last executing test programs: 12m0.783369469s ago: executing program 32 (id=421): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x48140) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) 10m3.983000102s ago: executing program 33 (id=2240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001e40)={0x6, 0x0, @ioapic={0x58000, 0x0, 0x80000000, 0x0, 0x0, [{0x4, 0x8, 0x87, '\x00', 0x81}, {0x4, 0x4, 0x0, '\x00', 0xc}, {0xff, 0x5, 0xff, '\x00', 0x11}, {0x2, 0x10, 0x1, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x1, 0x7, '\x00', 0x78}, {0xb, 0xe, 0x7, '\x00', 0x4e}, {0x3, 0x7, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0xd, 0x1, 0x1, '\x00', 0x2}, {0x7f, 0x9, 0xff, '\x00', 0x9d}, {0x6, 0x1, 0x22, '\x00', 0x7f}, {0x5, 0x6, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x33, '\x00', 0x9}, {0x8a, 0xb, 0x41, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x7, '\x00', 0xc}, {0x4, 0x0, 0x2, '\x00', 0x42}, {0xf2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x7}, {0x2, 0x8, 0x99, '\x00', 0x83}, {0x16, 0x46, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0x70}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000180)={0x4000, r5}, 0x0) landlock_restrict_self(r6, 0x2) landlock_restrict_self(r6, 0x0) sysfs$1(0x1, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000003c0)={0xc7, 0x0, 0x200000000}) r7 = eventfd2(0x81, 0x800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x0, r7}) 9m46.32714748s ago: executing program 34 (id=2445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 9m15.525513291s ago: executing program 4 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x44b, 0x0, 0xfffffffd, {0x7a}}, 0x20}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="d345a3d6fdaa27c2eb7578ee57e81b8c0ce654c16cd37b278cec1deb54c1164120e83843dd79560d577696450c5d6a93b93828047717b3293d929ddb2a94dac1058c8b7b493d31568009b78bba91d755f8923f8d1b5c1a60f98824bd820d6d29c98a9fcdd7dd1d03925776d1b8b6e12c7a873a5c5c5c57d0f6b3cdcd687dfd8d021d162aa3ffe2cdea2ecc39801736ce828728dff147359a42cb1045e261d4933a40739739604014cfe272c934a4f4c174985dd5d5032c91be148a606d512215ab5068f6a5b43ec8d56857eabd2728e50c5b5506103e8adf3cc865dbd6ddf6db0cfeeecbb72e8a2d") write$selinux_load(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="8cff7cf908"], 0x2000) 9m15.49183784s ago: executing program 4 (id=2833): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmmsg(r0, &(0x7f00000078c0)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x6, @loopback, 0x5}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a86ac59799a0eb361f04f00710", 0xd}, {&(0x7f0000000300)}, {&(0x7f0000000400)="1e5ae0eeb5c1af531d864206037a3a7c54f34b9ee2144c9abd1d0a40f851b1a915bb42d95e8572bde8b3c5db469d097635dd7cf152fde92e871e6b8fd898836e58f85e2b91d7ade1de21cf1653c19ee275ea1d5a519e", 0x56}], 0x3, &(0x7f0000000480)=[{0x1010, 0xff, 0x14000000, "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"}, {0x1010, 0x109, 0x4, "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"}, {0x48, 0x103, 0xfffffff7, "418c7f37a3ecc22ef1d4a975815395c406289bafcc216518e86ffe8762c807c717b4e05eaca1090cffe57bc7661265c494"}, {0x1010, 0x119, 0x5, "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"}, {0x80, 0x101, 0xc, "f4eb34aeff6c02ea3cfed70ebc4318b4c08ef5656c5721a3729314396eab2b1c72dae04a6ab95b4b2f021b0459244854e577c9cac4a2f6b61592cf942a69502d6467ed968ee8dd809e97e5044a1642a762b7647d41f6ffd5ee8a328400e0104015f6f971a3c0e8dbcd0b1ce52fa5878f"}, {0xe0, 0x10c, 0x3, "406b70341e208d43cb909c68f0256f91a7394d9f9adac7c8780662bef149392276f240017c921bfabba5d01732b6f33cb9a44884c667e22e97c6bb1774dc4dba4b5bb8542680d100db3f9d0a9d2bb614c1e286332aa3569639f6bf2031a2da9bb34fde81163afea3f2fff8a3a7a8c9201a5816feb28c3292d01dc5651ddb10ca69897e16e7cac3fdf03974dbd62d69d964aae3f6dd9671512a637712e1974508c2345e72a4a2be317cdd4ad0656ab4f1d6aaafb81554396d2b52dbe5b202ff5e29763d28c95846cf167a35eb6a"}, {0xe0, 0x108, 0x7, "109f4a78a2ade362d8fb681dff1f6848aa5f1b576d9f5e0ec950f6abf61fca15fccf97059faff8ba599d97bf292110f96299193f61bee6d9fc745a9e41e574ecaf6720520b13c7466535b7df5087c79480bf7c832cc81a702497509dec48173aec003faf33c4adab5f1c4088ca0a770fb96ea01619f3a465a35fe2268309053fd5899ef262d1ed48d0f0396496cea49bba3c55e46d84fe022611e5be0176f0d004f20303ad9f69977c503adb35c3026a87e1acf1de02cf98ea012976345e600d873cd8796e0cb2a56d2c"}, {0xff0, 0x10f, 0x7fff, "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"}, {0xa0, 0x111, 0x1, "a8542889ceceba6908290794ac564fa343e88d321aeddd5de63c9b56408f9f7547490b085bb8cd83e1e8df26827d9f1e95b77b235e11162c7b2cfc50a0019111dd5feb46465fb53f6bb17bc6c7bc8f6a80eaabdd903a415e2b06253e9c420f3e40787f55c3611bb3abed29ff7ca3a82c2393c4176ec0d176b73bc160adf834d9f2cab9ac020775d984ff78d6"}], 0x4348}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004800)="8f3f87a8b7de937da9d8fe3e50b3942834e40d53726a7ef904d67f9b19d1c36c8e086fa3e9f07ddc4054bb076f6dc2b142a8d1021d2619148a23737eec9f20ee7ddcc821fd2ef7076ccbe438e0d659b4d7734f2f35dc7604330efbf71b900430d681fbd223cce842d800c46afcbd2ef757761cb86d79c4ca4e076f174f6894b83afe7fa6d3e0a875ba1982ab37ca161dbae45fc69c84ee69533b4c8bc8a9dc0473fd25efa819030676974a7df7a8f37ba0", 0xb1}], 0x1, &(0x7f0000004900)=[{0x48, 0x3a, 0x3, "eb5a1f654de002b8c503230ab4f0393bca42c4069f40f1f37265813a5cd5d4e85cbdfeb02ace79f49e690fd1954566fadf35"}, {0xb8, 0x103, 0xc7, "d8cee3f6ac6bb1e3f8a70f355ca5df4ddab95a88ca39af9e67da136eb4f86169c62155be8dd631f71e880f97a34b77db238b707c881457940f0acd66e999cdf564821ff4445902f8023017f78966a838b3f1a6a9530f2c98ed0ff87ac0664619b2241a3b8cb7c497f01af7bf2fc84c485e1b110cd1774aebfbea02dbaf9ee21a3f521b75ebdd1918a63daec99a8c631a5959274018e3f99030bbbf5091fa8672b813e3"}, {0x78, 0x3a, 0x5, "04937c245774dff37d9dd8300dbcc1c9fc4a1c3268c55968f7515adc7d90914f3464fbb15b58e21b1186a7be7050bfe7c3a1616f2b9a78125d0f83db8bd16469cd89dc5d20c822a04ac82870f0be51ee2e588cabb1b70ad689f748bbf2a6aee4c8"}, {0x10, 0x3a, 0x6}, {0x10, 0x1}, {0xf8, 0x2a, 0x8, "96a0c092696a0a186f4907ab327276c7d9dccffd83b95a2354251e49ce53f98295aefa1440452e9f1a589ed80d785b15e3c8e02cc5abeb0d4bef7bfc75435ff8a62fade5793b1b51c86229b7920f1caf67726136b09e92c08ff149a3cd01bc5a984123e0a09e7cc4efa320f7a21fcff789e81f2eab93011ae5006a6e474ab2f41771df491c1002cad92aa95a14425c12705846758e919dc2f23389cec7bafd88fded1310eabfc1596d3d2b44ae0fa0f5bd6a88c665e1d05db50e8c2070037b63ae7fb0d1e12556a366b9b38339226d38cac5e6dee146969fb4ddb330fc2fa1a573f6"}], 0x290}}, {{&(0x7f0000005440)=@can, 0x80, &(0x7f00000066c0)=[{&(0x7f00000054c0)}, {&(0x7f0000005540)="e9c33d1a19c3e4d2e389e584905c978595901cffaa4c8e4e70052f639877d3d55a38b833f36b51fd2524f58c060cb9e014", 0x31}, {0x0}, {&(0x7f00000056c0)="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", 0x3f5}], 0x4}}], 0x3, 0x4000004) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0xf76}) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x234356c, 0x50313459, 0x2, 0x8, 0x4a, 0x2, 0x6, 0x1, 0x7, 0x0, 0x7}}) 9m15.415551453s ago: executing program 4 (id=2834): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000006a0081ebffffffffffff5df4fbce0502e0dfffff0e000a000e0000000224ec4dc2b20114664568a71802", 0x2e}], 0x1}, 0x48020) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 9m15.265500101s ago: executing program 4 (id=2835): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000692000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 3) 9m15.265245616s ago: executing program 4 (id=2836): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x44004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = syz_open_pts(r1, 0x40400) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000002c0)={0x5, 0x7, 0x2, 0x4, 0x100}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x200, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x200}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) fstat(r8, &(0x7f00000000c0)) 9m15.175493102s ago: executing program 4 (id=2837): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, r2, 0x1, 0x4000003, 0x0, {{}, {}, {0x5, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xfffffffb, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_settime(0x17, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000f7bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000003011ff00000000000000000000000000000000ff0200000000000000001dda000000014f194e2000309078a100000008199b5d44f4772a5ec5b31ceaa8d591cc7045c6a4a58376241d997b3465a7565691db01"], 0x6a) 9m0.144314245s ago: executing program 35 (id=2837): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, r2, 0x1, 0x4000003, 0x0, {{}, {}, {0x5, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xfffffffb, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_settime(0x17, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000f7bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000003011ff00000000000000000000000000000000ff0200000000000000001dda000000014f194e2000309078a100000008199b5d44f4772a5ec5b31ceaa8d591cc7045c6a4a58376241d997b3465a7565691db01"], 0x6a) 7m39.129267871s ago: executing program 6 (id=4214): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_bond\x00', [0x0, 0x0, 0x7ffffff4, 0x884e2, 0x2e, 0x2007, 0x5, 0x8, 0x80ffe, 0x1, 0x20000004, 0x4, 0x17, 0x1000004, 0xb, 0xffff, 0xffffffa8, 0xa, 0x1ff, 0x8, 0x10, 0x3fffe, 0x8, 0xe2df, 0x746f, 0xffff, 0x5, 0x7, 0x0, 0xffffffff, 0x10000]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x4000000000001cd, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) 7m38.859997268s ago: executing program 6 (id=4219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x8011) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x7, 0x6, 0x5) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xff00, @empty=0xff000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) mbind(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000000c0)=0x5, 0x7, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x80, 0x4) 7m38.638586257s ago: executing program 6 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8, 0x2) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000000380)="2301998b", 0x4}], 0x2) write$selinux_load(r6, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) (async, rerun: 32) write$selinux_load(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757844c73e60d22976c99d7f8aa7e3a830bee6feb0ebc9687f3af756da6390c7cc71e8c35eabca0fe254d1fd280ad75feb97a0aa7111666724493614a4355a27b7c7ea4bf184774deaafe1b681efa3120b6516de7ae77b58cd480d2e41c907e61368c4b312648f484763a6abc0a2f1c5bad75861aaa1b10f8473150dad9b100aa08e3ef86fb98e1fda5092aee1672e63e548e660cd34e7b02a84b42b1b5c947300"], 0xaf) (rerun: 32) 7m38.559655092s ago: executing program 6 (id=4226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) ioperm(0x0, 0x7fff, 0x15f9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, r2, 0x705, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaab}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x40894) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg$can_raw(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000cc0)=""/53, 0x35}, {&(0x7f0000000d00)=""/22, 0x16}], 0x2}, 0x60) 7m38.500113807s ago: executing program 6 (id=4227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000002200)={0x0, 0x110, &(0x7f0000002040)=[{&(0x7f0000000cc0)=""/53, 0x35}, {&(0x7f0000000d00)=""/22, 0x16}], 0x2}, 0x60) 7m38.38971386s ago: executing program 6 (id=4230): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7bfe, 0x3ffb, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r2], 0x0, 0x26, 0x0, 0x1}, 0x28) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x10000) write$sndseq(r6, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @time={0x4, 0x8}, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0xfe, 0x43, 0x0, 0x4, @time={0x83}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x104, 0x4c8}}], 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3}}}}}}}, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r7, @ANYBLOB="1f003300d000000008021100000108021123b7fbf15b7ba8d01cb3d0", @ANYRES8=r1], 0x3c}}, 0x40010) socket$inet(0x2, 0x0, 0x2) 7m38.333325416s ago: executing program 36 (id=4230): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7bfe, 0x3ffb, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r2], 0x0, 0x26, 0x0, 0x1}, 0x28) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x10000) write$sndseq(r6, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @time={0x4, 0x8}, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0xfe, 0x43, 0x0, 0x4, @time={0x83}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x104, 0x4c8}}], 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3}}}}}}}, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r7, @ANYBLOB="1f003300d000000008021100000108021123b7fbf15b7ba8d01cb3d0", @ANYRES8=r1], 0x3c}}, 0x40010) socket$inet(0x2, 0x0, 0x2) 7m26.059422s ago: executing program 7 (id=4546): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x2, 0x2, 0x2}}]}, 0x40}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2010, 0xcd02e5b54e96c93}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x880) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10) 7m26.000225374s ago: executing program 7 (id=4549): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="24000000253b190122bd7008f9f7ffff0200f8a646d70f2bf68322800807000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000700)={0xed, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) 7m25.939570958s ago: executing program 7 (id=4550): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xd5}], 0x1}, 0x8000) 7m25.935551255s ago: executing program 7 (id=4553): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x28000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000028000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 7m25.810173119s ago: executing program 7 (id=4559): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f0000000300)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r6, 0x0, 0x0, 0x800, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) splice(r8, 0x0, r9, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYBLOB='\"\x00\x00\x00\f \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c6fa7a99839d2d45827e821b79d42bfee97556d9c71c8a63092cfeaab2d414ed5d3f3c82debe4191efb22b83bff178f1884022e5eb98a9858a191dd4c9a0dcef47249fe90b3bfd1f322b358ba9231065bd089d3fe12f8d48d3f8c27d151794c1d07ba28145fec3b91fe2e21a", @ANYRES64=r7], 0x20) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[&(0x7f00000001c0)='name', &(0x7f0000000200)='+\x00']}) socket$unix(0x1, 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x88) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r11, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) mkdir(&(0x7f0000000280)='./file1\x00', 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(r10, 0x4068aea3, &(0x7f0000000080)={0xd5, 0x0, 0x13}) 7m24.90087109s ago: executing program 7 (id=4576): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x28000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe800000000000003c000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 7m9.894420524s ago: executing program 37 (id=4576): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x28000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe800000000000003c000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 2m4.871227818s ago: executing program 3 (id=10447): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001000000026c00004100000000000000", @ANYRES32, @ANYBLOB="000000000000003b8c00009378ffab11e0e9c800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@struct={0x7, 0x8, 0x0, 0x4, 0x0, 0x7, [{0xd, 0x4, 0x45}, {0x6, 0x3, 0x89f2}, {0x8, 0x1, 0x1}, {0x9, 0x3, 0xff}, {0x5, 0x2, 0x5}, {0x9, 0x1, 0x3}, {0x9, 0x0, 0x5}, {0xf, 0x3, 0xff}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x2e, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f00000000c0)=""/83, 0x8f, 0x53, 0x1, 0xffff}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x0, 0x0, '\x00', r2, 0x0, r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) 2m4.740513285s ago: executing program 3 (id=10449): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r3, 0xffffffffffffffff, 0x0) close$binfmt(r2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$setperm(0x5, r6, 0x100000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000019000/0x400000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 2m3.900483703s ago: executing program 3 (id=10463): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000fa1d005f80004000000000000002000000fc000000564a3957947229aa000008000800", 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44081}, 0x4002000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c"], 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) write$sysctl(r7, &(0x7f0000000080)='4\x00', 0x2) 2m3.270051316s ago: executing program 3 (id=10467): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) poll(&(0x7f00000000c0)=[{r2, 0xb1b8}, {0xffffffffffffffff, 0xa9}], 0x2, 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000280)=[@request_death={0x400c6313}, @decrefs], 0x0, 0x1000000, 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 2m3.22086799s ago: executing program 3 (id=10470): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ca069352fde453bc442dc4b0c9819a34", 0xffffffffffffff33}], 0x1) 2m2.971391141s ago: executing program 3 (id=10474): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x22048004, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1, 0xa996}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m2.860835932s ago: executing program 38 (id=10474): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x22048004, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1, 0xa996}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m8.71825049s ago: executing program 8 (id=11050): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r3, 0x79f, &(0x7f00000000c0)=0x10000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e20, 0x9, @local, 0x5}, @in={0x2, 0x4e24, @remote}], 0x78) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x0, 0x4, @status={[0x2, 0x6, 0x5, 0x5, 0x8, 0x5]}, [0x4, 0xffffffff, 0x8, 0xd, 0xfffffffffffffffa, 0xc, 0x41d, 0x1, 0x3, 0x30, 0x1, 0x9, 0x3, 0x1, 0xfffffffffffffff8, 0x6, 0x2, 0x6, 0x6, 0xe000, 0x1, 0x1, 0x3, 0x5, 0x5, 0x0, 0xfffffffffffff6dc, 0x8, 0x8, 0x7f, 0xffffffff7fffffff, 0x28, 0xffffffffffffffff, 0x6, 0x3, 0x6, 0x7, 0x401, 0x6, 0xff, 0x7fffffffffffffff, 0x9, 0x6, 0x6, 0x2, 0x9, 0x1, 0x4, 0xfffffffffffffffb, 0xffffffff, 0x6, 0xfff, 0x7, 0x5, 0x8, 0x81, 0x3, 0x5, 0x3, 0x8, 0x100, 0x40, 0x1, 0x9]}) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400000, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x1b) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$sock(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000c00)="21e78c3fc84c484094239650e2d45edab0b7aadf0c25b1b4969e9d8d16ecc50fce8fb3ca4c6f78e0ba2fe3689b1c8d1f34d76a77a5a93eb7476307ee12dab45ea8cce861834fe8f2a9d8e28eb2cdec08f3cfca3f305b8d6833d9d654333e6436481623fea7dac9fb6389739a83b39b16f0c650b6ed46d94b4d550fb7db8cdee051680c7154b46126069d2488e1f26808cd28cb784da9e127dd1f3fe0f0fa75adea1cdc18", 0xa4}, {&(0x7f0000000cc0)="bafb339b36edec634e9faaf11b2f6028e2f8daffbc9651fcfdaa437013668ddb02060b8ecfc39bacb47bd768", 0x2c}, {&(0x7f0000000d00)="c527bfc85e72848ebc322d", 0xb}, {&(0x7f0000000d40)="0b12ef750f80ffd03f0baaf62d4568244cf1a668d1d32141537eb4432a2d2b86973e43da655ff0f8d772976b2162e248d039ca2819ceec", 0x37}, {&(0x7f0000000d80)="b1648d6bd245e62c244d18702f4deaf77297e8b3a916", 0x16}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="4f748bf8e566c036b2c4fc1f1da2bec167e8918df1c38219f5368c5f4d17042a9e2d2f079407e126c974b17b306d8d344c7aef940f3ab2c316fe961ca572604eecee92d03458f0970dee6d64566a0158716a69091670b6afc89b2831276753a34367adb2a2247423e1c980b21f9ad3893641", 0x72}], 0x7, &(0x7f0000001ec0)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x20000094) (async) read$FUSE(r5, &(0x7f0000001f80)={0x2020}, 0x2020) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003fc0)) (async) r7 = syz_open_dev$cec(&(0x7f0000004000), 0x0, 0x0) pwritev(r7, &(0x7f00000040c0)=[{&(0x7f0000004040)="b6e8cfe11b0d05b15716996fb5b9695659c0ca71980467c551ebf3eca60f681c261d0e77357c56e7a17f5b43f49dc4a86edcdc9e322be7c49109ba2865864ed2db", 0x41}], 0x1, 0x100, 0xf) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000004100)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000004140)={0x8, 0x8, 0x40, 0x3, 0x200}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004180), 0x402001, 0x0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000041c0)={0x9, 0xf9}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000045c0)={&(0x7f0000004200)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x941}, 0x1c, &(0x7f0000004440)=[{&(0x7f0000004240)="60c8e7bfb0c86051a0d0dbc19ddcb6a3770de891037bf3b396ac54caf056da962f5ca5d177d2c10e185c1f7bcf7daebc5316f57857979dd4c0f4519a9a1becae69b5fe809b75039a9b72d5183722a729c3e418b839c7122366478310e728516264577383689fb2724228db26a8b157229f92d1c80632ea487a0b6b230ff3852fa0224a831477b568d9d5c9161f1f00255db33bde1f45b8604b5201962b2296805334a48ef03ebc285ccddaea5ed9bd4315b6654663c31c1ef6716909913c", 0xbe}, {&(0x7f0000004300)="a76f147caef78cc6840e9cf7f620a94ea0a65189c20d6cdec59f6d2f460b48761ef3d97166423e9a9c05e8d7e2d0cc1777585faa289120f8e0f800", 0x3b}, {&(0x7f0000004340)="5fd9538aceb6914d8e70c25fd41317658e87fcf018e7181b0494077e8e64c151d985408d", 0x24}, {&(0x7f0000004380)="4e7cead7860bb52947553a67744e57c14b6586b5aba8722b8255c41fb98eb4cbffda272e3f24fe4b63604b73e0edf0a6332c3ee056efc98ba161f89597d255d1fb5ac69b3d0f30a794399c41e6e7057577a86c1af563c0ce806263557ba0a9213feff9d1220492c5acef86f9e314f4ad7c1d2e2bc0bd02c52f684283d04a5554c10e48edd15dda20c05a29c211802c226aa3eceed79512c3600c15f06491", 0x9e}], 0x4, &(0x7f0000004480)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x5e, 0x15, '\x00', [@generic={0x5, 0x86, "8c42308bd6ec00c0e4c3093cf3336dcc72b6eb57b81da4e00d56ce8efd088ccf22e1c007d1ceb2960680f1e90b7fc89272a370cfa879389b212958b373faa2bdb8866efa1be4818650baec70933f9f2e29be2ac0167d6c2a7f29cd3cccb6158adb3af7e7712d7fe0daeaca57d0f12be7d3dd0ac428333391b551f7d3fc19a1f3cc7f2f186fe1"}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x120}, 0x20004040) (async) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000004600)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000004640)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000004680)={0x3, 0x1, 0x1, 0x2, 0xc, 0x5}) (async) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004700), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000004840)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004740)={0xa8, r8, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x7ff, 0x7f, 0x81a8, 0x76}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x81, 0x8, 0x6, 0x1, 0x3, 0x5, 0x6, 0x35b4, 0xfff9, 0x100, 0xfffa, 0x3, 0x0, 0xfc, 0x1, 0xf04]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_SSID={0x7, 0x34, @random="e16330"}, @NL80211_ATTR_FILS_KEK={0x25, 0xf2, "7886af07996a245e12b3fc6a43a3cd2f8446fe058279a59f1650541805ee3ba584"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async, rerun: 32) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000048c0), r5) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x1c, r9, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0xa000) 1m8.660450076s ago: executing program 8 (id=11051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000703667726500000c0002807e46ddca35203efe06000200001000000000000000000000003b00b59f9a0e701931420b2caa7e66832f6d5c44ad927672f2db8ba598300cf08983b03804178c2320f0ec09960637e9156e"], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') preadv(r1, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x10) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/40, 0x28}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f00000006c0)=""/169, 0xa9}], 0xa) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) 1m8.659448383s ago: executing program 8 (id=11052): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0xc, 0xb, 0x8, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1m8.580795448s ago: executing program 8 (id=11053): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04820404"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x20, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sync() syz_clone(0x1009800, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 1m8.500154466s ago: executing program 8 (id=11054): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e1e, 0x3, 'sh\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) write$char_usb(r2, &(0x7f00000000c0)='V', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000780)=ANY=[], 0x80, 0x3) sendmmsg$inet(r1, &(0x7f0000007ac0), 0x0, 0x20000010) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card3/oss_mixer\x00', 0x400400, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) read$proc_mixer(r6, &(0x7f00000000c0)=""/250, 0xfa) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000200)={0x0, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="c99d0368d79f876ad6f299d02b89ff3d54d489b867a92ec4fe6d9e4afbd8cbca7d97287c009f66574412ec3a04264d44313b0d8f0f0f24c9cc24d13570ec94b3451ff450f59c311327737002e4a3a7b12543a35a035efd3a5989ef2c07aea8cf1b8fd3c320ec26e59c3a4b58c803197cd48b34a75f10d8877128865d9e9877a506dbc0ab39c3b4d2f8d5195174b0ce9cde4e6c057280c257475342ed1549ba1d34e5cf9f31b8a983f6f6ad7cd81d1b0e7cdba2563311eb0ab91f", 0xba}, {&(0x7f0000000440)="3b1b9f993928bb5ffce6", 0xa}, {&(0x7f0000000480)="5099ff2868d738545c968897f5c129a78919659d4c6fff0181fffcc269730cb17eaf4f953a2133339656d411bb58dbe29828044c937ab79881", 0x39}, {&(0x7f00000004c0)="0d207afe1356f3d83318c2ba0e6d5089efc5cee2120a7a34b59875713d5414fc43db4fedcfcea35434f1f8d4afc63c783cb0813dc3883cecbaefb1e1ce90a0e96c83", 0x42}, {&(0x7f0000000540)="37350045c70c5548c522834776745b54106ced7cf9b951cc3684a21a2984f09e3a64a603e65dcb817ef4acc9af59efd3bb9deb75ec0a5e0fbb9f", 0x3a}], 0x5, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}, 0x80) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'sh\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x4, 0x3, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m8.221019108s ago: executing program 8 (id=11055): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) r1 = socket$inet6(0xa, 0x1, 0x100) listen(r1, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000040)=0xfc, 0x4) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m8.163365947s ago: executing program 39 (id=11055): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) r1 = socket$inet6(0xa, 0x1, 0x100) listen(r1, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000040)=0xfc, 0x4) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 50.689552069s ago: executing program 1 (id=11300): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) (async) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) shutdown(r0, 0x0) (async) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 50.640305245s ago: executing program 1 (id=11303): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="67660f3a44c5000f20d835080000000f22d8470f01ca440f20c03508000000440f22c00f01cb67f2420f2adb420f078f8860cc318266baf80cb8d2e12484ef66bafc0c66b8be9f66ef660f38826a0e", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 50.580787618s ago: executing program 1 (id=11305): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00'], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x1800) 50.530198412s ago: executing program 1 (id=11306): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1}) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x20, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000340)={0x1, 0xe85ad5ace8add910, "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"}) 50.529978729s ago: executing program 1 (id=11307): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') (async) unlink(&(0x7f0000000040)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) mount$9p_unix(&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1008000, &(0x7f0000000400)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x7fffffff}}, {@noxattr}, {@access_user}, {@uname={'uname', 0x3d, '-['}}, {@directio}, {@afid={'afid', 0x3d, 0x34e7}}, {@loose}, {@version_9p2000}], [{@fsuuid={'fsuuid', 0x3d, {[0xcf, 0x32, 0x63, 0x36, 0x30, 0x34, 0x37, 0x63], 0x2d, [0x32, 0x5b, 0x31, 0x37], 0x2d, [0x64, 0x32, 0x61, 0x64], 0x2d, [0x30, 0x30, 0x34, 0x63], 0x2d, [0x33, 0x66, 0x35, 0x38, 0x34, 0x38, 0x30, 0x30]}}}, {@subj_type={'subj_type', 0x3d, ']+}+[\\^'}}, {@context={'context', 0x3d, 'system_u'}}]}}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) r1 = open(&(0x7f0000000500)='./file2/file0\x00', 0x414000, 0x130) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000540)) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000540)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r2, &(0x7f0000000300)) madvise(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x19) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) (async) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001900), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) 50.380348001s ago: executing program 1 (id=11309): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x3) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x100000) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x301a}) 34.79140347s ago: executing program 40 (id=11309): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x3) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x100000) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x301a}) 17.188114804s ago: executing program 9 (id=11739): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (rerun: 32) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf250c0001000400038020000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4048851}, 0x8080) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') write(r10, &(0x7f00000020c0)="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", 0x1000) (async, rerun: 32) read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) (rerun: 32) 14.169640055s ago: executing program 9 (id=11787): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x4000, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 11.079997895s ago: executing program 9 (id=11824): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x0, r2}) 8.005941388s ago: executing program 9 (id=11881): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000000)={@host, 0x9}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@host, 0x1ff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x3c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x12, 0x14, 0x0, 0x1, [@generic="b02bd329b02082e8700f7ff46b48"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_io_uring_setup(0x1d66, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0x1ff, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x5, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x2008, 0x8, 0x9a, 0x0, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.989728376s ago: executing program 9 (id=11896): r0 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0ca4a02786"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7bc99db813"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000085}, 0x20004040) 2.010369192s ago: executing program 5 (id=11968): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x44, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 2.007782885s ago: executing program 5 (id=11969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x0, r2}) (fail_nth: 1) 1.909435562s ago: executing program 9 (id=11970): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0x200000, 0x0) ioctl$BSG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x105, 0x40009975, r8, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0xffffffdf, &(0x7f0000000000), 0x2}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r3}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) lstat(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r11, 0xffffffff80000800, r12, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x2000200000a95c, 0x2000000000000009, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffb, 0x7}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x6, r2}) r13 = semget$private(0x0, 0x6, 0x3b1) semop(r13, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) syz_create_resource$binfmt(&(0x7f00000001c0)='./file1/file0\x00') name_to_handle_at(r11, &(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@xfs_parent={0x1c, 0x82, {0x6, 0x2, 0x3, 0x8}}, &(0x7f0000000480), 0x400) 1.839846716s ago: executing program 5 (id=11972): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="181184559a15890000000300000000000000080000009500cea00be36d1247b13dc08c7c35a8e422b7"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x5303, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="7aacb863271af689ada4a7c3c951e934baa0f2f1e796e469639af6b042f499fb94e4f8dbe015e63b880df8e5c9be7bedbd2abb7cc2aad25e256a0ceeff24ebe76e9c309485211bfda9bb87f4077fc767bda20a8c3781094619d942388cc85ef0f5b662eb002d62687953b38462e34133c7179a9efeb90d36e3ddeb2ba69e9c9105857619a9723a6470020d34b905f2f482e71328d1ba805812e7118fb94fd2149cecc6ca50c290c4d9f4a3a4dd", 0xad) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', './file0', [{0x20, './binderfs/binder0\x00'}], 0xa, "9ff0d8aaa0901581068fffeca6c1c4920642cfb153c7f02d6834a1abb40edc7bed11553e995829bac7619469757b97b790fe4a79d3411ce746697f225cf6b192718ae68f69f75ab418b2738e95ec840928df9b2844ef12b7ac687e755e15d639ea3e274c8703fb09e6dbe21c23c576250678491d"}, 0x93) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.720161385s ago: executing program 5 (id=11974): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x82a00) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000640), 0x0, 0x1, 0x0, 0x0, r2}) 1.658968577s ago: executing program 5 (id=11976): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') preadv(r0, &(0x7f0000000440), 0x0, 0x6, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x70000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @pix_mp={0x9, 0x1, 0x35303553, 0x9, 0x3, [{0xff, 0x4}, {0x4, 0x3}, {0xc, 0x8}, {0x9, 0x7}, {0x100, 0x5ed}, {0x2}, {0x8, 0xffffff83}, {0x2, 0x8}], 0x8, 0xe, 0x3, 0x0, 0x6}}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0xbb80, 0xfffffffffffffffe, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x4008af25, &(0x7f0000000080)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.547731239s ago: executing program 5 (id=11979): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="746172676574205043499467da2cda11103c390017b0022c9f87711035e94299441342b248e968516252424ee18b2f05c47985a4a468dba6dca3d182bdab7e25bd82cfe7c62ae37a52ca1fe8420da265b54187b1ce9721e8b29d0cff7f41b8d41d6e41a56802698f248af623786ca292b21325aaac6a90679c418997d77f1d0360423c0065e0df08b392687859e6820defa60a219c5e772c6967273b7039d0ac4df543aa29c4807b2f50655df549b6ba85c59d523caa5e5ea1888fd02f9957217ad077ec930d9e9d05a7b20715174e0b43a9133a"], 0x14) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44a}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x10, "4755eed406e28c65d3c9e5c55d808e2c"}, &(0x7f0000000140)=0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x43, 0xa0, 0xe8, 0x98, 0x198, 0x178, 0x178, 0x198, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc8, 0xe8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x429, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452200a44a3d28da04828d1768c081f126a6bb82700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x6, &(0x7f0000000300)={0x0, 0xd, 0x1}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {r7, r8+60000000}}, &(0x7f0000000440)) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) r10 = msgget$private(0x0, 0x790) msgsnd(r10, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x400, 0x0) msgsnd(r10, &(0x7f0000001a40)=ANY=[], 0x401, 0x0) msgsnd(r10, &(0x7f00000002c0)={0x2}, 0x8, 0x0) msgrcv(r10, 0x0, 0x0, 0x0, 0x1800) msgsnd(r10, &(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x400, 0x0) 1.409649234s ago: executing program 0 (id=11981): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) r3 = socket$kcm(0x2, 0x1, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, @time_exceeded={0x2b, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 1.407947851s ago: executing program 0 (id=11983): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x143f02, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130725bd7000fedbdf24640101010000000000000100000000000000000001000000004e2100020a0000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) getgroups(0x2, &(0x7f0000000840)=[0xee01, 0xffffffffffffffff]) setresgid(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0x4, 0x6}, 0x6) setregid(0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd1406000f000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendfile(r0, r1, &(0x7f0000000040), 0x1ff) sendfile(r0, r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000000080)=0x800, 0x9) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0x6, 0xdb1}, &(0x7f00000004c0)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x20040800) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)=@multiplanar_mmap={0x2, 0x0, 0x4, 0x4, 0xdd, {0x0, 0xea60}, {0x1, 0xc, 0x5, 0xe6, 0x5, 0xb7, "cea7aebf"}, 0x400, 0x1, {&(0x7f00000000c0)=[{0x3, 0x40, {0x9}, 0x1}, {0xdf, 0xe, {}, 0x7f}]}, 0x4, 0x0, r5}) 1.330261245s ago: executing program 0 (id=11984): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x82a00) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000640), 0x0, 0x1, 0x0, 0x0, r1}) 1.268866785s ago: executing program 0 (id=11985): syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xad4f, 0x400, 0x1, 0x333}, 0x0, 0x0) 1.268707616s ago: executing program 0 (id=11986): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x64, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 1.19900815s ago: executing program 0 (id=11987): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100be1ebce7396ae07a01fb3b72022788143234e559404f50e9a099ed309df20000000040"], 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 159.430464ms ago: executing program 2 (id=11999): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x14, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) getrlimit(0x5, &(0x7f0000000000)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r1, &(0x7f00000000c0), 0x300, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 159.228436ms ago: executing program 2 (id=12000): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0xa7, &(0x7f0000000140)="2f9dd58b8d686976d409cb1ab64ae10197f6ab977972566ce0d50d98a2963f55f6abd8e3068bf22e7d93ee52bc369888f5321af5469a3086be5875487b193d2e87a21abb386f3699227bc3104a20748763bf0df2c88ed0a0485cceca159b44a336fb57486ef332c23305cf7ce632aae78bc5b38609bf15ae013515fd688b946bcfc453950dd5e14ddfbcf3011147753fdca8f6268271bc188f9b256ba6d1b6281f38e05f0fa494"}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = userfaultfd(0x801) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r7 = userfaultfd(0x80000) ioctl$UFFDIO_CONTINUE(r7, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000cb0000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000200)={@private, @private, @broadcast}, &(0x7f0000000240)=0xc) 79.934283ms ago: executing program 2 (id=12001): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000110001000000000000000063b38006cbee3dcc7ff044db75e70a21000000002a615c92227e7898c096"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) epoll_create(0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r5], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 76.025504ms ago: executing program 2 (id=12002): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x82a00) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000640), 0x0, 0x1, 0x0, 0x0, r1}) 261.95µs ago: executing program 2 (id=12003): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4000080) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r1}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"], 0x50) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 0s ago: executing program 2 (id=12004): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000000)={@host, 0x9}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@host, 0x1ff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x3c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x12, 0x14, 0x0, 0x1, [@generic="b02bd329b02082e8700f7ff46b48"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_io_uring_setup(0x1d66, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0x1ff, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x5, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x2008, 0x8, 0x9a, 0x0, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 0s ago: executing program 2 (id=12005): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}]}) kernel console output (not intermixed with test programs): ][ T6004] vlan2: entered promiscuous mode [ 747.303017][ T6004] vlan2: entered allmulticast mode [ 747.304661][ T6004] hsr_slave_1: entered allmulticast mode [ 747.344492][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.350906][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.442527][ T5972] team0: Port device team_slave_0 added [ 747.452809][ T5972] team0: Port device team_slave_1 added [ 747.465482][T11780] bridge_slave_1: left allmulticast mode [ 747.468663][T11780] bridge_slave_1: left promiscuous mode [ 747.472584][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.477881][T11780] bridge_slave_0: left allmulticast mode [ 747.480336][T11780] bridge_slave_0: left promiscuous mode [ 747.482875][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.692923][T11780] gretap0 (unregistering): left promiscuous mode [ 747.957866][ T842] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 748.023902][T11780] bond0 (unregistering): left promiscuous mode [ 748.026607][T11780] bond_slave_0: left promiscuous mode [ 748.029905][T11780] bond_slave_1: left promiscuous mode [ 748.034593][T11780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.041953][T11780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.048220][T11780] bond0 (unregistering): Released all slaves [ 748.054950][T11780] bond1 (unregistering): Released all slaves [ 748.126357][ T842] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 748.130849][ T842] usb 6-1: config 171 has 0 interfaces, different from the descriptor's value: 1 [ 748.136902][ T842] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 748.140891][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.144268][ T842] usb 6-1: Product: syz [ 748.146011][ T842] usb 6-1: Manufacturer: syz [ 748.148200][ T842] usb 6-1: SerialNumber: syz [ 748.235736][T11780] bond2 (unregistering): Released all slaves [ 748.414618][T11780] bond3 (unregistering): Released all slaves [ 748.425360][T11780] bond4 (unregistering): Released all slaves [ 748.502647][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.505205][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.513817][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.518341][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.520515][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.529193][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.547633][T13644] usb 6-1: USB disconnect, device number 97 [ 748.581675][T11780] IPVS: stopping backup sync thread 5595 ... [ 748.596924][ T5972] hsr_slave_0: entered promiscuous mode [ 748.597000][ T6046] __nla_validate_parse: 3 callbacks suppressed [ 748.597011][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11076'. [ 748.602554][ T5972] hsr_slave_1: entered promiscuous mode [ 748.607826][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 748.610236][ T5972] Cannot create hsr debugfs directory [ 748.914372][T11780] veth0: left promiscuous mode [ 748.926661][T11780] hsr_slave_0: left promiscuous mode [ 748.930752][T11780] hsr_slave_1: left promiscuous mode [ 748.933781][T11780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.936850][T11780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.942731][T11780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.946002][T11780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.965148][T11780] veth1_macvtap: left promiscuous mode [ 748.969467][T11780] veth0_macvtap: left promiscuous mode [ 748.971970][T11780] veth1_vlan: left promiscuous mode [ 748.974228][T11780] veth0_vlan: left promiscuous mode [ 748.997326][T27762] Bluetooth: hci0: command tx timeout [ 749.068568][T11780] pim6reg (unregistering): left allmulticast mode [ 749.072453][ T6071] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11084'. [ 749.075488][ T6071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11084'. [ 749.147933][ T6073] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 749.652511][T11780] team0 (unregistering): Port device team_slave_1 removed [ 749.696665][T11780] team0 (unregistering): Port device team_slave_0 removed [ 750.280329][ T6091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3952632679 (7905265358 ns) > initial count (3639679846 ns). Using initial count to start timer. [ 750.292199][ T6091] kvm: kvm [6090]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 750.295670][ T6091] kvm: kvm [6090]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 750.474168][T11780] IPVS: stop unused estimator thread 0... [ 750.570686][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 750.570705][ T40] audit: type=1400 audit(2000000137.649:91638): avc: denied { read write } for pid=6112 comm="syz.0.11090" name="video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 750.586755][ T40] audit: type=1400 audit(2000000137.649:91639): avc: denied { open } for pid=6112 comm="syz.0.11090" path="/dev/video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 750.599602][ T40] audit: type=1400 audit(2000000137.659:91640): avc: denied { ioctl } for pid=6112 comm="syz.0.11090" path="/dev/video5" dev="devtmpfs" ino=962 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 750.625192][ T40] audit: type=1400 audit(2000000137.679:91641): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44528 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 750.637815][ T40] audit: type=1400 audit(2000000137.719:91642): avc: denied { open } for pid=6112 comm="syz.0.11090" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 750.648085][ T5972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 750.650322][ T40] audit: type=1400 audit(2000000137.719:91643): avc: denied { create } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.660329][ T40] audit: type=1400 audit(2000000137.719:91644): avc: denied { write } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.663662][ T5972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 750.670637][ T40] audit: type=1400 audit(2000000137.719:91645): avc: denied { read } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.684598][ T40] audit: type=1400 audit(2000000137.739:91646): avc: denied { ioctl } for pid=6112 comm="syz.0.11090" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x4b66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 750.685098][ T5972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 750.702956][ T40] audit: type=1400 audit(2000000137.749:91647): avc: denied { search } for pid=6115 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.703954][ T5972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 750.731156][ T6119] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 750.780217][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.800267][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.808518][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.810782][T11773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.820997][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.824119][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.948073][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.987375][ T5972] veth0_vlan: entered promiscuous mode [ 751.004535][ T5972] veth1_vlan: entered promiscuous mode [ 751.025688][ T5972] veth0_macvtap: entered promiscuous mode [ 751.033512][ T5972] veth1_macvtap: entered promiscuous mode [ 751.044589][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.056875][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.072008][T11773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.077267][T27762] Bluetooth: hci0: command tx timeout [ 751.080687][T11791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.084701][T11791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.098687][ T6148] veth1_to_team: entered promiscuous mode [ 751.102928][T11791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.170729][T11773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.175646][T11773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.206942][T11773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.213071][T11773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.300806][ T6147] veth1_to_team: left promiscuous mode [ 751.423219][ T6167] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11095'. [ 751.522130][ T6175] cgroup: release_agent respecified [ 752.203918][ T6214] netlink: 116 bytes leftover after parsing attributes in process `syz.2.11105'. [ 752.323897][ T6224] overlayfs: cannot append lower layer [ 752.438232][ T6236] netlink: 'syz.1.11110': attribute type 11 has an invalid length. [ 752.451863][ T6236] openvswitch: netlink: IP tunnel TTL not specified. [ 752.512748][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11112'. [ 752.568081][ T6243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 752.573700][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11112'. [ 752.574174][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11115'. [ 752.586773][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11115'. [ 752.598541][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11115'. [ 752.762064][ T6275] Bluetooth: MGMT ver 1.23 [ 752.766883][ T6275] delete_channel: no stack [ 752.984798][ T6296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6296 comm=syz.1.11126 [ 753.102110][ T6310] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 753.147373][T27762] Bluetooth: hci0: command tx timeout [ 753.208242][ T6315] netlink: 'syz.2.11130': attribute type 4 has an invalid length. [ 753.216566][ T6315] .`: renamed from bond0 (while UP) [ 753.297258][T13644] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 753.324563][T27762] Bluetooth: hci0: ACL packet too small [ 753.324927][ T6320] overlayfs: failed to resolve './file0/file1': -2 [ 753.471114][T13644] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 753.475842][T13644] usb 6-1: config 171 has 0 interfaces, different from the descriptor's value: 1 [ 753.482119][T13644] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 753.485947][T13644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.491254][T13644] usb 6-1: Product: syz [ 753.493158][T13644] usb 6-1: Manufacturer: syz [ 753.495244][T13644] usb 6-1: SerialNumber: syz [ 753.706503][T13644] usb 6-1: USB disconnect, device number 98 [ 753.894372][ T6341] syzkaller0: entered promiscuous mode [ 753.896167][ T6341] syzkaller0: entered allmulticast mode [ 754.274912][ T6365] __nla_validate_parse: 9 callbacks suppressed [ 754.274930][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11145'. [ 754.437660][ T6371] veth0_to_team: entered promiscuous mode [ 754.441909][ T6371] gretap0: entered promiscuous mode [ 754.446916][ T6371] debugfs: 'hsr1' already exists in 'hsr' [ 754.450171][ T6371] Cannot create hsr debugfs directory [ 754.540262][ T5148] hid_parser_main: 73 callbacks suppressed [ 754.540282][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.546735][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.550309][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.554083][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.558418][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.561806][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.569682][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.572716][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.575642][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.578755][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: unknown main item tag 0x0 [ 754.584277][ T5148] hid-generic 0003:0004:FFFFFFF9.000E: hidraw1: USB HID v0.00 Device [syz1] on syz1 [ 754.633904][ T6389] fido_id[6389]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 754.681352][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11154'. [ 754.836069][ T6403] netlink: 'syz.2.11158': attribute type 1 has an invalid length. [ 754.839448][T25502] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 754.842159][ T6403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11158'. [ 754.852581][ T6403] pimreg: tun_chr_ioctl cmd 1074025675 [ 754.854964][ T6403] pimreg: persist enabled [ 755.028251][T25502] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 755.032614][T25502] usb 6-1: config 171 has 0 interfaces, different from the descriptor's value: 1 [ 755.047439][T25502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 755.051231][T25502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.054673][T25502] usb 6-1: Product: syz [ 755.056387][T25502] usb 6-1: Manufacturer: syz [ 755.058994][T25502] usb 6-1: SerialNumber: syz [ 755.184249][ T6411] netlink: 'syz.2.11160': attribute type 1 has an invalid length. [ 755.186735][ T6411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11160'. [ 755.191091][ T6411] ip6t_rpfilter: unknown options [ 755.227285][T27762] Bluetooth: hci0: command tx timeout [ 755.266587][T29090] usb 6-1: USB disconnect, device number 99 [ 755.336894][ T6421] program syz.2.11164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.645858][ T40] kauditd_printk_skb: 408 callbacks suppressed [ 755.645873][ T40] audit: type=1400 audit(2000000142.719:92056): avc: denied { ioctl } for pid=6433 comm="syz.2.11170" path="socket:[225022]" dev="sockfs" ino=225022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 755.664525][ T40] audit: type=1400 audit(2000000142.719:92057): avc: denied { module_request } for pid=6433 comm="syz.2.11170" kmod="netdev-wpan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 755.672011][ T40] audit: type=1400 audit(2000000142.719:92058): avc: denied { sys_module } for pid=6433 comm="syz.2.11170" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 755.683559][ T40] audit: type=1400 audit(2000000142.759:92059): avc: denied { read write } for pid=5972 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.692232][ T40] audit: type=1400 audit(2000000142.759:92060): avc: denied { open } for pid=5972 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.701773][ T40] audit: type=1400 audit(2000000142.759:92061): avc: denied { ioctl } for pid=5972 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.712735][ T40] audit: type=1400 audit(2000000142.779:92062): avc: denied { name_bind } for pid=6440 comm="syz.2.11171" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 755.720130][ T40] audit: type=1400 audit(2000000142.789:92063): avc: denied { create } for pid=6440 comm="syz.2.11171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.728512][ T40] audit: type=1400 audit(2000000142.789:92064): avc: denied { setopt } for pid=6440 comm="syz.2.11171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.741868][ T40] audit: type=1400 audit(2000000142.789:92065): avc: denied { read write } for pid=6440 comm="syz.2.11171" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 755.856523][ T6451] usb usb8: usbfs: process 6451 (syz.1.11175) did not claim interface 0 before use [ 756.031538][ T6459] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 756.128670][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11181'. [ 756.131637][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11181'. [ 756.204186][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11183'. [ 756.397524][ T6483] loop5: detected capacity change from 0 to 7 [ 756.401402][ C1] blk_print_req_error: 26 callbacks suppressed [ 756.401418][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.407362][ C1] buffer_io_error: 25 callbacks suppressed [ 756.407375][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.413175][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.416947][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.420499][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.424492][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.430320][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.434517][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.438129][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.442381][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.446435][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.450677][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.454242][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.458350][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.461755][T18053] ldm_validate_partition_table(): Disk read failed. [ 756.465081][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.469131][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.473175][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.477281][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.480872][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 756.484930][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 756.486372][T18053] Dev loop5: unable to read RDB block 0 [ 756.490904][T18053] loop5: unable to read partition table [ 756.493560][T18053] loop5: partition table beyond EOD, truncated [ 756.498863][ T6483] ldm_validate_partition_table(): Disk read failed. [ 756.502244][ T6483] Dev loop5: unable to read RDB block 0 [ 756.505147][ T6483] loop5: unable to read partition table [ 756.508340][ T6483] loop5: partition table beyond EOD, truncated [ 756.511069][ T6483] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 756.718343][ T6503] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 756.799966][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11195'. [ 756.809564][ T6505] xfrm1: entered promiscuous mode [ 756.811796][ T6505] xfrm1: entered allmulticast mode [ 756.923686][ T6514] team0: Port device gtp0 added [ 756.940874][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11198'. [ 757.023793][ T6527] netlink: 'syz.0.11203': attribute type 13 has an invalid length. [ 757.126905][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11205'. [ 757.140569][ T6536] netlink: 'syz.1.11206': attribute type 20 has an invalid length. [ 757.238751][ T6536] netlink: 'syz.1.11206': attribute type 20 has an invalid length. [ 757.382308][ T6536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6536 comm=syz.1.11206 [ 757.676610][T11784] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.679705][T11784] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.682948][T11784] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.686105][T11784] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.690203][T11784] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.694117][T11784] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.697045][T11784] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.700457][T11784] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.778168][ T6566] l2tp_ppp: sess 2/0: no socket in recv [ 757.925749][ T6573] netlink: 'syz.1.11217': attribute type 10 has an invalid length. [ 759.047391][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 759.163027][ T6586] gretap0: entered allmulticast mode [ 759.198940][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 759.202592][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 759.206152][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 759.213631][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 759.217755][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.221175][ T24] usb 5-1: Product: syz [ 759.222942][ T24] usb 5-1: Manufacturer: syz [ 759.224907][ T24] usb 5-1: SerialNumber: syz [ 759.229791][ T24] usb 5-1: config 0 descriptor?? [ 759.331997][ T6591] __nla_validate_parse: 12 callbacks suppressed [ 759.332016][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11225'. [ 759.438194][ T24] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 759.526853][ T6599] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11228'. [ 759.645968][ T9] usb 5-1: USB disconnect, device number 19 [ 759.661998][ T6581] netlink: 'syz.0.11221': attribute type 39 has an invalid length. [ 759.894577][ T6612] netlink: 'syz.1.11232': attribute type 2 has an invalid length. [ 760.076015][ T6624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11236'. [ 760.082029][ T6624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11236'. [ 760.121650][ T6626] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11237'. [ 760.383959][ T6633] comedi comedi3: dac02: I/O port conflict (0x8,8) [ 760.495689][ T6629] vxcan1 speed is unknown, defaulting to 1000 [ 760.676673][ T40] kauditd_printk_skb: 290 callbacks suppressed [ 760.676692][ T40] audit: type=1400 audit(2000000147.749:92356): avc: denied { getopt } for pid=6640 comm="syz.0.11241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 760.688513][ T40] audit: type=1400 audit(2000000147.759:92357): avc: denied { map } for pid=6640 comm="syz.0.11241" path="socket:[226197]" dev="sockfs" ino=226197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 760.702088][ T40] audit: type=1400 audit(2000000147.769:92358): avc: denied { map } for pid=6640 comm="syz.0.11241" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=226198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 760.710209][ T40] audit: type=1400 audit(2000000147.769:92359): avc: denied { read } for pid=6640 comm="syz.0.11241" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=226198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 760.718709][ T40] audit: type=1400 audit(2000000147.769:92360): avc: denied { create } for pid=6640 comm="syz.0.11241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 760.725088][ T40] audit: type=1400 audit(2000000147.769:92361): avc: denied { read } for pid=6640 comm="syz.0.11241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 760.731420][ T40] audit: type=1400 audit(2000000147.779:92362): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44528 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 760.751229][ T40] audit: type=1400 audit(2000000147.829:92363): avc: denied { read } for pid=6642 comm="syz.0.11242" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 760.760648][ T40] audit: type=1400 audit(2000000147.829:92364): avc: denied { open } for pid=6642 comm="syz.0.11242" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 760.768971][ T40] audit: type=1400 audit(2000000147.829:92365): avc: denied { ioctl } for pid=6642 comm="syz.0.11242" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 760.857257][ T24] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 761.011897][ T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 761.014573][ T24] usb 7-1: config 0 has no interface number 0 [ 761.016612][ T24] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 761.021584][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 761.026251][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.033716][ T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 761.037842][ T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 761.041210][ T24] usb 7-1: Product: syz [ 761.042849][ T24] usb 7-1: SerialNumber: syz [ 761.046744][ T24] usb 7-1: config 0 descriptor?? [ 761.051163][ T24] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 761.055341][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input82 [ 761.288137][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 761.288790][T25502] usb 7-1: USB disconnect, device number 34 [ 761.291106][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 761.302970][T25502] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 761.768301][ T6652] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11246'. [ 761.920285][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11249'. [ 761.977375][ T6666] netlink: 'syz.2.11251': attribute type 10 has an invalid length. [ 761.996270][ T6666] veth0_vlan: left promiscuous mode [ 761.996764][ T6668] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11252'. [ 762.000560][ T6666] veth0_vlan: entered promiscuous mode [ 762.007623][ T6666] team0: Device veth0_vlan failed to register rx_handler [ 762.135358][ T6680] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11255'. [ 762.267886][T27762] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 762.329512][ T6686] sp0: Synchronizing with TNC [ 762.453635][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 762.536433][ T6695] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 762.643638][ T6698] usb usb9: usbfs: process 6698 (syz.0.11263) did not claim interface 0 before use [ 762.860911][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11266'. [ 762.889616][ T6711] veth1_macvtap: left promiscuous mode [ 762.992948][ T6718] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 763.201413][ T6753] loop6: detected capacity change from 0 to 2640 [ 763.204742][ T6753] buffer_io_error: 25 callbacks suppressed [ 763.204756][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.215716][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.220012][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.222748][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.225528][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.229646][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.232539][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.235144][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.238040][ T6753] ldm_validate_partition_table(): Disk read failed. [ 763.240262][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.242845][ T6753] Buffer I/O error on dev loop6, logical block 0, async page read [ 763.245753][ T6753] Dev loop6: unable to read RDB block 0 [ 763.248696][ T6753] loop6: unable to read partition table [ 763.251775][ T6753] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 763.274982][ T6757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 763.277274][ T6757] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 763.281215][ T6757] vhci_hcd vhci_hcd.0: Device attached [ 763.405479][ T6770] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 763.517540][ T5997] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 763.934703][ T6806] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 764.035159][ T6759] vhci_hcd: connection reset by peer [ 764.039299][ T2209] vhci_hcd vhci_hcd.2: stop threads [ 764.042752][ T2209] vhci_hcd vhci_hcd.2: release socket [ 764.045088][ T2209] vhci_hcd vhci_hcd.2: disconnect device [ 764.244417][ T6833] netlink: 'syz.0.11299': attribute type 30 has an invalid length. [ 765.206279][ T6873] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 765.210065][ T6873] overlayfs: overlapping lowerdir path [ 765.280128][ T6877] __nla_validate_parse: 6 callbacks suppressed [ 765.280146][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11312'. [ 765.418056][ T6884] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11315'. [ 765.508991][ T6890] vxcan1 speed is unknown, defaulting to 1000 [ 765.551327][ T6896] 8021q: adding VLAN 0 to HW filter on device .` [ 765.556066][ T6896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.729662][ T40] kauditd_printk_skb: 268 callbacks suppressed [ 765.729679][ T40] audit: type=1400 audit(2000000152.809:92634): avc: denied { read write } for pid=5972 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.749052][ T40] audit: type=1400 audit(2000000152.819:92635): avc: denied { open } for pid=5972 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.760000][ T40] audit: type=1400 audit(2000000152.819:92636): avc: denied { ioctl } for pid=5972 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.775184][ T40] audit: type=1400 audit(2000000152.849:92637): avc: denied { create } for pid=6904 comm="syz.2.11319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.787408][ T40] audit: type=1400 audit(2000000152.859:92638): avc: denied { setopt } for pid=6904 comm="syz.2.11319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.796022][ T40] audit: type=1400 audit(2000000152.869:92639): avc: denied { read } for pid=6904 comm="syz.2.11319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.804453][ T40] audit: type=1400 audit(2000000152.869:92640): avc: denied { wake_alarm } for pid=6904 comm="syz.2.11319" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.816139][ T40] audit: type=1400 audit(2000000152.889:92641): avc: denied { read write } for pid=6904 comm="syz.2.11319" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 765.826966][ T40] audit: type=1400 audit(2000000152.889:92642): avc: denied { open } for pid=6904 comm="syz.2.11319" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 765.837398][ T40] audit: type=1400 audit(2000000152.899:92643): avc: denied { ioctl } for pid=6904 comm="syz.2.11319" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.814289][ T6929] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 766.817100][ T6929] ref_ctr decrement failed for inode: 0x588 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888031b53d40 [ 766.821044][ T6929] uprobe: syz.0.11327:6929 failed to unregister, leaking uprobe [ 766.925039][ T6935] syzkaller1: entered promiscuous mode [ 766.926862][ T6935] syzkaller1: entered allmulticast mode [ 767.134043][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11332'. [ 767.147432][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11332'. [ 767.161779][ T2209] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.161800][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11332'. [ 767.161821][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11332'. [ 767.165328][ T2209] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.174994][ T2209] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.181559][ T2209] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.206129][ T5943] Bluetooth: hci2: sending frame failed (-49) [ 767.211347][T27762] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 767.256878][ T6944] tipc: Started in network mode [ 767.258741][ T6944] tipc: Node identity 3664f5fa7304, cluster identity 4711 [ 767.261189][ T6944] tipc: Enabled bearer , priority 0 [ 767.265490][ T6943] tipc: Resetting bearer [ 767.409295][ T6950] binder_alloc: binder_alloc_mmap_handler: 6948 200000ffc000-200000ffd000 already mapped failed -16 [ 767.458770][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11336'. [ 767.528701][ T6956] netlink: 'syz.0.11337': attribute type 9 has an invalid length. [ 768.667270][ T5997] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 769.361824][ T6943] tipc: Disabling bearer [ 769.372765][ T57] tipc: Node number set to 1163982330 [ 769.449036][ T6964] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 769.586651][ T6973] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 770.078229][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11347'. [ 770.081202][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11347'. [ 770.576949][ T7016] ocfs2: Unknown parameter 'grpquotaGvr! ^&J?' [ 770.818301][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 770.818318][ T40] audit: type=1400 audit(2000000157.899:92811): avc: denied { append } for pid=7023 comm="syz.2.11361" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 770.831109][ T40] audit: type=1400 audit(2000000157.899:92812): avc: denied { create } for pid=7023 comm="syz.2.11361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 770.868975][ T40] audit: type=1400 audit(2000000157.939:92813): avc: denied { write } for pid=7028 comm="syz.2.11362" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 770.878197][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.883646][ T40] audit: type=1400 audit(2000000157.959:92814): avc: denied { allowed } for pid=7028 comm="syz.2.11362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 770.895008][ T40] audit: type=1400 audit(2000000157.969:92815): avc: denied { map } for pid=7028 comm="syz.2.11362" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=229760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 770.907279][ T40] audit: type=1400 audit(2000000157.969:92816): avc: denied { read write } for pid=7028 comm="syz.2.11362" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=229760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 770.916786][ T40] audit: type=1400 audit(2000000157.989:92817): avc: denied { create } for pid=7028 comm="syz.2.11362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 770.923980][ T40] audit: type=1400 audit(2000000157.989:92818): avc: denied { setopt } for pid=7028 comm="syz.2.11362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 770.954864][ T40] audit: type=1400 audit(2000000158.029:92819): avc: denied { name_bind } for pid=7028 comm="syz.2.11362" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 770.961780][ T40] audit: type=1400 audit(2000000158.029:92820): avc: denied { node_bind } for pid=7028 comm="syz.2.11362" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 771.451716][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11369'. [ 771.456729][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11369'. [ 771.707296][ T5943] Bluetooth: hci2: command 0x1003 tx timeout [ 771.707336][T27762] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 771.777751][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 771.817270][ T7057] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 771.819402][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 771.821836][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 771.823964][ T7062] vhci_hcd: cannot find the pending unlink 1023 [ 771.826944][ T7062] vhci_hcd: cannot find the pending unlink 1023 [ 771.830210][ T7062] vhci_hcd: connection closed [ 771.830447][ T2200] vhci_hcd vhci_hcd.2: stop threads [ 771.835290][ T2200] vhci_hcd vhci_hcd.2: release socket [ 771.837053][ T2200] vhci_hcd vhci_hcd.2: disconnect device [ 772.807273][ T7086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 773.044932][ T7095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11388'. [ 773.045413][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11388'. [ 773.056159][ T7095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11388'. [ 773.236724][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11390'. [ 773.339649][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7106 comm=syz.0.11392 [ 773.345350][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11392'. [ 773.615661][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.685394][ T7116] vxcan1 speed is unknown, defaulting to 1000 [ 773.887026][ T7121] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11398'. [ 774.516569][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11402'. [ 774.520228][ T7129] lo speed is unknown, defaulting to 1000 [ 774.526237][ T7129] lo speed is unknown, defaulting to 1000 [ 774.529580][ T7129] lo speed is unknown, defaulting to 1000 [ 774.638889][ T7129] infiniband sz1: set active [ 774.640438][ T7129] infiniband sz1: added lo [ 774.642803][ T57] lo speed is unknown, defaulting to 1000 [ 774.669470][ T7129] RDS/IB: sz1: added [ 774.671267][ T7129] smc: adding ib device sz1 with port count 1 [ 774.673986][ T7129] smc: ib device sz1 port 1 has no pnetid [ 774.676653][ T57] lo speed is unknown, defaulting to 1000 [ 774.679925][ T7129] lo speed is unknown, defaulting to 1000 [ 774.747720][ T5943] Bluetooth: hci2: command 0x1003 tx timeout [ 774.749299][T27762] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 774.823427][ T7129] lo speed is unknown, defaulting to 1000 [ 775.008724][ T7129] lo speed is unknown, defaulting to 1000 [ 775.025330][ T7143] binder: 7142:7143 ioctl c0306201 200000000640 returned -22 [ 775.034456][ T7143] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.11406'. [ 775.203135][ T7129] lo speed is unknown, defaulting to 1000 [ 775.347340][ T7129] lo speed is unknown, defaulting to 1000 [ 775.443922][ T7161] block nbd2: NBD_DISCONNECT [ 775.465475][ T7129] lo speed is unknown, defaulting to 1000 [ 775.562932][ T7129] lo speed is unknown, defaulting to 1000 [ 775.788969][ T7173] orangefs_devreq_write_iter: total:1: must be at least:8240: [ 775.843588][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 775.843599][ T40] audit: type=1400 audit(2000000162.919:93004): avc: denied { prog_load } for pid=7186 comm="syz.2.11422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 775.852530][ T40] audit: type=1400 audit(2000000162.929:93005): avc: denied { bpf } for pid=7186 comm="syz.2.11422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.859715][ T40] audit: type=1400 audit(2000000162.929:93006): avc: denied { perfmon } for pid=7186 comm="syz.2.11422" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.866372][ T40] audit: type=1400 audit(2000000162.929:93007): avc: denied { prog_run } for pid=7186 comm="syz.2.11422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 775.874901][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.890944][ T40] audit: type=1400 audit(2000000162.969:93008): avc: denied { open } for pid=7186 comm="syz.2.11422" path="/dev/ttyq8" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 775.896012][ T7185] bond1: (slave batadv1): Opening slave failed [ 775.988594][ T40] audit: type=1400 audit(2000000163.069:93009): avc: denied { module_request } for pid=7199 comm="syz.2.11425" kmod="crypto-gcm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 776.018257][ T40] audit: type=1400 audit(2000000163.099:93010): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=44528 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.059207][ T40] audit: type=1400 audit(2000000163.139:93011): avc: denied { create } for pid=7204 comm="syz.0.11426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 776.069012][ T40] audit: type=1400 audit(2000000163.149:93012): avc: denied { create } for pid=7199 comm="syz.2.11425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.077353][ T40] audit: type=1400 audit(2000000163.149:93013): avc: denied { ioctl } for pid=7199 comm="syz.2.11425" path="socket:[229242]" dev="sockfs" ino=229242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.184441][ T7222] geneve2: entered promiscuous mode [ 776.189239][ T7224] netlink: 'syz.2.11430': attribute type 1 has an invalid length. [ 776.227759][ T7222] sp0: Synchronizing with TNC [ 776.524491][ T7238] __nla_validate_parse: 3 callbacks suppressed [ 776.524505][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11434'. [ 776.700387][ T7245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 776.723659][ T7245] kvm: pic: non byte read [ 776.729421][ T7245] kvm: pic: single mode not supported [ 776.729433][ T7245] kvm: pic: level sensitive irq not supported [ 776.731995][ T7245] kvm: pic: non byte read [ 776.740289][ T7245] kvm: pic: non byte read [ 776.743346][ T7245] kvm: pic: non byte read [ 776.745483][ T7245] kvm: pic: level sensitive irq not supported [ 776.745813][ T7245] kvm: pic: non byte read [ 776.753858][ T7245] kvm: pic: single mode not supported [ 776.754505][ T7245] kvm: pic: non byte read [ 777.173508][ T5999] hid_parser_main: 6 callbacks suppressed [ 777.173528][ T5999] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 777.188153][ T5999] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 777.417402][ T5999] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 777.540777][ T7253] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11437'. [ 777.586734][ T5999] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 777.590101][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11438'. [ 777.592337][ T5999] usb 7-1: can't read configurations, error -71 [ 777.594624][ T7256] l2tp_ppp: sess 2/0: no socket in recv [ 777.901555][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 777.982368][ T7280] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11446'. [ 778.091558][ T7275] batadv_slave_1: Caught tx_queue_len zero misconfig [ 778.308820][ T7303] blktrace: Concurrent blktraces are not allowed on nullb0 [ 778.351631][ T7305] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 778.418885][ T7307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11455'. [ 778.422114][ T7307] lo: Caught tx_queue_len zero misconfig [ 778.461891][ T7309] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 778.465616][ T7309] FAULT_INJECTION: forcing a failure. [ 778.465616][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 778.469855][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.0.11456 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.469873][ T7309] Tainted: [L]=SOFTLOCKUP [ 778.469877][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 778.469883][ T7309] Call Trace: [ 778.469888][ T7309] [ 778.469892][ T7309] dump_stack_lvl+0x100/0x190 [ 778.469923][ T7309] should_fail_ex.cold+0x5/0xa [ 778.469943][ T7309] should_failslab+0xc2/0x120 [ 778.469959][ T7309] ? tomoyo_realpath_from_path+0xb6/0x690 [ 778.469977][ T7309] __kmalloc_noprof+0xf6/0x9c0 [ 778.469992][ T7309] ? tomoyo_realpath_from_path+0xb6/0x690 [ 778.470004][ T7309] tomoyo_realpath_from_path+0xb6/0x690 [ 778.470020][ T7309] tomoyo_path_number_perm+0x23c/0x580 [ 778.470036][ T7309] ? tomoyo_path_number_perm+0x22e/0x580 [ 778.470055][ T7309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 778.470086][ T7309] ? find_held_lock+0x2b/0x80 [ 778.470100][ T7309] ? hook_file_ioctl_common+0x146/0x410 [ 778.470114][ T7309] ? __fget_files+0x215/0x3d0 [ 778.470130][ T7309] ? __fget_files+0x21f/0x3d0 [ 778.470145][ T7309] security_file_ioctl+0xd3/0x230 [ 778.470157][ T7309] __x64_sys_ioctl+0xb7/0x210 [ 778.470169][ T7309] do_syscall_64+0xc9/0xf80 [ 778.470188][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.470200][ T7309] RIP: 0033:0x7f15c6d9acb9 [ 778.470210][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.470220][ T7309] RSP: 002b:00007f15c7d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.470231][ T7309] RAX: ffffffffffffffda RBX: 00007f15c7015fa0 RCX: 00007f15c6d9acb9 [ 778.470238][ T7309] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 778.470245][ T7309] RBP: 00007f15c7d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 778.470279][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.470289][ T7309] R13: 00007f15c7016038 R14: 00007f15c7015fa0 R15: 00007ffd138866b8 [ 778.470306][ T7309] [ 778.470311][ T7309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 778.614235][ T7311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 778.755544][ T7317] netlink: 'syz.0.11460': attribute type 2 has an invalid length. [ 778.758780][ T7317] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11460'. [ 778.794776][ T7319] FAULT_INJECTION: forcing a failure. [ 778.794776][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.800405][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.0.11461 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.800430][ T7319] Tainted: [L]=SOFTLOCKUP [ 778.800435][ T7319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 778.800445][ T7319] Call Trace: [ 778.800450][ T7319] [ 778.800456][ T7319] dump_stack_lvl+0x100/0x190 [ 778.800481][ T7319] should_fail_ex.cold+0x5/0xa [ 778.800506][ T7319] _copy_from_user+0x2e/0xd0 [ 778.800533][ T7319] copy_msghdr_from_user+0x9f/0x4f0 [ 778.800549][ T7319] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 778.800573][ T7319] ___sys_sendmsg+0x106/0x1e0 [ 778.800590][ T7319] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.800614][ T7319] ? find_held_lock+0x2b/0x80 [ 778.800648][ T7319] __sys_sendmsg+0x170/0x220 [ 778.800667][ T7319] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.800692][ T7319] ? fput+0x79/0x100 [ 778.800711][ T7319] ? __sys_getsockname+0xce/0x110 [ 778.800732][ T7319] do_syscall_64+0xc9/0xf80 [ 778.800750][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.800765][ T7319] RIP: 0033:0x7f15c6d9acb9 [ 778.800779][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.800793][ T7319] RSP: 002b:00007f15c7d3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.800809][ T7319] RAX: ffffffffffffffda RBX: 00007f15c7015fa0 RCX: 00007f15c6d9acb9 [ 778.800819][ T7319] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 778.800828][ T7319] RBP: 00007f15c7d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 778.800837][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.800847][ T7319] R13: 00007f15c7016038 R14: 00007f15c7015fa0 R15: 00007ffd138866b8 [ 778.800868][ T7319] [ 778.896912][ T7322] MINIX-fs: blocksize too small for device [ 778.901448][ T7322] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11463'. [ 778.968165][ T7331] FAULT_INJECTION: forcing a failure. [ 778.968165][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.972791][ T7331] CPU: 3 UID: 0 PID: 7331 Comm: syz.2.11466 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.972810][ T7331] Tainted: [L]=SOFTLOCKUP [ 778.972814][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 778.972821][ T7331] Call Trace: [ 778.972826][ T7331] [ 778.972832][ T7331] dump_stack_lvl+0x100/0x190 [ 778.972851][ T7331] should_fail_ex.cold+0x5/0xa [ 778.972871][ T7331] _copy_to_user+0x32/0xd0 [ 778.972888][ T7331] simple_read_from_buffer+0xcb/0x170 [ 778.972902][ T7331] proc_fail_nth_read+0x1af/0x230 [ 778.972919][ T7331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.972934][ T7331] ? rw_verify_area+0xce/0x6d0 [ 778.972945][ T7331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.972960][ T7331] vfs_read+0x1e4/0xb30 [ 778.972973][ T7331] ? __pfx_vfs_read+0x10/0x10 [ 778.972984][ T7331] ? find_held_lock+0x2b/0x80 [ 778.972999][ T7331] ? __fget_files+0x215/0x3d0 [ 778.973015][ T7331] ? __fget_files+0x21f/0x3d0 [ 778.973032][ T7331] ksys_read+0x12a/0x250 [ 778.973044][ T7331] ? __pfx_ksys_read+0x10/0x10 [ 778.973060][ T7331] do_syscall_64+0xc9/0xf80 [ 778.973074][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.973086][ T7331] RIP: 0033:0x7f937ed5b58e [ 778.973096][ T7331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.973107][ T7331] RSP: 002b:00007f937cff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.973118][ T7331] RAX: ffffffffffffffda RBX: 00007f937cff66c0 RCX: 00007f937ed5b58e [ 778.973125][ T7331] RDX: 000000000000000f RSI: 00007f937cff60a0 RDI: 0000000000000003 [ 778.973132][ T7331] RBP: 00007f937cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 778.973139][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.973145][ T7331] R13: 00007f937f016038 R14: 00007f937f015fa0 R15: 00007ffe7e8952a8 [ 778.973160][ T7331] [ 779.134190][ T7339] kAFS: unable to lookup cell '\,' [ 779.135953][ T7338] kAFS: unable to lookup cell '(,cL' [ 779.184390][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.187407][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.191284][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11471'. [ 779.247822][ T7350] kAFS: unable to lookup cell '/,cL' [ 779.301000][ T7350] overlayfs: maximum fs stacking depth exceeded [ 779.304161][ T7350] overlayfs: failed to resolve './bus': -2 [ 779.345596][ T7354] netlink: 'syz.0.11474': attribute type 2 has an invalid length. [ 779.349133][ T7354] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11474'. [ 779.417238][T31820] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 779.446325][ T7363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 779.547326][T31820] usb 7-1: device descriptor read/64, error -71 [ 779.787273][T31820] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 779.917317][T31820] usb 7-1: device descriptor read/64, error -71 [ 780.037630][T31820] usb usb7-port1: attempt power cycle [ 780.224391][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.227791][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.240469][ T7380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 780.243642][ T7380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 780.274047][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.279237][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.284345][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.290312][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.293417][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.344147][ T7381] vxcan1 speed is unknown, defaulting to 1000 [ 780.397227][T31820] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 780.429136][T31820] usb 7-1: device descriptor read/8, error -71 [ 780.443703][ T7381] lo speed is unknown, defaulting to 1000 [ 780.589320][ T7381] chnl_net:caif_netlink_parms(): no params data found [ 780.647509][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.650870][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.654099][ T7381] bridge_slave_0: entered allmulticast mode [ 780.658575][ T7381] bridge_slave_0: entered promiscuous mode [ 780.663712][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.666217][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.669052][ T7381] bridge_slave_1: entered allmulticast mode [ 780.672639][ T7381] bridge_slave_1: entered promiscuous mode [ 780.677390][T31820] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 780.693987][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.701180][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.708194][T31820] usb 7-1: device descriptor read/8, error -71 [ 780.728417][ T7381] team0: Port device team_slave_0 added [ 780.732482][ T7381] team0: Port device team_slave_1 added [ 780.754660][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.758099][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.769003][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.774082][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.776294][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.784952][ T7381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.813976][ T7381] hsr_slave_0: entered promiscuous mode [ 780.816514][ T7381] hsr_slave_1: entered promiscuous mode [ 780.830800][T31820] usb usb7-port1: unable to enumerate USB device [ 780.875348][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 780.875365][ T40] audit: type=1400 audit(2000000167.949:93223): avc: denied { read } for pid=7390 comm="syz.0.11483" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.887310][ T40] audit: type=1400 audit(2000000167.949:93224): avc: denied { open } for pid=7390 comm="syz.0.11483" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.896657][ T40] audit: type=1400 audit(2000000167.969:93225): avc: denied { ioctl } for pid=7390 comm="syz.0.11483" path="socket:[230261]" dev="sockfs" ino=230261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.907814][ T40] audit: type=1400 audit(2000000167.979:93226): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44528 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 780.922187][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 780.961482][ T40] audit: type=1400 audit(2000000168.039:93227): avc: denied { search } for pid=7392 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.972372][ T40] audit: type=1400 audit(2000000168.059:93228): avc: denied { search } for pid=7392 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.979760][ T40] audit: type=1400 audit(2000000168.059:93229): avc: denied { search } for pid=7392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.987422][ T40] audit: type=1400 audit(2000000168.059:93230): avc: denied { search } for pid=7392 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.989380][ T7395] netlink: 'syz.0.11484': attribute type 2 has an invalid length. [ 780.994897][ T40] audit: type=1400 audit(2000000168.059:93231): avc: denied { read open } for pid=7393 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.994927][ T40] audit: type=1400 audit(2000000168.059:93232): avc: denied { getattr } for pid=7393 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.023560][ T7395] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11484'. [ 781.325634][ T7414] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 4, id = 0 [ 781.446013][ T7381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 781.450629][ T7381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 781.455242][ T7381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 781.459987][ T7381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 781.512332][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.523003][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.528579][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.530941][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.538535][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.540846][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.682766][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.875803][ T7468] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 781.884024][ T7381] veth0_vlan: entered promiscuous mode [ 781.888866][ T7468] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11492'. [ 781.892638][ T7381] veth1_vlan: entered promiscuous mode [ 781.926842][ T7381] veth0_macvtap: entered promiscuous mode [ 781.937873][ T7381] veth1_macvtap: entered promiscuous mode [ 781.952980][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.964101][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.976028][T11773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.987691][T11773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.991464][T11773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.006408][T11773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.069517][T11784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.077247][T11784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.103208][T11784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.105747][T11784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.191989][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 782.357649][T27762] Bluetooth: hci2: command tx timeout [ 782.479475][ T7506] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 782.483948][ T7506] SELinux: failed to load policy [ 782.571873][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 782.611964][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11497'. [ 782.677945][ T7522] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 782.683642][ T7522] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 782.695495][ T7522] program syz.5.11503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.044746][ T7551] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 783.171539][ T7561] xt_l2tp: v2 doesn't support IP mode [ 783.421032][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11520'. [ 783.421102][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11521'. [ 783.426912][ T7577] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11520'. [ 783.603846][ T7592] netlink: 556 bytes leftover after parsing attributes in process `syz.2.11525'. [ 783.609134][ T7592] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 783.611870][ T7592] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 784.049664][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11527'. [ 784.263964][T25502] Process accounting resumed [ 784.268962][ T7609] genirq: Flags mismatch irq 5. 00200000 (comedi_parport) vs. 00200000 (pcl812) [ 784.293291][ T7610] Process accounting resumed [ 784.425929][ T7616] geneve1: Caught tx_queue_len zero misconfig [ 784.428778][T27762] Bluetooth: hci2: command tx timeout [ 784.436881][ T7616] sctp: [Deprecated]: syz.0.11532 (pid 7616) Use of int in maxseg socket option. [ 784.436881][ T7616] Use struct sctp_assoc_value instead [ 784.552159][ T7618] x_tables: duplicate underflow at hook 1 [ 784.560795][ T7618] vlan0: entered allmulticast mode [ 784.563042][ T7618] veth0_vlan: entered allmulticast mode [ 784.708323][ T7622] vxfs: WRONG superblock magic 00000000 at 1 [ 784.710355][ T7622] vxfs: WRONG superblock magic 00000000 at 8 [ 784.712272][ T7622] vxfs: can't find superblock. [ 784.788475][ T7625] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 784.888622][ T7630] netlink: 'syz.0.11538': attribute type 10 has an invalid length. [ 784.893183][ T7630] team0: Cannot enslave team device to itself [ 785.814867][ T7667] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 785.919048][ T7671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7671 comm=syz.0.11547 [ 786.003559][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 786.003608][ T40] audit: type=1400 audit(2000000173.079:93584): avc: denied { create } for pid=7675 comm="syz.5.11549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.014761][ T40] audit: type=1400 audit(2000000173.079:93585): avc: denied { bind } for pid=7675 comm="syz.5.11549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.023472][ T40] audit: type=1400 audit(2000000173.079:93586): avc: denied { listen } for pid=7675 comm="syz.5.11549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.030338][ T40] audit: type=1400 audit(2000000173.079:93587): avc: denied { write } for pid=7675 comm="syz.5.11549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.046895][ T40] audit: type=1400 audit(2000000173.119:93588): avc: denied { write } for pid=7677 comm="syz.0.11550" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.056480][ T40] audit: type=1400 audit(2000000173.129:93589): avc: denied { read } for pid=7677 comm="syz.0.11550" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.062320][ T7676] --map-set only usable from mangle table [ 786.063649][ T40] audit: type=1400 audit(2000000173.129:93590): avc: denied { open } for pid=7677 comm="syz.0.11550" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.075276][ T40] audit: type=1400 audit(2000000173.129:93591): avc: denied { ioctl } for pid=7677 comm="syz.0.11550" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.086308][ T40] audit: type=1400 audit(2000000173.139:93592): avc: denied { accept } for pid=7675 comm="syz.5.11549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.110475][ T40] audit: type=1400 audit(2000000173.189:93593): avc: denied { create } for pid=7681 comm="syz.5.11551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 786.183608][ T7685] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 786.272694][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11554'. [ 786.277256][ T7694] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 786.280343][ T7694] netlink: 'syz.0.11554': attribute type 2 has an invalid length. [ 786.284246][ T7694] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11554'. [ 786.507326][T27762] Bluetooth: hci2: command tx timeout [ 786.520317][ T7699] syz.5.11556 (7699): drop_caches: 2 [ 786.722470][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11559'. [ 786.796855][ T7709] syzkaller0: entered promiscuous mode [ 786.799434][ T7709] syzkaller0: entered allmulticast mode [ 786.911530][ T7711] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11561'. [ 787.567428][ T24] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 787.737302][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 787.877860][ T24] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 788.038560][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 788.041211][ T24] usb usb5-port1: attempt power cycle [ 788.095141][ T7733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.377353][ T24] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 788.397714][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 788.537368][ T24] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 788.578038][ T24] usb 5-1: Invalid ep0 maxpacket: 16 [ 788.580613][ T24] usb usb5-port1: unable to enumerate USB device [ 788.597468][ T5943] Bluetooth: hci2: command tx timeout [ 788.717323][ T7750] input: syz1 as /devices/virtual/input/input83 [ 788.930680][ T7754] Invalid source name [ 788.932326][ T7754] UBIFS error (pid: 7754): cannot open "./file0", error -22 [ 788.968217][ T7756] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11580'. [ 789.355113][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11585'. [ 789.371139][ T7774] bond1: entered promiscuous mode [ 789.373097][ T7774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.378643][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11585'. [ 789.382000][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11585'. [ 789.385534][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11585'. [ 789.406617][ T7774] bond1: (slave sit1): refused to change device type [ 790.059707][ T7804] Cannot find add_set index 0 as target [ 790.094606][ T7807] mkiss: ax0: crc mode is auto. [ 790.114519][ T7807] netlink: 'syz.5.11596': attribute type 1 has an invalid length. [ 790.486202][ T7833] veth1_to_batadv: entered promiscuous mode [ 790.498340][ T7835] binder: BINDER_SET_CONTEXT_MGR already set [ 790.500435][ T7835] binder: 7832:7835 ioctl 4018620d 200000000000 returned -16 [ 790.616247][ T7841] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 790.667362][ T5943] Bluetooth: hci2: command 0x0405 tx timeout [ 790.784308][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11610'. [ 790.924467][ T7863] devpts: Unknown parameter '00000000000000000000005' [ 791.016263][ T40] kauditd_printk_skb: 237 callbacks suppressed [ 791.016280][ T40] audit: type=1400 audit(2000000178.089:93831): avc: denied { unmount } for pid=4040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 791.057223][ T40] audit: type=1400 audit(2000000178.129:93832): avc: denied { create } for pid=7868 comm="syz.0.11616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 791.063952][ T40] audit: type=1400 audit(2000000178.129:93833): avc: denied { write } for pid=7868 comm="syz.0.11616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 791.097223][ T40] audit: type=1400 audit(2000000178.139:93834): avc: denied { create } for pid=7866 comm="syz.5.11615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 791.103215][ T40] audit: type=1400 audit(2000000178.139:93835): avc: denied { read } for pid=7868 comm="syz.0.11616" lport=41617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 791.110425][ T40] audit: type=1400 audit(2000000178.139:93836): avc: denied { setopt } for pid=7866 comm="syz.5.11615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 791.117075][ T40] audit: type=1400 audit(2000000178.139:93837): avc: denied { execute } for pid=7868 comm="syz.0.11616" dev="tmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 791.125881][ T40] audit: type=1400 audit(2000000178.139:93838): avc: denied { execute_no_trans } for pid=7868 comm="syz.0.11616" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A925BEE6B81C8C29FEFC1AC2ACEF92380C1A65E0202864656C6574656429 dev="tmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 791.132080][ T7872] netlink: 'syz.2.11617': attribute type 11 has an invalid length. [ 791.140925][ T40] audit: type=1400 audit(2000000178.139:93839): avc: denied { write } for pid=7866 comm="syz.5.11615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 791.149237][ T40] audit: type=1400 audit(2000000178.139:93840): avc: denied { ioctl } for pid=7868 comm="syz.0.11616" path="socket:[235858]" dev="sockfs" ino=235858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.166895][ T7872] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 791.166895][ T7872] program syz.2.11617 not setting count and/or reply_len properly [ 791.361909][ T7885] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 791.444476][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11623'. [ 791.486965][ T7892] gretap1: entered promiscuous mode [ 791.537306][ T7893] binder: 7891:7893 ioctl c0306201 2000000004c0 returned -14 [ 791.544308][ T7892] binder: 7891:7892 ioctl c0306201 2000000001c0 returned -14 [ 791.548790][ T7892] binder: 7891:7892 ioctl c0306201 200000000280 returned -14 [ 791.552045][ T7892] binder: 7891:7892 ioctl c0306201 200000000180 returned -14 [ 791.960110][ T7926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 791.999773][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11639'. [ 792.154752][ T7950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.412605][ T7963] bridge0: port 3(ipvlan2) entered blocking state [ 792.415148][ T7963] bridge0: port 3(ipvlan2) entered disabled state [ 792.419503][ T7963] ipvlan2: entered allmulticast mode [ 792.421160][ T7963] bridge0: entered allmulticast mode [ 792.423936][ T7963] ipvlan2: left allmulticast mode [ 792.425499][ T7963] bridge0: left allmulticast mode [ 792.488775][ T7971] tmpfs: Unknown parameter 'm nic:0' [ 792.503773][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11653'. [ 792.508209][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11653'. [ 792.542561][ T7976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.550572][ T7978] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 792.554948][ T7978] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 792.615553][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11657'. [ 792.861486][ T8001] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 792.892286][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11663'. [ 792.936760][ T8006] tmpfs: Unknown parameter 'grpqu_hardlimit' [ 792.976448][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.135064][ T8018] autofs: Unknown parameter 'wlan1' [ 793.173083][ T8021] overlay: ./file0 is not a directory [ 793.430914][ T8043] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 793.462350][ T6019] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 793.525124][ T8050] sctp: [Deprecated]: syz.2.11679 (pid 8050) Use of int in maxseg socket option. [ 793.525124][ T8050] Use struct sctp_assoc_value instead [ 793.598409][ T6019] usb 10-1: device descriptor read/64, error -71 [ 793.726632][ T8072] netlink: 'syz.2.11685': attribute type 10 has an invalid length. [ 793.742170][ T8072] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 793.748020][ T8072] .`: (slave hsr0): Error -95 calling set_mac_address [ 793.849032][ T6019] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 793.997302][ T6019] usb 10-1: device descriptor read/64, error -71 [ 794.049271][ T8086] MINIX-fs: unable to read superblock [ 794.088738][ T8090] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 794.092892][ T8090] Error validating options; rc = [-22] [ 794.095449][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11693'. [ 794.100731][ T8091] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 794.104997][ T8091] Error validating options; rc = [-22] [ 794.119633][ T6019] usb usb10-port1: attempt power cycle [ 794.136975][ T8095] batadv_slave_1: entered promiscuous mode [ 794.162657][ T8095] batadv_slave_1: left promiscuous mode [ 794.278802][ T8116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 794.325494][ T8114] overlayfs: missing 'lowerdir' [ 794.415983][ T8125] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 794.477644][ T6019] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 794.508757][ T6019] usb 10-1: device descriptor read/8, error -71 [ 794.521253][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 794.523358][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 794.617455][T29090] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 794.757392][ T6019] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 794.779081][ T29] libceph: connect (1)[c::]:6789 error -101 [ 794.781109][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 794.781493][T29090] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 794.783779][ T6019] usb 10-1: device descriptor read/8, error -71 [ 794.786537][T29090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.791852][T29090] usb 5-1: Product: syz [ 794.793594][T29090] usb 5-1: Manufacturer: syz [ 794.795494][T29090] usb 5-1: SerialNumber: syz [ 794.802939][T29090] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 794.821007][ T56] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 794.899735][ T6019] usb usb10-port1: unable to enumerate USB device [ 795.022000][ T5999] usb 5-1: USB disconnect, device number 24 [ 795.288710][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 795.291234][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 795.344655][ T8132] ceph: No mds server is up or the cluster is laggy [ 795.717587][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11710'. [ 795.775762][ T8147] trusted_key: encrypted_key: key user:syz not found [ 795.780395][ T8147] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 795.877277][ T56] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 795.879673][ T56] ath9k_htc: Failed to initialize the device [ 795.882232][ T5999] usb 5-1: ath9k_htc: USB layer deinitialized [ 796.028992][ T40] kauditd_printk_skb: 373 callbacks suppressed [ 796.029009][ T40] audit: type=1400 audit(2000000183.109:94214): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44528 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.045566][ T40] audit: type=1400 audit(2000000183.119:94215): avc: denied { mount } for pid=8154 comm="syz.0.11714" name="/" dev="9p" ino=72614083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 796.053261][ T40] audit: type=1400 audit(2000000183.119:94216): avc: denied { setattr } for pid=8154 comm="syz.0.11714" name="/" dev="9p" ino=72614083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 796.062258][ T40] audit: type=1400 audit(2000000183.139:94217): avc: denied { unmount } for pid=8154 comm="syz.0.11714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 796.108209][ T8157] Cache volume key already in use (9p,syz,) [ 796.269685][ T40] audit: type=1400 audit(2000000183.349:94218): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 796.289786][ T40] audit: type=1400 audit(2000000183.349:94219): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 796.300626][ T40] audit: type=1400 audit(2000000183.369:94220): avc: denied { read write } for pid=8161 comm="syz.5.11717" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 796.305472][ T8163] fuse: Unknown parameter 'rootmodm' [ 796.311261][ T40] audit: type=1400 audit(2000000183.369:94221): avc: denied { open } for pid=8161 comm="syz.5.11717" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 796.318686][ T40] audit: type=1400 audit(2000000183.369:94222): avc: denied { getopt } for pid=8161 comm="syz.5.11717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 796.326568][ T40] audit: type=1400 audit(2000000183.379:94223): avc: denied { create } for pid=8162 comm="syz.0.11715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 796.358522][ T8166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8166 comm=syz.5.11718 [ 796.676050][ T8181] netlink: 'syz.0.11723': attribute type 1 has an invalid length. [ 796.708726][ T8181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.752857][ T8181] bond2: (slave veth3): Enslaving as an active interface with a down link [ 796.766803][ T8181] vlan3: entered allmulticast mode [ 796.769963][ T8181] bond2: entered allmulticast mode [ 796.960531][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11724'. [ 797.604387][ T8216] netlink: 168 bytes leftover after parsing attributes in process `syz.5.11730'. [ 797.700660][ T8226] Mount JFS Failure: -22 [ 797.702633][ T8226] jfs_mount failed w/return code = -22 [ 797.717535][ T8228] syzkaller1: entered promiscuous mode [ 797.720161][ T8228] syzkaller1: entered allmulticast mode [ 798.112587][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11743'. [ 798.467271][ T56] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 798.638191][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 798.648248][ T56] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 798.651355][ T56] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.654908][ T56] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 798.667199][ T56] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 798.670650][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 798.679014][ T56] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 798.682194][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.684679][ T56] usb 7-1: Product: syz [ 798.686012][ T56] usb 7-1: Manufacturer: syz [ 798.697306][ T56] usb 7-1: SerialNumber: syz [ 798.700637][ T56] usb 7-1: config 0 descriptor?? [ 798.867502][ T8274] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 798.905650][ T56] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input84 [ 798.997890][ T56] usb 7-1: USB disconnect, device number 41 [ 799.120138][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11754'. [ 799.414905][ T8307] binder: 8306:8307 ioctl 4030ae7b 200000000200 returned -22 [ 799.417747][ T8307] binder: 8306:8307 unknown command 0 [ 799.419476][ T8307] binder: 8306:8307 ioctl c0306201 2000000001c0 returned -22 [ 799.449074][ T8311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 799.508053][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11757'. [ 799.566452][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11757'. [ 800.066157][ T8341] random: crng reseeded on system resumption [ 800.075062][ T8341] Unrecognized hibernate image header format! [ 800.077520][ T8341] PM: hibernation: Image mismatch: architecture specific data [ 800.178525][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11773'. [ 800.248157][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11771'. [ 800.250298][ T8359] netlink: 'syz.0.11776': attribute type 10 has an invalid length. [ 800.251216][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11771'. [ 800.257568][ T8359] bridge_slave_1: left allmulticast mode [ 800.257592][ T8359] bridge_slave_1: left promiscuous mode [ 800.257770][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.279034][ T8359] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 800.290358][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 800.355345][ T8369] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11777'. [ 800.403790][ T8371] mqueue: Unknown parameter 'nr_inodes' [ 800.525377][ T8376] can0: slcan on pty20. [ 800.535271][ T8378] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 800.627859][ T8372] can0 (unregistered): slcan off pty20. [ 800.698364][ T8387] xt_recent: Unsupported userspace flags (000000b2) [ 800.713520][ T8387] input: syz0 as /devices/virtual/input/input85 [ 800.723210][ T8387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=8387 comm=syz.0.11784 [ 800.787944][ T8393] FAULT_INJECTION: forcing a failure. [ 800.787944][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.792779][ T8393] CPU: 2 UID: 0 PID: 8393 Comm: syz.5.11785 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.792798][ T8393] Tainted: [L]=SOFTLOCKUP [ 800.792802][ T8393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 800.792809][ T8393] Call Trace: [ 800.792813][ T8393] [ 800.792818][ T8393] dump_stack_lvl+0x100/0x190 [ 800.792846][ T8393] should_fail_ex.cold+0x5/0xa [ 800.792866][ T8393] _copy_from_user+0x2e/0xd0 [ 800.792886][ T8393] do_ip_getsockopt+0x43a/0x2550 [ 800.792906][ T8393] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 800.792920][ T8393] ? find_held_lock+0x2b/0x80 [ 800.792935][ T8393] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 800.792953][ T8393] ? avc_has_perm_noaudit+0x145/0x3b0 [ 800.792969][ T8393] ? avc_has_perm+0x135/0x1e0 [ 800.792984][ T8393] ? __pfx_avc_has_perm+0x10/0x10 [ 800.793001][ T8393] ? __lock_acquire+0x4a5/0x2630 [ 800.793016][ T8393] ip_getsockopt+0xa1/0x1e0 [ 800.793028][ T8393] ? __pfx_ip_getsockopt+0x10/0x10 [ 800.793039][ T8393] ? find_held_lock+0x2b/0x80 [ 800.793053][ T8393] ? __might_fault+0xc5/0x140 [ 800.793064][ T8393] ? __might_fault+0xc5/0x140 [ 800.793078][ T8393] tcp_getsockopt+0xa1/0x110 [ 800.793093][ T8393] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.793110][ T8393] do_sock_getsockopt+0x259/0x3d0 [ 800.793128][ T8393] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 800.793152][ T8393] __sys_getsockopt+0x148/0x260 [ 800.793170][ T8393] ? __x64_sys_getsockopt+0xbd/0x160 [ 800.793184][ T8393] ? rcu_is_watching+0x12/0xc0 [ 800.793198][ T8393] __x64_sys_getsockopt+0xbd/0x160 [ 800.793211][ T8393] ? do_syscall_64+0x94/0xf80 [ 800.793223][ T8393] ? lockdep_hardirqs_on+0x78/0x100 [ 800.793234][ T8393] do_syscall_64+0xc9/0xf80 [ 800.793247][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.793258][ T8393] RIP: 0033:0x7f07ff39acb9 [ 800.793268][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.793279][ T8393] RSP: 002b:00007f08001f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 800.793291][ T8393] RAX: ffffffffffffffda RBX: 00007f07ff615fa0 RCX: 00007f07ff39acb9 [ 800.793298][ T8393] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 800.793305][ T8393] RBP: 00007f08001f5090 R08: 0000200000000340 R09: 0000000000000000 [ 800.793311][ T8393] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 800.793318][ T8393] R13: 00007f07ff616038 R14: 00007f07ff615fa0 R15: 00007fffc4285bf8 [ 800.793336][ T8393] [ 800.821786][ T8395] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11786'. [ 801.047220][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 801.047237][ T40] audit: type=1400 audit(2000000188.119:94575): avc: denied { bpf } for pid=8416 comm="syz.5.11792" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 801.059663][ T40] audit: type=1400 audit(2000000188.119:94576): avc: denied { read } for pid=8416 comm="syz.5.11792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 801.066788][ T40] audit: type=1400 audit(2000000188.139:94577): avc: denied { read write } for pid=8419 comm="syz.0.11793" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 801.076730][ T40] audit: type=1400 audit(2000000188.139:94578): avc: denied { open } for pid=8419 comm="syz.0.11793" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 801.088659][ T40] audit: type=1400 audit(2000000188.169:94579): avc: denied { create } for pid=8416 comm="syz.5.11792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.095329][ T40] audit: type=1400 audit(2000000188.169:94580): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=44528 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 801.103232][ T8417] can0: slcan on ttyS3. [ 801.119089][ T40] audit: type=1400 audit(2000000188.169:94581): avc: denied { open } for pid=8416 comm="syz.5.11792" path="/dev/ptyqf" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 801.128538][ T40] audit: type=1400 audit(2000000188.179:94582): avc: denied { ioctl } for pid=8416 comm="syz.5.11792" path="/dev/ptyqf" dev="devtmpfs" ino=142 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 801.140433][ T40] audit: type=1400 audit(2000000188.199:94583): avc: denied { read } for pid=5640 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 801.156538][ T40] audit: type=1400 audit(2000000188.209:94584): avc: denied { search } for pid=5640 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.182214][ T8422] ata1.00: invalid multi_count 128 ignored [ 801.188730][ T8416] can0 (unregistered): slcan off ttyS3. [ 801.392206][ T8446] netlink: 'syz.0.11801': attribute type 1 has an invalid length. [ 801.560925][ T8457] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 802.614673][ T8480] tipc: Failed to remove unknown binding: 66,1,1/0:670592821/670592823 [ 802.619089][ T8480] tipc: Failed to remove unknown binding: 66,1,1/0:670592821/670592823 [ 802.678558][ T8483] __nla_validate_parse: 2 callbacks suppressed [ 802.678575][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11809'. [ 802.740739][ T8483] team0: Port device team_slave_0 removed [ 802.925159][ T8491] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11812'. [ 803.078931][ T8493] tipc: Trying to set illegal importance in message [ 803.246252][ T8496] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11814'. [ 803.253899][ T8496] netlink: 248 bytes leftover after parsing attributes in process `syz.5.11814'. [ 803.307973][T27762] Bluetooth: hci4: command 0x1003 tx timeout [ 803.308542][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 803.365944][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11814'. [ 803.792192][ T8523] openvswitch: netlink: IP tunnel dst address not specified [ 803.955123][ T8537] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 803.967312][ T8537] overlayfs: missing 'lowerdir' [ 804.020681][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11828'. [ 804.170103][ T8546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8546 comm=syz.2.11830 [ 804.225331][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11833'. [ 804.229853][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11833'. [ 804.314227][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11834'. [ 804.322502][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11834'. [ 804.459720][ T8571] vxcan1 speed is unknown, defaulting to 1000 [ 804.600783][ T8571] lo speed is unknown, defaulting to 1000 [ 804.874228][ T8592] vxcan1 speed is unknown, defaulting to 1000 [ 804.985020][ T8600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.998159][ T8592] lo speed is unknown, defaulting to 1000 [ 805.631220][ T8638] CIFS mount error: No usable UNC path provided in device string! [ 805.631220][ T8638] [ 805.634564][ T8638] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 805.696099][ T8643] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 806.038238][ T8663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.070577][ T40] kauditd_printk_skb: 305 callbacks suppressed [ 806.070587][ T40] audit: type=1400 audit(2000000193.149:94890): avc: denied { allowed } for pid=8662 comm="syz.2.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 806.079915][ T40] audit: type=1400 audit(2000000193.149:94891): avc: denied { map } for pid=8662 comm="syz.2.11869" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.091789][ T40] audit: type=1400 audit(2000000193.149:94892): avc: denied { read write } for pid=8662 comm="syz.2.11869" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.101945][ T40] audit: type=1400 audit(2000000193.169:94893): avc: denied { create } for pid=8662 comm="syz.2.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.109263][ T40] audit: type=1400 audit(2000000193.169:94894): avc: denied { setopt } for pid=8662 comm="syz.2.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.132312][ T40] audit: type=1400 audit(2000000193.209:94895): avc: denied { name_bind } for pid=8662 comm="syz.2.11869" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 806.143826][ T40] audit: type=1400 audit(2000000193.209:94896): avc: denied { node_bind } for pid=8662 comm="syz.2.11869" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 806.150976][ T40] audit: type=1400 audit(2000000193.219:94897): avc: denied { ioctl } for pid=8662 comm="syz.2.11869" path="socket:[238571]" dev="sockfs" ino=238571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.159141][ T40] audit: type=1400 audit(2000000193.239:94898): avc: denied { write } for pid=8668 comm="syz.0.11871" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.198580][ T8674] CUSE: unknown device info "" [ 806.200286][ T8674] CUSE: zero length info key specified [ 806.241829][ T8674] kvm: kvm [8673]: vcpu0, guest rIP: 0x55a40 Unhandled WRMSR(0x40000005) = 0x1 [ 806.316988][ T40] audit: type=1400 audit(2000000193.389:94899): avc: denied { read write } for pid=5972 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.495325][ T8688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 806.498238][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 806.503702][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 806.757276][ T57] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 806.757288][T29090] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 806.833573][ T2200] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 806.847667][ T2200] Bluetooth: hci4: Frame reassembly failed (-84) [ 806.910603][T29090] usb 7-1: config 0 has no interfaces? [ 806.914273][T29090] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 806.918359][T29090] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 806.922559][T29090] usb 7-1: Manufacturer: syz [ 806.933193][T29090] usb 7-1: config 0 descriptor?? [ 807.198929][ T8689] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 807.203343][ T2200] vhci_hcd vhci_hcd.2: stop threads [ 807.205782][ T2200] vhci_hcd vhci_hcd.2: release socket [ 807.210979][ T2200] vhci_hcd vhci_hcd.2: disconnect device [ 807.221364][ T8633] Set syz1 is full, maxelem 65536 reached [ 807.712123][ T6143] usb 7-1: USB disconnect, device number 42 [ 807.777534][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 807.917314][ T9] usb 10-1: device descriptor read/64, error -71 [ 808.157324][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 808.288305][ T9] usb 10-1: device descriptor read/64, error -71 [ 808.398569][ T9] usb usb10-port1: attempt power cycle [ 808.738386][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 808.758042][ T9] usb 10-1: device descriptor read/8, error -71 [ 808.848346][ T8715] batadv_slave_1: entered promiscuous mode [ 808.853845][ T8716] loop5: detected capacity change from 0 to 7 [ 808.857412][ C3] blk_print_req_error: 25 callbacks suppressed [ 808.857423][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.862536][ C3] buffer_io_error: 21959 callbacks suppressed [ 808.862547][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.867983][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.871532][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.874345][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.878533][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.882227][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.886060][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.889417][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.893503][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.897710][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.901831][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.905476][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.907532][T27762] Bluetooth: hci4: command 0x1003 tx timeout [ 808.909673][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.912550][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 808.917319][ T8716] ldm_validate_partition_table(): Disk read failed. [ 808.918111][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.928730][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.932766][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.941318][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.945355][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.950573][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 808.954090][ T8716] Dev loop5: unable to read RDB block 0 [ 808.956894][ T8716] loop5: unable to read partition table [ 808.959872][ T8716] loop5: partition table beyond EOD, truncated [ 808.962584][ T8716] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 808.970687][ T8714] batadv_slave_1: left promiscuous mode [ 808.983103][ T8719] fuse: Unknown parameter '18446744073709551615' [ 808.990694][ T8719] xt_hashlimit: overflow, rate too high: 0 [ 809.007585][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 809.038824][ T9] usb 10-1: device descriptor read/8, error -71 [ 809.149301][ T9] usb usb10-port1: unable to enumerate USB device [ 809.253479][ T8727] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 809.331383][ T8735] tmpfs: Unknown parameter 'grpquota ' [ 809.938527][ T8742] netlink: 'syz.0.11895': attribute type 10 has an invalid length. [ 809.942537][ T8742] batman_adv: batadv0: Adding interface: team0 [ 809.944852][ T8742] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.953493][ T8742] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 810.101834][ T8753] vivid-000: ================= START STATUS ================= [ 810.105401][ T8753] vivid-000: Test Pattern: 100% Colorbar [ 810.108520][ T8753] vivid-000: Fill Percentage of Frame: 100 [ 810.111136][ T8753] vivid-000: Horizontal Movement: No Movement [ 810.113801][ T8753] vivid-000: Vertical Movement: Move Down Slow [ 810.116497][ T8753] vivid-000: OSD Text Mode: All [ 810.119120][ T8753] vivid-000: Show Border: true [ 810.121262][ T8753] vivid-000: Show Square: false [ 810.123442][ T8753] vivid-000: Sensor Flipped Horizontally: false [ 810.126207][ T8753] vivid-000: Sensor Flipped Vertically: false [ 810.129008][ T8753] vivid-000: Insert SAV Code in Image: true [ 810.131625][ T8753] vivid-000: Insert EAV Code in Image: false [ 810.134651][ T8753] vivid-000: Insert Video Guard Band: false [ 810.137373][ T8753] vivid-000: Reduced Framerate: true [ 810.139685][ T8753] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 810.142896][ T8753] vivid-000: S-Video 000-0 Is Connected To: None [ 810.145668][ T8753] vivid-000: Enable Capture Cropping: false grabbed [ 810.148983][ T8753] vivid-000: Enable Capture Composing: true grabbed [ 810.151840][ T8753] vivid-000: Enable Capture Scaler: true grabbed [ 810.154603][ T8753] vivid-000: Timestamp Source: End of Frame [ 810.157483][ T8753] vivid-000: Colorspace: sRGB [ 810.159617][ T8753] vivid-000: Transfer Function: sRGB [ 810.161906][ T8753] vivid-000: Y'CbCr Encoding: Default [ 810.164203][ T8753] vivid-000: HSV Encoding: Hue 0-179 [ 810.166503][ T8753] vivid-000: Quantization: Default [ 810.168893][ T8753] vivid-000: Apply Alpha To Red Only: false [ 810.171464][ T8753] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 810.174286][ T8753] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 810.178553][ T8753] vivid-000: DV Timings: 640x480p59 inactive [ 810.181175][ T8753] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 810.187258][ T8753] vivid-000: Maximum EDID Blocks: 1 [ 810.189493][ T8753] vivid-000: Limited RGB Range (16-235): false [ 810.192031][ T8753] vivid-000: Rx RGB Quantization Range: Automatic [ 810.194672][ T8753] vivid-000: Power Present: 0x00000001 [ 810.197010][ T8753] tpg source WxH: 320x240 (R'G'B) [ 810.202232][ T8753] tpg field: 1 [ 810.203776][ T8753] tpg crop: (0,0)/320x240 [ 810.205838][ T8753] tpg compose: (0,0)/320x240 [ 810.208592][ T8753] tpg colorspace: 12 [ 810.210414][ T8753] tpg transfer function: 1/2 [ 810.213162][ T8753] tpg quantization: 2/1 [ 810.214996][ T8753] tpg RGB range: 0/2 [ 810.216675][ T8753] vivid-000: ================== END STATUS ================== [ 810.435545][ T8770] loop5: detected capacity change from 0 to 7 [ 810.440905][T18053] Dev loop5: unable to read RDB block 7 [ 810.443285][T18053] loop5: AHDI p4 [ 810.444833][T18053] loop5: partition table partially beyond EOD, truncated [ 810.450226][ T8770] Dev loop5: unable to read RDB block 7 [ 810.452034][ T8770] loop5: AHDI p4 [ 810.453268][ T8770] loop5: partition table partially beyond EOD, truncated [ 810.542972][ T8780] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 810.553711][ T8780] overlayfs: failed to set xattr on upper [ 810.555644][ T8780] overlayfs: ...falling back to redirect_dir=nofollow. [ 810.562423][ T8780] overlayfs: ...falling back to index=off. [ 810.564909][ T8780] overlayfs: ...falling back to uuid=null. [ 810.581237][ T8784] __nla_validate_parse: 10 callbacks suppressed [ 810.581249][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11910'. [ 810.666265][ T8786] netlink: 'syz.0.11912': attribute type 1 has an invalid length. [ 810.670306][ T8786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11912'. [ 811.038584][ T8820] netlink: 'syz.2.11925': attribute type 1 has an invalid length. [ 811.090790][ T8836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 811.129817][ T40] kauditd_printk_skb: 207 callbacks suppressed [ 811.129830][ T40] audit: type=1400 audit(2000000198.209:95107): avc: denied { allowed } for pid=8837 comm="syz.5.11929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 811.141614][ T40] audit: type=1400 audit(2000000198.219:95108): avc: denied { read } for pid=8837 comm="syz.5.11929" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.151160][ T40] audit: type=1400 audit(2000000198.219:95109): avc: denied { open } for pid=8837 comm="syz.5.11929" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.159967][ T40] audit: type=1400 audit(2000000198.219:95110): avc: denied { ioctl } for pid=8837 comm="syz.5.11929" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.161091][ T8838] fuse: Invalid rootmode [ 811.168123][ T40] audit: type=1400 audit(2000000198.239:95111): avc: denied { read write } for pid=8837 comm="syz.5.11929" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 811.168153][ T40] audit: type=1400 audit(2000000198.239:95112): avc: denied { open } for pid=8837 comm="syz.5.11929" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 811.168177][ T40] audit: type=1400 audit(2000000198.239:95113): avc: denied { mounton } for pid=8837 comm="syz.5.11929" path="/127/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 811.172094][ T8838] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 811.180906][ T40] audit: type=1400 audit(2000000198.249:95114): avc: denied { prog_load } for pid=8839 comm="syz.2.11930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 811.215000][ T40] audit: type=1400 audit(2000000198.289:95115): avc: denied { execmem } for pid=8837 comm="syz.5.11929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 811.231148][ T40] audit: type=1400 audit(2000000198.309:95116): avc: denied { read } for pid=8844 comm="syz.2.11931" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 811.624065][ T8866] macvlan0: entered allmulticast mode [ 811.625851][ T8866] veth1_vlan: entered allmulticast mode [ 811.645936][ T8866] pim6reg: entered allmulticast mode [ 811.650362][ T8866] veth1_vlan: left allmulticast mode [ 811.671971][ T8866] macvlan0 (unregistering): left allmulticast mode [ 811.707276][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11937'. [ 811.747121][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11939'. [ 811.750241][ T8872] openvswitch: netlink: Unknown nsh attribute 0 [ 811.803006][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 811.833084][ T8872] ata1.00: invalid multi_count 128 ignored [ 811.857353][ T57] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 811.894819][ T8884] sctp: [Deprecated]: syz.5.11942 (pid 8884) Use of int in max_burst socket option deprecated. [ 811.894819][ T8884] Use struct sctp_assoc_value instead [ 811.980056][ T8888] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 811.991757][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11944'. [ 812.016944][ T8891] binder: 8890:8891 ioctl c0306201 200000000680 returned -22 [ 812.068442][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11946'. [ 812.073819][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 812.183773][ T8901] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 812.250804][ T8907] Mount JFS Failure: -5 [ 812.252663][ T8907] jfs_mount failed w/return code = -5 [ 812.386304][ T8910] delete_channel: no stack [ 812.503531][ T8925] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 812.594110][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.746108][ T8934] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 813.006139][ T8950] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 813.011028][ T8950] FAULT_INJECTION: forcing a failure. [ 813.011028][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 813.016679][ T8950] CPU: 2 UID: 0 PID: 8950 Comm: syz.5.11969 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.016707][ T8950] Tainted: [L]=SOFTLOCKUP [ 813.016714][ T8950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 813.016724][ T8950] Call Trace: [ 813.016730][ T8950] [ 813.016736][ T8950] dump_stack_lvl+0x100/0x190 [ 813.016766][ T8950] should_fail_ex.cold+0x5/0xa [ 813.016797][ T8950] should_failslab+0xc2/0x120 [ 813.016820][ T8950] ? tomoyo_realpath_from_path+0xb6/0x690 [ 813.016853][ T8950] __kmalloc_noprof+0xf6/0x9c0 [ 813.016877][ T8950] ? tomoyo_realpath_from_path+0xb6/0x690 [ 813.016894][ T8950] tomoyo_realpath_from_path+0xb6/0x690 [ 813.016918][ T8950] tomoyo_path_number_perm+0x23c/0x580 [ 813.016941][ T8950] ? tomoyo_path_number_perm+0x22e/0x580 [ 813.016966][ T8950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 813.017015][ T8950] ? find_held_lock+0x2b/0x80 [ 813.017035][ T8950] ? hook_file_ioctl_common+0x146/0x410 [ 813.017055][ T8950] ? __fget_files+0x215/0x3d0 [ 813.017078][ T8950] ? __fget_files+0x21f/0x3d0 [ 813.017101][ T8950] security_file_ioctl+0xd3/0x230 [ 813.017118][ T8950] __x64_sys_ioctl+0xb7/0x210 [ 813.017154][ T8950] do_syscall_64+0xc9/0xf80 [ 813.017175][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.017192][ T8950] RIP: 0033:0x7f07ff39acb9 [ 813.017206][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.017221][ T8950] RSP: 002b:00007f08001f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.017240][ T8950] RAX: ffffffffffffffda RBX: 00007f07ff615fa0 RCX: 00007f07ff39acb9 [ 813.017251][ T8950] RDX: 0000200000000000 RSI: 0000000000003b8b RDI: 0000000000000003 [ 813.017262][ T8950] RBP: 00007f08001f5090 R08: 0000000000000000 R09: 0000000000000000 [ 813.017278][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.017288][ T8950] R13: 00007f07ff616038 R14: 00007f07ff615fa0 R15: 00007fffc4285bf8 [ 813.017313][ T8950] [ 813.088015][ T8950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 813.432609][ T8976] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 813.438580][ T8976] FAULT_INJECTION: forcing a failure. [ 813.438580][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 813.442879][ T8976] CPU: 3 UID: 0 PID: 8976 Comm: syz.0.11980 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.442898][ T8976] Tainted: [L]=SOFTLOCKUP [ 813.442920][ T8976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 813.442943][ T8976] Call Trace: [ 813.442949][ T8976] [ 813.442954][ T8976] dump_stack_lvl+0x100/0x190 [ 813.442973][ T8976] should_fail_ex.cold+0x5/0xa [ 813.442996][ T8976] should_failslab+0xc2/0x120 [ 813.443011][ T8976] ? tomoyo_encode2+0xfb/0x3c0 [ 813.443023][ T8976] __kmalloc_noprof+0xf6/0x9c0 [ 813.443038][ T8976] ? tomoyo_encode2+0xfb/0x3c0 [ 813.443049][ T8976] tomoyo_encode2+0xfb/0x3c0 [ 813.443063][ T8976] tomoyo_encode+0x29/0x50 [ 813.443074][ T8976] tomoyo_realpath_from_path+0x18c/0x690 [ 813.443090][ T8976] tomoyo_path_number_perm+0x23c/0x580 [ 813.443107][ T8976] ? tomoyo_path_number_perm+0x22e/0x580 [ 813.443126][ T8976] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 813.443157][ T8976] ? find_held_lock+0x2b/0x80 [ 813.443171][ T8976] ? hook_file_ioctl_common+0x146/0x410 [ 813.443185][ T8976] ? __fget_files+0x215/0x3d0 [ 813.443201][ T8976] ? __fget_files+0x21f/0x3d0 [ 813.443216][ T8976] security_file_ioctl+0xd3/0x230 [ 813.443229][ T8976] __x64_sys_ioctl+0xb7/0x210 [ 813.443242][ T8976] do_syscall_64+0xc9/0xf80 [ 813.443257][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.443271][ T8976] RIP: 0033:0x7f15c6d9acb9 [ 813.443284][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.443299][ T8976] RSP: 002b:00007f15c7d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.443313][ T8976] RAX: ffffffffffffffda RBX: 00007f15c7015fa0 RCX: 00007f15c6d9acb9 [ 813.443323][ T8976] RDX: 0000200000000000 RSI: 0000000000003b8b RDI: 0000000000000003 [ 813.443333][ T8976] RBP: 00007f15c7d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 813.443343][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.443350][ T8976] R13: 00007f15c7016038 R14: 00007f15c7015fa0 R15: 00007ffd138866b8 [ 813.443366][ T8976] [ 813.443377][ T8976] ERROR: Out of memory at tomoyo_realpath_from_path. [ 813.594099][ T8986] tls_set_device_offload: netdev not found [ 813.616441][ T8984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.622772][ T8984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.667285][ T5997] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 813.717295][ T8984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.722201][ T8984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.797692][ T5997] usb 10-1: device descriptor read/64, error -71 [ 813.811522][ T8984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.815532][ T8984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.876427][ T8984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.880272][ T8984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.959345][T11784] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.962355][T11784] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.973411][T11784] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.976869][T11784] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.985899][T11784] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.989649][T11784] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.999332][T11784] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.002161][T11784] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.007258][T25502] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 814.048147][ T8996] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 814.057304][ T5997] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 814.119901][ T8998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 814.125810][ T8998] FAULT_INJECTION: forcing a failure. [ 814.125810][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.133448][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.2.11989 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.133475][ T8998] Tainted: [L]=SOFTLOCKUP [ 814.133482][ T8998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 814.133492][ T8998] Call Trace: [ 814.133498][ T8998] [ 814.133506][ T8998] dump_stack_lvl+0x100/0x190 [ 814.133533][ T8998] should_fail_ex.cold+0x5/0xa [ 814.133562][ T8998] _copy_from_user+0x2e/0xd0 [ 814.133585][ T8998] iommufd_fops_ioctl+0x300/0x520 [ 814.133608][ T8998] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.133639][ T8998] ? selinux_file_ioctl+0x139/0x290 [ 814.133657][ T8998] ? selinux_file_ioctl+0xb4/0x290 [ 814.133676][ T8998] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.133698][ T8998] __x64_sys_ioctl+0x18e/0x210 [ 814.133716][ T8998] do_syscall_64+0xc9/0xf80 [ 814.133736][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.133753][ T8998] RIP: 0033:0x7f937ed9acb9 [ 814.133769][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.133785][ T8998] RSP: 002b:00007f937cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.133801][ T8998] RAX: ffffffffffffffda RBX: 00007f937f015fa0 RCX: 00007f937ed9acb9 [ 814.133812][ T8998] RDX: 0000200000000000 RSI: 0000000000003b8b RDI: 0000000000000003 [ 814.133823][ T8998] RBP: 00007f937cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 814.133833][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.133842][ T8998] R13: 00007f937f016038 R14: 00007f937f015fa0 R15: 00007ffe7e8952a8 [ 814.133866][ T8998] [ 814.147337][T25502] usb 5-1: device descriptor read/64, error -71 [ 814.183452][ T9001] team_slave_0: entered promiscuous mode [ 814.198202][ T9001] team_slave_1: entered promiscuous mode [ 814.200820][ T5997] usb 10-1: device descriptor read/64, error -71 [ 814.203824][ T9001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 814.307700][ T5997] usb usb10-port1: attempt power cycle [ 814.427395][T25502] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 814.453334][ T9020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.567340][T25502] usb 5-1: device descriptor read/64, error -71 [ 814.647521][ T5997] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 814.677584][T25502] usb usb5-port1: attempt power cycle [ 814.679085][ T5997] usb 10-1: device descriptor read/8, error -71 [ 814.696657][ T9028] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 814.700946][ T9028] FAULT_INJECTION: forcing a failure. [ 814.700946][ T9028] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 814.705372][ T9028] CPU: 2 UID: 0 PID: 9028 Comm: syz.2.11998 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.705390][ T9028] Tainted: [L]=SOFTLOCKUP [ 814.705394][ T9028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 814.705401][ T9028] Call Trace: [ 814.705405][ T9028] [ 814.705409][ T9028] dump_stack_lvl+0x100/0x190 [ 814.705429][ T9028] should_fail_ex.cold+0x5/0xa [ 814.705449][ T9028] iommufd_get_object+0x7a/0x470 [ 814.705464][ T9028] ? __pfx_iommufd_get_object+0x10/0x10 [ 814.705477][ T9028] ? __might_fault+0xc5/0x140 [ 814.705493][ T9028] iommufd_hwpt_set_dirty_tracking+0xe6/0x300 [ 814.705512][ T9028] iommufd_fops_ioctl+0x358/0x520 [ 814.705527][ T9028] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.705547][ T9028] ? selinux_file_ioctl+0x139/0x290 [ 814.705559][ T9028] ? selinux_file_ioctl+0xb4/0x290 [ 814.705571][ T9028] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.705586][ T9028] __x64_sys_ioctl+0x18e/0x210 [ 814.705598][ T9028] do_syscall_64+0xc9/0xf80 [ 814.705612][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.705623][ T9028] RIP: 0033:0x7f937ed9acb9 [ 814.705633][ T9028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.705643][ T9028] RSP: 002b:00007f937cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.705655][ T9028] RAX: ffffffffffffffda RBX: 00007f937f015fa0 RCX: 00007f937ed9acb9 [ 814.705662][ T9028] RDX: 0000200000000000 RSI: 0000000000003b8b RDI: 0000000000000003 [ 814.705668][ T9028] RBP: 00007f937cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 814.705675][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.705681][ T9028] R13: 00007f937f016038 R14: 00007f937f015fa0 R15: 00007ffe7e8952a8 [ 814.705695][ T9028] [ 814.937686][ T5997] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 814.967932][ T5997] usb 10-1: device descriptor read/8, error -71 [ 814.979684][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.014595][ T9050] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 815.018498][ T9050] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 815.021677][ T9050] CPU: 3 UID: 0 PID: 9050 Comm: syz.2.12005 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.026136][ T9050] Tainted: [L]=SOFTLOCKUP [ 815.027920][ T9050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 815.032020][ T9050] RIP: 0010:h5_recv+0x108/0x960 [ 815.034156][ T9050] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 8c 4e a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 815.040761][ T9050] RSP: 0018:ffffc90005857be0 EFLAGS: 00010293 [ 815.042725][ T9050] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863ac8c [ 815.045290][ T9050] RDX: ffff888052a74980 RSI: ffffffff8863acd4 RDI: ffff888052a74980 [ 815.047823][ T9050] RBP: ffffc90005857d70 R08: 0000000000000005 R09: 0000000000000000 [ 815.050390][ T9050] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 815.052926][ T9050] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 815.055472][ T9050] FS: 00007f937cfd56c0(0000) GS:ffff8880d68dc000(0000) knlGS:0000000000000000 [ 815.058335][ T9050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.060526][ T9050] CR2: 00007f937cfd4ff8 CR3: 0000000042bd8000 CR4: 0000000000352ef0 [ 815.063088][ T9050] Call Trace: [ 815.064218][ T9050] [ 815.065206][ T9050] ? __pfx_h5_recv+0x10/0x10 [ 815.066725][ T9050] hci_uart_tty_receive+0x259/0x7e0 [ 815.068412][ T9050] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 815.070307][ T9050] tty_ioctl+0x909/0x1690 [ 815.071787][ T9050] ? __pfx_tty_ioctl+0x10/0x10 [ 815.073384][ T9050] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 815.075502][ T9050] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 815.077502][ T5997] usb usb10-port1: unable to enumerate USB device [ 815.077656][ T9050] ? selinux_file_ioctl+0x139/0x290 [ 815.081437][ T9050] ? selinux_file_ioctl+0xb4/0x290 [ 815.083114][ T9050] ? __pfx_tty_ioctl+0x10/0x10 [ 815.084695][ T9050] __x64_sys_ioctl+0x18e/0x210 [ 815.086265][ T9050] do_syscall_64+0xc9/0xf80 [ 815.087746][ T9050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.089672][ T9050] RIP: 0033:0x7f937ed9acb9 [ 815.091164][ T9050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.097307][ T9050] RSP: 002b:00007f937cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.099998][ T9050] RAX: ffffffffffffffda RBX: 00007f937f016090 RCX: 00007f937ed9acb9 [ 815.102649][ T9050] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 815.105195][ T9050] RBP: 00007f937ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 815.107746][ T9050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.110298][ T9050] R13: 00007f937f016128 R14: 00007f937f016090 R15: 00007ffe7e8952a8 [ 815.113549][ T9050] [ 815.114825][ T9050] Modules linked in: [ 815.116847][ T9050] ---[ end trace 0000000000000000 ]--- [ 815.120363][T25502] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 815.123041][ T9050] RIP: 0010:h5_recv+0x108/0x960 [ 815.124740][ T9050] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 8c 4e a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 815.131337][ T9050] RSP: 0018:ffffc90005857be0 EFLAGS: 00010293 [ 815.133322][ T9050] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863ac8c [ 815.135889][ T9050] RDX: ffff888052a74980 RSI: ffffffff8863acd4 RDI: ffff888052a74980 [ 815.138664][ T9050] RBP: ffffc90005857d70 R08: 0000000000000005 R09: 0000000000000000 [ 815.141281][ T9050] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 815.143811][ T9050] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 815.146283][ T9050] FS: 00007f937cfd56c0(0000) GS:ffff8880d68dc000(0000) knlGS:0000000000000000 [ 815.150371][T25502] usb 5-1: device descriptor read/8, error -71 [ 815.152996][ T9050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.155696][ T9050] CR2: 00007f937cfd4ff8 CR3: 0000000042bd8000 CR4: 0000000000352ef0 [ 815.159324][ T9050] Kernel panic - not syncing: Fatal exception [ 815.162298][ T9050] Kernel Offset: disabled [ 815.163707][ T9050] Rebooting in 86400 seconds..