last executing test programs:

1m6.718883871s ago: executing program 1 (id=137):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0)
creat(&(0x7f0000000080)='./cgroup\x00', 0x0)

1m6.658329979s ago: executing program 1 (id=138):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0) (async)
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f000000c700)) (async)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f000000c700))
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0xfe, 0x7fff0006}]})
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000080)={0x20004, <r11=>r9, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r11}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r11})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r12=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r12, 0xff, 0x100007, 0xa, 0x1ff, 0x1})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
read$FUSE(r1, &(0x7f000000d000)={0x2020}, 0x2020)

1m6.514919337s ago: executing program 1 (id=144):
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
setuid(0xee00)
mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r1, {0x1}}, './file0\x00'})
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x3, 0x0, 0xb, 0x1, 0xffffffffffffffe0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x7029, 0x4a, &(0x7f0000000280)=""/74, 0x41000, 0x11, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r4, r5, 0x1, r6], &(0x7f0000000400)=[{0x5, 0x2, 0x2, 0xa}, {0x1, 0x5, 0x10}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x2, 0x6, 0x7}], 0x10, 0xe}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff010000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010065727370616e000020000280080006007f000001050008000700000005000900230000000400120008000a00", @ANYRES32=r3, @ANYBLOB="b113c6ad858341e3e84cab750ee606cb2eab600151cecd63a8180fd16cf37f85983aed3f02dd9daade05570f281a8c6a7f85ec9f95"], 0x58}, 0x1, 0x0, 0x0, 0x4890}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async)
setuid(0xee00) (async)
mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x3, 0x0, 0xb, 0x1, 0xffffffffffffffe0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x7029, 0x4a, &(0x7f0000000280)=""/74, 0x41000, 0x11, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r4, r5, 0x1, r6], &(0x7f0000000400)=[{0x5, 0x2, 0x2, 0xa}, {0x1, 0x5, 0x10}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x2, 0x6, 0x7}], 0x10, 0xe}, 0x94) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff010000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010065727370616e000020000280080006007f000001050008000700000005000900230000000400120008000a00", @ANYRES32=r3, @ANYBLOB="b113c6ad858341e3e84cab750ee606cb2eab600151cecd63a8180fd16cf37f85983aed3f02dd9daade05570f281a8c6a7f85ec9f95"], 0x58}, 0x1, 0x0, 0x0, 0x4890}, 0x0) (async)

1m6.424300541s ago: executing program 1 (id=145):
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45)
syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0)

1m6.423736279s ago: executing program 1 (id=146):
r0 = msgget$private(0x0, 0x31)
msgsnd(r0, &(0x7f00000035c0)=ANY=[@ANYRES8=r0], 0x1b, 0x5f005e4c1fdd0237)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/108}, 0x74, 0x0, 0x4800) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003600)=@delchain={0x2144, 0x65, 0x508, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xe}, {0xb, 0xa}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @filter_kind_options=@f_cgroup={{0xb}, {0xd40, 0x2, [@TCA_CGROUP_POLICE={0x894, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3ff, 0xfff, 0xc0e, 0x7, 0xffffffc0, 0xdd1, 0x9, 0x8, 0x80, 0x3, 0x0, 0x4, 0x5, 0x9, 0x5, 0x2, 0x6, 0x3, 0x7, 0x7, 0x10001, 0x0, 0x3, 0x5, 0x7, 0x40, 0x3d2f9c21, 0x2, 0xffffffff, 0x401, 0x2, 0x6, 0x3, 0xd, 0x6, 0x4, 0x9, 0x5, 0x6, 0x3, 0xf29, 0x6, 0x3, 0x1ff, 0x7, 0x1000, 0xfffffffa, 0x7, 0x8, 0x3, 0x5, 0x7, 0x8, 0xa8, 0x1, 0x4, 0x10, 0x7f, 0x0, 0x1, 0xf02d, 0x1, 0x9, 0x6, 0xf0, 0x0, 0x8, 0x904b, 0x4, 0x0, 0x8, 0x7, 0xa1, 0x200, 0x2, 0x0, 0x7fff, 0xe23a, 0x1, 0x1, 0xb, 0xb, 0x4, 0x3ff, 0x5, 0x7fff, 0xfffffff7, 0x5, 0x4, 0x5, 0x858f, 0xa5e, 0x400, 0x0, 0x0, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x3, 0x80000000, 0x0, 0x0, 0x5e2, 0x1, 0x3, 0xbac8, 0x1000, 0x9, 0x7, 0x7, 0x7, 0xdc6, 0x5, 0x5, 0x2, 0x13, 0x9, 0x9d, 0x5, 0x7ff, 0xab, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8008, 0x0, 0xfffffff9, 0x9, 0x5, 0x3b, 0x7fffffff, 0xff9, 0xc04, 0xd, 0xe6, 0xf7a, 0x8, 0x9, 0x2, 0x6, 0x6ebf9a4c, 0x80c, 0xfa6, 0xfffffffa, 0xfffffbff, 0x800, 0x1, 0xf9, 0x7fffffff, 0x4, 0x100, 0x9, 0x5, 0x1e, 0x6, 0xa, 0x7, 0x400, 0x3, 0xffffffff, 0xc, 0x4, 0x4, 0x4, 0xffffffff, 0x3, 0xffff0000, 0x100, 0x1, 0x9, 0x80, 0x6dffdd53, 0x4, 0xfcc4, 0x2, 0xfff, 0xbdb, 0xcbdd, 0x111f475e, 0x6, 0x200, 0x2, 0x151e4c6a, 0x7, 0x8, 0x3, 0x1, 0xc, 0x2, 0xaf, 0xfffffff5, 0x670e, 0x0, 0xb, 0xa, 0x0, 0x5, 0x6, 0x0, 0x1, 0xc, 0x4840c32a, 0x2, 0x3, 0x8, 0x0, 0x1, 0x0, 0x6, 0x2, 0x9, 0x7, 0x0, 0x7, 0x4, 0x5, 0x9, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x5, 0x9, 0x5, 0x59f8a81e, 0xe8, 0x1, 0xc, 0xe, 0x7, 0x5, 0x0, 0x4, 0x0, 0x8ea0, 0x5, 0x7, 0x30, 0x5, 0x2, 0x2, 0x9, 0x7, 0x7, 0x7fffffff, 0x7f, 0x7, 0x37716594]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0xffffffffffffffff, 0x7, 0xffffff9a, 0x80, {0x4, 0x1, 0x7, 0x35, 0x100, 0x2}, {0x2, 0x1, 0x5, 0x6, 0x0, 0x101}, 0x3, 0xa, 0xff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x7, 0x9, 0x5, {0x4, 0x2, 0x401, 0x2, 0x2, 0xffffff01}, {0x0, 0x1, 0x4, 0x8, 0x6, 0x3}, 0x1, 0x5, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x8, 0x0, 0x7, 0x0, 0x5, 0x2, 0x9, 0xa, 0x3, 0x2, 0x9, 0xfd, 0xf, 0x7, 0x9, 0x8, 0x600000, 0xfffffff9, 0x7, 0x1, 0x3, 0x1, 0x0, 0xf, 0x7, 0x3, 0x3, 0x8, 0x0, 0x401, 0x1, 0xff, 0x58, 0x43c7, 0x40, 0x0, 0xffff, 0x7, 0x8, 0x3, 0xb1, 0x4de5, 0x4, 0xfffffffb, 0x2, 0x8ae, 0x26, 0x7fff, 0x1, 0x7, 0x11, 0x8, 0x2, 0xfff, 0x7, 0xb62, 0x8, 0x80, 0x36b, 0x8, 0xa411, 0x40, 0x3ff, 0x7fffffff, 0xd3, 0x1, 0x6, 0x4, 0x3, 0xffffffff, 0x900, 0xf1, 0xffff, 0x6, 0x9, 0x7, 0x7, 0x5, 0xb21e, 0x7, 0x4, 0x6, 0x6, 0x31, 0x4, 0x7ff, 0x77, 0x0, 0x9, 0x6, 0x80000001, 0x8, 0x3, 0x9, 0x8, 0x10, 0x9, 0x9, 0xd, 0x61a, 0x9, 0x454dc155, 0x7, 0x2, 0x5, 0x6, 0x0, 0x20d9, 0x2, 0x7f, 0x6, 0x2, 0x9cc1, 0x6, 0x4, 0x9, 0x3, 0x0, 0x3, 0x4, 0x7f, 0x5, 0x80000001, 0xb7, 0x1, 0x3, 0xfffffff4, 0x4, 0x0, 0x8, 0xf205, 0x8, 0x824, 0x4, 0x9, 0x7, 0x10, 0x3, 0x1, 0x9, 0x0, 0x2, 0x427a7841, 0x7, 0x1000, 0x5, 0x9, 0x1, 0x3, 0x1, 0x2, 0x5, 0x8, 0x250b, 0x1, 0x0, 0xfffffff5, 0x3, 0x9, 0x81, 0x3, 0xa, 0x2, 0x0, 0x8, 0x8, 0x4, 0x5, 0x1000, 0x5, 0x8, 0x794, 0x9, 0x8, 0x7, 0x7, 0x40, 0x9, 0xf, 0x0, 0x1, 0x3ff, 0x7ff, 0x8df, 0x3, 0x5da, 0x6, 0x9, 0x8001, 0x9f0, 0x6, 0x1, 0x8d17, 0x7, 0x6, 0x9, 0x6be, 0x156339b6, 0xf, 0x7ff, 0x68bf, 0xf, 0xfffffffc, 0xfffffff7, 0x6, 0x8f, 0x5, 0x9, 0xffffff4d, 0xd9c9, 0x4, 0x0, 0x80000001, 0x1ff, 0xa, 0x4, 0x79e3, 0x6, 0x7, 0x34, 0x7fff, 0x3, 0x9, 0x1ff, 0x0, 0xfffffff7, 0x8, 0x0, 0x6, 0xaabd, 0xffffffff, 0xfffff6d4, 0x8, 0x9, 0xffff, 0x5, 0x7ff, 0xa00000, 0x5, 0xfa, 0x2400000, 0x2, 0x5, 0x6, 0x2, 0x4, 0xffff, 0xda5e, 0xffff8263, 0x28e1, 0x401, 0x9, 0x6645, 0x556]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_CGROUP_ACT={0x190, 0x1, [@m_ct={0x74, 0x1e, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_PARMS={0x18, 0x1, {0xfffff01d, 0x800, 0x7, 0x3ff, 0x3}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xb6, 0x6, "7916b2fafa4652a175df95373ef9a89143a13756119dfd19768b84b0bf5d64b2e533d25ab047749225a363b58482f3693b6006fa7a2f487c3c77686f3cedc39dfe1d458170ebef3c9a1033dc2434da495e61deb7cb1e1d8fd18ec045d9df92acb1e3b163d325f8e5fc33a14d68ffae4a04e8a4ad24c415ca9599c1372d253e2b6723c7274ad3fa2e6c0a69db2e4f8a31452b7a9a645b85f54309eef8775a3e3614f00cb3a025633806e2db4d48624b1477cb"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_ACT={0x318, 0x1, [@m_csum={0xb0, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x10000000, 0x0, 0x7}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x59, 0x0, 0x20000000, 0x6, 0x4}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xff, 0x6, 0x6, 0x6}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xf, 0x3, 0x4, 0x4c}, 0x61}}]}, {0x14, 0x6, "faaef7b8678c30a661301e369b63db35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x264, 0x13, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0xfffffffd, 0x0, 0xa, 0x10}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x10, 0x5, 0x0, 0x8000}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x2, 0x3, 0x3}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x5, 0x9, 0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xc, 0x1, 0x7, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x810, 0x5, 0x0, 0x9, 0x46d}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x9, 0x0, 0x80, 0x6}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x563, 0xfffffeff}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x85d, 0xf8c, 0x0, 0x8, 0x5}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8b8, 0x4, 0x7, 0x77c, 0x7}, 0x1, r3}}]}, {0xf8, 0x6, "3d4719b88d5db0e6071266288645d98e3b1a34e7bd1adfd2cba112812720e7ddbfa3ab0e208f3aac10efc549b6ae831a4de2ea94c66ca461bc0542b650be8e7b18efffb3b77c89a2ba3cae735393880df282d16d54c54533f04287dbb4e53feec289d715d6b6eb009e7bbaa1d0ff1451bdaa628f4b7490ec7938d719c91e3d407534b8ab2db8372cbaedfba2877f1ae49bd0c9fadc86a5bd43fe8fd07bee92e828257af26311106635e39cfa7f2bdbfc63ecef8c0b175cf99044326ab646defd518f7341e87566d028a6314470bfc8be64f73e2820a5498b649747661a7f21f15264c54654f515675cc80c6e2783cdfd2ac38ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x23de}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1370, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_ACT={0x1318, 0x7, [@m_ct={0x80, 0x1d, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}]}, {0x4f, 0x6, "01d198177f68a2bb61e6834e419bd26adcc761090e8bc913949118bf80b8ee0d13df4b7a815c62c608fe42898c8cac2b570ee7abbd475e843a7f1c5830f1f525fc13f353a2d7570058a5d3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1294, 0x0, 0x0, 0x0, {{0x7}, {0x11b0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x61, 0x6, {0x7, 'nat\x00', 0x65, 0x6, "3766196edcabe64885566aea23f0e2dbe328841cc5580ea4be4a048d6bad0f8b1d194d10b0273cecc7ce75143c18089d4f35ff57540c29"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xc3, 0x6, {0x3, 'security\x00', 0x4, 0x3ff, "e4ca8426625afc46af00c0eec4ab01564359f6b531ccc693fa8071679bbf6014306e685672de6f25097e4945bd6f4f6ffc905d37675ad64cafc340cac1f81f3a3d0b34779dbeea432707474efc5623386967aaeed0ae1009d269c80fef1a5134c9d68f022e11dcfff90213affd6dabdc9d1fb52d7e7d72cfd1c2573de81136dcf3504d6e545fe37242d21c504eeff7767571c957ab572874e3"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x2, 'raw\x00', 0x0, 0x4, "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"}}]}, {0xbd, 0x6, "4ccd0cd5b1fc267517abe10d842da22cfcc586d5c0207368d761bf2618d90260393ca5301841b8822cde850697f5e86c4bb983ce121a8cb0671908f8f7d0730eb78b74e8265d79d1e20ee7ad94e452355b9204c8602d007f47221a2240681754c1c4fbb6d3060bdb9425f805b9b3e322798f961b79d336a6240c3f7d552edc25372b274667a2d1d83e2079bc24003450e5dc0138b2082366c18f7d510a73eeabe7b593d26585a3348ea901652ff19183ca237876e5ef94a556"}, {0xc, 0x7, {0xf0ce207a8568a973, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfb}}]}, 0x2144}}, 0x1) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x6}, {0xfff2, 0xffff}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x1e, 0x0, &(0x7f00000002c0)) (async)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf2501000000100002800c000180080001000500110004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async, rerun: 32)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
timer_create(0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRESOCT=0x0, @ANYBLOB="1051e8d4c71000002400128011000100627269646765487bc8dc1900000000000000000000000026943046feb170ef59acd6f22c3593f8ea2c1103acf097ef0589499ab8d923ea33f042fc7fa434d55b24f814a0e8125d93af58d2ade5d41e3fd35b69f9688f8b3f9604feabdfa3c50b12410cf26f69869fa7eb432db1fc2bee62addca1ab16b749015d6b6f61e3c269876488185100f60352f5b75c1346181351a9a1cb02"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x40400d5) (rerun: 64)
timer_create(0x7, 0x0, &(0x7f0000000080)) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) (async)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async)
lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) (async, rerun: 32)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) (rerun: 32)
getdents64(r10, &(0x7f0000000400)=""/4096, 0xc00) (async)
getdents64(r10, 0x0, 0x6adcfe62401b8c1f)

1m6.360015241s ago: executing program 1 (id=148):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 64)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (rerun: 64)
ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000080)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000002e00090027bd700000040000040000003c00180008ac0f0002ac0f0009ac0f02000700000047236b91931953af0e321188bc14dc0800000000000000f287c7bec8028105fcbee7c6ed007b1a290714d19f3e76d8ccb74442a56260e6a016b4889c2b1491bc058e843da2bbfbffa6e22e6c01e8e6e948659498495ef7a93f37b3fcbaf4b36a1f764c79f1b1ef2378bad359b9ae24ea0cc599aa7b174be688d84eff9f2af0f172286ed90788d1110000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) (rerun: 64)

59.25158093s ago: executing program 3 (id=259):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x200, 0x20000)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x653e, 0x5, 0x201d, 0x3, 0x7, 0x0, 0x2, 0x3}})

59.25146782s ago: executing program 3 (id=260):
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140))
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,'])

59.200083368s ago: executing program 3 (id=261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000080)={'veth1_to_hsr\x00', @ifru_names='veth1_to_bridge\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r5, 0x1, r3, 0x4d53, 0x80000})
ioctl$sock_bt_hci(r4, 0x800448d3, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

59.150237848s ago: executing program 3 (id=263):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r2}}, 0x20)
umount2(&(0x7f0000000180)='./file0\x00', 0xa)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
syz_create_resource$binfmt(0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04120801aaaaaaaaaa106dfe5e1d0f44fe1efe2778f01bd782f9605c7490c3001ec64f0bafdc71b1d5d114090c00155cbc61110dc2eccba944297db35680088cacf6d52e0016612041609e17d88ccd14cde24cc05cff486b6eef08eae08760aab99291bd928b6cadf82444f94dd93c95aaab4574b3624833be08c4aedcddf19e1c690d3a46656dc8e781ed3ee04286c075714dcc51cee5beb6abaa511f7e9c2cb10d99c2bdfe6163"], 0xb)
r3 = open_tree(r2, &(0x7f0000000140)='./file0/file0\x00', 0x88000)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000032c0)=@manufact={0x4, 0x3, 0x800, "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"})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003b00)={r3}, 0x4)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8)

59.147423994s ago: executing program 3 (id=265):
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x94}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a08000f00070000000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) (async)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x4)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='devices.list\x00', 0x5000000, 0x0)
readv(r3, &(0x7f00000012c0)=[{&(0x7f0000002c40)=""/4081, 0xff1}], 0x1)

58.779866308s ago: executing program 3 (id=272):
syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xb1, [@dev]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r6, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x4}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
r8 = epoll_create(0x5)
epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)
lseek(r0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)

58.744055878s ago: executing program 32 (id=272):
syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xb1, [@dev]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r6, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x4}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
r8 = epoll_create(0x5)
epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)
lseek(r0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)

51.362374617s ago: executing program 33 (id=148):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 64)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (rerun: 64)
ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000080)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000002e00090027bd700000040000040000003c00180008ac0f0002ac0f0009ac0f02000700000047236b91931953af0e321188bc14dc0800000000000000f287c7bec8028105fcbee7c6ed007b1a290714d19f3e76d8ccb74442a56260e6a016b4889c2b1491bc058e843da2bbfbffa6e22e6c01e8e6e948659498495ef7a93f37b3fcbaf4b36a1f764c79f1b1ef2378bad359b9ae24ea0cc599aa7b174be688d84eff9f2af0f172286ed90788d1110000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) (rerun: 64)

3.096868007s ago: executing program 0 (id=1286):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r1, &(0x7f0000000380)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x64, 0x6, 0x0, @loopback, @mcast1, {[@dstopts={0x33, 0x2, '\x00', [@pad1, @generic={0x6b}, @padn, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x2, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x8c)

3.048847349s ago: executing program 0 (id=1290):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80800)

3.048567175s ago: executing program 0 (id=1293):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
splice(r0, &(0x7f0000000180), r1, 0x0, 0x6, 0x3)

2.989074219s ago: executing program 0 (id=1296):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800034000000008080005400000001a100002000c000280050001"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)

2.98891635s ago: executing program 0 (id=1298):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000011147d852abd70000000000008004b0028"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

2.928810153s ago: executing program 0 (id=1301):
r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000180)=0xb)

1.608643214s ago: executing program 5 (id=1347):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x2000000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.548954876s ago: executing program 5 (id=1348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "1fbabdae00000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0)

1.548738901s ago: executing program 5 (id=1349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x800000000000}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0)

1.498405202s ago: executing program 5 (id=1350):
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.14913873s ago: executing program 4 (id=1352):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080)

1.149013081s ago: executing program 4 (id=1353):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)

1.06877017s ago: executing program 4 (id=1354):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x822002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x1136, 0x4)
io_uring_enter(r0, 0x731d, 0x7721, 0x16, 0x0, 0x0)
unshare(0x22020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x40010)
mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0)

979.438398ms ago: executing program 4 (id=1355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

625.319877ms ago: executing program 5 (id=1357):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x80, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

624.920527ms ago: executing program 5 (id=1358):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200008010048000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x8000)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

526.697696ms ago: executing program 2 (id=1360):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

466.360123ms ago: executing program 2 (id=1361):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0)

368.415913ms ago: executing program 2 (id=1362):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
syz_io_uring_setup(0x4f6e, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc9})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

368.135827ms ago: executing program 2 (id=1363):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @private1, @mcast2}}}}}}}, 0x0)

309.320981ms ago: executing program 2 (id=1364):
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
write(r1, &(0x7f00000002c0)="fe", 0xfdef)
read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0)

145.329982ms ago: executing program 4 (id=1365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

3.089962ms ago: executing program 4 (id=1366):
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=1374):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0xffffffffffffffff, 0x10}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20)

kernel console output (not intermixed with test programs):

fs: 'hsr0' already exists in 'hsr'
[   62.193929][ T6469] Cannot create hsr debugfs directory
[   62.295353][ T1165] bridge_slave_1: left allmulticast mode
[   62.297458][ T1165] bridge_slave_1: left promiscuous mode
[   62.300309][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.306866][ T1165] bridge_slave_0: left allmulticast mode
[   62.308844][ T1165] bridge_slave_0: left promiscuous mode
[   62.310789][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.510124][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[   62.515845][ T6508] binder_alloc: 6507: binder_alloc_buf, no vma
[   62.522913][ T6508] input: syz1 as /devices/virtual/input/input6
[   62.531146][ T6508] MINIX-fs: unable to read superblock
[   62.589157][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[   62.598655][ T6517] binder: BINDER_SET_CONTEXT_MGR already set
[   62.601259][ T6517] binder: 6515:6517 ioctl 4018620d 2000000000c0 returned -16
[   62.604624][ T6517] binder: BINDER_SET_CONTEXT_MGR already set
[   62.607251][ T6517] binder: 6515:6517 ioctl 4018620d 200000000040 returned -16
[   62.637184][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.643072][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.646628][ T1165] bond0 (unregistering): Released all slaves
[   62.680855][ T6521] netlink: 'syz.2.163': attribute type 8 has an invalid length.
[   62.720429][ T6527] hfs: can't find a HFS filesystem on dev sr0
[   62.725341][ T6526] hfs: can't find a HFS filesystem on dev sr0
[   62.801558][ T6526] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   62.826150][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[   62.835072][   T10] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105)
[   62.851929][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'.
[   62.971999][ T1165] hsr_slave_0: left promiscuous mode
[   62.977131][ T1165] hsr_slave_1: left promiscuous mode
[   62.979821][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.982196][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.986392][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.989618][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.999660][ T1165] veth1_macvtap: left promiscuous mode
[   63.002594][ T1165] veth0_macvtap: left promiscuous mode
[   63.005111][ T1165] veth1_vlan: left promiscuous mode
[   63.007526][ T1165] veth0_vlan: left promiscuous mode
[   63.117546][ T1165] team0 (unregistering): Port device team_slave_1 removed
[   63.124815][ T1165] team0 (unregistering): Port device team_slave_0 removed
[   63.197520][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.277542][ T6568] netlink: 'syz.0.174': attribute type 11 has an invalid length.
[   63.355515][ T6469] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.366421][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.370965][ T6469] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.380972][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.384625][ T6469] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.393115][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.395992][ T6469] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.402384][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.443847][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.453812][ T6469] 8021q: adding VLAN 0 to HW filter on device team0
[   63.460200][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.462443][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.468407][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.470650][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.486702][ T6591] binder_alloc: 6586: binder_alloc_buf, no vma
[   63.562737][ T6599] net_ratelimit: 1 callbacks suppressed
[   63.562749][ T6599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.667927][ T6615] bond0: entered promiscuous mode
[   63.669564][ T6615] bond_slave_0: entered promiscuous mode
[   63.671381][ T6615] bond_slave_1: entered promiscuous mode
[   63.675502][ T6615] batadv0: entered promiscuous mode
[   63.679613][ T6615] 8021q: adding VLAN 0 to HW filter on device hsr1
[   63.682964][ T6615] bond0: left promiscuous mode
[   63.684469][ T6615] bond_slave_0: left promiscuous mode
[   63.686407][ T6615] bond_slave_1: left promiscuous mode
[   63.691273][ T6615] batadv0: left promiscuous mode
[   63.699755][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.716628][ T6617] netlink: 'syz.2.180': attribute type 8 has an invalid length.
[   63.719011][ T6469] veth0_vlan: entered promiscuous mode
[   63.722509][ T6469] veth1_vlan: entered promiscuous mode
[   63.736312][ T6469] veth0_macvtap: entered promiscuous mode
[   63.740166][ T6469] veth1_macvtap: entered promiscuous mode
[   63.749051][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.754435][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.757802][ T5741] Bluetooth: hci3: command tx timeout
[   63.761739][  T190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.764560][  T190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.767572][  T190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.771983][  T190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.818314][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.820706][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.837527][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.840681][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.844664][   T40] kauditd_printk_skb: 59 callbacks suppressed
[   63.844673][   T40] audit: type=1400 audit(1780193306.829:528): avc:  denied  { mounton } for  pid=6469 comm="syz-executor" path="/syzkaller.Ct4Hfz/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   63.855369][   T40] audit: type=1400 audit(1780193306.829:529): avc:  denied  { mount } for  pid=6469 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.862268][   T40] audit: type=1400 audit(1780193306.829:530): avc:  denied  { mount } for  pid=6469 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   63.868927][   T40] audit: type=1400 audit(1780193306.829:531): avc:  denied  { mounton } for  pid=6469 comm="syz-executor" path="/syzkaller.Ct4Hfz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   63.877125][   T40] audit: type=1400 audit(1780193306.829:532): avc:  denied  { mounton } for  pid=6469 comm="syz-executor" path="/syzkaller.Ct4Hfz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   63.885331][   T40] audit: type=1400 audit(1780193306.829:533): avc:  denied  { unmount } for  pid=6469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   63.886340][ T6620] random: crng reseeded on system resumption
[   63.891442][   T40] audit: type=1400 audit(1780193306.839:534): avc:  denied  { mounton } for  pid=6469 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   63.891466][   T40] audit: type=1400 audit(1780193306.839:535): avc:  denied  { mounton } for  pid=6469 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   63.891486][   T40] audit: type=1400 audit(1780193306.849:536): avc:  denied  { ioctl } for  pid=6618 comm="syz.2.181" path="socket:[13845]" dev="sockfs" ino=13845 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   63.891507][   T40] audit: type=1400 audit(1780193306.869:537): avc:  denied  { write } for  pid=6618 comm="syz.2.181" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   64.230582][ T6645] : entered promiscuous mode
[   64.266698][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   64.360212][ T6653] netlink: 'syz.3.191': attribute type 2 has an invalid length.
[   64.657024][   T54] cfg80211: failed to load regulatory.db
[   64.671402][ T6676] SELinux:  policydb magic number 0x6a1b981b does not match expected magic number 0xf97cff8c
[   64.675257][ T6676] SELinux: failed to load policy
[   64.678626][ T6676] xt_connbytes: Forcing CT accounting to be enabled
[   65.507728][   T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   65.657756][   T29] usb 7-1: Using ep0 maxpacket: 32
[   65.661413][   T29] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[   65.664668][   T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   65.669203][   T29] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   65.673525][   T29] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   65.678903][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[   65.685987][   T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   65.690246][   T29] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   65.693692][   T29] usb 7-1: Product: syz
[   65.695399][   T29] usb 7-1: Manufacturer: syz
[   65.697303][   T29] usb 7-1: SerialNumber: syz
[   65.701973][   T29] usb 7-1: config 0 descriptor??
[   65.707067][   T29] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   65.713417][   T29] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   65.837748][ T5741] Bluetooth: hci3: command tx timeout
[   65.920831][   T29] usb 7-1: USB disconnect, device number 2
[   65.938542][ T6779] evm: overlay not supported
[   65.945292][   T29] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[   66.022709][ T6794] x_tables: duplicate underflow at hook 1
[   66.163408][ T6812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   66.182626][ T6808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=6808 comm=syz.3.228
[   66.382475][ T6825] QAT: failed to copy from user.
[   66.393551][ T6825] QAT: Invalid ioctl -1071622043
[   66.438047][   T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   66.466403][ T6830] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   66.588357][   T50] usb 8-1: Using ep0 maxpacket: 8
[   66.591724][   T50] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[   66.594679][   T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   66.598723][   T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   66.602081][   T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 45600, setting to 1024
[   66.606348][   T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   66.611243][   T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   66.616264][   T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   66.619419][   T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.647793][   T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   66.737806][   T39] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   66.801009][   T29] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   66.804095][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.806387][   T29] usb 5-1: Product: syz
[   66.807623][   T29] usb 5-1: Manufacturer: syz
[   66.809698][   T29] usb 5-1: SerialNumber: syz
[   66.825811][   T50] usb 8-1: usb_control_msg returned -32
[   66.827454][   T50] usbtmc 8-1:16.0: can't read capabilities
[   66.890422][   T39] usb 7-1: config 1 interface 0 has no altsetting 0
[   66.894076][   T39] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   66.896756][   T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.899871][   T39] usb 7-1: Product: syz
[   66.901142][   T39] usb 7-1: Manufacturer: syz
[   66.902602][   T39] usb 7-1: SerialNumber: syz
[   67.123493][ T6835] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[   67.127067][ T6835] CPU: 3 UID: 0 PID: 6835 Comm: syz.2.235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   67.127084][ T6835] Tainted: [L]=SOFTLOCKUP
[   67.127087][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   67.127093][ T6835] Call Trace:
[   67.127097][ T6835]  <TASK>
[   67.127101][ T6835]  dump_stack_lvl+0x100/0x190
[   67.127123][ T6835]  sysfs_warn_dup.cold+0x1c/0x28
[   67.127140][ T6835]  sysfs_create_dir_ns+0x24b/0x2b0
[   67.127153][ T6835]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   67.127165][ T6835]  ? find_held_lock+0x2b/0x80
[   67.127174][ T6835]  ? kobject_add_internal+0x25f/0x930
[   67.127198][ T6835]  ? kobject_add_internal+0x25f/0x930
[   67.127214][ T6835]  ? class_dir_child_ns_type+0xd/0x60
[   67.127241][ T6835]  kobject_add_internal+0x2c8/0x930
[   67.127259][ T6835]  kobject_add+0x16a/0x1e0
[   67.127274][ T6835]  ? __pfx_kobject_add+0x10/0x10
[   67.127292][ T6835]  ? kobject_put+0xb9/0x640
[   67.127308][ T6835]  ? device_add+0xc48/0x1950
[   67.127325][ T6835]  device_add+0x294/0x1950
[   67.127341][ T6835]  ? lockdep_init_map_type+0x5c/0x250
[   67.127368][ T6835]  ? __pfx_device_add+0x10/0x10
[   67.127384][ T6835]  ? lockdep_init_map_type+0x5c/0x250
[   67.127397][ T6835]  ? __init_waitqueue_head+0xca/0x150
[   67.127416][ T6835]  tty_register_device_attr+0x388/0x7f0
[   67.127429][ T6835]  ? lockdep_init_map_type+0x5c/0x250
[   67.127442][ T6835]  ? __pfx_tty_register_device_attr+0x10/0x10
[   67.127457][ T6835]  ? tty_port_init+0x156/0x1c0
[   67.127470][ T6835]  gsm_activate_mux+0x155/0x2a0
[   67.127483][ T6835]  gsmld_ioctl+0xbbc/0x15c0
[   67.127500][ T6835]  ? __pfx_gsmld_ioctl+0x10/0x10
[   67.127515][ T6835]  ? __ldsem_down_read_nested+0xf3/0x890
[   67.127532][ T6835]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[   67.127549][ T6835]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   67.127562][ T6835]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[   67.127579][ T6835]  ? __pfx_gsmld_ioctl+0x10/0x10
[   67.127592][ T6835]  tty_ioctl+0x11c2/0x1640
[   67.127604][ T6835]  ? __pfx_tty_ioctl+0x10/0x10
[   67.127615][ T6835]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   67.127637][ T6835]  ? __fget_files+0x215/0x3d0
[   67.127661][ T6835]  ? hook_file_ioctl_common+0x149/0x410
[   67.127677][ T6835]  ? selinux_file_ioctl+0x13b/0x290
[   67.127691][ T6835]  ? selinux_file_ioctl+0xb6/0x290
[   67.127707][ T6835]  ? __pfx_tty_ioctl+0x10/0x10
[   67.127719][ T6835]  __x64_sys_ioctl+0x18e/0x210
[   67.127731][ T6835]  do_syscall_64+0x115/0x870
[   67.127744][ T6835]  ? clear_bhb_loop+0x40/0x90
[   67.127757][ T6835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.127768][ T6835] RIP: 0033:0x7f030939ce59
[   67.127777][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.127787][ T6835] RSP: 002b:00007f030a2f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.127802][ T6835] RAX: ffffffffffffffda RBX: 00007f0309615fa0 RCX: 00007f030939ce59
[   67.127811][ T6835] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 000000000000000c
[   67.127820][ T6835] RBP: 00007f0309432d6f R08: 0000000000000000 R09: 0000000000000000
[   67.127828][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.127836][ T6835] R13: 00007f0309616038 R14: 00007f0309615fa0 R15: 00007ffce291eb98
[   67.127858][ T6835]  </TASK>
[   67.146882][   T29] rtl8150 5-1:1.0: couldn't reset the device
[   67.149672][ T6835] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[   67.152244][   T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[   67.184077][ T6814] usbtmc 8-1:16.0: control status returned 0
[   67.198390][   T29] usb 5-1: USB disconnect, device number 3
[   67.385593][ T5887] usb 8-1: USB disconnect, device number 2
[   67.473948][   T39] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202
[   67.478734][   T39] usb 7-1: USB disconnect, device number 3
[   67.483881][   T39] usblp0: removed
[   67.695852][ T6838] __nla_validate_parse: 6 callbacks suppressed
[   67.695863][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[   67.710284][ T6838] bridge1: port 1(dummy0) entered blocking state
[   67.712331][ T6838] bridge1: port 1(dummy0) entered disabled state
[   67.714275][ T6838] dummy0: entered allmulticast mode
[   67.717005][ T6838] dummy0: entered promiscuous mode
[   67.810843][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[   67.829364][ T6841] dummy0: left allmulticast mode
[   67.831085][ T6841] dummy0: left promiscuous mode
[   67.834357][ T6841] bridge1: port 1(dummy0) entered disabled state
[   67.838765][ T6841] bridge2: port 1(dummy0) entered blocking state
[   67.840933][ T6841] bridge2: port 1(dummy0) entered disabled state
[   67.843417][ T6841] dummy0: entered allmulticast mode
[   67.846665][ T6841] dummy0: entered promiscuous mode
[   67.917936][ T5741] Bluetooth: hci3: command tx timeout
[   68.001555][ T6848] xfrm0: entered promiscuous mode
[   68.003126][ T6848] xfrm0: entered allmulticast mode
[   68.046780][ T6859] Cannot find del_set index 14804 as target
[   68.141641][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'.
[   68.270181][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'.
[   68.302778][ T6893] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   68.304742][ T6892] tipc: Started in network mode
[   68.305582][ T6893] netlink: 92 bytes leftover after parsing attributes in process `syz.0.254'.
[   68.307021][ T6892] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   68.312733][ T6892] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   68.321833][ T6892] (syz.2.255,6892,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   68.479333][ T6910] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   68.486024][ T6911] (syz.3.263,6911,2):ocfs2_get_sector:1714 ERROR: status = -5
[   68.489256][ T6911] (syz.3.263,6911,2):ocfs2_sb_probe:753 ERROR: status = -5
[   68.490657][ T6913] ip6gretap0: entered promiscuous mode
[   68.491502][ T6911] (syz.3.263,6911,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   68.491759][ T6911] (syz.3.263,6911,2):ocfs2_fill_super:1177 ERROR: status = -5
[   68.501659][ T6913] batadv_slave_1: entered promiscuous mode
[   68.503834][ T6913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=6913 comm=syz.2.264
[   68.510497][ T6912] batadv_slave_1: left promiscuous mode
[   68.559535][ T6916] syzkaller1: entered promiscuous mode
[   68.561840][ T6916] syzkaller1: entered allmulticast mode
[   68.626504][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'.
[   68.687257][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'.
[   68.691033][ T6924] netlink: 'syz.0.269': attribute type 11 has an invalid length.
[   68.701460][ T6742] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.701585][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'.
[   68.704089][ T6742] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.707383][ T6924] netlink: 'syz.0.269': attribute type 11 has an invalid length.
[   68.712393][ T6742] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.715117][ T6742] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.766416][ T6926] bond1 (unregistering): Released all slaves
[   68.801803][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[   68.971475][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.975275][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.975957][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'.
[   68.980901][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.984200][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.986841][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.032417][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   69.049029][ T6943] can0: slcan on ttynull.
[   69.052222][ T6943] netlink: 'syz.2.276': attribute type 26 has an invalid length.
[   69.054933][ T6943] netlink: 'syz.2.276': attribute type 26 has an invalid length.
[   69.096500][   T40] kauditd_printk_skb: 54 callbacks suppressed
[   69.096511][   T40] audit: type=1400 audit(1780193312.079:592): avc:  denied  { write } for  pid=6952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.146682][   T40] audit: type=1400 audit(1780193312.129:593): avc:  denied  { write } for  pid=6960 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.154648][ T6941] can0 (unregistered): slcan off ttynull.
[   69.195646][   T40] audit: type=1400 audit(1780193312.179:594): avc:  denied  { mount } for  pid=6965 comm="syz.0.280" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   69.211989][   T40] audit: type=1400 audit(1780193312.199:595): avc:  denied  { write } for  pid=6962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.242220][ T6966] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   69.245683][   T40] audit: type=1400 audit(1780193312.229:596): avc:  denied  { mounton } for  pid=6965 comm="syz.0.280" path="/88/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   69.256188][   T40] audit: type=1400 audit(1780193312.239:597): avc:  denied  { remount } for  pid=6965 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   69.267385][   T40] audit: type=1400 audit(1780193312.249:598): avc:  denied  { write } for  pid=6973 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.344514][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.346696][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.349014][ T6939] bridge_slave_0: entered allmulticast mode
[   69.352216][ T6939] bridge_slave_0: entered promiscuous mode
[   69.355156][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.357449][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.358026][   T40] audit: type=1400 audit(1780193312.339:599): avc:  denied  { unmount } for  pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   69.360070][ T6939] bridge_slave_1: entered allmulticast mode
[   69.381902][ T6939] bridge_slave_1: entered promiscuous mode
[   69.402708][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.409527][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.433117][ T6939] team0: Port device team_slave_0 added
[   69.435411][   T40] audit: type=1400 audit(1780193312.419:600): avc:  denied  { read write } for  pid=6984 comm="syz.2.284" name="file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   69.435604][ T6986] orangefs_devreq_write_iter: total:1: must be at least:8240:
[   69.438660][ T6939] team0: Port device team_slave_1 added
[   69.443504][   T40] audit: type=1400 audit(1780193312.419:601): avc:  denied  { open } for  pid=6984 comm="syz.2.284" path="/83/file0/file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   69.454620][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.457505][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.467643][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.471993][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.474648][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.484480][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.511413][ T6939] hsr_slave_0: entered promiscuous mode
[   69.513629][ T6939] hsr_slave_1: entered promiscuous mode
[   69.515714][ T6939] debugfs: 'hsr0' already exists in 'hsr'
[   69.517490][ T6939] Cannot create hsr debugfs directory
[   69.587256][ T7004] QAT: Invalid ioctl 8
[   69.590342][ T7006] QAT: Invalid ioctl 5
[   69.617298][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   69.642050][ T6939] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.646973][ T6939] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.650140][ T6939] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.653783][ T6939] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.656640][ T6939] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.660627][ T6939] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.663129][ T6939] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.669648][ T6939] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   69.670472][ T7011] sctp: [Deprecated]: syz.2.290 (pid 7011) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.670472][ T7011] Use struct sctp_sack_info instead
[   69.710136][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.719703][ T6939] 8021q: adding VLAN 0 to HW filter on device team0
[   69.724866][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.727625][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.732856][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.735006][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.920410][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.040545][ T6939] veth0_vlan: entered promiscuous mode
[   70.045172][ T6939] veth1_vlan: entered promiscuous mode
[   70.059752][ T6939] veth0_macvtap: entered promiscuous mode
[   70.063710][ T6939] veth1_macvtap: entered promiscuous mode
[   70.071865][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.077272][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.083633][   T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.086287][   T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.089305][   T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.091950][   T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.137572][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.140111][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.156679][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.160162][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.216783][ T7049] netlink: 'syz.4.273': attribute type 10 has an invalid length.
[   70.219656][ T7049] dummy0: entered promiscuous mode
[   70.238036][ T5835] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[   70.400296][ T5835] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[   70.402790][ T5835] usb 7-1: config 0 has no interface number 0
[   70.404636][ T5835] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 54431, setting to 8
[   70.408021][ T5835] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   70.411190][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.414855][ T5835] usb 7-1: config 0 descriptor??
[   70.416783][ T7045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   70.422824][ T5835] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   70.626123][ T1044] usb 7-1: USB disconnect, device number 4
[   70.629511][ T7074] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   70.647533][ T7074] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.721587][ T7076] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   70.732794][ T7076] macvlan2: entered promiscuous mode
[   70.734903][ T7076] macvlan2: entered allmulticast mode
[   70.737586][ T7076] bond1: entered promiscuous mode
[   70.739800][ T7076] veth0_to_bond: entered promiscuous mode
[   70.743569][ T7076] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.746261][ T7076] bond1: left promiscuous mode
[   70.748687][ T7076] veth0_to_bond: left promiscuous mode
[   72.559620][ T5741] Bluetooth: hci3: command 0x041b tx timeout
[   72.559631][ T7061] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[   72.565040][ T7061] Bluetooth: hci3: Opcode 0x0406 failed: -110
[   73.500166][ T7061] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   73.547853][ T7097] capability: warning: `syz.2.309' uses deprecated v2 capabilities in a way that may be insecure
[   73.669301][ T7114] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   73.671850][ T7114] __nla_validate_parse: 9 callbacks suppressed
[   73.671858][ T7114] netlink: 224 bytes leftover after parsing attributes in process `syz.2.314'.
[   73.985003][ T7123] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[   74.348475][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   74.348490][   T40] audit: type=1400 audit(1780193317.339:618): avc:  denied  { create } for  pid=7137 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   74.358775][   T40] audit: type=1400 audit(1780193317.339:619): avc:  denied  { write } for  pid=7137 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   74.472326][ T7147] netlink: 'syz.4.323': attribute type 4 has an invalid length.
[   74.502537][   T40] audit: type=1400 audit(1780193317.489:620): avc:  denied  { getopt } for  pid=7148 comm="syz.4.324" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   74.562287][   T40] audit: type=1400 audit(1780193317.549:621): avc:  denied  { map } for  pid=7148 comm="syz.4.324" path="socket:[17822]" dev="sockfs" ino=17822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   74.572599][   T40] audit: type=1400 audit(1780193317.559:622): avc:  denied  { setopt } for  pid=7148 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   74.608204][   T40] audit: type=1400 audit(1780193317.599:623): avc:  denied  { audit_write } for  pid=7165 comm="syz.2.328" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   74.615483][   T40] audit: type=1400 audit(1780193317.599:624): avc:  denied  { read } for  pid=7165 comm="syz.2.328" dev="sockfs" ino=17824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   74.622407][   T40] audit: type=1400 audit(1780193317.599:625): avc:  denied  { name_bind 0x1000000 } for  pid=7165 comm="syz.2.328" path="socket:[17824]" dev="sockfs" ino=17824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   74.638040][ T5741] Bluetooth: hci3: command 0x041b tx timeout
[   74.693301][   T40] audit: type=1400 audit(1780193317.679:626): avc:  denied  { read } for  pid=7174 comm="syz.0.331" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   74.700783][   T40] audit: type=1400 audit(1780193317.679:627): avc:  denied  { open } for  pid=7174 comm="syz.0.331" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   75.013892][ T7195] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.337' sets config #1
[   75.088836][ T7195] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   75.163725][ T7200] ipvlan0: entered promiscuous mode
[   75.165918][ T7200] ipvlan0: entered allmulticast mode
[   75.167642][ T7200] veth0_vlan: entered allmulticast mode
[   75.405576][ T7211] overlay: Unknown parameter ':'
[   75.712402][ T7224] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   75.715173][ T7224] netlink: 272 bytes leftover after parsing attributes in process `syz.2.348'.
[   76.011300][ T7239] binder: 7238:7239 ioctl c028aa03 2000000001c0 returned -22
[   76.013947][ T7239] binder: 7238:7239 ioctl c0306201 200000000180 returned -14
[   76.016907][ T7240] binder: BINDER_SET_CONTEXT_MGR already set
[   76.017998][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   76.018928][ T7240] binder: 7238:7240 ioctl 4018620d 200000000100 returned -16
[   76.120444][ T7247] bond2: entered allmulticast mode
[   76.134256][ T7247] netlink: 11 bytes leftover after parsing attributes in process `syz.0.355'.
[   76.161406][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[   76.164196][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[   76.187764][   T10] usb 9-1: Using ep0 maxpacket: 32
[   76.191581][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.196097][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.202441][   T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   76.205910][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.213181][   T10] usb 9-1: config 0 descriptor??
[   76.358219][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.361883][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.366076][ T5754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.371694][ T5754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.377823][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.484687][ T7232] xt_hashlimit: size too large, truncated to 1048576
[   76.487183][ T7279] bridge4: entered promiscuous mode
[   76.543266][ T7278] �x9�: renamed from bridge_slave_0 (while UP)
[   76.717801][ T5741] Bluetooth: hci3: command 0x041b tx timeout
[   76.770029][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[   76.777238][   T10] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[   76.782298][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.786451][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.789740][ T7260] bridge_slave_0: entered allmulticast mode
[   76.794678][ T7260] bridge_slave_0: entered promiscuous mode
[   76.801394][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.804064][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.806375][ T7260] bridge_slave_1: entered allmulticast mode
[   76.812147][ T7260] bridge_slave_1: entered promiscuous mode
[   76.840244][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.845148][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.861719][ T7260] team0: Port device team_slave_0 added
[   76.864595][ T7260] team0: Port device team_slave_1 added
[   76.879366][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.881498][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.889410][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.893364][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.895469][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.903132][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.927424][ T7260] hsr_slave_0: entered promiscuous mode
[   76.929798][ T7260] hsr_slave_1: entered promiscuous mode
[   76.931767][ T7260] debugfs: 'hsr0' already exists in 'hsr'
[   76.933529][ T7260] Cannot create hsr debugfs directory
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xbb000)
[   77.022856][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   77.027750][ T1133] ata1: failed to read log page 10h (errno=-5)
[   77.028822][ T5822] usb 9-1: USB disconnect, device number 2
[   77.029668][ T1133] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[   77.029684][ T1133] ata1.00: irq_stat 0x40000000
[   77.029694][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED
[   77.029700][ T1133] ata1.00: cmd 61/d8:70:de:2d:08/05:00:00:00:00/40 tag 14 ncq dma 765952 out
[   77.029700][ T1133]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   77.043037][ T1133] ata1.00: status: { DRDY }
[   77.044429][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED
[   77.046306][ T1133] ata1.00: cmd 61/20:78:b6:33:08/01:00:00:00:00/40 tag 15 ncq dma 147456 out
[   77.046306][ T1133]          res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   77.051826][ T1133] ata1.00: status: { DRDY }
[   77.058857][ T1133] ata1.00: configured for UDMA/100
[   77.061158][ T1133] ata1: EH complete
[   77.079139][ T7260] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.084159][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   77.086783][ T7260] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   77.090754][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.093814][ T7260] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   77.097413][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.100421][ T7260] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   77.105807][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.132025][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.134297][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.136756][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.139406][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.170398][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.178004][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.180544][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.185872][ T7260] 8021q: adding VLAN 0 to HW filter on device team0
[   77.190887][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.193129][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.198211][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.200435][ T6764] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.441565][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.562866][ T7260] veth0_vlan: entered promiscuous mode
[   77.567787][ T7260] veth1_vlan: entered promiscuous mode
[   77.582669][ T7260] veth0_macvtap: entered promiscuous mode
[   77.586533][ T7260] veth1_macvtap: entered promiscuous mode
[   77.597579][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.604616][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.611064][ T6744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.614306][ T6744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.617997][ T6744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.620689][ T6744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.630323][ T7340] tmpfs: Bad value for 'mpol'
[   77.662311][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.667717][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.681519][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.684237][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.826530][ T7358] Cache volume key already in use (9p,syz,)
[   78.045364][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[   78.049213][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'.
[   78.052364][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[   78.055123][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'.
[   78.057923][ T5887] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[   78.091468][ T7367] netlink: 'syz.5.377': attribute type 1 has an invalid length.
[   78.196688][ T7373] netlink: 'syz.5.381': attribute type 1 has an invalid length.
[   78.219781][ T5887] usb 9-1: config 0 has an invalid interface number: 106 but max is 0
[   78.222570][ T5887] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.225712][ T5887] usb 9-1: config 0 has no interface number 0
[   78.231159][ T5887] usb 9-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16
[   78.234047][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.236547][ T5887] usb 9-1: Product: syz
[   78.238285][ T5887] usb 9-1: Manufacturer: syz
[   78.240288][ T5887] usb 9-1: SerialNumber: syz
[   78.244708][ T5887] usb 9-1: config 0 descriptor??
[   78.400548][ T5741] Bluetooth: hci4: command tx timeout
[   78.455373][ T7355] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[   78.459383][ T7355] ref_ctr increment failed for inode: 0x7e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880230a3100
[   78.463284][ T7354] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[   78.465998][ T7354] ref_ctr decrement failed for inode: 0x7e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880230a3100
[   78.471755][ T7354] uprobe: syz.4.375:7354 failed to unregister, leaking uprobe
[   78.487318][ T5887] usb 9-1: USB disconnect, device number 3
[   78.781337][ T7391] netlink: 220 bytes leftover after parsing attributes in process `syz.2.385'.
[   78.784133][ T7391] netlink: 'syz.2.385': attribute type 2 has an invalid length.
[   78.798637][ T5741] Bluetooth: hci3: command 0x041b tx timeout
[   79.175662][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[   79.178633][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'.
[   79.187805][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[   79.187978][ T6749] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.190569][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'.
[   79.194309][ T6749] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.203042][ T6749] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.207832][ T6749] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.681839][ T7410] netlink: 168 bytes leftover after parsing attributes in process `syz.2.391'.
[   79.808637][ T7425] netlink: 'syz.2.395': attribute type 63 has an invalid length.
[   79.811444][ T7425] netlink: 5 bytes leftover after parsing attributes in process `syz.2.395'.
[   79.814132][ T7425] gretap0: entered allmulticast mode
[   79.816139][ T7425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   79.822279][   T40] kauditd_printk_skb: 18 callbacks suppressed
[   79.822288][   T40] audit: type=1400 audit(1780193322.809:646): avc:  denied  { read } for  pid=7426 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   79.859669][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'.
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   79.918303][   T40] audit: type=1800 audit(1780193322.899:647): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.398" name="file1" dev="9p" ino=75006267 res=0 errno=0
[   79.973085][ T7441] bond1 (unregistering): Released all slaves
[   80.164135][ T7454] netlink: 'syz.2.410': attribute type 1 has an invalid length.
[   80.184808][ T7452] 9pnet_virtio: no channels available for device syz
[   80.195043][ T7453] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.199922][ T7453] bond1: (slave bond2): making interface the new active one
[   80.204064][ T7453] bond1: (slave bond2): Enslaving as an active interface with an up link
[   80.207042][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[   80.212730][ T7453] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   80.216486][ T7454] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.244721][ T7462] CIFS: VFS: UNC: path must begin with // or \\
[   80.246714][ T7462] Malformed UNC in devname
[   80.246714][ T7462] 
[   80.249786][ T7462] CIFS: VFS: Malformed UNC in devname
[   80.253286][ T7463] CIFS: VFS: UNC: path must begin with // or \\
[   80.255204][ T7463] Malformed UNC in devname
[   80.255204][ T7463] 
[   80.257211][ T7463] CIFS: VFS: Malformed UNC in devname
[   80.343601][   T40] audit: type=1400 audit(1780193323.329:648): avc:  denied  { name_bind } for  pid=7470 comm="syz.5.404" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[   80.344118][ T7471] netlink: 'syz.5.404': attribute type 12 has an invalid length.
[   80.478120][ T5754] Bluetooth: hci4: command tx timeout
[   80.563019][ T7494] fuse: Unknown parameter '00000000000000000008'
[   80.610304][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'.
[   80.616410][ T7497] erspan0: entered promiscuous mode
[   80.700189][ T7502] overlay: Unknown parameter 'permit_directio'
[   80.804401][   T40] audit: type=1400 audit(1780193323.789:649): avc:  denied  { bind } for  pid=7515 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.878956][ T5754] Bluetooth: hci3: command 0x041b tx timeout
[   81.013780][   T40] audit: type=1400 audit(1780193323.999:650): avc:  denied  { accept } for  pid=7525 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.021927][   T40] audit: type=1400 audit(1780193324.009:651): avc:  denied  { append } for  pid=7525 comm="syz.5.424" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   81.186901][ T7529] comedi comedi3: unsupported base address 0x2000
[   81.339085][ T7532] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(0)
[   81.341120][ T7532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   81.343961][ T7532] vhci_hcd vhci_hcd.0: Device attached
[   81.346780][ T7533] vhci_hcd: unknown pdu 2
[   81.353996][  T185] vhci_hcd vhci_hcd.5: stop threads
[   81.358156][  T185] vhci_hcd vhci_hcd.5: release socket
[   81.361217][  T185] vhci_hcd vhci_hcd.5: disconnect device
[   81.413938][   T40] audit: type=1400 audit(1780193324.399:652): avc:  denied  { create } for  pid=7539 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   81.461235][ T7547] syzkaller1: entered promiscuous mode
[   81.463008][ T7547] syzkaller1: entered allmulticast mode
[   81.573636][   T40] audit: type=1400 audit(1780193324.559:653): avc:  denied  { create } for  pid=7550 comm="syz.2.433" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   81.675757][   T40] audit: type=1400 audit(1780193324.659:654): avc:  denied  { create } for  pid=7563 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   81.888828][   T40] audit: type=1400 audit(1780193324.879:655): avc:  denied  { append } for  pid=7583 comm="syz.5.443" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   81.930242][    C2] Illegal XDP return value 16128 on prog  (id 105) dev veth0_to_bond, expect packet loss!
[   82.069426][ T7593] geneve2: entered promiscuous mode
[   82.140892][ T7597] No source specified
[   82.207022][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.214283][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.222486][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.225308][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.228940][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.232494][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.235100][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.240519][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.243462][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.246137][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.249524][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.254403][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.257179][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.263894][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.266766][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.271557][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.277228][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.280728][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.285162][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.287797][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.290893][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.293398][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.295831][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.299259][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.301804][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.304257][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.306701][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.309653][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.312194][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.314754][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.317278][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.320385][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.324045][ T7603] overlayfs: conflicting options: nfs_export=on,index=off
[   82.576464][ T5754] Bluetooth: hci4: command 0x040f tx timeout
[   82.849992][ T7622] pim6reg1: entered promiscuous mode
[   82.851823][ T7622] pim6reg1: entered allmulticast mode
[   82.957790][ T5754] Bluetooth: hci3: command 0x041b tx timeout
[   83.555984][ T7669] veth0_vlan: left promiscuous mode
[   83.710703][ T7688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.713951][ T7688] EXT4-fs (nbd2): unable to read superblock
[   83.733237][ T7687] tipc: Disabling bearer <eth:syzkaller0>
[   83.832217][ T5451] veth0_vlan: entered promiscuous mode
[   83.957455][ T7728] __nla_validate_parse: 6 callbacks suppressed
[   83.957466][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.482'.
[   83.964783][ T7728] netlink: 'syz.4.482': attribute type 12 has an invalid length.
[   83.976305][ T7731] bridge0: port 3(syz_tun) entered blocking state
[   83.979806][ T7731] bridge0: port 3(syz_tun) entered disabled state
[   83.983357][ T7731] syz_tun: entered allmulticast mode
[   83.986531][ T7731] syz_tun: entered promiscuous mode
[   84.060492][ T7740] pimreg: entered allmulticast mode
[   84.097437][ T7744] misc userio: Can't change port type on an already running userio instance
[   84.136588][ T7744] tipc: Started in network mode
[   84.138235][ T7744] tipc: Node identity da5748eb34dc, cluster identity 4711
[   84.140853][ T7744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.191113][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   84.314119][ T7767] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   84.316478][ T7767] SELinux: failed to load policy
[   84.327846][ T7742] tipc: Resetting bearer <eth:syzkaller0>
[   84.638228][ T5754] Bluetooth: hci4: command 0x040f tx timeout
[   84.739603][ T7780] binder: 7777:7780 ioctl c0306201 200000000440 returned -14
[   85.047785][ T5754] Bluetooth: hci3: command 0x041b tx timeout
[   85.216845][   T40] kauditd_printk_skb: 36 callbacks suppressed
[   85.216857][   T40] audit: type=1400 audit(1780193328.199:692): avc:  denied  { remount } for  pid=7783 comm="syz.5.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   85.221232][ T7784] option changes via remount are deprecated (pid=7783 comm=syz.5.499)
[   85.368541][ T7742] tipc: Disabling bearer <eth:syzkaller0>
[   85.375855][ T7780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.498'.
[   85.382207][ T1044] tipc: Node number set to 4002105579
[   85.445298][ T7800] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1i��m�]7�(�a���	H�]�����
[   85.483190][ T7803] syzkaller0: entered promiscuous mode
[   85.484940][ T7803] syzkaller0: entered allmulticast mode
[   85.518638][   T40] audit: type=1400 audit(1780193328.509:693): avc:  denied  { setattr } for  pid=7799 comm="syz.2.505" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   85.518847][ T7803] block nbd2: NBD_DISCONNECT
[   85.531396][ T7803] hfs: can't find a HFS filesystem on dev nbd2
[   85.547495][ T7811] JFS: discard option not supported on device
[   85.559486][ T7811] Mount JFS Failure: -5
[   85.575985][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.508'.
[   85.639222][  T185] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.642413][  T185] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.645206][  T185] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.650362][  T185] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.705938][ T7821] netlink: 80 bytes leftover after parsing attributes in process `syz.5.511'.
[   85.714254][ T7821] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   85.890368][ T7836] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   85.893928][ T7836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   85.951278][   T40] audit: type=1400 audit(1780193328.939:694): avc:  denied  { ioctl } for  pid=7840 comm="syz.2.518" path="socket:[24971]" dev="sockfs" ino=24971 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   86.013443][   T40] audit: type=1400 audit(1780193328.999:695): avc:  denied  { listen } for  pid=7846 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.064447][   T40] audit: type=1400 audit(1780193329.049:696): avc:  denied  { connect } for  pid=7840 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   86.440186][ T7857] overlayfs: empty lowerdir
[   86.579639][ T7863] dlm: no locking on control device
[   86.582402][ T7863] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[   86.626882][ T7868] netlink: 'syz.4.525': attribute type 1 has an invalid length.
[   86.646310][ T7868] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.658427][ T7868] bond1: (slave geneve2): making interface the new active one
[   86.661811][ T7868] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   86.717863][ T5754] Bluetooth: hci4: command 0x040f tx timeout
[   87.698172][   T40] audit: type=1400 audit(1780193330.689:697): avc:  denied  { write } for  pid=7882 comm="syz.4.529" name="/" dev="9p" ino=75006263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.704661][   T40] audit: type=1400 audit(1780193330.689:698): avc:  denied  { write } for  pid=7882 comm="syz.4.529" name="/" dev="9p" ino=75006263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.711229][   T40] audit: type=1400 audit(1780193330.689:699): avc:  denied  { rename } for  pid=7882 comm="syz.4.529" name="file0" dev="9p" ino=75006265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.947272][ T7842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.989302][   T40] audit: type=1400 audit(1780193331.969:700): avc:  denied  { ioctl } for  pid=7887 comm="syz.0.530" path="socket:[25119]" dev="sockfs" ino=25119 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   89.002500][ T7893] xt_l2tp: v2 tid > 0xffff: 2031748
[   89.008254][ T7893] netlink: 'syz.5.532': attribute type 10 has an invalid length.
[   89.015853][   T40] audit: type=1400 audit(1780193331.999:701): avc:  denied  { write } for  pid=7894 comm="syz.2.533" name="/" dev="9p" ino=75006263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   89.030213][ T7893] team0 (unregistering): Port device team_slave_0 removed
[   89.045758][ T7893] team0 (unregistering): Port device team_slave_1 removed
[   89.069283][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[   89.158584][ T7907] syzkaller0: entered promiscuous mode
[   89.160276][ T7907] syzkaller0: entered allmulticast mode
[   89.164464][ T7907] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   89.170096][ T7907] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   89.273041][ T7918] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   89.479260][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[   89.482105][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[   89.644174][ T7937] capability: warning: `syz.4.546' uses 32-bit capabilities (legacy support in use)
[   89.671236][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.547'.
[   89.701895][ T7943] netlink: 'syz.4.549': attribute type 1 has an invalid length.
[   89.714675][ T7943] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.731839][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.738063][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.741900][ T7944] bond0 (unregistering): Released all slaves
[   89.760391][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.777098][ T7948] vlan2: entered allmulticast mode
[   89.781237][ T7948] bond2: entered allmulticast mode
[   89.797286][ T7950] kAFS: unable to lookup cell '1'
[   89.799174][ T7948] bond2: (slave geneve3): making interface the new active one
[   89.799196][ T7948] geneve3: entered allmulticast mode
[   89.803216][ T7948] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   89.883998][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.552'.
[   89.915346][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'.
[   89.918656][ T7956] netlink: 'syz.2.554': attribute type 11 has an invalid length.
[   89.921376][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'.
[   89.924060][ T7956] netlink: 'syz.2.554': attribute type 11 has an invalid length.
[   89.983347][ T7961] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   89.995443][ T7961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7961 comm=syz.2.556
[   90.059837][ T1044] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105)
[   90.157524][ T7973] ������: renamed from vlan0 (while UP)
[   90.163420][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'.
[   90.183460][ T7973] bridge5: port 1(dummy0) entered blocking state
[   90.186847][ T7973] bridge5: port 1(dummy0) entered disabled state
[   90.189082][ T7973] dummy0: entered allmulticast mode
[   90.191944][ T7973] dummy0: entered promiscuous mode
[   90.195188][ T7973] netlink: 'syz.2.561': attribute type 10 has an invalid length.
[   90.197873][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'.
[   90.203160][ T7973] bridge5: port 1(dummy0) entered blocking state
[   90.206092][ T7973] bridge5: port 1(dummy0) entered forwarding state
[   90.211170][ T7973] dummy0: left allmulticast mode
[   90.213286][ T7973] bridge5: port 1(dummy0) entered disabled state
[   90.243771][ T7985] FAULT_INJECTION: forcing a failure.
[   90.243771][ T7985] name failslab, interval 1, probability 0, space 0, times 1
[   90.248308][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.0.564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   90.248326][ T7985] Tainted: [L]=SOFTLOCKUP
[   90.248330][ T7985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.248336][ T7985] Call Trace:
[   90.248340][ T7985]  <TASK>
[   90.248344][ T7985]  dump_stack_lvl+0x100/0x190
[   90.248360][ T7985]  should_fail_ex.cold+0x5/0xa
[   90.248376][ T7985]  should_failslab+0xc2/0x120
[   90.248388][ T7985]  __kmalloc_cache_node_noprof+0x7d/0x770
[   90.248400][ T7985]  ? __get_vm_area_node+0x101/0x330
[   90.248415][ T7985]  __get_vm_area_node+0x101/0x330
[   90.248429][ T7985]  __vmalloc_node_range_noprof+0x228/0x1630
[   90.248443][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.248458][ T7985]  ? rcu_is_watching+0x12/0xc0
[   90.248476][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.248493][ T7985]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   90.248510][ T7985]  ? rcu_is_watching+0x12/0xc0
[   90.248525][ T7985]  ? trace_kmem_cache_alloc+0xd5/0x100
[   90.248539][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.248552][ T7985]  __vmalloc_node_noprof+0xad/0xf0
[   90.248564][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.248579][ T7985]  copy_process+0x7fb/0x7ed0
[   90.248603][ T7985]  ? __pfx_copy_process+0x10/0x10
[   90.248621][ T7985]  ? lockdep_init_map_type+0x5c/0x250
[   90.248635][ T7985]  ? lockdep_init_map_type+0x5c/0x250
[   90.248649][ T7985]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   90.248662][ T7985]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   90.248679][ T7985]  vhost_task_create+0x1db/0x370
[   90.248692][ T7985]  ? __pfx_vhost_task_create+0x10/0x10
[   90.248705][ T7985]  ? register_lock_class+0x40/0x560
[   90.248722][ T7985]  ? __pfx_vhost_task_fn+0x10/0x10
[   90.248736][ T7985]  ? __pfx___mutex_lock+0x10/0x10
[   90.248761][ T7985]  ? kasan_quarantine_put+0x104/0x240
[   90.248781][ T7985]  kvm_mmu_post_init_vm+0x1b3/0x370
[   90.248796][ T7985]  kvm_arch_vcpu_ioctl_run+0x66/0x1890
[   90.248811][ T7985]  ? kvm_vcpu_ioctl+0x1546/0x1720
[   90.248825][ T7985]  kvm_vcpu_ioctl+0x730/0x1720
[   90.248837][ T7985]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   90.248853][ T7985]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.248867][ T7985]  ? do_vfs_ioctl+0x226/0x13e0
[   90.248878][ T7985]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   90.248889][ T7985]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   90.248910][ T7985]  ? __fget_files+0x215/0x3d0
[   90.248943][ T7985]  ? hook_file_ioctl_common+0x149/0x410
[   90.248958][ T7985]  ? selinux_file_ioctl+0x13b/0x290
[   90.248973][ T7985]  ? selinux_file_ioctl+0xb6/0x290
[   90.248989][ T7985]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   90.249001][ T7985]  __x64_sys_ioctl+0x18e/0x210
[   90.249013][ T7985]  do_syscall_64+0x115/0x870
[   90.249037][ T7985]  ? clear_bhb_loop+0x40/0x90
[   90.249052][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.249063][ T7985] RIP: 0033:0x7fa6ab59ce59
[   90.249072][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.249082][ T7985] RSP: 002b:00007fa6ac399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.249094][ T7985] RAX: ffffffffffffffda RBX: 00007fa6ab815fa0 RCX: 00007fa6ab59ce59
[   90.249100][ T7985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   90.249106][ T7985] RBP: 00007fa6ac399090 R08: 0000000000000000 R09: 0000000000000000
[   90.249112][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.249118][ T7985] R13: 00007fa6ab816038 R14: 00007fa6ab815fa0 R15: 00007fff01b06d58
[   90.249132][ T7985]  </TASK>
[   90.249246][ T7985] syz.0.564: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   90.274961][ T7988] syzkaller0: entered promiscuous mode
[   90.276419][ T7985] ,cpuset=
[   90.282603][ T7988] syzkaller0: entered allmulticast mode
[   90.284319][ T7985] /
[   90.287199][ T7991] TC_ACT_REPEAT abuse ?
[   90.287959][ T7985] ,mems_allowed=0-1
[   90.290392][ T7988] TC_ACT_REPEAT abuse ?
[   90.291339][ T7985] 
[   90.356788][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   90.356800][   T40] audit: type=1400 audit(1780193333.339:711): avc:  denied  { write } for  pid=7987 comm="syz.2.566" name="/" dev="9p" ino=75006263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   90.357737][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.0.564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   90.357754][ T7985] Tainted: [L]=SOFTLOCKUP
[   90.357758][ T7985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.357764][ T7985] Call Trace:
[   90.357768][ T7985]  <TASK>
[   90.357773][ T7985]  dump_stack_lvl+0x100/0x190
[   90.357788][ T7985]  warn_alloc.cold+0x95/0x1c1
[   90.357800][ T7985]  ? __pfx_warn_alloc+0x10/0x10
[   90.357816][ T7985]  ? trace_kmalloc+0xe3/0x110
[   90.357829][ T7985]  ? __kmalloc_cache_node_noprof+0x2d9/0x770
[   90.357842][ T7985]  ? __kasan_kmalloc+0x8a/0xb0
[   90.357852][ T7985]  ? __get_vm_area_node+0x208/0x330
[   90.357868][ T7985]  __vmalloc_node_range_noprof+0xccd/0x1630
[   90.357882][ T7985]  ? rcu_is_watching+0x12/0xc0
[   90.357901][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.357919][ T7985]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   90.357936][ T7985]  ? rcu_is_watching+0x12/0xc0
[   90.357951][ T7985]  ? trace_kmem_cache_alloc+0xd5/0x100
[   90.357969][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.357982][ T7985]  __vmalloc_node_noprof+0xad/0xf0
[   90.357995][ T7985]  ? vhost_task_create+0x1db/0x370
[   90.358010][ T7985]  copy_process+0x7fb/0x7ed0
[   90.358034][ T7985]  ? __pfx_copy_process+0x10/0x10
[   90.358052][ T7985]  ? lockdep_init_map_type+0x5c/0x250
[   90.358066][ T7985]  ? lockdep_init_map_type+0x5c/0x250
[   90.358080][ T7985]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   90.358092][ T7985]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   90.358109][ T7985]  vhost_task_create+0x1db/0x370
[   90.358123][ T7985]  ? __pfx_vhost_task_create+0x10/0x10
[   90.358136][ T7985]  ? register_lock_class+0x40/0x560
[   90.358153][ T7985]  ? __pfx_vhost_task_fn+0x10/0x10
[   90.358167][ T7985]  ? __pfx___mutex_lock+0x10/0x10
[   90.358182][ T7985]  ? kasan_quarantine_put+0x104/0x240
[   90.358202][ T7985]  kvm_mmu_post_init_vm+0x1b3/0x370
[   90.358218][ T7985]  kvm_arch_vcpu_ioctl_run+0x66/0x1890
[   90.358232][ T7985]  ? kvm_vcpu_ioctl+0x1546/0x1720
[   90.358246][ T7985]  kvm_vcpu_ioctl+0x730/0x1720
[   90.358258][ T7985]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   90.358269][ T7985]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.358283][ T7985]  ? do_vfs_ioctl+0x226/0x13e0
[   90.358294][ T7985]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   90.358305][ T7985]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   90.358327][ T7985]  ? __fget_files+0x215/0x3d0
[   90.358339][ T7985]  ? hook_file_ioctl_common+0x149/0x410
[   90.358354][ T7985]  ? selinux_file_ioctl+0x13b/0x290
[   90.358388][ T7985]  ? selinux_file_ioctl+0xb6/0x290
[   90.358405][ T7985]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   90.358416][ T7985]  __x64_sys_ioctl+0x18e/0x210
[   90.358428][ T7985]  do_syscall_64+0x115/0x870
[   90.358441][ T7985]  ? clear_bhb_loop+0x40/0x90
[   90.358454][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.358465][ T7985] RIP: 0033:0x7fa6ab59ce59
[   90.358475][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.358485][ T7985] RSP: 002b:00007fa6ac399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.358496][ T7985] RAX: ffffffffffffffda RBX: 00007fa6ab815fa0 RCX: 00007fa6ab59ce59
[   90.358502][ T7985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   90.358509][ T7985] RBP: 00007fa6ac399090 R08: 0000000000000000 R09: 0000000000000000
[   90.358515][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.358521][ T7985] R13: 00007fa6ab816038 R14: 00007fa6ab815fa0 R15: 00007fff01b06d58
[   90.358534][ T7985]  </TASK>
[   90.358538][ T7985] Mem-Info:
[   90.362407][   T40] audit: type=1400 audit(1780193333.349:712): avc:  denied  { rmdir } for  pid=7987 comm="syz.2.566" name="file2" dev="9p" ino=75006269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   90.364744][ T7985] active_anon:13834 inactive_anon:10236 isolated_anon:0
[   90.364744][ T7985]  active_file:5590 inactive_file:55441 isolated_file:0
[   90.364744][ T7985]  unevictable:1768 dirty:124 writeback:0
[   90.364744][ T7985]  slab_reclaimable:12364 slab_unreclaimable:76850
[   90.364744][ T7985]  mapped:30115 shmem:12566 pagetables:1411
[   90.364744][ T7985]  sec_pagetables:300 bounce:0
[   90.364744][ T7985]  kernel_misc_reclaimable:0
[   90.364744][ T7985]  free:412194 free_pcp:14961 free_cma:0
[   90.515175][ T7985] Node 0 active_anon:55312kB inactive_anon:40944kB active_file:22340kB inactive_file:221564kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100000kB dirty:540kB writeback:0kB shmem:46724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:5408kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   90.525996][ T7985] Node 1 active_anon:4kB inactive_anon:0kB active_file:16kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:8kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   90.535908][ T7985] Node 0 DMA free:10620kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:96kB free_cma:0kB
[   90.545320][ T7985] lowmem_reserve[]: 0 1231 1231 1231 1231
[   90.547139][ T7985] Node 0 DMA32 free:55868kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55132kB inactive_anon:40944kB active_file:22280kB inactive_file:221564kB unevictable:3536kB writepending:540kB zspages:0kB present:2080628kB managed:1261108kB mlocked:0kB bounce:0kB free_pcp:32180kB local_pcp:8052kB free_cma:0kB
[   90.557129][ T7985] lowmem_reserve[]: 0 0 0 0 0
[   90.558838][ T7985] Node 1 Normal free:1584852kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:16kB inactive_file:200kB unevictable:3536kB writepending:8kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:25068kB local_pcp:9640kB free_cma:0kB
[   90.569914][ T7985] lowmem_reserve[]: 0 0 0 0 0
[   90.571485][ T7985] Node 0 DMA: 17*4kB (UM) 7*8kB (UM) 14*16kB (UM) 11*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (M) 5*512kB (UM) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 10620kB
[   90.576393][ T7985] Node 0 DMA32: 73*4kB (UME) 297*8kB (UM) 660*16kB (UME) 196*32kB (UM) 44*64kB (UM) 43*128kB (UME) 28*256kB (UME) 16*512kB (UM) 11*1024kB (UM) 1*2048kB (M) 0*4096kB = 56492kB
[   90.581802][ T7985] Node 1 Normal: 45*4kB (UM) 72*8kB (UM) 30*16kB (UM) 26*32kB (UME) 25*64kB (UME) 19*128kB (UME) 13*256kB (UM) 11*512kB (UME) 9*1024kB (UME) 8*2048kB (UME) 377*4096kB (UM) = 1584852kB
[   90.587134][ T7985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.590348][ T7985] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.593349][ T7985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.596271][ T7985] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.600499][ T7985] 73763 total pagecache pages
[   90.602016][ T7985] 0 pages in swap cache
[   90.603342][ T7985] Free swap  = 124996kB
[   90.604653][ T7985] Total swap = 124996kB
[   90.605959][ T7985] 1048443 pages RAM
[   90.607152][ T7985] 0 pages HighMem/MovableOnly
[   90.609027][ T7985] 283855 pages reserved
[   90.610334][ T7985] 0 pages cma reserved
[   90.782349][ T8007] tmpfs: Cannot change global quota limit on remount
[   90.814343][   T40] audit: type=1400 audit(1780193333.799:713): avc:  denied  { getopt } for  pid=8012 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   90.826012][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[   90.887610][ T8016] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   90.889552][   T40] audit: type=1400 audit(1780193333.869:714): avc:  denied  { mounton } for  pid=8012 comm="syz.2.572" path="/file0" dev="ramfs" ino=27681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   91.053478][ T8024] dummy0: left promiscuous mode
[   91.057243][ T8026] loop9: detected capacity change from 0 to 127
[   91.060626][ T8024] bridge6: port 1(dummy0) entered blocking state
[   91.062695][ T8024] bridge6: port 1(dummy0) entered disabled state
[   91.065157][ T8024] dummy0: entered allmulticast mode
[   91.068387][ T8024] dummy0: entered promiscuous mode
[   91.140596][   T40] audit: type=1400 audit(1780193334.129:715): avc:  denied  { ioctl } for  pid=8035 comm="syz.0.578" path="socket:[25831]" dev="sockfs" ino=25831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.148894][   T40] audit: type=1400 audit(1780193334.129:716): avc:  denied  { write } for  pid=8035 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.177623][ T8044] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   91.240016][   T40] audit: type=1400 audit(1780193334.229:717): avc:  denied  { mount } for  pid=8052 comm="syz.2.583" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   91.321844][   T40] audit: type=1400 audit(1780193334.309:718): avc:  denied  { unmount } for  pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   91.346790][   T40] audit: type=1400 audit(1780193334.329:719): avc:  denied  { ioctl } for  pid=8064 comm="syz.2.587" path="/dev/usbmon7" dev="devtmpfs" ino=760 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   91.599535][ T8076] dlm: no locking on control device
[   91.782893][   T40] audit: type=1400 audit(1780193334.769:720): avc:  denied  { shutdown } for  pid=8082 comm="syz.5.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   91.913193][ T8092] batadv0: entered promiscuous mode
[   91.920616][ T8092] 8021q: adding VLAN 0 to HW filter on device macsec2
[   91.923292][ T8092] batadv0: left promiscuous mode
[   92.075294][ T8111] loop9: detected capacity change from 0 to 7
[   92.090798][ T8111] Dev loop9: unable to read RDB block 7
[   92.092655][ T8111]  loop9: unable to read partition table
[   92.094571][ T8111] loop9: partition table beyond EOD, truncated
[   92.096532][ T8111] loop_reread_partitions: partition scan of loop9 (�������g�C�j̖�P=��!MX���	���%��`�搘ȵ4FLQk݊5) failed (rc=-5)
[   92.476096][ T8167] syz_tun: entered allmulticast mode
[   92.551366][ T8182] netlink: 'syz.4.626': attribute type 1 has an invalid length.
[   92.570483][ T8184] IPVS: length: 18 != 8
[   92.848401][ T8201] trusted_key: syz.2.629 sent an empty control message without MSG_MORE.
[   93.046649][    C2] vcan0: j1939_tp_rxtimer: 0xffff888012e90800: rx timeout, send abort
[   93.546115][    C2] vcan0: j1939_tp_rxtimer: 0xffff88804138b800: rx timeout, send abort
[   93.549968][    C2] vcan0: j1939_tp_rxtimer: 0xffff888012e90800: abort rx timeout. Force session deactivation
[   93.601382][ T8223] SELinux: syz.5.636 (8223) wrote to user. This is no longer supported.
[   93.606025][ T8223] x_tables: ip_tables: icmp match: only valid for protocol 1
[   93.768674][ T8230] loop3: detected capacity change from 0 to 7
[   93.773313][ T8230] Dev loop3: unable to read RDB block 7
[   93.775077][ T8230]  loop3: unable to read partition table
[   93.776906][ T8230] loop3: partition table beyond EOD, truncated
[   93.778913][ T8230] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[   93.829969][ T8238] sctp: [Deprecated]: syz.2.641 (pid 8238) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.829969][ T8238] Use struct sctp_sack_info instead
[   94.048720][    C2] vcan0: j1939_tp_rxtimer: 0xffff88804138b800: abort rx timeout. Force session deactivation
[   94.187845][   T24] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[   94.358871][   T24] usb 10-1: config index 0 descriptor too short (expected 1307, got 27)
[   94.361992][   T24] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[   94.364526][   T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[   94.367423][   T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   94.371070][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[   94.374180][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   94.380349][   T24] usb 10-1: string descriptor 0 read error: -22
[   94.382376][   T24] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   94.385261][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.389176][   T24] usb 10-1: config 0 descriptor??
[   94.391202][ T8246] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   94.394033][   T24] hub 10-1:0.0: bad descriptor, ignoring hub
[   94.395892][   T24] hub 10-1:0.0: probe with driver hub failed with error -5
[   94.403580][   T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input9
[   94.646944][ T8247] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   94.648054][ T8247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8247 comm=syz.5.642
[   94.692434][   T29] usb 10-1: USB disconnect, device number 2
[   94.806808][ T8252] __nla_validate_parse: 7 callbacks suppressed
[   94.806819][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   94.813427][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'.
[   94.816306][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   94.903570][ T8264] netlink: 7 bytes leftover after parsing attributes in process `syz.4.648'.
[   95.103111][ T8273] loop6: detected capacity change from 0 to 8
[   95.213784][ T8273] Dev loop6: unable to read RDB block 8
[   95.216229][ T8273]  loop6: unable to read partition table
[   95.219006][ T8273] loop6: partition table beyond EOD, truncated
[   95.221764][ T8273] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   95.570572][   T40] kauditd_printk_skb: 30 callbacks suppressed
[   95.570588][   T40] audit: type=1400 audit(1780193338.559:751): avc:  denied  { write } for  pid=8281 comm="syz.0.652" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   95.581792][   T40] audit: type=1400 audit(1780193338.559:752): avc:  denied  { ioctl } for  pid=8281 comm="syz.0.652" path="/dev/input/mouse0" dev="devtmpfs" ino=947 ioctlcmd=0xae6a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   95.931373][ T8291] netlink: 156 bytes leftover after parsing attributes in process `syz.4.655'.
[   95.942379][ T8294] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   95.954979][   T40] audit: type=1400 audit(1780193338.939:753): avc:  denied  { write } for  pid=8288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.979818][   T40] audit: type=1400 audit(1780193338.969:754): avc:  denied  { execute } for  pid=8299 comm="syz.5.657" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   95.994854][   T40] audit: type=1400 audit(1780193338.979:755): avc:  denied  { ioctl } for  pid=8301 comm="syz.2.658" path="socket:[28337]" dev="sockfs" ino=28337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   96.019251][   T40] audit: type=1400 audit(1780193338.999:756): avc:  denied  { write } for  pid=8303 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   96.030646][   T40] audit: type=1400 audit(1780193339.009:757): avc:  denied  { map } for  pid=8286 comm="syz.0.654" path="socket:[28330]" dev="sockfs" ino=28330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   96.064444][ T8310] netlink: 'syz.4.660': attribute type 8 has an invalid length.
[   96.070660][   T40] audit: type=1400 audit(1780193339.059:758): avc:  denied  { ioctl } for  pid=8309 comm="syz.4.660" path="socket:[26986]" dev="sockfs" ino=26986 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   96.070900][ T8310] overlay: Bad value for 'uuid'
[   96.092474][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'.
[   96.234022][ T8327] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[   96.273604][ T8331] 9pnet_virtio: no channels available for device 127.0.0.1
[   96.316491][ T8334] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[   96.330355][ T8334] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.346640][ T8334] bond3: (slave geneve2): making interface the new active one
[   96.354584][ T8334] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   96.463130][ T8348] openvswitch: netlink: IP tunnel dst address not specified
[   96.614837][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[   96.619814][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.625618][ T8355] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.628845][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.631154][ T8355] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.638907][ T8345] syz.4.672 (8345): drop_caches: 2
[   96.641528][ T8346] syz.4.672 (8346): drop_caches: 2
[   96.890134][   T24] libceph: connect (1)[c::]:6789 error -101
[   96.892755][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   96.899023][   T24] libceph: connect (1)[c::]:6789 error -101
[   96.901070][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   96.916321][ T8372] netlink: 'syz.5.682': attribute type 1 has an invalid length.
[   96.925216][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.680'.
[   96.928268][ T8372] bond1: entered promiscuous mode
[   96.929841][ T8372] bond1: entered allmulticast mode
[   96.931576][   T24] libceph: connect (1)[c::]:6789 error -101
[   96.931703][ T8372] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.934247][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   96.941696][ T8372] erspan1: entered allmulticast mode
[   96.945684][ T8372] bond1: (slave erspan1): making interface the new active one
[   96.948610][ T8372] erspan1: entered promiscuous mode
[   96.951636][ T8372] bond1: (slave erspan1): Enslaving as an active interface with an up link
[   96.956585][   T40] audit: type=1400 audit(1780193339.939:759): avc:  denied  { create } for  pid=8371 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   97.005246][ T8372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8372 comm=syz.5.682
[   97.010567][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'.
[   97.018470][ T8372] bond1 (unregistering): (slave erspan1): Releasing active interface
[   97.020981][ T8372] erspan1: left promiscuous mode
[   97.024365][ T8372] bond1 (unregistering): Released all slaves
[   97.160276][   T24] libceph: connect (1)[c::]:6789 error -101
[   97.162225][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   97.191534][   T24] libceph: connect (1)[c::]:6789 error -101
[   97.194853][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   97.614412][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.684'.
[   97.620537][ T8388] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   97.625373][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.628408][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.631581][ T8388] bridge0: entered allmulticast mode
[   97.669139][   T24] libceph: connect (1)[c::]:6789 error -101
[   97.671050][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   97.695929][ T8367] ceph: No mds server is up or the cluster is laggy
[   97.695938][ T8374] ceph: No mds server is up or the cluster is laggy
[   97.702958][   T24] libceph: connect (1)[c::]:6789 error -101
[   97.705696][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   97.816368][ T8398] IPv6: syztnl0: Disabled Multicast RS
[   98.085504][ T8411] syz.4.691 (8411): drop_caches: 2
[   98.153184][   T40] audit: type=1400 audit(1780193341.139:760): avc:  denied  { setattr } for  pid=8422 comm="syz.5.695" path="socket:[26445]" dev="sockfs" ino=26445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   98.172693][ T8430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8430 comm=syz.0.697
[   98.285819][ T8437] bridge5: port 1(veth3) entered blocking state
[   98.291080][ T8437] bridge5: port 1(veth3) entered disabled state
[   98.294161][ T8437] veth3: entered allmulticast mode
[   98.297760][ T8437] veth3: entered promiscuous mode
[   98.321255][ T8446] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   98.332023][ T8435] bridge5: port 2(veth5) entered blocking state
[   98.334088][ T8435] bridge5: port 2(veth5) entered disabled state
[   98.336945][ T8435] veth5: entered allmulticast mode
[   98.340667][ T8435] veth5: entered promiscuous mode
[   98.359678][ T8437] bridge5: port 3(veth7) entered blocking state
[   98.361736][ T8437] bridge5: port 3(veth7) entered disabled state
[   98.363701][ T8437] veth7: entered allmulticast mode
[   98.366052][ T8437] veth7: entered promiscuous mode
[   98.650292][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.652675][ T8466] bridge0: port 2(bridge_slave_1) entered listening state
[   98.655089][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.657385][ T8466] bridge0: port 1(bridge_slave_0) entered listening state
[   98.665048][ T8466] bridge2: port 1(dummy0) entered blocking state
[   98.667092][ T8466] bridge2: port 1(dummy0) entered forwarding state
[   98.673962][ T8466] xfrm0: left promiscuous mode
[   98.679150][ T8466] ipvlan0: left promiscuous mode
[   98.687338][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.690902][ T8466] bridge4: left promiscuous mode
[   98.695117][ T8466] bridge5: port 1(veth3) entered blocking state
[   98.697027][ T8466] bridge5: port 1(veth3) entered forwarding state
[   98.707313][ T8466] bridge5: port 2(veth5) entered blocking state
[   98.709401][ T8466] bridge5: port 2(veth5) entered forwarding state
[   98.717136][ T8466] bridge5: port 3(veth7) entered blocking state
[   98.719157][ T8466] bridge5: port 3(veth7) entered forwarding state
[   98.774396][ T8474] netlink: 'syz.0.710': attribute type 3 has an invalid length.
[   98.777464][ T8474] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[   99.037895][ T5887] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[   99.207402][ T5887] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[   99.215503][ T5887] usb 9-1: config 0 has no interface number 0
[   99.217398][ T5887] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   99.224922][ T5887] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   99.230777][ T5887] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   99.233544][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.242392][ T5887] usb 9-1: config 0 descriptor??
[   99.255477][ T5887] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   99.317621][ T8511] mmap: syz.2.721 (8511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.377610][ T8520] xt_hashlimit: size too large, truncated to 1048576
[   99.478413][ T8476] iowarrior 9-1:0.1: Error -90 while submitting URB
[   99.506073][ T8527] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   99.511782][ T5887] usb 9-1: USB disconnect, device number 4
[   99.527830][ T5822] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   99.539056][ T8527] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.569823][ T8527] bond3: (slave geneve3): making interface the new active one
[   99.573416][ T8527] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   99.690982][ T5822] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.697736][ T5822] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[   99.704847][ T5822] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.712449][ T5822] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.715911][ T5822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.719049][ T5822] usb 10-1: Product: syz
[   99.720572][ T5822] usb 10-1: Manufacturer: syz
[   99.721201][ T8534] ubi8: attaching mtd0
[   99.722326][ T5822] usb 10-1: SerialNumber: syz
[   99.725410][ T8534] ubi8: scanning is finished
[   99.727510][ T8534] ubi8: empty MTD device detected
[   99.730740][ T8534] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record
[   99.737077][ T5822] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[   99.740461][ T5822] cdc_ncm 10-1:1.0: bind() failure
[   99.862523][ T8534] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  100.287823][ T8551] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  100.294724][ T8551] syzkaller1: entered promiscuous mode
[  100.296707][ T8551] syzkaller1: entered allmulticast mode
[  100.389405][ T8556] __nla_validate_parse: 12 callbacks suppressed
[  100.389423][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  100.399054][ T8556] erspan0: entered promiscuous mode
[  100.498995][ T8562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.738'.
[  100.577755][   T40] kauditd_printk_skb: 18308 callbacks suppressed
[  100.577768][   T40] audit: type=1326 audit(1780193343.569:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.590579][   T40] audit: type=1326 audit(1780193343.569:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.597247][   T40] audit: type=1326 audit(1780193343.569:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.605268][   T40] audit: type=1326 audit(1780193343.569:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.612012][   T40] audit: type=1326 audit(1780193343.569:19073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.620096][   T40] audit: type=1326 audit(1780193343.569:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.626865][   T40] audit: type=1326 audit(1780193343.569:19075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.634322][   T40] audit: type=1326 audit(1780193343.569:19076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.643018][   T40] audit: type=1326 audit(1780193343.569:19077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.650213][   T40] audit: type=1326 audit(1780193343.569:19078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.0.716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ab59ce59 code=0x50000
[  100.672079][ T8574] xt_cluster: node mask cannot exceed total number of nodes
[  100.688276][ T8574] xt_cluster: node mask cannot exceed total number of nodes
[  100.868395][ T8581] vcan1: entered allmulticast mode
[  100.978357][ T8588] netlink: 'syz.2.747': attribute type 2 has an invalid length.
[  100.981857][ T8588] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  101.103034][ T8598] ip6gre1: entered promiscuous mode
[  101.105307][ T8598] ip6gre1: entered allmulticast mode
[  101.277615][ T8613] syzkaller0: entered promiscuous mode
[  101.280971][ T8613] syzkaller0: entered allmulticast mode
[  102.479653][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.575953][ T8700] bridge1: entered promiscuous mode
[  102.579490][ T8700] bridge1: entered allmulticast mode
[  102.593911][ T8701] hfsplus: Unknown parameter 'barrier'
[  102.596866][ T8701] vivid-004: disconnect
[  102.768698][ T8711] netlink: 5 bytes leftover after parsing attributes in process `syz.2.767'.
[  102.773645][ T8711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.808126][   T54] usb 10-1: USB disconnect, device number 3
[  105.633882][ T8712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.811958][ T8757] syzkaller0: entered promiscuous mode
[  105.813975][ T8757] syzkaller0: entered allmulticast mode
[  105.863183][ T8761] xt_hashlimit: size too large, truncated to 1048576
[  106.051169][   T40] kauditd_printk_skb: 13673 callbacks suppressed
[  106.051187][   T40] audit: type=1400 audit(1780193349.039:32752): avc:  denied  { listen } for  pid=8775 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  106.063150][   T40] audit: type=1400 audit(1780193349.049:32753): avc:  denied  { connect } for  pid=8775 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  106.128688][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.132255][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.134937][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.137447][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.141178][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.143559][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.146110][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.148743][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.151011][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.153188][   T54] hid-generic 0000:0004:261D.0003: unknown main item tag 0x0
[  106.158654][   T54] hid-generic 0000:0004:261D.0003: hidraw1: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  106.165155][   T40] audit: type=1400 audit(1780193349.149:32754): avc:  denied  { read } for  pid=8788 comm="syz.0.797" lport=76 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  106.194425][ T8790] fido_id[8790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  106.332826][ T8802] random: crng reseeded on system resumption
[  106.365859][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  106.403519][ T8812] raw_sendmsg: syz.2.808 forgot to set AF_INET. Fix it!
[  106.515027][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'.
[  106.690982][ T8843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8843 comm=syz.5.823
[  106.692193][   T40] audit: type=1400 audit(1780193349.679:32755): avc:  denied  { getopt } for  pid=8842 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  106.750066][   T40] audit: type=1400 audit(1780193349.739:32756): avc:  denied  { setattr } for  pid=8849 comm="syz.2.827" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  107.030934][   T40] audit: type=1400 audit(1780193350.019:32757): avc:  denied  { write } for  pid=8882 comm="syz.2.843" path="socket:[30314]" dev="sockfs" ino=30314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  107.284925][ T8901] syzkaller0: entered promiscuous mode
[  107.286534][ T8901] syzkaller0: entered allmulticast mode
[  107.565046][ T8915] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.805688][ T8928] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[  108.012963][ T8948] netlink: 'syz.2.872': attribute type 4 has an invalid length.
[  108.016253][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'.
[  108.085677][   T50] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.230223][ T8968] sctp: [Deprecated]: syz.2.878 (pid 8968) Use of int in maxseg socket option.
[  108.230223][ T8968] Use struct sctp_assoc_value instead
[  108.385993][   T40] audit: type=1400 audit(1780193351.369:32758): avc:  denied  { mount } for  pid=8982 comm="syz.0.885" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  108.394735][   T40] audit: type=1400 audit(1780193351.379:32759): avc:  denied  { search } for  pid=8982 comm="syz.0.885" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.403096][   T40] audit: type=1400 audit(1780193351.379:32760): avc:  denied  { search } for  pid=8982 comm="syz.0.885" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.410129][   T40] audit: type=1400 audit(1780193351.379:32761): avc:  denied  { search } for  pid=8982 comm="syz.0.885" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.439036][ T8987] syzkaller0: entered promiscuous mode
[  108.440898][ T8987] syzkaller0: entered allmulticast mode
[  108.458712][ T8987] tipc: Started in network mode
[  108.460327][ T8987] tipc: Node identity ee8cfbdfbbec, cluster identity 4711
[  108.462680][ T8987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.473779][ T8986] tipc: Resetting bearer <eth:syzkaller0>
[  108.492524][ T8986] tipc: Disabling bearer <eth:syzkaller0>
[  108.817759][ T8633] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  108.957849][ T8633] usb 10-1: device descriptor read/64, error -71
[  109.227794][ T8633] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  109.387739][ T8633] usb 10-1: device descriptor read/64, error -71
[  109.508422][ T8633] usb usb10-port1: attempt power cycle
[  109.848000][ T8633] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  109.868211][ T8633] usb 10-1: device descriptor read/8, error -71
[  110.117889][ T8633] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  110.139090][ T8633] usb 10-1: device descriptor read/8, error -71
[  110.257874][ T8633] usb usb10-port1: unable to enumerate USB device
[  110.599955][   T54] IPVS: starting estimator thread 0...
[  110.635398][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'.
[  110.697798][ T9061] IPVS: using max 45 ests per chain, 108000 per kthread
[  111.246586][ T9083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9083 comm=syz.2.929
[  111.252825][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  111.252838][   T40] audit: type=1400 audit(1780193354.239:32766): avc:  denied  { nlmsg_tty_audit } for  pid=9082 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  111.391148][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'.
[  111.556340][ T9094] xt_hashlimit: size too large, truncated to 1048576
[  111.596377][ T9101] vcan0: tx drop: invalid da for name 0x0000000000000001
[  111.624432][ T9106] usb usb7: usbfs: process 9106 (syz.2.940) did not claim interface 0 before use
[  111.632057][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.635763][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.638828][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.657348][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.660393][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.663135][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.709169][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.711956][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.714690][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'.
[  111.769954][ T9128] netlink: 'syz.4.949': attribute type 1 has an invalid length.
[  111.793461][ T9128] bond3: entered promiscuous mode
[  111.795732][ T9128] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.811924][ T9128] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.814280][ T9128] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  111.817377][ T9128] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  111.822770][ T9128] bond3: (slave ip6gre2): making interface the new active one
[  111.825083][ T9128] ip6gre2: entered promiscuous mode
[  111.827461][ T9128] bond3: (slave ip6gre2): Enslaving as an active interface with an up link
[  112.099019][   T40] audit: type=1400 audit(1780193355.089:32767): avc:  denied  { connect } for  pid=9162 comm="syz.4.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  112.615405][ T9218] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  112.787023][   T40] audit: type=1400 audit(1780193355.769:32768): avc:  denied  { create } for  pid=9242 comm="syz.2.1000" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  113.365025][   T40] audit: type=1400 audit(1780193356.349:32769): avc:  denied  { associate } for  pid=9278 comm="syz.5.1015" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  113.371914][   T40] audit: type=1400 audit(1780193356.359:32770): avc:  denied  { mounton } for  pid=9276 comm="syz.5.1015" path="/proc/412/task" dev="proc" ino=32786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  113.615337][ T9283] program syz.4.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.623625][   T40] audit: type=1400 audit(1780193356.609:32771): avc:  denied  { unlink } for  pid=5737 comm="syz-executor" name="file0" dev="tmpfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  113.719967][ T9295] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  115.508906][ T9202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.626568][ T9318] SELinux: failed to load policy
[  115.879514][ T9347] set match dimension is over the limit!
[  116.179831][   T40] audit: type=1400 audit(1780193359.169:32772): avc:  denied  { read } for  pid=9348 comm="syz.2.1045" lport=36866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  116.498320][   T40] audit: type=1400 audit(1780193359.489:32773): avc:  denied  { accept } for  pid=9363 comm="syz.5.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.524043][ T9366] syzkaller0: entered promiscuous mode
[  116.525740][ T9366] syzkaller0: entered allmulticast mode
[  116.640761][   T40] audit: type=1400 audit(1780193359.629:32774): avc:  denied  { name_bind } for  pid=9367 comm="syz.5.1053" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  117.399531][   T40] audit: type=1400 audit(1780193360.389:32775): avc:  denied  { getopt } for  pid=9404 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  117.678701][ T9422] sg_read: process 1047 (syz.2.1077) changed security contexts after opening file descriptor, this is not allowed.
[  117.752923][ T9434] __nla_validate_parse: 7 callbacks suppressed
[  117.752933][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  117.845205][ T9442] syzkaller0: entered promiscuous mode
[  117.847065][ T9442] syzkaller0: entered allmulticast mode
[  118.221935][   T40] audit: type=1326 audit(1780193361.209:32776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.5.1090" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84de59ce59 code=0x7fc00000
[  118.587906][ T9324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.592277][ T9429] netlink: 'syz.2.1079': attribute type 1 has an invalid length.
[  118.595232][ T9429] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1079'.
[  118.683199][ T9462] syzkaller0: entered promiscuous mode
[  118.685319][ T9462] syzkaller0: entered allmulticast mode
[  118.778650][   T40] audit: type=1326 audit(1780193361.769:32777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.5.1090" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84de596bd7 code=0x7fc00000
[  118.820265][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1098'.
[  119.125140][   T40] audit: type=1400 audit(1780193362.109:32778): avc:  denied  { accept } for  pid=9478 comm="syz.5.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  119.150382][ T9485] netlink: 'syz.2.1104': attribute type 1 has an invalid length.
[  119.167488][ T9485] 8021q: adding VLAN 0 to HW filter on device bond4
[  119.184111][ T9485] bond4: (slave geneve4): making interface the new active one
[  119.189321][ T9485] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  119.256580][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'.
[  119.370213][ T9496] program syz.2.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.547046][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  119.549805][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'.
[  119.622057][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'.
[  119.648474][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  119.653864][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'.
[  119.802469][   T40] audit: type=1400 audit(1780193362.779:32779): avc:  denied  { mount } for  pid=9520 comm="syz.0.1121" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  119.911372][ T9530] netlink: 'syz.2.1125': attribute type 9 has an invalid length.
[  119.913736][ T9530] netlink: 'syz.2.1125': attribute type 6 has an invalid length.
[  119.978434][ T9538] netlink: 'syz.2.1129': attribute type 4 has an invalid length.
[  119.989958][ T9538] netlink: 'syz.2.1129': attribute type 4 has an invalid length.
[  119.997158][ T9540] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1130'.
[  120.131618][   T40] audit: type=1400 audit(1780193363.119:32780): avc:  denied  { setopt } for  pid=9550 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  120.521978][   T40] audit: type=1400 audit(1780193363.509:32781): avc:  denied  { map } for  pid=9586 comm="syz.2.1153" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  120.531448][   T40] audit: type=1400 audit(1780193363.509:32782): avc:  denied  { execute } for  pid=9586 comm="syz.2.1153" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  120.837084][ T9630] program syz.0.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.089249][ T9651] 9pnet: p9_errstr2errno: server reported unknown error 
[  121.454857][ T9680] netlink: 'syz.4.1197': attribute type 4 has an invalid length.
[  121.612454][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  121.612465][   T40] audit: type=1400 audit(1780193364.599:32789): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  121.621647][   T40] audit: type=1400 audit(1780193364.599:32790): avc:  denied  { sendto } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  121.650438][   T40] audit: type=1400 audit(1780193364.639:32791): avc:  denied  { shutdown } for  pid=9691 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  122.126808][   T40] audit: type=1400 audit(1780193365.109:32792): avc:  denied  { write } for  pid=9712 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  122.846204][   T40] audit: type=1400 audit(1780193365.829:32793): avc:  denied  { create } for  pid=9747 comm="syz.4.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  122.965196][ T9772] __nla_validate_parse: 6 callbacks suppressed
[  122.965207][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1224'.
[  123.101084][ T8633] hid_parser_main: 5 callbacks suppressed
[  123.101097][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.109765][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.112139][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.114523][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.116888][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.120030][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.122562][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.125084][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.127316][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.131545][ T8633] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0
[  123.142136][ T8633] hid-generic 0006:0008:0008.0005: hidraw1: VIRTUAL HID v0.02 Device [syz0] on syz1
[  123.166967][ T9794] fido_id[9794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  123.306614][   T40] audit: type=1400 audit(1780193366.289:32794): avc:  denied  { getopt } for  pid=9808 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  123.733686][ T9827] infiniband syz1: set active
[  123.735717][ T9827] infiniband syz1: added syz_tun
[  123.762228][ T9827] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  123.766818][ T9827] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  123.772952][ T9827] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  123.794394][ T9827] RDS/IB: syz1: added
[  123.795796][ T9827] smc: adding ib device syz1 with port count 1
[  123.797869][ T9827] smc:    ib device syz1 port 1 has no pnetid
[  123.800310][ T9835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1262'.
[  123.806328][ T9835] syzkaller1: entered promiscuous mode
[  123.811578][ T9835] syzkaller1: entered allmulticast mode
[  124.196784][   T40] audit: type=1400 audit(1780193367.179:32795): avc:  denied  { module_load } for  pid=9849 comm="syz.2.1269" path="/440/bus" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  124.197086][ T9850] Invalid ELF header magic: != ELF
[  124.234867][   T40] audit: type=1400 audit(1780193367.219:32796): avc:  denied  { bind } for  pid=9852 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  124.243428][   T40] audit: type=1400 audit(1780193367.219:32797): avc:  denied  { listen } for  pid=9852 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  124.441693][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1279'.
[  124.447416][ T9872] geneve3: entered promiscuous mode
[  124.545889][ T9885] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in;
[  124.545889][ T9885]    program syz.0.1286 not setting count and/or reply_len properly
[  124.599627][ T9895] program syz.2.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.608603][   T40] audit: type=1326 audit(1780193367.589:32798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.4.1292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3904b9ce59 code=0x7ffc0000
[  124.680049][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1298'.
[  124.683787][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1298'.
[  124.710983][ T9912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1299'.
[  125.425580][ T9951] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1318'.
[  125.434279][ T9951] syzkaller1: entered promiscuous mode
[  125.435970][ T9951] syzkaller1: entered allmulticast mode
[  125.677918][ T9974] netlink: 'syz.5.1327': attribute type 8 has an invalid length.
[  125.895696][ T9998] syzkaller0: entered promiscuous mode
[  125.897461][ T9998] syzkaller0: entered allmulticast mode
[  126.363735][T10023] GUP no longer grows the stack in syz.4.1351 (10023): 200000004000-20000000a000 (200000002000)
[  126.367856][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.4.1351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.367873][T10023] Tainted: [L]=SOFTLOCKUP
[  126.367877][T10023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.367884][T10023] Call Trace:
[  126.367887][T10023]  <TASK>
[  126.367892][T10023]  dump_stack_lvl+0x100/0x190
[  126.367919][T10023]  gup_vma_lookup.cold+0x83/0x96
[  126.367935][T10023]  __get_user_pages+0x241/0x32a0
[  126.367953][T10023]  ? find_held_lock+0x2b/0x80
[  126.367964][T10023]  ? mtree_load+0x311/0xa90
[  126.367990][T10023]  ? __pfx___get_user_pages+0x10/0x10
[  126.368007][T10023]  get_user_pages_remote+0x3d2/0xb10
[  126.368020][T10023]  ? mas_root_expand+0x670/0x750
[  126.368037][T10023]  ? __pfx_get_user_pages_remote+0x10/0x10
[  126.368057][T10023]  ? __access_remote_vm+0x755/0x890
[  126.368068][T10023]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  126.368084][T10023]  __access_remote_vm+0x3bb/0x890
[  126.368099][T10023]  ? do_raw_spin_lock+0x128/0x260
[  126.368114][T10023]  ? __pfx___access_remote_vm+0x10/0x10
[  126.368125][T10023]  ? proc_pid_cmdline_read+0x31b/0x8c0
[  126.368142][T10023]  proc_pid_cmdline_read+0x4f2/0x8c0
[  126.368156][T10023]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  126.368170][T10023]  ? rw_verify_area+0xce/0x6d0
[  126.368182][T10023]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  126.368193][T10023]  vfs_readv+0x5d8/0x8d0
[  126.368207][T10023]  ? __pfx_vfs_readv+0x10/0x10
[  126.368227][T10023]  ? __fget_files+0x21f/0x3d0
[  126.368244][T10023]  ? do_preadv+0x1ac/0x270
[  126.368253][T10023]  do_preadv+0x1ac/0x270
[  126.368264][T10023]  ? __pfx_do_preadv+0x10/0x10
[  126.368276][T10023]  ? rcu_is_watching+0x12/0xc0
[  126.368293][T10023]  do_syscall_64+0x115/0x870
[  126.368307][T10023]  ? clear_bhb_loop+0x40/0x90
[  126.368320][T10023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.368331][T10023] RIP: 0033:0x7f3904b9ce59
[  126.368341][T10023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.368351][T10023] RSP: 002b:00007f3905a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  126.368362][T10023] RAX: ffffffffffffffda RBX: 00007f3904e15fa0 RCX: 00007f3904b9ce59
[  126.368369][T10023] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003
[  126.368375][T10023] RBP: 00007f3904c32d6f R08: 00000000fffffff9 R09: 0000000000000000
[  126.368382][T10023] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  126.368388][T10023] R13: 00007f3904e16038 R14: 00007f3904e15fa0 R15: 00007ffefad10678
[  126.368426][T10023]  </TASK>
[  126.860906][T10033] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.866692][T10033] dummy0: left promiscuous mode
[  126.955415][T10033] vlan2: left allmulticast mode
[  126.956998][T10033] bond2: left allmulticast mode
[  126.958977][T10033] geneve3: left allmulticast mode
[  126.964527][T10033] ip6gre1: left promiscuous mode
[  126.966129][T10033] ip6gre1: left allmulticast mode
[  126.968309][T10033] bridge1: left promiscuous mode
[  126.969884][T10033] bridge1: left allmulticast mode
[  126.972360][T10033] bond3: left promiscuous mode
[  126.973892][T10033] ip6gre2: left promiscuous mode
[  126.977549][T10033] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.983075][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.985499][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.160725][T10047] wg1 speed is unknown, defaulting to 1000
[  127.163226][T10047] wg1 speed is unknown, defaulting to 1000
[  127.165837][T10047] wg1 speed is unknown, defaulting to 1000
[  127.169544][T10047] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  127.173851][T10047] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  127.179348][T10047] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  127.183555][T10047] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  127.190087][T10047] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  127.207240][T10047] wg1 speed is unknown, defaulting to 1000
[  127.211857][T10047] wg1 speed is unknown, defaulting to 1000
[  127.214423][T10047] wg1 speed is unknown, defaulting to 1000
[  127.217098][T10047] wg1 speed is unknown, defaulting to 1000
[  127.219886][T10047] wg1 speed is unknown, defaulting to 1000
[  127.222489][T10047] wg1 speed is unknown, defaulting to 1000
[  127.520405][T10060] syzkaller0: entered promiscuous mode
[  127.522147][T10060] syzkaller0: entered allmulticast mode
[  127.544644][T10060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.550380][T10059] tipc: Resetting bearer <eth:syzkaller0>
[  127.563832][T10059] tipc: Disabling bearer <eth:syzkaller0>
[  127.683422][T10065] 
[  127.684535][T10065] ======================================================
[  127.687374][T10065] WARNING: possible circular locking dependency detected
[  127.690248][T10065] syzkaller #0 Tainted: G             L     
[  127.692894][T10065] ------------------------------------------------------
[  127.695775][T10065] syz.4.1366/10065 is trying to acquire lock:
[  127.698293][T10065] ffff888013af0a68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0
[  127.702971][T10065] 
[  127.702971][T10065] but task is already holding lock:
[  127.706027][T10065] ffff888013af0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620
[  127.709771][T10065] 
[  127.709771][T10065] which lock already depends on the new lock.
[  127.709771][T10065] 
[  127.713985][T10065] 
[  127.713985][T10065] the existing dependency chain (in reverse order) is:
[  127.717648][T10065] 
[  127.717648][T10065] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  127.720854][T10065]        lock_sock_nested+0x41/0xf0
[  127.723026][T10065]        smc_listen_out+0x1f5/0x4b0
[  127.725202][T10065]        smc_listen_work+0x767/0x50e0
[  127.727455][T10065]        process_one_work+0xa0e/0x1980
[  127.729730][T10065]        worker_thread+0x5ef/0xe50
[  127.731874][T10065]        kthread+0x370/0x450
[  127.733835][T10065]        ret_from_fork+0x72b/0xd50
[  127.735860][T10065]        ret_from_fork_asm+0x1a/0x30
[  127.738067][T10065] 
[  127.738067][T10065] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  127.742208][T10065]        __lock_acquire+0x14b8/0x2630
[  127.744452][T10065]        lock_acquire+0x1b1/0x370
[  127.746620][T10065]        __flush_work+0x4de/0xcb0
[  127.748753][T10065]        cancel_work_sync+0xd1/0xf0
[  127.750932][T10065]        smc_clcsock_release+0x5f/0xe0
[  127.753209][T10065]        __smc_release+0x5c2/0x880
[  127.755363][T10065]        smc_close_non_accepted+0xda/0x200
[  127.757826][T10065]        smc_close_active+0x4ff/0x1070
[  127.760107][T10065]        __smc_release+0x634/0x880
[  127.762263][T10065]        smc_release+0x1fc/0x620
[  127.764343][T10065]        __sock_release+0xb3/0x260
[  127.766490][T10065]        sock_close+0x1c/0x30
[  127.768457][T10065]        __fput+0x3ff/0xb50
[  127.770378][T10065]        task_work_run+0x150/0x240
[  127.772582][T10065]        exit_to_user_mode_loop+0x157/0x670
[  127.774531][T10065]        do_syscall_64+0x666/0x870
[  127.776630][T10065]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.779280][T10065] 
[  127.779280][T10065] other info that might help us debug this:
[  127.779280][T10065] 
[  127.783193][T10065]  Possible unsafe locking scenario:
[  127.783193][T10065] 
[  127.786241][T10065]        CPU0                    CPU1
[  127.788458][T10065]        ----                    ----
[  127.790664][T10065]   lock(sk_lock-AF_SMC/1);
[  127.792573][T10065]                                lock((work_completion)(&new_smc->smc_listen_work));
[  127.796241][T10065]                                lock(sk_lock-AF_SMC/1);
[  127.798738][T10065]   lock((work_completion)(&new_smc->smc_listen_work));
[  127.801045][T10065] 
[  127.801045][T10065]  *** DEADLOCK ***
[  127.801045][T10065] 
[  127.803682][T10065] 3 locks held by syz.4.1366/10065:
[  127.805263][T10065]  #0: ffff88802fbd5880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  127.808403][T10065]  #1: ffff888013af0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620
[  127.811210][T10065]  #2: ffffffff8e7e55e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0
[  127.813998][T10065] 
[  127.813998][T10065] stack backtrace:
[  127.815773][T10065] CPU: 2 UID: 0 PID: 10065 Comm: syz.4.1366 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.815789][T10065] Tainted: [L]=SOFTLOCKUP
[  127.815793][T10065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.815800][T10065] Call Trace:
[  127.815805][T10065]  <TASK>
[  127.815811][T10065]  dump_stack_lvl+0x100/0x190
[  127.815824][T10065]  print_circular_bug.cold+0x178/0x1c7
[  127.815841][T10065]  check_noncircular+0x146/0x160
[  127.815857][T10065]  __lock_acquire+0x14b8/0x2630
[  127.815873][T10065]  lock_acquire+0x1b1/0x370
[  127.815885][T10065]  ? __flush_work+0x4ca/0xcb0
[  127.815900][T10065]  ? mark_held_locks+0x40/0x70
[  127.815913][T10065]  ? __flush_work+0x4ca/0xcb0
[  127.815926][T10065]  __flush_work+0x4de/0xcb0
[  127.815939][T10065]  ? __flush_work+0x4ca/0xcb0
[  127.815956][T10065]  ? __pfx___flush_work+0x10/0x10
[  127.815970][T10065]  ? __pfx_wq_barrier_func+0x10/0x10
[  127.815988][T10065]  ? __pfx___might_resched+0x10/0x10
[  127.816004][T10065]  cancel_work_sync+0xd1/0xf0
[  127.816020][T10065]  smc_clcsock_release+0x5f/0xe0
[  127.816033][T10065]  __smc_release+0x5c2/0x880
[  127.816045][T10065]  ? __pfx_sock_def_readable+0x10/0x10
[  127.816059][T10065]  smc_close_non_accepted+0xda/0x200
[  127.816073][T10065]  smc_close_active+0x4ff/0x1070
[  127.816086][T10065]  __smc_release+0x634/0x880
[  127.816097][T10065]  smc_release+0x1fc/0x620
[  127.816108][T10065]  __sock_release+0xb3/0x260
[  127.816117][T10065]  ? __pfx_sock_close+0x10/0x10
[  127.816126][T10065]  sock_close+0x1c/0x30
[  127.816135][T10065]  __fput+0x3ff/0xb50
[  127.816151][T10065]  task_work_run+0x150/0x240
[  127.816164][T10065]  ? __pfx_task_work_run+0x10/0x10
[  127.816177][T10065]  ? rcu_is_watching+0x12/0xc0
[  127.816192][T10065]  exit_to_user_mode_loop+0x157/0x670
[  127.816206][T10065]  ? rcu_is_watching+0x12/0xc0
[  127.816221][T10065]  do_syscall_64+0x666/0x870
[  127.816234][T10065]  ? clear_bhb_loop+0x40/0x90
[  127.816246][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.816257][T10065] RIP: 0033:0x7f3904b9ce59
[  127.816266][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.816277][T10065] RSP: 002b:00007f3905a21028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  127.816287][T10065] RAX: 0000000000000000 RBX: 00007f3904e15fa0 RCX: 00007f3904b9ce59
[  127.816294][T10065] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  127.816300][T10065] RBP: 00007f3904c32d6f R08: 0000000000000000 R09: 0000000000000000
[  127.816306][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.816312][T10065] R13: 00007f3904e16038 R14: 00007f3904e15fa0 R15: 00007ffefad10678
[  127.816322][T10065]  </TASK>
[  129.277897][    C3] bridge0: port 1(bridge_slave_0) entered learning state
[  129.280774][    C3] bridge0: port 2(bridge_slave_1) entered learning state
[  137.608409][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[  137.610755][ T1436] ieee802154 phy1 wpan1: encryption failed: -22