last executing test programs: 3m13.380308502s ago: executing program 1 (id=283): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000000)) 3m13.311354114s ago: executing program 1 (id=286): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4cd02, 0x0) r1 = memfd_create(&(0x7f0000001840)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x3, 0x3, 0x100, &(0x7f0000001100)="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"}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000081, 0x0, 0x5}]}) mlockall(0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x10}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}]}}]}, 0x87}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000011) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') setreuid(0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000340)={"0c485444ceff65df3f53caf6366daccf", 0x0, 0x0, {0x1, 0xd}, {0x9, 0x3}, 0x0, [0x5, 0x2, 0x80000001, 0x7f, 0x7b, 0x84, 0x2, 0x6560d8f7, 0xc62, 0x8, 0x9a41, 0x4, 0x3, 0xffff, 0xa33, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001240)={{r5}, r10, 0x32, @inherit={0x60, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, @devid}) 3m12.011263051s ago: executing program 1 (id=304): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x9, 0x8000007, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x9, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r1, 0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x9, 0x8000007, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x9, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lchown(&(0x7f0000000040)='./file0\x00', r1, 0xee00) (async) setresuid(0x0, 0xee00, 0x0) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) 3m11.141416679s ago: executing program 1 (id=323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r3, &(0x7f0000000100), 0x10) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, 0x0, 0x0, 0x7fffffff, 0x1000, 0x6, 0x8, 0x0, 0x9}}], 0x58}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r6 = openat(r5, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r6, &(0x7f00000001c0)=""/15, 0xf) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000140)={0xfff, 0x2, 0x4, 0xd, 0x1}) (async) r7 = syz_open_pts(r0, 0x141401) setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = getpid() capget(&(0x7f0000000000)={0x19980330, r9}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) (async) setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000002980)=0x1, 0x4) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r10, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431202d", 0x1e) (async) mmap(&(0x7f0000000000/0x1000000)=nil, 0x100000000, 0x3, 0x8032, 0xffffffff, 0x0) (async) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_EVENT(r11, 0x80286f4e, &(0x7f00000003c0)) write(r7, 0x0, 0x0) 3m11.120150854s ago: executing program 32 (id=323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r3, &(0x7f0000000100), 0x10) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, 0x0, 0x0, 0x7fffffff, 0x1000, 0x6, 0x8, 0x0, 0x9}}], 0x58}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r6 = openat(r5, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r6, &(0x7f00000001c0)=""/15, 0xf) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000140)={0xfff, 0x2, 0x4, 0xd, 0x1}) (async) r7 = syz_open_pts(r0, 0x141401) setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = getpid() capget(&(0x7f0000000000)={0x19980330, r9}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) (async) setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000002980)=0x1, 0x4) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r10, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431202d", 0x1e) (async) mmap(&(0x7f0000000000/0x1000000)=nil, 0x100000000, 0x3, 0x8032, 0xffffffff, 0x0) (async) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_EVENT(r11, 0x80286f4e, &(0x7f00000003c0)) write(r7, 0x0, 0x0) 2m34.412959988s ago: executing program 2 (id=669): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xc9, 0x1f, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x1, 0x7800, 0x101, 0x3}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140, 0x0, 0x8}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', r0}, 0x94) 2m34.219946863s ago: executing program 2 (id=670): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (fail_nth: 10) 2m34.218173819s ago: executing program 2 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80002, 0x0) sendfile(r3, r3, 0x0, 0x2000006) (async) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd4(r7, &(0x7f0000000040)={[0x1ff]}, 0x8, 0x80000) syz_clone(0x80020000, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) (async) r9 = socket$inet(0x2, 0x80001, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_ENABLE={{0xc}, 0x16}}}, 0x7) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000140)=0x6, 0x4) (async) ioprio_set$pid(0x2, 0x0, 0x2007) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x8080004, 0x85, [0x5, 0x7fffffffffffffff, 0xc, 0x2, 0x1, 0x9], 0x2b, &(0x7f00000001c0)=[{}], &(0x7f0000000500)=""/144}, &(0x7f00000004c0)=0x78) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x2, @desc3}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) (async) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8e, 0x180000504) (async) socket(0x2c, 0xa, 0x80000001) 2m33.249442145s ago: executing program 2 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800400005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 2m33.248760566s ago: executing program 2 (id=684): r0 = socket$inet6(0xa, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r2, 0x8b32, &(0x7f0000000040)) write(r1, &(0x7f0000000240)='1', 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="0205080904009c669d17797ef17c000025bd7000fcdbdf2502000100000004d2"], 0x20}}, 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 2m33.15284644s ago: executing program 2 (id=685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000003000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 2m6.676976651s ago: executing program 33 (id=685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000003000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 1m53.454098523s ago: executing program 0 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000e40)="306663353a313232373a4c180577b4d218b867666c646c96bb89aaa16a2d774630fd357b727fd444088148867a8386b6be47da28427d7bee37631da6a8b2865cb04193635148d06f", 0x48) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x541b, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000280)) 1m53.28281511s ago: executing program 0 (id=1036): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x56, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000003000000020000000400000000000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000000556f1ee9ad90b2c09c13e0b11fb305d950df0fb8956c2131d53d77ff970b3f49f4fcbdaa9c7a17067439ee78743da615dcbdd9433e0aff56342762b9f2bb7eb7f0a138245310d1bfa0aaf2b20e8d6eb3d4011a9a3d84640f380cf3369eb7ee21afdbc5c47643f63693aa5a3e655aa571f9977fc756b4135cab8a153c2192d3477dc5ef484f1cdda7b412e00964382e0549c8b41e0b1bdb9bb3af3076e79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db6601643333c60f7d7bfc5324c89c2e432c9"], 0x97) 1m53.09773408s ago: executing program 0 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/243, 0xf3) write(r0, &(0x7f0000000300)='offline', 0x7) read(0xffffffffffffffff, &(0x7f0000000140)=""/143, 0x8f) 1m53.025673275s ago: executing program 0 (id=1043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "9900d4d493a68d6a5b2d3ad94b3a8d7d", 0x8}}}, 0x1a) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m52.89535761s ago: executing program 0 (id=1045): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@volatile={0x3, 0x0, 0x0, 0x9, 0x5}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @var={0xf, 0x0, 0x0, 0xe, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x2}, @enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x7, 0x5, 0xe9f8}, {0x9, 0x1, 0x200}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000300)=""/216, 0x83, 0xd8, 0x1, 0xde, 0x10000}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001e00010026bd70000000000002000000010000000000000008000100000000b5"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x48, '\x00', 0x0, @fallback=0x20, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x9, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) openat(r2, &(0x7f0000000340)='./file2\x00', 0x0, 0x524ccc879a567274) r4 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x2d0, 0x480c1) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000040)) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x7, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r9, 0x0, 0x0, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback, 0x2}, 0x10) 1m51.487279075s ago: executing program 0 (id=1062): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000740)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8e1c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d", 0x39) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c0e46635000400000f308bc1de780066b9aa0200000f3266b9ab0900000fddf2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x12) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffff, 0x40}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000580)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x10012, r7, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000180)="5abbe3", 0x3}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 1m51.39392425s ago: executing program 34 (id=1062): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000740)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8e1c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d", 0x39) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c0e46635000400000f308bc1de780066b9aa0200000f3266b9ab0900000fddf2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x12) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffff, 0x40}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000580)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x10012, r7, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000180)="5abbe3", 0x3}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 1m28.939793836s ago: executing program 4 (id=1385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0xb, r6, 0x0, r5}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x300}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.596392587s ago: executing program 4 (id=1394): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x2) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x48}}, 0xc0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0xa97511b891812c91, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r3, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYRESOCT=0x0], 0x50) mq_unlink(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) fcntl$setlease(r1, 0x400, 0x0) unshare(0x42000000) 1m28.223550115s ago: executing program 4 (id=1399): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000180)=@other={'decodes', ' ', 'mem'}, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4a8e, 0x101000) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r3, 0x1312}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000fddbdf252100000009001f0070687931000000000c0005000200aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x24000034}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000100)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0xba3, 0x0, 0x2, 0x12}) 1m28.13128115s ago: executing program 4 (id=1402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket(0x3, 0x800, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x28, 0x88000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=@getpolicy={0x14c, 0x15, 0x600, 0x70bd26, 0x25dfdbfb, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e23, 0x9, 0x4e21, 0x3fb, 0x16, 0x20, 0xa0, 0x4, 0x0, r7}, 0x6e6bb7, 0x2}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e24, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @policy={0xac, 0x7, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4e24, 0x7, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x21, r6, r8}, {0x1, 0x7, 0x14e8dbbf, 0xfffffffffffffff8, 0x100, 0x80000000, 0x2b6, 0x480000000000}, {0x10001, 0x2, 0x400, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @etimer_thresh={0x8, 0xc, 0x8000}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000801}, 0x2c008000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, '\x00', {0x0, @bt={0x7ff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x4, 0x3, 0x81, 0x1, 0x9, 0xfffffff4, 0x4, 0x3, 0x1, 0x32, {0x8, 0x7fffffff}, 0x6, 0x9c}}}) umount2(&(0x7f0000000000)='./file0\x00', 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m27.645198727s ago: executing program 4 (id=1405): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x1000, 0x78001e8b, &(0x7f0000008000/0x1000)=nil) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7001fbdbdf251f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc814}, 0xc004) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 1m27.462440961s ago: executing program 4 (id=1409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000010000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 1m27.304603108s ago: executing program 35 (id=1409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000010000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 42.968427691s ago: executing program 7 (id=1999): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r2], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) timer_create(0x1, &(0x7f0000000200)={0x0, 0xf, 0x2, @thr={0x0, 0x0}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r3, &(0x7f0000000100)=[{0x4, 0x9, 0x800}, {0x2, 0x1, 0x800}], 0x2) (async) semop(r3, 0x0, 0x0) (async) semctl$GETZCNT(r3, 0x3, 0xf, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) (async) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) (async) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) (async) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @link_local, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x21}}}}}, 0x0) clock_gettime(0x7, &(0x7f0000000040)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) 39.728794585s ago: executing program 7 (id=2039): r0 = io_uring_setup(0x5be4, &(0x7f0000000180)={0x0, 0xa3a7, 0x0, 0x21, 0xab}) io_uring_enter(r0, 0x78ce, 0x60e, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='maps\x00') exit(0x5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) 38.790697001s ago: executing program 7 (id=2050): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000001040)={0xe, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) mkdir(&(0x7f0000000040)='./my_configfs/usb_gadget/g1/functions/tcm.usb0/../file0\x00', 0x18b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netpci0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r3, @ANYBLOB="14000300fe8000000000000000000000000000bb14000200fe"], 0x64}}, 0x4008000) 38.724343951s ago: executing program 7 (id=2051): close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x18, 0x1, 0xfdfffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e20, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x3, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x11, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x1, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@exit_looper], 0x0, 0x0, 0x0}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x1, 0x1}]}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0x9, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(0x0, 0x0) 38.6510798s ago: executing program 7 (id=2052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x300, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x44}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 38.320167256s ago: executing program 7 (id=2053): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 38.24901711s ago: executing program 36 (id=2053): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 31.071430413s ago: executing program 8 (id=2054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000408200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 22.380412747s ago: executing program 8 (id=2054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000408200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 14.980615085s ago: executing program 8 (id=2054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000408200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 12.020943612s ago: executing program 5 (id=2313): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './trace\x00'}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}, 0xbd}], 0x1, 0x40, 0x0) (async) fchown(r0, r2, r3) (async) r5 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) (async) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 11.89992168s ago: executing program 5 (id=2314): r0 = socket(0x40000000015, 0x5, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0xffffbbff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 11.877029415s ago: executing program 5 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 11.805978501s ago: executing program 5 (id=2316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000080ff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 10.991192826s ago: executing program 5 (id=2317): recvmsg(0xffffffffffffffff, 0x0, 0x20) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 10.990848815s ago: executing program 5 (id=2318): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r2, 0x80047458, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000000)=0xd0) r8 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0xff, 0x20400) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r8, 0x40045730, &(0x7f0000000240)=0xffffffff) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 6.453306205s ago: executing program 8 (id=2054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000408200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 5.309529819s ago: executing program 6 (id=2333): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="038eee4500e4b7f71143aa7e6b988d00b81499e2dc4e81c08c21942c2a881267d5ca5394f7ea0cc88605dc67c28e7390a50e3687403eed170cb326331f188be172257e90f7d7612f02e882775a3339b6cf9b0cd41c1c941cef2e2bcbfba9dc26262d99b7a1b1d2a7b8f676c05f4e3b026c9a830cf8a70e0ab033e4ba658604fb0dfe50783fedf91380153436d2669f2c8daffbcb50e42b52d8bba8ff081b07fdbada8a24182e65aecb93b5767200cc1d55a352c8873dc48c5e64f13b"], 0x9) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000440)="4aaf0719b6c451be5d58ca1fc8ef842aaba95ffcb0155dcb0880f886bba38bd5567cd176db5a5159ae46573412994cdce00c74ca6a11638b09f493f88ad29ca4975a66d50bd7abe536db50a3de364cd39b6d76f5082a3e3494ccc823", &(0x7f00000004c0)="299b062c0cfa690aede58f6a16b132b440e18b78"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r9, 0x4148, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) 4.976840415s ago: executing program 6 (id=2336): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) chdir(&(0x7f0000000080)='./file0\x00') r1 = syz_clone(0x0, &(0x7f0000000180)="8dc11f72e1a54e7b3c3cd5bf24b95e8e439af076d32774665401b67d3bb6b8286c65b26fb3db50d836581a848c58152a2cbbab714b4ad0cdca87df365ebe8f1499d37001250bac4b513a4e53168e17d6bd6f630a05a0f44a22950872e61b491fa78d76a34eaab8598129efd1d23c16dddc6014d07d6030d977890fc1a317604c67e6e81250349bd0d1e91cad431347fbaa79bf11207b6d1f1cfbf9529981dba3f5ed06e61d01140f1db0083bdc8195", 0xaf, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="2bb3de7c9399a33e93da66145f16d6e68dc9405231f7b8198ea31fc72b1c6c838dcbbe6bd4af181ec3") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xd87) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r2, 0x58, &(0x7f0000000740)}, 0x10) syz_clone(0x8140311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x496401) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) accept4(r3, 0x0, &(0x7f0000000800), 0x80800) setresuid(0xee01, r4, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0xa3c}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00200002000000425bd7000fedbdf25030000000791f4a797a072b8eb285576fc35d4da1790bb27be4c4737e37c3b482a4ef065c46474d2c36bde8c148f00b386bb2c3f4a2eb919f46bc0c01ca3edd0d8cbcc89d4e8a33b09ed7e2bf87ee9683f47cf88fa4352b5b00370374959ab33a1af1f6200bf5d75236e7d996366fd6cd2b83d36f6d1cb0efd58e97dbf52a3b9c25cb036da016c384c456564df633ce9089aa46f7488de5e61ad72f483c70edd35566bb22302f26eea579d99fbea26214c0d6008218d9f8f1c1489eae1aec03a387a81a5a23e2b2be935ee086e65a05cabc9909737c1447049381c8b4e4a3a3d4be901208008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x2e0}}, 0x4000) mount$fuse(0x0, 0x0, 0x0, 0x102b076, &(0x7f0000002280)=ANY=[]) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) r8 = openat(r7, &(0x7f00000000c0)='./file0\x00', 0xc2881, 0x1cb) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.869199886s ago: executing program 6 (id=2348): pipe2(&(0x7f0000000040), 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.602381673s ago: executing program 3 (id=2351): socket$inet_icmp(0x2, 0x2, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfefdffe}, {0x80000006, 0x5, 0x9, 0x5}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000300010000", 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 1.462214476s ago: executing program 3 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async, rerun: 32) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async, rerun: 32) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (rerun: 32) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x67, 0x0, 0x4d, 0x5f}) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000005f00)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005e40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fd69000000000000000001006e657464657673696d0000000f0002006e657464657673696d30000008fedcb140000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futex_waitv(&(0x7f0000000500)=[{0x18, &(0x7f0000000200)=0x1000, 0x82}, {0x9, &(0x7f0000000240)=0x8, 0x2}, {0xe, &(0x7f00000002c0)=0xb8, 0x2}, {0x5, &(0x7f0000000300)=0x8, 0x82}, {0x3ff, &(0x7f0000000340)=0x8, 0x2}, {0x200, &(0x7f0000000380)=0xfffffffffffffff1, 0x2}, {0x2, &(0x7f00000003c0)=0x7, 0x80}, {0x4b, &(0x7f0000000440)=0x1, 0x2}, {0x2, &(0x7f0000000480)=0x7, 0x2}, {0xd1d4, &(0x7f00000004c0)=0x4, 0x82}], 0xa, 0x0, &(0x7f0000000640)={r8, r9+10000000}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.445912031s ago: executing program 6 (id=2353): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x32) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRES64=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) (async, rerun: 32) chdir(&(0x7f0000000940)='./file1\x00') (async, rerun: 32) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xa0543, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) (async, rerun: 32) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x0, r6}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 32) write(r8, &(0x7f0000000000)='3', 0x4e) (async) syz_emit_ethernet(0x82, &(0x7f0000000200)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) close(0x3) shutdown(r1, 0x1) ppoll(&(0x7f0000000100)=[{r1, 0x408}], 0x1, 0x0, 0x0, 0x0) 1.239389467s ago: executing program 3 (id=2354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000030000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 1.237899965s ago: executing program 3 (id=2355): r0 = fanotify_init(0x0, 0x400) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x11, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000004900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getgroups(0x1, &(0x7f0000006940)=[0xffffffffffffffff]) r8 = getpgrp(0xffffffffffffffff) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r9, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000080)={0xa8, 0xfffffff5, 0x3, [{{0x6, 0x3, 0x1, 0x3ff, 0xa, 0xfe, {0x1, 0x8, 0x8000000000000000, 0xffff, 0x8, 0x5, 0xffffffff, 0x8000, 0xc, 0x6000, 0x8, r10, r11, 0x1, 0xdc}}, {0x4, 0x4, 0x0, 0x9}}]}, 0xa8) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000006b00)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xee00}}, './dev\x00'}) (rerun: 32) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) (async, rerun: 64) fstat(r4, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) fcntl$getownex(r2, 0x10, &(0x7f0000006bc0)={0x0, 0x0}) (async) statx(r4, &(0x7f0000006c00)='./dev/mapper/control\x00', 0x100, 0x200, &(0x7f0000006c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) (async) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r19 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r19, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r18, 0x3, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r20}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x892}, 0x40000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000008040)=0x0) (async, rerun: 32) fstat(r1, &(0x7f0000008080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008140)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0), 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000004", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2], 0x140, 0x80}}, {{&(0x7f0000002a80)=@file={0x1, './dev\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002b00)="dea92ec2d771e9db1cb7764561e0c718e5c85e48", 0x14}, {&(0x7f0000002b40)="732dc177d6c6e341b1e50eb4a477a8deb428d595d3f36f7225fdd38ebc4f8cc3657b5ee75e6c5c1a6280069241be5c7d65d8671106d8eeb050b57b8eac07eae968b4da95677feeb94c825bb5bd0456352c161fb2bd6eee6efbc724d2e279d2b0048ff3b6dfefad688deb8e5b847263e5e979072421a42e83228a11b12afc1ae965323c3dd2ffada6766bb4b54479010d7cc1eb52fded06b4bfb745cb544e11935266d274026f23985c35577f62ec04bf8ae6b0b758197c7a37db37805273825a48c4b8fc4aa2248665e7ef0948f737026f3dcc4d8f45615400d5033dda2de97c45dc16", 0xe3}, {&(0x7f0000002c40)="48aa6f91bdc84fb44ea7b0cab4686a0b773294cfa5823da4993bbf2ffcae5b2de2c6a9c292f6313ea392681feb0e475cce54", 0x32}, {&(0x7f0000002c80)="76f8980fb4e924fc47578a31d912748c3a530575b0d2ee04eb", 0x19}], 0x4, &(0x7f0000002d00), 0x0, 0x40041}}, {{&(0x7f0000002d40)=@file={0x0, './dev/mapper/control/file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000002dc0)="78603f465dbea8052c3b81bfaf04f415e82b94767038318332f42237466456e079201fe55b35bb4c6e6c4f892779d940b3a5b8d4229ab25ae163120154b11dcc49355956492e9ffa713caf811e953c50db03bea5cc1819928bcd5dfc1d5cb280ee09dd3f781f112b7c3c54a804c9f2b85e526a8320fc0bcc5d549ff88014d7e6ae99b2ca26ea38eca059dcb52c05a97193ca408b43c2b3855dedcec165d2b21d0e51fba6fa6a91eab3a7ae", 0xab}, {&(0x7f0000002e80)="db1591226565aaaa185a74fbead415722c87682adfd2be0c6851be8853a9b2a02da4c32997dc45503adccd369a98dc6bc3f64b9f423381949561be44867915dfc584eaf41d4fc00f8b984b21941d611dfa2ab34913c0b4dc68cc012dac5357d334ac4fef081dfb86943dd81fabf3e4acd883d238b758dceb9618e19e513c99c76be921377d9c4a349dcc53465a00daddf567edba90a23cd67548c26051cc4dd60dd28a4d8c8f835f4e52b7e02b1e7ce5ba0e3354d66eaa5b0ccf717a7bc58a08eb0d04606cc328f127364d206bd7cb8edaa4e35a6c53e95239499e5d02466fecc88c2b279bbf46e7d68a", 0xea}, {&(0x7f0000002f80)="9075e34b75c5e1dbd4deaa952787cd11661d9b2a3280fa56ba31e11b4943cc2429a3dd215b6805a4bfad6e6215a5171f7039fc6136d05f62e142fcd8b5e104eaa8a988a46a7ff0121421216789fd007e44086e288b46ffeeeae44b49fdcbca", 0x5f}, {&(0x7f0000003000)="e58548c28f8d590ef00c39f478", 0xd}, {&(0x7f0000003040)="23aff15bf2eda529d4c877145dfc00d2d3edaaa4e8ffbd071f82dc9563518506593912d7d7ad672bcaef82e89e9f5257efef8794881c70706d395d80aa8f9132a649e053cafb3e499101dd11d4063ff146818533c994ea4e2c657a8e399fdb2271fba339c8cb46a6dbdf3ec493b2c129e0e9642e2346c7f8e33e95a29da99351a4cf8d499b2e8eee9bad1aacb15e56f88db812c2847ee4ede5e247c7990e7e25b13426798387a8edf73c21f5e4ca2ec2d01b183b5e39ceda420d9786987528f296967faed288c5bcb93ac06944109f8411e30fcf822a88cc7ae9790fbdb916ae53f93734bf7b56d7d4a7c576cbc2e416ba8c36dd41a6e9557636fda57936bda3e9fa166a27f43703274a8134de4c19ccf3aa171c3bc4abb1912587006806afa0ff77b0d33cc4440e41fc50122ffb2df0c94f84b2190a2efcc12caec76e18b4311d73da7bb2d8dd7ffb06847e15c8f0af2dd0fc29668bb01bb25e020abd285d1325f2d1753be79070e2693d9a392d8387fbf5cddbf021a7323df4c0dd15d04b8895c90b9babc091fb96b092dcfd9d8471460cbc48da3e6b6564e46f7afe7dac2d055f43604e1401443c379a28f3b78b63e0bf677a50f23104f9c6ad9c70aa5437aedd2079a72162c002785ab7f16f40b7cd3a79da1a267118f502d81d6b8a808b4d9e0e376a427070a205d3066f4d2ffaf9c8be190f9459006cfc2e938831df7f41ed0c3133fcd7ca70bf7ac9caa2d99bc544621b0fe7a1a6663def99544e86152d297a777e1c07a88a47068bea10b0374569f6a0e651e56676cbf9509173039b19549584a104ef7a46bff7798227259ab6653569090be7cd8c34fafd826f8f145e1f2cee160bb484e329726007befa3100d097b974f9efaff3bffea0ecbe33ddc10dcca489584c7221c0dc5f7c67283b781d5e93b71b30fe35f3313c6b8fd02aba265f86441888fc6741f544803e6ff2af8b920df538622da9b7c5d3c7cedafd5e84f8304696980de3378a414e32d43520120b44c06f1a46ff981bf76184c1e5865b841509a9150dc50fae8a7cc2830d44606093b54e305652eacd6c15ed73e02e1f4142a0b881503c8df2135eb6f4b09b5a286b6b01d71ad70845123ff3956f3245f235a3d4a35be126a634a9f4d397f83df9fda106e981910357c44501be04317c9db61c3c28ba0d3b42c412768abe275031d72a8a5966b1436471af40cb0e94cdcf5d5d410f0f180d69d9499c3c82be763b67b3c2bd46a96b29da67b75ef9a8b1a4d47eb80730ab43d22d9c19affc2c46c0e6afb7550d9ed0874b77319945ae5299106c959b2c05ba7246055c3efdfab750c511f4343a5a694cb26dde5195e58000cef486a84597e652ff004b56d5f22c60e951edc9d601a414a0119aba69ff2cadb705516bb0f691741895e5f608f142a45e54740f79f1358aad0728ef886d88c1aea7b7936c8eec12c024a051549f969a9134d2bc7b17ea2962bdb2eea28dbcd4d08dcdc1d99231c0378280aa63aaab1f0d5c15ec995dba4412bf298020350775633f12778b87650ac61174fbb7ccf095ad4b763d94b73bcfcaf6f2f6cbab348165d30255ca252c0d2f1389db9153f7e8de44ffe8754c08a7bd28d0b26aac39eeb984ba6b478db0f614ea17efa4639f528b25641e7dfba49464a1a0b5c851c2ca61ea9f329bcc954909729dcb50aae4bba21c53622861ffb7f5b694709d1c26a566d0c5791764cdca5470671052657c3a75c8e3359c0496873ebe332818e3bfd0e9419d5fea96de03910839d532865dbf65d23650a1a428cedfa86510b02f50c8e977dc7076bbe67a0beb771b9e13ff95b7e709e53c2354bfda8fff9eb0d898c6e028cddf9fb3a12c789592e80eb59901943fa713c171ad2921bc446530be2fc128b77122b2a90c44c1d54237c581959a2bb26f69c97654d21fb485542ad70e323665cdc77a22a94f2d81eaa39225d49fec66ab1c2dd26b3e4d22a9f80dd6462c8cb3e85ac99cf33c50b1fb68aaa8a63790c06d3cfc4be5743c15a91b202000566ec84e1f2bb93d69a7da2b5fdc188399f5ec4405e3df3106f8493eac601d7a4119e42b637b35cad80191f2172e13588e59298d0b22828ea8310bcf61b9030a51b82ecf14e1e0d6c424576d30555ea3a580a197abfebb1d297bc2a17f84851f6d2cfb6e62555b166fd33ce6630a677f16d9deab17cbe00799e7ea3d0c001f14ce8a3d8f4f7d237554bf26e5d491dc398118cef1a4e143c7413d1250fbe73a635106e6ab580a52e6c6be07b24c5772638e159dc6eb13e734b94ce9c4cba44d424442e245dcf7b68914f6c005d9f4c072a067082148de644c0c0ddf6f8d314ff9a42db92884af5f92a2c1cdcc0ca3b9f65388a1a082b883e106fc7a321c9eb21d0a77a238f8c36156ac86b11060e810b5aea1e505e2d66788085f9ad1f70b119ae86df8410e2b0fed601a8125cfff5705598618cca0af83dd8801d2435cc4680112121494d599d379a39249fb73c4585696761c4c4d1085753a65c40c3682172904901fd332789304279c188ef1296940c289805e96c455120c2567ac837f310de6e79f57c37c99aa5b094efa8f727c598a966e722c5313aab312f34ffdb750ac22c3b62edc3abf47594977e8828144fac9243d364cfd3220c66e2317627ca83a4c05f20e3ca6fa623fa4c30563dfa4e3f92b4cc882ff4b7564a3f55fb5b28d8752c935e7c1fb8090c4a19fc77d42ca508ee3d4cde9f65d88b45e0632fccbd27b1f0afac4522bc5c7a2db3fb1f79d344d48bce60b016f183476600c063a38f743ec146eac7f0580b7b589493e631cdfb1864f18146ee1964e3a82c37a33a54584920c6e73953ca3c02e3afc3aee046aa092d37f5091217e48b6b83c651b94c5aec55ec43b78064eef1c159123e94f05b11ef1d424b712a99afd71dac4ef0ea4aa5aa6b5e3d9cc8e2e149d187fdb97d8c0660f74aa7a460a41db67d9b0b3937dce12b86682530c2ad7ce0b8024a45c5bf62dc35a612c9858e9c31cebf76c08a1b227c492a08ba714a2f402558722c9fbbe142ab109d91cae934929e2d00582f3726d37bb9b45a5759f358a89caf092eb0f9f21bbd9c905c3c1ced6f19bafb8a51c57748e2dd83cdc2347bb10528a6e2e6190bcd0e5d73a5f7f138ba00a5644e0788f2b02c303b7f82d2a3666e6fafbaa98abf435b68ae4518dc595f8d76fb21683de40789dc4cd733910074fd01eed9c990d34adf02c191da9bda86c19d8a0227417340b7814f3772acf67c99d4d2c4a7350aa64a712e08f564eb7e6882efae9ee1f1732e34fc6ff0ab57f97a9c44614fd30727355935da9172fe6e175434399ead27ba44a444dc0add424624d740ce913442f05b393d981643d9318b7a6bc8560864c978dd9c09c7f85dbaadd21d549633ca7222964e0ba20c85caed90754d7e2a5b382758572c6099d9824714282dc7e09dbaae7ee594f29b229d98782403e0ed3554f9813894d1c0b46be741cf3b36f4094aada2a0b5da2926bd273ce32a97a6683ca0d8cd29c9f24d79003e9fa27daa4dbf484c24f2d5cd120951c998883fd61e0dcf7b20a75152e655d76193a03a467b30d629321562897163a4b9bf168bba408f8ff1cf2e1bf84fc5a63b70ced6a31fe400de72c27ed8bdb6d04d5456f3687be56e3ac929844e098f549a50eab6f3e382ba1c4e6153a8c78f9ca4f0acba60a9fe60992361dd7512c20d07aaee32bbd51cb356bc395766610897ee139baae71096a7ebae1c99e7acfb60206ac6da3515b714e9f825a99f060a099ecc580a30af18afbf5f30fcebee0db8970df143ef21a5efcbb90b4a2717648d705bf50ee36705efef318311e35334d7ee3dd366cd22db77c306b721038f73d2b7cbea6da33d23536823ead51a5e8f2f53dcaf0bda5188ca4293a65e6c906a79686dd6d95115f76392a38ef63e75aea86ae8497231e1db9a5fc75cc43eb20000c2fbf565a19f5e0e59e70459de3a869c4bac952f97874edd03a7c71f54b2506b1a898847d9634c143c5df5a5124f1c168ff7fdd1a2abd74e0c8fe1f5ddad96f65fcbb918aafb7d5ef6f381f2541dc4918b8eca3d9dbb7901322afdfdb80bd45f9719c23fb60c8c9e028e3ee64dd2fadd7aa2bad0a59d5b17d5e493817556057e5fcef9b8dba833fc1159f8c0f19870a65e000c3b1167e461e599f0a3eb59f551fcd0ac9e6b99665a2497c3d88c7d4c4bde3efd3951d3c24f1d7747d6eb14deaf33a683dbdb869bb903ccdebf8ece3d45e01c622e28155fb99173c5f75ad53c1f94914ad9670278d1217f044037eed78ea18625b7670bb4765927962a18cc1e26dc6ed936a786eb5cd2e4991d88aaa951d00e22e96efc3d00bf0fb13d708b61b38f76444b97d43827aa2d71b95ccdc29efabd07229588ab98493f23c2b72ba0d5af0837d3ffb06b527eb3d134ec2374f899fff60f83dbd196911c560b73b7b28e40921a747e1d3b7ac05036f64d7db21fc055f0754f9a0d6b00d4fd07a404a33821d1a6134c9afb95e10f78e19b04baafcf3a85ed9c5e62503a72ad919881352596faba7cd51fc87d85477765b6ad66fd0cdb135873884cbd166dff2a4985052a5f69e9e449f88baded3a113f83d6850f09fa80c8f192ab75b139767dc588d7cc02481692dd30c51f18c260b1d5588dd32d85e529fb1ce2349a2cb93b67ac6c57daa685192e6ceb93b7ec39897d4d93fc54afd59659830ebe639a15acacfc7d612dba6bd626925fa534a9e4db8bffaab5902e821e9d109e7acb508bde49b7373afcd18658489cfc4e3bc825623865c40bcdf87a69b5cb5acb19cb781ff6fc3447f49f55a79ee1ea3b8d95662445fa440e2ae5c1b20bccfa3f12876f9bb8add8cc9948adc9d89bae49b9067a1f46b02b23302fa358cf23e8f815c2f5468f220b1a6b885320e909ad6943cc7501bf6d22b0a4513848284e110aa883452f719afcfe16cf0ac954f0165f3b45544d0d34628fdd1a4a9f71a500519280cb96858954e4cdf3a35c71258ebcdfaa0a7806362f25dc0e7337fab1a2aaa909764c1bdaba8aa3ca1440b3516716dc5e0535a8a3e83a96d7dfe6ece0ac091b0fb324ae5bfcd7a2e88bb12ce53c028b3259946ada326d7d8fd883fb764be128fa913fa0c81f3f56daf7e92115f1cfe9cf90b3bd2145e8b12288ed540d034565d1e23e2e568c907a973f21f0a1183dbfb2e8f0caa05e04462788c4a3dbf2994b4ec2d6bfb7bdd3747f31598633e4946c8440cc598b3cd379a07b33528423e778dcd9213af795da3b77f393193a7657bbf707e17a042aa50a5197e70ccaa03e7599d7e8b971eb6352ced5a66563b8e15aef89929d23bacd4407345a53625b2724285cf851a07c8451833d873a6d3af1510b62569b4039242f53e14faae385c93f7d4ba3093b6bc620968b4847c32f37f2107f3cf972d7b755b72287c9000e7d84db784ecaadce47a470bc19df788e99333c3f370b235af6c223b17d43c86aed4bf1a01f1d329634a59422a5c4c09564b389bc76983e9b4cb53c04e2f6134a8beca2faf8502979108f463ba75a4fa0cb21af5b6f8bc252e140402d88b4ff5f8bd7c56f85ed48018bbea1fdaf56f3812743201a5ed65a7d4df1f69dde7a14aeafe4e8629a8390b629a50ff8c3c04ec26fbf9e4f1186fef353c2a5d1b96e63f590132416feedae4c1f34600936c8e6f62dc3ebce1dd30d7016591470e1735f92db78ba7b423065f05415f1c11ce5f1bc143d9e37a3b87cd3bcb404ec0cbb136550c45651f188965a94bc728", 0x1000}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r4, r4, r1, r3, r3, r1, r5]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r5, r2, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c}}], 0x110, 0x48000}}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004400)="e8547a0c00d2b5672938696a370a4392e3e812a2b0dc7b01dce9ff37061f2f409a59d124982b7ed773213175d70a75585e63c7dc20fb578b7e688f668cfec505a426f08baa2503145d8a490c8a073e5b7ca119eaa9e693f0b6a205286a71d02d9b313265a1963da08db87689343d29b5ddfad6a67f6b723e83463d96d2e2eb4a9796acbf5411f7f9762e", 0x8a}, {&(0x7f00000044c0)="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", 0xfe}, {&(0x7f00000045c0)="03c017c30f23d04bf5e5f28479f8387edeabb9947480cff417af2bd8e08fbf41f59d3a90135bb27e14be182cce1f2ec3c81fdf", 0x33}, {&(0x7f0000004600)="2f7879614313b929aa65e89c404cfa71b5492280ef92ec8ab77f78b5b1d9fb6826", 0x21}, {&(0x7f0000004640)}], 0x5, &(0x7f0000006980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0xc8, 0x4}}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f0000006a80)="cdc87d7cd2482e06916ceae7331c209158a346fa33", 0x15}], 0x1, &(0x7f0000006d40)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, r16}}}], 0x78, 0x48054}}, {{&(0x7f0000006dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000008000)=[{&(0x7f0000006e40)="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", 0x1000}, {&(0x7f0000007e40)="e663f223888893575ff9f13827e9d80b56f692414abde8f9b1a13ab7c57c9622b287561b5c9d7ef4afdb5f74f5efe0f36f48be1cb2fdd64d36bc34bd6b7e9e2877241bbdf4de0bbd9d79650a6129eabef4517c4b762de49174af5918852fa099788643f4c6d70a93978ebf471a1f8e2f8e7186805ce6d206f90af7504c1ee4b096a3fe371c08ec9d5e3776d4e9d6897ee742e6b0b44fbbfb4f63f598cc480831794c106a6e9651670e5c7d6a0344a9ba9950362ba2c303add970aa0ca7f9d946dfd991437853edcf65d5f96af4487a69db3d3669caef18fc563d64b3cc54cc5d27", 0xe1}, {&(0x7f0000007f40)="d6745bfb07ffd75731bd8e72fcde5aae1c50b1", 0x13}, {&(0x7f0000007f80)="c95dfcdb0f578da34e93c1eb182718ba280de8b8095051b09d012e8982f42d7a88df61847ff6bdfeee906a107b7777dd02e4cb1db1b90fc73298da035f3bf20b886c3ec5b93697b933d25b70746e23", 0x4f}], 0x4, &(0x7f0000008100)=[@rights={{0x20, 0x1, 0x1, [r4, r17, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r22}}}], 0x40}}], 0x6, 0x4000080) 1.175188621s ago: executing program 3 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="11223344", 0x66, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1.174808566s ago: executing program 3 (id=2357): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) chdir(&(0x7f0000000080)='./file0\x00') r1 = syz_clone(0x0, &(0x7f0000000180)="8dc11f72e1a54e7b3c3cd5bf24b95e8e439af076d32774665401b67d3bb6b8286c65b26fb3db50d836581a848c58152a2cbbab714b4ad0cdca87df365ebe8f1499d37001250bac4b513a4e53168e17d6bd6f630a05a0f44a22950872e61b491fa78d76a34eaab8598129efd1d23c16dddc6014d07d6030d977890fc1a317604c67e6e81250349bd0d1e91cad431347fbaa79bf11207b6d1f1cfbf9529981dba3f5ed06e61d01140f1db0083bdc8195", 0xaf, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="2bb3de7c9399a33e93da66145f16d6e68dc9405231f7b8198ea31fc72b1c6c838dcbbe6bd4af181ec3") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xd87) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r2, 0x58, &(0x7f0000000740)}, 0x10) syz_clone(0x8140311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x496401) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) accept4(r3, 0x0, &(0x7f0000000800), 0x80800) setresuid(0xee01, r4, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0xa3c}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00200002000000425bd7000fedbdf25030000000791f4a797a072b8eb285576fc35d4da1790bb27be4c4737e37c3b482a4ef065c46474d2c36bde8c148f00b386bb2c3f4a2eb919f46bc0c01ca3edd0d8cbcc89d4e8a33b09ed7e2bf87ee9683f47cf88fa4352b5b00370374959ab33a1af1f6200bf5d75236e7d996366fd6cd2b83d36f6d1cb0efd58e97dbf52a3b9c25cb036da016c384c456564df633ce9089aa46f7488de5e61ad72f483c70edd35566bb22302f26eea579d99fbea26214c0d6008218d9f8f1c1489eae1aec03a387a81a5a23e2b2be935ee086e65a05cabc9909737c1447049381c8b4e4a3a3d4be901208008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x2e0}}, 0x4000) mount$fuse(0x0, 0x0, 0x0, 0x102b076, &(0x7f0000002280)=ANY=[]) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) r8 = openat(r7, &(0x7f00000000c0)='./file0\x00', 0xc2881, 0x1cb) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 511.915378ms ago: executing program 6 (id=2358): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) (async) close(0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000080)=0xa1, 0x8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x40000000002004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x40000000002004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = io_uring_setup(0x1e41, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000140)={0x3, 0x1, 0x7fff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000300)={0x0, 0x5d6a, 0x0, 0x3, 0x359, 0x0, r6}, 0x1) ioctl$RTC_ALM_READ(r5, 0x40187013, &(0x7f0000000040)) (async) ioctl$RTC_ALM_READ(r5, 0x40187013, &(0x7f0000000040)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0x9, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x2000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x9, 0x5}, {0x60000, 0x8000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0x8000000, 0xf, 0x3, 0x12, 0x7, 0x4, 0x8, 0xdc, 0xb, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x6, 0x82, 0x9, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x80a0000, 0x4000, 0x10, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x1}, {0xffff1000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x50000, 0x2024, 0x2, 0x0, 0xb000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=2359): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000440)=[@nested_load_code={0x12e, 0x4f, {0x3, "470f320fbc094298640f01c90f01c3660f72f4b2650f0666baf80cb80c1d8582ef66bafc0cb800000080efb9de0a00000f32f20f1b6e76"}}], 0x4f}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/vmcoreinfo', 0x26102, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d9211a, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d9211a, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) (async) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9031}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9031}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x2c, 0x52, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x801) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf25070000000c00060001000000ba0199e2ab13609d04ec01000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf25070000000c00060001000000ba0199e2ab13609d04ec01000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) (async) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.565448][T13176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.619523][T13176] hsr_slave_0: entered promiscuous mode [ 224.620277][T13176] hsr_slave_1: entered promiscuous mode [ 224.620896][T13176] debugfs: 'hsr0' already exists in 'hsr' [ 224.620913][T13176] Cannot create hsr debugfs directory [ 224.770504][T13250] bond0: option arp_interval: invalid value (¹¹‘À0X4‘wH¦fé(4û»éoñ†íÞ©AºiÍäMHë^œ@|=&$ÞÊèA¨¡) [ 224.770533][T13250] bond0: option arp_interval: allowed values 0 - 2147483647 [ 224.777957][T13250] overlay: ./sys/class/net/bond0/bonding/arp_interval is not a directory [ 224.874858][T13176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.897064][T13254] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1870'. [ 224.926667][T13257] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 224.967502][T13176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.091959][T13176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.156290][T13271] binder: 13270:13271 ioctl c00c620f 200000001100 returned -22 [ 225.231097][T13277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 225.231342][T13277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 225.250394][T13176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.463225][T13176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.470351][T13176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.471200][T13176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.484406][ T42] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 225.491469][T13176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.492713][T13176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.509139][T13176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.510551][T13176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.527902][T13176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.584794][T13176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.592336][T13176] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.596121][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.596219][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.598230][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1881'. [ 225.598251][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1881'. [ 225.603828][T13307] IPVS: length: 120 != 24 [ 225.604570][T13306] IPVS: length: 120 != 24 [ 225.625813][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.625895][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.651818][ T42] usb 11-1: Using ep0 maxpacket: 32 [ 225.656420][ T42] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 225.657462][ T42] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 225.657499][ T42] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 225.657521][ T42] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.657543][ T42] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 225.659847][ T42] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.659866][ T42] usb 11-1: Product: syz [ 225.659878][ T42] usb 11-1: Manufacturer: syz [ 225.659891][ T42] usb 11-1: SerialNumber: syz [ 225.687407][ C1] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 225.694590][ T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input20 [ 225.713844][T13176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.728755][T13316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16406 sclass=netlink_route_socket pid=13316 comm=syz.5.1883 [ 225.748352][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1883'. [ 225.768104][T13313] syzkaller0: entered promiscuous mode [ 225.768124][T13313] syzkaller0: entered allmulticast mode [ 225.873349][ T5731] Bluetooth: hci4: command tx timeout [ 225.926717][ T42] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 225.926738][ T42] (id 0x00) [ 226.014641][ T42] rc_core: IR keymap rc-imon-pad not found [ 226.014655][ T42] Registered IR keymap rc-empty [ 226.014694][ T42] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 226.014704][ T42] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 226.084793][T13342] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 226.084818][T13342] overlayfs: failed to set xattr on upper [ 226.084826][T13342] overlayfs: ...falling back to redirect_dir=nofollow. [ 226.084834][T13342] overlayfs: ...falling back to index=off. [ 226.084842][T13342] overlayfs: ...falling back to uuid=null. [ 226.084849][T13342] overlayfs: ...falling back to xino=off. [ 226.113336][T13176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.126326][ T5444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.145092][ T42] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 226.152314][ T42] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input21 [ 226.154582][ T42] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:6> initialized [ 226.159478][T13345] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1888'. [ 226.225112][T13176] veth0_vlan: entered promiscuous mode [ 226.240783][T13176] veth1_vlan: entered promiscuous mode [ 226.271679][T13176] veth0_macvtap: entered promiscuous mode [ 226.275308][T13176] veth1_macvtap: entered promiscuous mode [ 226.286984][T13176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.297962][T13176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.343790][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.344193][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.344312][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.344658][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.427846][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.427865][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.458190][T13356] 9p: Unknown access argument : -22 [ 226.492739][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.492761][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.495377][T13278] imon:send_packet: task interrupted [ 226.495487][T13278] imon:send_packet: packet tx failed (-512) [ 226.500256][T13278] imon:vfd_write: send packet #0 failed [ 226.516360][ T851] usb 11-1: USB disconnect, device number 6 [ 226.529996][T13358] FAULT_INJECTION: forcing a failure. [ 226.529996][T13358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.530027][T13358] CPU: 3 UID: 0 PID: 13358 Comm: syz.7.1891 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.530050][T13358] Tainted: [L]=SOFTLOCKUP [ 226.530057][T13358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.530069][T13358] Call Trace: [ 226.530083][T13358] [ 226.530091][T13358] dump_stack_lvl+0x100/0x190 [ 226.530123][T13358] should_fail_ex.cold+0x5/0xa [ 226.530151][T13358] _copy_from_user+0x2e/0xd0 [ 226.530171][T13358] copy_msghdr_from_user+0x9f/0x4c0 [ 226.530213][T13358] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 226.530244][T13358] ? lock_acquire+0x1d1/0x380 [ 226.530263][T13358] ? get_pid_task+0x2a/0x250 [ 226.530289][T13358] ___sys_sendmsg+0x106/0x1e0 [ 226.530314][T13358] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.530339][T13358] ? get_pid_task+0x106/0x250 [ 226.530371][T13358] ? find_held_lock+0x2b/0x80 [ 226.530409][T13358] __sys_sendmsg+0x160/0x210 [ 226.530431][T13358] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.530463][T13358] do_syscall_64+0x123/0x790 [ 226.530489][T13358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.530507][T13358] RIP: 0033:0x7f6636d9e159 [ 226.530523][T13358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.530538][T13358] RSP: 002b:00007f6637c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.530556][T13358] RAX: ffffffffffffffda RBX: 00007f6637025fa0 RCX: 00007f6636d9e159 [ 226.530567][T13358] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 226.530577][T13358] RBP: 00007f6637c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.530586][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.530598][T13358] R13: 00007f6637026038 R14: 00007f6637025fa0 R15: 00007fff53820888 [ 226.530622][T13358] [ 226.620516][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1892'. [ 226.651456][T13364] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 226.652816][T13364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13364 comm=syz.3.1854 [ 226.653268][T13364] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 226.653337][T13364] dummy0: entered promiscuous mode [ 226.830484][T13373] netlink: 'syz.3.1895': attribute type 30 has an invalid length. [ 226.841698][T13375] netlink: 'syz.3.1895': attribute type 3 has an invalid length. [ 226.921298][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 226.921393][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 226.965853][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 226.965871][ T43] audit: type=1400 audit(1789111172.003:1440): avc: denied { setattr } for pid=13380 comm="syz.3.1897" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 226.972291][ T43] audit: type=1400 audit(1789111172.003:1441): avc: denied { read } for pid=13380 comm="syz.3.1897" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 226.973077][ T43] audit: type=1400 audit(1789111172.003:1442): avc: denied { open } for pid=13380 comm="syz.3.1897" path="/4/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.001424][T13381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.001646][T13381] block device autoloading is deprecated and will be removed. [ 227.003146][ T43] audit: type=1400 audit(1789111172.031:1443): avc: denied { ioctl } for pid=13380 comm="syz.3.1897" path="/4/file0/file0" dev="fuse" ino=64 ioctlcmd=0x911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.025592][T13384] ceph: No mds server is up or the cluster is laggy [ 227.375727][T13404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=13404 comm=syz.3.1902 [ 227.416726][ T1349] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 227.510630][T13414] FAULT_INJECTION: forcing a failure. [ 227.510630][T13414] name failslab, interval 1, probability 0, space 0, times 0 [ 227.510661][T13414] CPU: 3 UID: 0 PID: 13414 Comm: syz.6.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.510687][T13414] Tainted: [L]=SOFTLOCKUP [ 227.510694][T13414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.510705][T13414] Call Trace: [ 227.510712][T13414] [ 227.510720][T13414] dump_stack_lvl+0x100/0x190 [ 227.510750][T13414] should_fail_ex.cold+0x5/0xa [ 227.510783][T13414] should_failslab+0xc2/0x120 [ 227.510807][T13414] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 227.510828][T13414] ? __d_alloc+0x35/0xa50 [ 227.510857][T13414] __d_alloc+0x35/0xa50 [ 227.510902][T13414] d_alloc+0x4a/0x1e0 [ 227.510930][T13414] lookup_one_qstr_excl+0x171/0x250 [ 227.510959][T13414] start_dirop+0x59/0xb0 [ 227.510980][T13414] simple_start_creating+0xf9/0x110 [ 227.511024][T13414] ? __pfx_simple_start_creating+0x10/0x10 [ 227.511048][T13414] ? mntput+0x70/0xa0 [ 227.511069][T13414] ? simple_pin_fs+0xa3/0x190 [ 227.511090][T13414] debugfs_start_creating.part.0+0x9f/0x180 [ 227.511117][T13414] __debugfs_create_file+0x86/0x4d0 [ 227.511146][T13414] debugfs_create_file_full+0x41/0x60 [ 227.511175][T13414] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 227.511199][T13414] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 227.511240][T13414] ? avc_has_perm+0x135/0x1e0 [ 227.511263][T13414] ? lockdep_init_map_type+0x5c/0x250 [ 227.511288][T13414] ? __pfx_tun_setup+0x10/0x10 [ 227.511315][T13414] alloc_netdev_mqs+0x314/0x15c0 [ 227.511336][T13414] ? bpf_lsm_capable+0x9/0x10 [ 227.511364][T13414] __tun_chr_ioctl+0x197b/0x4880 [ 227.511382][T13414] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.511399][T13414] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 227.511425][T13414] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 227.511443][T13414] ? __fget_files+0x34/0x3d0 [ 227.511473][T13414] ? selinux_file_ioctl+0x13b/0x290 [ 227.511491][T13414] ? selinux_file_ioctl+0xb6/0x290 [ 227.511512][T13414] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 227.511533][T13414] __x64_sys_ioctl+0x18e/0x210 [ 227.511553][T13414] do_syscall_64+0x123/0x790 [ 227.511579][T13414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.511596][T13414] RIP: 0033:0x7f001539e159 [ 227.511629][T13414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.511648][T13414] RSP: 002b:00007f0016229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.511667][T13414] RAX: ffffffffffffffda RBX: 00007f0015625fa0 RCX: 00007f001539e159 [ 227.511679][T13414] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 227.511691][T13414] RBP: 00007f001543503b R08: 0000000000000000 R09: 0000000000000000 [ 227.511701][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.511711][T13414] R13: 00007f0015626038 R14: 00007f0015625fa0 R15: 00007ffe53690e48 [ 227.511737][T13414] [ 227.564864][T13415] syzkaller1: entered allmulticast mode [ 227.598121][ T1349] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 227.606595][ T1349] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.606669][ T1349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.607695][ T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 227.624954][ T1349] as10x_usb: device has been detected [ 227.625282][ T1349] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 227.650173][ T1349] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 227.659835][ T1349] as10x_usb: error during firmware upload part1 [ 227.660069][ T1349] Registered device Abilis Systems DVB-Titan [ 227.750974][T13430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.767735][T13430] i2c i2c-0: delete_device: Extra parameters [ 227.770330][T13430] overlayfs: fs on './sys' does not support file handles, falling back to index=off,nfs_export=off. [ 227.834571][T13435] netlink: 'syz.7.1910': attribute type 5 has an invalid length. [ 227.889047][ T1349] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 227.964275][ T5736] logitech-hidpp-device 0003:046D:C082.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 228.062236][T13447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=13447 comm=syz.7.1914 [ 228.063609][T13444] fido_id[13444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.068631][T13447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13447 comm=syz.7.1914 [ 228.099403][ T43] audit: type=1400 audit(1789111173.061:1444): avc: denied { read } for pid=13442 comm="syz.3.1913" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.106712][ T5731] Bluetooth: hci4: command tx timeout [ 228.428720][ T1349] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 228.957737][T13415] ceph: No mds server is up or the cluster is laggy [ 228.983254][ T43] audit: type=1326 audit(1789111173.893:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.3.1919" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f2fb9e159 code=0x0 [ 229.072820][T13472] FAULT_INJECTION: forcing a failure. [ 229.072820][T13472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.072854][T13472] CPU: 2 UID: 0 PID: 13472 Comm: syz.7.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.072878][T13472] Tainted: [L]=SOFTLOCKUP [ 229.072885][T13472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.072897][T13472] Call Trace: [ 229.072903][T13472] [ 229.072929][T13472] dump_stack_lvl+0x100/0x190 [ 229.072961][T13472] should_fail_ex.cold+0x5/0xa [ 229.072986][T13472] _copy_from_iter+0x1f4/0x1690 [ 229.073006][T13472] ? __asan_memset+0x23/0x50 [ 229.073022][T13472] ? __pfx__copy_from_iter+0x10/0x10 [ 229.073040][T13472] ? __pfx___alloc_skb+0x10/0x10 [ 229.073059][T13472] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 229.073088][T13472] ? sock_has_perm+0x25a/0x2f0 [ 229.073114][T13472] ? __pfx_sock_has_perm+0x10/0x10 [ 229.073141][T13472] netlink_sendmsg+0x808/0xda0 [ 229.073202][T13472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.073224][T13472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 229.073258][T13472] ____sys_sendmsg+0xa4d/0xbe0 [ 229.073286][T13472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.073311][T13472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.073348][T13472] ? lock_acquire+0x1d1/0x380 [ 229.073368][T13472] ? get_pid_task+0x2a/0x250 [ 229.073453][T13472] ___sys_sendmsg+0x190/0x1e0 [ 229.073482][T13472] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.073508][T13472] ? get_pid_task+0x106/0x250 [ 229.073542][T13472] ? find_held_lock+0x2b/0x80 [ 229.073579][T13472] __sys_sendmsg+0x160/0x210 [ 229.073600][T13472] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.073634][T13472] do_syscall_64+0x123/0x790 [ 229.073660][T13472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.073680][T13472] RIP: 0033:0x7f6636d9e159 [ 229.073695][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.073709][T13472] RSP: 002b:00007f6637c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.073726][T13472] RAX: ffffffffffffffda RBX: 00007f6637025fa0 RCX: 00007f6636d9e159 [ 229.073739][T13472] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 229.073751][T13472] RBP: 00007f6637c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.073763][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.073774][T13472] R13: 00007f6637026038 R14: 00007f6637025fa0 R15: 00007fff53820888 [ 229.073800][T13472] [ 229.087817][ T43] audit: type=1326 audit(1789111173.987:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.3.1919" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f2fb9e159 code=0x0 [ 229.324828][ T42] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 229.407186][T13486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.486765][ T42] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 229.488032][ T42] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.488059][ T42] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 229.489282][ T42] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.489307][ T42] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 229.492025][ T42] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.492159][ T42] usb 11-1: Product: syz [ 229.492172][ T42] usb 11-1: Manufacturer: syz [ 229.492186][ T42] usb 11-1: SerialNumber: syz [ 229.498583][ T42] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 229.508797][ T42] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 229.516091][ T42] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 229.713269][T13470] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 229.719963][T10202] usb 11-1: USB disconnect, device number 7 [ 229.740541][T10202] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 229.745951][T10202] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 229.747249][T10202] ti_usb_3410_5052 11-1:2.0: device disconnected [ 230.061131][T13500] FAULT_INJECTION: forcing a failure. [ 230.061131][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 230.061161][T13500] CPU: 1 UID: 0 PID: 13500 Comm: syz.3.1930 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.061183][T13500] Tainted: [L]=SOFTLOCKUP [ 230.061188][T13500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.061197][T13500] Call Trace: [ 230.061203][T13500] [ 230.061209][T13500] dump_stack_lvl+0x100/0x190 [ 230.061237][T13500] should_fail_ex.cold+0x5/0xa [ 230.061259][T13500] should_failslab+0xc2/0x120 [ 230.061278][T13500] kmem_cache_alloc_noprof+0x92/0x6a0 [ 230.061299][T13500] ? skb_clone+0x190/0x400 [ 230.061322][T13500] skb_clone+0x190/0x400 [ 230.061340][T13500] nfnetlink_rcv_batch+0x1c8/0x2880 [ 230.061363][T13500] ? kmem_cache_free+0x127/0x6c0 [ 230.061388][T13500] ? __lock_acquire+0x5c0/0x1f40 [ 230.061407][T13500] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 230.061431][T13500] ? lock_acquire+0x1d1/0x380 [ 230.061446][T13500] ? avc_has_perm_noaudit+0x56/0x3b0 [ 230.061474][T13500] ? avc_has_perm_noaudit+0x145/0x3b0 [ 230.061495][T13500] ? __asan_memset+0x23/0x50 [ 230.061508][T13500] ? __nla_validate_parse+0x1e7/0x28b0 [ 230.061535][T13500] ? __pfx___nla_validate_parse+0x10/0x10 [ 230.061556][T13500] ? rcu_is_watching+0x13/0xc0 [ 230.061575][T13500] ? cap_capable+0x107/0x430 [ 230.061601][T13500] ? __nla_parse+0x40/0x60 [ 230.061624][T13500] nfnetlink_rcv+0x3bd/0x440 [ 230.061653][T13500] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 230.061678][T13500] netlink_unicast+0x585/0x850 [ 230.061697][T13500] ? __pfx_netlink_unicast+0x10/0x10 [ 230.061712][T13500] ? __pfx_sock_has_perm+0x10/0x10 [ 230.061739][T13500] netlink_sendmsg+0x8b0/0xda0 [ 230.061758][T13500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.061776][T13500] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.061804][T13500] ____sys_sendmsg+0xa4d/0xbe0 [ 230.061827][T13500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.061848][T13500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.061878][T13500] ? lock_acquire+0x1d1/0x380 [ 230.061898][T13500] ? get_pid_task+0x2a/0x250 [ 230.061926][T13500] ___sys_sendmsg+0x190/0x1e0 [ 230.061956][T13500] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.061981][T13500] ? get_pid_task+0x106/0x250 [ 230.062033][T13500] ? find_held_lock+0x2b/0x80 [ 230.062068][T13500] __sys_sendmsg+0x160/0x210 [ 230.062087][T13500] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.062115][T13500] do_syscall_64+0x123/0x790 [ 230.062138][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.062154][T13500] RIP: 0033:0x7f1f2fb9e159 [ 230.062168][T13500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.062181][T13500] RSP: 002b:00007f1f30ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.062198][T13500] RAX: ffffffffffffffda RBX: 00007f1f2fe25fa0 RCX: 00007f1f2fb9e159 [ 230.062208][T13500] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 230.062217][T13500] RBP: 00007f1f30ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.062226][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.062236][T13500] R13: 00007f1f2fe26038 R14: 00007f1f2fe25fa0 R15: 00007ffe2f248be8 [ 230.062256][T13500] [ 230.132357][T13502] __nla_validate_parse: 4 callbacks suppressed [ 230.132375][T13502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 230.134764][T13502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 230.319059][ T5731] Bluetooth: hci4: command tx timeout [ 230.386820][T13516] IPv6: syztnl0: Disabled Multicast RS [ 230.521346][T13524] FAULT_INJECTION: forcing a failure. [ 230.521346][T13524] name failslab, interval 1, probability 0, space 0, times 0 [ 230.521376][T13524] CPU: 0 UID: 0 PID: 13524 Comm: syz.7.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.521397][T13524] Tainted: [L]=SOFTLOCKUP [ 230.521403][T13524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.521415][T13524] Call Trace: [ 230.521422][T13524] [ 230.521429][T13524] dump_stack_lvl+0x100/0x190 [ 230.521456][T13524] should_fail_ex.cold+0x5/0xa [ 230.521473][T13524] should_failslab+0xc2/0x120 [ 230.521488][T13524] kmem_cache_alloc_noprof+0x92/0x6a0 [ 230.521501][T13524] ? skb_clone+0x190/0x400 [ 230.521535][T13524] skb_clone+0x190/0x400 [ 230.521549][T13524] nfnetlink_rcv_batch+0x1c8/0x2880 [ 230.521565][T13524] ? kmem_cache_free+0x127/0x6c0 [ 230.521584][T13524] ? __lock_acquire+0x5c0/0x1f40 [ 230.521598][T13524] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 230.521615][T13524] ? lock_acquire+0x1d1/0x380 [ 230.521626][T13524] ? avc_has_perm_noaudit+0x56/0x3b0 [ 230.521647][T13524] ? avc_has_perm_noaudit+0x145/0x3b0 [ 230.521663][T13524] ? __asan_memset+0x23/0x50 [ 230.521674][T13524] ? __nla_validate_parse+0x1e7/0x28b0 [ 230.521695][T13524] ? __pfx___nla_validate_parse+0x10/0x10 [ 230.521712][T13524] ? rcu_is_watching+0x13/0xc0 [ 230.521726][T13524] ? cap_capable+0x107/0x430 [ 230.521758][T13524] ? __nla_parse+0x40/0x60 [ 230.521776][T13524] nfnetlink_rcv+0x3bd/0x440 [ 230.521790][T13524] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 230.521808][T13524] netlink_unicast+0x585/0x850 [ 230.521823][T13524] ? __pfx_netlink_unicast+0x10/0x10 [ 230.521834][T13524] ? __pfx_sock_has_perm+0x10/0x10 [ 230.521854][T13524] netlink_sendmsg+0x8b0/0xda0 [ 230.521867][T13524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.521880][T13524] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.521913][T13524] ____sys_sendmsg+0xa4d/0xbe0 [ 230.521929][T13524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.521942][T13524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.521961][T13524] ? lock_acquire+0x1d1/0x380 [ 230.521972][T13524] ? get_pid_task+0x2a/0x250 [ 230.521988][T13524] ___sys_sendmsg+0x190/0x1e0 [ 230.522005][T13524] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.522022][T13524] ? get_pid_task+0x106/0x250 [ 230.522041][T13524] ? find_held_lock+0x2b/0x80 [ 230.522066][T13524] __sys_sendmsg+0x160/0x210 [ 230.522079][T13524] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.522099][T13524] do_syscall_64+0x123/0x790 [ 230.522116][T13524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.522128][T13524] RIP: 0033:0x7f6636d9e159 [ 230.522138][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.522149][T13524] RSP: 002b:00007f6637c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.522161][T13524] RAX: ffffffffffffffda RBX: 00007f6637025fa0 RCX: 00007f6636d9e159 [ 230.522168][T13524] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 230.522175][T13524] RBP: 00007f6637c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.522182][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.522188][T13524] R13: 00007f6637026038 R14: 00007f6637025fa0 R15: 00007fff53820888 [ 230.522202][T13524] [ 230.613674][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x79de instead [ 230.613698][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5367 instead [ 230.613714][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xcd2a instead [ 230.613730][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x1322 instead [ 230.613751][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6bcf instead [ 230.613766][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x63e3 instead [ 230.613780][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1a86 instead [ 230.613793][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1ffb instead [ 230.613809][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x4d89 instead [ 230.613825][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x3c6b instead [ 230.613840][T13530] jffs2: Further such events for this erase block will not be printed [ 230.614230][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x2a43 instead [ 230.614246][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x71e1 instead [ 230.614261][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x6a4c instead [ 230.614276][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xdb2f instead [ 230.614292][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x23de instead [ 230.614307][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x2f83 instead [ 230.614324][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa4de instead [ 230.614339][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x4939 instead [ 230.614353][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x7ffd instead [ 230.614366][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x4517 instead [ 230.614380][T13530] jffs2: Further such events for this erase block will not be printed [ 230.614781][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xae43 instead [ 230.614798][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x40cb instead [ 230.614814][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x04ba instead [ 230.614829][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x0eae instead [ 230.614846][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x8861 instead [ 230.614861][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x3cb1 instead [ 230.614878][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa293 instead [ 230.614894][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x9e2c instead [ 230.614907][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x8bd0 instead [ 230.614919][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x64ab instead [ 230.614934][T13530] jffs2: Further such events for this erase block will not be printed [ 230.615327][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x63df instead [ 230.615344][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xd8bc instead [ 230.615359][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x1474 instead [ 230.615372][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x7339 instead [ 230.615386][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x9461 instead [ 230.615400][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x6c77 instead [ 230.615415][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc73b instead [ 230.615429][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xfba7 instead [ 230.615444][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xafa1 instead [ 230.615459][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xd747 instead [ 230.615473][T13530] jffs2: Further such events for this erase block will not be printed [ 230.619941][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x5eca instead [ 230.619963][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x5638 instead [ 230.619979][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xbebc instead [ 230.619995][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x60c6 instead [ 230.620011][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x6241 instead [ 230.620024][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8ad7 instead [ 230.620037][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6463 instead [ 230.620051][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x89aa instead [ 230.620065][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0fcb instead [ 230.620085][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xa386 instead [ 230.620099][T13530] jffs2: Further such events for this erase block will not be printed [ 230.620447][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xc48c instead [ 230.620461][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xae8c instead [ 230.620475][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x860e instead [ 230.620491][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x5146 instead [ 230.620507][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xe657 instead [ 230.620523][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x327b instead [ 230.620539][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xdf21 instead [ 230.620554][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xad75 instead [ 230.620568][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xa367 instead [ 230.620581][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x85b2 instead [ 230.620594][T13530] jffs2: Further such events for this erase block will not be printed [ 230.622279][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x0e7b instead [ 230.622297][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xf035 instead [ 230.622310][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x99ed instead [ 230.622326][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x7b22 instead [ 230.622341][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x3f93 instead [ 230.622355][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xb82c instead [ 230.622370][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x08df instead [ 230.622385][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x4c57 instead [ 230.622400][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x56f1 instead [ 230.622414][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x84f7 instead [ 230.622426][T13530] jffs2: Further such events for this erase block will not be printed [ 230.622773][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xe107 instead [ 230.622788][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0f7d instead [ 230.622802][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xdbb1 instead [ 230.622816][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x460b instead [ 230.622830][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x2894 instead [ 230.622844][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xf94c instead [ 230.622858][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd7c9 instead [ 230.622872][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x8e8d instead [ 230.622884][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x93f4 instead [ 230.622898][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x7c89 instead [ 230.622912][T13530] jffs2: Further such events for this erase block will not be printed [ 230.625776][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x49c1 instead [ 230.625796][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x03f3 instead [ 230.625812][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x3756 instead [ 230.625827][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xf037 instead [ 230.625842][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xc812 instead [ 230.625856][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xa2a0 instead [ 230.625869][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x09e0 instead [ 230.625883][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x2d05 instead [ 230.625897][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x7e42 instead [ 230.625912][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x8e38 instead [ 230.625926][T13530] jffs2: Further such events for this erase block will not be printed [ 230.626292][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x10f9 instead [ 230.626307][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x1ee7 instead [ 230.626323][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x5cf2 instead [ 230.626338][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xed1d instead [ 230.626354][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xcbe7 instead [ 230.626370][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xebec instead [ 230.626386][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xeab1 instead [ 230.626401][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xd4e2 instead [ 230.626414][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xf3a1 instead [ 230.626429][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xddb7 instead [ 230.626443][T13530] jffs2: Further such events for this erase block will not be printed [ 230.626786][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xbfd4 instead [ 230.626802][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xfb75 instead [ 230.626816][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xa71e instead [ 230.626831][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf154 instead [ 230.626845][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xc284 instead [ 230.626859][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x04a8 instead [ 230.629880][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8b60 instead [ 230.629900][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x1e8f instead [ 230.629916][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x4fa2 instead [ 230.629929][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x96b2 instead [ 230.629944][T13530] jffs2: Further such events for this erase block will not be printed [ 230.630308][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4e25 instead [ 230.630324][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x2ae9 instead [ 230.630339][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xa655 instead [ 230.630353][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xd1b8 instead [ 230.630366][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x4460 instead [ 230.630378][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x1bec instead [ 230.630392][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf73c instead [ 230.630408][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6a30 instead [ 230.630423][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x8a92 instead [ 230.630438][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xd22a instead [ 230.630452][T13530] jffs2: Further such events for this erase block will not be printed [ 230.633248][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x733f instead [ 230.633356][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x3af5 instead [ 230.633370][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x59fd instead [ 230.633384][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x2616 instead [ 230.633429][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x4ec2 instead [ 230.633446][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4bf7 instead [ 230.633461][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xe044 instead [ 230.633476][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xc64c instead [ 230.633488][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xaf48 instead [ 230.633501][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xf398 instead [ 230.633515][T13530] jffs2: Further such events for this erase block will not be printed [ 230.633855][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x9410 instead [ 230.633871][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x6a77 instead [ 230.633886][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xe2b1 instead [ 230.633901][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x8a11 instead [ 230.633915][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x59bc instead [ 230.633930][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xa8e8 instead [ 230.633942][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4434 instead [ 230.633957][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x73a2 instead [ 230.633971][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x88f8 instead [ 230.633986][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xbd8e instead [ 230.634000][T13530] jffs2: Further such events for this erase block will not be printed [ 230.634346][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x0b2a instead [ 230.634361][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xb4ab instead [ 230.634376][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x13a5 instead [ 230.634388][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xf029 instead [ 230.634402][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x8e61 instead [ 230.634417][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x9fbe instead [ 230.634431][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xb88d instead [ 230.634446][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xfa02 instead [ 230.636944][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x70fc instead [ 230.636962][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xc3df instead [ 230.636976][T13530] jffs2: Further such events for this erase block will not be printed [ 230.637326][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xe787 instead [ 230.637340][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4ff9 instead [ 230.637353][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x252c instead [ 230.637368][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x98fd instead [ 230.637383][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x66fd instead [ 230.637398][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x3a3a instead [ 230.637412][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9888 instead [ 230.637427][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xeef4 instead [ 230.637441][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x966d instead [ 230.637455][T13530] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x0c03 instead [ 230.637467][T13530] jffs2: Further such events for this erase block will not be printed [ 230.650219][T13530] jffs2: notice: (13530) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 230.674855][ T43] audit: type=1400 audit(1789111175.475:1447): avc: denied { write } for pid=13528 comm="syz.7.1942" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.674885][ T43] audit: type=1400 audit(1789111175.475:1448): avc: denied { add_name } for pid=13528 comm="syz.7.1942" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.690259][ T43] audit: type=1400 audit(1789111175.484:1449): avc: denied { write } for pid=13528 comm="syz.7.1942" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.136852][T13554] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 231.147186][T13559] input: syz1 as /devices/virtual/input/input22 [ 231.497416][T13588] Invalid ELF header type: 0 != 1 [ 231.499965][T13588] Invalid ELF header type: 2 != 1 [ 231.569257][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.569713][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.569822][T13590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.663137][T13604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4397 sclass=netlink_route_socket pid=13604 comm=syz.3.1964 [ 231.685349][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1962'. [ 231.712235][T13604] kAFS: unable to lookup cell 'syz1' [ 232.289247][T13636] program syz.7.1974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.430654][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 232.430667][ T43] audit: type=1400 audit(1789111177.113:1460): avc: denied { connect } for pid=13637 comm="syz.7.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.450383][T13639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13639 comm=syz.7.1975 [ 232.541432][ T5731] Bluetooth: hci4: command tx timeout [ 232.704293][T13643] overlay: Unknown parameter 'smackfsroot' [ 233.601762][T13650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13650 comm=syz.7.1978 [ 233.602917][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1978'. [ 233.608202][ T43] audit: type=1326 audit(1789111178.217:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.7.1978" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6636d9e159 code=0x0 [ 233.795635][T13655] FAULT_INJECTION: forcing a failure. [ 233.795635][T13655] name failslab, interval 1, probability 0, space 0, times 0 [ 233.795704][T13655] CPU: 2 UID: 0 PID: 13655 Comm: syz.7.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.795722][T13655] Tainted: [L]=SOFTLOCKUP [ 233.795726][T13655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.795733][T13655] Call Trace: [ 233.795738][T13655] [ 233.795743][T13655] dump_stack_lvl+0x100/0x190 [ 233.795764][T13655] should_fail_ex.cold+0x5/0xa [ 233.795781][T13655] should_failslab+0xc2/0x120 [ 233.795797][T13655] __kmalloc_cache_noprof+0x91/0x6d0 [ 233.795815][T13655] ? nfnetlink_rcv_batch+0x780/0x2880 [ 233.795847][T13655] nfnetlink_rcv_batch+0x780/0x2880 [ 233.795870][T13655] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 233.795888][T13655] ? lock_acquire+0x1d1/0x380 [ 233.795900][T13655] ? avc_has_perm_noaudit+0x56/0x3b0 [ 233.795922][T13655] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.795951][T13655] ? __nla_parse+0x40/0x60 [ 233.795970][T13655] nfnetlink_rcv+0x3bd/0x440 [ 233.795985][T13655] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.796004][T13655] netlink_unicast+0x585/0x850 [ 233.796019][T13655] ? __pfx_netlink_unicast+0x10/0x10 [ 233.796030][T13655] ? __pfx_sock_has_perm+0x10/0x10 [ 233.796050][T13655] netlink_sendmsg+0x8b0/0xda0 [ 233.796065][T13655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.796078][T13655] ? selinux_socket_sendmsg+0x198/0x2f0 [ 233.796099][T13655] ____sys_sendmsg+0xa4d/0xbe0 [ 233.796115][T13655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.796128][T13655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.796147][T13655] ? lock_acquire+0x1d1/0x380 [ 233.796159][T13655] ? get_pid_task+0x2a/0x250 [ 233.796176][T13655] ___sys_sendmsg+0x190/0x1e0 [ 233.796194][T13655] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.796210][T13655] ? get_pid_task+0x106/0x250 [ 233.796231][T13655] ? find_held_lock+0x2b/0x80 [ 233.796256][T13655] __sys_sendmsg+0x160/0x210 [ 233.796270][T13655] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.796291][T13655] do_syscall_64+0x123/0x790 [ 233.796308][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.796320][T13655] RIP: 0033:0x7f6636d9e159 [ 233.796330][T13655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.796341][T13655] RSP: 002b:00007f6637c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.796353][T13655] RAX: ffffffffffffffda RBX: 00007f6637025fa0 RCX: 00007f6636d9e159 [ 233.796360][T13655] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 233.796367][T13655] RBP: 00007f6637c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.796374][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.796381][T13655] R13: 00007f6637026038 R14: 00007f6637025fa0 R15: 00007fff53820888 [ 233.796396][T13655] [ 234.019040][ T64] usb 10-1: USB disconnect, device number 10 [ 234.055112][ T64] Unregistered device Abilis Systems DVB-Titan [ 234.061236][ T64] as10x_usb: device has been disconnected [ 234.206387][T13672] batadv_slave_1: entered promiscuous mode [ 234.220384][T13671] batadv_slave_1: left promiscuous mode [ 234.411055][T13689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1992'. [ 234.469027][ T43] audit: type=1400 audit(1789111179.022:1462): avc: denied { ioctl } for pid=13691 comm="syz.5.1993" path="socket:[49398]" dev="sockfs" ino=49398 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.530622][T13689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13689 comm=syz.6.1992 [ 234.906899][T13715] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 234.946682][T13713] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 235.157781][T13723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13723 comm=syz.3.2003 [ 235.157822][T13722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2003'. [ 235.485600][T13742] ADFS-fs (loop6): error: unable to read block 3, try 0 [ 235.585700][ T43] audit: type=1400 audit(1789111180.060:1463): avc: denied { map } for pid=13749 comm="syz.3.2014" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.586291][ T43] audit: type=1400 audit(1789111180.060:1464): avc: denied { execute } for pid=13749 comm="syz.3.2014" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.007642][T13776] FAULT_INJECTION: forcing a failure. [ 236.007642][T13776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.007682][T13776] CPU: 1 UID: 0 PID: 13776 Comm: syz.3.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.007712][T13776] Tainted: [L]=SOFTLOCKUP [ 236.007721][T13776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.007734][T13776] Call Trace: [ 236.007743][T13776] [ 236.007753][T13776] dump_stack_lvl+0x100/0x190 [ 236.007789][T13776] should_fail_ex.cold+0x5/0xa [ 236.007821][T13776] _copy_from_user+0x2e/0xd0 [ 236.007844][T13776] kstrtouint_from_user+0xd6/0x1d0 [ 236.007872][T13776] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 236.007907][T13776] ? lock_acquire+0x1d1/0x380 [ 236.007937][T13776] proc_fail_nth_write+0x83/0x220 [ 236.007967][T13776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.007998][T13776] vfs_write+0x2aa/0x1050 [ 236.008019][T13776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.008042][T13776] ? lock_acquire+0x1d1/0x380 [ 236.008061][T13776] ? __fget_files+0x34/0x3d0 [ 236.008085][T13776] ? __pfx_vfs_write+0x10/0x10 [ 236.008102][T13776] ? find_held_lock+0x2b/0x80 [ 236.008129][T13776] ? __fget_files+0x215/0x3d0 [ 236.008157][T13776] ? __fget_files+0x21f/0x3d0 [ 236.008191][T13776] ksys_write+0x12a/0x250 [ 236.008206][T13776] ? __pfx_ksys_write+0x10/0x10 [ 236.008231][T13776] do_syscall_64+0x123/0x790 [ 236.008259][T13776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.008280][T13776] RIP: 0033:0x7f1f2fb5e98e [ 236.008297][T13776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.008314][T13776] RSP: 002b:00007f1f30ac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.008334][T13776] RAX: ffffffffffffffda RBX: 00007f1f30ac66c0 RCX: 00007f1f2fb5e98e [ 236.008346][T13776] RDX: 0000000000000001 RSI: 00007f1f30ac60a0 RDI: 0000000000000004 [ 236.008358][T13776] RBP: 00007f1f30ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.008369][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.008382][T13776] R13: 00007f1f2fe26038 R14: 00007f1f2fe25fa0 R15: 00007ffe2f248be8 [ 236.008410][T13776] [ 236.012859][T13773] team0: No ports can be present during mode change [ 236.023560][ T43] audit: type=1400 audit(1789111180.472:1465): avc: denied { write } for pid=13771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.099040][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.099182][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.099287][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.099387][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.099530][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.102304][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.118687][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.118766][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.118833][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.118900][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.118991][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119058][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119122][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119222][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119286][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119358][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119422][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119485][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119549][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.119612][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.124159][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.156611][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.156700][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.156775][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.156853][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.156928][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157003][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157076][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157155][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157230][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157302][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157374][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157503][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.157634][T13781] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.201430][T13779] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 236.202518][T13779] CIFS: VFS: \\1#7.0.0.1 Error -2 creating socket [ 236.202847][T13779] CIFS: VFS: \\1#7.0.0.1 Error -2 creating socket [ 236.202860][T13779] CIFS: VFS: Error connecting to socket. Aborting operation. [ 236.202893][T13779] CIFS: VFS: cifs_mount failed w/return code = -2 [ 236.206692][ T43] audit: type=1400 audit(1789111180.640:1466): avc: denied { write } for pid=13785 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.374787][ T43] audit: type=1400 audit(1789111180.809:1467): avc: denied { write } for pid=13798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.484020][ T43] audit: type=1400 audit(1789111180.903:1468): avc: denied { write } for pid=13808 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.553930][T13813] hfs: unable to load iocharset "io#harset" [ 236.587860][ T43] audit: type=1400 audit(1789111181.005:1469): avc: denied { mounton } for pid=13819 comm="syz.6.2032" path="/199/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 236.880034][ T42] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 237.061659][ T42] usb 10-1: Using ep0 maxpacket: 32 [ 237.062226][ T42] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.063239][ T42] usb 10-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 32 [ 237.063262][ T42] usb 10-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 64 [ 237.063283][ T42] usb 10-1: config 1 interface 0 has no altsetting 0 [ 237.065541][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.065560][ T42] usb 10-1: Product: syz [ 237.065572][ T42] usb 10-1: Manufacturer: syz [ 237.065584][ T42] usb 10-1: SerialNumber: syz [ 237.068638][T13817] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.068774][T13817] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.343222][ T42] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 237.351685][ T42] usb 10-1: USB disconnect, device number 11 [ 238.013672][ T64] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 238.165844][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2041'. [ 238.195078][ T64] usb 11-1: Invalid ep0 maxpacket: 64 [ 238.345427][ T64] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 238.403902][T13857] bridge_slave_0: left allmulticast mode [ 238.403925][T13857] bridge_slave_0: left promiscuous mode [ 238.404110][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.407016][T13857] bridge_slave_1: left allmulticast mode [ 238.407034][T13857] bridge_slave_1: left promiscuous mode [ 238.407242][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.425507][T13857] .`: (slave bond_slave_0): Releasing backup interface [ 238.428382][T13857] .`: (slave bond_slave_1): Releasing backup interface [ 238.433544][T13857] team0: Port device team_slave_0 removed [ 238.439152][T13857] team0: Port device team_slave_1 removed [ 238.439429][T13857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.447495][T13857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.448115][T13857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.464101][T13857] team0: Mode changed to "roundrobin" [ 238.465069][T13857] vlan0: entered promiscuous mode [ 238.466447][T13857] tipc: Started in network mode [ 238.466468][T13857] tipc: Node identity aaaaaaaaaa1a, cluster identity 8 [ 238.466691][T13857] tipc: Enabled bearer , priority 0 [ 238.517856][ T64] usb 11-1: Invalid ep0 maxpacket: 64 [ 238.518105][ T64] usb usb11-port1: attempt power cycle [ 238.569254][T13861] Failed to get privilege flags for destination (handle=0x2:0x0) [ 238.615163][T13863] netlink: 'syz.5.2048': attribute type 2 has an invalid length. [ 238.899975][ T64] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 238.921910][ T64] usb 11-1: Invalid ep0 maxpacket: 64 [ 238.931796][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 239.010838][ T43] audit: type=1400 audit(1789111183.270:1470): avc: denied { read } for pid=13866 comm="syz.7.2050" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 239.010966][ T43] audit: type=1400 audit(1789111183.270:1471): avc: denied { open } for pid=13866 comm="syz.7.2050" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 239.013304][ T43] audit: type=1400 audit(1789111183.270:1472): avc: denied { ioctl } for pid=13866 comm="syz.7.2050" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 239.070651][ T64] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 239.085800][T13870] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2051'. [ 239.088511][T13870] binder: BINDER_SET_CONTEXT_MGR already set [ 239.088520][T13870] binder: 13869:13870 ioctl 4018620d 200000004a80 returned -16 [ 239.104274][ T10] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 239.109934][ T64] usb 11-1: Invalid ep0 maxpacket: 64 [ 239.116043][ T64] usb usb11-port1: unable to enumerate USB device [ 239.116938][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3072, setting to 1024 [ 239.116959][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 239.118308][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 239.118324][ T10] usb 10-1: Product: syz [ 239.118334][ T10] usb 10-1: Manufacturer: syz [ 239.123618][T13865] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 239.133018][ T10] iuu_phoenix 10-1:1.0: iuu_phoenix converter detected [ 239.136069][ T10] usb 10-1: iuu_phoenix converter now attached to ttyUSB0 [ 239.158591][ T43] audit: type=1400 audit(1789111183.401:1473): avc: denied { unlink } for pid=11511 comm="syz-executor" name="ttyUSB0" dev="devtmpfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.217852][ T43] audit: type=1400 audit(1789111183.467:1474): avc: denied { write } for pid=13872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.272302][ T43] audit: type=1400 audit(1789111183.513:1475): avc: denied { write } for pid=13875 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.354103][ T10] usb 10-1: USB disconnect, device number 12 [ 239.367885][ T10] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 239.368460][ T10] iuu_phoenix 10-1:1.0: device disconnected [ 239.551681][ T5832] tipc: Node number set to 11578026 [ 239.690766][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.693036][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.695666][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.698557][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.699256][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.777947][T13886] ip6tnl1: entered allmulticast mode [ 239.779473][ T5782] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.779598][ T5782] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.811225][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.937100][ T2193] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.953045][T13881] Failed to initialize the IGMP autojoin socket (err -2) [ 239.954215][ T43] audit: type=1400 audit(1789111184.159:1476): avc: denied { map } for pid=13897 comm="syz.5.2059" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 240.209911][ T43] audit: type=1400 audit(1789111184.393:1477): avc: denied { write } for pid=13919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.298385][ T43] audit: type=1400 audit(1789111184.477:1478): avc: denied { write } for pid=13929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.345801][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.346078][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.346153][T13881] bridge_slave_0: entered allmulticast mode [ 240.347069][T13881] bridge_slave_0: entered promiscuous mode [ 240.349947][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.350070][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.350376][T13881] bridge_slave_1: entered allmulticast mode [ 240.351978][T13881] bridge_slave_1: entered promiscuous mode [ 240.385641][ T2193] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.397805][T13881] bond_slave_1: entered promiscuous mode [ 240.402011][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.486651][T13881] team0: Port device team_slave_0 added [ 240.499319][T13881] team0: Port device team_slave_1 added [ 240.539988][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.540004][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.540020][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.544783][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.544795][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.544809][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.625463][T13881] hsr_slave_0: entered promiscuous mode [ 240.626291][T13881] hsr_slave_1: entered promiscuous mode [ 240.629781][T13881] debugfs: 'hsr0' already exists in 'hsr' [ 240.629793][T13881] Cannot create hsr debugfs directory [ 240.928871][ T43] audit: type=1400 audit(1789111185.067:1479): avc: denied { write } for pid=13971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.964928][ T12] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.973153][ T12] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.973192][ T12] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.975457][T13881] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 240.989739][T13881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.990525][T13881] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 241.004337][T13881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.005437][T13881] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 241.018825][T13881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.019646][T13881] netdevsim netdevsim8 netdevsim3: renamed from eth17 [ 241.029453][T13881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.037101][T13978] Failed to initialize the IGMP autojoin socket (err -2) [ 241.206503][T13881] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.226078][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.226161][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.238093][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.238211][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.261313][ T5809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.380186][T10202] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 241.542285][T10202] usb 11-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 241.543285][T10202] usb 11-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.543311][T10202] usb 11-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.543333][T10202] usb 11-1: config 0 interface 0 has no altsetting 0 [ 241.543359][T10202] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.545969][T10202] usb 11-1: config 0 descriptor?? [ 241.788298][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.946361][ T5738] Bluetooth: hci0: command tx timeout [ 241.988014][T10202] usbhid 11-1:0.0: can't add hid device: -71 [ 241.988094][T10202] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 242.000287][T10202] usb 11-1: USB disconnect, device number 12 [ 242.096591][T13881] veth0_vlan: entered promiscuous mode [ 242.136341][T14018] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 242.136382][T14018] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 242.136424][T14018] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 242.149764][T14018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.153133][T14018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 242.220818][T13881] veth0_macvtap: entered promiscuous mode [ 242.230336][T13881] veth1_macvtap: entered promiscuous mode [ 242.282551][T13881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.305902][T13881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.427229][T14025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.496800][T13881] wireguard: wg0: Could not create IPv4 socket [ 242.499174][T13881] wireguard: wg1: Could not create IPv4 socket [ 242.505993][T13881] wireguard: wg2: Could not create IPv4 socket [ 242.687377][T14046] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2073'. [ 243.424329][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 243.532392][T14084] input: syz0 as /devices/virtual/input/input24 [ 243.535877][T14084] No source specified [ 243.736450][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 243.857454][T14117] Option 'dnserrpr' to dns_resolver key: bad/missing value [ 243.909071][T14125] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2090'. [ 243.971645][T14133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.974776][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.979009][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.980408][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.981710][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.982586][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.984657][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.985923][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.991012][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.991802][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.992690][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.993532][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.994257][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.995130][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.995863][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.996779][T14132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.001240][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.002365][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.003167][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.003923][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.004607][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.005358][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.006166][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.008876][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.010218][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.011355][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.013182][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.013834][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.014380][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.018273][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.018833][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.022082][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.022868][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.024539][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.093045][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.351423][ T42] libceph: mon0 (1)0.0.0.0:6789 connect error [ 244.377830][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 244.377849][ T43] audit: type=1400 audit(1789111188.295:1501): avc: denied { write } for pid=14170 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.536962][ T43] audit: type=1400 audit(1789111188.445:1502): avc: denied { write } for pid=14176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.587733][T14181] openvswitch: netlink: Key type 68 is out of range max 32 [ 244.591057][ T43] audit: type=1400 audit(1789111188.492:1503): avc: denied { write } for pid=14179 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.638640][ T42] libceph: mon0 (1)0.0.0.0:6789 connect error [ 244.740844][ T43] audit: type=1400 audit(1789111188.632:1504): avc: denied { write } for pid=14194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.776153][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2108'. [ 244.795261][ T43] audit: type=1400 audit(1789111188.688:1505): avc: denied { write } for pid=14203 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.837283][T14206] device-mapper: ioctl: Invalid ioctl structure: uuid @, name , dev f3 [ 244.837535][ T43] audit: type=1400 audit(1789111188.726:1506): avc: denied { append } for pid=14205 comm="syz.5.2109" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 245.021373][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 245.110490][ T43] audit: type=1400 audit(1789111188.988:1507): avc: denied { write } for pid=14223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.149417][T14225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14225 comm=syz.5.2113 [ 245.151351][ T43] audit: type=1400 audit(1789111189.025:1508): avc: denied { write } for pid=14229 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.183822][ T42] libceph: mon0 (1)0.0.0.0:6789 connect error [ 245.237604][T14164] ceph: No mds server is up or the cluster is laggy [ 245.281257][ T43] audit: type=1400 audit(1789111189.147:1509): avc: denied { write } for pid=14232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.377174][ T43] audit: type=1400 audit(1789111189.231:1510): avc: denied { write } for pid=14242 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.469878][T14254] netlink: 'syz.3.2120': attribute type 1 has an invalid length. [ 245.484436][T14254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.490182][T14254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2120'. [ 245.520926][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c3a [ 245.539864][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 245.650434][T14278] overlayfs: failed to resolve './file1': -2 [ 245.693723][T14287] Bluetooth: MGMT ver 1.23 [ 245.693754][T14287] Bluetooth: hci1: expected 87 bytes, got 2 bytes [ 245.979720][T14301] kvm: pic: non byte write [ 246.165186][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2132'. [ 246.315892][ T64] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 246.455957][ T64] usb 10-1: device descriptor read/64, error -71 [ 246.527672][T14342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2135'. [ 246.722015][ T64] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 246.860631][ T64] usb 10-1: device descriptor read/64, error -71 [ 246.955704][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.958996][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.962556][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.966533][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.968357][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.989441][ T64] usb usb10-port1: attempt power cycle [ 247.209458][T14368] Failed to initialize the IGMP autojoin socket (err -2) [ 247.363114][ T64] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 247.388618][ T64] usb 10-1: device descriptor read/8, error -71 [ 247.507461][T14368] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.651480][ T64] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 247.679084][ T64] usb 10-1: device descriptor read/8, error -71 [ 247.790629][ T64] usb usb10-port1: unable to enumerate USB device [ 248.043882][T14368] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.130520][T14368] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.243785][T14368] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.401770][T14445] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 248.401894][T14445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 248.517603][ T5782] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.517655][ T5809] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.518122][T14368] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 248.525758][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.526621][T14368] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 248.548567][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.553514][T14368] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 248.557332][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.558086][T14368] netdevsim netdevsim8 netdevsim3: renamed from eth17 [ 248.561821][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.570490][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.623888][ T5809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.786935][ T5738] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.222380][ T5738] Bluetooth: hci2: command tx timeout [ 249.383902][T14514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61469 sclass=netlink_route_socket pid=14514 comm=syz.5.2152 [ 249.564333][T14368] wireguard: wg0: Could not create IPv4 socket [ 249.565663][T14368] wireguard: wg1: Could not create IPv4 socket [ 249.566691][T14368] wireguard: wg2: Could not create IPv4 socket [ 249.750745][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 249.750759][ T43] audit: type=1400 audit(1789111193.321:1553): avc: denied { write } for pid=14536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.827994][ T43] audit: type=1400 audit(1789111193.395:1554): avc: denied { write } for pid=14540 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.957685][ T43] audit: type=1400 audit(1789111193.517:1555): avc: denied { write } for pid=14543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.012548][ T43] audit: type=1400 audit(1789111193.564:1556): avc: denied { write } for pid=14546 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.154472][ T43] audit: type=1400 audit(1789111193.704:1557): avc: denied { write } for pid=14549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.201503][ T43] audit: type=1400 audit(1789111193.742:1558): avc: denied { write } for pid=14552 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.317778][ T43] audit: type=1400 audit(1789111193.854:1559): avc: denied { write } for pid=14555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.386354][ T43] audit: type=1400 audit(1789111193.910:1560): avc: denied { write } for pid=14558 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.511061][ T43] audit: type=1400 audit(1789111194.032:1561): avc: denied { write } for pid=14561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.568367][ T43] audit: type=1400 audit(1789111194.088:1562): avc: denied { write } for pid=14564 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.605384][ T5731] Bluetooth: hci0: command 0xfc11 tx timeout [ 251.605520][ T5738] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 252.783360][T14636] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2159'. [ 252.889879][T14645] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 252.938298][T14646] ipvlan2: entered allmulticast mode [ 252.938313][T14646] batadv_slave_1: entered allmulticast mode [ 252.941546][T14646] batman_adv: batadv0: Adding interface: ipvlan2 [ 252.941556][T14646] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.941570][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.941580][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.941587][T14646] batman_adv: batadv0: Interface activated: ipvlan2 [ 252.989684][T14652] jffs2: notice: (14652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 252.992955][T14653] team_slave_1: entered promiscuous mode [ 252.995029][T14653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2165'. [ 252.997580][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 252.997598][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 252.997620][T14656] netlink: 'syz.3.2165': attribute type 7 has an invalid length. [ 253.004466][ T5738] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 253.048860][T14657] bridge1: entered promiscuous mode [ 253.048876][T14657] bridge1: entered allmulticast mode [ 253.063634][T14652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14652 comm=syz.3.2165 [ 253.067693][T14650] team_slave_1: left promiscuous mode [ 253.069283][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.126970][T14663] nvme_fabrics: missing parameter 'nqn=%s' [ 253.527404][T14702] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2176'. [ 253.838613][ T5823] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 253.998963][ T5823] usb 10-1: Using ep0 maxpacket: 32 [ 254.000564][ T5823] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.001925][ T5823] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.004638][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.004652][ T5823] usb 10-1: Product: syz [ 254.004659][ T5823] usb 10-1: Manufacturer: syz [ 254.004667][ T5823] usb 10-1: SerialNumber: syz [ 254.006114][ T5823] usb 10-1: config 0 descriptor?? [ 254.006651][T14716] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 254.008957][ T5823] hub 10-1:0.0: bad descriptor, ignoring hub [ 254.008970][ T5823] hub 10-1:0.0: probe with driver hub failed with error -5 [ 254.255231][T14749] misc userio: The device must be registered before sending interrupts [ 254.312064][T14753] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2186'. [ 254.312224][T14753] unsupported nlmsg_type 40 [ 254.783887][ T851] usb 10-1: USB disconnect, device number 17 [ 254.972057][T14803] bond1 (unregistering): Released all slaves [ 255.148911][T14808] syz.6.2199 (14808): /proc/14807/oom_adj is deprecated, please use /proc/14807/oom_score_adj instead. [ 255.398435][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.424605][T14836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.425051][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425149][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425238][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425322][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425495][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425585][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425668][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.425753][T14836] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 255.476891][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 255.476907][ T43] audit: type=1400 audit(1789111198.683:1603): avc: denied { execute } for pid=14844 comm="syz.5.2205" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 255.507776][T14845] overlayfs: failed to resolve './lower': -2 [ 255.668543][T14855] 9pnet_virtio: no channels available for device 127.0.0.1 [ 255.744678][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.749168][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.755363][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.768728][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.769327][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.811681][ T43] audit: type=1400 audit(1789111198.991:1604): avc: denied { setopt } for pid=14867 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.079522][T14863] Failed to initialize the IGMP autojoin socket (err -2) [ 256.304635][ T43] audit: type=1400 audit(1789111199.450:1605): avc: denied { write } for pid=14913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.348655][T14863] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.381438][ T43] audit: type=1400 audit(1789111199.525:1606): avc: denied { write } for pid=14916 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.473568][T14863] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.587893][T14863] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.616166][ T43] audit: type=1400 audit(1789111199.740:1607): avc: denied { write } for pid=14921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.677107][ T43] audit: type=1400 audit(1789111199.806:1608): avc: denied { write } for pid=14926 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.717992][T14863] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.839157][ T43] audit: type=1400 audit(1789111199.955:1609): avc: denied { write } for pid=14929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.922895][ T43] audit: type=1400 audit(1789111200.040:1610): avc: denied { write } for pid=14932 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.050899][T10304] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.087307][ T7229] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.087371][T10304] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.111844][T14863] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 257.117073][T14863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.117937][T14863] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 257.126514][ T43] audit: type=1400 audit(1789111200.227:1611): avc: denied { write } for pid=14937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.141521][T14863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.142251][T14863] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 257.155747][T14863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.165495][T14863] netdevsim netdevsim8 netdevsim3: renamed from eth17 [ 257.169897][T14863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.174977][T10304] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.184336][ T43] audit: type=1400 audit(1789111200.283:1612): avc: denied { write } for pid=14945 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.931844][ T5738] Bluetooth: hci0: command tx timeout [ 258.116325][T14863] wireguard: wg0: Could not create IPv4 socket [ 258.117788][T14863] wireguard: wg1: Could not create IPv4 socket [ 258.119408][T14863] wireguard: wg2: Could not create IPv4 socket [ 258.432318][T15022] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 258.918967][T15043] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2231'. [ 258.919177][T15044] validate_nla: 56 callbacks suppressed [ 258.919192][T15044] netlink: 'syz.5.2231': attribute type 7 has an invalid length. [ 258.919204][T15044] netlink: 'syz.5.2231': attribute type 3 has an invalid length. [ 258.919215][T15044] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2231'. [ 258.927574][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927574][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927609][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927609][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927628][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927628][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927644][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927644][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927663][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927663][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927679][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927679][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927695][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927695][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927712][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927712][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927728][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927728][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 258.927855][T15046] sg_write: data in/out 262108/13 bytes for SCSI command 0xd0-- guessing data in; [ 258.927855][T15046] program syz.3.2232 not setting count and/or reply_len properly [ 259.336531][T15070] futex_wake_op: syz.5.2237 tries to shift op by 144; fix this program [ 259.336676][T15070] futex_wake_op: syz.5.2237 tries to shift op by 144; fix this program [ 259.339388][T15070] veth0_to_bond: entered allmulticast mode [ 259.677341][T15089] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2240'. [ 260.337992][T15127] netlink: 'syz.5.2246': attribute type 2 has an invalid length. [ 260.338012][T15127] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2246'. [ 260.362377][T15127] : entered promiscuous mode [ 260.704461][T15156] dummy0: entered allmulticast mode [ 260.708295][T15155] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 260.887778][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 260.887796][ T43] audit: type=1400 audit(1789111203.745:1644): avc: denied { write } for pid=15164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.951900][T15175] netlink: 'syz.5.2253': attribute type 10 has an invalid length. [ 260.955016][T15175] team0: Port device veth0 added [ 261.016717][ T43] audit: type=1400 audit(1789111203.867:1645): avc: denied { write } for pid=15176 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.218962][ T43] audit: type=1400 audit(1789111204.054:1646): avc: denied { write } for pid=15189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.252275][T15208] kAFS: Can only specify source 'none' with -o dyn [ 261.256076][T15205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2255'. [ 261.326251][ T43] audit: type=1400 audit(1789111204.157:1647): avc: denied { write } for pid=15211 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.347640][T15210] fuse: Bad value for 'fd' [ 261.398337][ T43] audit: type=1400 audit(1789111204.223:1648): avc: denied { read write } for pid=15216 comm="syz.3.2262" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 261.398796][ T43] audit: type=1400 audit(1789111204.223:1649): avc: denied { open } for pid=15216 comm="syz.3.2262" path="/123/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 261.404840][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2262'. [ 261.492609][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.492664][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.493750][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.499961][ T43] audit: type=1400 audit(1789111204.316:1650): avc: denied { write } for pid=15219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.500202][T15228] siw: device registration error -23 [ 261.501805][T15227] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 261.501835][T15227] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 261.501870][T15227] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 261.506030][T15227] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 261.547528][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.548997][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.550536][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.553280][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.555455][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.556938][T15227] wg0 speed is unknown, defaulting to 1000 [ 261.561310][ T43] audit: type=1400 audit(1789111204.372:1651): avc: denied { write } for pid=15233 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.734857][ T43] audit: type=1400 audit(1789111204.531:1652): avc: denied { write } for pid=15244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.827620][ T43] audit: type=1400 audit(1789111204.625:1653): avc: denied { write } for pid=15253 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.164360][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 262.321106][T15301] ref_ctr increment failed for inode: 0x568 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803d92cc80 [ 262.540882][T15300] uprobe: syz.6.2272:15300 failed to unregister, leaking uprobe [ 262.665802][T15332] batadv_slave_1: entered promiscuous mode [ 262.753996][T15331] batadv_slave_1: left promiscuous mode [ 263.099246][T15397] dummy0: entered allmulticast mode [ 263.151836][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.161004][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.161726][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.167117][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.181519][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.270493][T15406] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.270509][T15406] overlayfs: failed to set xattr on upper [ 263.270514][T15406] overlayfs: ...falling back to redirect_dir=nofollow. [ 263.270518][T15406] overlayfs: ...falling back to index=off. [ 263.270522][T15406] overlayfs: ...falling back to uuid=null. [ 263.270525][T15406] overlayfs: ...falling back to xino=off. [ 263.289922][T15413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.289948][T15413] overlayfs: failed to set xattr on upper [ 263.289954][T15413] overlayfs: ...falling back to redirect_dir=nofollow. [ 263.289960][T15413] overlayfs: ...falling back to index=off. [ 263.289967][T15413] overlayfs: ...falling back to uuid=null. [ 263.289974][T15413] overlayfs: ...falling back to xino=off. [ 263.384568][T15420] Bluetooth: MGMT ver 1.23 [ 263.385643][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2284'. [ 263.385661][T15420] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2284'. [ 263.429739][T15398] Failed to initialize the IGMP autojoin socket (err -2) [ 263.802170][T15398] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.893226][T15437] 9pnet_fd: p9_fd_create_unix (15437): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.897242][T15398] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.025475][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 264.046247][T15398] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.068256][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2292'. [ 264.290606][T15459] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=794 sclass=netlink_xfrm_socket pid=15459 comm=syz.6.2296 [ 264.383440][T15398] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.717083][ T12] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.761779][ T13] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.771893][ T13] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.811640][T15398] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 264.827572][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.828636][T15398] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 264.837831][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.838916][T15398] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 264.849141][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.850170][T15398] netdevsim netdevsim8 netdevsim3: renamed from eth17 [ 264.872443][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.888105][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.379621][ T5738] Bluetooth: hci0: command tx timeout [ 265.500459][T15542] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 265.506308][T15544] ªªªªª): renamed from hsr0 [ 265.565310][T15551] bridge_slave_0: left allmulticast mode [ 265.565326][T15551] bridge_slave_0: left promiscuous mode [ 265.565416][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.583655][T15551] bridge_slave_1: left allmulticast mode [ 265.583669][T15551] bridge_slave_1: left promiscuous mode [ 265.583761][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.603314][T15551] bond0: (slave bond_slave_0): Releasing backup interface [ 265.609873][T15551] bond0: (slave bond_slave_1): Releasing backup interface [ 265.628263][T15551] team0: Port device team_slave_0 removed [ 265.632297][T15551] team0: Port device team_slave_1 removed [ 265.632747][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.632763][T15551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.634000][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.634016][T15551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.635498][T15551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.655126][T15552] team0: Mode changed to "activebackup" [ 265.667760][T15561] Failed to initialize the IGMP autojoin socket (err -2) [ 265.672716][T15552] vlan0: entered promiscuous mode [ 265.672965][ T5839] wg0 speed is unknown, defaulting to 1000 [ 265.692093][T15552] team0: Port device vlan0 added [ 265.714713][T15551] tipc: Started in network mode [ 265.714730][T15551] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 265.714913][T15551] tipc: Enabled bearer , priority 0 [ 265.853678][ T7327] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 265.999677][ T7327] usb 11-1: device descriptor read/64, error -71 [ 266.061392][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.061424][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.063507][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.165130][T15398] wireguard: wg0: Could not create IPv4 socket [ 266.167312][T15398] wireguard: wg1: Could not create IPv4 socket [ 266.175391][T15398] wireguard: wg2: Could not create IPv4 socket [ 266.175500][T15616] SELinux: ebitmap: truncated map [ 266.175906][T15616] SELinux: invalid class [ 266.189010][T15616] SELinux: failed to load policy [ 266.243195][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 266.243208][ T43] audit: type=1400 audit(1789111208.752:1678): avc: denied { write } for pid=15613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.266644][ T7327] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 266.309838][ T43] audit: type=1400 audit(1789111208.827:1679): avc: denied { write } for pid=15625 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.329721][T15623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15623 comm=syz.5.2318 [ 266.405527][ T7327] usb 11-1: device descriptor read/64, error -71 [ 266.472747][ T43] audit: type=1400 audit(1789111208.976:1680): avc: denied { write } for pid=15632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.523348][ T7327] usb usb11-port1: attempt power cycle [ 266.530598][ T43] audit: type=1400 audit(1789111209.023:1681): avc: denied { write } for pid=15638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.779537][ T35] tipc: Node number set to 11578026 [ 266.897914][ T7327] usb 11-1: new full-speed USB device number 15 using dummy_hcd [ 266.919462][ T7327] usb 11-1: device descriptor read/8, error -71 [ 267.174938][ T7327] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 267.209259][ T7327] usb 11-1: device descriptor read/8, error -71 [ 267.281762][ T43] audit: type=1400 audit(1789111209.725:1682): avc: denied { write } for pid=15656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.324981][ T7327] usb usb11-port1: unable to enumerate USB device [ 267.352757][ T43] audit: type=1400 audit(1789111209.791:1683): avc: denied { write } for pid=15659 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.492355][ T43] audit: type=1400 audit(1789111209.922:1684): avc: denied { write } for pid=15662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.564423][ T43] audit: type=1400 audit(1789111209.996:1685): avc: denied { write } for pid=15667 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.903265][ T43] audit: type=1400 audit(1789111210.315:1686): avc: denied { write } for pid=15679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.951272][ T43] audit: type=1400 audit(1789111210.352:1687): avc: denied { write } for pid=15682 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.649833][T15719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15719 comm=syz.3.2321 [ 268.651671][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'. [ 268.877228][T15723] SELinux: ebitmap start bit (16580607) is not a multiple of the map unit size (64) [ 268.877418][T15723] SELinux: invalid class [ 268.879802][T15723] SELinux: failed to load policy [ 268.935149][T15727] bonding: rdma is being created... [ 269.355929][ T42] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 269.472463][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 269.515678][ T42] usb 11-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 269.516720][ T42] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.516745][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.522067][ T42] as10x_usb: device has been detected [ 269.522406][ T42] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 269.544587][ T42] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 269.558549][ T42] as10x_usb: error during firmware upload part1 [ 269.558788][ T42] Registered device Abilis Systems DVB-Titan [ 271.619734][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 271.619750][ T43] audit: type=1400 audit(1789111213.786:1707): avc: denied { write } for pid=15797 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.735000][ T43] audit: type=1400 audit(1789111213.899:1708): avc: denied { write } for pid=15800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.800694][ T43] audit: type=1400 audit(1789111213.955:1709): avc: denied { write } for pid=15803 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.933997][ T43] audit: type=1400 audit(1789111214.086:1710): avc: denied { write } for pid=15806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.988886][ T43] audit: type=1400 audit(1789111214.133:1711): avc: denied { write } for pid=15815 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.041012][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.045921][ T43] audit: type=1400 audit(1789111214.189:1712): avc: denied { write } for pid=15816 comm="syz.3.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.048788][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.051609][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.057257][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.058143][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.183447][ T43] audit: type=1400 audit(1789111214.311:1713): avc: denied { write } for pid=15824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.253794][ T43] audit: type=1400 audit(1789111214.385:1714): avc: denied { write } for pid=15835 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.303777][T10202] usb 11-1: USB disconnect, device number 17 [ 272.355258][T15820] Failed to initialize the IGMP autojoin socket (err -2) [ 272.373432][T10202] Unregistered device Abilis Systems DVB-Titan [ 272.375902][T10202] as10x_usb: device has been disconnected [ 272.592714][ T5809] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.592745][ T5809] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.677476][ T43] audit: type=1400 audit(1789111214.778:1715): avc: denied { bind } for pid=15856 comm="syz.3.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.700620][T15820] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.850277][T15820] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.897646][ T43] audit: type=1400 audit(1789111214.984:1716): avc: denied { write } for pid=15868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.003747][T15820] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.117779][T15820] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.497491][T15820] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 273.513219][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.514065][T15820] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 273.525778][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.528382][T15820] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 273.547187][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.550413][T15820] netdevsim netdevsim8 netdevsim3: renamed from eth17 [ 273.569477][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.576451][T10304] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.587244][ T7229] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.607841][T10304] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.607881][T10304] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.868801][T15913] kAFS: No cell specified [ 274.270818][ T5738] Bluetooth: hci0: command tx timeout [ 274.661899][T15820] wireguard: wg0: Could not create IPv4 socket [ 274.663669][T15820] wireguard: wg1: Could not create IPv4 socket [ 274.674345][T15820] wireguard: wg2: Could not create IPv4 socket [ 274.761287][T15936] Failed to initialize the IGMP autojoin socket (err -2) [ 274.975085][T15944] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 275.291549][T15946] autofs: Bad value for 'fd' [ 275.703580][T15959] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 275.789579][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2345'. [ 276.248608][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 276.370872][T15985] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 276.372155][T15986] No control pipe specified [ 276.372343][T15986] No control pipe specified [ 276.372558][T15986] No control pipe specified [ 276.372764][T15986] No control pipe specified [ 276.372944][T15986] No control pipe specified [ 276.373126][T15986] No control pipe specified [ 276.373309][T15986] No control pipe specified [ 276.373478][T15986] No control pipe specified [ 276.373659][T15986] No control pipe specified [ 276.373847][T15986] No control pipe specified [ 276.374024][T15986] No control pipe specified [ 276.374205][T15986] No control pipe specified [ 276.386239][T15986] No control pipe specified [ 277.418740][T16010] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 277.443259][T16010] kvm: requested 150857 ns i8254 timer period limited to 200000 ns [ 277.446967][T16010] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 277.481203][T16010] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 277.488389][T16010] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 277.494978][T16010] kvm: requested 103923 ns i8254 timer period limited to 200000 ns [ 277.498633][T16010] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 277.502908][T16010] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 277.509022][T16010] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 277.514029][T16010] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 277.941434][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 277.941449][ T43] audit: type=1400 audit(1789111219.701:1720): avc: denied { write } for pid=16014 comm="syz.6.2359" name="target" dev="configfs" ino=5065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.961974][ T43] audit: type=1400 audit(1789111219.729:1721): avc: denied { write } for pid=16014 comm="syz.6.2359" name="usb_gadget" dev="configfs" ino=60193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.003702][ T43] audit: type=1400 audit(1789111219.766:1722): avc: denied { write } for pid=16014 comm="syz.6.2359" name="naa.1234567890abcdef" dev="configfs" ino=60195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.003856][T16015] [ 278.011910][T16015] ====================================================== [ 278.014062][T16015] WARNING: possible circular locking dependency detected [ 278.016240][T16015] syzkaller #0 Tainted: G L [ 278.018779][T16015] ------------------------------------------------------ [ 278.021689][T16015] syz.6.2359/16015 is trying to acquire lock: [ 278.024190][T16015] ffff8880206156c0 (&sb->s_type->i_mutex_key#42){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.028797][T16015] [ 278.028797][T16015] but task is already holding lock: [ 278.032733][T16015] ffffffff9047de20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 278.037085][T16015] [ 278.037085][T16015] which lock already depends on the new lock. [ 278.037085][T16015] [ 278.040771][T16015] [ 278.040771][T16015] the existing dependency chain (in reverse order) is: [ 278.044528][T16015] [ 278.044528][T16015] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 278.047822][T16015] lock_acquire+0x1d1/0x380 [ 278.049888][T16015] __mutex_lock+0x1a4/0x1bd0 [ 278.052161][T16015] tcm_alloc_inst+0x5f/0x1e0 [ 278.054276][T16015] try_get_usb_function_instance+0x136/0x1f0 [ 278.057594][T16015] usb_get_function_instance+0x16/0x70 [ 278.060909][T16015] function_make+0x18c/0x3f0 [ 278.063473][T16015] configfs_mkdir+0x525/0xd40 [ 278.065517][T16015] vfs_mkdir+0x364/0x850 [ 278.067532][T16015] filename_mkdirat+0x48b/0x5e0 [ 278.069732][T16015] __x64_sys_mkdir+0x6b/0x90 [ 278.071816][T16015] do_syscall_64+0x123/0x790 [ 278.073896][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.076652][T16015] [ 278.076652][T16015] -> #2 (func_lock){+.+.}-{4:4}: [ 278.079691][T16015] lock_acquire+0x1d1/0x380 [ 278.081819][T16015] __mutex_lock+0x1a4/0x1bd0 [ 278.084011][T16015] try_get_usb_function_instance+0x26/0x1f0 [ 278.086974][T16015] usb_get_function_instance+0x16/0x70 [ 278.089661][T16015] function_make+0x18c/0x3f0 [ 278.091930][T16015] configfs_mkdir+0x525/0xd40 [ 278.094120][T16015] vfs_mkdir+0x364/0x850 [ 278.096202][T16015] filename_mkdirat+0x48b/0x5e0 [ 278.098473][T16015] __x64_sys_mkdir+0x6b/0x90 [ 278.100652][T16015] do_syscall_64+0x123/0x790 [ 278.102858][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.105552][T16015] [ 278.105552][T16015] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 278.108662][T16015] lock_acquire+0x1d1/0x380 [ 278.110091][T16015] __mutex_lock+0x1a4/0x1bd0 [ 278.111881][T16015] configfs_rmdir+0x5ae/0x950 [ 278.114368][T16015] vfs_rmdir+0x328/0x8a0 [ 278.116767][T16015] filename_rmdir+0x31a/0x5c0 [ 278.118927][T16015] __x64_sys_unlinkat+0xf5/0x130 [ 278.121222][T16015] do_syscall_64+0x123/0x790 [ 278.123390][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.126049][T16015] [ 278.126049][T16015] -> #0 (&sb->s_type->i_mutex_key#42){++++}-{4:4}: [ 278.129714][T16015] check_prev_add+0xeb/0xe60 [ 278.131902][T16015] __lock_acquire+0x1528/0x1f40 [ 278.134170][T16015] lock_acquire+0x1d1/0x380 [ 278.136320][T16015] down_write+0x8b/0x1f0 [ 278.138247][T16015] configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.140883][T16015] usbg_make_tpg+0x251/0x610 [ 278.143074][T16015] target_fabric_make_tpg+0xab/0x8c0 [ 278.145536][T16015] configfs_mkdir+0x525/0xd40 [ 278.147915][T16015] vfs_mkdir+0x364/0x850 [ 278.150078][T16015] filename_mkdirat+0x48b/0x5e0 [ 278.152552][T16015] __x64_sys_mkdir+0x6b/0x90 [ 278.154862][T16015] do_syscall_64+0x123/0x790 [ 278.157048][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.159771][T16015] [ 278.159771][T16015] other info that might help us debug this: [ 278.159771][T16015] [ 278.164013][T16015] Chain exists of: [ 278.164013][T16015] &sb->s_type->i_mutex_key#42 --> func_lock --> tpg_instances_lock [ 278.164013][T16015] [ 278.169826][T16015] Possible unsafe locking scenario: [ 278.169826][T16015] [ 278.173014][T16015] CPU0 CPU1 [ 278.175458][T16015] ---- ---- [ 278.177702][T16015] lock(tpg_instances_lock); [ 278.179706][T16015] lock(func_lock); [ 278.182362][T16015] lock(tpg_instances_lock); [ 278.185399][T16015] lock(&sb->s_type->i_mutex_key#42); [ 278.187691][T16015] [ 278.187691][T16015] *** DEADLOCK *** [ 278.187691][T16015] [ 278.190236][T16015] locks held by syz.6.2359/16015: 4, last CPU#2: [ 278.192787][T16015] #0: ffff888024986460 (sb_writers#28){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 278.196715][T16015] #1: ffff888013450f80 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 278.201257][T16015] #2: ffffffff8ffb0c48 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 278.205609][T16015] #3: ffffffff9047de20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 278.210716][T16015] [ 278.210716][T16015] stack backtrace: [ 278.213425][T16015] CPU: 2 UID: 0 PID: 16015 Comm: syz.6.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.217836][T16015] Tainted: [L]=SOFTLOCKUP [ 278.219633][T16015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.224345][T16015] Call Trace: [ 278.226063][T16015] [ 278.227664][T16015] dump_stack_lvl+0x100/0x190 [ 278.230497][T16015] print_circular_bug.cold+0x178/0x1be [ 278.232964][T16015] check_noncircular+0x146/0x160 [ 278.235119][T16015] check_prev_add+0xeb/0xe60 [ 278.237047][T16015] __lock_acquire+0x1528/0x1f40 [ 278.239076][T16015] ? rcu_is_watching+0x13/0xc0 [ 278.240677][T16015] lock_acquire+0x1d1/0x380 [ 278.242199][T16015] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.244699][T16015] ? __pfx___might_resched+0x10/0x10 [ 278.246921][T16015] down_write+0x8b/0x1f0 [ 278.249254][T16015] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.252227][T16015] ? __pfx_down_write+0x10/0x10 [ 278.254321][T16015] ? kstrtou16+0xde/0x130 [ 278.256180][T16015] configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.258683][T16015] usbg_make_tpg+0x251/0x610 [ 278.260515][T16015] ? __pfx_usbg_make_tpg+0x10/0x10 [ 278.262679][T16015] ? find_held_lock+0x2b/0x80 [ 278.264326][T16015] ? __pfx_usbg_make_tpg+0x10/0x10 [ 278.266154][T16015] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 278.268539][T16015] target_fabric_make_tpg+0xab/0x8c0 [ 278.271168][T16015] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 278.274294][T16015] configfs_mkdir+0x525/0xd40 [ 278.276534][T16015] ? may_create+0x285/0x440 [ 278.278526][T16015] ? __pfx_configfs_mkdir+0x10/0x10 [ 278.280605][T16015] vfs_mkdir+0x364/0x850 [ 278.282405][T16015] filename_mkdirat+0x48b/0x5e0 [ 278.284660][T16015] ? __pfx_filename_mkdirat+0x10/0x10 [ 278.287051][T16015] ? strncpy_from_user+0x19d/0x2d0 [ 278.289468][T16015] ? do_getname+0x191/0x390 [ 278.291642][T16015] __x64_sys_mkdir+0x6b/0x90 [ 278.293787][T16015] do_syscall_64+0x123/0x790 [ 278.295882][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.298367][T16015] RIP: 0033:0x7f001539e159 [ 278.300019][T16015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.308466][T16015] RSP: 002b:00007f0016229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 278.311987][T16015] RAX: ffffffffffffffda RBX: 00007f0015625fa0 RCX: 00007f001539e159 [ 278.315473][T16015] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 278.319115][T16015] RBP: 00007f001543503b R08: 0000000000000000 R09: 0000000000000000 [ 278.322593][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.325925][T16015] R13: 00007f0015626038 R14: 00007f0015625fa0 R15: 00007ffe53690e48 [ 278.329295][T16015] [ 278.529937][ T43] audit: type=1400 audit(1789111220.253:1723): avc: denied { unmount } for pid=10219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1