-1: Product: syz [ 91.471275][ T61] usb 7-1: Manufacturer: syz [ 91.477790][ T61] usb 7-1: SerialNumber: syz [ 91.709295][ T61] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 91.833978][ T6796] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 91.839427][ T6796] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 91.843965][ T6796] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 91.847906][ T6796] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 91.959411][ T6009] usb 7-1: USB disconnect, device number 4 [ 91.975327][ T6009] usblp0: removed [ 92.022433][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 92.038352][ T6801] team_slave_0: entered promiscuous mode [ 92.041164][ T6801] team_slave_1: entered promiscuous mode [ 92.044858][ T6801] macsec1: entered promiscuous mode [ 92.047910][ T6801] team0: entered promiscuous mode [ 92.050513][ T6801] macsec1: entered allmulticast mode [ 92.052376][ T6801] team0: entered allmulticast mode [ 92.054281][ T6801] team_slave_0: entered allmulticast mode [ 92.056216][ T6801] team_slave_1: entered allmulticast mode [ 92.059877][ T6801] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 92.063319][ T6801] team0: Device macsec1 is already an upper device of the team interface [ 92.067608][ T6801] team0: left allmulticast mode [ 92.069192][ T6801] team_slave_0: left allmulticast mode [ 92.070966][ T6801] team_slave_1: left allmulticast mode [ 92.072714][ T6801] team0: left promiscuous mode [ 92.074611][ T6801] team_slave_0: left promiscuous mode [ 92.076324][ T6801] team_slave_1: left promiscuous mode [ 92.086332][ T6802] netlink: 'syz.1.248': attribute type 12 has an invalid length. [ 92.089861][ T6802] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 92.093294][ T6802] netlink: 148 bytes leftover after parsing attributes in process `syz.1.248'. [ 92.097136][ T6802] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 92.100845][ T6802] netlink: 31 bytes leftover after parsing attributes in process `syz.1.248'. [ 92.277302][ T6808] netlink: 'syz.1.251': attribute type 3 has an invalid length. [ 92.281691][ T6808] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 92.285058][ T6808] netlink: 228 bytes leftover after parsing attributes in process `syz.1.251'. [ 92.396708][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 92.401711][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 92.551000][ T6819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.256'. [ 92.692317][ T6831] all: renamed from bridge_slave_0 (while UP) [ 92.799432][ T6841] netlink: 120 bytes leftover after parsing attributes in process `syz.1.263'. [ 92.802951][ T6841] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 92.806180][ T6841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.263'. [ 93.067327][ T6012] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.257607][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 93.263415][ T6012] usb 6-1: config 1 interface 0 has no altsetting 0 [ 93.268005][ T6012] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.40 [ 93.271399][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.274270][ T6012] usb 6-1: Product: syz [ 93.275976][ T6012] usb 6-1: Manufacturer: А [ 93.278051][ T6012] usb 6-1: SerialNumber: syz [ 93.918198][ T6854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6854 comm=syz.3.267 [ 93.964594][ T6857] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 94.380501][ T6009] Process accounting resumed [ 94.413276][ T6878] Process accounting resumed [ 95.783928][ T6841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.840184][ T6012] usbhid 6-1:1.0: can't add hid device: -71 [ 95.842729][ T6012] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 95.852584][ T6012] usb 6-1: USB disconnect, device number 8 [ 95.901088][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 95.901099][ T40] audit: type=1400 audit(95.821:428): avc: denied { mounton } for pid=6907 comm="syz.2.287" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.932138][ T6908] syz.2.287: attempt to access beyond end of device [ 95.932138][ T6908] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 95.938920][ T6908] gfs2: error -5 reading superblock [ 96.033719][ T40] audit: type=1400 audit(95.951:429): avc: denied { bind } for pid=6913 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.042129][ T40] audit: type=1400 audit(95.961:430): avc: denied { write } for pid=6913 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.049709][ T40] audit: type=1400 audit(95.961:431): avc: denied { read } for pid=6913 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.060878][ T40] audit: type=1400 audit(95.961:432): avc: denied { setopt } for pid=6913 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.084578][ T40] audit: type=1400 audit(96.001:433): avc: denied { lock } for pid=6916 comm="syz.2.291" path="socket:[15430]" dev="sockfs" ino=15430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.181041][ T40] audit: type=1400 audit(96.101:434): avc: denied { append } for pid=6924 comm="syz.2.295" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.193823][ T40] audit: type=1400 audit(96.111:435): avc: denied { setopt } for pid=6924 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.220927][ T40] audit: type=1400 audit(96.141:436): avc: denied { create } for pid=6926 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.228533][ T40] audit: type=1400 audit(96.151:437): avc: denied { write } for pid=6926 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.239602][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=152 sclass=netlink_route_socket pid=6928 comm=syz.3.296 [ 96.305674][ T6925] mtd partition "" doesn't have enough space: 0x20003 < 0x22003, disabled [ 96.334617][ T6925] ftl_cs: FTL header not found. [ 96.510208][ T6914] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 96.513712][ T6914] __nla_validate_parse: 3 callbacks suppressed [ 96.513729][ T6914] netlink: 244 bytes leftover after parsing attributes in process `syz.1.289'. [ 96.553997][ T6914] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 96.669893][ T6947] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 96.678983][ T6947] bond0: (slave dummy0): Releasing backup interface [ 96.693869][ T6947] team0: Port device dummy0 added [ 96.700814][ T6947] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 96.708918][ T6947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.716844][ T6947] team0: Port device dummy0 removed [ 96.726372][ T6947] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.784648][ T6952] XFS (loop3): SB validate failed with error -5. [ 96.814767][ T6959] cgroup: Invalid name [ 96.838587][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 97.127518][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 97.170918][ T6983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.289264][ T61] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.297560][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 97.301554][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 97.305266][ T61] usb 8-1: Product: syz [ 97.307755][ T61] usb 8-1: Manufacturer: syz [ 97.309910][ T61] usb 8-1: SerialNumber: syz [ 97.529415][ T61] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.784645][ T61] usb 8-1: USB disconnect, device number 2 [ 97.791792][ T6993] fuse: Unknown parameter '000000000000000000030x000000000000000300000000000000000003' [ 97.794438][ T61] usblp0: removed [ 97.972985][ T7000] ======================================================= [ 97.972985][ T7000] WARNING: The mand mount option has been deprecated and [ 97.972985][ T7000] and is ignored by this kernel. Remove the mand [ 97.972985][ T7000] option from the mount to silence this warning. [ 97.972985][ T7000] ======================================================= [ 98.018310][ T110] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 98.053360][ T7002] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.056571][ T7002] team0: Device ipvlan2 is already an upper device of the team interface [ 98.167355][ T110] usb 7-1: Using ep0 maxpacket: 16 [ 98.171997][ T110] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 98.176076][ T110] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 172, changing to 11 [ 98.181099][ T110] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 10044, setting to 1024 [ 98.186355][ T110] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.191742][ T110] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 98.195307][ T110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.202092][ T110] usb 7-1: Product: syz [ 98.204600][ T110] usb 7-1: Manufacturer: syz [ 98.206664][ T110] usb 7-1: SerialNumber: syz [ 98.219662][ T110] usb 7-1: config 0 descriptor?? [ 98.224323][ T6990] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.424165][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 98.432131][ T7008] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.324'. [ 98.435305][ T7008] netlink: 284 bytes leftover after parsing attributes in process `syz.3.324'. [ 98.439112][ T6990] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.463161][ T110] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 98.648256][ T6990] netlink: 52 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.694894][ T110] usb 7-1: USB disconnect, device number 5 [ 98.848456][ T7022] netlink: 9 bytes leftover after parsing attributes in process `syz.1.329'. [ 98.852845][ T7022] 0: renamed from hsr0 [ 98.856396][ T7022] 0: entered allmulticast mode [ 98.858300][ T7022] hsr_slave_0: entered allmulticast mode [ 98.860158][ T7022] hsr_slave_1: entered allmulticast mode [ 98.864165][ T7022] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 99.136478][ T7037] XFS (loop1): SB validate failed with error -5. [ 99.142605][ T7044] binder: 7038:7044 unknown command 0 [ 99.148888][ T7044] binder: 7038:7044 ioctl c0306201 200000000480 returned -22 [ 99.317865][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.325234][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.329216][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.337042][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.343016][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.462153][ T7071] Mount JFS Failure: -5 [ 99.464841][ T7071] jfs_mount failed w/return code = -5 [ 99.506891][ T7071] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.512066][ T7071] Cannot find add_set index 0 as target [ 99.548284][ T6009] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 99.589576][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 99.671334][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.673806][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.676789][ T7059] bridge_slave_0: entered allmulticast mode [ 99.681731][ T7059] bridge_slave_0: entered promiscuous mode [ 99.686593][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.689862][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.693246][ T7059] bridge_slave_1: entered allmulticast mode [ 99.696898][ T7059] bridge_slave_1: entered promiscuous mode [ 99.705963][ T5958] Bluetooth: Wrong link type (-71) [ 99.713040][ T6009] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 99.722247][ T6009] usb 8-1: can't read configurations, error -71 [ 99.738946][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.744522][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.765566][ T7059] team0: Port device team_slave_0 added [ 99.769261][ T7059] team0: Port device team_slave_1 added [ 99.786551][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.789665][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.800261][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.807073][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.810011][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.818111][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.844030][ T7059] hsr_slave_0: entered promiscuous mode [ 99.846450][ T7059] hsr_slave_1: entered promiscuous mode [ 99.852862][ T7059] debugfs: 'hsr0' already exists in 'hsr' [ 99.855356][ T7059] Cannot create hsr debugfs directory [ 100.050330][ T7059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.056610][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.060112][ T7059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.064387][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.067619][ T7059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.072522][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.076334][ T7059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.081423][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.129137][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.140859][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.146247][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.149529][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.157870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.160315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.299223][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.348429][ T7099] : renamed from vlan0 (while UP) [ 100.423987][ T7105] netlink: 'syz.3.350': attribute type 21 has an invalid length. [ 100.431234][ T7105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 100.499871][ T7059] veth0_vlan: entered promiscuous mode [ 100.511755][ T7059] veth1_vlan: entered promiscuous mode [ 100.542114][ T7059] veth0_macvtap: entered promiscuous mode [ 100.548928][ T7059] veth1_macvtap: entered promiscuous mode [ 100.551073][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.352'. [ 100.554990][ T7115] nbd: must specify at least one socket [ 100.558127][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.563825][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.574290][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.579571][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.585217][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.593051][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.669858][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.673578][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.702643][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.706168][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.852957][ T7125] sctp: [Deprecated]: syz.2.355 (pid 7125) Use of int in max_burst socket option. [ 100.852957][ T7125] Use struct sctp_assoc_value instead [ 100.947395][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 100.947408][ T40] audit: type=1400 audit(100.861:459): avc: denied { append } for pid=7121 comm="syz.4.334" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.949769][ T7123] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 101.173600][ T7144] netlink: 144 bytes leftover after parsing attributes in process `syz.4.361'. [ 101.180713][ T6008] Process accounting resumed [ 101.224009][ T40] audit: type=1400 audit(101.141:460): avc: denied { ioctl } for pid=7145 comm="syz.4.362" path="socket:[18681]" dev="sockfs" ino=18681 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.398975][ T7149] kvm: kvm [7147]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f) [ 101.399409][ T5958] Bluetooth: hci1: command tx timeout [ 101.561281][ T7155] __nla_validate_parse: 2 callbacks suppressed [ 101.561294][ T7155] netlink: 11 bytes leftover after parsing attributes in process `syz.2.366'. [ 101.687729][ T40] audit: type=1400 audit(101.611:461): avc: denied { bind } for pid=7158 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.694931][ T40] audit: type=1400 audit(101.611:462): avc: denied { listen } for pid=7158 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.705783][ T40] audit: type=1400 audit(101.621:463): avc: denied { write } for pid=7158 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.864261][ T40] audit: type=1400 audit(101.781:464): avc: denied { bind } for pid=7163 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.383861][ T40] audit: type=1400 audit(102.301:465): avc: denied { mount } for pid=7179 comm="syz.4.375" name="/" dev="hugetlbfs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.471790][ T7182] kvm: user requested TSC rate below hardware speed [ 102.478163][ T7182] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 102.487665][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 102.492447][ T7182] Invalid source name [ 102.493990][ T7182] UBIFS error (pid: 7182): cannot open "/dev/sg0", error -22 [ 102.496362][ T40] audit: type=1400 audit(102.411:466): avc: denied { bind } for pid=7181 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.651534][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.4.377'. [ 102.683799][ T7185] evm: overlay not supported [ 102.814106][ T40] audit: type=1400 audit(102.731:467): avc: denied { bind } for pid=7186 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.823013][ T40] audit: type=1400 audit(102.731:468): avc: denied { node_bind } for pid=7186 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.869964][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 103.237513][ T6114] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 103.389121][ T6114] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.397695][ T6114] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.402499][ T6114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.406588][ T6114] usb 7-1: Product: syz [ 103.408510][ T6114] usb 7-1: Manufacturer: syz [ 103.410825][ T6114] usb 7-1: SerialNumber: syz [ 103.478566][ T5958] Bluetooth: hci1: command tx timeout [ 103.636918][ T6114] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.814076][ T7221] netlink: 96 bytes leftover after parsing attributes in process `syz.3.387'. [ 103.893024][ T24] usb 7-1: USB disconnect, device number 6 [ 103.920054][ T24] usblp0: removed [ 104.114469][ T7230] block nbd4: not configured, cannot reconfigure [ 104.440989][ T7237] kvm: kvm [7236]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 104.540008][ T7248] netlink: 96 bytes leftover after parsing attributes in process `syz.2.397'. [ 104.937399][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.087432][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 105.091577][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.104624][ T24] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 105.109413][ T24] usb 7-1: config 8 has no interface number 0 [ 105.113860][ T24] usb 7-1: config 8 interface 188 has no altsetting 0 [ 105.120398][ T24] usb 7-1: string descriptor 0 read error: -22 [ 105.123418][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 105.127803][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.141738][ T24] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 105.144585][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 105.146816][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 105.160465][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.164971][ T24] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 105.168290][ T24] usb 7-1: media controller created [ 105.169183][ T7263] syzkaller1: entered promiscuous mode [ 105.170865][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.173368][ T7263] syzkaller1: entered allmulticast mode [ 105.178025][ T24] dw2102: i2c transfer failed. [ 105.181461][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.183816][ T24] dw2102: i2c transfer failed. [ 105.185939][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.188311][ T24] dw2102: i2c transfer failed. [ 105.189850][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.191967][ T24] dw2102: i2c transfer failed. [ 105.193751][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.196094][ T24] dw2102: i2c transfer failed. [ 105.207940][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 105.210034][ T24] dw2102: i2c transfer failed. [ 105.211785][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 105.224237][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.251015][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 105.259921][ T24] dw2102: command 0x0e transfer failed. [ 105.262440][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 105.264775][ T24] dw2102: command 0x0e transfer failed. [ 105.393213][ T5958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 105.560902][ T5839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.567854][ T5958] Bluetooth: hci1: command tx timeout [ 105.571511][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 105.573472][ T24] dw2102: command 0x0e transfer failed. [ 105.575449][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 105.577391][ T24] dw2102: command 0x0e transfer failed. [ 105.579242][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 105.581194][ T24] dw2102: command 0x51 transfer failed. [ 105.585828][ T7257] dvb-usb: bulk message failed: -22 (3/0) [ 105.590717][ T7257] dw2102: i2c transfer failed. [ 105.612640][ T24] DVB: Unable to find symbol ds3000_attach() [ 105.614823][ T24] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 105.667323][ T24] rc_core: IR keymap rc-su3000 not found [ 105.669244][ T24] Registered IR keymap rc-empty [ 105.675121][ T24] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 105.688557][ T24] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 105.704166][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 105.709123][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.711207][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 105.713405][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 105.719548][ T24] usb 7-1: USB disconnect, device number 7 [ 105.720574][ T5839] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.742977][ T5839] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 105.748563][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 105.752703][ T5839] usb 9-1: Product: syz [ 105.754682][ T5839] usb 9-1: Manufacturer: syz [ 105.756741][ T5839] usb 9-1: SerialNumber: syz [ 105.792238][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 105.926969][ T7282] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.980756][ T5839] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 106.099984][ T7286] FAULT_INJECTION: forcing a failure. [ 106.099984][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.105600][ T7286] CPU: 1 UID: 0 PID: 7286 Comm: syz.1.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.105631][ T7286] Tainted: [L]=SOFTLOCKUP [ 106.105636][ T7286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.105644][ T7286] Call Trace: [ 106.105777][ T7286] [ 106.105786][ T7286] dump_stack_lvl+0x100/0x190 [ 106.106456][ T7286] should_fail_ex.cold+0x5/0xa [ 106.106569][ T7286] _copy_from_user+0x2e/0xd0 [ 106.106812][ T7286] iommufd_fops_ioctl+0x300/0x520 [ 106.107115][ T7286] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 106.107143][ T7286] ? __fget_files+0x215/0x3d0 [ 106.107280][ T7286] ? hook_file_ioctl_common+0x149/0x410 [ 106.107367][ T7286] ? selinux_file_ioctl+0x13b/0x290 [ 106.107393][ T7286] ? selinux_file_ioctl+0xb6/0x290 [ 106.107419][ T7286] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 106.107445][ T7286] __x64_sys_ioctl+0x18e/0x210 [ 106.107474][ T7286] do_syscall_64+0x10b/0xf80 [ 106.107816][ T7286] ? clear_bhb_loop+0x40/0x90 [ 106.107840][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.107859][ T7286] RIP: 0033:0x7f4e88f9c819 [ 106.107877][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.107894][ T7286] RSP: 002b:00007f4e89d7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.107972][ T7286] RAX: ffffffffffffffda RBX: 00007f4e89215fa0 RCX: 00007f4e88f9c819 [ 106.107984][ T7286] RDX: 0000200000000000 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 106.107994][ T7286] RBP: 00007f4e89d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.108004][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.108014][ T7286] R13: 00007f4e89216038 R14: 00007f4e89215fa0 R15: 00007ffc19beab18 [ 106.108042][ T7286] [ 106.243301][ C1] usblp0: nonzero write bulk status received: -71 [ 106.243576][ T6012] usb 9-1: USB disconnect, device number 2 [ 106.257438][ T7289] syzkaller1: entered promiscuous mode [ 106.257706][ T6012] usblp0: removed [ 106.263343][ T7289] syzkaller1: entered allmulticast mode [ 106.358478][ T7295] trusted_key: encrypted_key: master key parameter is missing [ 106.381341][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 106.381359][ T40] audit: type=1400 audit(106.301:475): avc: denied { name_connect } for pid=7294 comm="syz.2.413" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 106.469176][ T7304] netlink: 144 bytes leftover after parsing attributes in process `syz.1.415'. [ 106.572286][ T7310] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.007103][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 107.164738][ T40] audit: type=1400 audit(107.081:476): avc: denied { ioctl } for pid=7354 comm="syz.2.436" path="socket:[20508]" dev="sockfs" ino=20508 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.394008][ T7360] syzkaller1: entered promiscuous mode [ 107.397042][ T7360] syzkaller1: entered allmulticast mode [ 107.630872][ T40] audit: type=1400 audit(107.551:477): avc: denied { read } for pid=7364 comm="syz.2.439" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.641310][ T5958] Bluetooth: hci1: command tx timeout [ 107.648299][ T7368] netlink: 'syz.1.440': attribute type 30 has an invalid length. [ 107.652283][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 107.667431][ T7368] netlink: 'syz.1.440': attribute type 30 has an invalid length. [ 107.670156][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 108.086770][ T5958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 108.187995][ T7377] tipc: Started in network mode [ 108.191570][ T7377] tipc: Node identity , cluster identity 4711 [ 108.393812][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 108.420428][ T7384] XFS (nbd3): no-recovery mounts must be read-only. [ 108.441083][ T7386] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 108.473439][ T7388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.500503][ T7390] block nbd2: not configured, cannot reconfigure [ 108.581337][ T5958] Bluetooth: Wrong link type (-71) [ 108.767703][ T7401] mtd partition "" doesn't have enough space: 0x20003 < 0x22003, disabled [ 108.774420][ T40] audit: type=1400 audit(108.691:478): avc: denied { audit_write } for pid=7402 comm="syz.3.454" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.790571][ T7401] ftl_cs: FTL header not found. [ 108.897798][ T40] audit: type=1400 audit(108.811:479): avc: denied { bind } for pid=7417 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.988531][ T5958] Bluetooth: Wrong link type (-71) [ 109.080411][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 109.118364][ T40] audit: type=1326 audit(109.041:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.4.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583c39c819 code=0x7fc00000 [ 109.169497][ T40] audit: type=1400 audit(109.091:481): avc: denied { setattr } for pid=7434 comm="syz.4.466" name="KEY" dev="sockfs" ino=22584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.178608][ T40] audit: type=1400 audit(109.101:482): avc: denied { ioctl } for pid=7434 comm="syz.4.466" path="socket:[22585]" dev="sockfs" ino=22585 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.189893][ T40] audit: type=1400 audit(109.101:483): avc: denied { setopt } for pid=7434 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.196770][ T40] audit: type=1400 audit(109.111:484): avc: denied { ioctl } for pid=7434 comm="syz.4.466" path="socket:[22587]" dev="sockfs" ino=22587 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.254146][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7441 comm=syz.2.467 [ 109.402926][ T5958] Bluetooth: Wrong link type (-71) [ 109.428489][ T7456] XFS (loop4): SB validate failed with error -5. [ 109.550757][ T7465] block device autoloading is deprecated and will be removed. [ 109.631359][ T7473] 9p: Could not find request transport: u [ 109.800770][ T7486] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.816914][ T5958] Bluetooth: Wrong link type (-71) [ 109.838164][ T7481] loop5: detected capacity change from 0 to 7 [ 109.888419][ T5368] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.894743][ T5368] buffer_io_error: 9 callbacks suppressed [ 109.894756][ T5368] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.900413][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.905247][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.908012][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.912017][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.915003][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.918156][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.920806][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.923685][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.927649][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.931966][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.935613][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.940128][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.943383][ T7481] ldm_validate_partition_table(): Disk read failed. [ 109.946257][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.952333][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.956860][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.964095][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.966846][ T7481] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.969765][ T7498] XFS (loop3): SB validate failed with error -5. [ 109.973087][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.977000][ T7481] Dev loop5: unable to read RDB block 0 [ 109.983746][ T7481] loop5: unable to read partition table [ 109.985755][ T7481] loop5: partition table beyond EOD, truncated [ 109.991766][ T7481] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 110.085968][ T7506] xt_l2tp: v2 tid > 0xffff: 2031748 [ 110.166180][ T7509] sp0: Synchronizing with TNC [ 110.172336][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 110.237472][ T6009] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 110.334990][ T7520] XFS (nbd3): SB validate failed with error -5. [ 110.397494][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 110.404245][ T6009] usb 7-1: config 0 has no interfaces? [ 110.410123][ T6009] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 110.413461][ T6009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.416628][ T6009] usb 7-1: Product: syz [ 110.419733][ T6009] usb 7-1: Manufacturer: syz [ 110.423678][ T6009] usb 7-1: SerialNumber: syz [ 110.429903][ T6009] usb 7-1: config 0 descriptor?? [ 110.457402][ T110] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.617408][ T110] usb 9-1: Using ep0 maxpacket: 16 [ 110.622035][ T110] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 110.626685][ T110] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 172, changing to 11 [ 110.633040][ T110] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 10044, setting to 1024 [ 110.638124][ T110] usb 9-1: config 0 interface 0 has no altsetting 0 [ 110.643771][ T110] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 110.647357][ T1465] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 110.648427][ T110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.654129][ T110] usb 9-1: Product: syz [ 110.656004][ T110] usb 9-1: Manufacturer: syz [ 110.658368][ T110] usb 9-1: SerialNumber: syz [ 110.663550][ T110] usb 9-1: config 0 descriptor?? [ 110.666901][ T7511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.800144][ T1465] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.808208][ T1465] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.812253][ T1465] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 110.815993][ T1465] usb 8-1: Product: syz [ 110.818115][ T1465] usb 8-1: Manufacturer: syz [ 110.820068][ T1465] usb 8-1: SerialNumber: syz [ 110.874252][ T7511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.882652][ T110] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 110.932310][ T7507] [U] [ 111.035069][ T1465] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.081151][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.4.486'. [ 111.114687][ T6030] usb 9-1: USB disconnect, device number 3 [ 111.301022][ T1465] usb 8-1: USB disconnect, device number 5 [ 111.315393][ T1465] usblp0: removed [ 111.879069][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 111.879083][ T40] audit: type=1400 audit(111.801:500): avc: denied { setopt } for pid=7539 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.943764][ T40] audit: type=1400 audit(111.861:501): avc: denied { ioctl } for pid=7548 comm="syz.4.498" path="socket:[22660]" dev="sockfs" ino=22660 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.957410][ T40] audit: type=1400 audit(111.871:502): avc: denied { read } for pid=7548 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.967594][ T40] audit: type=1400 audit(111.871:503): avc: denied { accept } for pid=7548 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.043558][ T40] audit: type=1400 audit(111.961:504): avc: denied { ioctl } for pid=7546 comm="syz.3.497" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.078891][ T7557] XFS (loop1): SB validate failed with error -5. [ 112.267289][ T1465] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 112.418991][ T1465] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.425624][ T1465] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 112.428897][ T1465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.431824][ T1465] usb 9-1: Product: syz [ 112.433464][ T1465] usb 9-1: Manufacturer: syz [ 112.435271][ T1465] usb 9-1: SerialNumber: syz [ 112.645229][ T1465] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.773196][ T24] usb 7-1: USB disconnect, device number 8 [ 112.846269][ T40] audit: type=1400 audit(112.761:505): avc: denied { watch watch_reads } for pid=7578 comm="syz.3.508" path="/124" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.900761][ T6030] usb 9-1: USB disconnect, device number 4 [ 112.910446][ T6030] usblp0: removed [ 112.921088][ T7584] XFS (loop3): SB validate failed with error -5. [ 113.147304][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 113.299379][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.308119][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.312956][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.316937][ T24] usb 7-1: Product: syz [ 113.319229][ T24] usb 7-1: Manufacturer: syz [ 113.323817][ T24] usb 7-1: SerialNumber: syz [ 113.547979][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.806871][ T34] usb 7-1: USB disconnect, device number 9 [ 113.820571][ T34] usblp0: removed [ 113.867365][ T1465] IPVS: starting estimator thread 0... [ 113.892273][ T7621] sctp: [Deprecated]: syz.3.521 (pid 7621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.892273][ T7621] Use struct sctp_sack_info instead [ 113.977413][ T7620] IPVS: using max 43 ests per chain, 103200 per kthread [ 114.041293][ T40] audit: type=1400 audit(113.961:506): avc: denied { create } for pid=7623 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.082998][ T7628] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 114.083951][ T7629] netlink: 830 bytes leftover after parsing attributes in process `syz.4.523'. [ 114.086386][ T7628] netlink: 232 bytes leftover after parsing attributes in process `syz.4.523'. [ 114.484021][ T7647] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=537903361 (1075806722 ns) > initial count (262144 ns). Using initial count to start timer. [ 114.567386][ T6030] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 114.619250][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 114.624293][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 114.640037][ T7645] xt_hashlimit: size too large, truncated to 1048576 [ 114.727635][ T6030] usb 9-1: Using ep0 maxpacket: 16 [ 114.733281][ T6030] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.736832][ T6030] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 172, changing to 11 [ 114.741399][ T7654] lo: entered allmulticast mode [ 114.743441][ T6030] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 10044, setting to 1024 [ 114.758303][ T6030] usb 9-1: config 0 interface 0 has no altsetting 0 [ 114.764513][ T7654] tunl0: entered allmulticast mode [ 114.769701][ T7654] gre0: entered allmulticast mode [ 114.773297][ T6030] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 114.776400][ T6030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.779208][ T6030] usb 9-1: Product: syz [ 114.779249][ T7654] gretap0: entered allmulticast mode [ 114.780639][ T6030] usb 9-1: Manufacturer: syz [ 114.785880][ T6030] usb 9-1: SerialNumber: syz [ 114.790350][ T6030] usb 9-1: config 0 descriptor?? [ 114.791278][ T7654] erspan0: entered allmulticast mode [ 114.792693][ T7641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.800404][ T7654] ip_vti0: entered allmulticast mode [ 114.804065][ T7654] ip6_vti0: entered allmulticast mode [ 114.812601][ T7654] sit0: entered allmulticast mode [ 114.817115][ T7654] ip6tnl0: entered allmulticast mode [ 114.820989][ T7654] ip6gre0: entered allmulticast mode [ 114.829852][ T7654] syz_tun: entered allmulticast mode [ 114.840832][ T7654] ip6gretap0: entered allmulticast mode [ 114.846309][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.851265][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.855822][ T7654] bridge0: entered allmulticast mode [ 114.860234][ T7654] vcan0: entered allmulticast mode [ 114.863137][ T7654] bond0: entered allmulticast mode [ 114.864990][ T7654] bond_slave_0: entered allmulticast mode [ 114.865002][ T7654] bond_slave_1: entered allmulticast mode [ 114.866879][ T7654] team0: entered allmulticast mode [ 114.871219][ T7654] team_slave_0: entered allmulticast mode [ 114.873498][ T7654] team_slave_1: entered allmulticast mode [ 114.877672][ T7654] dummy0: entered allmulticast mode [ 114.883496][ T7654] nlmon0: entered allmulticast mode [ 114.886425][ T7654] caif0: entered allmulticast mode [ 114.889699][ T7654] batadv0: entered allmulticast mode [ 114.893724][ T7654] vxcan0: entered allmulticast mode [ 114.896492][ T7654] vxcan1: entered allmulticast mode [ 114.899497][ T7654] veth0: entered allmulticast mode [ 114.902698][ T7654] veth1: entered allmulticast mode [ 114.911393][ T7654] wg0: entered allmulticast mode [ 114.915173][ T7654] wg1: entered allmulticast mode [ 114.918941][ T7654] wg2: entered allmulticast mode [ 114.921639][ T7654] veth0_to_bridge: entered allmulticast mode [ 114.926197][ T7654] bridge_slave_0: left promiscuous mode [ 114.929841][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.936683][ T7654] veth1_to_bridge: entered allmulticast mode [ 114.942545][ T7654] bridge_slave_1: left promiscuous mode [ 114.944819][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.949363][ T7654] veth0_to_bond: entered allmulticast mode [ 114.954494][ T7654] bond0: (slave bond_slave_0): Releasing backup interface [ 114.958332][ T7654] veth1_to_bond: entered allmulticast mode [ 114.963510][ T7654] bond0: (slave bond_slave_1): Releasing backup interface [ 114.968224][ T7654] veth0_to_team: entered allmulticast mode [ 114.977062][ T7654] team0: Port device team_slave_0 removed [ 114.982662][ T7654] veth1_to_team: entered allmulticast mode [ 114.993315][ T7654] team0: Port device team_slave_1 removed [ 114.996419][ T7654] veth0_to_batadv: entered allmulticast mode [ 115.002761][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.003112][ T7641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.009112][ T7654] batadv_slave_0: entered allmulticast mode [ 115.013306][ T6030] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10 [ 115.014581][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.023297][ T7654] veth1_to_batadv: entered allmulticast mode [ 115.034088][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.040342][ T7654] batadv_slave_1: entered allmulticast mode [ 115.046828][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.052088][ T7654] xfrm0: entered allmulticast mode [ 115.057053][ T7654] veth0_to_hsr: entered allmulticast mode [ 115.065114][ T7654] hsr_slave_0: entered allmulticast mode [ 115.069553][ T7654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.242632][ T6980] usb 9-1: USB disconnect, device number 5 [ 115.260466][ T7656] NILFS (nbd3): device size too small [ 115.358701][ T5958] Bluetooth: Wrong link type (-71) [ 115.395949][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.404150][ T46] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.409566][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.412763][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.800525][ T7684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.544'. [ 115.863366][ T7687] FAULT_INJECTION: forcing a failure. [ 115.863366][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 115.870429][ T7687] CPU: 2 UID: 0 PID: 7687 Comm: syz.1.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.870499][ T7687] Tainted: [L]=SOFTLOCKUP [ 115.870507][ T7687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.870515][ T7687] Call Trace: [ 115.870601][ T7687] [ 115.870607][ T7687] dump_stack_lvl+0x100/0x190 [ 115.871272][ T7687] should_fail_ex.cold+0x5/0xa [ 115.871426][ T7687] ? tomoyo_realpath_from_path+0xb6/0x690 [ 115.871600][ T7687] should_failslab+0xc2/0x120 [ 115.871713][ T7687] __kmalloc_noprof+0xe0/0x850 [ 115.871728][ T7687] ? kfree+0x1dd/0x6c0 [ 115.871742][ T7687] tomoyo_realpath_from_path+0xb6/0x690 [ 115.871756][ T7687] tomoyo_path_number_perm+0x23c/0x580 [ 115.871772][ T7687] ? tomoyo_path_number_perm+0x22e/0x580 [ 115.871787][ T7687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.871815][ T7687] ? find_held_lock+0x2b/0x80 [ 115.871945][ T7687] ? __fget_files+0x215/0x3d0 [ 115.871957][ T7687] ? hook_file_ioctl_common+0x149/0x410 [ 115.871968][ T7687] ? __fget_files+0x215/0x3d0 [ 115.871981][ T7687] ? __fget_files+0x21f/0x3d0 [ 115.871994][ T7687] security_file_ioctl+0xd3/0x230 [ 115.872011][ T7687] __x64_sys_ioctl+0xb7/0x210 [ 115.872028][ T7687] do_syscall_64+0x10b/0xf80 [ 115.872311][ T7687] ? clear_bhb_loop+0x40/0x90 [ 115.872325][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.872336][ T7687] RIP: 0033:0x7f4e88f9c819 [ 115.872347][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.872357][ T7687] RSP: 002b:00007f4e89d7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.872475][ T7687] RAX: ffffffffffffffda RBX: 00007f4e89215fa0 RCX: 00007f4e88f9c819 [ 115.872484][ T7687] RDX: 0000200000000000 RSI: 0000000000004b67 RDI: 0000000000000003 [ 115.872493][ T7687] RBP: 00007f4e89d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.872501][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.872510][ T7687] R13: 00007f4e89216038 R14: 00007f4e89215fa0 R15: 00007ffc19beab18 [ 115.872531][ T7687] [ 115.872641][ T7687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.114664][ T7694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52096 sclass=netlink_route_socket pid=7694 comm=syz.2.550 [ 116.139312][ T7694] netlink: 176 bytes leftover after parsing attributes in process `syz.2.550'. [ 116.371178][ T40] audit: type=1400 audit(116.291:507): avc: denied { watch watch_reads } for pid=7702 comm="syz.4.553" path="pipe:[21096]" dev="pipefs" ino=21096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 116.552099][ T7719] tipc: Failed to remove unknown binding: 66,0,0/0:2155407289/2155407291 [ 116.557679][ T7719] tipc: Failed to remove unknown binding: 66,0,0/0:2155407289/2155407290 [ 116.562090][ T7719] tipc: Failed to remove unknown binding: 66,0,0/0:2155407289/2155407291 [ 116.570858][ T7719] tipc: Failed to remove unknown binding: 66,0,0/0:2155407289/2155407290 [ 116.575079][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 116.579046][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 116.583139][ T7719] netlink: 'syz.3.558': attribute type 15 has an invalid length. [ 116.782485][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 116.838518][ T5958] block nbd1: Receive control failed (result -104) [ 117.082029][ T7738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'. [ 117.197078][ T7751] netlink: 'syz.4.570': attribute type 4 has an invalid length. [ 117.200585][ T7752] team_slave_0: entered promiscuous mode [ 117.204051][ T7752] team_slave_1: entered promiscuous mode [ 117.209474][ T7752] macsec1: entered promiscuous mode [ 117.212279][ T7752] team0: entered promiscuous mode [ 117.215496][ T7752] macsec1: entered allmulticast mode [ 117.218435][ T7752] team0: entered allmulticast mode [ 117.222080][ T7752] team_slave_0: entered allmulticast mode [ 117.224660][ T7752] team_slave_1: entered allmulticast mode [ 117.229044][ T7752] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 117.234233][ T7752] team0: Device macsec1 is already an upper device of the team interface [ 117.242533][ T7752] team0: left allmulticast mode [ 117.244819][ T7752] team_slave_0: left allmulticast mode [ 117.247441][ T7752] team_slave_1: left allmulticast mode [ 117.250039][ T7752] team0: left promiscuous mode [ 117.252751][ T7752] team_slave_0: left promiscuous mode [ 117.255163][ T7752] team_slave_1: left promiscuous mode [ 117.392538][ T7762] syzkaller0: entered promiscuous mode [ 117.396302][ T7762] syzkaller0: entered allmulticast mode [ 117.428624][ T7762] tc action pedit 'at' offset -1828716544 out of bounds [ 117.436472][ T40] audit: type=1400 audit(117.351:508): avc: denied { map } for pid=7765 comm="syz.3.574" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 117.446249][ T40] audit: type=1400 audit(117.351:509): avc: denied { execute } for pid=7765 comm="syz.3.574" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 117.795548][ T7781] misc userio: The device must be registered before sending interrupts [ 117.998370][ T7795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.002932][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.013789][ T7795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.241700][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.244152][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.574962][ T40] audit: type=1400 audit(141.491:510): avc: denied { read open } for pid=7809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.593702][ T40] audit: type=1400 audit(141.491:511): avc: denied { getattr } for pid=7809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.606595][ T40] audit: type=1400 audit(141.511:512): avc: denied { add_name } for pid=7806 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.614422][ T40] audit: type=1400 audit(141.511:513): avc: denied { create } for pid=7806 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.622163][ T40] audit: type=1400 audit(141.511:514): avc: denied { write } for pid=7806 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=4827 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.632826][ T40] audit: type=1400 audit(141.511:515): avc: denied { append } for pid=7806 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4827 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.695593][ T40] audit: type=1400 audit(141.611:516): avc: denied { remove_name } for pid=7816 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4827 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.708756][ T40] audit: type=1400 audit(141.611:517): avc: denied { unlink } for pid=7816 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4827 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.709058][ T7804] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 141.761180][ T7811] syzkaller0: entered promiscuous mode [ 141.768556][ T7811] syzkaller0: entered allmulticast mode [ 141.832541][ T7827] devpts: Bad value for 'max' [ 141.896208][ T40] audit: type=1400 audit(141.811:518): avc: denied { remount } for pid=7825 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 141.906278][ T7834] __nla_validate_parse: 1 callbacks suppressed [ 141.906292][ T7834] netlink: 168 bytes leftover after parsing attributes in process `syz.4.592'. [ 141.907815][ T6980] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 142.079695][ T6980] usb 7-1: Using ep0 maxpacket: 8 [ 142.083364][ T6980] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 142.086993][ T6980] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.093312][ T6980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.097457][ T6030] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 142.105314][ T6980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.114402][ T6980] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.121527][ T6980] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.123497][ T7842] bond1: entered allmulticast mode [ 142.125596][ T6980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.183341][ T7842] veth3: entered allmulticast mode [ 142.189155][ T7842] bond1: (slave veth3): Enslaving as an active interface with an up link [ 142.224133][ T7842] bond1 (unregistering): (slave veth3): Releasing backup interface [ 142.230624][ T7842] bond1 (unregistering): Released all slaves [ 142.249166][ T6030] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.257625][ T6030] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 142.262064][ T6030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 142.265483][ T6030] usb 8-1: Product: syz [ 142.267426][ T6030] usb 8-1: Manufacturer: syz [ 142.269741][ T6030] usb 8-1: SerialNumber: syz [ 142.353521][ T6980] usb 7-1: usb_control_msg returned -32 [ 142.356934][ T6980] usbtmc 7-1:16.0: can't read capabilities [ 142.397444][ T40] audit: type=1400 audit(142.311:519): avc: denied { map } for pid=7852 comm="syz.1.595" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.614373][ T6030] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.823916][ T6027] usb 8-1: USB disconnect, device number 6 [ 142.836790][ T6027] usblp1: removed [ 143.004895][ T7874] netlink: 948 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.008465][ T7874] netlink: 948 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.028581][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.031669][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.124109][ T7875] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 143.163041][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 143.188291][ T7884] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 143.248369][ T7884] macvlan2: entered promiscuous mode [ 143.251367][ T7884] macvlan2: entered allmulticast mode [ 143.255861][ T7884] bond1: entered promiscuous mode [ 143.259511][ T7884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.268396][ T7884] bond1: left promiscuous mode [ 143.337455][ T6027] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 143.405341][ T1465] usb 7-1: USB disconnect, device number 10 [ 143.477368][ T6012] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.509950][ T6027] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.516855][ T6027] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 143.523586][ T6027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 143.526308][ T6027] usb 8-1: Product: syz [ 143.527862][ T6027] usb 8-1: Manufacturer: syz [ 143.529408][ T6027] usb 8-1: SerialNumber: syz [ 143.647318][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 143.654821][ T6012] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 143.660587][ T6012] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.665119][ T6012] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.669200][ T6012] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.674510][ T6012] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.678820][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.748378][ T6027] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.898317][ T6012] usb 6-1: GET_CAPABILITIES returned 0 [ 143.900891][ T6012] usbtmc 6-1:16.0: can't read capabilities [ 144.369481][ T7906] XFS (loop4): SB validate failed with error -5. [ 144.449641][ T7882] infiniband sy1: set active [ 144.451820][ T7882] infiniband sy1: added bond0 [ 144.478966][ T7882] smbdirect: ib_dev[sy1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 144.487661][ T7882] smbdirect: ib_dev[sy1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 144.498316][ T7882] smbdirect: ib_dev[sy1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 144.552729][ T7882] RDS/IB: sy1: added [ 144.555200][ T7882] smc: adding ib device sy1 with port count 1 [ 144.558179][ T7882] smc: ib device sy1 port 1 has no pnetid [ 145.815387][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 145.827340][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 145.833283][ T7943] netlink: 'syz.4.619': attribute type 11 has an invalid length. [ 145.836734][ T7943] netlink: 'syz.4.619': attribute type 7 has an invalid length. [ 145.960179][ T6980] usb 6-1: USB disconnect, device number 9 [ 146.092941][ T7952] netlink: 140 bytes leftover after parsing attributes in process `syz.2.625'. [ 146.098665][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 147.590013][ T7990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.598760][ T7990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.691494][ T7990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.695143][ T7990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.814983][ T7990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.819555][ T7990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.989253][ T7990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.993273][ T7990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.284363][ T305] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.288045][ T305] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.298125][ T305] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.301786][ T305] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.322051][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.326067][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.342844][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.345814][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.555925][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 148.555937][ T40] audit: type=1400 audit(148.471:522): avc: denied { remount } for pid=8009 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.627497][ T6980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 148.777332][ T6980] usb 6-1: Using ep0 maxpacket: 8 [ 148.781836][ T6980] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.787785][ T6980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.792123][ T6980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.796277][ T6980] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.802571][ T6980] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.807056][ T6980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.843503][ T8020] Bluetooth: MGMT ver 1.23 [ 149.027755][ T6980] usb 6-1: usb_control_msg returned -32 [ 149.029732][ T6980] usbtmc 6-1:16.0: can't read capabilities [ 149.186621][ T8035] __nla_validate_parse: 1 callbacks suppressed [ 149.186640][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 149.186783][ T40] audit: type=1400 audit(149.101:523): avc: denied { ioctl } for pid=8033 comm="syz.4.656" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 149.188897][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 149.448100][ T8037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=8037 comm=syz.1.644 [ 149.454895][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 149.528178][ T8040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8040 comm=syz.1.644 [ 149.893187][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 149.943797][ T8047] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 150.005369][ T8049] syzkaller1: entered promiscuous mode [ 150.008672][ T8049] syzkaller1: entered allmulticast mode [ 150.014905][ T40] audit: type=1400 audit(149.931:524): avc: denied { setattr } for pid=8048 comm="syz.4.659" name="RAW" dev="sockfs" ino=24135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.203827][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 150.302092][ T8060] tmpfs: Unknown parameter 'noss ' [ 150.315286][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 150.319931][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 150.538793][ T6980] usb 8-1: USB disconnect, device number 7 [ 150.559027][ T6980] usblp0: removed [ 150.649217][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.666'. [ 151.261047][ T8085] hugetlbfs: Bad value '$' for mount option 'size' [ 151.261047][ T8085] [ 151.261052][ T40] audit: type=1400 audit(151.181:525): avc: denied { remount } for pid=8084 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.279206][ T8085] fuse: Bad value for 'fd' [ 151.279209][ T40] audit: type=1400 audit(151.201:526): avc: denied { mounton } for pid=8084 comm="syz.3.672" path="/152/file0" dev="hugetlbfs" ino=22414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 151.292637][ T40] audit: type=1400 audit(151.211:527): avc: denied { unmount } for pid=8084 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.414571][ T6980] usb 6-1: USB disconnect, device number 10 [ 151.788824][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 152.064933][ T8109] bridge_slave_0: left allmulticast mode [ 152.071937][ T8109] bridge_slave_0: left promiscuous mode [ 152.075800][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.129714][ T8109] bridge_slave_1: left allmulticast mode [ 152.135205][ T8109] bridge_slave_1: left promiscuous mode [ 152.138157][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.156646][ T8109] bond0: (slave bond_slave_0): Releasing backup interface [ 152.177548][ T8109] bond0: (slave bond_slave_1): Releasing backup interface [ 152.212437][ T8109] team0: Port device team_slave_0 removed [ 152.226176][ T8109] team0: Port device team_slave_1 removed [ 152.237972][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.246959][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.260199][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.263703][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.272411][ T8109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.643970][ T8124] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 152.650887][ T8124] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 152.658407][ T8124] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 152.663029][ T8124] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 152.670359][ T8124] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 152.675570][ T8124] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 152.680398][ T8124] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 152.684588][ T8124] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 152.691208][ T8124] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 152.695312][ T8124] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 152.843512][ T40] audit: type=1400 audit(152.761:528): avc: denied { setopt } for pid=8138 comm="syz.4.694" lport=43620 faddr=::ffff:100.1.1.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.890195][ T40] audit: type=1400 audit(152.811:529): avc: denied { execute } for pid=8140 comm="syz.1.695" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.900333][ T40] audit: type=1400 audit(152.811:530): avc: denied { append } for pid=8140 comm="syz.1.695" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.240583][ T40] audit: type=1400 audit(153.161:531): avc: denied { write } for pid=8155 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.248885][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 153.249400][ T8158] loop5: detected capacity change from 0 to 7 [ 153.257041][ C2] blk_print_req_error: 5 callbacks suppressed [ 153.257164][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.263456][ C2] buffer_io_error: 5 callbacks suppressed [ 153.263472][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.271732][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.275148][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.278879][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.282867][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.285807][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.289686][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.294099][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.298905][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.303058][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.306759][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.312442][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.315805][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.320424][ T8158] ldm_validate_partition_table(): Disk read failed. [ 153.323734][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.327513][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.331300][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.334801][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.338008][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.341075][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.344355][ T8158] Dev loop5: unable to read RDB block 0 [ 153.350551][ T8158] loop5: unable to read partition table [ 153.353790][ T8158] loop5: partition table beyond EOD, truncated [ 153.357629][ T8158] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 153.682205][ T8184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.204483][ T8187] __nla_validate_parse: 3 callbacks suppressed [ 154.204499][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 154.364936][ T8192] overlayfs: failed to resolve './file0': -2 [ 154.469409][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 154.469422][ T40] audit: type=1400 audit(154.391:535): avc: denied { shutdown } for pid=8196 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.486700][ T8199] syzkaller1: entered promiscuous mode [ 154.489650][ T8199] syzkaller1: entered allmulticast mode [ 154.574243][ T8203] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 154.598347][ T8203] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.601670][ T8203] team0: Device ipvlan2 is already an upper device of the team interface [ 154.954800][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 155.066817][ T8219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.728'. [ 155.445379][ T40] audit: type=1400 audit(2000000000.929:536): avc: denied { read } for pid=8236 comm="syz.1.735" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.600260][ T8249] Invalid source name [ 155.601723][ T8249] UBIFS error (pid: 8249): cannot open "/dev/sg0", error -22 [ 156.879257][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 156.879276][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.756'. [ 156.879795][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 156.879805][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.756'. [ 157.112747][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 157.118893][ T40] audit: type=1400 audit(2000000002.609:537): avc: denied { getopt } for pid=8307 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.507041][ T40] audit: type=1400 audit(2000000002.989:538): avc: denied { setopt } for pid=8317 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.520672][ T40] audit: type=1400 audit(2000000002.999:539): avc: denied { create } for pid=8318 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.527457][ T40] audit: type=1400 audit(2000000003.009:540): avc: denied { name_bind } for pid=8318 comm="syz.3.768" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 157.577759][ T40] audit: type=1400 audit(2000000003.059:541): avc: denied { read } for pid=8318 comm="syz.3.768" laddr=127.0.0.1 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.592484][ T8320] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 157.644592][ T8320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.696630][ T8322] bond1: (slave veth3): Enslaving as an active interface with a down link [ 157.701671][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 157.705600][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 157.777304][ T40] audit: type=1400 audit(2000000003.259:542): avc: denied { execute } for pid=8331 comm="syz.3.773" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 158.085789][ T40] audit: type=1400 audit(2000000003.569:543): avc: denied { getopt } for pid=8339 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.368361][ T8346] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 158.721465][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=8373 comm=syz.2.788 [ 158.912042][ T8378] create_pit_timer: 14 callbacks suppressed [ 158.912057][ T8378] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 158.918288][ T8378] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 158.942120][ T8378] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 158.945415][ T8378] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 159.287436][ T6114] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 159.397842][ T8396] overlayfs: failed to clone upperpath [ 159.439278][ T6114] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.448992][ T6114] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.461074][ T6114] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.464189][ T6114] usb 9-1: Product: syz [ 159.465969][ T6114] usb 9-1: Manufacturer: syz [ 159.467997][ T6114] usb 9-1: SerialNumber: syz [ 159.511653][ T40] audit: type=1400 audit(2000000004.999:544): avc: denied { ioctl } for pid=8395 comm="syz.3.796" path="socket:[27007]" dev="sockfs" ino=27007 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.636656][ T8403] __nla_validate_parse: 2 callbacks suppressed [ 159.636668][ T8403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.799'. [ 159.641723][ T8403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.799'. [ 159.645935][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 159.749855][ T6114] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.755725][ T6114] usb 9-1: USB disconnect, device number 6 [ 159.760285][ T6114] usblp0: removed [ 159.774316][ T8412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 159.831484][ T8412] binder: 8404:8412 ioctl c0306201 2000000003c0 returned -14 [ 160.049451][ T8417] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 160.070735][ T8417] bond1: entered promiscuous mode [ 160.073364][ T8417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.095705][ T8417] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.100805][ T8417] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 160.104371][ T8417] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 160.418440][ T40] audit: type=1400 audit(2000000005.899:545): avc: denied { create } for pid=8432 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 160.502538][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 160.571603][ T8445] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 161.241289][ T40] audit: type=1400 audit(2000000006.729:546): avc: denied { mounton } for pid=8465 comm="syz.2.815" path="/196/file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 161.311175][ T8466] syzkaller1: entered promiscuous mode [ 161.313212][ T8466] syzkaller1: entered allmulticast mode [ 161.562579][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 161.568981][ T8488] netlink: 200 bytes leftover after parsing attributes in process `syz.1.823'. [ 161.886241][ T8495] fuse: fd is not a fuse device [ 162.047632][ T8498] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 162.051243][ T8498] netlink: 192 bytes leftover after parsing attributes in process `syz.4.825'. [ 162.091295][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 162.099657][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 162.175487][ T8500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8500 comm=syz.3.826 [ 162.181397][ T8500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8500 comm=syz.3.826 [ 162.589775][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 162.608811][ T8511] program syz.4.829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.151634][ T8535] syz_tun: entered allmulticast mode [ 163.173193][ T8535] dvmrp8: entered allmulticast mode [ 163.339878][ T8534] syz_tun: left allmulticast mode [ 163.346692][ T8540] gfs2: error -5 reading superblock [ 163.564247][ T8548] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12288 sclass=netlink_xfrm_socket pid=8548 comm=syz.4.838 [ 163.643100][ T40] audit: type=1400 audit(2000000009.139:547): avc: denied { bind } for pid=8539 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.928581][ T8553] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 163.932844][ T8553] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 164.021877][ T8556] sch_fq: defrate 0 ignored. [ 164.111589][ T8560] openvswitch: netlink: IPv4 tun info is not correct [ 164.501812][ T8567] lo: left allmulticast mode [ 164.504077][ T8567] tunl0: left allmulticast mode [ 164.506465][ T8567] gre0: left allmulticast mode [ 164.509066][ T8567] gretap0: left allmulticast mode [ 164.511841][ T8567] erspan0: left allmulticast mode [ 164.515422][ T8567] ip_vti0: left allmulticast mode [ 164.519859][ T8567] ip6_vti0: left allmulticast mode [ 164.522413][ T8567] sit0: left allmulticast mode [ 164.524560][ T8567] ip6tnl0: left allmulticast mode [ 164.526554][ T8567] ip6gre0: left allmulticast mode [ 164.528674][ T8567] syz_tun: left allmulticast mode [ 164.531162][ T8567] ip6gretap0: left allmulticast mode [ 164.533912][ T8567] bridge0: left allmulticast mode [ 164.536727][ T8567] vcan0: left allmulticast mode [ 164.539813][ T8567] bond0: left allmulticast mode [ 164.542205][ T8567] team0: left allmulticast mode [ 164.544860][ T8567] dummy0: left allmulticast mode [ 164.548531][ T8567] nlmon0: left allmulticast mode [ 164.551101][ T8567] caif0: left allmulticast mode [ 164.552906][ T8567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.746527][ T8575] __nla_validate_parse: 5 callbacks suppressed [ 164.746542][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 164.817845][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 164.836919][ T8581] kAFS: unable to lookup cell 'syz1' [ 164.902955][ T8590] fuse: fd is not a fuse device [ 164.961081][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 165.045043][ T8598] binder: 8597:8598 ioctl c0306201 200000000080 returned -22 [ 165.147704][ T8606] tmpfs: Bad value for 'mpol' [ 165.152314][ T40] audit: type=1400 audit(2000000010.639:548): avc: denied { ioctl } for pid=8605 comm="syz.3.861" path="socket:[25534]" dev="sockfs" ino=25534 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.229568][ T8610] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 165.240931][ T8610] CIFS mount error: No usable UNC path provided in device string! [ 165.240931][ T8610] [ 165.246418][ T8610] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.281196][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.347391][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 165.682833][ T40] audit: type=1326 audit(2000000011.169:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.867" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f539619c819 code=0x0 [ 165.987497][ T8634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.023035][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 166.061844][ T40] audit: type=1400 audit(2000000011.549:550): avc: denied { setattr } for pid=8639 comm="syz.2.874" path="/proc/526/net/tcp6" dev="proc" ino=4026533114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.493097][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 166.599742][ T8655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8655 comm=syz.2.879 [ 166.607859][ T8655] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:1 [ 166.716934][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 166.721991][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 166.730007][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 166.739322][ T8679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.910632][ T8687] batadv_slave_0: entered promiscuous mode [ 166.996453][ T8685] batadv_slave_0: left promiscuous mode [ 167.019435][ T8698] syzkaller1: entered promiscuous mode [ 167.023339][ T8698] syzkaller1: entered allmulticast mode [ 167.047946][ T40] audit: type=1400 audit(2000000012.539:551): avc: denied { read } for pid=8700 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.795576][ T8707] fuse: fd is not a fuse device [ 167.864533][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 167.913474][ T8717] overlayfs: failed to resolve './file1': -2 [ 167.981337][ T8725] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 168.281755][ T5958] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 168.286790][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.286821][ T5958] Tainted: [L]=SOFTLOCKUP [ 168.286828][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.286840][ T5958] Workqueue: hci0 hci_rx_work [ 168.287375][ T5958] Call Trace: [ 168.287437][ T5958] [ 168.287442][ T5958] dump_stack_lvl+0x100/0x190 [ 168.288177][ T5958] sysfs_warn_dup.cold+0x1c/0x28 [ 168.288283][ T5958] sysfs_create_dir_ns+0x24b/0x2b0 [ 168.288403][ T5958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 168.288421][ T5958] ? find_held_lock+0x2b/0x80 [ 168.288548][ T5958] ? kobject_add_internal+0x25f/0x930 [ 168.288735][ T5958] ? kobject_add_internal+0x25f/0x930 [ 168.288756][ T5958] ? do_raw_spin_unlock+0x145/0x1e0 [ 168.288801][ T5958] kobject_add_internal+0x2c8/0x930 [ 168.288825][ T5958] kobject_add+0x16a/0x1e0 [ 168.288836][ T5958] ? __pfx_kobject_add+0x10/0x10 [ 168.288849][ T5958] ? class_to_subsys+0x10f/0x150 [ 168.289249][ T5958] ? kobject_put+0xb9/0x640 [ 168.289266][ T5958] ? _raw_spin_unlock+0x28/0x50 [ 168.289287][ T5958] device_add+0x294/0x1920 [ 168.289304][ T5958] ? __pfx_dev_set_name+0x10/0x10 [ 168.289322][ T5958] ? __pfx_device_add+0x10/0x10 [ 168.289337][ T5958] ? mgmt_send_event_skb+0x2fb/0x460 [ 168.289360][ T5958] hci_conn_add_sysfs+0x1a3/0x260 [ 168.289380][ T5958] le_conn_complete_evt+0x11eb/0x1f60 [ 168.289402][ T5958] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 168.289422][ T5958] hci_le_conn_complete_evt+0x23c/0x3a0 [ 168.289439][ T5958] ? skb_pull_data+0x15f/0x1e0 [ 168.289675][ T5958] hci_le_meta_evt+0x34a/0x5f0 [ 168.289695][ T5958] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 168.289716][ T5958] hci_event_packet+0x51c/0xcd0 [ 168.289734][ T5958] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 168.289752][ T5958] ? __pfx_hci_event_packet+0x10/0x10 [ 168.289771][ T5958] ? kcov_remote_start+0x374/0x660 [ 168.289786][ T5958] ? lockdep_hardirqs_on+0x78/0x100 [ 168.289807][ T5958] hci_rx_work+0x451/0xfc0 [ 168.289826][ T5958] process_one_work+0xa0e/0x1980 [ 168.289850][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 168.289869][ T5958] ? __pfx_hci_rx_work+0x10/0x10 [ 168.289886][ T5958] worker_thread+0x5ef/0xe50 [ 168.289905][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 168.289920][ T5958] ? kthread+0x13a/0x450 [ 168.289931][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 168.289944][ T5958] kthread+0x370/0x450 [ 168.289957][ T5958] ? __pfx_kthread+0x10/0x10 [ 168.289971][ T5958] ret_from_fork+0x72b/0xd50 [ 168.289988][ T5958] ? __pfx_ret_from_fork+0x10/0x10 [ 168.290003][ T5958] ? __switch_to+0x800/0x1100 [ 168.290020][ T5958] ? __pfx_kthread+0x10/0x10 [ 168.290034][ T5958] ret_from_fork_asm+0x1a/0x30 [ 168.290058][ T5958] [ 168.295461][ T8747] dvmrp8: left allmulticast mode [ 168.301555][ T5958] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.403269][ T5958] Bluetooth: hci0: failed to register connection device [ 168.427087][ T5958] Bluetooth: hci0: link tx timeout [ 168.432028][ T5958] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.439922][ T5958] Bluetooth: hci0: link tx timeout [ 168.442531][ T5958] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.686272][ T8768] afs: Unknown parameter 'grtotaiAGZ*1ٿ(DsL%B8' [ 168.795442][ T8771] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 169.153438][ T8789] lo: entered allmulticast mode [ 169.170442][ T8789] tunl0: entered allmulticast mode [ 169.177561][ T8789] gre0: entered allmulticast mode [ 169.216494][ T8789] gretap0: entered allmulticast mode [ 169.236135][ T8789] erspan0: entered allmulticast mode [ 169.249650][ T8789] ip_vti0: entered allmulticast mode [ 169.268959][ T8789] ip6_vti0: entered allmulticast mode [ 169.283795][ T8789] sit0: entered allmulticast mode [ 169.295557][ T8797] netlink: 'syz.2.928': attribute type 23 has an invalid length. [ 169.304696][ T8789] ip6tnl0: entered allmulticast mode [ 169.317512][ T8789] ip6gre0: entered allmulticast mode [ 169.335560][ T8789] syz_tun: entered allmulticast mode [ 169.354243][ T8789] ip6gretap0: entered allmulticast mode [ 169.373101][ T8789] bridge0: entered allmulticast mode [ 169.386958][ T8789] vcan0: entered allmulticast mode [ 169.395511][ T8789] bond0: entered allmulticast mode [ 169.409272][ T8789] team0: entered allmulticast mode [ 169.422638][ T8789] dummy0: entered allmulticast mode [ 169.432775][ T8789] nlmon0: entered allmulticast mode [ 169.437906][ T8789] caif0: entered allmulticast mode [ 169.440927][ T8789] batadv0: entered allmulticast mode [ 169.452587][ T8789] veth0: entered allmulticast mode [ 169.458333][ T8789] veth1: entered allmulticast mode [ 169.467643][ T8789] wg0: entered allmulticast mode [ 169.472632][ T8789] wg1: entered allmulticast mode [ 169.480289][ T8789] wg2: entered allmulticast mode [ 169.484613][ T8789] veth0_to_bridge: entered allmulticast mode [ 169.492285][ T8789] bridge_slave_0: entered allmulticast mode [ 169.498857][ T8789] veth1_to_bridge: entered allmulticast mode [ 169.506135][ T8789] bridge_slave_1: entered allmulticast mode [ 169.513795][ T8789] veth0_to_bond: entered allmulticast mode [ 169.521386][ T8789] bond_slave_0: entered allmulticast mode [ 169.525368][ T8789] veth1_to_bond: entered allmulticast mode [ 169.534594][ T8789] bond_slave_1: entered allmulticast mode [ 169.538447][ T8789] veth0_to_team: entered allmulticast mode [ 169.550155][ T8789] team_slave_0: entered allmulticast mode [ 169.553515][ T8789] veth1_to_team: entered allmulticast mode [ 169.562830][ T8789] team_slave_1: entered allmulticast mode [ 169.566187][ T8789] veth0_to_batadv: entered allmulticast mode [ 169.575379][ T8789] batadv_slave_0: entered allmulticast mode [ 169.584513][ T8789] veth1_to_batadv: entered allmulticast mode [ 169.593949][ T8789] batadv_slave_1: entered allmulticast mode [ 169.603842][ T8789] xfrm0: entered allmulticast mode [ 169.614848][ T8789] veth0_to_hsr: entered allmulticast mode [ 169.619654][ T8789] hsr_slave_0: entered allmulticast mode [ 169.627775][ T8789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.636352][ T8796] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 169.865201][ T8810] netlink: 'syz.4.933': attribute type 28 has an invalid length. [ 170.411806][ T8834] __nla_validate_parse: 5 callbacks suppressed [ 170.411819][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.942'. [ 170.527441][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 170.781188][ T40] audit: type=1400 audit(2000000016.269:552): avc: denied { read } for pid=8850 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.880232][ T8859] syzkaller0: entered promiscuous mode [ 170.882349][ T8859] syzkaller0: entered allmulticast mode [ 171.179788][ T8874] PM: Enabling pm_trace changes system date and time during resume. [ 171.179788][ T8874] PM: Correct system time has to be restored manually after resume. [ 171.424090][ T40] audit: type=1400 audit(2000000016.909:553): avc: denied { accept } for pid=8880 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.498015][ T8886] xt_hashlimit: size too large, truncated to 1048576 [ 171.908762][ T8908] fuse: fd is not a fuse device [ 171.957354][ T6114] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 172.108680][ T6114] usb 9-1: device descriptor read/64, error -71 [ 172.173285][ T8921] tipc: Started in network mode [ 172.175754][ T8921] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 172.184678][ T8921] tipc: Enabled bearer , priority 10 [ 172.219258][ T8923] overlayfs: failed to clone upperpath [ 172.359600][ T6114] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 172.499333][ T6114] usb 9-1: device descriptor read/64, error -71 [ 172.601211][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 172.617712][ T6114] usb usb9-port1: attempt power cycle [ 172.837478][ T8944] syzkaller0: entered promiscuous mode [ 172.839423][ T8944] syzkaller0: entered allmulticast mode [ 172.967294][ T6114] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 172.988435][ T6114] usb 9-1: device descriptor read/8, error -71 [ 173.070546][ T8957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10247 sclass=netlink_route_socket pid=8957 comm=syz.3.983 [ 173.122390][ T8957] netlink: 700 bytes leftover after parsing attributes in process `syz.3.983'. [ 173.247285][ T6114] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 173.279792][ T6114] usb 9-1: device descriptor read/8, error -71 [ 173.300384][ T6030] tipc: Node number set to 4269801488 [ 173.387674][ T6114] usb usb9-port1: unable to enumerate USB device [ 173.484948][ T8977] binder: 8976:8977 ioctl c0306201 200000000080 returned -14 [ 173.513245][ T40] audit: type=1400 audit(2000000275.002:554): avc: denied { mount } for pid=8976 comm="syz.2.988" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.542569][ T8977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.628820][ T8977] binder: 8976:8977 ioctl c0306201 2000000003c0 returned -14 [ 173.720645][ T40] audit: type=1400 audit(2000000275.212:555): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.845613][ T40] audit: type=1400 audit(2000000275.332:556): avc: denied { listen } for pid=8980 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.854363][ T40] audit: type=1400 audit(2000000275.342:557): avc: denied { accept } for pid=8980 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.687991][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 175.083060][ T9008] netlink: 'syz.4.997': attribute type 7 has an invalid length. [ 175.086172][ T9008] netlink: 'syz.4.997': attribute type 7 has an invalid length. [ 175.201045][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.270469][ T40] audit: type=1400 audit(2000000276.762:558): avc: denied { append } for pid=9026 comm="syz.1.1005" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.275003][ T9027] erofs: block size(16384) > page size(4096) not supported by filesystem [ 175.287953][ T9027] erofs (device nullb0): cannot find valid erofs superblock [ 175.713163][ T9047] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 176.156321][ T9057] mkiss: ax0: crc mode is auto. [ 176.166205][ T40] audit: type=1400 audit(2000000277.652:559): avc: denied { create } for pid=9055 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.346115][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 176.424958][ T9068] bridge2: port 1(bond1) entered blocking state [ 176.427314][ T9068] bridge2: port 1(bond1) entered disabled state [ 176.429685][ T9068] bond1: entered allmulticast mode [ 176.432838][ T9068] bond1: entered promiscuous mode [ 176.446961][ T40] audit: type=1326 audit(2000000277.932:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.2.1021" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64399c819 code=0x0 [ 176.467517][ T9073] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 176.474663][ T40] audit: type=1400 audit(2000000277.962:561): avc: denied { mount } for pid=9072 comm="syz.4.1022" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 176.490717][ T9073] sg_read: process 421 (syz.4.1022) changed security contexts after opening file descriptor, this is not allowed. [ 176.648198][ T40] audit: type=1400 audit(2000000278.142:562): avc: denied { mount } for pid=9076 comm="syz.4.1024" name="/" dev="pstore" ino=5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 177.276929][ T9104] tmpfs: Cannot change global quota limit on remount [ 177.277358][ T6030] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 177.424419][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 177.430022][ T6030] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.433635][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 177.437728][ T6030] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.445269][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.451768][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 177.459389][ T6030] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.462736][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 177.471068][ T6030] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.475984][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.480357][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 177.484902][ T6030] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.487609][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 177.491621][ T6030] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.497395][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.501185][ T6030] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 177.507152][ T6030] usb 9-1: string descriptor 0 read error: -22 [ 177.509754][ T6030] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 177.512883][ T6030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.530665][ T6030] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 177.650897][ T9115] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1037'. [ 177.726237][ T40] audit: type=1400 audit(2000000279.212:563): avc: denied { mount } for pid=9114 comm="syz.2.1037" name="/" dev="autofs" ino=31757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 177.780668][ T6114] usb 9-1: USB disconnect, device number 11 [ 177.879591][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 177.883136][ T40] audit: type=1400 audit(2000000279.372:564): avc: denied { read } for pid=9114 comm="syz.2.1037" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 177.894080][ T40] audit: type=1400 audit(2000000279.372:565): avc: denied { open } for pid=9114 comm="syz.2.1037" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 177.913847][ T40] audit: type=1400 audit(2000000279.372:566): avc: denied { ioctl } for pid=9114 comm="syz.2.1037" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 178.090954][ T5953] Bluetooth: hci2: SCO packet for unknown connection handle 2248 [ 178.197852][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 178.204012][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1041'. [ 178.942836][ T40] audit: type=1400 audit(2000000280.432:567): avc: denied { setopt } for pid=9188 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.008300][ T40] audit: type=1400 audit(2000000280.492:568): avc: denied { connect } for pid=9190 comm="syz.2.1061" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.395761][ T9211] bond2: entered allmulticast mode [ 179.415756][ T9211] veth5: entered allmulticast mode [ 179.420978][ T9211] bond2: (slave veth5): Enslaving as an active interface with an up link [ 179.428571][ T9211] bond2 (unregistering): (slave veth5): Releasing backup interface [ 179.439678][ T9211] bond2 (unregistering): Released all slaves [ 179.536871][ T9215] batman_adv: batadv0: Adding interface: dummy0 [ 179.539261][ T9215] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.551156][ T9215] batman_adv: batadv0: Interface activated: dummy0 [ 179.568894][ T9215] batadv0: mtu less than device minimum [ 179.572354][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.576527][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.581722][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.586035][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.590000][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.593677][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.599022][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.603200][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.607126][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.681160][ T9224] xt_hashlimit: size too large, truncated to 1048576 [ 179.825442][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'. [ 180.597669][ T9268] capability: warning: `syz.3.1085' uses 32-bit capabilities (legacy support in use) [ 181.315312][ T9296] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.398249][ T9302] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1100'. [ 181.929119][ T9331] fuse: Bad value for 'fd' [ 182.115546][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 182.115618][ T40] audit: type=1400 audit(2000000283.601:571): avc: denied { mounton } for pid=9335 comm="syz.2.1111" path="/271/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 182.397298][ T9361] fuse: Bad value for 'fd' [ 182.556019][ T40] audit: type=1400 audit(2000000284.012:572): avc: denied { read } for pid=9365 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.819670][ T40] audit: type=1400 audit(2000000285.201:573): avc: denied { name_bind } for pid=9395 comm="syz.2.1135" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 184.472954][ T40] audit: type=1400 audit(2000000285.809:574): avc: denied { accept } for pid=9415 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.681473][ T108] [ 184.682358][ T108] ====================================================== [ 184.684998][ T108] WARNING: possible circular locking dependency detected [ 184.687429][ T108] syzkaller #0 Tainted: G L [ 184.690085][ T108] ------------------------------------------------------ [ 184.692557][ T108] kswapd0/108 is trying to acquire lock: [ 184.694395][ T108] ffff888056f3c4e8 (&ht->mutex){+.+.}-{4:4}, at: rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.698390][ T108] [ 184.698390][ T108] but task is already holding lock: [ 184.700833][ T108] ffffffff8e9b0800 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xb5d/0x1ac0 [ 184.704057][ T108] [ 184.704057][ T108] which lock already depends on the new lock. [ 184.704057][ T108] [ 184.707596][ T108] [ 184.707596][ T108] the existing dependency chain (in reverse order) is: [ 184.710646][ T108] [ 184.710646][ T108] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 184.712988][ T108] fs_reclaim_acquire+0xc4/0x100 [ 184.714836][ T108] __kvmalloc_node_noprof+0xcc/0xa00 [ 184.716716][ T108] bucket_table_alloc.isra.0+0x88/0x460 [ 184.718990][ T108] rhashtable_rehash_alloc+0x68/0x110 [ 184.721087][ T108] rht_deferred_worker+0x1d9/0x1fd0 [ 184.723015][ T108] process_one_work+0xa0e/0x1980 [ 184.724773][ T108] worker_thread+0x5ef/0xe50 [ 184.726431][ T108] kthread+0x370/0x450 [ 184.727928][ T108] ret_from_fork+0x72b/0xd50 [ 184.729641][ T108] ret_from_fork_asm+0x1a/0x30 [ 184.731520][ T108] [ 184.731520][ T108] -> #0 (&ht->mutex){+.+.}-{4:4}: [ 184.734314][ T108] __lock_acquire+0x14b8/0x2630 [ 184.736571][ T108] lock_acquire+0x1b1/0x370 [ 184.738387][ T108] __mutex_lock+0x1a4/0x1b10 [ 184.740111][ T108] rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.742179][ T108] shmem_evict_inode+0x1ae/0xc40 [ 184.744038][ T108] evict+0x3c2/0xad0 [ 184.745562][ T108] iput.part.0+0x605/0xf50 [ 184.747262][ T108] iput+0x35/0x40 [ 184.748720][ T108] dentry_unlink_inode+0x2a1/0x490 [ 184.750620][ T108] __dentry_kill+0x1d0/0x600 [ 184.752438][ T108] finish_dput+0x76/0x480 [ 184.754376][ T108] dput.part.0+0x456/0x570 [ 184.756285][ T108] dput+0x1f/0x30 [ 184.757879][ T108] ovl_destroy_inode+0x3e/0x190 [ 184.759928][ T108] destroy_inode+0xcb/0x1c0 [ 184.761553][ T108] evict+0x599/0xad0 [ 184.763075][ T108] iput.part.0+0x605/0xf50 [ 184.764674][ T108] iput+0x35/0x40 [ 184.766026][ T108] dentry_unlink_inode+0x2a1/0x490 [ 184.767852][ T108] __dentry_kill+0x1d0/0x600 [ 184.769620][ T108] shrink_dentry_list+0x180/0x5e0 [ 184.771971][ T108] prune_dcache_sb+0xea/0x150 [ 184.773810][ T108] super_cache_scan+0x328/0x550 [ 184.775595][ T108] do_shrink_slab+0x416/0x1240 [ 184.777450][ T108] shrink_slab+0xa7d/0x12e0 [ 184.779179][ T108] shrink_one+0x398/0x7f0 [ 184.780844][ T108] shrink_node+0x2673/0x3dc0 [ 184.782429][ T108] balance_pgdat+0xaaf/0x1ac0 [ 184.784074][ T108] kswapd+0x557/0xb60 [ 184.786701][ T108] kthread+0x370/0x450 [ 184.789039][ T108] ret_from_fork+0x72b/0xd50 [ 184.791808][ T108] ret_from_fork_asm+0x1a/0x30 [ 184.794344][ T108] [ 184.794344][ T108] other info that might help us debug this: [ 184.794344][ T108] [ 184.798196][ T108] Possible unsafe locking scenario: [ 184.798196][ T108] [ 184.801176][ T108] CPU0 CPU1 [ 184.803499][ T108] ---- ---- [ 184.806043][ T108] lock(fs_reclaim); [ 184.808033][ T108] lock(&ht->mutex); [ 184.811016][ T108] lock(fs_reclaim); [ 184.813649][ T108] lock(&ht->mutex); [ 184.815311][ T108] [ 184.815311][ T108] *** DEADLOCK *** [ 184.815311][ T108] [ 184.818631][ T108] 2 locks held by kswapd0/108: [ 184.820599][ T108] #0: ffffffff8e9b0800 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xb5d/0x1ac0 [ 184.824586][ T108] #1: ffff88801347c0d8 (&type->s_umount_key#76){++++}-{4:4}, at: super_cache_scan+0x98/0x550 [ 184.830120][ T108] [ 184.830120][ T108] stack backtrace: [ 184.832457][ T108] CPU: 2 UID: 0 PID: 108 Comm: kswapd0 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.832474][ T108] Tainted: [L]=SOFTLOCKUP [ 184.832478][ T108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.832484][ T108] Call Trace: [ 184.832490][ T108] [ 184.832495][ T108] dump_stack_lvl+0x100/0x190 [ 184.832516][ T108] print_circular_bug.cold+0x178/0x1c7 [ 184.832544][ T108] check_noncircular+0x146/0x160 [ 184.832565][ T108] __lock_acquire+0x14b8/0x2630 [ 184.832581][ T108] lock_acquire+0x1b1/0x370 [ 184.832594][ T108] ? rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.832620][ T108] ? __pfx___might_resched+0x10/0x10 [ 184.832645][ T108] __mutex_lock+0x1a4/0x1b10 [ 184.832668][ T108] ? rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.832694][ T108] ? rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.832720][ T108] ? try_to_grab_pending+0x45f/0x840 [ 184.832741][ T108] ? rcu_is_watching+0x12/0xc0 [ 184.832764][ T108] ? try_to_grab_pending+0x45f/0x840 [ 184.832784][ T108] ? __pfx___mutex_lock+0x10/0x10 [ 184.832805][ T108] ? enable_work+0x295/0x320 [ 184.832825][ T108] ? enable_work+0x24c/0x320 [ 184.832847][ T108] ? __pfx___might_resched+0x10/0x10 [ 184.832869][ T108] ? rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.832892][ T108] rhashtable_free_and_destroy+0x3d/0x9b0 [ 184.832917][ T108] ? __pfx_simple_xattr_ht_free+0x10/0x10 [ 184.832938][ T108] ? __pfx___might_resched+0x10/0x10 [ 184.832958][ T108] ? ret_from_fork_asm+0x1a/0x30 [ 184.832983][ T108] shmem_evict_inode+0x1ae/0xc40 [ 184.833007][ T108] ? inode_wait_for_writeback+0x171/0x390 [ 184.833031][ T108] ? __pfx_shmem_evict_inode+0x10/0x10 [ 184.833055][ T108] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 184.833079][ T108] ? find_held_lock+0x2b/0x80 [ 184.833101][ T108] ? evict+0x37e/0xad0 [ 184.833123][ T108] ? evict+0x37e/0xad0 [ 184.833142][ T108] ? __pfx_shmem_evict_inode+0x10/0x10 [ 184.833164][ T108] evict+0x3c2/0xad0 [ 184.833186][ T108] ? __pfx_evict+0x10/0x10 [ 184.833206][ T108] ? iput.part.0+0x5fd/0xf50 [ 184.833227][ T108] iput.part.0+0x605/0xf50 [ 184.833245][ T108] ? __pfx_inode_just_drop+0x10/0x10 [ 184.833262][ T108] iput+0x35/0x40 [ 184.833280][ T108] dentry_unlink_inode+0x2a1/0x490 [ 184.833299][ T108] __dentry_kill+0x1d0/0x600 [ 184.833318][ T108] finish_dput+0x76/0x480 [ 184.833341][ T108] dput.part.0+0x456/0x570 [ 184.833361][ T108] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 184.833382][ T108] dput+0x1f/0x30 [ 184.833401][ T108] ovl_destroy_inode+0x3e/0x190 [ 184.833422][ T108] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 184.833448][ T108] destroy_inode+0xcb/0x1c0 [ 184.833466][ T108] evict+0x599/0xad0 [ 184.833488][ T108] ? __pfx_evict+0x10/0x10 [ 184.833507][ T108] ? iput.part.0+0x5fd/0xf50 [ 184.833528][ T108] iput.part.0+0x605/0xf50 [ 184.833546][ T108] ? __pfx_inode_just_drop+0x10/0x10 [ 184.833561][ T108] iput+0x35/0x40 [ 184.833581][ T108] dentry_unlink_inode+0x2a1/0x490 [ 184.833600][ T108] __dentry_kill+0x1d0/0x600 [ 184.833618][ T108] ? shrink_dentry_list+0x10e/0x5e0 [ 184.833640][ T108] shrink_dentry_list+0x180/0x5e0 [ 184.833661][ T108] ? list_lru_walk_one+0x3c/0x50 [ 184.833685][ T108] prune_dcache_sb+0xea/0x150 [ 184.833706][ T108] ? list_lru_count_one+0x147/0x320 [ 184.833728][ T108] ? __pfx_prune_dcache_sb+0x10/0x10 [ 184.833755][ T108] super_cache_scan+0x328/0x550 [ 184.833783][ T108] do_shrink_slab+0x416/0x1240 [ 184.833811][ T108] shrink_slab+0xa7d/0x12e0 [ 184.833834][ T108] ? shrink_slab+0x690/0x12e0 [ 184.833859][ T108] ? __pfx_shrink_slab+0x10/0x10 [ 184.833886][ T108] shrink_one+0x398/0x7f0 [ 184.833906][ T108] ? shrink_node+0x2653/0x3dc0 [ 184.833926][ T108] shrink_node+0x2673/0x3dc0 [ 184.833946][ T108] ? __lock_acquire+0x4a5/0x2630 [ 184.833964][ T108] ? shrink_node+0x23c3/0x3dc0 [ 184.833989][ T108] ? __pfx_shrink_node+0x10/0x10 [ 184.834014][ T108] ? balance_pgdat+0xaaf/0x1ac0 [ 184.834036][ T108] balance_pgdat+0xaaf/0x1ac0 [ 184.834060][ T108] ? __pfx_balance_pgdat+0x10/0x10 [ 184.834080][ T108] ? lockdep_hardirqs_on+0x30/0x100 [ 184.834104][ T108] ? lockdep_hardirqs_on+0x78/0x100 [ 184.834124][ T108] ? __lock_acquire+0x4a5/0x2630 [ 184.834163][ T108] ? rcu_is_watching+0x12/0xc0 [ 184.834191][ T108] ? rcu_is_watching+0x12/0xc0 [ 184.834215][ T108] kswapd+0x557/0xb60 [ 184.834237][ T108] ? __kthread_parkme+0xbb/0x230 [ 184.834260][ T108] ? __pfx_kswapd+0x10/0x10 [ 184.834279][ T108] ? rcu_is_watching+0x12/0xc0 [ 184.834302][ T108] ? __pfx_autoremove_wake_function+0x10/0x10 [ 184.834320][ T108] ? __kthread_parkme+0x18c/0x230 [ 184.834343][ T108] ? kthread+0x13a/0x450 [ 184.834358][ T108] ? __pfx_kswapd+0x10/0x10 [ 184.834377][ T108] kthread+0x370/0x450 [ 184.834395][ T108] ? __pfx_kthread+0x10/0x10 [ 184.834411][ T108] ret_from_fork+0x72b/0xd50 [ 184.834431][ T108] ? __pfx_ret_from_fork+0x10/0x10 [ 184.834453][ T108] ? __switch_to+0x800/0x1100 [ 184.834476][ T108] ? __pfx_kthread+0x10/0x10 [ 184.834493][ T108] ret_from_fork_asm+0x1a/0x30 [ 184.834517][ T108] [ 187.762338][ T5958] Bluetooth: hci2: command 0x0406 tx timeout