last executing test programs: 9.296334685s ago: executing program 2 (id=17): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) tee(r0, r1, 0x543, 0x1) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_open_dev$video(&(0x7f0000000140), 0x5, 0xc000) (async) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x48100, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001) (async) flock(r2, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x5d}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81, 0x5}, {0x2, 0x4}, {0xfb, 0x5}, {0x9, 0x2}, {0x8}, {0x1, 0x2}, {0xa}, {0xf, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0xff}], "1d20664fa4c8a9fa"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x9, 0x1}, {0xa6, 0x7}, {0xd, 0x1}, {0x0, 0x3}, {0x9, 0x2}, {0x3}, {0x6, 0x6}, {0xdb, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x7}, {0xe}, {0x4, 0x1}], "ec64e89527c6c1cf"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x7}, {0x79, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x8}], "bce4c32ba9e111af"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x5}, {0xa, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0xe9, 0x1}, {0xe, 0x5}, {0x8}, {0x5, 0x4}, {0x7, 0x7}, {0x1}, {0xb, 0x2}], "34be459065cd51e3"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "b2a7d868edd2c104"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xfb, 0x1}, {0x89, 0x2}, {0x2, 0x1}, {0x4e, 0x4}, {0x3, 0x1}, {0x7, 0x1}], "0b45b851c0d2390a"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x80, 0x2}, {0xff, 0x2}, {0x9, 0x7}, {0x3, 0x2}, {0xf, 0x1}, {0xad, 0x5}, {0x8, 0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0x5}, {0x7b, 0x6}], "d1cac267dc1e844c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x2}, {0x2, 0x7}, {0x1d, 0x4}, {0x7f, 0x7}, {0x6, 0x1}, {0x5, 0x1}, {0xe5, 0x7}], "d617ded10687ec9f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xe9, 0x1}, {0xc, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x23, 0x4}, {0x5, 0x7}, {0xbc}, {0x3}, {0x7}, {0x5}], "f74e020a09e31934"}}]}, 0x130}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async) r7 = fsmount(r3, 0x0, 0x3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) socket$packet(0x11, 0x2, 0x300) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x2284c0, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @ioapic={0x8000000, 0xc105, 0x0, 0x9, 0x0, [{0x4, 0x4, 0xff, '\x00', 0x6}, {0xcf, 0x81, 0x80, '\x00', 0x80}, {0x9, 0xf8, 0x10, '\x00', 0x1}, {0x6, 0x9, 0x2, '\x00', 0xff}, {0x4, 0x9, 0x3}, {0x3, 0x7, 0xa, '\x00', 0x1}, {0x5, 0x2a, 0xb1, '\x00', 0x5}, {0x1, 0x3, 0x8, '\x00', 0x40}, {0xa, 0x5, 0xd, '\x00', 0x3}, {0x8, 0x8, 0x9}, {0x4, 0x6, 0xfc, '\x00', 0x4}, {0x5, 0x0, 0x6, '\x00', 0x35}, {0x2, 0x0, 0x7f, '\x00', 0x9}, {0x12, 0x1, 0xa, '\x00', 0x7}, {0x7, 0x3, 0x40, '\x00', 0x8}, {0x7f, 0x8, 0x0, '\x00', 0x8}, {0x8, 0xf3, 0x4, '\x00', 0x7}, {0x4, 0x4, 0x6, '\x00', 0xd}, {0xc5, 0x6, 0x1, '\x00', 0x8}, {0x9, 0x7, 0xde, '\x00', 0x3}, {0x9, 0x3, 0xfd, '\x00', 0xa}, {0x4, 0x3, 0x1, '\x00', 0x1}, {0x32, 0x8, 0x3, '\x00', 0x7f}, {0x1, 0x7, 0x9, '\x00', 0x1}]}}) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f00000008c0)=0x48000, 0x4) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000900), 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x280080, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000980)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) getsockname$netlink(r10, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r6, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8880}, 0x8c0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400, 0x0) read(r12, &(0x7f0000000c00)=""/228, 0xe4) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r6, 0x100, 0x70bd29, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) 9.218791719s ago: executing program 2 (id=19): migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x12ba82, 0x0) sendfile(r0, r0, 0x0, 0x8) getitimer(0x1, &(0x7f0000000100)) 9.140084901s ago: executing program 2 (id=20): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x2, 0x0) ioctl$FE_SET_VOLTAGE(r0, 0x6f43, &(0x7f0000000080)=0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 9.138931191s ago: executing program 2 (id=22): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(r3, 0xff08) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x950d3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) fcntl$setlease(r4, 0x400, 0x2) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c044}, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) 8.599472264s ago: executing program 1 (id=29): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r2, r2, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000100100000a000014"], 0x10}, 0xf440) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000600)) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) r7 = gettid() r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback={0x64}, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r9) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) readahead(r0, 0x4, 0x7) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.285172398s ago: executing program 2 (id=30): r0 = msgget(0x0, 0x2a8) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000000)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) fsopen(&(0x7f0000000100)='gfs2meta\x00', 0x1) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000200)=""/220) 7.308095951s ago: executing program 2 (id=35): r0 = socket$inet(0x2, 0x2, 0x7fff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9", 0x2b}], 0x1) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000000002000100000000000002060b0000000003000500d46162d6fc918636ac1414aa00000000000000000100140001000000"], 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x4, 0x36, 0x0, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) sendmsg$nl_route(r4, 0x0, 0x20040001) socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000400) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffffc) ptrace$pokeuser(0x6, r3, 0x388, 0xffefffffff7f0504) ioctl(r2, 0x3b94, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x9, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) 7.229616655s ago: executing program 32 (id=35): r0 = socket$inet(0x2, 0x2, 0x7fff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9", 0x2b}], 0x1) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000000002000100000000000002060b0000000003000500d46162d6fc918636ac1414aa00000000000000000100140001000000"], 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x4, 0x36, 0x0, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) sendmsg$nl_route(r4, 0x0, 0x20040001) socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000400) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffffc) ptrace$pokeuser(0x6, r3, 0x388, 0xffefffffff7f0504) ioctl(r2, 0x3b94, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x9, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) 5.888843187s ago: executing program 1 (id=45): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0], 0x1, r0, 0xe0e0e0e0}) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000200)={r2, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x28a01, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x3) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_DQBUF(r7, 0xc0186f40, &(0x7f00000004c0)={0x8, 0x0, 0x1, 0x10001, 0x3, 0x3}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f00000008c0)={{r7, &(0x7f0000000500)='/-%/\x00', 0x80001, &(0x7f0000000540)={@align=0x316a, {0x3, 0x73, 0x8000, 0x5}}, 0x5fb3, &(0x7f0000000580), &(0x7f00000005c0)=0x6}, 0x3, &(0x7f0000000840)=[{0x2, 0x4f1, &(0x7f0000000600)='&-.(\'\x00', &(0x7f0000000640)="81f4c98c69116d90fd0b50fcc7aafb5e1807ad23b6015d1d07be42f3f2afe8f8c5a88e6a012bbd92f795db34e8ea1ac797b15654dad08d5669b4f4abbbd26ca3a497dd2d206deea2a0d7c9fdfcf7d2819976ece75ace", 0x56, 0x12}, {0x3, 0x3, &(0x7f00000006c0)='/selinux/mls\x00', &(0x7f0000000700)="2833d462502ca9e925da8eb1593a8a4f6a129779c99e87aa55e7cf76b223a0b63e8b82a26a9f5a24ed3efe9fddb617f67099d602620e5efc8bda432c849e58e84e4c7bb8ad487022b193ad67829a254756872f226c95d8ba94b13af2aa81ed73bbdcc7321f46e2cf450f938d53a042e830e7e25d3b41e60e216f6252eca8525b5be2d29b0b97747bc2f42bf946aa46f7e3fd0ac149eec6e5fbb166c6525e93ed71d6fcaf9f193c834d58909aaca0cdea3f", 0xb1, 0x2}, {0x2, 0x6, &(0x7f00000007c0)='[,-../@@,!#./\x00', &(0x7f0000000800)="c79c0ab6e96121f16091c2334f81e6684eb164860bdbc365e1bfff62246eef58d375bc65257dab", 0x27, 0x2}]}) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000940)={0x2, 0x0, @ioapic={0xfec00000, 0x6, 0xfffff8b5, 0xdb7d9d1, 0x0, [{0x9, 0x8, 0x8b, '\x00', 0x81}, {0xe, 0x4, 0x1, '\x00', 0x9}, {0x8, 0x47, 0x0, '\x00', 0x9}, {0x7, 0x0, 0x0, '\x00', 0x8}, {0x4, 0xbc, 0x3e, '\x00', 0x8}, {0x1, 0xb9, 0x6, '\x00', 0x9}, {0x71, 0xa, 0xba, '\x00', 0x5}, {0x5, 0x5, 0x7, '\x00', 0x73}, {0xc6, 0x28, 0xb9, '\x00', 0x7}, {0x7, 0x3, 0x3, '\x00', 0x8}, {0x0, 0x3, 0xec, '\x00', 0x6}, {0x81, 0x23, 0x4, '\x00', 0x62}, {0x3, 0x8, 0x5, '\x00', 0x81}, {0x9, 0x92, 0x1, '\x00', 0x1}, {0x6, 0x7}, {0x3, 0x6, 0x4, '\x00', 0x9}, {0x2, 0x7, 0x8, '\x00', 0x6}, {0x0, 0x3, 0x7, '\x00', 0xa}, {0x8, 0x4}, {0x7, 0x0, 0x9, '\x00', 0xb}, {0x0, 0xf6, 0xf8, '\x00', 0x9}, {0x40, 0xc, 0x20, '\x00', 0xf}, {0xc9, 0x8, 0x2, '\x00', 0x6}, {0xd, 0x9, 0x1, '\x00', 0xa}]}}) (async) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000d40)={0x0, 0x1, 0x8, 0x1e, &(0x7f0000000b80)=""/30, 0xf1, &(0x7f0000000bc0)=""/241, 0x4d, &(0x7f0000000cc0)=""/77}) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000d80)={[0x7fffffff, 0x2, 0x3, 0x9, 0x2, 0x8000, 0x80000001, 0x4, 0x9, 0xfffffffe, 0x2, 0x7, 0x40, 0xfffffff2, 0xb36c, 0x7, 0x9, 0xb, 0x1, 0x4, 0x9, 0xb0ee, 0x0, 0x1, 0x3, 0x401, 0x4d0b, 0x800, 0x878, 0x100, 0x9, 0x9b2, 0x101, 0xa, 0x7, 0xffff9f6d, 0x3, 0x1e0, 0x7, 0x8, 0x1, 0x9, 0x7, 0x0, 0x2, 0x8, 0x4, 0xffffffff, 0x2, 0xfff, 0x0, 0x9, 0xd41, 0xff, 0x9, 0x4, 0x8b, 0x5, 0x40, 0x9, 0x5, 0x6, 0x101, 0x1, 0x10000, 0x8, 0x8, 0x3, 0x6, 0x2, 0x7f, 0x14ca, 0x7f, 0x6, 0x4, 0x5, 0x5, 0x0, 0x0, 0x2, 0x9, 0x13, 0x8, 0x5, 0x3, 0x7, 0x17, 0x3, 0x5, 0x3, 0x101, 0xf, 0x0, 0x80000001, 0xa, 0x7, 0x4, 0x1, 0x5, 0x0, 0xbc02, 0x7, 0xfb9a, 0x0, 0x80000001, 0x9, 0x7, 0x0, 0x3, 0x0, 0x8, 0xc526, 0x5, 0x1096, 0xa, 0xf, 0x4, 0x4, 0x7ff, 0x8, 0x54e8, 0x4, 0xab, 0x1, 0x2, 0x6, 0x8, 0x9000, 0x1000, 0xb2dd, 0x7, 0x1, 0x1, 0x5, 0x11, 0x5, 0x0, 0x44d, 0x8, 0x8, 0x5b1, 0x6, 0x1, 0x400, 0x80000000, 0xceb, 0x9, 0xfffffff9, 0x7ff, 0x80000001, 0x0, 0xb908, 0x5, 0x6, 0x8, 0x5, 0x8, 0x44, 0xc2bd, 0x2f1a5b0a, 0x7, 0xffffffff, 0x20000000, 0xb0, 0x9, 0x9, 0x0, 0x5, 0x8000, 0x4, 0x34, 0x1000, 0x6, 0xffffffff, 0x101, 0x6, 0x3ff, 0x4, 0x401, 0x1, 0x0, 0x2, 0x6f, 0xf906, 0x0, 0x0, 0x1, 0x8, 0x9384, 0x2, 0x80, 0x6, 0x5, 0xb, 0x6, 0x80000000, 0x4, 0x3, 0x4, 0x6, 0x4, 0x6, 0x4, 0x7fffffff, 0x1000, 0xfffff0b0, 0xaa0e, 0x403b9b9c, 0x9, 0x68f9d3b5, 0x2, 0x80, 0x5, 0x8, 0x3, 0xe50, 0x5, 0x80, 0x7fff, 0x6, 0xfffffffa, 0x77, 0x3, 0xa62, 0x5, 0x5, 0x2, 0xffffff8d, 0x7, 0xec98, 0x6, 0x3, 0x0, 0x7, 0xd27a, 0x80, 0x4, 0xff, 0x50, 0x0, 0x3ff, 0x2, 0x1, 0x2, 0x5, 0x11b, 0xffff0000, 0x361, 0xb, 0x9, 0x5, 0x3, 0x7, 0x0, 0xa879, 0x32, 0xb81, 0x3, 0x3, 0x9, 0x10bc, 0x0, 0x9, 0x3, 0x1, 0x8, 0xfffffc00, 0x7, 0x6, 0xe807, 0x6, 0x7, 0xf349, 0x6, 0x5, 0x86, 0x5, 0xac2f, 0xa1, 0x5, 0x6, 0x5, 0x6, 0x7, 0x10, 0x0, 0x5, 0x400000, 0x9, 0x9, 0x41b, 0xfff, 0x666dcfb6, 0x2, 0x0, 0xffffff80, 0x72d, 0x819, 0x9, 0xfffffff2, 0x7, 0x800, 0x0, 0x5, 0x5, 0x7fff, 0x200, 0x64, 0x1, 0x10, 0x3, 0x8, 0x7, 0xd0d2, 0xfffffff8, 0x5, 0x0, 0x38, 0x10000, 0x8, 0x10001, 0x4, 0x1, 0xc80, 0x203, 0x1000, 0x8, 0x4, 0x3, 0x9, 0xffffffff, 0x9, 0xd, 0x5, 0x4, 0x7, 0x28e, 0x0, 0x2, 0x80000001, 0x400, 0x0, 0x3498, 0x8, 0x2, 0x7, 0x7f, 0x6, 0x6, 0xaa, 0x3, 0x5, 0xfe4, 0x9, 0x6, 0x9, 0x3, 0x1, 0xf, 0x6, 0x6e29, 0x80000, 0x2cbb5727, 0x9, 0xab0, 0x4, 0x80000000, 0x0, 0x0, 0x200, 0x6, 0xb, 0x8, 0x9, 0x80, 0x2, 0x8, 0xfffff0b2, 0x0, 0x2, 0xb, 0x6, 0x8, 0x2, 0x6, 0x6636e5e, 0x7fff, 0x6, 0xf, 0xffffffff, 0xd2, 0x0, 0x4, 0x3, 0x5, 0x9199, 0x0, 0x8, 0x2, 0x39, 0x1, 0x7, 0x9, 0x6, 0x8, 0x7fffffff, 0x4, 0x3443, 0xf, 0xb1, 0x7, 0x4, 0x9, 0x5, 0x3, 0x80000000, 0x26, 0x10001, 0x6, 0x7, 0xe8, 0x0, 0x3, 0x5, 0x0, 0x1, 0xb, 0x7000, 0x4, 0x2, 0x7, 0x5, 0x200, 0x1, 0x3, 0x10000, 0x10, 0x6, 0xc, 0x9, 0x2, 0x9, 0x5, 0x2, 0x7ff, 0x2, 0xe4, 0x740, 0x1, 0x3, 0xfffffffc, 0xb5cd, 0x4, 0x8, 0x5, 0x8, 0x4, 0x99b, 0x8001, 0x4, 0x5, 0x7, 0x0, 0x6, 0x6, 0x7f, 0x2, 0x5, 0xa1d, 0xf, 0x8, 0x0, 0x1ff, 0x7, 0x8, 0x1, 0x3, 0x8, 0xb, 0x15, 0x6, 0xe387, 0x3, 0xdac, 0xfff, 0x333f, 0x100, 0x8e, 0x2, 0x6, 0x5, 0x3, 0x0, 0x40, 0x4, 0x1, 0x0, 0x7, 0x81, 0xffff, 0x3ff, 0x9, 0x402d, 0x10000, 0x3, 0x80, 0x3, 0x6, 0x6, 0x3, 0x2458, 0xa, 0xd, 0x32ba, 0x2, 0x4, 0x7, 0xfffffff8, 0x136, 0xe, 0x1000, 0x5, 0xfffffff9, 0x4, 0x0, 0xe17f, 0xe, 0x0, 0x9, 0x2, 0xf3a2, 0x3, 0x5, 0x2, 0x1, 0x3, 0x1800, 0x7, 0x38, 0x5, 0x5, 0x6, 0x6, 0x8001, 0x4, 0x80, 0x1, 0xb, 0x3, 0x1d93, 0xfffffffa, 0x5d13, 0x7, 0x3, 0x401, 0x81, 0x47, 0x4, 0x3, 0x80, 0xffffff37, 0x8, 0x6, 0x2, 0x2, 0x7, 0x7, 0xc9, 0xfffffffe, 0x5d, 0x10, 0x0, 0x5, 0x5, 0xfffffff5, 0x4, 0x1000, 0x30, 0x7, 0xcc12, 0x10, 0x1ff, 0x9, 0x5, 0x0, 0x80000001, 0x1d, 0x9, 0x3, 0x7, 0x6, 0x8000, 0x8000, 0x4, 0x1, 0xb, 0x7, 0x5, 0x1, 0x0, 0x80000001, 0x3, 0x1, 0xfffffffe, 0xb4, 0x3, 0x3, 0xec1, 0x7fff, 0x3, 0x7, 0x6, 0x8, 0x4, 0xb, 0xffff13b3, 0x4, 0x0, 0x3, 0x9, 0x7, 0x81, 0x9, 0x0, 0x48293081, 0x7fc4, 0x6, 0x8, 0x6, 0x9, 0x3, 0x2, 0x401, 0xfffffc01, 0x7, 0x3, 0x5e, 0x4c336d79, 0x9, 0xc, 0x7ff, 0x9, 0x8, 0x348, 0x340000, 0x3, 0x8, 0x2, 0x40, 0xb0a4, 0x6, 0xfffffe00, 0x3, 0xe9, 0x7, 0x80000000, 0xfffff801, 0x9, 0xfffffffb, 0x10, 0xffffffff, 0x174, 0xffff0000, 0x0, 0x3ff, 0x5b48, 0x1, 0x80000001, 0x0, 0x1, 0x100, 0x3ff, 0x9, 0x1ff, 0x8, 0xa, 0xa, 0x7fffffff, 0x5, 0x7, 0x5, 0xc28, 0x61d6, 0x7, 0x2, 0x9, 0x6, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x4, 0x9, 0x4, 0x5, 0x0, 0xbc, 0x4, 0xd, 0x0, 0xa, 0x7, 0x7, 0x322, 0x2, 0xd524, 0x7, 0x7, 0xd, 0x1, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x8, 0x5, 0x3, 0x4, 0xffff0001, 0x8, 0x8001, 0x8, 0x1, 0x0, 0x2, 0x9, 0x3, 0xda, 0x7, 0x2, 0x0, 0x69a, 0x5, 0x0, 0x7, 0x10001, 0x9, 0x10001, 0x40, 0x40000, 0xe00, 0xffff, 0x7d98586d, 0x0, 0x4345, 0xffffffff, 0x1, 0x1000, 0x5, 0x200, 0x200, 0x80000001, 0x9, 0xa, 0x7, 0x8, 0x9, 0x0, 0xa, 0xfffffffa, 0x1, 0x9, 0xa80, 0x1, 0x129e, 0x7, 0x3, 0x8, 0x3, 0x3, 0x8000, 0x0, 0x7fffffff, 0x3, 0x1, 0xfffffffe, 0x361f, 0x0, 0x7ff, 0x8, 0x1, 0xfff, 0x0, 0x8001, 0x7ff, 0x0, 0x3, 0xfffffff3, 0x2, 0x7, 0x8, 0x7fffffff, 0x33bc, 0x9, 0x0, 0x8, 0x0, 0x80000001, 0x7, 0x9, 0x4, 0x5, 0x9, 0x7, 0x9, 0xb, 0x1, 0x11f5, 0xa, 0xa, 0xb6f, 0x386, 0x9, 0x2, 0x400, 0x3d4, 0x8, 0x400, 0xffff, 0x6, 0xd, 0x9, 0x6, 0x8, 0x9, 0x1, 0x7, 0x0, 0xb, 0x4c, 0x3, 0x5, 0x401, 0x9, 0x80000000, 0x6, 0x1ff, 0xfffffff6, 0x40, 0x2270, 0x50, 0x63, 0x1, 0x0, 0x2, 0xfffffffa, 0x4, 0x1, 0x9, 0x6, 0x80000000, 0x1, 0x40, 0x3, 0x80, 0x7, 0x1, 0x1, 0x10000, 0x7, 0x100, 0x8, 0x100, 0x9, 0x2db, 0x9, 0x200, 0xfffffffb, 0x12, 0x0, 0x35c, 0xa, 0xa00000, 0x60, 0x0, 0x1b1, 0x2, 0x9, 0xc, 0x8, 0x800, 0x7f, 0x1, 0x9, 0x100, 0x9, 0xfffffffb, 0x101, 0x8, 0x101, 0x7fffffff, 0x3, 0x1, 0x4, 0x401, 0x101, 0x7f, 0x7, 0x9, 0x3, 0x3, 0xfffffffe, 0x0, 0x0, 0x4, 0x5, 0x55, 0xf, 0x1c000, 0x8, 0x6c, 0x6, 0x80000001, 0x2, 0x4, 0x200, 0x3, 0x7fffffff, 0xe86b, 0x9, 0x6, 0x1ff, 0x2, 0x80000000, 0x4, 0x101, 0x7fffffff, 0xfff, 0x2, 0x9, 0xb, 0xad, 0x3, 0x8001, 0x2, 0x6, 0xce, 0x7f, 0xfff, 0x5, 0x1, 0x2, 0x10, 0x4, 0x7, 0x7, 0x9, 0x2, 0xfff, 0x3, 0x401, 0x7fff, 0xdfd3, 0x10, 0xf71, 0x63, 0x1, 0x3, 0x0, 0x0, 0x7fff, 0x4, 0x62, 0x1, 0x800, 0x6, 0x8, 0xca, 0x10, 0x2, 0x6, 0x6, 0x3, 0x29, 0xd, 0x80, 0x8, 0x7, 0xa, 0x8000, 0xe, 0x7, 0x6, 0x3, 0xfffffffe, 0x5, 0xfffffff7, 0x2, 0x6, 0xfffffffd, 0x3, 0x8, 0x177, 0xd8c9, 0x6, 0x7, 0x4, 0x4, 0x6, 0xfffffff9, 0x3, 0x8, 0x610b7cbe, 0x7, 0x1000, 0x7, 0x7, 0x4, 0x6, 0x1, 0x6, 0xff, 0x81, 0x64b, 0x8, 0x8, 0x50, 0x0, 0xbb2, 0x6, 0x5]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000002180)={0x2710, 0x300, 0x3c0, &(0x7f0000001d80)=[0x4, 0x9, 0x4, 0x7, 0x8, 0x8, 0x8, 0xfffffffffffffffd, 0x6, 0x400000000000, 0x81, 0x1, 0x5, 0x6, 0x7, 0x7, 0x0, 0xffff, 0x0, 0xfffffffffffffff6, 0x4fb, 0x3, 0x81, 0xd8f4, 0x2, 0x3, 0x101, 0x1, 0x8000, 0x3ff, 0x200, 0x8000000000000001, 0x8001, 0xfffffffffffffffa, 0x8, 0x2f0, 0x1, 0xf0c, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xfffffffffffffff7, 0xff, 0x4, 0x80000001, 0x7, 0x21a6, 0x3, 0x8, 0x2, 0x7, 0x7, 0x155c, 0x3ff, 0xc59, 0x101, 0x1c, 0x603981b3, 0x3, 0x503, 0x0, 0x8, 0x8, 0x4, 0x5, 0x4, 0x9, 0x1, 0x9, 0x9, 0x9, 0x6, 0x7, 0xfffffffffffffffa, 0x9, 0x3, 0x7ff, 0x5, 0x9, 0x8, 0x40, 0x98, 0x98, 0x9, 0xff, 0x2, 0x0, 0x3, 0x4, 0xeec, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0x80000001, 0x2, 0x5, 0x2, 0x0, 0x0, 0x5, 0x100, 0x2, 0x5, 0x1ff, 0x6, 0xfffffffffffffffc, 0x7fffffff, 0x400, 0x8001, 0x9, 0xffffffff, 0x4, 0x1, 0x8001, 0x4, 0x3, 0x3, 0x1, 0x61d, 0x7f, 0xb, 0x4f, 0x94, 0x6, 0x9, 0xabe9, 0x2]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r8, 0x330f, 0x5) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f00000021c0)=[@ioring_restriction_register_op={0x0, 0x3}], 0x1) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r8, 0xc0106441, &(0x7f0000002200)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000002240)={0xfff, 0x3, r9}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000002280)={0x0, r4, 0x34, 0x4, 0x0, 0x9}) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000c011}, 0x40000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000023c0)=0x221a, 0x1000, 0x4) 5.799499506s ago: executing program 1 (id=46): io_setup(0x9, &(0x7f00000005c0)) r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4801) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0, 0x4}, 0x94) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) io_setup(0xccee, &(0x7f0000001700)) io_setup(0x9, &(0x7f00000005c0)) (async) fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4801) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0, 0x4}, 0x94) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)}) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) io_setup(0xccee, &(0x7f0000001700)) (async) 5.660080579s ago: executing program 1 (id=47): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/142, 0x8e) 5.599780612s ago: executing program 1 (id=48): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8b, 0x0, 0x9}]}) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/fs/netfs/cookies\x00', 0x0, 0x0) read(r4, &(0x7f0000000400)=""/4096, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r5, 0x1000000, 0x0) landlock_restrict_self(r3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000380)={0x2, 0x1, 0x5, {0x70, 0x80000000, 0x3eb5, 0x3}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpgid(r9) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r10}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r11 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1) sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f0000001b00)={0x8, 0x34325842, 0x1, @discrete={0x40001, 0x100}}) r13 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r14 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r14, r15, r16, r17, &(0x7f0000000200)={0x2e, 0xc, 0x0, r13, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)='cgroup2\x00', 0x701044, 0x0) 5.510141521s ago: executing program 1 (id=51): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x217, 0x7, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000801000010002000000000000000000000a68000000060a010400000000000000000200ffff3c000480380001800e000100696d6d6564696174650000002400028008000140000000001800020714000280080003400000000308000180fffffffd0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r3 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::],:/\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000002380)={&(0x7f0000000480), 0xc, &(0x7f0000002340)={&(0x7f00000023c0)=ANY=[@ANYBLOB="e8100000120000042cbd7000fedbdf251ece09cf00064e2005000000010000000001000007000000720f2b078e82c230b1c9000000070000000700150003000000", @ANYRES32=r6, @ANYBLOB="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"], 0x10e8}}, 0x4085) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$netlink(0x10, 0x3, 0x5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0xfffffffb) socket$alg(0x26, 0x5, 0x0) r7 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 2.329665043s ago: executing program 0 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/mailbox/mailbox_summary\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x805) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) (async, rerun: 32) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000040)={[{@dyn}]}) (rerun: 32) read(r0, &(0x7f0000000500), 0x1000) (async, rerun: 32) r2 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) (rerun: 32) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x0, "952365b76bcc26f3ebf153a526b5001000", 0x0, 0x0, 0x10000, 0x4}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x78, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000500)="11223344", 0x4, 0x0, &(0x7f0000000600)={0x2, 0x4d2, @remote}, 0x10) (async) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010000000000000000000a000000080001000100000a09000200000000000800040000000002080005000000000200000000"], 0x38}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/242, 0xf2}, {&(0x7f0000002840)=""/48, 0x30}, {&(0x7f0000002880)=""/2, 0x2}], 0x5, &(0x7f0000002940)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40000001) (async) sendto$inet6(r8, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) (async) listns(&(0x7f0000000080)={0x20, 0x0, 0x4, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x8, 0xa, '\x00\x00\x00\x00'}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.227577135s ago: executing program 0 (id=85): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000640)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xa, 0x5a13, 0x81, 0x80000001]}, &(0x7f00000006c0)=0x78) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) write$binfmt_script(r2, &(0x7f0000002e00)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6], 0x1c}}, 0x2000040) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0x140, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x12c, 0x1, [@m_vlan={0xe0, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x3, 0xffffffffffffffff, 0x0, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x90, 0x6, "60bb6fe3427d9dc21d82fa26eb3d860c75b4d14665f3a8ce9c8f7e22210ad0de8736ee705f7bef7f9e9280108627ad7b244bab72ea7fc77ace603c40c3ab116659aa2dc37931b20892e7b7424f12d71c035115a08ed0018b2998edb795fd57598fcdb5eb6a44bbdc13f860040421fb4e06ede5152e1da8eb95d6714fb372c8db5c0a7bd8fa608a3283ab6137"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xae69, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000740)={0x0, 0x4, 0x1, [0x0, 0x101, 0xe83, 0xfffffffffffffffd, 0x8], [0x7, 0xffffffffbd74e052, 0x0, 0x18, 0x4, 0x9, 0x9, 0x3, 0x80, 0xffffffffffff03ea, 0x401, 0x1, 0x8, 0x100000000, 0x8000000000000001, 0x2, 0x8001, 0xff5c, 0x797, 0x100000001, 0x80000000, 0x1, 0x10000, 0x1, 0x69c, 0x7, 0x1, 0x6, 0xc, 0xbd1, 0x8000000000000001, 0xfff, 0x5, 0x4, 0x7fff, 0xc, 0x0, 0x3, 0x5, 0x4, 0x400, 0x2, 0x1, 0x2, 0x0, 0x7, 0x4, 0x8, 0x8e, 0x8, 0x1bf, 0xffff, 0x4, 0x1ff, 0x7, 0x3, 0xac4, 0x4, 0x9, 0x5d, 0x9, 0x5, 0x92, 0xfffffffffffffffe, 0xa, 0x9, 0x4, 0x10001, 0x6, 0x10, 0x6, 0x2, 0xc1b4, 0xf, 0x8001, 0x8, 0x9, 0x5, 0x2, 0x10, 0x7, 0xffff, 0x2, 0x5e5d, 0xfff, 0x5, 0xffffffff91de178b, 0x200, 0xf768, 0x9, 0x7f, 0x8, 0x6, 0x80000000, 0x3, 0x1, 0xfffffffffffffffc, 0x8, 0x0, 0x101, 0x5, 0x1, 0x3, 0x5aaa, 0x7, 0x2, 0x0, 0xde, 0xfffffffeffffffff, 0x1000, 0x9, 0xffffffffffffffff, 0x9, 0x111, 0xffffffff, 0xffffffffffff8000, 0x89, 0xffffffffffffffff, 0x5, 0x0, 0x9]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000f80)={0xd, 0x0, {0x2, @usage=0x3, 0x0, 0x5, 0x5, 0x80000000, 0x3, 0x1000, 0x40, @struct={0x5, 0x6}, 0x2, 0x4, [0x7d1c, 0xf, 0x0, 0x6, 0x7, 0x9]}, {0x7fffffffffffffff, @usage=0x401, r10, 0x1ff, 0x3, 0x7, 0x400, 0xb, 0xb, @struct={0x401, 0x6}, 0x18, 0x1, [0x6c96, 0x4, 0x5, 0x420, 0x6c, 0xc]}, {0x5, @usage=0xfb, r11, 0x5, 0x0, 0x2, 0xc, 0xc0, 0x481, @usage=0xc, 0x53, 0x5, [0x9, 0x3, 0x7, 0x7f, 0x1000, 0x3]}, {0x1, 0x1, 0x2}}) r12 = pidfd_getfd(r2, r2, 0x0) bind(r12, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x80) 1.710370939s ago: executing program 3 (id=90): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f8000000100000000000027000a000f000000028025002d1f000036930000000000000000", 0x2e}], 0x1, 0x0, 0x58}, 0x40080) 1.709991586s ago: executing program 4 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2001000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) clock_gettime(0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_setup(0x4175, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1.6302011s ago: executing program 3 (id=92): r0 = socket$inet(0x2, 0x2, 0x7fff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9", 0x2b}], 0x1) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x5000000, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x4, 0x36, 0x0, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) open(&(0x7f0000000200)='./proc\x00', 0x100, 0x22) sendmsg$nl_route(r4, 0x0, 0x20040001) socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000400) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffffc) ptrace$pokeuser(0x6, r3, 0x388, 0xffefffffff7f0504) ioctl(r2, 0x3b94, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x9, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) 1.529807634s ago: executing program 4 (id=93): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x26) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$alg(r3, 0x0, 0x0) (async) read$alg(r3, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x719302, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) mount$9p_virtio(0x0, 0x0, 0x0, 0x2210088, 0x0) (async) mount$9p_virtio(0x0, 0x0, 0x0, 0x2210088, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x1000051, 0x0) (async) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x1000051, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85a1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85a1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.397057289s ago: executing program 4 (id=94): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r0, 0x400, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x34, r3, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) fcntl$setlease(r0, 0x400, 0x0) r5 = geteuid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt/asound/pcm\x00', 0x0, 0x0) read(r6, &(0x7f0000001640)=""/8, 0x8) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000d0}, 0xc, &(0x7f00000015c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x14ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (rerun: 32) 1.330254234s ago: executing program 0 (id=95): r0 = getpid() openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) getpgrp(0x0) r1 = syz_io_uring_setup(0xd34, &(0x7f0000000140)={0x0, 0x541, 0x100, 0x3, 0x59}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) r3 = syz_pidfd_open(r0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/25, 0x19}], &(0x7f0000000480)=[0xe, 0x4, 0x2, 0x81, 0x7, 0x6, 0x392e], 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x44000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 1.259423239s ago: executing program 0 (id=96): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1, 0x107) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1, 0x8, 0x65a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1fd) mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x30a880, 0x108) mkdirat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x302c2c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt/@cell/foo@sys\x00', 0x1, 0x80) r3 = fanotify_init(0x81, 0x40000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000004c0)=""/16, &(0x7f0000000380)=0x10) fanotify_mark(r3, 0x105, 0x800101b, r1, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 1.200053181s ago: executing program 0 (id=97): r0 = creat(0x0, 0x148) close(r0) ioprio_set$pid(0x2, 0x0, 0x4004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x44, 0x18, 0x300, 0x8ba, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x5, 0x1, 0x0, 0x0, "00040100"}, 0x1}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x44}}, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000000)={0x8, 0x0, r0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x60) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.043554168s ago: executing program 3 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000200)="6d0f5833a4a2ab79eb70cc12141414473b9a18e652f38c735719ea8fe1de02150732f09e2a62b10e1b2163c7d452f94baead903aa54e2e6a9f4ce021224c7e0c6e1dc178f1ffec9fa4ee5807202b3a502fcc92be23a70cfee941da758df58e52d3df6adc47216799dc03c192d508f3412239bd19a0f68b0f1a", 0x79) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000002c0)={0xd, 0x36d, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000000)=@arm64) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0xc000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x843}, 0x44c00) 1.03990692s ago: executing program 0 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000040)="46f4b589", 0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x4d, 0xea6, '.\x00'}}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 529.105595ms ago: executing program 4 (id=100): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffffffff, 0x501002) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x101, 0x9}}, './file1\x00'}) write$mtd(r2, &(0x7f0000000100)="c79528ab3885cbd71605afd1d81bc96b05c4b1c05db60a28b8f723147c8d", 0x1e) socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000002c0)=r4, 0x1) r6 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10d40, 0x110) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r3, 0xb262000) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/167, 0xa7) getpeername$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc4) close_range(r1, r2, 0x0) r8 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x100000b, 0x4020010, r4, 0x20000000) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000600)={0x0, 0xe364, 0x40, 0x1, 0x335, 0x0, r6}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x557f, 0x20000, 0x1, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa90, 0x4000, 0x0, 0x215, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b0e, 0x200, 0x0, 0x397}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a2d, 0x0, 0x2, 0x6, 0x0, r1}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001900)={0x2e, 0x3a, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe5}, 0x0, 0x0, '\x00', {0x4, 0x1b9, 0x0, &(0x7f0000000900)=@buf_1k="5ae9074962c95e3b20da616e3c21df344840f96c16854f3b6ef08d38361d4a19664d1e4feb8a236c80ba5fbb561fd56ea763d7e8ce0f849fe5d2520320d72aba96522f9ad004607009d88658bd9d35dc0de6c399b38d34d39a70b78c082e02949079428a0ddaf921f8c65e7b8dbc812d85ba393055b18e362ca0ca6b39048a36d9d297558c139cd8171e708b27cf14f47b3d66fca5395e5071ce28c9d4479a6e335fdb4ceebee720280762962705eadb356a4fc82ddf21449825f26f97e3f565ec9ff47f3f7476aa8ded07d0f2c84a17918ee95fcbf1767837ebbf606d125fc30416220cbaadc42c2a693f1dc6c570aeaf6d28927170d29ef6afe0e157dbd5e1c75bb1bb1185d0137fcf14df334ef294f140e3d31c8877e3668990651fad6ba23d496da5df6a06260284485595b46efc2b1b1f235b05a20553b94f62e89e94a4eb5335d5d7cd3793e12d8c801d4c2bf39d1d6a729e05c38c7285934c1f252f143709d3a35a5c80369e1b2270a1e230df95885e886993e6c89737f87a5dd4013196c897e39311f3fa0727c52d8732f9ef1e998d59a2be4c345e0322f6622e13112b0e38a353e78767a59fb6d7a7d13041603ec86ece81dae9c46e2277705f2a5c9471f3e838e453fbbe272acbb50d5c3c5f233c52ecb974d969c0121d57f492cd58fb2bd29c3b15568666bc0d823db31ffbf598d5ae4d57c58ef1a816b08deddb34afc2c1c8d205b580a740a7c21418adaad7fb34e8ec10c5ba48634c910f373b9f787558be39862e07258dbb24735728bde0f63d41c0d3e16064a1b0c5c327384ce5e1063ccf42e432d1e2b6bb8e64e89fcd91c5b1cc3e29d5635c2a51988f86dda466cd3cfd41e367d3f3d06eff5977553075e929a998ef262b54598debfc962cb4d849138cff6682f6f24e993342a9956eb066f317b1d8cd5a2be605b2ed8f424e345e5d032e550de55bdf94980b20f8efa7ec3088ba22d85d2bbf05a966c1bba3c9d649c7a3d2af23eaaf33f28caf16cda2499ac71b7f9c899364cf3f43360ff779c86688928bf8da4c3aec6ce80e0bbef8d10cfb8c8724af2f91541dabe77ed6428693956d80ccf187d01b9a6823468478f0a1ea169dda7317d88ab87a044c9e563ba95e969db2c2185615dc26c8ca89d8404935b1be19c785facd84365c3fdfedb1eb06ecfd4ba08168763671d7a6747853760f6d389412b33a92916f2b435189a24b81dfbef8ea438f79442c80c7c0788355b3e1a76df739137ed9a197c0c2d6545330cf9a736f81e90dfce827b24cd7334fb5925320d259dbed2ed72efcca4387332aab92065adb483231a58aadadc0d2632190a0daa1327b04c3ac4229cb930149b1be583efbcdcda13688fb4a192c32692f903a09a89d488435232378adb1355b8dc122a761b71a96c92e62d09d501b87b2bdf18f1ad0ae69007e14"}}, &(0x7f0000001980)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000001a00)={0x0, 0xffff, 0x8, &(0x7f00000019c0)}) syz_io_uring_submit$UBLK(r8, r10, 0x0, &(0x7f0000001a80)=@ublk_start_user_recovery_sqe={0x2e, 0x5f, 0x0, r2, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0xe, 0x0, r11, '\x00', {r12}}) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000001b00)) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000001b40)={0xe90, 0x6, 0xc, 0x8}) r13 = socket$netlink(0x10, 0x3, 0x15) sendmmsg$sock(r13, &(0x7f0000001e40)=[{{&(0x7f0000001b80)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="2ce0c2b7822f137afdd0a404f774cd71a07a5e3a01739fb5bcabe1a0e58492545bb99dcdb5b022633fbf69961231fcf7377bc6deb9912813a44d0c668f7dd248bccc845970b104fbae1fb607cad6ebfa644774217604c43092d472b63c8e529a8c80c8461ab0ee1e8ed8aa402e55d99e9ceabbf50dca37830678f074825e57690e0c291e", 0x84}, {&(0x7f0000001cc0)="5157cc87a930daaa00ccdc32b6b43cbcc6687008e6b0e753672a25e3682208935e48316cc4986c77c4d2cc5d87572aff59d72a3c199e60f8ad442dc9af8ab8597a2fd025f8f95c20b24cb1c5794956d17d626b6d9afcb152f580e1be32423e6668ec1e01255ed0807c957c1e0ddba985e7c92370cb2dd7d83e1ba6d97d59c8842fdb7534304d6a39f3fd700d437e42a896cfb0b24c72efade1ef7a1bf6fbc44af3", 0xa1}, {&(0x7f0000001d80)}], 0x3, &(0x7f0000001e00)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xfffffffffffffffb) write$sndseq(r1, &(0x7f0000002000)=[{0xc, 0x6b, 0x6, 0x6, @tick=0x7, {0xf, 0x84}, {0x8, 0x71}, @connect={{0x2, 0x4}, {0x89, 0x5}}}, {0x2, 0x7, 0x81, 0x5, @time={0x5, 0xee}, {0xc, 0xff}, {0x7, 0x2}, @control={0x9, 0x8, 0x8}}, {0x0, 0x2, 0x9, 0x5, @tick=0x7, {0x4, 0x4}, {0x81, 0x1}, @result={0x93d9, 0x6}}, {0x2, 0x7b, 0x3, 0x8, @tick=0x4cc5, {0x0, 0x97}, {0x5, 0xe}, @queue={0x1a, {0x5, 0x5}}}, {0x6c, 0x81, 0x2, 0x2, @time={0xb96200, 0x3}, {0x8, 0x6}, {0x7, 0x5}, @quote={{0x0, 0x29}, 0x1, &(0x7f0000001f40)={0xdc, 0xff, 0x4, 0x9, @time={0x100, 0x1}, {0x9, 0x4a}, {0x70, 0x9b}, @ext={0xb0, &(0x7f0000001e80)="801169a7f817783b34d3f581e98c165a7ecf81e6ef949db7f1495f86bea3b0d57b57746eacda137fc5e32fb52a585beec0572739300e37bd4ac0458e4c6b6223ec26f8bfb8d41bb28009565d7cfba608c947a5688057fb1ebfca10bceebaf989461bb3d5947498ee3f38e970e4cec36bf609802437e6af671f5a5046977991cd24fc535eba75de0140ecd6f9cc5602ee0f7b9f10c0fb0a4a1033ae0c60a11fb290f0de8c4a464715eeb28968b3e909a7"}}}}, {0x1, 0xc, 0xd, 0x0, @time={0xfffffff7, 0x9}, {0x1e, 0x3}, {0xff, 0x5}, @raw32={[0x8, 0xe1, 0x101]}}, {0x4, 0x3, 0x81, 0x19, @tick=0x7f, {0xd, 0x7}, {0x83, 0x5}, @raw32={[0x4, 0x7, 0xa6e5]}}, {0x7, 0x1e, 0xf5, 0xdc, @time={0xbf, 0x4}, {0xe, 0x1}, {0x7, 0x4}, @quote={{0xb0, 0x7}, 0x1, &(0x7f0000001fc0)={0x96, 0x5, 0x6, 0x3, @time={0x0, 0x7e02}, {0xa, 0xf3}, {0x6}, @quote={{0x3, 0x1}, 0x63, &(0x7f0000001f80)={0x6, 0x2, 0x1, 0x1, @tick=0x6, {0x3, 0x5}, {0x1}, @queue={0x3, {0x49ed, 0xfffffffd}}}}}}}, {0x4, 0x2, 0x1, 0x3, @time={0x9, 0x3}, {0x4, 0xf1}, {0x0, 0x3}, @raw8={"c46ec4e759e17bc407098834"}}], 0xfc) syz_clone(0x4480000, &(0x7f0000002100)="8e180f9351e60b56d7eb70f7c55d2ce7833efccd4a170e52c42de65f6f5683dec39abb0e8262303a54b1317974749dad411f13cb174f0fc2574143d4165c70208a602f962d3258f1889c144dc9486c732b05d2c91f34572ea05b394bc057887d9de24f438d4c5084b8810fedfd8d640d658bdcb800c83ecc50b9ca2a326a2766f4f94435020d76bcd354b46330c1edd3db5e33c544b4a9b3b0fbc2aea937a33c10", 0xa1, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="ae2d6896e0ac544c1b9726ec8135f55e029eb40f061bdd0bf1919bfbada172d2c54f3273e42c95bcb299e9dd761e13aabd20e52a7b4de47676bd47fe9fecb28157d01f210d541b45904648838b02f92665d4edf48ab4e45c421efb0b323b6200169a71dd1cec509ce34ca2862a55502f") ioctl$BTRFS_IOC_SCRUB(r13, 0xc400941b, &(0x7f00000022c0)={0x0, 0x77c, 0xff, 0x1}) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f00000029c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002700)={0x26c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000) 528.25152ms ago: executing program 4 (id=101): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r0, 0x8000000000000000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x40010) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r8, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/57) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="210128bd7000ffffffff2b00000008000300", @ANYRES32=r10, @ANYBLOB="82fb27e15760c4040024000a003400020202020202000008"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 410.160394ms ago: executing program 4 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x1, @thr={&(0x7f00000001c0)="9d4591e77474da9c4279bc1d61a11580f36400fc1c23841cd55c3a4c7a10b187798d1e9b2c9ddab27efd9e64158becd23c65a446e587", &(0x7f0000000340)="32b077b3b1c372b37cce7167e4a4541ca25a964d799103837aee448b9a4aedfa09ec78fd47a4af8073da0e84ad4d8e143014d370ef40f7d7173462cca49fc91bcf817ba97608123746dac5b6a17bd7aad715861622"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xfb17d000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000140)="5c00000014006b05c84e21000ab16d6e230675f811000000440002a589d0516368005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011090000000000000093e9bb00"/98, 0x62}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200)={0x23, 0x1, 0x58, 0xfd}, 0xffffffe9) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, &(0x7f0000002180)=""/242, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r4 = open$dir(&(0x7f0000000180)='./dev\x00', 0x0, 0x4) symlinkat(&(0x7f0000000040)='./mnt\x00', r4, &(0x7f00000001c0)='./mnt\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000480)={0x31, 0x6, 0x800000000000, 0xb, 0xd7d, 0x4}) 70.247276ms ago: executing program 3 (id=103): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x5, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) 69.57423ms ago: executing program 3 (id=104): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r1, &(0x7f0000000300)=@generic={0x8, "ffff0000feff00"}, 0xc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r0, r2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 0s ago: executing program 3 (id=105): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='27', 0x2) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r2, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) write(r1, &(0x7f0000000480)='252:0 ', 0x6) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="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", 0xd8}], 0x1, 0x0, 0xffffffffffffffb5}, 0x4000810) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40991' (ED25519) to the list of known hosts. [ 39.967609][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.967628][ T43] audit: type=1400 audit(1791189323.699:138): avc: denied { name_bind } for pid=5715 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.007481][ T43] audit: type=1400 audit(1791189323.739:139): avc: denied { execute } for pid=5716 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.008402][ T43] audit: type=1400 audit(1791189323.739:140): avc: denied { execute_no_trans } for pid=5716 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.458335][ T43] audit: type=1400 audit(1791189326.189:141): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.461637][ T43] audit: type=1400 audit(1791189326.189:142): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.461773][ T5716] cgroup: Unknown subsys name 'net' [ 42.462842][ T43] audit: type=1400 audit(1791189326.189:143): avc: denied { unmount } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.589035][ T5716] cgroup: Unknown subsys name 'cpuset' [ 42.591190][ T5716] cgroup: Unknown subsys name 'rlimit' [ 42.728583][ T43] audit: type=1400 audit(1791189326.459:144): avc: denied { setattr } for pid=5716 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.729020][ T43] audit: type=1400 audit(1791189326.459:145): avc: denied { create } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.729213][ T43] audit: type=1400 audit(1791189326.459:146): avc: denied { write } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.729471][ T43] audit: type=1400 audit(1791189326.459:147): avc: denied { read } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.796604][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.629200][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.967530][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.967548][ T43] audit: type=1400 audit(1791189331.699:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.168759][ T43] audit: type=1400 audit(1791189331.899:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.171004][ T43] audit: type=1400 audit(1791189331.899:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.171048][ T43] audit: type=1400 audit(1791189331.899:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.175346][ T43] audit: type=1400 audit(1791189331.899:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[7388]" dev="sockfs" ino=7388 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.199276][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.201389][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.204359][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.205010][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.205810][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.206006][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.206255][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.207178][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.208547][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.209048][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.209188][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.209418][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.210560][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.210720][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.211464][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.214656][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.215498][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.217824][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.221992][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.224017][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.228081][ T43] audit: type=1400 audit(1791189331.959:163): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.228362][ T43] audit: type=1400 audit(1791189331.959:164): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.229146][ T43] audit: type=1400 audit(1791189331.959:165): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.233302][ T43] audit: type=1400 audit(1791189331.959:166): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.270229][ T43] audit: type=1400 audit(1791189331.999:167): avc: denied { sys_module } for pid=5729 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.903206][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.903616][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.903778][ T5733] bridge_slave_0: entered allmulticast mode [ 48.904592][ T5733] bridge_slave_0: entered promiscuous mode [ 48.906916][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.906955][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.907008][ T5733] bridge_slave_1: entered allmulticast mode [ 48.907724][ T5733] bridge_slave_1: entered promiscuous mode [ 48.917141][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.917182][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.917240][ T5734] bridge_slave_0: entered allmulticast mode [ 48.918007][ T5734] bridge_slave_0: entered promiscuous mode [ 48.936741][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.936798][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.936875][ T5728] bridge_slave_0: entered allmulticast mode [ 48.937606][ T5728] bridge_slave_0: entered promiscuous mode [ 48.945532][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.945612][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.945712][ T5734] bridge_slave_1: entered allmulticast mode [ 48.946538][ T5734] bridge_slave_1: entered promiscuous mode [ 48.969459][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.969557][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.970471][ T5728] bridge_slave_1: entered allmulticast mode [ 48.971888][ T5728] bridge_slave_1: entered promiscuous mode [ 48.985168][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.986490][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.002443][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.011295][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.033135][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.063592][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.065675][ T5733] team0: Port device team_slave_0 added [ 49.081139][ T5734] team0: Port device team_slave_0 added [ 49.095370][ T5733] team0: Port device team_slave_1 added [ 49.102173][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.102249][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.102325][ T5729] bridge_slave_0: entered allmulticast mode [ 49.103099][ T5729] bridge_slave_0: entered promiscuous mode [ 49.105630][ T5734] team0: Port device team_slave_1 added [ 49.112344][ T5728] team0: Port device team_slave_0 added [ 49.113951][ T5728] team0: Port device team_slave_1 added [ 49.114027][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.114065][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.114262][ T5729] bridge_slave_1: entered allmulticast mode [ 49.116143][ T5729] bridge_slave_1: entered promiscuous mode [ 49.182529][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.182541][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.182554][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.183917][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.183930][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.183950][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.184564][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.184572][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.184584][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.187958][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.189396][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.189892][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.189904][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.189924][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.191202][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.191213][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.191234][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.191973][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.191982][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.191995][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.221879][ T5729] team0: Port device team_slave_0 added [ 49.223166][ T5729] team0: Port device team_slave_1 added [ 49.273231][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.273242][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.273255][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.285042][ T5734] hsr_slave_0: entered promiscuous mode [ 49.285660][ T5734] hsr_slave_1: entered promiscuous mode [ 49.291889][ T5728] hsr_slave_0: entered promiscuous mode [ 49.292655][ T5728] hsr_slave_1: entered promiscuous mode [ 49.293220][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.293306][ T5728] Cannot create hsr debugfs directory [ 49.293842][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.293852][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.293865][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.298161][ T5733] hsr_slave_0: entered promiscuous mode [ 49.298584][ T5733] hsr_slave_1: entered promiscuous mode [ 49.298914][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.298926][ T5733] Cannot create hsr debugfs directory [ 49.444381][ T5729] hsr_slave_0: entered promiscuous mode [ 49.444984][ T5729] hsr_slave_1: entered promiscuous mode [ 49.445571][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 49.445588][ T5729] Cannot create hsr debugfs directory [ 49.650783][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.657003][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.657601][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.661813][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.662241][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.667720][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.668366][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.672937][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.719845][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.719938][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.720416][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.720507][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.735650][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.741969][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.742424][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.745160][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.747056][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.751985][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.761770][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.762640][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.778371][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.780803][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.850264][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.853108][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.862203][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.865664][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.866193][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.871017][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.880575][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.882236][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.901537][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.940187][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.942061][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.949094][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.949345][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.954445][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.955219][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.959968][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.960666][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.967251][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.988164][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.988218][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.991953][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.992000][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.998167][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.042999][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.067170][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.067261][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.087297][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.087368][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.089194][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.130676][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.146739][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.146788][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.147712][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.147757][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.164156][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.184170][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.193091][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.193378][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.207766][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.207894][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.297298][ T5742] Bluetooth: hci2: command tx timeout [ 50.297301][ T5743] Bluetooth: hci1: command tx timeout [ 50.305912][ T5743] Bluetooth: hci0: command tx timeout [ 50.306276][ T5743] Bluetooth: hci3: command tx timeout [ 50.351988][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.380288][ T5728] veth0_vlan: entered promiscuous mode [ 50.384805][ T5728] veth1_vlan: entered promiscuous mode [ 50.404409][ T5728] veth0_macvtap: entered promiscuous mode [ 50.408823][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.410108][ T5728] veth1_macvtap: entered promiscuous mode [ 50.419748][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.425694][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.428311][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.486894][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.492295][ T5733] veth0_vlan: entered promiscuous mode [ 50.521381][ T5729] veth0_vlan: entered promiscuous mode [ 50.526542][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.526558][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.537925][ T5733] veth1_vlan: entered promiscuous mode [ 50.540538][ T5729] veth1_vlan: entered promiscuous mode [ 50.563570][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.563590][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.592267][ T5734] veth0_vlan: entered promiscuous mode [ 50.593575][ T5733] veth0_macvtap: entered promiscuous mode [ 50.598167][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598376][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598423][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598458][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598826][ T5729] veth0_macvtap: entered promiscuous mode [ 50.602134][ T5733] veth1_macvtap: entered promiscuous mode [ 50.604610][ T5729] veth1_macvtap: entered promiscuous mode [ 50.607841][ T5734] veth1_vlan: entered promiscuous mode [ 50.621970][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.628413][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.632544][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.637530][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.639926][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.669559][ T5734] veth0_macvtap: entered promiscuous mode [ 50.677167][ T5734] veth1_macvtap: entered promiscuous mode [ 50.732011][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.742753][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.742772][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.744613][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.761771][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.762035][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.772572][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.772591][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.812026][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.812046][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.826076][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.826089][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.846558][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.846571][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.856322][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856479][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856629][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856838][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857058][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857270][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857669][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857833][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.858001][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.858162][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.876894][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.876912][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.979217][ T5885] mmap: syz.1.2 (5885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.036462][ T5889] CIFS: VFS: bad security option: krb5i&א [ 51.042487][ T5889] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.076226][ T5883] nbd0: detected capacity change from 0 to 524288 [ 51.088779][ T5891] block nbd0: Receive control failed (result -104) [ 51.088943][ T68] block nbd0: Receive control failed (result -32) [ 51.165506][ T5894] input: syz0 as /devices/virtual/input/input5 [ 51.185734][ T5903] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 51.209861][ T5903] FAULT_INJECTION: forcing a failure. [ 51.209861][ T5903] name failslab, interval 1, probability 0, space 0, times 1 [ 51.209882][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 51.209895][ T5903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.209901][ T5903] Call Trace: [ 51.209905][ T5903] [ 51.209910][ T5903] dump_stack_lvl+0x100/0x190 [ 51.209930][ T5903] should_fail_ex.cold+0x5/0xa [ 51.209946][ T5903] should_failslab+0xc2/0x120 [ 51.209962][ T5903] __kmalloc_noprof+0xfc/0x840 [ 51.209994][ T5903] ? rcu_is_watching+0x13/0xc0 [ 51.210012][ T5903] ? tomoyo_realpath_from_path+0xb6/0x690 [ 51.210032][ T5903] tomoyo_realpath_from_path+0xb6/0x690 [ 51.210051][ T5903] tomoyo_check_open_permission+0x2af/0x3c0 [ 51.210067][ T5903] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 51.210081][ T5903] ? do_syscall_64+0x123/0x790 [ 51.210097][ T5903] ? hook_file_open+0x248/0x8e0 [ 51.210119][ T5903] ? path_get+0x61/0x80 [ 51.210140][ T5903] tomoyo_file_open+0x6b/0x90 [ 51.210151][ T5903] security_file_open+0xb5/0x1e0 [ 51.210167][ T5903] do_dentry_open+0x588/0x14d0 [ 51.210184][ T5903] vfs_open+0x82/0x3f0 [ 51.210202][ T5903] path_openat+0x19fa/0x2440 [ 51.210219][ T5903] ? __pfx_path_openat+0x10/0x10 [ 51.210239][ T5903] do_file_open+0x20e/0x430 [ 51.210255][ T5903] ? __pfx_do_file_open+0x10/0x10 [ 51.210281][ T5903] ? alloc_fd+0x471/0x7a0 [ 51.210297][ T5903] ? do_getname+0x191/0x390 [ 51.210310][ T5903] do_sys_openat2+0x10f/0x1e0 [ 51.210326][ T5903] ? __pfx_do_sys_openat2+0x10/0x10 [ 51.210348][ T5903] __x64_sys_open+0xfe/0x1d0 [ 51.210364][ T5903] ? __pfx___x64_sys_open+0x10/0x10 [ 51.210386][ T5903] do_syscall_64+0x123/0x790 [ 51.210400][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.210411][ T5903] RIP: 0033:0x7fbf6859e159 [ 51.210421][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.210431][ T5903] RSP: 002b:00007fbf693ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 51.210443][ T5903] RAX: ffffffffffffffda RBX: 00007fbf68825fa0 RCX: 00007fbf6859e159 [ 51.210451][ T5903] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 51.210457][ T5903] RBP: 00007fbf6863506b R08: 0000000000000000 R09: 0000000000000000 [ 51.210464][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.210470][ T5903] R13: 00007fbf68826038 R14: 00007fbf68825fa0 R15: 00007ffd4133f308 [ 51.210485][ T5903] [ 51.210517][ T5903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.225470][ T5906] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 51.425810][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 51.425888][ T5920] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 51.433362][ T5919] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12'. [ 51.509147][ T5927] FAULT_INJECTION: forcing a failure. [ 51.509147][ T5927] name failslab, interval 1, probability 0, space 0, times 0 [ 51.509170][ T5927] CPU: 3 UID: 0 PID: 5927 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT(full) [ 51.509184][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.509192][ T5927] Call Trace: [ 51.509196][ T5927] [ 51.509201][ T5927] dump_stack_lvl+0x100/0x190 [ 51.509224][ T5927] should_fail_ex.cold+0x5/0xa [ 51.509244][ T5927] should_failslab+0xc2/0x120 [ 51.509262][ T5927] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 51.509280][ T5927] ? kstrdup_const+0x63/0x80 [ 51.509296][ T5927] kstrdup+0x51/0xe0 [ 51.509309][ T5927] kstrdup_const+0x63/0x80 [ 51.509321][ T5927] __kernfs_new_node+0x9b/0xa10 [ 51.509338][ T5927] ? __pfx___kernfs_new_node+0x10/0x10 [ 51.509353][ T5927] ? lock_acquire+0x1d1/0x380 [ 51.509367][ T5927] ? kernfs_root+0x23/0x2a0 [ 51.509386][ T5927] ? find_held_lock+0x2b/0x80 [ 51.509404][ T5927] ? kernfs_root+0xee/0x2a0 [ 51.509421][ T5927] ? kernfs_root+0xee/0x2a0 [ 51.509443][ T5927] kernfs_new_node+0x117/0x150 [ 51.509459][ T5927] kernfs_create_link+0xcc/0x240 [ 51.509477][ T5927] sysfs_do_create_link_sd+0x90/0x140 [ 51.509498][ T5927] sysfs_create_link+0x61/0xc0 [ 51.509516][ T5927] device_add+0xb62/0x1970 [ 51.509538][ T5927] ? __pfx_device_add+0x10/0x10 [ 51.509556][ T5927] ? kfree_const+0x5a/0x70 [ 51.509568][ T5927] ? kfree+0x1e5/0x6d0 [ 51.509584][ T5927] device_create_groups_vargs+0x1f8/0x270 [ 51.509606][ T5927] device_create+0xed/0x130 [ 51.509618][ T5927] ? __pfx_device_create+0x10/0x10 [ 51.509637][ T5927] ? do_raw_spin_lock+0x128/0x260 [ 51.509655][ T5927] ? is_console_locked+0x9/0x20 [ 51.509667][ T5927] ? con_is_visible+0x65/0x150 [ 51.509683][ T5927] ? csi_J+0x57e/0xad0 [ 51.509701][ T5927] vcs_make_sysfs+0x32/0x80 [ 51.509715][ T5927] vc_allocate+0x559/0x920 [ 51.509733][ T5927] ? __pfx_vc_allocate+0x10/0x10 [ 51.509753][ T5927] con_install+0xa1/0x620 [ 51.509770][ T5927] ? __pfx_con_install+0x10/0x10 [ 51.509789][ T5927] ? __pfx_con_install+0x10/0x10 [ 51.509806][ T5927] tty_init_dev.part.0+0x9e/0x470 [ 51.509825][ T5927] tty_open+0x953/0xe20 [ 51.509853][ T5927] ? __pfx_tty_open+0x10/0x10 [ 51.509873][ T5927] ? chrdev_open+0x589/0x6a0 [ 51.509891][ T5927] ? chrdev_open+0x589/0x6a0 [ 51.509911][ T5927] ? __pfx_tty_open+0x10/0x10 [ 51.509930][ T5927] chrdev_open+0x234/0x6a0 [ 51.509948][ T5927] ? __pfx_chrdev_open+0x10/0x10 [ 51.509967][ T5927] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 51.509985][ T5927] do_dentry_open+0x6ab/0x14d0 [ 51.510002][ T5927] ? __pfx_chrdev_open+0x10/0x10 [ 51.510023][ T5927] vfs_open+0x82/0x3f0 [ 51.510067][ T5927] path_openat+0x19fa/0x2440 [ 51.510090][ T5927] ? __pfx_path_openat+0x10/0x10 [ 51.510113][ T5927] do_file_open+0x20e/0x430 [ 51.510136][ T5927] ? __pfx_do_file_open+0x10/0x10 [ 51.510178][ T5927] ? _raw_spin_unlock+0x28/0x50 [ 51.510207][ T5927] ? alloc_fd+0x471/0x7a0 [ 51.510242][ T5927] do_sys_openat2+0x10f/0x1e0 [ 51.510272][ T5927] ? __pfx_do_sys_openat2+0x10/0x10 [ 51.510302][ T5927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.510335][ T5927] __x64_sys_openat+0x12d/0x210 [ 51.510366][ T5927] ? __pfx___x64_sys_openat+0x10/0x10 [ 51.510406][ T5927] do_syscall_64+0x123/0x790 [ 51.510431][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.510454][ T5927] RIP: 0033:0x7f33a3d5e98e [ 51.510472][ T5927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.510492][ T5927] RSP: 002b:00007f33a4d48b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.510513][ T5927] RAX: ffffffffffffffda RBX: 00007f33a4d496c0 RCX: 00007f33a3d5e98e [ 51.510528][ T5927] RDX: 0000000000000002 RSI: 00007f33a4d48c00 RDI: ffffffffffffff9c [ 51.510543][ T5927] RBP: 00007f33a3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 51.510555][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.510568][ T5927] R13: 00007f33a4026038 R14: 00007f33a4025fa0 R15: 00007fff614a91b8 [ 51.510594][ T5927] [ 51.542158][ T5927] syz_tun: entered allmulticast mode [ 51.549389][ T5926] syz_tun: left allmulticast mode [ 51.668781][ T5942] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.700884][ T5945] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 51.720948][ T5945] FAULT_INJECTION: forcing a failure. [ 51.720948][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 51.720968][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 51.720981][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.720987][ T5945] Call Trace: [ 51.720991][ T5945] [ 51.720997][ T5945] dump_stack_lvl+0x100/0x190 [ 51.721017][ T5945] should_fail_ex.cold+0x5/0xa [ 51.721033][ T5945] should_failslab+0xc2/0x120 [ 51.721050][ T5945] __kmalloc_noprof+0xfc/0x840 [ 51.721064][ T5945] ? rcu_is_watching+0x13/0xc0 [ 51.721080][ T5945] ? tomoyo_realpath_from_path+0xb6/0x690 [ 51.721099][ T5945] tomoyo_realpath_from_path+0xb6/0x690 [ 51.721118][ T5945] tomoyo_check_open_permission+0x2af/0x3c0 [ 51.721133][ T5945] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 51.721146][ T5945] ? do_syscall_64+0x123/0x790 [ 51.721163][ T5945] ? hook_file_open+0x248/0x8e0 [ 51.721183][ T5945] ? path_get+0x61/0x80 [ 51.721202][ T5945] tomoyo_file_open+0x6b/0x90 [ 51.721213][ T5945] security_file_open+0xb5/0x1e0 [ 51.721229][ T5945] do_dentry_open+0x588/0x14d0 [ 51.721246][ T5945] vfs_open+0x82/0x3f0 [ 51.721264][ T5945] path_openat+0x19fa/0x2440 [ 51.721281][ T5945] ? __pfx_path_openat+0x10/0x10 [ 51.721300][ T5945] do_file_open+0x20e/0x430 [ 51.721316][ T5945] ? __pfx_do_file_open+0x10/0x10 [ 51.721344][ T5945] ? alloc_fd+0x471/0x7a0 [ 51.721361][ T5945] ? do_getname+0x191/0x390 [ 51.721373][ T5945] do_sys_openat2+0x10f/0x1e0 [ 51.721390][ T5945] ? __pfx_do_sys_openat2+0x10/0x10 [ 51.721412][ T5945] __x64_sys_open+0xfe/0x1d0 [ 51.721428][ T5945] ? __pfx___x64_sys_open+0x10/0x10 [ 51.721450][ T5945] do_syscall_64+0x123/0x790 [ 51.721464][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.721475][ T5945] RIP: 0033:0x7f09b859e159 [ 51.721485][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.721496][ T5945] RSP: 002b:00007f09b9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 51.721507][ T5945] RAX: ffffffffffffffda RBX: 00007f09b8825fa0 RCX: 00007f09b859e159 [ 51.721515][ T5945] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 51.721521][ T5945] RBP: 00007f09b863506b R08: 0000000000000000 R09: 0000000000000000 [ 51.721528][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.721534][ T5945] R13: 00007f09b8826038 R14: 00007f09b8825fa0 R15: 00007ffd590a29e8 [ 51.721549][ T5945] [ 51.721554][ T5945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.757243][ T5953] overlayfs: failed to resolve './file1': -2 [ 51.774579][ T5953] overlay: Unknown parameter 'upperd ' [ 51.778577][ T5953] overlay: Unknown parameter 'upperd ' [ 51.783717][ T5953] overlay: Unknown parameter 'upperd ' [ 51.789403][ T5953] overlay: Unknown parameter 'upperd ' [ 51.791009][ T5953] overlay: Unknown parameter 'upperd ' [ 51.796585][ T5953] overlay: Unknown parameter 'upperd ' [ 51.797238][ T5953] overlay: Unknown parameter 'upperd ' [ 51.801848][ T5953] overlay: Unknown parameter 'upperd ' [ 51.804041][ T5953] overlay: Unknown parameter 'upperd ' [ 51.807054][ T5953] overlay: Unknown parameter 'upperd ' [ 51.823668][ T5950] MTD: Couldn't look up './file2': -2 [ 51.938988][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 51.939218][ T5971] Zero length message leads to an empty skb [ 51.961601][ T5969] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 51.961601][ T5969] The task syz.3.24 (5969) triggered the difference, watch for misbehavior. [ 51.973803][ T5946] ======================================================= [ 51.973803][ T5946] WARNING: The mand mount option has been deprecated and [ 51.973803][ T5946] and is ignored by this kernel. Remove the mand [ 51.973803][ T5946] option from the mount to silence this warning. [ 51.973803][ T5946] ======================================================= [ 51.988897][ T5976] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 51.988923][ T5976] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 52.108548][ T5981] FAULT_INJECTION: forcing a failure. [ 52.108548][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 52.108571][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.1.28 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.108588][ T5981] Tainted: [L]=SOFTLOCKUP [ 52.108593][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.108600][ T5981] Call Trace: [ 52.108605][ T5981] [ 52.108610][ T5981] dump_stack_lvl+0x100/0x190 [ 52.108631][ T5981] should_fail_ex.cold+0x5/0xa [ 52.108648][ T5981] should_failslab+0xc2/0x120 [ 52.108665][ T5981] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.108680][ T5981] ? __proc_create+0xc1/0x8f0 [ 52.108692][ T5981] ? __proc_create+0x247/0x8f0 [ 52.108705][ T5981] __proc_create+0x247/0x8f0 [ 52.108718][ T5981] ? __pfx___proc_create+0x10/0x10 [ 52.108732][ T5981] ? _raw_write_unlock+0x28/0x50 [ 52.108746][ T5981] proc_create_reg+0x75/0x170 [ 52.108760][ T5981] proc_create_data+0x86/0x110 [ 52.108772][ T5981] ? __pfx_proc_create_data+0x10/0x10 [ 52.108785][ T5981] ? cache_register_net+0x137/0x5e0 [ 52.108800][ T5981] ? cache_register_net+0x137/0x5e0 [ 52.108817][ T5981] cache_register_net+0x1e0/0x5e0 [ 52.108833][ T5981] nfsd_idmap_init+0x16e/0x250 [ 52.108849][ T5981] ? __pfx_nfsd_net_init+0x10/0x10 [ 52.108866][ T5981] nfsd_net_init+0x85/0x480 [ 52.108882][ T5981] ? __pfx_nfsd_net_init+0x10/0x10 [ 52.108897][ T5981] ops_init+0x1e2/0x5f0 [ 52.108916][ T5981] setup_net+0x118/0x3a0 [ 52.108933][ T5981] ? __pfx_setup_net+0x10/0x10 [ 52.108953][ T5981] copy_net_ns+0x345/0x7a0 [ 52.108965][ T5981] create_new_namespaces+0x3ea/0xac0 [ 52.108981][ T5981] unshare_nsproxy_namespaces+0xf2/0x220 [ 52.108996][ T5981] ksys_unshare+0x4a2/0xa70 [ 52.109010][ T5981] ? __pfx_ksys_unshare+0x10/0x10 [ 52.109029][ T5981] __x64_sys_unshare+0x31/0x40 [ 52.109043][ T5981] do_syscall_64+0x123/0x790 [ 52.109057][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.109069][ T5981] RIP: 0033:0x7f33a3d9e159 [ 52.109079][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.109090][ T5981] RSP: 002b:00007f33a4d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 52.109120][ T5981] RAX: ffffffffffffffda RBX: 00007f33a4025fa0 RCX: 00007f33a3d9e159 [ 52.109128][ T5981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 52.109135][ T5981] RBP: 00007f33a3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 52.109143][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.109150][ T5981] R13: 00007f33a4026038 R14: 00007f33a4025fa0 R15: 00007fff614a91b8 [ 52.109165][ T5981] [ 52.161327][ T5985] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 52.161347][ T5985] netlink: 212 bytes leftover after parsing attributes in process `syz.0.27'. [ 52.161366][ T5985] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 52.375627][ T5742] Bluetooth: hci2: command tx timeout [ 52.376528][ T5742] Bluetooth: hci3: command tx timeout [ 52.376543][ T5742] Bluetooth: hci0: command tx timeout [ 52.376555][ T5742] Bluetooth: hci1: command tx timeout [ 52.485570][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.665754][ T30] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 52.668072][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.668090][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.668107][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.048370][ T6013] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 53.067956][ T6013] FAULT_INJECTION: forcing a failure. [ 53.067956][ T6013] name failslab, interval 1, probability 0, space 0, times 0 [ 53.067979][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.0.33 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.067994][ T6013] Tainted: [L]=SOFTLOCKUP [ 53.067998][ T6013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.068019][ T6013] Call Trace: [ 53.068023][ T6013] [ 53.068028][ T6013] dump_stack_lvl+0x100/0x190 [ 53.068049][ T6013] should_fail_ex.cold+0x5/0xa [ 53.068065][ T6013] should_failslab+0xc2/0x120 [ 53.068082][ T6013] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.068096][ T6013] ? security_file_alloc+0x34/0x2c0 [ 53.068114][ T6013] security_file_alloc+0x34/0x2c0 [ 53.068130][ T6013] init_file+0x95/0x480 [ 53.068147][ T6013] alloc_empty_file+0x79/0x1c0 [ 53.068164][ T6013] path_openat+0xdb/0x2440 [ 53.068186][ T6013] ? __pfx_path_openat+0x10/0x10 [ 53.068205][ T6013] do_file_open+0x20e/0x430 [ 53.068221][ T6013] ? __pfx_do_file_open+0x10/0x10 [ 53.068247][ T6013] ? alloc_fd+0x471/0x7a0 [ 53.068265][ T6013] ? do_getname+0x191/0x390 [ 53.068278][ T6013] do_sys_openat2+0x10f/0x1e0 [ 53.068296][ T6013] ? __pfx_do_sys_openat2+0x10/0x10 [ 53.068319][ T6013] __x64_sys_open+0xfe/0x1d0 [ 53.068336][ T6013] ? __pfx___x64_sys_open+0x10/0x10 [ 53.068359][ T6013] do_syscall_64+0x123/0x790 [ 53.068373][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.068385][ T6013] RIP: 0033:0x7f09b859e159 [ 53.068394][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.068405][ T6013] RSP: 002b:00007f09b9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 53.068417][ T6013] RAX: ffffffffffffffda RBX: 00007f09b8825fa0 RCX: 00007f09b859e159 [ 53.068424][ T6013] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 53.068430][ T6013] RBP: 00007f09b863506b R08: 0000000000000000 R09: 0000000000000000 [ 53.068438][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.068445][ T6013] R13: 00007f09b8826038 R14: 00007f09b8825fa0 R15: 00007ffd590a29e8 [ 53.068460][ T6013] [ 53.092835][ T30] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 53.110786][ T30] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 53.121215][ T30] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/0003:056A:033B.0002/input/input6 [ 53.334892][ T43] kauditd_printk_skb: 115 callbacks suppressed [ 53.334911][ T43] audit: type=1400 audit(1791189337.059:281): avc: denied { ioctl } for pid=6020 comm="syz.0.34" path="socket:[10579]" dev="sockfs" ino=10579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.411414][ T30] usb 6-1: USB disconnect, device number 2 [ 53.463846][ T43] audit: type=1400 audit(1791189337.189:282): avc: denied { search } for pid=6025 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.463878][ T43] audit: type=1400 audit(1791189337.189:283): avc: denied { search } for pid=6025 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.463898][ T43] audit: type=1400 audit(1791189337.189:284): avc: denied { search } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.463918][ T43] audit: type=1400 audit(1791189337.189:285): avc: denied { search } for pid=6025 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.474954][ T43] audit: type=1400 audit(1791189337.199:286): avc: denied { read } for pid=6026 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.483705][ T43] audit: type=1400 audit(1791189337.209:287): avc: denied { read open } for pid=6026 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.483736][ T43] audit: type=1400 audit(1791189337.209:288): avc: denied { getattr } for pid=6026 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.497754][ T43] audit: type=1400 audit(1791189337.229:289): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.497785][ T43] audit: type=1400 audit(1791189337.229:290): avc: denied { add_name } for pid=6025 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.646706][ T6033] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 53.716981][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.722341][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.723018][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.735907][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.736250][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.339134][ T6046] bridge0: port 3(vlan2) entered blocking state [ 54.339228][ T6046] bridge0: port 3(vlan2) entered disabled state [ 54.339326][ T6046] vlan2: entered allmulticast mode [ 54.339340][ T6046] geneve0: entered allmulticast mode [ 54.340673][ T6046] vlan2: entered promiscuous mode [ 54.340684][ T6046] geneve0: entered promiscuous mode [ 54.388531][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.418195][ T6057] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.456532][ T5743] Bluetooth: hci1: command tx timeout [ 54.456553][ T5743] Bluetooth: hci3: command tx timeout [ 54.456565][ T5743] Bluetooth: hci2: command tx timeout [ 54.471396][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.493115][ T6063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.493195][ T6063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.507178][ T6063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.512232][ T6063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.512266][ T6063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.519603][ T6063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.525871][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.526635][ T6063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.526820][ T6063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.530191][ T6063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.533921][ T6063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.533973][ T6063] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.550514][ T6063] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.606777][ T6077] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 54.619349][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.656462][ T6077] FAULT_INJECTION: forcing a failure. [ 54.656462][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 54.656485][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.3.42 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.656502][ T6077] Tainted: [L]=SOFTLOCKUP [ 54.656509][ T6077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.656516][ T6077] Call Trace: [ 54.656520][ T6077] [ 54.656525][ T6077] dump_stack_lvl+0x100/0x190 [ 54.656546][ T6077] should_fail_ex.cold+0x5/0xa [ 54.656562][ T6077] should_failslab+0xc2/0x120 [ 54.656579][ T6077] __kmalloc_noprof+0xfc/0x840 [ 54.656594][ T6077] ? rcu_is_watching+0x13/0xc0 [ 54.656610][ T6077] ? tomoyo_realpath_from_path+0xb6/0x690 [ 54.656630][ T6077] tomoyo_realpath_from_path+0xb6/0x690 [ 54.656649][ T6077] tomoyo_check_open_permission+0x2af/0x3c0 [ 54.656663][ T6077] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 54.656676][ T6077] ? do_syscall_64+0x123/0x790 [ 54.656693][ T6077] ? hook_file_open+0x248/0x8e0 [ 54.656714][ T6077] ? path_get+0x61/0x80 [ 54.656732][ T6077] tomoyo_file_open+0x6b/0x90 [ 54.656743][ T6077] security_file_open+0xb5/0x1e0 [ 54.656759][ T6077] do_dentry_open+0x588/0x14d0 [ 54.656776][ T6077] vfs_open+0x82/0x3f0 [ 54.656794][ T6077] path_openat+0x19fa/0x2440 [ 54.656813][ T6077] ? __pfx_path_openat+0x10/0x10 [ 54.656832][ T6077] do_file_open+0x20e/0x430 [ 54.656849][ T6077] ? __pfx_do_file_open+0x10/0x10 [ 54.656874][ T6077] ? alloc_fd+0x471/0x7a0 [ 54.656890][ T6077] ? do_getname+0x191/0x390 [ 54.656902][ T6077] do_sys_openat2+0x10f/0x1e0 [ 54.656919][ T6077] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.656940][ T6077] __x64_sys_open+0xfe/0x1d0 [ 54.656957][ T6077] ? __pfx___x64_sys_open+0x10/0x10 [ 54.656979][ T6077] do_syscall_64+0x123/0x790 [ 54.656992][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.657004][ T6077] RIP: 0033:0x7fc1ed39e159 [ 54.657014][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.657024][ T6077] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 54.657035][ T6077] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 54.657043][ T6077] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 54.657050][ T6077] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 54.657056][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.657063][ T6077] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 54.657077][ T6077] [ 54.657082][ T6077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.725650][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.725695][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.725758][ T6038] bridge_slave_0: entered allmulticast mode [ 54.727186][ T6038] bridge_slave_0: entered promiscuous mode [ 54.735076][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.735118][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.735351][ T6038] bridge_slave_1: entered allmulticast mode [ 54.739152][ T6038] bridge_slave_1: entered promiscuous mode [ 54.774571][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.784148][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.802644][ T13] bridge_slave_1: left allmulticast mode [ 54.802665][ T13] bridge_slave_1: left promiscuous mode [ 54.803682][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.813004][ T13] bridge_slave_0: left allmulticast mode [ 54.813019][ T13] bridge_slave_0: left promiscuous mode [ 54.813142][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.928869][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.932156][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.932993][ T13] bond0 (unregistering): Released all slaves [ 54.942794][ T6038] team0: Port device team_slave_0 added [ 54.954100][ T6038] team0: Port device team_slave_1 added [ 54.969710][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.969720][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.969733][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.972397][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.972406][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.972455][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.007176][ T6038] hsr_slave_0: entered promiscuous mode [ 55.007645][ T6038] hsr_slave_1: entered promiscuous mode [ 55.007939][ T6038] debugfs: 'hsr0' already exists in 'hsr' [ 55.007950][ T6038] Cannot create hsr debugfs directory [ 55.009127][ T6097] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 55.040646][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 55.047177][ T6104] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 55.141104][ T6038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.151837][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.152252][ T6038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.158246][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.176157][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.203735][ T6038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.206932][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.207452][ T6038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.213359][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.233616][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.233669][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.233770][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.233818][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.290030][ T13] hsr_slave_0: left promiscuous mode [ 55.290510][ T13] hsr_slave_1: left promiscuous mode [ 55.290944][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.290961][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.291749][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.291764][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.298169][ T13] veth1_macvtap: left promiscuous mode [ 55.298196][ T13] veth0_macvtap: left promiscuous mode [ 55.298259][ T13] veth1_vlan: left promiscuous mode [ 55.298297][ T13] veth0_vlan: left promiscuous mode [ 55.487584][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.493635][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.594269][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.600693][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.601159][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.603199][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.605489][ T6139] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 55.633212][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.643043][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.643132][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.645773][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.647687][ T6127] capability: warning: `syz.3.50' uses 32-bit capabilities (legacy support in use) [ 55.647819][ T6127] program syz.3.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.709182][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.709272][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.861243][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.985393][ T6184] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 56.002298][ T6184] FAULT_INJECTION: forcing a failure. [ 56.002298][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 56.002321][ T6184] CPU: 2 UID: 0 PID: 6184 Comm: syz.3.58 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.002336][ T6184] Tainted: [L]=SOFTLOCKUP [ 56.002340][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.002346][ T6184] Call Trace: [ 56.002350][ T6184] [ 56.002355][ T6184] dump_stack_lvl+0x100/0x190 [ 56.002382][ T6184] should_fail_ex.cold+0x5/0xa [ 56.002400][ T6184] should_failslab+0xc2/0x120 [ 56.002416][ T6184] __kmalloc_noprof+0xfc/0x840 [ 56.002430][ T6184] ? rcu_is_watching+0x13/0xc0 [ 56.002446][ T6184] ? tomoyo_realpath_from_path+0xb6/0x690 [ 56.002466][ T6184] tomoyo_realpath_from_path+0xb6/0x690 [ 56.002486][ T6184] tomoyo_check_open_permission+0x2af/0x3c0 [ 56.002500][ T6184] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 56.002513][ T6184] ? do_syscall_64+0x123/0x790 [ 56.002531][ T6184] ? hook_file_open+0x248/0x8e0 [ 56.002550][ T6184] ? path_get+0x61/0x80 [ 56.002568][ T6184] tomoyo_file_open+0x6b/0x90 [ 56.002580][ T6184] security_file_open+0xb5/0x1e0 [ 56.002624][ T6184] do_dentry_open+0x588/0x14d0 [ 56.002642][ T6184] vfs_open+0x82/0x3f0 [ 56.002661][ T6184] path_openat+0x19fa/0x2440 [ 56.002680][ T6184] ? __pfx_path_openat+0x10/0x10 [ 56.002701][ T6184] do_file_open+0x20e/0x430 [ 56.002718][ T6184] ? __pfx_do_file_open+0x10/0x10 [ 56.002743][ T6184] ? alloc_fd+0x471/0x7a0 [ 56.002760][ T6184] ? do_getname+0x191/0x390 [ 56.002772][ T6184] do_sys_openat2+0x10f/0x1e0 [ 56.002788][ T6184] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.002810][ T6184] __x64_sys_open+0xfe/0x1d0 [ 56.002826][ T6184] ? __pfx___x64_sys_open+0x10/0x10 [ 56.002847][ T6184] do_syscall_64+0x123/0x790 [ 56.002861][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.002873][ T6184] RIP: 0033:0x7fc1ed39e159 [ 56.002882][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.002893][ T6184] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 56.002905][ T6184] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 56.002912][ T6184] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 56.002919][ T6184] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 56.002925][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.002932][ T6184] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 56.002945][ T6184] [ 56.002951][ T6184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.030708][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.051442][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.212336][ T6038] veth0_vlan: entered promiscuous mode [ 56.219384][ T6038] veth1_vlan: entered promiscuous mode [ 56.235068][ T6038] veth0_macvtap: entered promiscuous mode [ 56.239163][ T6038] veth1_macvtap: entered promiscuous mode [ 56.253274][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.259764][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.289869][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.307227][ T6111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307253][ T6111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307305][ T6111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307324][ T6111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.316957][ T327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.316970][ T327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.337360][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.337373][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.432260][ T6204] IPVS: Error connecting to the multicast addr [ 56.435716][ T6204] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.447255][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 56.447728][ T5719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.450254][ T5719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 56.450272][ T5719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 56.450286][ T5719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.450299][ T5719] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.450320][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.535675][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 56.535709][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.535748][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.535765][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.595697][ T6214] ip_tables: iptables: counters copy to user failed while replacing table [ 56.658110][ T5719] usb 5-1: GET_CAPABILITIES returned 0 [ 56.658134][ T5719] usbtmc 5-1:16.0: can't read capabilities [ 56.682536][ T6219] MTD: Couldn't look up './dev/mtdblock0': -2 [ 56.867048][ T6088] usb 5-1: USB disconnect, device number 2 [ 56.902663][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 56.904622][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 56.978982][ T6237] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 57.005070][ T6237] FAULT_INJECTION: forcing a failure. [ 57.005070][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 57.005105][ T6237] CPU: 2 UID: 0 PID: 6237 Comm: syz.3.69 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.005131][ T6237] Tainted: [L]=SOFTLOCKUP [ 57.005138][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.005149][ T6237] Call Trace: [ 57.005156][ T6237] [ 57.005163][ T6237] dump_stack_lvl+0x100/0x190 [ 57.005196][ T6237] should_fail_ex.cold+0x5/0xa [ 57.005240][ T6237] should_failslab+0xc2/0x120 [ 57.005270][ T6237] __kmalloc_noprof+0xfc/0x840 [ 57.005295][ T6237] ? rcu_is_watching+0x13/0xc0 [ 57.005324][ T6237] ? tomoyo_realpath_from_path+0xb6/0x690 [ 57.005356][ T6237] tomoyo_realpath_from_path+0xb6/0x690 [ 57.005390][ T6237] tomoyo_check_open_permission+0x2af/0x3c0 [ 57.005416][ T6237] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 57.005440][ T6237] ? do_syscall_64+0x123/0x790 [ 57.005470][ T6237] ? hook_file_open+0x248/0x8e0 [ 57.005509][ T6237] ? path_get+0x61/0x80 [ 57.005541][ T6237] tomoyo_file_open+0x6b/0x90 [ 57.005561][ T6237] security_file_open+0xb5/0x1e0 [ 57.005589][ T6237] do_dentry_open+0x588/0x14d0 [ 57.005620][ T6237] vfs_open+0x82/0x3f0 [ 57.005652][ T6237] path_openat+0x19fa/0x2440 [ 57.005684][ T6237] ? __pfx_path_openat+0x10/0x10 [ 57.005719][ T6237] do_file_open+0x20e/0x430 [ 57.005749][ T6237] ? __pfx_do_file_open+0x10/0x10 [ 57.005796][ T6237] ? alloc_fd+0x471/0x7a0 [ 57.005832][ T6237] ? do_getname+0x191/0x390 [ 57.005854][ T6237] do_sys_openat2+0x10f/0x1e0 [ 57.005884][ T6237] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.005924][ T6237] __x64_sys_open+0xfe/0x1d0 [ 57.005953][ T6237] ? __pfx___x64_sys_open+0x10/0x10 [ 57.005985][ T6237] ? ksys_write+0x1ac/0x250 [ 57.006018][ T6237] do_syscall_64+0x123/0x790 [ 57.006042][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.006062][ T6237] RIP: 0033:0x7fc1ed39e159 [ 57.006078][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.006096][ T6237] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 57.006124][ T6237] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 57.006137][ T6237] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 57.006148][ T6237] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 57.006159][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.006171][ T6237] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 57.006198][ T6237] [ 57.006394][ T6237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.557572][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 57.557611][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 58.021782][ T6273] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 58.035746][ T6273] FAULT_INJECTION: forcing a failure. [ 58.035746][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 58.035769][ T6273] CPU: 3 UID: 0 PID: 6273 Comm: syz.3.80 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.035785][ T6273] Tainted: [L]=SOFTLOCKUP [ 58.035789][ T6273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.035795][ T6273] Call Trace: [ 58.035799][ T6273] [ 58.035805][ T6273] dump_stack_lvl+0x100/0x190 [ 58.035826][ T6273] should_fail_ex.cold+0x5/0xa [ 58.035842][ T6273] should_failslab+0xc2/0x120 [ 58.035860][ T6273] __kmalloc_noprof+0xfc/0x840 [ 58.035873][ T6273] ? rcu_is_watching+0x13/0xc0 [ 58.035889][ T6273] ? tomoyo_realpath_from_path+0xb6/0x690 [ 58.035909][ T6273] tomoyo_realpath_from_path+0xb6/0x690 [ 58.035928][ T6273] tomoyo_check_open_permission+0x2af/0x3c0 [ 58.035942][ T6273] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 58.035956][ T6273] ? do_syscall_64+0x123/0x790 [ 58.035972][ T6273] ? hook_file_open+0x248/0x8e0 [ 58.035998][ T6273] ? path_get+0x61/0x80 [ 58.036019][ T6273] tomoyo_file_open+0x6b/0x90 [ 58.036031][ T6273] security_file_open+0xb5/0x1e0 [ 58.036048][ T6273] do_dentry_open+0x588/0x14d0 [ 58.036067][ T6273] vfs_open+0x82/0x3f0 [ 58.036085][ T6273] path_openat+0x19fa/0x2440 [ 58.036105][ T6273] ? __pfx_path_openat+0x10/0x10 [ 58.036125][ T6273] do_file_open+0x20e/0x430 [ 58.036141][ T6273] ? __pfx_do_file_open+0x10/0x10 [ 58.036167][ T6273] ? alloc_fd+0x471/0x7a0 [ 58.036184][ T6273] ? do_getname+0x191/0x390 [ 58.036196][ T6273] do_sys_openat2+0x10f/0x1e0 [ 58.036212][ T6273] ? __pfx_do_sys_openat2+0x10/0x10 [ 58.036234][ T6273] __x64_sys_open+0xfe/0x1d0 [ 58.036251][ T6273] ? __pfx___x64_sys_open+0x10/0x10 [ 58.036276][ T6273] do_syscall_64+0x123/0x790 [ 58.036289][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.036301][ T6273] RIP: 0033:0x7fc1ed39e159 [ 58.036318][ T6273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.036330][ T6273] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 58.036343][ T6273] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 58.036350][ T6273] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 58.036357][ T6273] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 58.036365][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.036371][ T6273] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 58.036386][ T6273] [ 58.036392][ T6273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.351923][ T43] kauditd_printk_skb: 95 callbacks suppressed [ 58.351940][ T43] audit: type=1400 audit(1791189342.079:386): avc: denied { block_suspend } for pid=6279 comm="syz.0.82" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.374416][ T6280] kvm: pic: non byte read [ 58.375425][ T6280] kvm: pic: level sensitive irq not supported [ 58.376743][ T6280] kvm: pic: non byte read [ 58.377703][ T6280] kvm: pic: non byte read [ 58.378335][ T6280] kvm: pic: non byte read [ 58.379377][ T6280] kvm: pic: non byte read [ 58.379996][ T6280] kvm: pic: non byte read [ 58.381443][ T6280] kvm: pic: non byte read [ 58.382061][ T6280] kvm: pic: non byte read [ 58.382697][ T6280] kvm: pic: non byte read [ 58.484258][ T43] audit: type=1400 audit(1791189342.209:387): avc: denied { mount } for pid=6282 comm="syz.0.83" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.550262][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 58.568167][ T43] audit: type=1400 audit(1791189342.299:388): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.575991][ T43] audit: type=1400 audit(1791189342.309:389): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.606816][ T43] audit: type=1400 audit(1791189342.339:390): avc: denied { create } for pid=6289 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.608546][ T43] audit: type=1400 audit(1791189342.339:391): avc: denied { bind } for pid=6289 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.608572][ T43] audit: type=1400 audit(1791189342.339:392): avc: denied { listen } for pid=6289 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.608591][ T43] audit: type=1400 audit(1791189342.339:393): avc: denied { connect } for pid=6289 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.610941][ T43] audit: type=1400 audit(1791189342.339:394): avc: denied { write } for pid=6289 comm="syz.0.85" path="socket:[10850]" dev="sockfs" ino=10850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.617938][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.617960][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.617974][ T67] Bluetooth: hci0: command 0x041b tx timeout [ 58.618046][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.620085][ T43] audit: type=1400 audit(1791189342.349:395): avc: denied { create } for pid=6291 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.823387][ T6297] nbd: must specify at least one socket [ 58.835562][ T6301] loop4: detected capacity change from 0 to 7 [ 58.846993][ T6305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=6305 comm=syz.3.88 [ 58.893246][ T6301] Dev loop4: unable to read RDB block 7 [ 58.893279][ T6301] loop4: unable to read partition table [ 58.893433][ T6301] loop4: partition table beyond EOD, truncated [ 58.893447][ T6301] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 58.917856][ T6307] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.184993][ T6317] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 59.225590][ T6317] FAULT_INJECTION: forcing a failure. [ 59.225590][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 59.225619][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.3.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.225635][ T6317] Tainted: [L]=SOFTLOCKUP [ 59.225640][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.225647][ T6317] Call Trace: [ 59.225651][ T6317] [ 59.225656][ T6317] dump_stack_lvl+0x100/0x190 [ 59.225677][ T6317] should_fail_ex.cold+0x5/0xa [ 59.225694][ T6317] should_failslab+0xc2/0x120 [ 59.225711][ T6317] __kmalloc_noprof+0xfc/0x840 [ 59.225726][ T6317] ? rcu_is_watching+0x13/0xc0 [ 59.225742][ T6317] ? tomoyo_encode2+0xfb/0x3c0 [ 59.225761][ T6317] tomoyo_encode2+0xfb/0x3c0 [ 59.225778][ T6317] tomoyo_encode+0x29/0x50 [ 59.225793][ T6317] tomoyo_realpath_from_path+0x18c/0x690 [ 59.225812][ T6317] tomoyo_check_open_permission+0x2af/0x3c0 [ 59.225827][ T6317] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 59.225840][ T6317] ? do_syscall_64+0x123/0x790 [ 59.225857][ T6317] ? hook_file_open+0x248/0x8e0 [ 59.225879][ T6317] ? path_get+0x61/0x80 [ 59.225897][ T6317] tomoyo_file_open+0x6b/0x90 [ 59.225909][ T6317] security_file_open+0xb5/0x1e0 [ 59.225925][ T6317] do_dentry_open+0x588/0x14d0 [ 59.225942][ T6317] vfs_open+0x82/0x3f0 [ 59.225960][ T6317] path_openat+0x19fa/0x2440 [ 59.225977][ T6317] ? __pfx_path_openat+0x10/0x10 [ 59.225997][ T6317] do_file_open+0x20e/0x430 [ 59.226013][ T6317] ? __pfx_do_file_open+0x10/0x10 [ 59.226039][ T6317] ? alloc_fd+0x471/0x7a0 [ 59.226056][ T6317] ? do_getname+0x191/0x390 [ 59.226068][ T6317] do_sys_openat2+0x10f/0x1e0 [ 59.226084][ T6317] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.226129][ T6317] __x64_sys_open+0xfe/0x1d0 [ 59.226148][ T6317] ? __pfx___x64_sys_open+0x10/0x10 [ 59.226173][ T6317] do_syscall_64+0x123/0x790 [ 59.226188][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.226201][ T6317] RIP: 0033:0x7fc1ed39e159 [ 59.226212][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.226223][ T6317] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 59.226235][ T6317] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 59.226242][ T6317] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 59.226249][ T6317] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 59.226255][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.226262][ T6317] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 59.226276][ T6317] [ 59.226288][ T6317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.282924][ T6322] lo: entered promiscuous mode [ 59.283748][ T6322] tunl0: entered promiscuous mode [ 59.284000][ T6322] gre0: entered promiscuous mode [ 59.284254][ T6322] gretap0: entered promiscuous mode [ 59.284641][ T6322] erspan0: entered promiscuous mode [ 59.285166][ T6322] ip_vti0: entered promiscuous mode [ 59.285559][ T6322] ip6_vti0: entered promiscuous mode [ 59.285804][ T6322] sit0: entered promiscuous mode [ 59.286024][ T6322] ip6tnl0: entered promiscuous mode [ 59.286275][ T6322] ip6gre0: entered promiscuous mode [ 59.286493][ T6322] syz_tun: entered promiscuous mode [ 59.286837][ T6322] ip6gretap0: entered promiscuous mode [ 59.287684][ T6322] bridge0: entered promiscuous mode [ 59.288206][ T6322] vcan0: entered promiscuous mode [ 59.288458][ T6322] bond0: entered promiscuous mode [ 59.288467][ T6322] bond_slave_0: entered promiscuous mode [ 59.288548][ T6322] bond_slave_1: entered promiscuous mode [ 59.289640][ T6322] team0: entered promiscuous mode [ 59.289649][ T6322] team_slave_0: entered promiscuous mode [ 59.289725][ T6322] team_slave_1: entered promiscuous mode [ 59.290368][ T6322] dummy0: entered promiscuous mode [ 59.290664][ T6322] nlmon0: entered promiscuous mode [ 59.290908][ T6322] batadv0: entered promiscuous mode [ 59.291435][ T6322] vxcan0: entered promiscuous mode [ 59.291715][ T6322] vxcan1: entered promiscuous mode [ 59.291967][ T6322] veth0: entered promiscuous mode [ 59.292391][ T6322] veth1: entered promiscuous mode [ 59.292806][ T6322] wg0: entered promiscuous mode [ 59.293046][ T6322] wg1: entered promiscuous mode [ 59.293305][ T6322] wg2: entered promiscuous mode [ 59.293544][ T6322] veth0_to_bridge: entered promiscuous mode [ 59.294524][ T6322] veth1_to_bridge: entered promiscuous mode [ 59.295553][ T6322] veth0_to_bond: entered promiscuous mode [ 59.296207][ T6322] veth1_to_bond: entered promiscuous mode [ 59.296855][ T6322] veth0_to_team: entered promiscuous mode [ 59.297683][ T6322] veth1_to_team: entered promiscuous mode [ 59.298516][ T6322] veth0_to_batadv: entered promiscuous mode [ 59.298967][ T6322] batadv_slave_0: entered promiscuous mode [ 59.299378][ T6322] veth1_to_batadv: entered promiscuous mode [ 59.299915][ T6322] batadv_slave_1: entered promiscuous mode [ 59.300329][ T6322] xfrm0: entered promiscuous mode [ 59.300572][ T6322] veth0_to_hsr: entered promiscuous mode [ 59.301350][ T6322] veth1_to_hsr: entered promiscuous mode [ 59.302884][ T6322] hsr0: entered promiscuous mode [ 59.303314][ T6322] veth1_virt_wifi: entered promiscuous mode [ 59.304917][ T6322] veth0_virt_wifi: entered promiscuous mode [ 59.306874][ T6322] virt_wifi0: entered promiscuous mode [ 59.309270][ T6322] vlan0: entered promiscuous mode [ 59.309934][ T6322] vlan1: entered promiscuous mode [ 59.310519][ T6322] macvlan0: entered promiscuous mode [ 59.311066][ T6322] macvlan1: entered promiscuous mode [ 59.311684][ T6322] ipvlan0: entered promiscuous mode [ 59.312793][ T6322] ipvlan1: entered promiscuous mode [ 59.317459][ T6322] macvtap0: entered promiscuous mode [ 59.318353][ T6322] macsec0: entered promiscuous mode [ 59.318932][ T6322] geneve0: entered promiscuous mode [ 59.319365][ T6322] geneve1: entered promiscuous mode [ 59.319924][ T6322] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 59.320882][ T6322] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 59.321388][ T6322] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 59.321952][ T6322] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 59.322532][ T6322] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 59.322972][ T6322] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 59.488832][ T6335] ref_ctr_offset mismatch. inode: 0xa9 offset: 0x0 ref_ctr_offset(old): 0x20040 ref_ctr_offset(new): 0x0 [ 60.096332][ T5877] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 60.245436][ T5877] usb 5-1: device descriptor read/64, error -71 [ 60.354707][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 60.415201][ T6383] syz.4.102 uses obsolete (PF_INET,SOCK_PACKET) [ 60.495367][ T5877] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 60.635383][ T5877] usb 5-1: device descriptor read/64, error -71 [ 60.695380][ T5743] Bluetooth: hci0: command 0x041b tx timeout [ 60.695405][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.695419][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.695475][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.737204][ T5877] usb usb5-port1: attempt power cycle [ 60.810389][ T6392] FAULT_INJECTION: forcing a failure. [ 60.810389][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 60.810409][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.3.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.810426][ T6392] Tainted: [L]=SOFTLOCKUP [ 60.810430][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.810437][ T6392] Call Trace: [ 60.810441][ T6392] [ 60.810447][ T6392] dump_stack_lvl+0x100/0x190 [ 60.810481][ T6392] should_fail_ex.cold+0x5/0xa [ 60.810501][ T6392] should_failslab+0xc2/0x120 [ 60.810518][ T6392] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.810533][ T6392] ? __proc_create+0xc1/0x8f0 [ 60.810546][ T6392] ? __proc_create+0x247/0x8f0 [ 60.810579][ T6392] __proc_create+0x247/0x8f0 [ 60.810594][ T6392] ? __pfx___proc_create+0x10/0x10 [ 60.810612][ T6392] _proc_mkdir+0xb9/0x210 [ 60.810625][ T6392] ? __pfx__proc_mkdir+0x10/0x10 [ 60.810639][ T6392] ? proc_net_ns_init+0x42/0x420 [ 60.810655][ T6392] ? __pfx_netfilter_net_init+0x10/0x10 [ 60.810671][ T6392] netfilter_net_init+0x37b/0x4a0 [ 60.810685][ T6392] ? sysctl_net_init+0x27/0x30 [ 60.810699][ T6392] ops_init+0x1e2/0x5f0 [ 60.810719][ T6392] setup_net+0x118/0x3a0 [ 60.810737][ T6392] ? __pfx_setup_net+0x10/0x10 [ 60.810758][ T6392] copy_net_ns+0x345/0x7a0 [ 60.810771][ T6392] create_new_namespaces+0x3ea/0xac0 [ 60.810791][ T6392] unshare_nsproxy_namespaces+0xf2/0x220 [ 60.810806][ T6392] ksys_unshare+0x4a2/0xa70 [ 60.810827][ T6392] ? __pfx_ksys_unshare+0x10/0x10 [ 60.810841][ T6392] ? ksys_write+0x1ac/0x250 [ 60.810859][ T6392] __x64_sys_unshare+0x31/0x40 [ 60.810874][ T6392] do_syscall_64+0x123/0x790 [ 60.810889][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.810901][ T6392] RIP: 0033:0x7fc1ed39e159 [ 60.810912][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ** replaying previous printk message ** [ 60.810912][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.810923][ T6392] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 60.810936][ T6392] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 60.810943][ T6392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 60.810950][ T6392] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 60.810956][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.810963][ T6392] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 60.810977][ T6392] [ 60.811051][ T6392] cannot create netfilter proc entry [ 60.887537][ T6392] [ 60.913058][ T6392] ====================================================== [ 60.915255][ T6392] WARNING: possible circular locking dependency detected [ 60.917427][ T6392] syzkaller #0 Tainted: G L [ 60.919402][ T6392] ------------------------------------------------------ [ 60.921563][ T6392] syz.3.105/6392 is trying to acquire lock: [ 60.923412][ T6392] ffffffff8efcb2a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 60.926331][ T6392] [ 60.926331][ T6392] but task is already holding lock: [ 60.928618][ T6392] ffff8880287303e0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 60.931469][ T6392] [ 60.931469][ T6392] which lock already depends on the new lock. [ 60.931469][ T6392] [ 60.934659][ T6392] [ 60.934659][ T6392] the existing dependency chain (in reverse order) is: [ 60.937459][ T6392] [ 60.937459][ T6392] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 60.939832][ T6392] lock_acquire+0x1d1/0x380 [ 60.941728][ T6392] __mutex_lock+0x1a4/0x1bd0 [ 60.943684][ T6392] blkcg_activate_policy+0x34f/0xbf0 [ 60.945813][ T6392] blk_throtl_init+0x39a/0x5b0 [ 60.947785][ T6392] tg_set_conf.isra.0+0x252/0x500 [ 60.949537][ T6392] cgroup_file_write+0x1e6/0x8a0 [ 60.951443][ T6392] kernfs_fop_write_iter+0x3e0/0x5f0 [ 60.953578][ T6392] vfs_write+0x6af/0x1050 [ 60.955236][ T6392] ksys_write+0x12a/0x250 [ 60.957085][ T6392] do_syscall_64+0x123/0x790 [ 60.959088][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.961271][ T6392] [ 60.961271][ T6392] -> #1 (&q->q_usage_counter(io)#65){++++}-{0:0}: [ 60.964304][ T6392] lock_acquire+0x1d1/0x380 [ 60.966235][ T6392] blk_alloc_queue+0x610/0x790 [ 60.968068][ T6392] __blk_alloc_disk+0xa0/0x170 [ 60.969890][ T6392] zram_add+0x1bf/0x5d0 [ 60.971392][ T6392] zram_init+0x11c/0x160 [ 60.973197][ T6392] do_one_initcall+0x11c/0x6f0 [ 60.974950][ T6392] kernel_init_freeable+0x6ea/0x7b0 [ 60.976731][ T6392] kernel_init+0x21/0x1e0 [ 60.978501][ T6392] ret_from_fork+0x730/0xd60 [ 60.980442][ T6392] ret_from_fork_asm+0x1a/0x30 [ 60.982475][ T6392] [ 60.982475][ T6392] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 60.984794][ T6392] check_prev_add+0xeb/0xe60 [ 60.986427][ T6392] __lock_acquire+0x1528/0x1f40 [ 60.988111][ T6392] lock_acquire+0x1d1/0x380 [ 60.989695][ T6392] fs_reclaim_acquire+0xc4/0x100 [ 60.991423][ T6392] kmem_cache_alloc_noprof+0x63/0x6a0 [ 60.993271][ T6392] __radix_tree_preload+0x333/0x820 [ 60.995076][ T6392] blkg_conf_prep+0x489/0xf10 [ 60.996968][ T6392] tg_set_conf.isra.0+0x1ed/0x500 [ 60.999123][ T6392] cgroup_file_write+0x1e6/0x8a0 [ 61.001077][ T6392] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.003224][ T6392] vfs_write+0x6af/0x1050 [ 61.004981][ T6392] ksys_write+0x12a/0x250 [ 61.006937][ T6392] do_syscall_64+0x123/0x790 [ 61.008906][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.011131][ T6392] [ 61.011131][ T6392] other info that might help us debug this: [ 61.011131][ T6392] [ 61.014735][ T6392] Chain exists of: [ 61.014735][ T6392] fs_reclaim --> &q->q_usage_counter(io)#65 --> &q->blkcg_mutex [ 61.014735][ T6392] [ 61.019059][ T6392] Possible unsafe locking scenario: [ 61.019059][ T6392] [ 61.021641][ T6392] CPU0 CPU1 [ 61.023654][ T6392] ---- ---- [ 61.025565][ T6392] lock(&q->blkcg_mutex); [ 61.027206][ T6392] lock(&q->q_usage_counter(io)#65); [ 61.029732][ T6392] lock(&q->blkcg_mutex); [ 61.032028][ T6392] lock(fs_reclaim); [ 61.033551][ T6392] [ 61.033551][ T6392] *** DEADLOCK *** [ 61.033551][ T6392] [ 61.036295][ T6392] locks held by syz.3.105/6392: 6, last CPU#1: [ 61.038600][ T6392] #0: ffff888030678d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 61.041935][ T6392] #1: ffff88802ed38460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 61.044744][ T6392] #2: ffff888057536080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 61.048251][ T6392] #3: ffff88805912dd28 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 61.052028][ T6392] #4: ffff888028730260 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 61.055913][ T6392] #5: ffff8880287303e0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 61.058928][ T6392] [ 61.058928][ T6392] stack backtrace: [ 61.060824][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.3.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.064165][ T6392] Tainted: [L]=SOFTLOCKUP [ 61.065516][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.069280][ T6392] Call Trace: [ 61.070437][ T6392] [ 61.071403][ T6392] dump_stack_lvl+0x100/0x190 [ 61.073177][ T6392] print_circular_bug.cold+0x178/0x1be [ 61.074921][ T6392] check_noncircular+0x146/0x160 [ 61.076615][ T6392] check_prev_add+0xeb/0xe60 [ 61.078483][ T6392] ? check_noncircular+0x97/0x160 [ 61.080350][ T6392] __lock_acquire+0x1528/0x1f40 [ 61.082230][ T6392] lock_acquire+0x1d1/0x380 [ 61.083890][ T6392] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 61.085907][ T6392] fs_reclaim_acquire+0xc4/0x100 [ 61.087838][ T6392] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 61.089970][ T6392] kmem_cache_alloc_noprof+0x63/0x6a0 [ 61.091925][ T6392] ? __radix_tree_preload+0x2f4/0x820 [ 61.093828][ T6392] ? __radix_tree_preload+0x333/0x820 [ 61.095798][ T6392] __radix_tree_preload+0x333/0x820 [ 61.097828][ T6392] blkg_conf_prep+0x489/0xf10 [ 61.099643][ T6392] tg_set_conf.isra.0+0x1ed/0x500 [ 61.101595][ T6392] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 61.103680][ T6392] ? kernfs_root+0xf8/0x2a0 [ 61.105244][ T6392] cgroup_file_write+0x1e6/0x8a0 [ 61.106903][ T6392] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 61.109048][ T6392] ? __pfx_cgroup_file_write+0x10/0x10 [ 61.111200][ T6392] ? __kmalloc_noprof+0x350/0x840 [ 61.113018][ T6392] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.115096][ T6392] ? __pfx_cgroup_file_write+0x10/0x10 [ 61.117133][ T6392] vfs_write+0x6af/0x1050 [ 61.118799][ T6392] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 61.120908][ T6392] ? __pfx_vfs_write+0x10/0x10 [ 61.122486][ T6392] ? find_held_lock+0x2b/0x80 [ 61.123983][ T6392] ksys_write+0x12a/0x250 [ 61.125349][ T6392] ? __pfx_ksys_write+0x10/0x10 [ 61.126913][ T6392] do_syscall_64+0x123/0x790 [ 61.128372][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.130233][ T6392] RIP: 0033:0x7fc1ed39e159 [ 61.131739][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.138037][ T6392] RSP: 002b:00007fc1ee18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.140646][ T6392] RAX: ffffffffffffffda RBX: 00007fc1ed625fa0 RCX: 00007fc1ed39e159 [ 61.143129][ T6392] RDX: 0000000000000006 RSI: 0000200000000480 RDI: 0000000000000004 [ 61.145652][ T6392] RBP: 00007fc1ed43506b R08: 0000000000000000 R09: 0000000000000000 [ 61.148169][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.150980][ T6392] R13: 00007fc1ed626038 R14: 00007fc1ed625fa0 R15: 00007ffe9a5275a8 [ 61.154120][ T6392] [ 61.215396][ T5877] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 61.235741][ T5877] usb 5-1: device descriptor read/8, error -71 [ 61.475348][ T5877] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 61.496054][ T5877] usb 5-1: device descriptor read/8, error -71 [ 61.605467][ T5877] usb usb5-port1: unable to enumerate USB device [ 62.775959][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 64.855440][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 66.082837][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 66.082849][ T43] audit: type=1400 audit(1791189349.809:429): avc: denied { write } for pid=6398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.124547][ T43] audit: type=1400 audit(1791189349.849:430): avc: denied { write } for pid=6401 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.859729][ T43] audit: type=1400 audit(1791189350.589:431): avc: denied { write } for pid=6404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.907200][ T43] audit: type=1400 audit(1791189350.639:432): avc: denied { write } for pid=6407 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.935401][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 66.958299][ T43] audit: type=1400 audit(1791189350.689:433): avc: denied { write } for pid=6410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.004954][ T43] audit: type=1400 audit(1791189350.729:434): avc: denied { write } for pid=6413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.568843][ T43] audit: type=1400 audit(1791189351.299:435): avc: denied { write } for pid=6416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.604667][ T43] audit: type=1400 audit(1791189351.329:436): avc: denied { write } for pid=6419 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1