last executing test programs: 1m38.326386107s ago: executing program 1 (id=194): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000100}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa0100fe, 0x0, 0x10003, 'nq\x00', 0x2, 0xfffffff8, 0xd}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 1m38.32482002s ago: executing program 1 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0) 1m38.246619088s ago: executing program 1 (id=196): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1m38.245725621s ago: executing program 1 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0xd1, 0x1, 0x8, 0x4}, 0x5, 0x8, &(0x7f0000000040)={{0x1, 0x2, 0xc, 0x2}}, 0x9, 0x0, 0x8}}) 1m38.177269114s ago: executing program 1 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) (async) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$IPC_RMID(r4, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) syz_open_pts(r0, 0x106) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) landlock_restrict_self(r3, 0x1) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180abd510000000000000000020000030900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 1m35.22551802s ago: executing program 1 (id=211): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x2, "a722a0dd8c08fe49da33e92aa916a401bfca7f265bc44791756bdc4d9d751233", 0x494e4f4b}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 1m35.138474805s ago: executing program 32 (id=211): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x2, "a722a0dd8c08fe49da33e92aa916a401bfca7f265bc44791756bdc4d9d751233", 0x494e4f4b}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 1.134389762s ago: executing program 4 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x1e4, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x1d0, 0x1, [@m_connmark={0x1cc, 0x1a, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x100, 0x2, 0x6, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x7, 0x9, 0xa}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x46d7, 0x8, 0x7, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x90, 0x3, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x0, 0x291c, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xf1, 0x2, 0x2, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0xffffffffffffffff, 0xfffffd49, 0x200}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x8, 0x800, 0x6c7}, 0x9}}]}, {0xba, 0x6, "47504857e9f47a38e42a6d619541040954e304146651dc2b6e7ad05133953d110dc58ed343e8d6adfd016b28dbfc779992c72a4dd3cb914be47f2f7c2991166770a369ae14a7f1490ccfb780cf16e3a24129841699bfb0d5b684554e35767f3d89adca9488139206caaf0131a88bbf002a4d46bf2fd09846af5b016f513264cea6b165ead34d5d346005d69f13c7a80d94299daef107bbdc6c8bb984315dc55aa018626d1f4b357c198b4e9318f0620c1a5ca50fef44"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1e4}, 0x1, 0x2b1e}, 0x4000800) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x7, 0x3, 0x801, 0x3, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x9}, [{0x3, 0x7, 0x2, 0x7, 0xd, 0x80000801, 0x9, 0x7}]}, 0x58) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1b8, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xa8, 0x6, "74dee67ded4b59352f4d5385890c8ab7c0e085658a7cfc3756ee9d659976a04d34dbf54926d02d021a264b23f283ca929528539cb15a1676467977e718a8212bb35142d0e720c8aa7a6bf810d32ceb45d9940b8f7cc1f77175ea6d477fa3e6cce599ba98bc947b710ecae22acbd672964f781c1ada2ed5d714afa9f769c5efb26064a1931dcdb08a26ed154381d8dbf76c9da62ce72411cadfd4410dc4bf3c21d116983c"}, @NFTA_TABLE_USERDATA={0x83, 0x6, "2b27ff659bc602a11a018de475536f69e751e40c9fb3f35f1df81a225e38201cb24bf84f989405a489d126832606b0f6c6ffac7d1d466477e0028c6d82a5ca667e9bbfaee7ac5c980e88ae18cbfa639e0c1d1458ed39fb62c3b602fabbf2caf0be6c6d9ac74947ea78abd7f59cd42a3d8f2b61f0b996f10895d5a9fb9a625a"}, @NFTA_TABLE_USERDATA={0x6b, 0x6, "7741a8d52ddc459a3c7824194bd25c5bb30706b382bf05e9f6262c95eb971dc81abc2a5122b1f4a4663afbd6c56bf7a71c7987fe03f80816183b9ba9e5650e0003ff33d9dc3b7e10f07a84fd0cfcaf98a9da9132f8f7ca35b9831d3ef4e77f0ae43aeb64220000"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x840}, 0x2400c001) creat(&(0x7f0000000100)='./file0\x00', 0x1c) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001021, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.075047647s ago: executing program 4 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd71a76ac4536d5e6}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fddbdf3501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)={0x0, 0xeeef0000, 0x2, 0xb, 0xf}) 975.548968ms ago: executing program 4 (id=1787): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x3, 0x93cf, 0x33565348, 0x0, 0x3, [{0x6}, {0x9, 0x5}, {0x0, 0x20001}, {0x4, 0x9}, {0x3, 0xb68a}, {0x80000003, 0x7ff}, {0x3, 0x1}, {0x3}], 0x9, 0x7f, 0x7, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010400000000000000000000590eeb67e536c12a9467cc219efb7d70ffff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) socket$kcm(0x29, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0x10, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @quote={{0x8, 0x6}, 0xfff7}}], 0x1c) 895.415937ms ago: executing program 4 (id=1788): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000300)=0x20000008, 0x4) 894.876638ms ago: executing program 3 (id=1789): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x12bb40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f5, 0x0, 0x80000006}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x36}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 675.907458ms ago: executing program 3 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004000000000000009000000957e0f7d877cf26ad84d8bd5e9427b6981"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x3, r4, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 665.796142ms ago: executing program 3 (id=1791): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00'], 0x50) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000002c80)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x5412, &(0x7f00000001c0)=0x11) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x9de9, 0x4) io_setup(0x2, &(0x7f0000002c40)=0x0) r10 = eventfd(0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002d40), &(0x7f0000002d80)}, 0x20) io_submit(r9, 0x3, &(0x7f0000002d00)=[&(0x7f0000002a40)={0x0, 0x0, 0x0, 0x3, 0xb1c9, r6, &(0x7f0000002a00)="5d45fa4e64e819257bbc01b032341de15ecca50f", 0x14, 0x1000, 0x0, 0x2, r10}, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x6, 0x0, r11, &(0x7f0000002a80)="c64280e6418da983bcdc897dc7b02bc241398f335fd56723b08f090d4d87b53550e6aa4d5762ab94d80a7de340d215ca1c96a0a63f1096c21b4c31eb7e13e33e69d4a043e521a2fd04f0b20768cf09e43c270362defbfc9a1d017e2cdb0083c20e8b6bde38189a1a9bd7c151482862e5c43bfc03e2d0bb7ad142e63555e6c4e240b9ed7c9653d164981a3d62dafa7b80104a8ac93a76abb45e6ac441de843f60923759e2a5c9abb55593421312ae0655e89bc7c060b24131987f34ef0a0bfafb512622", 0xc3, 0x0, 0x0, 0x2, r4}, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f0000002bc0)="4b88017d39311a5e401fac77057b6fbe4e23c5a34de7d94685a859328198c710c1af2767c498c0e66ec4272f1f8ca66882e8fe9f14c2d8d7a2e64b452610dcf0aeb4ec83009d9037bd79161a0c316ea215e6e79e440d7978cd14f96a8df6e118794ae6ad5ae190448a6e21819670fd744b", 0x71, 0x8, 0x0, 0x2}]) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002840)={0xd917a6448d34c332, [{0x4, 0x1a8, 0x6, &(0x7f00000000c0)="041d0b25ca8fa8e550a6813fac6590966c37ac8d5eb5ae564e8fa715175e7090447fbfdbf11cf6870eb92c61da0ee31503bfab64f8"}, {0x2, 0x650, 0x9, &(0x7f0000000140)="d682715b1d2d2ea41df367b3696f38f92ba92fe95b73cdc69de566d7b520fae9e13da766582aacd115b85b780150a6031f62fce3c9596d066c9ac69e0cf8dfe906c7c505d46eb36422947dc8b35173d9008da7308db46dc6c2a1b8dde55743b861862d7f1057e58f20030f55bbff773b06748cccb21419d3012d0d684427232f7dd4b76a7a347bf2e60c1c3f144afb73c02fcfd10f929ea04040254f59d92005adc6667fcad48eb033fccc56b6627486bd7b14d971d969efda9c86a7af2d9abb5b48588b957b141c4334"}, {0x3, 0x4b0, 0x0, &(0x7f0000000340)="df6f70a69de48ea59c9f7f7ce77006246172cc2fd00bedd4b250fddfd5810dc1608017f899b43a3e02697ae2202ea835205cbe49c1079f35952f223ed484161e1e989c6c51bf05ddd655ebef5dbebcd6f227c37917991008691a0836ec5792c1b07570530e7c0a3a40838e6735a1617e1b06f76b1177efc827b508c3188e471cd3718298a712e73ce57110617174376574c2e055721f"}, {0x2, 0x8000, 0xe, &(0x7f00000006c0)="137056b46211d7cfde866f60011c9dbb40a5640a6755d3d5a99660fe2dd55432282f18861cd60a42c9edca5822dc43fc4d5ee6b97e445814d1665409d5033f478d91a2ec0f670a60ea6d596e64dabebb018373dad365eb14fc8e91a9e56cd56cb1f19d64527627b49de07d94fe39470a852bcc864aa7a17e05e1bf4215e073b69ae0e1aebb73f717562edcaa4680ae64c995defa89b862d9cdbf0a372ffad373c27b82561f06e1b5f135b652f06ceea92d9fbafc1b371f128d7745b94e64eaa6fd7fab49ab145e792a59385faf346c4877a290a037207d0ee99c5de05af19f19db8f902194f60dcd98b852f6535aefad95f0ba0fefc5863b17d9a9b70249d25c11943133813e3802cf88f36a28b213d7e9a124c37a25b38fadc4ddb21863a2cb3b51fd499a8858e32a6496d83a3349e0fedb44325a1e0418aa0e14ed879fb1fa66c89362ac64507554e6b1507c96320e199d23418c50a830b043467a7311a1253acb58018b0761b86ab3f0052fa2e7e94522ca06532d13ad5b4d0e17505a81a0961aa6e1a28edccbd6934aaa10bd6a6553cf191fc5d5709dc5bbfffcb1236ff8fba9054fa0269df17e695f8ab3166ada9723ed4e86f011cf89a385b431c5edfb6a8e20d2f4b5eb595090e0c09c6f9293dc1edb69926c1bfdaec0895a9d83b98367963b2d0d89df83ecc0f149d0b7b05cefcdb7539aab901ed502d25a2d3fb1816f46652b62fe429175585d371e37ea34da2c9b289e93b628cbf73efc2d41405af4bc12a65b22379acc9336ee148ad7da30af13dd9e0ca80fe57ab4d064ece57142a0c49d1ece98d1c9812757f81eaa71bde6e5af06316b25174a3562d6ac4f467e6f518652632086b61fa3489611cde2cb9fd6bf575fdd0a4ecab21ddb83d510195ea9e7dd5d6fdc9b25a530f49356ceff7cd32425fba3ad312b9c20ad4f04f8f7f5bc2987d0355b0a1e2963d770df717c6e83d9b48b3a9a7f0f1344f689831bcb358740c4ada5afb0063884ed79d0722637146b7a9534f13b10d2f5a10f252d74bdcc96dd8a84712c8b6bcfdb4ce882184590c5e57062ad42f6f72043a32a72d77224d75a7c6081538c54c3c71be9df212a4281628111d008bb12ac9c09dee8b38575463cfd0ce1810456ed309a8ab8fd845d4ac7d9302136297490e0b3a3b26ac0d0a8d4acd940c73771082b549a7b61fdafb462a509afaa723929a1cb7abb06ee1967ee3e343bae0ab45e14e98338e7a332ccab05f3ce4b94d2bcab39dc0833c8e87047b042076fe4a2ec502564d4eb5d900306e2751aebb0132dcfa58ebc9793df7f887670f894e27b19b7e05d1e951b36487a2f00e69e51989d7578961a3cd4700fe01644a54d6f1543e7dd73c83e963bda6ed85b00fdbe1e88de6e1a668dcc18b7fa56600a8485bbe2b30c7578fd8ddd926c4e284a2d2b871cf34a45e32c1d9531ec8261e117a180ab37ae7dc295c5c0abc76c4cea24d8408688b416546d41fc36364edb6260e97cae1b2f9cba068fee08b358fbbaa10a5ff471ea1df14e39b26ad4a75c1ce1277244489010938021146b5364caaf439a929e48dcd509c1c72811b2a5377f0808aa58618bff54e7a117b8faa566ff32ec07e2a0554477f5fa4a8eefe39fc0628182e64783130cb847a6877cefbf278223b507d83696a774b0faafd29eb33e9b12080c4b7a164ca37c43e5b0f49c8842ca4551c50726dc8de7a288ac9ab6b705429a2fae425a61b91394c76ebd21926fff8cf1c7bced8c26e87e1938deb4f726a2ef121c343d1ae360f03db29e04923520a66931b8046d6eb9b66462a2a93368578f5f8dd2bbc152b0f649bd261de1f12be67634baca49f71d0685596c1bfcf15d5d2eff59273d8b82ac77cc6b3f167232de1ebe405c1177d326cc9338ca27450dda3a405a6c3537dffe97da36549f13d947b6e87202e705a5f86ee8b4e51e3b975d59ba31bbf73404498b92c4753f3b1ab447613f74b3d95de854b50686e80489d9387c2a0d41fc524511682005d6ead612629aeb367dcd89ef7a345630875ff42be05b73b1f8a423645d54db4d5eb1d43ca9d7c6351c3bbde33124e52f4a92f7285a3b49400e7fbfb44e8ea069024bd7ff46698b4b8d2aa283dc78b1c5907712ecdd162c90d9e9b7eb84fbadf8a0a739d0beb7abf1d4adc2e079b423969874b1395d498fd69a89a50230936388488501f405d723ecf896c3bfd76001cc6a51066ecd54a78208df33f7745db56d18bb0fe53b9c1abfb409a339a7cd2d75c39b2d14922a34b95a9e5565921abb82f753cd2ace85863e9953cc11ea1a3c186c4193857f64653598adc651c0da349f0af77b1de60ed1862939303a80da6e26d528b7c8cf76fefa7a42c8669cacb0c128f2637d4b22991c5c7aafbd19b8c43de7fd5d1a5af3aa7eb79fe1f443dfff057321f29274bd317c73bfcd3517028c5b56665b2d9e35d71b1dbe5275ddd78ae461379adac9af7fc13508c94ea3312e60cb83cebe46ca7c9704d5d129ffcc38d948b42d1ac513add3048ae466bd22aeec94b2b0461b38cdf79450f1a7916d50abd962ba03ff65706b63812b2daecb4a1a8e8a1f31a3483284a60b2a8b2e9581943c6addf736894134a9f05d4c2f5312ac94bbaa210270da34a314fae1eb45d1bfabe44296464a2fa2281355bac835c3eeeb4ee32cb7a0404791494a16cf11371d0997270ab9392eae2cb5b44baa2cf631906754a91d3f350e11abe6a807eb1984980807d68710d20f724e6895f9d577d80735cd9dbea58fcf533c794698500d6450c1451302cdf692845d9750ddf8c51d400b7e4c4da67929b0770958c8db77cb96701aa28edea98bf47ba6a62be45d73e8ea11d256f3bdc1be884ddab6c337044aa19631583100fa658dc44b5d56fdbf393ce00d7538c4a57828ef41bb99700d9d68ee591de26eea32523422cc769d9a3ed08b143e48a57eeb23367abc4f344c666589669a2e93c0af488f0703df5b120c4e56bb0e621a1b1d60dce148dd4bb254cd8b69d8ad61aee265f573950edb6a345c1da0e0d620c92bcd15864e2bbd0b74ed43e804da8d39de54082176d1dda26e1006f55e61bc378d60ad29a9609a0fed9f4d8f4638ffe917b5e48d753460dd20c51d9900bbca2caec7b3fbafb4576f2bd5609b2244e328231f4e6361d56879a5e446c47768028e404aae572b1297d014bc29655a1e2ca362e1b1893236024df44e39ea198dd824cdbde14353dca586654c685cf4f00f1a3c6d4667927b011f01a8bcf02403b0b8994681072b5d5b70e12bcf54cba7b53865455e064447f5c673f9968c8ef5fd8ca885c711fa565bfed1d8ab55c4bd09db86b471d9aceab000d03424d03017c6979580718fd33bb8a3c639681bcebb361fa502c69903f7c9df650414a7a2a6a4f6ffd30d86e1e5b9b4cdee5f1d055041834b57fbc45198464b96931ee630375f334509df37b7f866190c4c083c7ea0956527ebacdd7cbb0d2ecb97c04fff206da2fe1297d0d247f30bc2625c63e32f5df24003817b3072a343bd0e01173c638c74716d361e7599f37210cdeffffea6162f44f496598421432737696647a4902c3e4e4889b9744cba9a56fc24c1fbec9c4a723652da18cbb4acbc33e9260183c06357b5b4dfb79fdf52e047bbbebd1a95351531975ffff07a9b7c60781dfa44d065af6e9d26e2bb138b378e9c246b3780f2074f2cf3f658c943e9e2aa0148817fc764d48f279de3eefaa166657c0231122b2459cccfe5d0fbf1e0a647de539361ae479443823373046748545d32891091d74833f6d9fc7e80f88558029e65abcf2ca682d1b71486e4adb120f9b914c3f70e7bd410e317120a72686308169f99bcb3c603ccf4bbc76e61fc560099fc61cf4f07f3862cdeadb12768e0033c3904f989c05689cfa7ed7e173001f606f1c99d6ac97a8facef523c618217c24e61badda48ff21e3fb91e3030c785f9ac7fa37944f433d5ffedd52adb607395257dc5194a122531028f703ae0811ccf0b6be5abe383a51915b420198536260b3327c0a9d680c388c27197c08f58a5c5d23b26e7334761f8d05ce50907da7079b5b1435b4eb0e89280d09bde2f8f513f9ef2589cbb34ab3b21a29f02f0a35d568a80b2e9ac72a661f72c4041dc1db0fa128608cbc6f3a69b87c928397760dee1ec27869d3a5d1045f030577d52d030adc65c6f8756e1185b7da1c486b4e2d5f02ad0da5b8d8eed63e41fcfb6d0abd17ed7d2d5b861b58d9dd0eb84a6d36610fea340a157ce231579671298627e16c7fd088d7b8845e0bb1bdb67ee3914ab4fe7263d50fce274a9b146a4556c49ae8a5341eef72004903cd09afbc64cfcc888d4f9cdec4678568b03a846e1e1ec3dbcd77955dbb8594e93a1617533b3f8ee83330b6ff85a1d51b9c48eafa7922a53262609d93eefedca161c0de3b5bef8f8beed69636764367bd11a6c1c177f5f03ff3174a14e8dcd8402c3ab4b84489b6379784022b3bcf370e88af2c182f1e2375e1c14a416e8fedd090561e7a7dcbd3d95cdf457566e7b3591cc7e43dcb47006fc024c23a879a48989033b48fa9b66357a32f648db37ec2a703ff96090bf271a4852f25be20680e65bbc48b41bc19777f3afd26a338400f6f90fd143f0ebef27c44288b3d2799f0219ee76e69290e7d7186662b45ca82ec7b2722f614c9ceb34a508fbea345f78b7858cc858afc8d4acb6a1f3dbabaae6085c318b6269284852c922d15a9c3c4d6bdcb7e255f80949cc41f9117e4e6478afd763494ff34be4f9e58a25d40c632397e065b3e1eb091441167487c4b6e27fe0e956d62b14e5857df26b6c0ddcac596951d0084247f3e0d29924ae3aba999ff3b505531b8565cab83285e426cd963f9989fe3f13db082808439143d44dec68c266cb77f8a83634630268091b3f89b6dc2d6229634de38fe17fb2b48f7ff7298d1c09d3d7272a2bb87419254fe5966c986692e2986380628571d2d3a5448f78274852e989f6f7df47710635db36fa78a69281d8f97d674ccd08b06a0f500cd6b0480a1fce63e5611785dfc2d23cb28947232f14f3e7007ec125cfd9d646c1ee651a69ac980e8074a52a8d73c8930d6073a62c1d0f093d8e59516c6272b26b5f63e544ca7bb7761f11c949868d06944533cab2cb378908f733e00cc776d1eed7cc49260a094d34b89e9558637ee4bb73bbb083519d7810ae0e51eb3959535402e46df917e92333319caa13798af214e73394177a86ce7d534eec3ef4dc80ebe7f85d18ade6a5055b4e2f4c6a81c43bb77fdf73ae2cb7a02ff3516ccb7080750588f69a7e41e3ace78e13f354031c4c7c2c50c755581fc38da430b53bd80bd90755225954658946b7c0a18576e98e436c812ca93a9065b4357415665d8c49b130097211c5b5aeed6e48d054d41388f59560b38353196ac91adc4a7c289e0928ddfa861d90a5b20f1bc614182bbcdcc6a84921631ec75aa5f76755fdf8a74d93035a8377700dfbf864539bd92034ec526d78525c2a5d0b9f4e38772cfee335355cf7a6fa1317d3743d9c3cdcf7fcd549a55c59127ebad122e06e3f88330e29cac4d0ed3be6bbc5c16377302246d695a1c0df9c4f4f0ff26cff7296bb91c8ee6ac4bf96dd676ed2b37639d81113003fa482c75e11f999f0b94771c2b6112064441ca0d5b59fc3123d1d225fbd79a81cd9df5659feddc634c37f80b3c22d0e9cbc403131a3e3dabdea7bc02915db096e4b739053626c2f6db24ffa51e55ac4d5f606d24ca4a2e2c79a1737dd1f819d16008e5e"}, {0x0, 0x0, 0xfffffc6d, &(0x7f0000000280)}, {0x2, 0x1a0, 0x7fff, &(0x7f00000002c0)="75c0438c69b5f42514948c98e7bd704b54edf19b0bec14bf3aed696d8bd82fa2c53a96dc5b71ed7547c56d0405e87041c202b583"}, {0x3, 0xc0, 0x5f742064, &(0x7f0000000400)="5235636c15b23dbec4afc0c605ab8d3a46c80bfcb351c61b"}, {0x2, 0x498, 0x6, &(0x7f0000000440)="95f841f504a52466ca0686127dc9bb1d48975d339e8e716215f076c9e657459f88e4ef1671cced691b47cda858dcca2535f5dcd700cc24265317d3c04b6f0d9917cdfd1fbd4d4f70e800f965602a942d4c202384f0d449ab2ab158113868fe1ef15cf45644d1a901491135c9007e47bc661eff8c76e546fbd05983f78e68a3a88f02131b8884f9eadd58c080cbe2e14f8700a0"}, {0x2, 0x4e0, 0xd3, &(0x7f0000000500)="e1ce3f3adcd536120fd04bb4b7d61a9ad69c52c8f4ae03d0cb1822e1d3cfada7a2101fdbe39095c2d8187066d623b639d68b94575c49015040d8076373b9039db7609f0b3418497b98d28f03670dd124e4cc063332ae1d09f55b9e5a1fe5c1e26d1746e75da7b58d03c8814aaf6d57024ec3d6a6d44af5f5ba007eccb92b4589857ae964b46523333c9b5e2e9573cadf6c24ed69ae179865fd345fc0"}, {0x2, 0x4f8, 0x899, &(0x7f00000005c0)="80db6df9d7f6e625f53a8be74386b2b019fc64cf4a107a111e3100771ea3e2a29b39cb7c3ac33458ddcb621b2c4b9be5bfe296a119ee261d50acdbf372e183d6b0111b3f017fa50f5e24bde0b80e775d9a9d65ba9264c81f3bb6235acc1e4609103cf289d7261b6cd3a542ba8a23be3cb863ede02b8c2251682e226f313a491cb5a95caad18b1aa62c2321e8898d3d9551cf2ad9ea3f701c4d0c7c24b6466c"}, {0x0, 0x40, 0x8, &(0x7f00000016c0)="1de3f158a9dc11f8"}, {0x2, 0x2d8, 0xa6b, &(0x7f0000001700)="8d8eadcaabbb767409444d65f1c82cdc06435da7622ff4f5953d483952007681933c9a17d239e6795a22de5539d08afa5e3332ba144cb6c44feaff0ba5f753f9da6df3eb1b0e284bb1a2736323c168a606edebc393142ebc536e29"}, {0x3, 0x120, 0x400, &(0x7f0000001780)="5905e96a4eb9a262e85172eefd93a2e11026873eeb4ecc9940c2526bd7aa767c6a95acf1"}, {0x0, 0x8000, 0x7, &(0x7f00000017c0)="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"}, {0x2, 0x108, 0x3, &(0x7f00000027c0)="61f5c5846cedf1e02513b3d5217f4bd678ba5869b46399f0c14142db1810a361b3"}, {0x1, 0x18, 0xfffffffc, &(0x7f0000002800)="95fe7b"}]}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007002000", @ANYRES32=r13, @ANYBLOB="20000100", @ANYRES32=r13, @ANYBLOB="00000100ffff"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) 615.974206ms ago: executing program 4 (id=1792): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0385720, &(0x7f0000000000)={0x1}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000840)=[@rdmsr={0x66, 0x18, {0x88c}}, @nested_load_code={0x12e, 0x5c, {0x1, "460f21e88fe97c8057b466baf80cb82890b78fef66bafc0cb8fd3f0000efc421fff052bcc4020bf71b0f01c9b805000000b9000001000f01c10fc73f6526f4f3470f1efb"}}, @wrmsr={0x65, 0x20, {0xc0010140, 0xdea1}}, @uexit={0x0, 0x18, 0x101}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x67, {"66baf80cb81fcb9187ef66bafc0cb032eec4434d6d7e0636670fc733400f183c9367f3410f1efd3e400fc73164450f09b910060000b800600000ba000000000f3066b82e008ed066baf80cb8daf7fd88ef66bafc0cec"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x5a4, 0x8, 0x4, 0x4}}, @out_dx={0x6a, 0x28, {0xe6f9, 0x6, 0x7}}, @cpuid={0x64, 0x18, {0xa5f, 0x6}}, @uexit={0x0, 0x18, 0xffffffffffffffe4}, @code={0xa, 0x68, {"c744240034000000c744240208000000ff1c240f015206c481d1fbafe47c684cc74424004a000000c7442402780f0000ff1c24c4e27918520cc4e32d7f33093e65420f781f0f20c035020000000f22c0420fc32826f3a4"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x560, 0x10, 0x8, 0x200}}, @rdmsr={0x66, 0x18, {0x303}}, @nested_load_code={0x12e, 0x55, {0x3, "660f38815f00f30f0966b804008ec8660f38806d0e460f01c9b9800000c00f3235000800000f3026450f3066410f3838bd58970000660f6321470f01df"}}, @in_dx={0x69, 0x20, {0xfb5f, 0x2}}, @uexit={0x0, 0x18, 0xd6}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xba, 0x3, 0x3, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5bb, 0x0, 0x7564, 0x8ee7}}, @nested_load_code={0x12e, 0x65, {0x3, "b9800000c00f3235008000000f3066b80a010f00d80f35660f3882a1000000000f23f6f32e64467a2f0f0966baf80cb8b049c684ef66bafc0cb04aeec40141e28d1161c841660f3a177c9d009f"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2400, 0xff, 0x7, 0x6}}, @wr_drn={0x68, 0x20, {0x5, 0xc}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xb9, 0x5, 0x3, 0x10000}}, @set_irq_handler={0xc8, 0x20, {0x95, 0x1}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x4}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x4f, {0x3, "66ba2100ed410fc72a0f01cb4781a800000100f9000000f26640d087003800000f0766420f5c1e66b87e000f00d80f01cfc403617bf774"}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x875b}}], 0x56c}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000640)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000600)={0x4, 0xefdd, 0x1}}) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000640)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000600)={0x4, 0xefdd, 0x1}}) prctl$PR_SET_TSC(0x1a, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240), &(0x7f0000000200)) (async) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x64, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="fe56df7f63efc950d9f35aa5e9a6a462eab18523b8a394fa3539c473d3f60e31e679584ec1a4ec774cd426241ba66e789f02866556638c54d2448027c1d0aeb6b4b6890e71d07c611ac05fe61928c7acc1aa47fc87fcad244462f2bcf46931eaacb4c7ed3b01821fd6592acba4", 0x6d, 0x1, 0x1}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) (async) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace(0x10, r9) ptrace$poke(0x1, r9, &(0x7f0000000540), 0x282d) prctl$PR_SET_TSC(0x1a, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 554.155898ms ago: executing program 2 (id=1795): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 466.194911ms ago: executing program 2 (id=1796): r0 = syz_io_uring_setup(0x623f, &(0x7f00000002c0)={0x0, 0xd028, 0x400, 0x1, 0x2ef}, &(0x7f0000000340), &(0x7f0000000380)) prctl$PR_SET_MM(0x4e, 0x8, &(0x7f00002d5000/0x3000)=nil) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x25, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x32314752}) syz_io_uring_setup(0x581b, &(0x7f00000003c0)={0x0, 0xd611, 0x20, 0x3, 0x118, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000480)) (async, rerun: 32) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$RTC_WIE_ON(r2, 0x700f) (async) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00002d7000/0x4000)=nil, 0x4000, 0x2, 0x40010, r2, 0x548d7000) 464.66823ms ago: executing program 4 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) fsync(r3) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x4, 0x0, 0xf2f2f2f2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[{}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x1, r10, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000700)={0x500, 0x2, &(0x7f0000000180)=[0x0, r4], &(0x7f00000002c0)=[0x8], &(0x7f0000000680)=[r5, r6, r7, r10, 0x0], &(0x7f00000006c0)=[0x0, 0xfff, 0x0], 0x0, 0x2c}) r11 = socket$alg(0x26, 0x5, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r12, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r12, 0xc0045009, &(0x7f0000000040)=0x80000) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r13 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0xd8700, 0x0) ioctl$BLKPG(r13, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r13, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000740)={0x400, 0x4000d54, 0xd}}) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty, 0x7}, 0x1c) 404.922144ms ago: executing program 0 (id=1799): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1101, &(0x7f0000000300)={0x0, 0x2dc4, 0x80, 0x1, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=', ']) ioctl$CDROMEJECT(r4, 0x5309) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000007680)=@newtaction={0x1f4, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_tunnel_key={0x120, 0x1d, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0xad, 0x6, "c98a9ce8b1659c659784ad9bbbf7109470271c5252369b688a53929dfdadb506ba20e8e07b6311e4ed49a114e2ad71e8282a7d50ba46db4618a1710ad06013bd90d130c4bc897ea0f7ff7625b26b52ddc748bcb9a909b794188a3c5c450b49c6c0332b169b5d2c01e8645accaeea6e6a60642037abec9e6173efe90ab35850811d093781f3fb5a4b8b21c8eefbf97c834064e7d374af88d502f0f614e965ebae9f2da7f97b3431cf2d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xbc, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2dc6, 0x64, 0xffffffffffffffff, 0xa, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4d9e6edc, 0x0, 0x9, 0x7f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x80, 0x6, 0x6, 0x80000001}, 0x4}}]}, {0x2d, 0x6, "59ff9374fe9bd5632d65831fd6eecf26889d16749f8e110c6498afe749a9a9a868a9e12291016e5b20"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x1101, &(0x7f0000000300)={0x0, 0x2dc4, 0x80, 0x1, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=', ']) (async) ioctl$CDROMEJECT(r4, 0x5309) (async) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000007680)=@newtaction={0x1f4, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_tunnel_key={0x120, 0x1d, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0xad, 0x6, "c98a9ce8b1659c659784ad9bbbf7109470271c5252369b688a53929dfdadb506ba20e8e07b6311e4ed49a114e2ad71e8282a7d50ba46db4618a1710ad06013bd90d130c4bc897ea0f7ff7625b26b52ddc748bcb9a909b794188a3c5c450b49c6c0332b169b5d2c01e8645accaeea6e6a60642037abec9e6173efe90ab35850811d093781f3fb5a4b8b21c8eefbf97c834064e7d374af88d502f0f614e965ebae9f2da7f97b3431cf2d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xbc, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2dc6, 0x64, 0xffffffffffffffff, 0xa, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4d9e6edc, 0x0, 0x9, 0x7f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x80, 0x6, 0x6, 0x80000001}, 0x4}}]}, {0x2d, 0x6, "59ff9374fe9bd5632d65831fd6eecf26889d16749f8e110c6498afe749a9a9a868a9e12291016e5b20"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) (async) 326.255773ms ago: executing program 3 (id=1800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x7f, 0x40000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000021bf000004000000", @ANYRES32, @ANYBLOB="0000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x1, r2, &(0x7f0000000540), 0x282d) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000340)={0xa, {0x6, 0x1000, 0x1, 0x10000}}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {}, 0xff}, 0x18) bind$can_j1939(r3, &(0x7f0000001180)={0x1d, r4, 0x2, {0x0, 0xff, 0x1}}, 0x18) fcntl$dupfd(r0, 0x406, r0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 324.224193ms ago: executing program 3 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x90}}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="10400000003f000008000a00", @ANYRES32=r3, @ANYBLOB="240012800b0001006272696467650000140002800500070006000000050029000100000049dc3146b108f51b1d361cb58e1ae5042c789d40307ed59508016a79d7055e92e5760649d1a82af8f6ce13b8852f2c2d46160b1bcf3e1ac2d15f0380dbe4f6f15c72"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3, 0x1, &(0x7f00000002c0)=""/5, 0x5}, &(0x7f0000000340)=0x40) ioctl$KVM_CAP_X2APIC_API(r9, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 256.446181ms ago: executing program 2 (id=1802): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048018000180080001006f7366000c00028008000140000000041c0001800a00010072656469720000000c00028008000140000000d32900ade107337a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x8c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000024c0)={'wlan0\x00'}) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0a6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9, 0x0, 0x1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x4002) 166.624722ms ago: executing program 2 (id=1803): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xfffffffffffffffe, 0x101000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000005b000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 165.484956ms ago: executing program 0 (id=1804): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000006c0)='page_pool_release\x00', r2, 0x0, 0x1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYRESDEC=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000006868c3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) chown(&(0x7f0000000400)='./file0\x00', r8, 0xffffffffffffffff) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x141000, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x7cc1, 0x401, 0x1, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3fb, 0x802, 0xc42, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x7f, 0x0, 0x315, 0x8000008c, 0xfffffffe, 0xa, 0xfffffff5, 0x10, 0x3, 0xab99, 0x2, 0x5, 0x8000000, 0xff]}) ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2000000, 0x0, 0x0, 0x5, 0x300000}]}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r10, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000006c0)='page_pool_release\x00', r2, 0x0, 0x1}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYRESDEC=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000006868c3, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) (async) chown(&(0x7f0000000400)='./file0\x00', r8, 0xffffffffffffffff) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x141000, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x7cc1, 0x401, 0x1, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3fb, 0x802, 0xc42, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x7f, 0x0, 0x315, 0x8000008c, 0xfffffffe, 0xa, 0xfffffff5, 0x10, 0x3, 0xab99, 0x2, 0x5, 0x8000000, 0xff]}) (async) ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2000000, 0x0, 0x0, 0x5, 0x300000}]}) (async) io_setup(0x1, &(0x7f00000004c0)) (async) io_submit(r10, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) 165.006591ms ago: executing program 2 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000011006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xdc}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x54a}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x812}, 0x0) 164.691491ms ago: executing program 0 (id=1806): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0}, 0x50) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 66.527678ms ago: executing program 0 (id=1807): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x7ff, 0x0) keyctl$join(0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 65.996475ms ago: executing program 3 (id=1808): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4000000) 773.716µs ago: executing program 0 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000001a000100000000000000000081"], 0x24}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r6, &(0x7f0000000bc0)=""/4096, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x17) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='br_fdb_add\x00', r7, 0x0, 0x3}, 0x18) (async) socket$netlink(0x10, 0x3, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRESOCT=r0, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r11, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) 276.449µs ago: executing program 2 (id=1810): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0xc000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e25, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xd3d4, 0x1, 0x0, 0x0, 0xfe9}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x3503, 0x3, 0x0, 0xba, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="3e3628359bf91657e41857fe417a821699307bc271ed47aabc25b5009d47531efcb556a00f5ce2439e00fede423e9b0bd12374ff01286f92645e77e3b391a6eb0491c4c96f8934565c87bf34abef5055ed2ad772d77c", 0x56, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '\\', 0x3a, '(#]}!/#', 0x3a, './file1', 0x3a, [0x46]}, 0x30) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x15, r8, r10, 0xfffffffdffffffff) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r6, r8}, &(0x7f0000000200)=""/8, 0x8, &(0x7f00000002c0)={&(0x7f0000000240)={'streebog512\x00'}, &(0x7f0000000440)="48544448514aedb9b629ffe7466a392c5c22f8213ea1f827402f76f287264e1402409b392301bba636c1015a023c4408d2da8cd457d7b30cd6dfb0c80c4de33d8c577c132a23bdbb3e24c97d16b163138a036a288035524892dbe3a4f13382cfb8ae5bcdd3c06163e2179b7be9365927f1a688c912caf8b5c058d5f3648ef71db008da7bfc87144eb699bda18efe566b5c42e771b7d9cab8bc0d", 0x9a}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x5b24, 0x0) 0s ago: executing program 0 (id=1811): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000), 0x4) sendfile(r3, r2, &(0x7f0000000180)=0x58, 0x3fffff) mmap(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x3000002, 0x4c831, r0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): [ 134.866547][T10958] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 134.866558][T10958] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 134.866569][T10958] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 134.866579][T10958] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 134.866588][T10958] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 134.866615][T10958] [ 134.866640][T10958] overlayfs: failed to clone upperpath [ 135.129753][T10968] program syz.2.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.131238][T10969] vivid-000: kernel_thread() failed [ 135.165652][T10978] netlink: 'syz.2.1178': attribute type 16 has an invalid length. [ 135.514217][T10988] FAULT_INJECTION: forcing a failure. [ 135.514217][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 135.519870][T10988] CPU: 1 UID: 0 PID: 10988 Comm: syz.4.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.519892][T10988] Tainted: [L]=SOFTLOCKUP [ 135.519896][T10988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.519902][T10988] Call Trace: [ 135.519906][T10988] [ 135.519911][T10988] dump_stack_lvl+0x16c/0x1f0 [ 135.519932][T10988] should_fail_ex+0x512/0x640 [ 135.519943][T10988] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 135.519961][T10988] should_failslab+0xc2/0x120 [ 135.519977][T10988] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 135.519992][T10988] ? kstrdup_const+0x63/0x80 [ 135.520007][T10988] ? kstrdup+0x53/0x100 [ 135.520016][T10988] kstrdup+0x53/0x100 [ 135.520027][T10988] kstrdup_const+0x63/0x80 [ 135.520039][T10988] alloc_vfsmnt+0xea/0x6b0 [ 135.520052][T10988] clone_mnt+0x4b/0x930 [ 135.520067][T10988] ? is_subdir+0x1a8/0x3e0 [ 135.520086][T10988] clone_private_mount+0x3cc/0x4f0 [ 135.520107][T10988] ovl_fill_super+0x950/0x6b30 [ 135.520142][T10988] ? lockdep_init_map_type+0x5c/0x270 [ 135.520165][T10988] ? __pfx_ovl_fill_super+0x10/0x10 [ 135.520185][T10988] ? __init_swait_queue_head+0xca/0x150 [ 135.520211][T10988] ? shrinker_register+0x1a8/0x260 [ 135.520226][T10988] ? sget_fc+0x808/0xc20 [ 135.520241][T10988] ? __pfx_set_anon_super_fc+0x10/0x10 [ 135.520254][T10988] ? __pfx_ovl_fill_super+0x10/0x10 [ 135.520266][T10988] get_tree_nodev+0xdd/0x190 [ 135.520282][T10988] vfs_get_tree+0x8e/0x330 [ 135.520294][T10988] path_mount+0x7bf/0x23a0 [ 135.520313][T10988] ? rcu_is_watching+0x12/0xc0 [ 135.520326][T10988] ? __pfx_path_mount+0x10/0x10 [ 135.520337][T10988] ? kmem_cache_free+0x2d8/0x770 [ 135.520349][T10988] ? putname+0xf5/0x1a0 [ 135.520367][T10988] ? putname+0xf5/0x1a0 [ 135.520396][T10988] ? putname+0xf5/0x1a0 [ 135.520416][T10988] ? __x64_sys_mount+0x293/0x310 [ 135.520426][T10988] __x64_sys_mount+0x293/0x310 [ 135.520438][T10988] ? __pfx___x64_sys_mount+0x10/0x10 [ 135.520453][T10988] do_syscall_64+0xcd/0xf80 [ 135.520471][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.520482][T10988] RIP: 0033:0x7f5a3cf8f7c9 [ 135.520493][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.520503][T10988] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.520515][T10988] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 135.520521][T10988] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 135.520528][T10988] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 135.520534][T10988] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 135.520540][T10988] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 135.520555][T10988] [ 135.520705][T10988] overlayfs: failed to clone upperpath [ 135.647462][ T4183] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.654474][ T4183] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.659641][ T4183] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.710154][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 135.735525][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1188'. [ 135.742424][T11011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.745342][T11010] can: request_module (can-proto-0) failed. [ 135.757741][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 135.798954][T11057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.803943][T11058] FAULT_INJECTION: forcing a failure. [ 135.803943][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 135.808632][T11058] CPU: 2 UID: 0 PID: 11058 Comm: syz.0.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.808656][T11058] Tainted: [L]=SOFTLOCKUP [ 135.808661][T11058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.808671][T11058] Call Trace: [ 135.808677][T11058] [ 135.808684][T11058] dump_stack_lvl+0x16c/0x1f0 [ 135.808710][T11058] should_fail_ex+0x512/0x640 [ 135.808725][T11058] ? __kmalloc_cache_noprof+0x5f/0x800 [ 135.808741][T11058] should_failslab+0xc2/0x120 [ 135.808760][T11058] __kmalloc_cache_noprof+0x80/0x800 [ 135.808775][T11058] ? ovl_init_fs_context+0x96/0x5f0 [ 135.808797][T11058] ? ovl_init_fs_context+0x96/0x5f0 [ 135.808813][T11058] ovl_init_fs_context+0x96/0x5f0 [ 135.808830][T11058] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 135.808848][T11058] alloc_fs_context+0x629/0xf50 [ 135.808867][T11058] path_mount+0xe21/0x23a0 [ 135.808882][T11058] ? rcu_is_watching+0x12/0xc0 [ 135.808899][T11058] ? __pfx_path_mount+0x10/0x10 [ 135.808913][T11058] ? kmem_cache_free+0x2d8/0x770 [ 135.808929][T11058] ? putname+0xf5/0x1a0 [ 135.808954][T11058] ? putname+0xf5/0x1a0 [ 135.808972][T11058] ? putname+0xf5/0x1a0 [ 135.808994][T11058] ? __x64_sys_mount+0x293/0x310 [ 135.809007][T11058] __x64_sys_mount+0x293/0x310 [ 135.809037][T11058] ? __pfx___x64_sys_mount+0x10/0x10 [ 135.809059][T11058] do_syscall_64+0xcd/0xf80 [ 135.809080][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.809094][T11058] RIP: 0033:0x7fc437d8f7c9 [ 135.809107][T11058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.809120][T11058] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.809135][T11058] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 135.809144][T11058] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 135.809152][T11058] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 135.809161][T11058] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 135.809169][T11058] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 135.809190][T11058] [ 135.829398][T11057] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 135.873634][T11060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11060 comm=syz.3.1189 [ 135.878093][T11057] overlayfs: failed to look up (tracing) for ino (-66) [ 135.896117][T11042] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 135.987559][T11081] FAULT_INJECTION: forcing a failure. [ 135.987559][T11081] name failslab, interval 1, probability 0, space 0, times 0 [ 136.001683][T11081] CPU: 2 UID: 0 PID: 11081 Comm: syz.2.1194 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.001709][T11081] Tainted: [L]=SOFTLOCKUP [ 136.001713][T11081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.001721][T11081] Call Trace: [ 136.001726][T11081] [ 136.001732][T11081] dump_stack_lvl+0x16c/0x1f0 [ 136.001755][T11081] should_fail_ex+0x512/0x640 [ 136.001767][T11081] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 136.001782][T11081] ? __pfx_ovl_inode_test+0x10/0x10 [ 136.001795][T11081] ? __pfx_ovl_inode_set+0x10/0x10 [ 136.001807][T11081] should_failslab+0xc2/0x120 [ 136.001824][T11081] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 136.001836][T11081] ? ilookup5+0x19f/0x230 [ 136.001848][T11081] ? __pfx_ovl_inode_test+0x10/0x10 [ 136.001861][T11081] ? ovl_alloc_inode+0x25/0x190 [ 136.001875][T11081] ? __pfx_ovl_inode_test+0x10/0x10 [ 136.001888][T11081] ? __pfx_ovl_inode_set+0x10/0x10 [ 136.001900][T11081] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 136.001912][T11081] ? ovl_alloc_inode+0x25/0x190 [ 136.001923][T11081] ovl_alloc_inode+0x25/0x190 [ 136.001936][T11081] alloc_inode+0x64/0x240 [ 136.001950][T11081] iget5_locked+0x67/0xb0 [ 136.001966][T11081] ovl_get_trap_inode+0xb2/0x210 [ 136.001982][T11081] ovl_fill_super+0xe48/0x6b30 [ 136.002006][T11081] ? lockdep_init_map_type+0x5c/0x270 [ 136.002024][T11081] ? __pfx_ovl_fill_super+0x10/0x10 [ 136.002037][T11081] ? __init_swait_queue_head+0xca/0x150 [ 136.002056][T11081] ? shrinker_register+0x1a8/0x260 [ 136.002071][T11081] ? sget_fc+0x808/0xc20 [ 136.002086][T11081] ? __pfx_set_anon_super_fc+0x10/0x10 [ 136.002101][T11081] ? __pfx_ovl_fill_super+0x10/0x10 [ 136.002113][T11081] get_tree_nodev+0xdd/0x190 [ 136.002131][T11081] vfs_get_tree+0x8e/0x330 [ 136.002144][T11081] path_mount+0x7bf/0x23a0 [ 136.002156][T11081] ? rcu_is_watching+0x12/0xc0 [ 136.002170][T11081] ? __pfx_path_mount+0x10/0x10 [ 136.002182][T11081] ? kmem_cache_free+0x2d8/0x770 [ 136.002195][T11081] ? putname+0xf5/0x1a0 [ 136.002216][T11081] ? putname+0xf5/0x1a0 [ 136.002231][T11081] ? putname+0xf5/0x1a0 [ 136.002251][T11081] ? __x64_sys_mount+0x293/0x310 [ 136.002262][T11081] __x64_sys_mount+0x293/0x310 [ 136.002274][T11081] ? __pfx___x64_sys_mount+0x10/0x10 [ 136.002292][T11081] do_syscall_64+0xcd/0xf80 [ 136.002336][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.002350][T11081] RIP: 0033:0x7f79c178f7c9 [ 136.002361][T11081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.002372][T11081] RSP: 002b:00007f79c26d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.002385][T11081] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 136.002393][T11081] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 136.002400][T11081] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 136.002408][T11081] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 136.002415][T11081] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 136.002433][T11081] [ 136.299253][T11105] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.864656][T11166] openvswitch: netlink: Key type 51 is out of range max 32 [ 136.898927][T11174] cgroup: Unknown subsys name 'cpuset' [ 136.926462][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 136.926474][ T40] audit: type=1400 audit(1768845937.754:609): avc: denied { map } for pid=11171 comm="syz.2.1209" path="socket:[32276]" dev="sockfs" ino=32276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 136.956197][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 136.959360][T11182] hsr_slave_0: left promiscuous mode [ 136.962057][T11182] hsr_slave_1: left promiscuous mode [ 136.997024][T11187] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 137.000344][T11187] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1211'. [ 137.008630][T11195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.011624][T11195] IPv6: NLM_F_CREATE should be set when creating new route [ 137.105876][T11201] bond5: entered promiscuous mode [ 137.107778][T11201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.113319][T11201] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.126907][T11201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.129475][T11243] random: crng reseeded on system resumption [ 137.134548][T11201] bond5: (slave lo): Enslaving as a backup interface with an up link [ 137.137418][T11201] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 137.157909][T11243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11243 comm=syz.0.1216 [ 137.208236][T11251] erspan0: entered promiscuous mode [ 137.226322][ T40] audit: type=1400 audit(1768845938.054:610): avc: denied { setattr } for pid=11255 comm="syz.2.1219" name="NETLINK" dev="sockfs" ino=29240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.242904][ T6618] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.247664][ T6618] bond5: (slave lo): link status up again after 0 ms [ 137.250244][ T6618] bond5: (slave lo): failed to get link speed/duplex [ 137.264525][T11258] futex_wake_op: syz.4.1220 tries to shift op by 32; fix this program [ 137.297251][ T5292] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 137.351662][ T1147] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.362014][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 137.384367][T11284] FAULT_INJECTION: forcing a failure. [ 137.384367][T11284] name failslab, interval 1, probability 0, space 0, times 0 [ 137.388606][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.0.1227 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.388624][T11284] Tainted: [L]=SOFTLOCKUP [ 137.388628][T11284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.388634][T11284] Call Trace: [ 137.388649][T11284] [ 137.388654][T11284] dump_stack_lvl+0x16c/0x1f0 [ 137.388688][T11284] should_fail_ex+0x512/0x640 [ 137.388705][T11284] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 137.388720][T11284] should_failslab+0xc2/0x120 [ 137.388735][T11284] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 137.388748][T11284] ? ovl_mount_dir+0x26/0x1f0 [ 137.388763][T11284] ? kstrdup+0x53/0x100 [ 137.388773][T11284] kstrdup+0x53/0x100 [ 137.388783][T11284] ovl_mount_dir+0x26/0x1f0 [ 137.388796][T11284] ovl_parse_param+0x10ae/0x15a0 [ 137.388811][T11284] ? selinux_fs_context_parse_param+0xd8/0x130 [ 137.388829][T11284] ? __pfx_ovl_parse_param+0x10/0x10 [ 137.388842][T11284] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 137.388856][T11284] ? static_key_count+0x5a/0x70 [ 137.388868][T11284] ? __pfx_ovl_parse_param+0x10/0x10 [ 137.388881][T11284] vfs_parse_fs_param+0x20b/0x3c0 [ 137.388892][T11284] vfs_parse_fs_qstr+0x138/0x1c0 [ 137.388903][T11284] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 137.388916][T11284] ? ovl_next_opt+0x143/0x1c0 [ 137.388928][T11284] ? __pfx_ovl_next_opt+0x10/0x10 [ 137.388939][T11284] vfs_parse_monolithic_sep+0x18d/0x210 [ 137.388950][T11284] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 137.388962][T11284] ? alloc_fs_context+0x677/0xf50 [ 137.388974][T11284] path_mount+0x76e/0x23a0 [ 137.388984][T11284] ? rcu_is_watching+0x12/0xc0 [ 137.388996][T11284] ? __pfx_path_mount+0x10/0x10 [ 137.389006][T11284] ? kmem_cache_free+0x2d8/0x770 [ 137.389017][T11284] ? putname+0xf5/0x1a0 [ 137.389034][T11284] ? putname+0xf5/0x1a0 [ 137.389048][T11284] ? putname+0xf5/0x1a0 [ 137.389064][T11284] ? __x64_sys_mount+0x293/0x310 [ 137.389073][T11284] __x64_sys_mount+0x293/0x310 [ 137.389082][T11284] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.389096][T11284] do_syscall_64+0xcd/0xf80 [ 137.389112][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.389122][T11284] RIP: 0033:0x7fc437d8f7c9 [ 137.389131][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.389140][T11284] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.389150][T11284] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 137.389156][T11284] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 137.389162][T11284] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 137.389167][T11284] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 137.389173][T11284] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 137.389186][T11284] [ 137.487158][ T61] bond5: (slave lo): failed to get link speed/duplex [ 137.547398][T11295] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 137.568865][T11295] bond6: entered promiscuous mode [ 137.571555][T11295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 137.611632][ T46] bond5: (slave lo): failed to get link speed/duplex [ 137.765915][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.768062][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.800580][T11346] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 137.804953][T11346] netlink: 'syz.4.1234': attribute type 4 has an invalid length. [ 137.808589][T11346] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1234'. [ 137.954186][T11365] FAULT_INJECTION: forcing a failure. [ 137.954186][T11365] name failslab, interval 1, probability 0, space 0, times 0 [ 137.967304][T11365] CPU: 2 UID: 0 PID: 11365 Comm: syz.0.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.967324][T11365] Tainted: [L]=SOFTLOCKUP [ 137.967328][T11365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.967336][T11365] Call Trace: [ 137.967341][T11365] [ 137.967347][T11365] dump_stack_lvl+0x16c/0x1f0 [ 137.967378][T11365] should_fail_ex+0x512/0x640 [ 137.967388][T11365] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 137.967401][T11365] should_failslab+0xc2/0x120 [ 137.967416][T11365] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 137.967427][T11365] ? shmem_alloc_inode+0x25/0x50 [ 137.967441][T11365] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 137.967453][T11365] ? shmem_alloc_inode+0x25/0x50 [ 137.967464][T11365] shmem_alloc_inode+0x25/0x50 [ 137.967476][T11365] alloc_inode+0x64/0x240 [ 137.967488][T11365] new_inode+0x22/0x1c0 [ 137.967500][T11365] shmem_get_inode+0x19a/0xfb0 [ 137.967517][T11365] shmem_mknod+0x1a2/0x3b0 [ 137.967540][T11365] shmem_mkdir+0x31/0x80 [ 137.967559][T11365] vfs_mkdir+0x731/0xb60 [ 137.967576][T11365] ovl_workdir_create+0x454/0xa80 [ 137.967592][T11365] ? __pfx_ovl_workdir_create+0x10/0x10 [ 137.967608][T11365] ? mnt_get_write_access+0x1e9/0x2f0 [ 137.967622][T11365] ovl_fill_super+0xf09/0x6b30 [ 137.967641][T11365] ? lockdep_init_map_type+0x5c/0x270 [ 137.967656][T11365] ? __pfx_ovl_fill_super+0x10/0x10 [ 137.967666][T11365] ? __init_swait_queue_head+0xca/0x150 [ 137.967683][T11365] ? shrinker_register+0x1a8/0x260 [ 137.967694][T11365] ? sget_fc+0x808/0xc20 [ 137.967706][T11365] ? __pfx_set_anon_super_fc+0x10/0x10 [ 137.967719][T11365] ? __pfx_ovl_fill_super+0x10/0x10 [ 137.967730][T11365] get_tree_nodev+0xdd/0x190 [ 137.967744][T11365] vfs_get_tree+0x8e/0x330 [ 137.967755][T11365] path_mount+0x7bf/0x23a0 [ 137.967765][T11365] ? rcu_is_watching+0x12/0xc0 [ 137.967777][T11365] ? __pfx_path_mount+0x10/0x10 [ 137.967786][T11365] ? kmem_cache_free+0x2d8/0x770 [ 137.967797][T11365] ? putname+0xf5/0x1a0 [ 137.967815][T11365] ? putname+0xf5/0x1a0 [ 137.967828][T11365] ? putname+0xf5/0x1a0 [ 137.967845][T11365] ? __x64_sys_mount+0x293/0x310 [ 137.967854][T11365] __x64_sys_mount+0x293/0x310 [ 137.967864][T11365] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.967878][T11365] do_syscall_64+0xcd/0xf80 [ 137.967893][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.967904][T11365] RIP: 0033:0x7fc437d8f7c9 [ 137.967912][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.967922][T11365] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.967935][T11365] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 137.967945][T11365] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 137.967954][T11365] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 137.967960][T11365] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 137.967966][T11365] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 137.967979][T11365] [ 137.968000][T11365] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 138.169234][T11377] FAULT_INJECTION: forcing a failure. [ 138.169234][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 138.175149][T11377] CPU: 2 UID: 0 PID: 11377 Comm: syz.0.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.175168][T11377] Tainted: [L]=SOFTLOCKUP [ 138.175171][T11377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.175177][T11377] Call Trace: [ 138.175192][T11377] [ 138.175196][T11377] dump_stack_lvl+0x16c/0x1f0 [ 138.175230][T11377] should_fail_ex+0x512/0x640 [ 138.175245][T11377] ? kmem_cache_alloc_noprof+0x62/0x770 [ 138.175258][T11377] should_failslab+0xc2/0x120 [ 138.175273][T11377] kmem_cache_alloc_noprof+0x83/0x770 [ 138.175283][T11377] ? getname_kernel+0x52/0x370 [ 138.175301][T11377] ? getname_kernel+0x52/0x370 [ 138.175316][T11377] getname_kernel+0x52/0x370 [ 138.175332][T11377] kern_path+0x1d/0x50 [ 138.175345][T11377] ovl_mount_dir+0x13e/0x1f0 [ 138.175359][T11377] ovl_parse_param+0x10ae/0x15a0 [ 138.175377][T11377] ? selinux_fs_context_parse_param+0xd8/0x130 [ 138.175393][T11377] ? __pfx_ovl_parse_param+0x10/0x10 [ 138.175405][T11377] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 138.175419][T11377] ? static_key_count+0x5a/0x70 [ 138.175432][T11377] ? __pfx_ovl_parse_param+0x10/0x10 [ 138.175444][T11377] vfs_parse_fs_param+0x20b/0x3c0 [ 138.175456][T11377] vfs_parse_fs_qstr+0x138/0x1c0 [ 138.175466][T11377] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 138.175480][T11377] ? ovl_next_opt+0x143/0x1c0 [ 138.175492][T11377] ? __pfx_ovl_next_opt+0x10/0x10 [ 138.175503][T11377] vfs_parse_monolithic_sep+0x18d/0x210 [ 138.175514][T11377] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 138.175526][T11377] ? alloc_fs_context+0x677/0xf50 [ 138.175538][T11377] path_mount+0x76e/0x23a0 [ 138.175548][T11377] ? rcu_is_watching+0x12/0xc0 [ 138.175560][T11377] ? __pfx_path_mount+0x10/0x10 [ 138.175569][T11377] ? kmem_cache_free+0x2d8/0x770 [ 138.175580][T11377] ? putname+0xf5/0x1a0 [ 138.175597][T11377] ? putname+0xf5/0x1a0 [ 138.175610][T11377] ? putname+0xf5/0x1a0 [ 138.175628][T11377] ? __x64_sys_mount+0x293/0x310 [ 138.175637][T11377] __x64_sys_mount+0x293/0x310 [ 138.175647][T11377] ? __pfx___x64_sys_mount+0x10/0x10 [ 138.175660][T11377] do_syscall_64+0xcd/0xf80 [ 138.175676][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.175687][T11377] RIP: 0033:0x7fc437d8f7c9 [ 138.175697][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.175706][T11377] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.175719][T11377] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 138.175728][T11377] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 138.175736][T11377] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 138.175743][T11377] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 138.175751][T11377] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 138.175770][T11377] [ 138.175777][T11377] overlayfs: failed to resolve './bus': -12 [ 138.329282][T11384] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1242'. [ 138.451266][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 138.471088][T11404] program syz.2.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.548478][T11427] btrfs: Unknown parameter 'norecoveryT}|&' [ 138.562000][T11425] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 138.566794][T11425] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 138.581999][ T6469] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.600156][T11432] overlayfs: failed to resolve './bus': -2 [ 138.609069][T11432] overlayfs: missing 'workdir' [ 138.615840][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 138.640951][T11436] FAULT_INJECTION: forcing a failure. [ 138.640951][T11436] name failslab, interval 1, probability 0, space 0, times 0 [ 138.651897][T11436] CPU: 2 UID: 0 PID: 11436 Comm: syz.2.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.651916][T11436] Tainted: [L]=SOFTLOCKUP [ 138.651920][T11436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.651926][T11436] Call Trace: [ 138.651930][T11436] [ 138.651935][T11436] dump_stack_lvl+0x16c/0x1f0 [ 138.651954][T11436] should_fail_ex+0x512/0x640 [ 138.651964][T11436] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 138.651979][T11436] should_failslab+0xc2/0x120 [ 138.651993][T11436] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 138.652018][T11436] ? kasan_quarantine_put+0x10a/0x240 [ 138.652041][T11436] ? ovl_do_parse_layer+0x33/0x1290 [ 138.652058][T11436] ? kstrdup+0x53/0x100 [ 138.652067][T11436] kstrdup+0x53/0x100 [ 138.652077][T11436] ovl_do_parse_layer+0x33/0x1290 [ 138.652090][T11436] ? ovl_mount_dir+0x15a/0x1f0 [ 138.652103][T11436] ovl_parse_param+0x10e3/0x15a0 [ 138.652116][T11436] ? selinux_fs_context_parse_param+0xd8/0x130 [ 138.652132][T11436] ? __pfx_ovl_parse_param+0x10/0x10 [ 138.652144][T11436] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 138.652159][T11436] ? static_key_count+0x5a/0x70 [ 138.652171][T11436] ? __pfx_ovl_parse_param+0x10/0x10 [ 138.652183][T11436] vfs_parse_fs_param+0x20b/0x3c0 [ 138.652195][T11436] vfs_parse_fs_qstr+0x138/0x1c0 [ 138.652206][T11436] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 138.652220][T11436] ? ovl_next_opt+0x143/0x1c0 [ 138.652232][T11436] ? __pfx_ovl_next_opt+0x10/0x10 [ 138.652242][T11436] vfs_parse_monolithic_sep+0x18d/0x210 [ 138.652254][T11436] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 138.652266][T11436] ? alloc_fs_context+0x677/0xf50 [ 138.652278][T11436] path_mount+0x76e/0x23a0 [ 138.652289][T11436] ? rcu_is_watching+0x12/0xc0 [ 138.652306][T11436] ? __pfx_path_mount+0x10/0x10 [ 138.652316][T11436] ? kmem_cache_free+0x2d8/0x770 [ 138.652327][T11436] ? putname+0xf5/0x1a0 [ 138.652345][T11436] ? putname+0xf5/0x1a0 [ 138.652359][T11436] ? putname+0xf5/0x1a0 [ 138.652375][T11436] ? __x64_sys_mount+0x293/0x310 [ 138.652384][T11436] __x64_sys_mount+0x293/0x310 [ 138.652394][T11436] ? __pfx___x64_sys_mount+0x10/0x10 [ 138.652408][T11436] do_syscall_64+0xcd/0xf80 [ 138.652423][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.652433][T11436] RIP: 0033:0x7f79c178f7c9 [ 138.652443][T11436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.652452][T11436] RSP: 002b:00007f79c26d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.652463][T11436] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 138.652469][T11436] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 138.652475][T11436] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 138.652481][T11436] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 138.652486][T11436] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 138.652500][T11436] [ 138.667443][T11439] ubi0: attaching mtd0 [ 138.746616][ T6469] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 138.752112][T11439] ubi0 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 138.756979][ T6469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.788498][ T6469] usb 5-1: Product: syz [ 138.789951][ T6469] usb 5-1: Manufacturer: syz [ 138.791624][ T6469] usb 5-1: SerialNumber: syz [ 138.795678][ T6469] usb 5-1: config 0 descriptor?? [ 138.887665][ T40] audit: type=1400 audit(1768845939.714:611): avc: denied { getopt } for pid=11464 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.923481][T11472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1260'. [ 139.010035][ T40] audit: type=1400 audit(1768845939.834:612): avc: denied { ioctl } for pid=11466 comm="syz.2.1259" path="socket:[29354]" dev="sockfs" ino=29354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.010454][ T850] usb 5-1: USB disconnect, device number 17 [ 139.024704][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 139.028322][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 139.139061][T11498] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 139.143858][ T40] audit: type=1400 audit(1768845939.974:613): avc: denied { accept } for pid=11496 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.157502][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1264'. [ 139.177729][ T40] audit: type=1400 audit(1768845940.004:614): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 139.264756][T11516] netlink: 'syz.2.1268': attribute type 21 has an invalid length. [ 139.385836][T11526] FAULT_INJECTION: forcing a failure. [ 139.385836][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 139.391260][T11526] CPU: 3 UID: 0 PID: 11526 Comm: syz.2.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.391286][T11526] Tainted: [L]=SOFTLOCKUP [ 139.391291][T11526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.391300][T11526] Call Trace: [ 139.391306][T11526] [ 139.391320][T11526] dump_stack_lvl+0x16c/0x1f0 [ 139.391346][T11526] should_fail_ex+0x512/0x640 [ 139.391364][T11526] should_failslab+0xc2/0x120 [ 139.391385][T11526] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 139.391405][T11526] ? sidtab_sid2str_get+0x17a/0x680 [ 139.391433][T11526] ? kmemdup_noprof+0x29/0x60 [ 139.391447][T11526] kmemdup_noprof+0x29/0x60 [ 139.391478][T11526] sidtab_sid2str_get+0x17a/0x680 [ 139.391506][T11526] sidtab_entry_to_string+0x33/0x110 [ 139.391529][T11526] security_sid_to_context_core+0x35c/0x640 [ 139.391553][T11526] selinux_inode_init_security+0x45f/0x660 [ 139.391578][T11526] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 139.391599][T11526] ? rcu_is_watching+0x12/0xc0 [ 139.391615][T11526] ? __kmalloc_noprof+0x35d/0x910 [ 139.391630][T11526] ? security_inode_init_security+0x113/0x370 [ 139.391652][T11526] security_inode_init_security+0x1bc/0x370 [ 139.391669][T11526] ? __pfx_shmem_initxattrs+0x10/0x10 [ 139.391688][T11526] ? __pfx_security_inode_init_security+0x10/0x10 [ 139.391713][T11526] shmem_mknod+0x229/0x3b0 [ 139.391737][T11526] shmem_mkdir+0x31/0x80 [ 139.391757][T11526] vfs_mkdir+0x731/0xb60 [ 139.391780][T11526] ovl_workdir_create+0x454/0xa80 [ 139.391806][T11526] ? __pfx_ovl_workdir_create+0x10/0x10 [ 139.391831][T11526] ? mnt_get_write_access+0x1e9/0x2f0 [ 139.391854][T11526] ovl_fill_super+0xf09/0x6b30 [ 139.391885][T11526] ? lockdep_init_map_type+0x5c/0x270 [ 139.391907][T11526] ? __pfx_ovl_fill_super+0x10/0x10 [ 139.391922][T11526] ? __init_swait_queue_head+0xca/0x150 [ 139.391946][T11526] ? shrinker_register+0x1a8/0x260 [ 139.391962][T11526] ? sget_fc+0x808/0xc20 [ 139.391981][T11526] ? __pfx_set_anon_super_fc+0x10/0x10 [ 139.392000][T11526] ? __pfx_ovl_fill_super+0x10/0x10 [ 139.392016][T11526] get_tree_nodev+0xdd/0x190 [ 139.392036][T11526] vfs_get_tree+0x8e/0x330 [ 139.392052][T11526] path_mount+0x7bf/0x23a0 [ 139.392067][T11526] ? rcu_is_watching+0x12/0xc0 [ 139.392084][T11526] ? __pfx_path_mount+0x10/0x10 [ 139.392100][T11526] ? kmem_cache_free+0x2d8/0x770 [ 139.392116][T11526] ? putname+0xf5/0x1a0 [ 139.392143][T11526] ? putname+0xf5/0x1a0 [ 139.392162][T11526] ? putname+0xf5/0x1a0 [ 139.392187][T11526] ? __x64_sys_mount+0x293/0x310 [ 139.392200][T11526] __x64_sys_mount+0x293/0x310 [ 139.392215][T11526] ? __pfx___x64_sys_mount+0x10/0x10 [ 139.392239][T11526] do_syscall_64+0xcd/0xf80 [ 139.392263][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.392278][T11526] RIP: 0033:0x7f79c178f7c9 [ 139.392292][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.392307][T11526] RSP: 002b:00007f79c26d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.392328][T11526] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 139.392338][T11526] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 139.392347][T11526] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 139.392356][T11526] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 139.392364][T11526] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 139.392389][T11526] [ 139.544279][T11526] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 139.590765][T11535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11535 comm=syz.0.1275 [ 139.631245][T11545] Failed to initialize the IGMP autojoin socket (err -2) [ 139.664312][ T40] audit: type=1400 audit(1768845940.484:615): avc: denied { getopt } for pid=11541 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.720617][ T40] audit: type=1400 audit(1768845940.544:616): avc: denied { create } for pid=11544 comm="syz.4.1277" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.728588][T11556] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 139.729943][ T40] audit: type=1400 audit(1768845940.554:617): avc: denied { unlink } for pid=11544 comm="syz.4.1277" name="file0" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.777048][T11633] FAULT_INJECTION: forcing a failure. [ 139.777048][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 139.781069][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.4.1283 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.781087][T11633] Tainted: [L]=SOFTLOCKUP [ 139.781090][T11633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.781096][T11633] Call Trace: [ 139.781101][T11633] [ 139.781105][T11633] dump_stack_lvl+0x16c/0x1f0 [ 139.781124][T11633] should_fail_ex+0x512/0x640 [ 139.781136][T11633] should_failslab+0xc2/0x120 [ 139.781152][T11633] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 139.781166][T11633] ? sidtab_sid2str_get+0x17a/0x680 [ 139.781184][T11633] ? kmemdup_noprof+0x29/0x60 [ 139.781195][T11633] kmemdup_noprof+0x29/0x60 [ 139.781206][T11633] sidtab_sid2str_get+0x17a/0x680 [ 139.781222][T11633] sidtab_entry_to_string+0x33/0x110 [ 139.781238][T11633] security_sid_to_context_core+0x35c/0x640 [ 139.781255][T11633] selinux_inode_init_security+0x45f/0x660 [ 139.781272][T11633] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 139.781286][T11633] ? rcu_is_watching+0x12/0xc0 [ 139.781297][T11633] ? __kmalloc_noprof+0x35d/0x910 [ 139.781307][T11633] ? security_inode_init_security+0x113/0x370 [ 139.781321][T11633] security_inode_init_security+0x1bc/0x370 [ 139.781332][T11633] ? __pfx_shmem_initxattrs+0x10/0x10 [ 139.781345][T11633] ? __pfx_security_inode_init_security+0x10/0x10 [ 139.781360][T11633] shmem_mknod+0x229/0x3b0 [ 139.781376][T11633] shmem_mkdir+0x31/0x80 [ 139.781390][T11633] vfs_mkdir+0x731/0xb60 [ 139.781404][T11633] ovl_workdir_create+0x454/0xa80 [ 139.781420][T11633] ? __pfx_ovl_workdir_create+0x10/0x10 [ 139.781436][T11633] ? mnt_get_write_access+0x1e9/0x2f0 [ 139.781450][T11633] ovl_fill_super+0xf09/0x6b30 [ 139.781481][T11633] ? lockdep_init_map_type+0x5c/0x270 [ 139.781498][T11633] ? __pfx_ovl_fill_super+0x10/0x10 [ 139.781509][T11633] ? __init_swait_queue_head+0xca/0x150 [ 139.781526][T11633] ? shrinker_register+0x1a8/0x260 [ 139.781537][T11633] ? sget_fc+0x808/0xc20 [ 139.781550][T11633] ? __pfx_set_anon_super_fc+0x10/0x10 [ 139.781566][T11633] ? __pfx_ovl_fill_super+0x10/0x10 [ 139.781578][T11633] get_tree_nodev+0xdd/0x190 [ 139.781592][T11633] vfs_get_tree+0x8e/0x330 [ 139.781603][T11633] path_mount+0x7bf/0x23a0 [ 139.781612][T11633] ? rcu_is_watching+0x12/0xc0 [ 139.781623][T11633] ? __pfx_path_mount+0x10/0x10 [ 139.781633][T11633] ? kmem_cache_free+0x2d8/0x770 [ 139.781644][T11633] ? putname+0xf5/0x1a0 [ 139.781661][T11633] ? putname+0xf5/0x1a0 [ 139.781675][T11633] ? putname+0xf5/0x1a0 [ 139.781692][T11633] ? __x64_sys_mount+0x293/0x310 [ 139.781701][T11633] __x64_sys_mount+0x293/0x310 [ 139.781711][T11633] ? __pfx___x64_sys_mount+0x10/0x10 [ 139.781726][T11633] do_syscall_64+0xcd/0xf80 [ 139.781797][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.781811][T11633] RIP: 0033:0x7f5a3cf8f7c9 [ 139.781820][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.781832][T11633] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.781842][T11633] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 139.781848][T11633] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 139.781854][T11633] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 139.781860][T11633] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 139.781865][T11633] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 139.781880][T11633] [ 139.903282][T11633] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 139.923502][ T40] audit: type=1326 audit(1768845940.744:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.0.1287" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc437d8f7c9 code=0x0 [ 140.032891][T11662] overlay: Unknown parameter 'smackfstransmute' [ 140.063369][T11662] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.066764][T11662] overlayfs: failed to set xattr on upper [ 140.069221][T11662] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.076970][T11662] overlayfs: ...falling back to index=off. [ 140.079749][T11662] overlayfs: ...falling back to uuid=null. [ 140.082464][T11662] overlayfs: conflicting lowerdir path [ 140.096997][T11675] ceph: Path missing in source [ 140.200129][T11692] FAULT_INJECTION: forcing a failure. [ 140.200129][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 140.206565][T11692] CPU: 3 UID: 0 PID: 11692 Comm: syz.0.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.206593][T11692] Tainted: [L]=SOFTLOCKUP [ 140.206599][T11692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.206609][T11692] Call Trace: [ 140.206614][T11692] [ 140.206621][T11692] dump_stack_lvl+0x16c/0x1f0 [ 140.206655][T11692] should_fail_ex+0x512/0x640 [ 140.206670][T11692] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 140.206695][T11692] should_failslab+0xc2/0x120 [ 140.206717][T11692] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 140.206738][T11692] ? ovl_parse_param+0x6ac/0x15a0 [ 140.206763][T11692] ? kstrdup+0x53/0x100 [ 140.206778][T11692] kstrdup+0x53/0x100 [ 140.206796][T11692] ovl_parse_param+0x6ac/0x15a0 [ 140.206820][T11692] ? __pfx_ovl_parse_param+0x10/0x10 [ 140.206840][T11692] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 140.206863][T11692] ? static_key_count+0x5a/0x70 [ 140.206895][T11692] ? __pfx_ovl_parse_param+0x10/0x10 [ 140.206919][T11692] vfs_parse_fs_param+0x20b/0x3c0 [ 140.206939][T11692] vfs_parse_fs_qstr+0x138/0x1c0 [ 140.206957][T11692] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 140.206983][T11692] ? ovl_next_opt+0x143/0x1c0 [ 140.207003][T11692] ? __pfx_ovl_next_opt+0x10/0x10 [ 140.207020][T11692] vfs_parse_monolithic_sep+0x18d/0x210 [ 140.207039][T11692] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 140.207059][T11692] ? alloc_fs_context+0x677/0xf50 [ 140.207081][T11692] path_mount+0x76e/0x23a0 [ 140.207097][T11692] ? rcu_is_watching+0x12/0xc0 [ 140.207117][T11692] ? __pfx_path_mount+0x10/0x10 [ 140.207133][T11692] ? kmem_cache_free+0x2d8/0x770 [ 140.207151][T11692] ? putname+0xf5/0x1a0 [ 140.207180][T11692] ? putname+0xf5/0x1a0 [ 140.207202][T11692] ? putname+0xf5/0x1a0 [ 140.207229][T11692] ? __x64_sys_mount+0x293/0x310 [ 140.207244][T11692] __x64_sys_mount+0x293/0x310 [ 140.207261][T11692] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.207286][T11692] do_syscall_64+0xcd/0xf80 [ 140.207311][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.207328][T11692] RIP: 0033:0x7fc437d8f7c9 [ 140.207342][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.207357][T11692] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.207373][T11692] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 140.207383][T11692] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 140.207392][T11692] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 140.207402][T11692] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 140.207411][T11692] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 140.207436][T11692] [ 140.361730][T11701] random: crng reseeded on system resumption [ 140.366987][T11701] Restarting kernel threads ... [ 140.370215][T11701] Done restarting kernel threads. [ 140.445235][T11705] erspan2: entered promiscuous mode [ 140.453677][T11721] FAULT_INJECTION: forcing a failure. [ 140.453677][T11721] name failslab, interval 1, probability 0, space 0, times 0 [ 140.458937][T11721] CPU: 0 UID: 0 PID: 11721 Comm: syz.4.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.458963][T11721] Tainted: [L]=SOFTLOCKUP [ 140.458970][T11721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.458979][T11721] Call Trace: [ 140.458985][T11721] [ 140.458993][T11721] dump_stack_lvl+0x16c/0x1f0 [ 140.459019][T11721] should_fail_ex+0x512/0x640 [ 140.459035][T11721] ? __kmalloc_noprof+0xca/0x910 [ 140.459055][T11721] should_failslab+0xc2/0x120 [ 140.459077][T11721] __kmalloc_noprof+0xeb/0x910 [ 140.459092][T11721] ? shmem_initxattrs+0x168/0x5b0 [ 140.459117][T11721] ? shmem_initxattrs+0x168/0x5b0 [ 140.459137][T11721] shmem_initxattrs+0x168/0x5b0 [ 140.459155][T11721] ? evm_inode_init_security+0x233/0x2f0 [ 140.459183][T11721] security_inode_init_security+0x242/0x370 [ 140.459203][T11721] ? __pfx_shmem_initxattrs+0x10/0x10 [ 140.459222][T11721] ? __pfx_security_inode_init_security+0x10/0x10 [ 140.459249][T11721] shmem_mknod+0x229/0x3b0 [ 140.459275][T11721] shmem_mkdir+0x31/0x80 [ 140.459297][T11721] vfs_mkdir+0x731/0xb60 [ 140.459320][T11721] ovl_workdir_create+0x454/0xa80 [ 140.459348][T11721] ? __pfx_ovl_workdir_create+0x10/0x10 [ 140.459380][T11721] ? mnt_get_write_access+0x1e9/0x2f0 [ 140.459404][T11721] ovl_fill_super+0xf09/0x6b30 [ 140.459439][T11721] ? lockdep_init_map_type+0x5c/0x270 [ 140.459463][T11721] ? __pfx_ovl_fill_super+0x10/0x10 [ 140.459481][T11721] ? __init_swait_queue_head+0xca/0x150 [ 140.459508][T11721] ? shrinker_register+0x1a8/0x260 [ 140.459526][T11721] ? sget_fc+0x808/0xc20 [ 140.459547][T11721] ? __pfx_set_anon_super_fc+0x10/0x10 [ 140.459568][T11721] ? __pfx_ovl_fill_super+0x10/0x10 [ 140.459587][T11721] get_tree_nodev+0xdd/0x190 [ 140.459610][T11721] vfs_get_tree+0x8e/0x330 [ 140.459628][T11721] path_mount+0x7bf/0x23a0 [ 140.459644][T11721] ? rcu_is_watching+0x12/0xc0 [ 140.459662][T11721] ? __pfx_path_mount+0x10/0x10 [ 140.459679][T11721] ? kmem_cache_free+0x2d8/0x770 [ 140.459696][T11721] ? putname+0xf5/0x1a0 [ 140.459724][T11721] ? putname+0xf5/0x1a0 [ 140.459746][T11721] ? putname+0xf5/0x1a0 [ 140.459771][T11721] ? __x64_sys_mount+0x293/0x310 [ 140.459786][T11721] __x64_sys_mount+0x293/0x310 [ 140.459804][T11721] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.459829][T11721] do_syscall_64+0xcd/0xf80 [ 140.459855][T11721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.459874][T11721] RIP: 0033:0x7f5a3cf8f7c9 [ 140.459887][T11721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.459903][T11721] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.459918][T11721] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 140.459927][T11721] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 140.459936][T11721] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 140.459945][T11721] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 140.459955][T11721] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 140.459981][T11721] [ 140.460085][T11721] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 140.669114][T11745] FAULT_INJECTION: forcing a failure. [ 140.669114][T11745] name failslab, interval 1, probability 0, space 0, times 0 [ 140.669761][T11743] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 140.673747][T11745] CPU: 3 UID: 0 PID: 11745 Comm: syz.0.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.673765][T11745] Tainted: [L]=SOFTLOCKUP [ 140.673769][T11745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.673775][T11745] Call Trace: [ 140.673778][T11745] [ 140.673782][T11745] dump_stack_lvl+0x16c/0x1f0 [ 140.673801][T11745] should_fail_ex+0x512/0x640 [ 140.673810][T11745] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 140.673826][T11745] should_failslab+0xc2/0x120 [ 140.673840][T11745] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 140.673853][T11745] ? ovl_mount_dir+0x26/0x1f0 [ 140.673865][T11745] ? rcu_is_watching+0x12/0xc0 [ 140.673877][T11745] ? kstrdup+0x53/0x100 [ 140.673887][T11745] kstrdup+0x53/0x100 [ 140.673897][T11745] ovl_mount_dir+0x26/0x1f0 [ 140.673911][T11745] ovl_parse_param+0xdaf/0x15a0 [ 140.673925][T11745] ? __pfx_ovl_parse_param+0x10/0x10 [ 140.673937][T11745] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 140.673952][T11745] ? static_key_count+0x5a/0x70 [ 140.673964][T11745] ? __pfx_ovl_parse_param+0x10/0x10 [ 140.673976][T11745] vfs_parse_fs_param+0x20b/0x3c0 [ 140.673988][T11745] vfs_parse_fs_qstr+0x138/0x1c0 [ 140.673998][T11745] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 140.674012][T11745] ? ovl_next_opt+0x143/0x1c0 [ 140.674024][T11745] ? __pfx_ovl_next_opt+0x10/0x10 [ 140.674035][T11745] vfs_parse_monolithic_sep+0x18d/0x210 [ 140.674050][T11745] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 140.674065][T11745] ? alloc_fs_context+0x677/0xf50 [ 140.674083][T11745] path_mount+0x76e/0x23a0 [ 140.674099][T11745] ? rcu_is_watching+0x12/0xc0 [ 140.674118][T11745] ? __pfx_path_mount+0x10/0x10 [ 140.674150][T11745] ? kmem_cache_free+0x2d8/0x770 [ 140.674166][T11745] ? putname+0xf5/0x1a0 [ 140.674191][T11745] ? putname+0xf5/0x1a0 [ 140.674209][T11745] ? putname+0xf5/0x1a0 [ 140.674233][T11745] ? __x64_sys_mount+0x293/0x310 [ 140.674248][T11745] __x64_sys_mount+0x293/0x310 [ 140.674262][T11745] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.674300][T11745] ? rcu_is_watching+0x12/0xc0 [ 140.674316][T11745] do_syscall_64+0xcd/0xf80 [ 140.674332][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.674347][T11745] RIP: 0033:0x7fc437d8f7c9 [ 140.674355][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.674365][T11745] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.674376][T11745] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 140.674382][T11745] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 140.674388][T11745] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 140.674394][T11745] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 140.674399][T11745] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 140.674413][T11745] [ 140.723265][T11753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=11753 comm=syz.4.1306 [ 140.763830][T11757] tmpfs: Unknown parameter 'nVinodes' [ 140.809920][T11757] (syz.0.1310,11757,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 140.814230][T11757] (syz.0.1310,11757,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 140.829341][T11763] FAULT_INJECTION: forcing a failure. [ 140.829341][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 140.841326][T11763] CPU: 2 UID: 0 PID: 11763 Comm: syz.3.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.841374][T11763] Tainted: [L]=SOFTLOCKUP [ 140.841381][T11763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.841390][T11763] Call Trace: [ 140.841396][T11763] [ 140.841403][T11763] dump_stack_lvl+0x16c/0x1f0 [ 140.841432][T11763] should_fail_ex+0x512/0x640 [ 140.841449][T11763] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 140.841480][T11763] ? __pfx_ovl_inode_test+0x10/0x10 [ 140.841501][T11763] ? __pfx_ovl_inode_set+0x10/0x10 [ 140.841516][T11763] should_failslab+0xc2/0x120 [ 140.841541][T11763] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 140.841558][T11763] ? ilookup5+0x19f/0x230 [ 140.841579][T11763] ? __pfx_ovl_inode_test+0x10/0x10 [ 140.841596][T11763] ? ovl_alloc_inode+0x25/0x190 [ 140.841617][T11763] ? __pfx_ovl_inode_test+0x10/0x10 [ 140.841634][T11763] ? __pfx_ovl_inode_set+0x10/0x10 [ 140.841650][T11763] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 140.841666][T11763] ? ovl_alloc_inode+0x25/0x190 [ 140.841682][T11763] ovl_alloc_inode+0x25/0x190 [ 140.841698][T11763] alloc_inode+0x64/0x240 [ 140.841715][T11763] iget5_locked+0x67/0xb0 [ 140.841732][T11763] ? mnt_get_write_access+0x1e9/0x2f0 [ 140.841754][T11763] ovl_get_trap_inode+0xb2/0x210 [ 140.841776][T11763] ovl_fill_super+0xf72/0x6b30 [ 140.841808][T11763] ? lockdep_init_map_type+0x5c/0x270 [ 140.841832][T11763] ? __pfx_ovl_fill_super+0x10/0x10 [ 140.841850][T11763] ? __init_swait_queue_head+0xca/0x150 [ 140.841874][T11763] ? shrinker_register+0x1a8/0x260 [ 140.841894][T11763] ? sget_fc+0x808/0xc20 [ 140.841915][T11763] ? __pfx_set_anon_super_fc+0x10/0x10 [ 140.841936][T11763] ? __pfx_ovl_fill_super+0x10/0x10 [ 140.841954][T11763] get_tree_nodev+0xdd/0x190 [ 140.841978][T11763] vfs_get_tree+0x8e/0x330 [ 140.841997][T11763] path_mount+0x7bf/0x23a0 [ 140.842014][T11763] ? rcu_is_watching+0x12/0xc0 [ 140.842033][T11763] ? __pfx_path_mount+0x10/0x10 [ 140.842050][T11763] ? kmem_cache_free+0x2d8/0x770 [ 140.842065][T11763] ? putname+0xf5/0x1a0 [ 140.842093][T11763] ? putname+0xf5/0x1a0 [ 140.842114][T11763] ? putname+0xf5/0x1a0 [ 140.842140][T11763] ? __x64_sys_mount+0x293/0x310 [ 140.842155][T11763] __x64_sys_mount+0x293/0x310 [ 140.842171][T11763] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.842193][T11763] do_syscall_64+0xcd/0xf80 [ 140.842219][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.842236][T11763] RIP: 0033:0x7fe0dc38f7c9 [ 140.842250][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.842283][T11763] RSP: 002b:00007fe0dd304038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.842302][T11763] RAX: ffffffffffffffda RBX: 00007fe0dc5e5fa0 RCX: 00007fe0dc38f7c9 [ 140.842312][T11763] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 140.842321][T11763] RBP: 00007fe0dd304090 R08: 0000200000000140 R09: 0000000000000000 [ 140.842331][T11763] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 140.842340][T11763] R13: 00007fe0dc5e6038 R14: 00007fe0dc5e5fa0 R15: 00007fff9d529738 [ 140.842362][T11763] [ 140.857003][T11769] Sensor A: ================= START STATUS ================= [ 140.916473][T11772] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 140.916707][T11769] Sensor A: Test Pattern: [ 140.919778][T11772] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 140.978757][T11769] 75% Colorbar [ 140.979850][T11769] Sensor A: Show Information: All [ 140.981431][T11769] Sensor A: Vertical Flip: true [ 140.983172][T11769] Sensor A: Horizontal Flip: false [ 140.984804][T11769] Sensor A: Brightness: 128 [ 140.986244][T11769] Sensor A: Contrast: 128 [ 140.987659][T11769] Sensor A: Hue: 0 [ 140.988860][T11769] Sensor A: Saturation: 128 [ 140.990317][T11769] Sensor A: ================== END STATUS ================== [ 141.033366][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 141.187190][ T9] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 141.191018][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 141.194776][ T9] usb 7-1: Product: syz [ 141.196516][ T9] usb 7-1: Manufacturer: syz [ 141.198441][ T9] usb 7-1: SerialNumber: syz [ 141.209332][ T9] usb 7-1: config 0 descriptor?? [ 141.225141][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 141.228510][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 141.244305][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.248799][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 141.252339][ T9] usb 7-1: media controller created [ 141.265357][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.291626][ T6010] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 141.363909][ T46] net_ratelimit: 32 callbacks suppressed [ 141.363926][ T46] bond5: (slave lo): failed to get link speed/duplex [ 141.364712][T11815] FAULT_INJECTION: forcing a failure. [ 141.364712][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 141.373473][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.4.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.373490][T11815] Tainted: [L]=SOFTLOCKUP [ 141.373494][T11815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.373500][T11815] Call Trace: [ 141.373505][T11815] [ 141.373509][T11815] dump_stack_lvl+0x16c/0x1f0 [ 141.373528][T11815] should_fail_ex+0x512/0x640 [ 141.373538][T11815] ? fs_reclaim_acquire+0xae/0x150 [ 141.373553][T11815] should_failslab+0xc2/0x120 [ 141.373568][T11815] kmem_cache_alloc_noprof+0x83/0x770 [ 141.373578][T11815] ? __pfx_map_id_range_down+0x10/0x10 [ 141.373591][T11815] ? security_inode_alloc+0x3b/0x2b0 [ 141.373606][T11815] ? security_inode_alloc+0x3b/0x2b0 [ 141.373618][T11815] security_inode_alloc+0x3b/0x2b0 [ 141.373631][T11815] inode_init_always_gfp+0xced/0x1040 [ 141.373648][T11815] ? __pfx_ovl_inode_test+0x10/0x10 [ 141.373659][T11815] ? __pfx_ovl_inode_set+0x10/0x10 [ 141.373669][T11815] alloc_inode+0x86/0x240 [ 141.373681][T11815] iget5_locked+0x67/0xb0 [ 141.373691][T11815] ? mnt_get_write_access+0x1e9/0x2f0 [ 141.373704][T11815] ovl_get_trap_inode+0xb2/0x210 [ 141.373717][T11815] ovl_fill_super+0xf72/0x6b30 [ 141.373737][T11815] ? lockdep_init_map_type+0x5c/0x270 [ 141.373751][T11815] ? __pfx_ovl_fill_super+0x10/0x10 [ 141.373762][T11815] ? __init_swait_queue_head+0xca/0x150 [ 141.373778][T11815] ? shrinker_register+0x1a8/0x260 [ 141.373790][T11815] ? sget_fc+0x808/0xc20 [ 141.373803][T11815] ? __pfx_set_anon_super_fc+0x10/0x10 [ 141.373815][T11815] ? __pfx_ovl_fill_super+0x10/0x10 [ 141.373826][T11815] get_tree_nodev+0xdd/0x190 [ 141.373840][T11815] vfs_get_tree+0x8e/0x330 [ 141.373851][T11815] path_mount+0x7bf/0x23a0 [ 141.373861][T11815] ? rcu_is_watching+0x12/0xc0 [ 141.373873][T11815] ? __pfx_path_mount+0x10/0x10 [ 141.373883][T11815] ? kmem_cache_free+0x2d8/0x770 [ 141.373895][T11815] ? putname+0xf5/0x1a0 [ 141.373912][T11815] ? putname+0xf5/0x1a0 [ 141.373926][T11815] ? putname+0xf5/0x1a0 [ 141.373942][T11815] ? __x64_sys_mount+0x293/0x310 [ 141.373951][T11815] __x64_sys_mount+0x293/0x310 [ 141.373961][T11815] ? __pfx___x64_sys_mount+0x10/0x10 [ 141.373975][T11815] do_syscall_64+0xcd/0xf80 [ 141.373991][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.374002][T11815] RIP: 0033:0x7f5a3cf8f7c9 [ 141.374011][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.374021][T11815] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.374031][T11815] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 141.374037][T11815] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 141.374043][T11815] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 141.374048][T11815] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 141.374054][T11815] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 141.374067][T11815] [ 141.431681][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.481690][ T46] bond5: (slave lo): failed to get link speed/duplex [ 141.487220][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.509108][ T6010] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.509550][ T5292] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 141.513054][T11748] dvb-usb: bulk message failed: -22 (33/0) [ 141.513196][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.522139][ T9] cxusb: set interface failed [ 141.524111][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 141.531994][ T6010] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.536015][ T6010] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.539004][ T6010] usb 5-1: Manufacturer: syz [ 141.542981][T11830] overlayfs: failed to resolve './bus': -2 [ 141.550233][ T6010] usb 5-1: config 0 descriptor?? [ 141.561173][ T9] DVB: Unable to find symbol mt352_attach() [ 141.573104][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 141.576992][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 141.581095][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 141.604340][ T46] bond5: (slave lo): failed to get link speed/duplex [ 141.621665][ T6010] rc_core: IR keymap rc-hauppauge not found [ 141.624262][ T6010] Registered IR keymap rc-empty [ 141.630656][ T6010] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 141.635249][ T9] rc_core: IR keymap rc-dvico-mce not found [ 141.638064][ T9] Registered IR keymap rc-empty [ 141.648563][ T6010] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 141.653656][ T9] rc rc1: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1 [ 141.662460][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1/input24 [ 141.679581][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 141.687701][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 141.704472][ T9] usb 7-1: USB disconnect, device number 10 [ 141.713196][ T6622] bond5: (slave lo): failed to get link speed/duplex [ 141.761749][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 141.768690][ T6010] usb 5-1: USB disconnect, device number 18 [ 141.778385][T11884] random: crng reseeded on system resumption [ 141.822086][ T4183] bond5: (slave lo): failed to get link speed/duplex [ 141.877042][T11898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 141.880049][T11898] overlayfs: missing 'lowerdir' [ 141.880605][T11896] macsec1: entered promiscuous mode [ 141.884360][T11896] macsec1: entered allmulticast mode [ 141.887058][T11903] FAULT_INJECTION: forcing a failure. [ 141.887058][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 141.895287][T11903] CPU: 3 UID: 0 PID: 11903 Comm: syz.4.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.895312][T11903] Tainted: [L]=SOFTLOCKUP [ 141.895317][T11903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.895326][T11903] Call Trace: [ 141.895337][T11903] [ 141.895343][T11903] dump_stack_lvl+0x16c/0x1f0 [ 141.895370][T11903] should_fail_ex+0x512/0x640 [ 141.895383][T11903] ? kmem_cache_alloc_noprof+0x62/0x770 [ 141.895403][T11903] should_failslab+0xc2/0x120 [ 141.895423][T11903] kmem_cache_alloc_noprof+0x83/0x770 [ 141.895439][T11903] ? alloc_empty_file+0x55/0x1e0 [ 141.895459][T11903] ? alloc_empty_file+0x55/0x1e0 [ 141.895473][T11903] alloc_empty_file+0x55/0x1e0 [ 141.895489][T11903] dentry_open+0x46/0xd0 [ 141.895503][T11903] ovl_path_open+0x198/0x1f0 [ 141.895521][T11903] ovl_check_d_type_supported+0xa1/0x230 [ 141.895537][T11903] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 141.895551][T11903] ? __pfx_wake_up_var+0x10/0x10 [ 141.895569][T11903] ? __pfx_ovl_check_d_type+0x10/0x10 [ 141.895597][T11903] ? do_raw_spin_unlock+0x172/0x230 [ 141.895620][T11903] ? _raw_spin_unlock+0x28/0x50 [ 141.895641][T11903] ovl_fill_super+0xfc9/0x6b30 [ 141.895673][T11903] ? lockdep_init_map_type+0x5c/0x270 [ 141.895694][T11903] ? __pfx_ovl_fill_super+0x10/0x10 [ 141.895710][T11903] ? __init_swait_queue_head+0xca/0x150 [ 141.895733][T11903] ? shrinker_register+0x1a8/0x260 [ 141.895751][T11903] ? sget_fc+0x808/0xc20 [ 141.895769][T11903] ? __pfx_set_anon_super_fc+0x10/0x10 [ 141.895788][T11903] ? __pfx_ovl_fill_super+0x10/0x10 [ 141.895803][T11903] get_tree_nodev+0xdd/0x190 [ 141.895824][T11903] vfs_get_tree+0x8e/0x330 [ 141.895840][T11903] path_mount+0x7bf/0x23a0 [ 141.895855][T11903] ? rcu_is_watching+0x12/0xc0 [ 141.895873][T11903] ? __pfx_path_mount+0x10/0x10 [ 141.895889][T11903] ? kmem_cache_free+0x2d8/0x770 [ 141.895905][T11903] ? putname+0xf5/0x1a0 [ 141.895933][T11903] ? putname+0xf5/0x1a0 [ 141.895952][T11903] ? putname+0xf5/0x1a0 [ 141.895977][T11903] ? __x64_sys_mount+0x293/0x310 [ 141.895991][T11903] __x64_sys_mount+0x293/0x310 [ 141.896007][T11903] ? __pfx___x64_sys_mount+0x10/0x10 [ 141.896030][T11903] do_syscall_64+0xcd/0xf80 [ 141.896052][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.896068][T11903] RIP: 0033:0x7f5a3cf8f7c9 [ 141.896082][T11903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.896096][T11903] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.896111][T11903] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 141.896120][T11903] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 141.896129][T11903] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 141.896138][T11903] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 141.896147][T11903] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 141.896170][T11903] [ 142.004510][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 142.073227][T11922] No source specified [ 142.121880][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 142.142499][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 142.142522][ T40] audit: type=1400 audit(1768845942.974:635): avc: denied { connect } for pid=11931 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.189328][T11942] tipc: Started in network mode [ 142.191191][T11942] tipc: Node identity 84e, cluster identity 4711 [ 142.194012][T11942] tipc: Node number set to 2126 [ 142.198883][T11932] input: syz1 as /devices/virtual/input/input25 [ 142.232417][ T6623] bond5: (slave lo): failed to get link speed/duplex [ 142.325376][ T40] audit: type=1400 audit(1768845943.154:636): avc: denied { write } for pid=11952 comm="syz.4.1343" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.342472][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 142.348340][T11970] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 142.451966][ T46] bond5: (slave lo): failed to get link speed/duplex [ 142.481623][ T6010] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 142.509092][T11973] __nla_validate_parse: 14 callbacks suppressed [ 142.509108][T11973] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1346'. [ 142.610905][T11990] FAULT_INJECTION: forcing a failure. [ 142.610905][T11990] name failslab, interval 1, probability 0, space 0, times 0 [ 142.616048][T11990] CPU: 3 UID: 0 PID: 11990 Comm: syz.4.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.616074][T11990] Tainted: [L]=SOFTLOCKUP [ 142.616079][T11990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.616088][T11990] Call Trace: [ 142.616093][T11990] [ 142.616098][T11990] dump_stack_lvl+0x16c/0x1f0 [ 142.616119][T11990] should_fail_ex+0x512/0x640 [ 142.616130][T11990] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 142.616145][T11990] should_failslab+0xc2/0x120 [ 142.616160][T11990] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 142.616172][T11990] ? kasan_quarantine_put+0x10a/0x240 [ 142.616184][T11990] ? ovl_do_parse_layer+0x33/0x1290 [ 142.616199][T11990] ? kstrdup+0x53/0x100 [ 142.616208][T11990] kstrdup+0x53/0x100 [ 142.616219][T11990] ovl_do_parse_layer+0x33/0x1290 [ 142.616231][T11990] ? ovl_mount_dir+0x15a/0x1f0 [ 142.616245][T11990] ovl_parse_param+0xdd9/0x15a0 [ 142.616259][T11990] ? __pfx_ovl_parse_param+0x10/0x10 [ 142.616271][T11990] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 142.616285][T11990] ? static_key_count+0x5a/0x70 [ 142.616297][T11990] ? __pfx_ovl_parse_param+0x10/0x10 [ 142.616310][T11990] vfs_parse_fs_param+0x20b/0x3c0 [ 142.616321][T11990] vfs_parse_fs_qstr+0x138/0x1c0 [ 142.616332][T11990] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 142.616346][T11990] ? ovl_next_opt+0x143/0x1c0 [ 142.616358][T11990] ? __pfx_ovl_next_opt+0x10/0x10 [ 142.616370][T11990] vfs_parse_monolithic_sep+0x18d/0x210 [ 142.616382][T11990] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 142.616393][T11990] ? alloc_fs_context+0x677/0xf50 [ 142.616406][T11990] path_mount+0x76e/0x23a0 [ 142.616416][T11990] ? rcu_is_watching+0x12/0xc0 [ 142.616428][T11990] ? __pfx_path_mount+0x10/0x10 [ 142.616438][T11990] ? kmem_cache_free+0x2d8/0x770 [ 142.616448][T11990] ? putname+0xf5/0x1a0 [ 142.616466][T11990] ? putname+0xf5/0x1a0 [ 142.616480][T11990] ? putname+0xf5/0x1a0 [ 142.616496][T11990] ? __x64_sys_mount+0x293/0x310 [ 142.616505][T11990] __x64_sys_mount+0x293/0x310 [ 142.616515][T11990] ? __pfx___x64_sys_mount+0x10/0x10 [ 142.616528][T11990] do_syscall_64+0xcd/0xf80 [ 142.616544][T11990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.616554][T11990] RIP: 0033:0x7f5a3cf8f7c9 [ 142.616562][T11990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.616572][T11990] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.616582][T11990] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 142.616588][T11990] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 142.616594][T11990] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 142.616600][T11990] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 142.616605][T11990] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 142.616624][T11990] [ 142.650038][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 142.705544][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 142.708926][ T6010] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.722297][T11997] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.722821][ T6010] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.725290][T11997] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 142.728010][ T6010] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.730587][T11997] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.733239][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.735444][T11997] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 142.744732][T11954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.793056][ T6010] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.879902][T12023] FAULT_INJECTION: forcing a failure. [ 142.879902][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 142.888038][T12023] CPU: 3 UID: 0 PID: 12023 Comm: syz.4.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.888066][T12023] Tainted: [L]=SOFTLOCKUP [ 142.888071][T12023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.888081][T12023] Call Trace: [ 142.888086][T12023] [ 142.888093][T12023] dump_stack_lvl+0x16c/0x1f0 [ 142.888119][T12023] should_fail_ex+0x512/0x640 [ 142.888135][T12023] ? fs_reclaim_acquire+0xae/0x150 [ 142.888159][T12023] should_failslab+0xc2/0x120 [ 142.888180][T12023] __kmalloc_noprof+0xeb/0x910 [ 142.888196][T12023] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.888225][T12023] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.888248][T12023] tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.888277][T12023] tomoyo_check_open_permission+0x2ab/0x3c0 [ 142.888297][T12023] ? alloc_empty_file+0x73/0x1e0 [ 142.888313][T12023] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 142.888333][T12023] ? ovl_fill_super+0xfc9/0x6b30 [ 142.888352][T12023] ? path_mount+0x7bf/0x23a0 [ 142.888366][T12023] ? __x64_sys_mount+0x293/0x310 [ 142.888405][T12023] ? do_raw_spin_lock+0x12c/0x2b0 [ 142.888436][T12023] tomoyo_file_open+0x6b/0x90 [ 142.888453][T12023] security_file_open+0x84/0x1e0 [ 142.888478][T12023] do_dentry_open+0x597/0x1590 [ 142.888501][T12023] ? lockdep_init_map_type+0x5c/0x270 [ 142.888532][T12023] vfs_open+0x82/0x3f0 [ 142.888551][T12023] dentry_open+0x71/0xd0 [ 142.888566][T12023] ovl_path_open+0x198/0x1f0 [ 142.888585][T12023] ovl_check_d_type_supported+0xa1/0x230 [ 142.888602][T12023] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 142.888618][T12023] ? __pfx_wake_up_var+0x10/0x10 [ 142.888635][T12023] ? __pfx_ovl_check_d_type+0x10/0x10 [ 142.888668][T12023] ? do_raw_spin_unlock+0x172/0x230 [ 142.888692][T12023] ? _raw_spin_unlock+0x28/0x50 [ 142.888714][T12023] ovl_fill_super+0xfc9/0x6b30 [ 142.888749][T12023] ? lockdep_init_map_type+0x5c/0x270 [ 142.888771][T12023] ? __pfx_ovl_fill_super+0x10/0x10 [ 142.888788][T12023] ? __init_swait_queue_head+0xca/0x150 [ 142.888812][T12023] ? shrinker_register+0x1a8/0x260 [ 142.888832][T12023] ? sget_fc+0x808/0xc20 [ 142.888852][T12023] ? __pfx_set_anon_super_fc+0x10/0x10 [ 142.888872][T12023] ? __pfx_ovl_fill_super+0x10/0x10 [ 142.888890][T12023] get_tree_nodev+0xdd/0x190 [ 142.888912][T12023] vfs_get_tree+0x8e/0x330 [ 142.888929][T12023] path_mount+0x7bf/0x23a0 [ 142.888944][T12023] ? rcu_is_watching+0x12/0xc0 [ 142.888963][T12023] ? __pfx_path_mount+0x10/0x10 [ 142.888980][T12023] ? kmem_cache_free+0x2d8/0x770 [ 142.888998][T12023] ? putname+0xf5/0x1a0 [ 142.889025][T12023] ? putname+0xf5/0x1a0 [ 142.889045][T12023] ? putname+0xf5/0x1a0 [ 142.889069][T12023] ? __x64_sys_mount+0x293/0x310 [ 142.889084][T12023] __x64_sys_mount+0x293/0x310 [ 142.889101][T12023] ? __pfx___x64_sys_mount+0x10/0x10 [ 142.889125][T12023] do_syscall_64+0xcd/0xf80 [ 142.889149][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.889166][T12023] RIP: 0033:0x7f5a3cf8f7c9 [ 142.889179][T12023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.889194][T12023] RSP: 002b:00007f5a3dd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.889210][T12023] RAX: ffffffffffffffda RBX: 00007f5a3d1e5fa0 RCX: 00007f5a3cf8f7c9 [ 142.889221][T12023] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 142.889230][T12023] RBP: 00007f5a3dd59090 R08: 0000200000000140 R09: 0000000000000000 [ 142.889239][T12023] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 142.889247][T12023] R13: 00007f5a3d1e6038 R14: 00007f5a3d1e5fa0 R15: 00007ffd300530c8 [ 142.889271][T12023] [ 142.889279][T12023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.120100][ T40] audit: type=1400 audit(1768845943.944:637): avc: denied { mount } for pid=12065 comm="syz.2.1359" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.120689][T12066] overlay: ./file0 is not a directory [ 143.171902][T12068] FAULT_INJECTION: forcing a failure. [ 143.171902][T12068] name failslab, interval 1, probability 0, space 0, times 0 [ 143.176150][T12068] CPU: 0 UID: 0 PID: 12068 Comm: syz.0.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.176168][T12068] Tainted: [L]=SOFTLOCKUP [ 143.176172][T12068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.176178][T12068] Call Trace: [ 143.176182][T12068] [ 143.176186][T12068] dump_stack_lvl+0x16c/0x1f0 [ 143.176206][T12068] should_fail_ex+0x512/0x640 [ 143.176215][T12068] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 143.176231][T12068] should_failslab+0xc2/0x120 [ 143.176246][T12068] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 143.176259][T12068] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 143.176269][T12068] ? kfree+0x2f8/0x6e0 [ 143.176280][T12068] ? kmemdup_nul+0x49/0xf0 [ 143.176289][T12068] kmemdup_nul+0x49/0xf0 [ 143.176300][T12068] vfs_parse_fs_qstr+0x112/0x1c0 [ 143.176310][T12068] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 143.176324][T12068] ? ovl_next_opt+0x143/0x1c0 [ 143.176337][T12068] ? __pfx_ovl_next_opt+0x10/0x10 [ 143.176348][T12068] vfs_parse_monolithic_sep+0x18d/0x210 [ 143.176365][T12068] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 143.176376][T12068] ? alloc_fs_context+0x677/0xf50 [ 143.176389][T12068] path_mount+0x76e/0x23a0 [ 143.176399][T12068] ? rcu_is_watching+0x12/0xc0 [ 143.176411][T12068] ? __pfx_path_mount+0x10/0x10 [ 143.176420][T12068] ? kmem_cache_free+0x2d8/0x770 [ 143.176431][T12068] ? putname+0xf5/0x1a0 [ 143.176448][T12068] ? putname+0xf5/0x1a0 [ 143.176462][T12068] ? putname+0xf5/0x1a0 [ 143.176479][T12068] ? __x64_sys_mount+0x293/0x310 [ 143.176488][T12068] __x64_sys_mount+0x293/0x310 [ 143.176498][T12068] ? __pfx___x64_sys_mount+0x10/0x10 [ 143.176511][T12068] do_syscall_64+0xcd/0xf80 [ 143.176528][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.176539][T12068] RIP: 0033:0x7fc437d8f7c9 [ 143.176547][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.176558][T12068] RSP: 002b:00007fc438c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.176567][T12068] RAX: ffffffffffffffda RBX: 00007fc437fe5fa0 RCX: 00007fc437d8f7c9 [ 143.176574][T12068] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 143.176579][T12068] RBP: 00007fc438c28090 R08: 0000200000000140 R09: 0000000000000000 [ 143.176585][T12068] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 143.176591][T12068] R13: 00007fc437fe6038 R14: 00007fc437fe5fa0 R15: 00007ffe71c92398 [ 143.176604][T12068] [ 143.186730][T12069] 9p: Bad value for 'wfdno' [ 143.438739][T12085] FAULT_INJECTION: forcing a failure. [ 143.438739][T12085] name failslab, interval 1, probability 0, space 0, times 0 [ 143.448987][T12085] CPU: 0 UID: 0 PID: 12085 Comm: syz.2.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.449022][T12085] Tainted: [L]=SOFTLOCKUP [ 143.449028][T12085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.449039][T12085] Call Trace: [ 143.449046][T12085] [ 143.449054][T12085] dump_stack_lvl+0x16c/0x1f0 [ 143.449081][T12085] should_fail_ex+0x512/0x640 [ 143.449094][T12085] ? fs_reclaim_acquire+0xae/0x150 [ 143.449119][T12085] should_failslab+0xc2/0x120 [ 143.449144][T12085] __kmalloc_noprof+0xeb/0x910 [ 143.449163][T12085] ? tomoyo_encode2+0x100/0x3e0 [ 143.449193][T12085] ? tomoyo_encode2+0x100/0x3e0 [ 143.449218][T12085] tomoyo_encode2+0x100/0x3e0 [ 143.449245][T12085] tomoyo_encode+0x29/0x50 [ 143.449268][T12085] tomoyo_realpath_from_path+0x18f/0x6e0 [ 143.449303][T12085] tomoyo_check_open_permission+0x2ab/0x3c0 [ 143.449325][T12085] ? alloc_empty_file+0x73/0x1e0 [ 143.449345][T12085] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 143.449366][T12085] ? ovl_fill_super+0xfc9/0x6b30 [ 143.449387][T12085] ? path_mount+0x7bf/0x23a0 [ 143.449403][T12085] ? __x64_sys_mount+0x293/0x310 [ 143.449445][T12085] ? do_raw_spin_lock+0x12c/0x2b0 [ 143.449486][T12085] tomoyo_file_open+0x6b/0x90 [ 143.449505][T12085] security_file_open+0x84/0x1e0 [ 143.449533][T12085] do_dentry_open+0x597/0x1590 [ 143.449559][T12085] ? lockdep_init_map_type+0x5c/0x270 [ 143.449586][T12085] vfs_open+0x82/0x3f0 [ 143.449607][T12085] dentry_open+0x71/0xd0 [ 143.449624][T12085] ovl_path_open+0x198/0x1f0 [ 143.449643][T12085] ovl_check_d_type_supported+0xa1/0x230 [ 143.449662][T12085] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 143.449679][T12085] ? __pfx_wake_up_var+0x10/0x10 [ 143.449698][T12085] ? __pfx_ovl_check_d_type+0x10/0x10 [ 143.449733][T12085] ? do_raw_spin_unlock+0x172/0x230 [ 143.449759][T12085] ? _raw_spin_unlock+0x28/0x50 [ 143.449784][T12085] ovl_fill_super+0xfc9/0x6b30 [ 143.449822][T12085] ? lockdep_init_map_type+0x5c/0x270 [ 143.449847][T12085] ? __pfx_ovl_fill_super+0x10/0x10 [ 143.449868][T12085] ? __init_swait_queue_head+0xca/0x150 [ 143.449895][T12085] ? shrinker_register+0x1a8/0x260 [ 143.449934][T12085] ? sget_fc+0x808/0xc20 [ 143.449956][T12085] ? __pfx_set_anon_super_fc+0x10/0x10 [ 143.449979][T12085] ? __pfx_ovl_fill_super+0x10/0x10 [ 143.449998][T12085] get_tree_nodev+0xdd/0x190 [ 143.450022][T12085] vfs_get_tree+0x8e/0x330 [ 143.450043][T12085] path_mount+0x7bf/0x23a0 [ 143.450062][T12085] ? rcu_is_watching+0x12/0xc0 [ 143.450083][T12085] ? __pfx_path_mount+0x10/0x10 [ 143.450101][T12085] ? kmem_cache_free+0x2d8/0x770 [ 143.450121][T12085] ? putname+0xf5/0x1a0 [ 143.450152][T12085] ? putname+0xf5/0x1a0 [ 143.450176][T12085] ? putname+0xf5/0x1a0 [ 143.450204][T12085] ? __x64_sys_mount+0x293/0x310 [ 143.450221][T12085] __x64_sys_mount+0x293/0x310 [ 143.450238][T12085] ? __pfx___x64_sys_mount+0x10/0x10 [ 143.450290][T12085] do_syscall_64+0xcd/0xf80 [ 143.450318][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.450332][T12085] RIP: 0033:0x7f79c178f7c9 [ 143.450345][T12085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.450362][T12085] RSP: 002b:00007f79c26d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.450381][T12085] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 143.450392][T12085] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 143.450402][T12085] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 143.450414][T12085] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 143.450425][T12085] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 143.450452][T12085] [ 143.450626][T12085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.746065][T12094] FAULT_INJECTION: forcing a failure. [ 143.746065][T12094] name failslab, interval 1, probability 0, space 0, times 0 [ 143.752176][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.2.1369 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.752194][T12094] Tainted: [L]=SOFTLOCKUP [ 143.752197][T12094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.752203][T12094] Call Trace: [ 143.752207][T12094] [ 143.752211][T12094] dump_stack_lvl+0x16c/0x1f0 [ 143.752231][T12094] should_fail_ex+0x512/0x640 [ 143.752242][T12094] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 143.752258][T12094] should_failslab+0xc2/0x120 [ 143.752272][T12094] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 143.752285][T12094] ? ovl_mount_dir+0x26/0x1f0 [ 143.752301][T12094] ? kstrdup+0x53/0x100 [ 143.752411][T12094] kstrdup+0x53/0x100 [ 143.752422][T12094] ovl_mount_dir+0x26/0x1f0 [ 143.752435][T12094] ovl_parse_param+0x10ae/0x15a0 [ 143.752448][T12094] ? selinux_fs_context_parse_param+0xd8/0x130 [ 143.752464][T12094] ? __pfx_ovl_parse_param+0x10/0x10 [ 143.752476][T12094] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 143.752490][T12094] ? static_key_count+0x5a/0x70 [ 143.752502][T12094] ? __pfx_ovl_parse_param+0x10/0x10 [ 143.752515][T12094] vfs_parse_fs_param+0x20b/0x3c0 [ 143.752527][T12094] vfs_parse_fs_qstr+0x138/0x1c0 [ 143.752538][T12094] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 143.752556][T12094] ? ovl_next_opt+0x143/0x1c0 [ 143.752568][T12094] ? __pfx_ovl_next_opt+0x10/0x10 [ 143.752579][T12094] vfs_parse_monolithic_sep+0x18d/0x210 [ 143.752590][T12094] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 143.752602][T12094] ? alloc_fs_context+0x677/0xf50 [ 143.752615][T12094] path_mount+0x76e/0x23a0 [ 143.752624][T12094] ? rcu_is_watching+0x12/0xc0 [ 143.752636][T12094] ? __pfx_path_mount+0x10/0x10 [ 143.752646][T12094] ? kmem_cache_free+0x2d8/0x770 [ 143.752657][T12094] ? putname+0xf5/0x1a0 [ 143.752674][T12094] ? putname+0xf5/0x1a0 [ 143.752688][T12094] ? putname+0xf5/0x1a0 [ 143.752704][T12094] ? __x64_sys_mount+0x293/0x310 [ 143.752713][T12094] __x64_sys_mount+0x293/0x310 [ 143.752723][T12094] ? __pfx___x64_sys_mount+0x10/0x10 [ 143.752737][T12094] do_syscall_64+0xcd/0xf80 [ 143.752752][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.752763][T12094] RIP: 0033:0x7f79c178f7c9 [ 143.752773][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.752782][T12094] RSP: 002b:00007f79c26d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.752792][T12094] RAX: ffffffffffffffda RBX: 00007f79c19e5fa0 RCX: 00007f79c178f7c9 [ 143.752798][T12094] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 143.752804][T12094] RBP: 00007f79c26d0090 R08: 0000200000000140 R09: 0000000000000000 [ 143.752810][T12094] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 143.752815][T12094] R13: 00007f79c19e6038 R14: 00007f79c19e5fa0 R15: 00007fff2ad121d8 [ 143.752828][T12094] [ 143.894853][ T40] audit: type=1400 audit(1768845944.724:638): avc: denied { setattr } for pid=12099 comm="syz.2.1372" name="file0" dev="9p" ino=71827747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.146498][T12115] netlink: 'syz.2.1377': attribute type 23 has an invalid length. [ 144.157918][T12115] bridge4: entered promiscuous mode [ 144.327419][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1380'. [ 144.416347][ T40] audit: type=1400 audit(1768845945.244:639): avc: denied { relabelfrom } for pid=12185 comm="syz.2.1381" name="" dev="pipefs" ino=35342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 144.416842][T12186] overlayfs: failed lookup in lower (newroot/403, name='file0', err=-40): overlapping layers [ 144.434833][T12186] overlayfs: workdir and upperdir must be separate subtrees [ 144.516900][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 144.523771][T12194] hpfs: Bad magic ... probably not HPFS [ 144.894127][ T40] audit: type=1400 audit(1768845945.724:640): avc: denied { create } for pid=12201 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 145.025472][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 145.028519][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 145.054146][ T61] bond1: (slave bond0): link status definitely down, disabling slave [ 145.058734][ T61] bond1: now running without any active interface! [ 145.071974][ T40] audit: type=1400 audit(1768845945.904:641): avc: denied { ioctl } for pid=12214 comm="syz.4.1391" path="net:[4026533764]" dev="nsfs" ino=4026533764 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.124256][T12217] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 145.126960][T12217] cramfs: wrong magic [ 145.207240][ T6469] usb 8-1: USB disconnect, device number 6 [ 145.220709][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1393'. [ 145.344061][T12248] XFS (nbd3): SB validate failed with error -5. [ 145.419204][T12260] usb usb8: usbfs: process 12260 (syz.3.1399) did not claim interface 0 before use [ 145.522306][T12276] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1404'. [ 145.539930][T12271] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 145.542528][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1400'. [ 145.635433][T12296] overlayfs: failed to verify upper root origin [ 145.672155][ T40] audit: type=1400 audit(1768845946.504:642): avc: denied { execute } for pid=12300 comm="syz.2.1408" path="/409/file0/cgroup.controllers" dev="9p" ino=71827931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.743898][ T40] audit: type=1400 audit(1768845946.574:643): avc: denied { watch watch_reads } for pid=12306 comm="syz.0.1411" path="pipe:[6266]" dev="pipefs" ino=6266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 145.882948][T12311] could not allocate digest TFM handle cryptd(blake2b-160) [ 145.902523][ T40] audit: type=1400 audit(1768845946.734:644): avc: denied { bind } for pid=12331 comm="syz.0.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.101823][ T6007] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 146.241689][ T6007] usb 7-1: device descriptor read/64, error -71 [ 146.261568][ T6469] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.421582][ T6469] usb 5-1: Using ep0 maxpacket: 8 [ 146.425433][ T6469] usb 5-1: config 1 interface 0 has no altsetting 0 [ 146.431660][ T6469] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 146.434927][ T6469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.437609][ T6469] usb 5-1: Product: 霪昝⧩˅ᱭ㛹❯淌받ㅆ嘯쮻邦虏਀ۈ琢굏Ƞ喝ܒ筹˱噌᪤닩咽♙໴鵃칥炵䇶팙焺嵋㵕ᢉ垗ᬪ [ 146.442508][ T6469] usb 5-1: Manufacturer: А [ 146.442997][ T61] net_ratelimit: 34 callbacks suppressed [ 146.443010][ T61] bond5: (slave lo): failed to get link speed/duplex [ 146.444013][ T6469] usb 5-1: SerialNumber: 尌邡嵥뭢ᾬ⭴烽픘駃㲱ㇿ揰唕贈ྯꁶ㑞捚⽌ࡓ啠䋖㉻ᩡ糹㵜麥ꪚ臯偕辧㬭뀗祕欴骗檉씜╮ও얊踞ᙕ沤ᵛ鱆뤹諒朅盬滌걛槇㤖N晅솴纅䑱겤쮎୩䭆㟃㲕⟡ꌽ㏃꠴덒焮ꌫ [ 146.481996][ T6007] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 146.551602][ T6623] bond5: (slave lo): failed to get link speed/duplex [ 146.631872][ T6007] usb 7-1: device descriptor read/64, error -71 [ 146.661871][ T7242] bond5: (slave lo): failed to get link speed/duplex [ 146.741719][ T6007] usb usb7-port1: attempt power cycle [ 146.771738][ T6625] bond5: (slave lo): failed to get link speed/duplex [ 146.863867][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.868015][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.882182][ T7242] bond5: (slave lo): failed to get link speed/duplex [ 146.903879][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.909738][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.916241][ T6469] usbhid 5-1:1.0: can't add hid device: -71 [ 146.918371][ T6469] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 146.925635][ T6469] usb 5-1: USB disconnect, device number 19 [ 146.991685][ T6625] bond5: (slave lo): failed to get link speed/duplex [ 147.091635][ T6007] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 147.101851][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 147.112351][ T6007] usb 7-1: device descriptor read/8, error -71 [ 147.211796][ T7242] bond5: (slave lo): failed to get link speed/duplex [ 147.321658][ T6623] bond5: (slave lo): failed to get link speed/duplex [ 147.351768][ T6007] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 147.372643][ T6007] usb 7-1: device descriptor read/8, error -71 [ 147.431697][ T6623] bond5: (slave lo): failed to get link speed/duplex [ 147.481931][ T6007] usb usb7-port1: unable to enumerate USB device [ 148.275915][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 148.275932][ T40] audit: type=1326 audit(1768845949.104:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.0.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437d8f7c9 code=0x7fc00000 [ 148.316921][T12409] netlink: 'syz.0.1423': attribute type 10 has an invalid length. [ 148.322107][T12409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.325185][T12409] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.328318][T12409] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 148.347086][T12409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.357256][T12409] bond5: (slave geneve4): making interface the new active one [ 148.361181][T12409] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 148.429095][T12449] netlink: 'syz.0.1425': attribute type 1 has an invalid length. [ 148.437449][ T40] audit: type=1400 audit(1768845949.264:647): avc: denied { bind } for pid=12448 comm="syz.0.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.444234][T12449] random: crng reseeded on system resumption [ 148.468656][T12449] __nla_validate_parse: 3 callbacks suppressed [ 148.468672][T12449] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1425'. [ 148.480280][T12449] SQUASHFS error: Failed to read block 0x0: -5 [ 148.486600][T12449] unable to read squashfs_super_block [ 148.836646][T12477] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 148.840098][T12477] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1432'. [ 148.860112][T12477] .`: renamed from bond0 (while UP) [ 148.892406][T12484] bond0: entered promiscuous mode [ 148.894551][T12484] bond_slave_0: entered promiscuous mode [ 148.897105][T12484] bond_slave_1: entered promiscuous mode [ 148.960757][T12489] overlay: Unknown parameter 'subj_type' [ 149.001202][T12494] random: crng reseeded on system resumption [ 149.458409][T12510] JFS: discard option not supported on device [ 149.463773][T12510] Mount JFS Failure: -5 [ 149.541146][ T40] audit: type=1400 audit(1768845950.364:648): avc: denied { write } for pid=12509 comm="syz.0.1441" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.549067][ T40] audit: type=1400 audit(1768845950.364:649): avc: denied { ioctl } for pid=12509 comm="syz.0.1441" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.661056][T12517] tmpfs: Unknown parameter '00000000000000000000' [ 149.847715][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 149.956699][T12535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.959672][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 149.962825][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 149.965855][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 150.019040][T12547] overlayfs: failed to verify upper root origin [ 150.062996][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 150.067494][ T40] audit: type=1400 audit(1768845950.894:650): avc: denied { audit_control } for pid=12556 comm="syz.2.1454" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 150.067677][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 150.090745][T12552] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 150.127088][T12567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1457'. [ 150.285159][ T40] audit: type=1400 audit(1768845951.114:651): avc: denied { link } for pid=12576 comm="syz.4.1461" name="#fb" dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.295856][ T40] audit: type=1400 audit(1768845951.124:652): avc: denied { rename } for pid=12576 comm="syz.4.1461" name="#fc" dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.301591][ T6026] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 150.404715][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 150.451056][T12583] hsr_slave_1 (unregistering): left promiscuous mode [ 150.457150][ T6026] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.462758][ T6026] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.467709][ T6026] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.472021][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.480539][T12557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.486548][T12591] overlayfs: workdir and upperdir must be separate subtrees [ 150.488589][ T6026] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.728987][T12620] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.735301][ T5992] usb 7-1: USB disconnect, device number 15 [ 151.034562][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 151.045592][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 151.080912][T12659] veth5: entered promiscuous mode [ 151.083407][T12659] veth5: entered allmulticast mode [ 151.086027][T12659] bridge6: port 1(veth5) entered blocking state [ 151.088431][T12659] bridge6: port 1(veth5) entered disabled state [ 151.093570][T12659] bridge6: port 1(veth5) entered blocking state [ 151.095663][T12659] bridge6: port 1(veth5) entered forwarding state [ 151.146777][T12659] veth7: entered promiscuous mode [ 151.148438][T12659] veth7: entered allmulticast mode [ 151.150596][T12659] bridge6: port 2(veth7) entered blocking state [ 151.155992][T12659] bridge6: port 2(veth7) entered disabled state [ 151.159326][T12659] bridge6: port 2(veth7) entered blocking state [ 151.161428][T12659] bridge6: port 2(veth7) entered forwarding state [ 151.241307][T12842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=12842 comm=syz.4.1485 [ 151.291631][ T6625] bridge6: port 1(veth5) entered disabled state [ 151.305131][ T6625] bridge6: port 2(veth7) entered disabled state [ 151.384061][ T40] audit: type=1400 audit(1768845952.214:653): avc: denied { read } for pid=12880 comm="syz.4.1488" name="file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.393826][T12886] gretap2: entered promiscuous mode [ 151.401678][ T40] audit: type=1400 audit(1768845952.214:654): avc: denied { open } for pid=12880 comm="syz.4.1488" path="/348/file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.409331][ T40] audit: type=1400 audit(1768845952.224:655): avc: denied { ioctl } for pid=12880 comm="syz.4.1488" path="/348/file0" dev="tmpfs" ino=2145 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.542262][ T4183] net_ratelimit: 34 callbacks suppressed [ 151.542280][ T4183] bond5: (slave lo): failed to get link speed/duplex [ 151.596859][T12915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 151.651644][ T4183] bond5: (slave lo): failed to get link speed/duplex [ 151.696272][T12922] sp0: Synchronizing with TNC [ 151.743743][T12932] block device autoloading is deprecated and will be removed. [ 151.757865][ T5292] Bluetooth: hci3: unexpected event for opcode 0xb646 [ 151.771750][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 151.773877][ T5992] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 151.783507][T12920] [U] ` [ 151.827092][T12960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12960 comm=syz.3.1503 [ 151.884524][ T6625] bond5: (slave lo): failed to get link speed/duplex [ 151.934061][ T5992] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.937818][ T5992] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.945030][ T5992] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.948437][ T5992] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.955448][ T5992] usb 9-1: Manufacturer: syz [ 151.964460][ T5992] usb 9-1: config 0 descriptor?? [ 151.991786][ T6625] bond5: (slave lo): failed to get link speed/duplex [ 152.031891][ T5992] rc_core: IR keymap rc-hauppauge not found [ 152.034008][ T5992] Registered IR keymap rc-empty [ 152.036173][ T5992] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 152.040642][ T5992] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 152.113484][ T6625] bond5: (slave lo): failed to get link speed/duplex [ 152.135479][T13050] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 152.158928][T13050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.172287][T13050] vlan0: entered allmulticast mode [ 152.175372][T13050] bond7: entered allmulticast mode [ 152.201275][ T6010] usb 9-1: USB disconnect, device number 16 [ 152.221579][ T13] bond5: (slave lo): failed to get link speed/duplex [ 152.331746][ T1147] bond5: (slave lo): failed to get link speed/duplex [ 152.372096][T13117] binder: BINDER_SET_CONTEXT_MGR already set [ 152.375880][T13117] binder: 13116:13117 ioctl 4018620d 200000000100 returned -16 [ 152.441792][ T7245] bond5: (slave lo): failed to get link speed/duplex [ 152.551660][ T6618] bond5: (slave lo): failed to get link speed/duplex [ 152.702898][T13146] IPVS: Error during creation of socket; terminating [ 152.822891][ T960] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 152.856130][ T6026] hid_parser_main: 5 callbacks suppressed [ 152.856149][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.862248][T13170] bond5: (slave lo): Removing an active aggregator [ 152.862719][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.867591][T13170] bond5: (slave lo): Releasing backup interface [ 152.868169][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.874459][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.877275][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.880089][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.882640][T13170] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 152.884875][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.888260][T13170] bridge_slave_1: left allmulticast mode [ 152.888364][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.890190][T13170] bridge_slave_1: left promiscuous mode [ 152.893113][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.894875][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.897094][ T6026] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 152.902637][ T6026] hid-generic 0003:0004:0000.0007: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 152.920822][T13170] bond0: (slave bond_slave_0): Releasing backup interface [ 152.932870][T13170] bond_slave_0: left promiscuous mode [ 152.939092][T13170] bond0: (slave bond_slave_1): Releasing backup interface [ 152.943755][T13170] bond_slave_1: left promiscuous mode [ 152.948429][T13170] team0: Port device team_slave_0 removed [ 152.952535][T13170] team0: Port device team_slave_1 removed [ 152.959687][T13180] fido_id[13180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.001906][ T960] usb 5-1: Using ep0 maxpacket: 16 [ 153.005550][ T960] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 153.008844][ T960] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.015252][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.019703][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.023924][ T960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.029127][ T960] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 153.033937][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.039644][ T960] usb 5-1: config 0 descriptor?? [ 153.047293][ T960] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input28 [ 153.057620][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.067891][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.070771][T13208] SELinux: truncated policydb string identifier [ 153.075831][T13208] SELinux: failed to load policy [ 153.078109][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.087399][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.093136][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.108645][ T7853] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.114367][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.119996][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.127915][ T5326] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.161676][ T6469] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 153.247947][T13139] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 153.256412][ T960] usb 5-1: USB disconnect, device number 20 [ 153.287625][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 153.287639][ T40] audit: type=1400 audit(1768845954.114:671): avc: denied { write } for pid=13226 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.301617][ T6469] usb 9-1: device descriptor read/64, error -71 [ 153.302967][ T40] audit: type=1400 audit(1768845954.114:672): avc: denied { read } for pid=13226 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.541727][ T6469] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 153.584694][T13267] netlink: 'syz.3.1556': attribute type 29 has an invalid length. [ 153.588569][T13267] netlink: 'syz.3.1556': attribute type 29 has an invalid length. [ 153.592631][T13267] __nla_validate_parse: 4 callbacks suppressed [ 153.592642][T13267] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1556'. [ 153.599686][T13267] unsupported nla_type 58 [ 153.630735][ T40] audit: type=1400 audit(1768845954.454:673): avc: denied { transfer } for pid=13269 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.666391][T13274] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 153.691656][ T6469] usb 9-1: device descriptor read/64, error -71 [ 153.713611][ T40] audit: type=1400 audit(1768845954.544:674): avc: denied { mounton } for pid=13277 comm="syz.3.1559" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 153.721448][T13278] ufs: You didn't specify the type of your ufs filesystem [ 153.721448][T13278] [ 153.721448][T13278] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 153.721448][T13278] [ 153.721448][T13278] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 153.732833][T13278] ufs: ufstype=old is supported read-only [ 153.736469][T13278] ufs: ufs_fill_super(): bad magic number [ 153.802956][ T6469] usb usb9-port1: attempt power cycle [ 153.926729][T13301] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 153.938706][ T40] audit: type=1400 audit(1768845954.764:675): avc: denied { watch } for pid=13302 comm="syz.0.1568" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.158573][ T40] audit: type=1400 audit(1768845954.984:676): avc: denied { setopt } for pid=13312 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.166641][T13326] Failed to initialize the IGMP autojoin socket (err -2) [ 154.171979][ T6469] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 154.173429][ T40] audit: type=1400 audit(1768845955.004:677): avc: denied { getopt } for pid=13312 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.192333][ T6469] usb 9-1: device descriptor read/8, error -71 [ 154.239098][T13326] netlink: 'syz.3.1573': attribute type 4 has an invalid length. [ 154.243067][T13326] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1573'. [ 154.317205][T13331] Failed to initialize the IGMP autojoin socket (err -2) [ 154.424330][ T40] audit: type=1400 audit(1768845955.254:678): avc: denied { mounton } for pid=13330 comm="syz.3.1574" path="/394/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 154.441763][ T6469] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 154.472120][ T6469] usb 9-1: device descriptor read/8, error -71 [ 154.581943][ T6469] usb usb9-port1: unable to enumerate USB device [ 154.927912][ T40] audit: type=1400 audit(1768845955.754:679): avc: denied { mounton } for pid=13340 comm="syz.2.1575" path="/439/file0" dev="9p" ino=71827659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.938359][ T40] audit: type=1400 audit(1768845955.754:680): avc: denied { watch } for pid=13340 comm="syz.2.1575" path="/439/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.103161][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1578'. [ 155.107318][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1578'. [ 155.162384][T13363] SELinux: Context is not valid (left unmapped). [ 155.221041][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 155.240507][T13373] : entered promiscuous mode [ 155.293486][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 155.293501][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 155.306073][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 155.354363][T13394] Sensor A: ================= START STATUS ================= [ 155.356927][T13394] Sensor A: Test Pattern: 75% Colorbar [ 155.358944][T13394] Sensor A: Show Information: All [ 155.360607][T13394] Sensor A: Vertical Flip: true [ 155.362878][T13394] Sensor A: Horizontal Flip: false [ 155.364729][T13394] Sensor A: Brightness: 128 [ 155.366387][T13394] Sensor A: Contrast: 128 [ 155.367763][T13394] Sensor A: Hue: 0 [ 155.368974][T13394] Sensor A: Saturation: 128 [ 155.370582][T13394] Sensor A: ================== END STATUS ================== [ 155.374892][T13394] netlink: 'syz.3.1589': attribute type 2 has an invalid length. [ 155.377863][T13394] tipc: Cannot configure node identity twice [ 155.391111][ T6469] libceph: mon0 (1)[b::]:6789 connect error [ 155.478340][T13396] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 155.653344][ T6469] libceph: mon0 (1)[b::]:6789 connect error [ 156.162052][ T6094] libceph: mon0 (1)[b::]:6789 connect error [ 156.186865][T13394] ceph: No mds server is up or the cluster is laggy [ 156.264600][T13420] netlink: 'syz.4.1591': attribute type 21 has an invalid length. [ 156.269135][T13421] netlink: 'syz.4.1591': attribute type 21 has an invalid length. [ 156.489067][T13435] tap0: tun_chr_ioctl cmd 1074025672 [ 156.490912][T13435] tap0: ignored: set checksum disabled [ 156.773228][T13450] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1600'. [ 157.218332][T13390] binder: 13389:13390 unknown command 0 [ 157.220143][T13390] binder: 13389:13390 ioctl c0306201 200000000080 returned -22 [ 157.223202][T13390] SELinux: failed to load policy [ 157.225274][T13390] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1587'. [ 157.280016][T13479] loop5: detected capacity change from 0 to 7 [ 157.290370][ T8129] Dev loop5: unable to read RDB block 7 [ 157.292488][ T8129] loop5: unable to read partition table [ 157.294408][ T8129] loop5: partition table beyond EOD, truncated [ 157.306442][T13479] Dev loop5: unable to read RDB block 7 [ 157.308263][T13479] loop5: unable to read partition table [ 157.311786][T13479] loop5: partition table beyond EOD, truncated [ 157.318606][T13479] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 157.400184][T13489] Failed to initialize the IGMP autojoin socket (err -2) [ 157.545527][T13508] team_slave_0: left allmulticast mode [ 157.555088][T13508] team0 (unregistering): Port device team_slave_0 removed [ 157.557775][T13508] team_slave_1: left allmulticast mode [ 157.568412][T13508] team0 (unregistering): Port device team_slave_1 removed [ 157.692692][T13526] binder: 13525:13526 ioctl c0306201 200000000040 returned -22 [ 157.886157][T13543] netlink: 'syz.3.1626': attribute type 2 has an invalid length. [ 157.890249][T13543] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 157.953457][T13553] usb usb8: usbfs: process 13553 (syz.3.1627) did not claim interface 0 before use [ 158.104220][T13571] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 158.146957][T13575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13575 comm=syz.3.1634 [ 158.323839][T13594] NILFS (nbd3): device size too small [ 158.483126][T13627] geneve1: entered allmulticast mode [ 158.525225][T13635] cgroup: Need name or subsystem set [ 158.585579][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.706980][T13671] net_ratelimit: 2 callbacks suppressed [ 158.706991][T13671] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 158.743206][T13682] netlink: 'syz.3.1659': attribute type 11 has an invalid length. [ 158.744920][T13681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.749638][T13681] __nla_validate_parse: 11 callbacks suppressed [ 158.749659][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 158.762233][T13681] openvswitch: netlink: Unknown nsh attribute 0 [ 158.810766][T13692] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 158.903433][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 158.903448][ T40] audit: type=1400 audit(1768845959.734:693): avc: denied { connect } for pid=13708 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.956303][ T40] audit: type=1400 audit(1768845959.784:694): avc: denied { bind } for pid=13708 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.964156][ T40] audit: type=1400 audit(1768845959.784:695): avc: denied { listen } for pid=13708 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.971614][ T40] audit: type=1400 audit(1768845959.784:696): avc: denied { accept } for pid=13708 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.007465][ T40] audit: type=1400 audit(1768845959.834:697): avc: denied { ioctl } for pid=13708 comm="syz.4.1666" path="socket:[39792]" dev="sockfs" ino=39792 ioctlcmd=0x5517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.150697][T13726] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.156232][T13724] tap0: tun_chr_ioctl cmd 1074025672 [ 159.158249][T13724] tap0: ignored: set checksum disabled [ 159.343206][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 159.527718][ T40] audit: type=1326 audit(1768845960.354:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.2.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c178f7c9 code=0x7fc00000 [ 159.530627][T13751] mkiss: ax0: crc mode is auto. [ 159.543664][ T40] audit: type=1326 audit(1768845960.354:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.2.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c178f7c9 code=0x7fc00000 [ 159.698190][T13764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13764 comm=syz.3.1679 [ 159.705989][T13764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.715498][T13764] IPv6: addrconf: prefix option has invalid lifetime [ 159.764594][T13768] vlan0: entered promiscuous mode [ 159.967177][T13801] netlink: 884 bytes leftover after parsing attributes in process `syz.3.1688'. [ 159.977879][T13800] Failed to initialize the IGMP autojoin socket (err -2) [ 159.980282][ T40] audit: type=1400 audit(1768845960.804:700): avc: denied { append } for pid=13799 comm="syz.3.1688" name="pfkey" dev="proc" ino=4026533135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 160.032665][T13814] block nbd3: NBD_DISCONNECT [ 160.037935][T13799] block nbd3: Disconnected due to user request. [ 160.040630][T13799] block nbd3: shutting down sockets [ 160.127536][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 160.534425][T13870] netlink: 'syz.2.1703': attribute type 12 has an invalid length. [ 160.668576][T13882] jfs: Unknown parameter 'usrquota' [ 160.703309][T13884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1708'. [ 160.706024][T13884] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1708'. [ 160.801009][T13889] Invalid source name [ 160.803799][T13889] UBIFS error (pid: 13889): cannot open "ubifs", error -22 [ 160.865583][T13897] overlayfs: failed to resolve '//oss_mixer': -2 [ 160.939154][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 160.942234][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 161.037015][T13918] new mount options do not match the existing superblock, will be ignored [ 161.973992][ T5292] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 162.023157][T13982] netlink: 'syz.0.1728': attribute type 4 has an invalid length. [ 162.164407][ T40] audit: type=1400 audit(1768846219.000:701): avc: denied { getopt } for pid=14006 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.206724][T14009] program syz.3.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.235758][T14012] netlink: 'syz.2.1734': attribute type 13 has an invalid length. [ 162.238893][T14012] gretap0: refused to change device tx_queue_len [ 162.240929][T14012] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 162.253172][ T1116] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 162.255518][ T1116] ata1.00: irq_stat 0x40000000 [ 162.261671][ T1116] ata1.00: failed command: ZAC MANAGEMENT OUT [ 162.263949][ T1116] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 26 [ 162.263949][ T1116] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 162.269161][ T1116] ata1.00: status: { DRDY ERR } [ 162.272241][ T1116] ata1.00: error: { ABRT } [ 162.274677][ T1116] ata1.00: device reported invalid CHS sector 0 [ 162.310254][ T40] audit: type=1400 audit(1768846219.140:702): avc: denied { name_bind 0x1000000 } for pid=14021 comm="syz.2.1736" path="socket:[42193]" dev="sockfs" ino=42193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.434034][T14032] bond0: entered allmulticast mode [ 162.436186][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1739'. [ 162.439469][T14032] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 162.629113][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 162.675511][ T5292] Bluetooth: hci0: unexpected event 0x34 length: 105 > 6 [ 162.904231][T14078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.987253][T14095] Failed to initialize the IGMP autojoin socket (err -2) [ 163.006354][T14091] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 163.011243][T14091] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 163.014539][T14091] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 163.018159][T14091] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 163.020664][T14091] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 163.023845][T14091] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 163.026431][T14091] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 163.029548][T14091] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 163.032245][T14091] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 163.034909][T14091] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 163.190765][T14118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14118 comm=syz.3.1762 [ 163.286873][T14131] input: syz1 as /devices/virtual/input/input33 [ 163.304333][T14131] vlan3: entered promiscuous mode [ 163.305993][T14131] bridge0: entered promiscuous mode [ 163.332641][T14141] Bluetooth: hci0: unsupported parameter 255 [ 163.335296][T14141] Bluetooth: hci0: unsupported parameter 255 [ 163.343784][T14146] gfs2: error -5 reading superblock [ 163.863054][ C2] ata1: illegal qc_active transition (00000000->08000000) [ 163.941080][T14213] gfs2: not a GFS2 filesystem [ 163.945009][ T5292] Bluetooth: hci2: unexpected event for opcode 0x200a [ 163.981240][T14215] __nla_validate_parse: 3 callbacks suppressed [ 163.981253][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 163.996902][T14218] gfs2: not a GFS2 filesystem [ 164.016480][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 164.019377][T14224] netlink: 'syz.4.1788': attribute type 20 has an invalid length. [ 164.021989][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 164.022019][T14225] netlink: 'syz.4.1788': attribute type 20 has an invalid length. [ 164.058264][T14235] random: crng reseeded on system resumption [ 164.080259][T14235] Restarting kernel threads ... [ 164.083038][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 164.083231][T14235] Done restarting kernel threads. [ 164.085962][T14225] netlink: 'syz.4.1788': attribute type 20 has an invalid length. [ 164.152342][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 164.155383][T14224] netlink: 'syz.4.1788': attribute type 20 has an invalid length. [ 164.185170][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 164.192017][ T1116] ata1.00: configured for UDMA/100 [ 164.350258][T14251] could not allocate digest TFM handle cryptd(blake2b-160) [ 164.357147][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 164.357164][ T40] audit: type=1400 audit(1768846221.190:708): avc: denied { setopt } for pid=14250 comm="syz.3.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.462736][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 164.477934][T14265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.514201][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 164.549035][T14316] 9p: Bad value for 'rfdno' [ 164.639881][T14322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14322 comm=syz.3.1801 [ 164.650804][T14322] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 164.656938][T14329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1802'. [ 164.793647][T14349] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 164.796154][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'. [ 164.796670][T14351] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1806'. [ 164.801572][T14349] loop5: detected capacity change from 0 to 7 [ 164.810919][ T8129] Dev loop5: unable to read RDB block 7 [ 164.814595][ T8129] loop5: unable to read partition table [ 164.816554][ T8129] loop5: partition table beyond EOD, truncated [ 164.826836][T14349] Dev loop5: unable to read RDB block 7 [ 164.829742][T14349] loop5: unable to read partition table [ 164.832165][T14349] loop5: partition table beyond EOD, truncated [ 164.840386][T14349] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 164.860860][T14356] ucma_write: process 1070 (syz.0.1807) changed security contexts after opening file descriptor, this is not allowed. [ 164.863249][ T40] audit: type=1400 audit(1768846221.700:709): avc: denied { append } for pid=14357 comm="syz.3.1808" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.958871][T14360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.963078][T14360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.965887][T14360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.968664][T14360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.971375][T14360] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.015719][T14360] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 165.019772][T14360] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 165.022649][T14360] CPU: 0 UID: 0 PID: 14360 Comm: syz.3.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.026451][T14360] Tainted: [L]=SOFTLOCKUP [ 165.028124][T14360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.031480][T14360] RIP: 0010:klist_put+0x4d/0x1b0 [ 165.033120][T14360] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 24 0d [ 165.039104][T14360] RSP: 0018:ffffc9000638f2f0 EFLAGS: 00010202 [ 165.041004][T14360] RAX: dffffc0000000000 RBX: ffff8880348b1060 RCX: 0000000000000000 [ 165.043519][T14360] RDX: 000000000000000b RSI: ffffffff8b6e7ac5 RDI: 0000000000000058 [ 165.046036][T14360] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d8204 [ 165.048533][T14360] R10: ffffffff906c1023 R11: 0000000000000001 R12: 0000000000000000 [ 165.051019][T14360] R13: 0000000000000001 R14: 1ffff92000c71e66 R15: ffffffff906c0fe0 [ 165.053531][T14360] FS: 00007fe0dd2c26c0(0000) GS:ffff8880d68f1000(0000) knlGS:0000000000000000 [ 165.056644][T14360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.059622][T14360] CR2: 000000110c3a301b CR3: 0000000058b0a000 CR4: 0000000000352ef0 [ 165.063313][T14360] Call Trace: [ 165.064797][T14360] [ 165.066176][T14360] klist_remove+0x13f/0x2e0 [ 165.068171][T14360] ? __pfx_klist_remove+0x10/0x10 [ 165.070452][T14360] ? kobject_move+0x15d/0x260 [ 165.072631][T14360] ? get_device_parent+0x1ed/0x4e0 [ 165.074887][T14360] device_move+0x12d/0x1160 [ 165.076901][T14360] hci_conn_del_sysfs+0xaa/0x1a0 [ 165.079098][T14360] hci_conn_del+0x680/0x11d0 [ 165.081143][T14360] hci_abort_conn_sync+0x76a/0xb20 [ 165.083428][T14360] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 165.085909][T14360] ? find_held_lock+0x2b/0x80 [ 165.088036][T14360] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 165.090989][T14360] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 165.093800][T14360] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 165.096096][T14360] hci_suspend_sync+0x821/0xb40 [ 165.097653][T14360] ? __pfx_enable_work+0x10/0x10 [ 165.099241][T14360] ? __pfx_hci_suspend_sync+0x10/0x10 [ 165.100939][T14360] ? mgmt_pending_find+0x13e/0x1a0 [ 165.102599][T14360] hci_suspend_dev+0x331/0x560 [ 165.104081][T14360] ? __pfx_hci_suspend_dev+0x10/0x10 [ 165.105785][T14360] ? rcu_barrier+0x341/0x6e0 [ 165.107271][T14360] ? kobject_get+0xbb/0x150 [ 165.108754][T14360] hci_suspend_notifier+0x2e0/0x340 [ 165.110400][T14360] notifier_call_chain+0xbc/0x3e0 [ 165.112003][T14360] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 165.113841][T14360] blocking_notifier_call_chain_robust+0xc8/0x160 [ 165.116029][T14360] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 165.118957][T14360] ? do_raw_spin_unlock+0x172/0x230 [ 165.121263][T14360] pm_notifier_call_chain_robust+0x27/0x60 [ 165.123760][T14360] snapshot_open+0x189/0x2b0 [ 165.125792][T14360] ? __pfx_snapshot_open+0x10/0x10 [ 165.127990][T14360] misc_open+0x26d/0x450 [ 165.130131][T14360] ? __pfx_misc_open+0x10/0x10 [ 165.132277][T14360] chrdev_open+0x234/0x6a0 [ 165.134329][T14360] ? __pfx_chrdev_open+0x10/0x10 [ 165.136526][T14360] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 165.139369][T14360] do_dentry_open+0x748/0x1590 [ 165.141365][T14360] ? __pfx_chrdev_open+0x10/0x10 [ 165.143111][T14360] vfs_open+0x82/0x3f0 [ 165.144417][T14360] path_openat+0x2078/0x3140 [ 165.146026][T14360] ? __pfx_path_openat+0x10/0x10 [ 165.147844][T14360] do_filp_open+0x20b/0x470 [ 165.149464][T14360] ? __pfx_do_filp_open+0x10/0x10 [ 165.151158][T14360] ? alloc_fd+0x471/0x7d0 [ 165.152779][T14360] do_sys_openat2+0x121/0x290 [ 165.154408][T14360] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.156195][T14360] ? count_memcg_events+0x122/0x290 [ 165.157924][T14360] __x64_sys_openat+0x174/0x210 [ 165.159477][T14360] ? __pfx___x64_sys_openat+0x10/0x10 [ 165.161296][T14360] ? do_user_addr_fault+0x843/0x1370 [ 165.163386][T14360] do_syscall_64+0xcd/0xf80 [ 165.165013][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.167112][T14360] RIP: 0033:0x7fe0dc38f7c9 [ 165.168555][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.174527][T14360] RSP: 002b:00007fe0dd2c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.177184][T14360] RAX: ffffffffffffffda RBX: 00007fe0dc5e6180 RCX: 00007fe0dc38f7c9 [ 165.179695][T14360] RDX: 0000000000047e00 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 165.182154][T14360] RBP: 00007fe0dc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.184620][T14360] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000 [ 165.187691][T14360] R13: 00007fe0dc5e6218 R14: 00007fe0dc5e6180 R15: 00007fff9d529738 [ 165.190189][T14360] [ 165.191177][T14360] Modules linked in: [ 165.192799][T14360] ---[ end trace 0000000000000000 ]--- [ 165.193456][ T40] audit: type=1400 audit(1768846222.030:710): avc: denied { read } for pid=5323 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 165.201585][T14360] RIP: 0010:klist_put+0x4d/0x1b0 [ 165.204882][T14360] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 24 0d [ 165.210863][T14360] RSP: 0018:ffffc9000638f2f0 EFLAGS: 00010202 [ 165.211701][ T40] audit: type=1400 audit(1768846222.030:711): avc: denied { search } for pid=5323 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.212999][T14360] RAX: dffffc0000000000 RBX: ffff8880348b1060 RCX: 0000000000000000 [ 165.222150][T14360] RDX: 000000000000000b RSI: ffffffff8b6e7ac5 RDI: 0000000000000058 [ 165.222405][ T40] audit: type=1400 audit(1768846222.030:712): avc: denied { search } for pid=5323 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.224704][T14360] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d8204 [ 165.231347][ T40] audit: type=1400 audit(1768846222.030:713): avc: denied { add_name } for pid=5323 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.233959][T14360] R10: ffffffff906c1023 R11: 0000000000000001 R12: 0000000000000000 [ 165.241526][ T40] audit: type=1400 audit(1768846222.030:714): avc: denied { create } for pid=5323 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.242874][T14360] R13: 0000000000000001 R14: 1ffff92000c71e66 R15: ffffffff906c0fe0 [ 165.249272][ T40] audit: type=1400 audit(1768846222.030:715): avc: denied { append open } for pid=5323 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.251761][T14360] FS: 00007fe0dd2c26c0(0000) GS:ffff8880d69f1000(0000) knlGS:0000000000000000 [ 165.251798][T14360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.251810][T14360] CR2: 000000110c2ff7af CR3: 0000000058b0a000 CR4: 0000000000352ef0 [ 165.251822][T14360] Kernel panic - not syncing: Fatal exception [ 165.252620][T14360] Kernel Offset: disabled