Starting OpenBSD Secure Shell server... [ OK ] Started Daily apt download activities. [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Started Daily Cleanup of Temporary Directories. [ OK ] Reached target Timers. [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. 2020/07/11 05:32:50 fuzzer started 2020/07/11 05:32:50 dialing manager at 10.128.0.26:32835 2020/07/11 05:32:50 syscalls: 3163 2020/07/11 05:32:50 code coverage: enabled 2020/07/11 05:32:50 comparison tracing: enabled 2020/07/11 05:32:50 extra coverage: enabled 2020/07/11 05:32:50 setuid sandbox: enabled 2020/07/11 05:32:50 namespace sandbox: enabled 2020/07/11 05:32:50 Android sandbox: enabled 2020/07/11 05:32:50 fault injection: enabled 2020/07/11 05:32:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/11 05:32:50 net packet injection: enabled 2020/07/11 05:32:50 net device setup: enabled 2020/07/11 05:32:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/11 05:32:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/11 05:32:50 USB emulation: enabled 05:35:31 executing program 0: syzkaller login: [ 229.067694][ T29] audit: type=1400 audit(1594445731.265:8): avc: denied { execmem } for pid=6826 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 229.209442][ T6827] IPVS: ftp: loaded support on port[0] = 21 05:35:31 executing program 1: [ 229.359860][ T6827] chnl_net:caif_netlink_parms(): no params data found [ 229.478864][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.486886][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.497759][ T6827] device bridge_slave_0 entered promiscuous mode [ 229.507925][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.515544][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.523723][ T6827] device bridge_slave_1 entered promiscuous mode [ 229.548584][ T6827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.567084][ T6827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.616975][ T6965] IPVS: ftp: loaded support on port[0] = 21 [ 229.626248][ T6827] team0: Port device team_slave_0 added [ 229.638366][ T6827] team0: Port device team_slave_1 added [ 229.668388][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.676888][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.704681][ T6827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 05:35:32 executing program 2: [ 229.719966][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.728144][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.757333][ T6827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.859143][ T6827] device hsr_slave_0 entered promiscuous mode [ 229.904856][ T6827] device hsr_slave_1 entered promiscuous mode [ 230.072068][ T7007] IPVS: ftp: loaded support on port[0] = 21 05:35:32 executing program 3: [ 230.226168][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 230.496447][ T6827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.530153][ T7162] IPVS: ftp: loaded support on port[0] = 21 [ 230.550254][ T6827] netdevsim netdevsim0 netdevsim1: renamed from eth1 05:35:32 executing program 4: [ 230.617518][ T6827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.687747][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 230.719935][ T6827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.833535][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.855882][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.884691][ T6965] device bridge_slave_0 entered promiscuous mode [ 230.918661][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.927368][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.945535][ T6965] device bridge_slave_1 entered promiscuous mode 05:35:33 executing program 5: [ 231.061857][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.082555][ T7299] IPVS: ftp: loaded support on port[0] = 21 [ 231.093168][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.233742][ T6965] team0: Port device team_slave_0 added [ 231.278029][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.286642][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.295060][ T7007] device bridge_slave_0 entered promiscuous mode [ 231.308545][ T6965] team0: Port device team_slave_1 added [ 231.328607][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.336431][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.344722][ T7007] device bridge_slave_1 entered promiscuous mode [ 231.369308][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 231.411749][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.419085][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.446352][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.490387][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.504833][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.514791][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.521781][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.550608][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.568482][ T7419] IPVS: ftp: loaded support on port[0] = 21 [ 231.635177][ T7007] team0: Port device team_slave_0 added [ 231.647481][ T7007] team0: Port device team_slave_1 added [ 231.667725][ T6965] device hsr_slave_0 entered promiscuous mode [ 231.714907][ T6965] device hsr_slave_1 entered promiscuous mode [ 231.764457][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.772388][ T6965] Cannot create hsr debugfs directory [ 231.840256][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.848472][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.876195][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.901500][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.909942][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.919781][ T7162] device bridge_slave_0 entered promiscuous mode [ 231.929067][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.936943][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.946426][ T7162] device bridge_slave_1 entered promiscuous mode [ 231.959995][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.967568][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.996558][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.157226][ T7007] device hsr_slave_0 entered promiscuous mode [ 232.194654][ T7007] device hsr_slave_1 entered promiscuous mode [ 232.234328][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.241946][ T7007] Cannot create hsr debugfs directory [ 232.272427][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.318692][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.333501][ T7299] chnl_net:caif_netlink_parms(): no params data found [ 232.438528][ T7162] team0: Port device team_slave_0 added [ 232.479860][ T7162] team0: Port device team_slave_1 added [ 232.509605][ T6827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.614814][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.621811][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.648824][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.663286][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.670610][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.696665][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.798639][ T7419] chnl_net:caif_netlink_parms(): no params data found [ 232.859818][ T6965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.937095][ T7162] device hsr_slave_0 entered promiscuous mode [ 232.974780][ T7162] device hsr_slave_1 entered promiscuous mode [ 233.024648][ T7162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.032246][ T7162] Cannot create hsr debugfs directory [ 233.038838][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.049616][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.083100][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.090550][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.100400][ T7299] device bridge_slave_0 entered promiscuous mode [ 233.108444][ T6965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.184425][ T6965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.257472][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.264792][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.272619][ T7299] device bridge_slave_1 entered promiscuous mode [ 233.295033][ T6827] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.302219][ T6965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.360267][ T7007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.417749][ T7007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.513618][ T7007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.558490][ T7007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.624375][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.644489][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.653963][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.664111][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.671411][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.681460][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.691505][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.700592][ T7419] device bridge_slave_0 entered promiscuous mode [ 233.722152][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.755281][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.763329][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.777554][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.788515][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.795720][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.811791][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.822267][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.832497][ T7419] device bridge_slave_1 entered promiscuous mode [ 233.844463][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.856189][ T7299] team0: Port device team_slave_0 added [ 233.893045][ T7299] team0: Port device team_slave_1 added [ 233.948093][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.957174][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.968717][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.978652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.989344][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.998315][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.007420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.023312][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.034625][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.041613][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.069638][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.086452][ T7419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.112961][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.121114][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.148345][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.171534][ T7419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.206371][ T7419] team0: Port device team_slave_0 added [ 234.213780][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.224786][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.240112][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.287158][ T7419] team0: Port device team_slave_1 added [ 234.339267][ T7299] device hsr_slave_0 entered promiscuous mode [ 234.384824][ T7299] device hsr_slave_1 entered promiscuous mode [ 234.434543][ T7299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.442154][ T7299] Cannot create hsr debugfs directory [ 234.492688][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.500138][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.527627][ T7419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.583794][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.591993][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.601082][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.609204][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.636347][ T7419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.720521][ T6827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.786709][ T7419] device hsr_slave_0 entered promiscuous mode [ 234.855851][ T7419] device hsr_slave_1 entered promiscuous mode [ 234.895079][ T7419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.902691][ T7419] Cannot create hsr debugfs directory [ 234.953070][ T7162] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.990631][ T7162] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.057228][ T7162] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.131704][ T7162] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.312127][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.321861][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.341084][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.408460][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.420378][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.432434][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.441740][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.462671][ T7299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.537153][ T7299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.581732][ T6827] device veth0_vlan entered promiscuous mode [ 235.605462][ T7299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.668502][ T7299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.746883][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.759002][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.772064][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.781280][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.792484][ T6827] device veth1_vlan entered promiscuous mode [ 235.866369][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.874061][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.886610][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.898095][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.907658][ T2566] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.914867][ T2566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.924037][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.933315][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.942831][ T2566] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.950022][ T2566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.962846][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.976631][ T7419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.037675][ T7419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.098501][ T7419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.157748][ T7419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.238294][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.246710][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.264474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.273247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.287485][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.294683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.348207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.357496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.369070][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.378300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.387927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.395104][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.403060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.424579][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.433321][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.442917][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.452056][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.461216][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.470667][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.509042][ T6965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.524052][ T6965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.551784][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.560089][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.569257][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.580710][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.596025][ T6827] device veth0_macvtap entered promiscuous mode [ 236.636402][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.648116][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.659541][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.671077][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.686407][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.698396][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.713257][ T6827] device veth1_macvtap entered promiscuous mode [ 236.741645][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.760301][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.771396][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.781400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.791392][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.801016][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.810013][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.817975][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.836980][ T7007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.848761][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.860461][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.869868][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.893469][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.902636][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.912094][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.932457][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.950298][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.968493][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.978406][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.000968][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.035079][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.043901][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.058192][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.068004][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.077853][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.088025][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.096942][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.104001][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.130319][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.158956][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.167399][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.175396][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.187491][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.219448][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.227461][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.237674][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.247884][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.256931][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.263990][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.278162][ T7419] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.392074][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.401256][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.410436][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.420200][ T6965] device veth0_vlan entered promiscuous mode [ 237.442582][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.458711][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.469489][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.479035][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.488985][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.498810][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.510861][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.520329][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.529503][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.536664][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.545110][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.553336][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.645874][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.654087][ T6965] device veth1_vlan entered promiscuous mode [ 237.678272][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 05:35:39 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 237.695296][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.714436][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.723238][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.742431][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.752362][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.762323][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.779366][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.786597][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.814964][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.823997][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.850716][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.921711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.933521][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.951050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.962116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.978937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.992860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.008823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.027754][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.036536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.043605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.051953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.061129][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.069927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state 05:35:40 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 238.077047][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.084825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.093405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.102408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.110553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.121900][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.200580][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.221737][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.256318][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.272568][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 05:35:40 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 238.356970][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.375626][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.390998][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.401882][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.417406][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.430670][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.449984][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.462404][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.479171][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.493781][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.518673][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.534590][ T6965] device veth0_macvtap entered promiscuous mode [ 238.584216][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.601851][ T7007] device veth0_vlan entered promiscuous mode [ 238.631237][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.640258][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.657005][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.666272][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.675817][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.683451][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.691261][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.700128][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.710065][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.718764][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 05:35:40 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 238.733173][ T6965] device veth1_macvtap entered promiscuous mode [ 238.759973][ T7299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.796418][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.805599][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.813654][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.861613][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.869701][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.904201][ T7007] device veth1_vlan entered promiscuous mode [ 238.932165][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.949964][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.976462][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.998800][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.016250][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 05:35:41 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) [ 239.042618][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.084065][ T7419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.097612][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.107141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.135282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.157223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.179114][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.237660][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.273626][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:35:41 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) [ 239.311650][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.340733][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.369166][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.390889][ T7162] device veth0_vlan entered promiscuous mode [ 239.423281][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.436535][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.474261][ T7162] device veth1_vlan entered promiscuous mode [ 239.496323][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.510302][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.545253][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.553596][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.575627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 05:35:41 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) [ 239.604604][ T7007] device veth0_macvtap entered promiscuous mode [ 239.777316][ T7007] device veth1_macvtap entered promiscuous mode [ 239.867448][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.880938][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.891340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.913677][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.925328][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 05:35:42 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) [ 239.986118][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.996038][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.007255][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.026903][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.050157][ T7299] device veth0_vlan entered promiscuous mode [ 240.072955][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.101492][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.139735][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.171437][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.213609][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.229878][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.239541][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.248708][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.259068][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.281009][ T7162] device veth0_macvtap entered promiscuous mode [ 240.293764][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.318842][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.329629][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.341493][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.353977][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.364497][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.372540][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.382286][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.391361][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.400009][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.415896][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.424858][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.432785][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.444064][ T7299] device veth1_vlan entered promiscuous mode [ 240.468195][ T7419] device veth0_vlan entered promiscuous mode [ 240.478155][ T7162] device veth1_macvtap entered promiscuous mode [ 240.542639][ T7419] device veth1_vlan entered promiscuous mode [ 240.733196][ T7299] device veth0_macvtap entered promiscuous mode [ 240.751979][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 05:35:43 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) [ 240.780467][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.810384][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.830597][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.850793][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.891344][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.913202][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.938205][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.951637][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.969244][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.979512][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.989636][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.008845][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.025656][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.049597][ T7419] device veth0_macvtap entered promiscuous mode [ 241.063304][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.074875][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.085471][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.096045][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.106467][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.120964][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.133003][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.147206][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.157211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.166403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.177599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.190562][ T7299] device veth1_macvtap entered promiscuous mode [ 241.208680][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.219083][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.238222][ T7419] device veth1_macvtap entered promiscuous mode [ 241.353348][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.370807][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.381161][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.391760][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.401730][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.412318][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.422285][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.435316][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.448364][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.462762][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.475159][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.485696][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.497268][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.508026][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.519332][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.530168][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.542177][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.542675][ T0] NOHZ: local_softirq_pending 08 [ 241.556097][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.568049][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.579692][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.645898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.655469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.665485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.675925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 05:35:43 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 241.692122][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.715041][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.744473][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.765245][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.786413][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.814818][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.834547][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.864956][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.877767][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.888892][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.914744][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.931939][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.960890][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.977095][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.988399][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.998813][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.009777][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.025712][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.039901][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.052243][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.061050][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.071038][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.080710][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.091243][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:35:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000280)=0x2, 0x144) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x6) sendmmsg(r3, &(0x7f0000000000), 0x266, 0x20000000) 05:35:44 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) 05:35:44 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) 05:35:44 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) 05:35:44 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 05:35:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) [ 242.611695][ C0] hrtimer: interrupt took 32312 ns [ 242.648173][ T29] audit: type=1400 audit(1594445744.845:9): avc: denied { create } for pid=8170 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 242.692095][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 242.728152][ T29] audit: type=1400 audit(1594445744.845:10): avc: denied { name_bind } for pid=8170 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 05:35:45 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 05:35:45 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 05:35:45 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x410800, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000002c0)={{0x3, 0x7}, 0x20}, 0x10) r1 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x154) close(r1) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0xffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r5, 0x7c81, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$USBDEVFS_GETDRIVER(r8, 0x7c81, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r0, r8}) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x11, &(0x7f0000000200)={r10}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r10, 0x8}, &(0x7f0000000040)=0x8) 05:35:45 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) 05:35:45 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0x8c9e6097e2bc9bbb, 0x2}, 0x1}, 0x18) [ 242.938784][ T29] audit: type=1400 audit(1594445744.845:11): avc: denied { node_bind } for pid=8170 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 243.081013][ T29] audit: type=1400 audit(1594445744.975:12): avc: denied { write } for pid=8161 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 05:35:45 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) [ 243.153187][ T8172] IPVS: ftp: loaded support on port[0] = 21 05:35:45 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:35:45 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) 05:35:45 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 05:35:45 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) 05:35:45 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 05:35:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) 05:35:47 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 05:35:47 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800000200000000ffffffdd00", @ANYRES32=r8, @ANYBLOB="0000000000000000d4001a8054000a80050008000000000048000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080000000000050008000000000005000800000000000500080000000000e7fe1c0004000700100002800c0001800800000000000000100002800c00018008000000000000002800028024000180000000000000000008000000000000000800000000000000080000000000000004000700280002802400018008000000000000000800000000000000080000000000000008000000000000000500270000000000"], 0xfc}}, 0x0) 05:35:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 05:35:47 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:47 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) 05:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) [ 245.394851][ T246] tipc: TX() has been purged, node left! 05:35:47 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:47 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1200, 0x4) 05:35:47 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) [ 245.472125][ T8266] IPVS: ftp: loaded support on port[0] = 21 05:35:47 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 05:35:47 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) [ 245.721675][ T8286] IPVS: ftp: loaded support on port[0] = 21 05:35:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) 05:35:48 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:48 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) 05:35:48 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) 05:35:48 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) 05:35:48 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) [ 246.288390][ T8338] IPVS: ftp: loaded support on port[0] = 21 05:35:48 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:48 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r6, 0x0, r5) 05:35:48 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) [ 246.640641][ T8374] IPVS: ftp: loaded support on port[0] = 21 05:35:48 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)) 05:35:48 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:35:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x1d, 0x0, r2}, {0x6, 0x6, 0x3, 0x1f, 0x7fffffff, 0xf6e9, 0xfffffffffffffff7, 0x8}, {0x6, 0x9, 0x4, 0x4}, 0x100, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x3, 0x81, 0x6, 0xec, 0x1}}, 0xe8) listen(r0, 0x0) unshare(0x42000200) r3 = accept(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x13}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd74) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[], 0x3f00) 05:35:49 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:49 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x20000094, 0x2000) 05:35:49 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) 05:35:49 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:49 executing program 4: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) 05:35:49 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 247.268341][ T8418] IPVS: ftp: loaded support on port[0] = 21 05:35:49 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:49 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0x4) 05:35:49 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r3, 0x0, r2) 05:35:49 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:49 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x3) 05:35:50 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000380)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x0, 0x2, 0x2, r2}, &(0x7f0000000180)=0x10) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$USBDEVFS_GETDRIVER(r5, 0x7c81, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x61, 0x8, 0xa3, 0xf7, 0x7f, 0x0, 0xe0, 0x1, 0x0, 0x4, 0xb6, 0x8, 0x1}, {0x6, 0xfffe, 0x1, 0x0, 0xee, 0x5, 0x1, 0x0, 0x5, 0x4, 0x1, 0x1f, 0x6}, {0x1, 0x1, 0x5, 0xff, 0x3, 0x4, 0x7f, 0x3f, 0x1c, 0x5, 0x77, 0x0, 0x86b}], 0x3}) 05:35:50 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) 05:35:50 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:50 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) 05:35:50 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:35:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000380), 0x4) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r7, 0x7c81, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x1, 0x4, {{0x34, 0x4, 0x3, 0x2, 0xd0, 0x64, 0x0, 0xf0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0xa7, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xce, 0x1, 0x8, [{@loopback, 0x70000000}, {@loopback, 0x267f}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x80}, {@multicast2, 0x10000}, {@empty, 0x1f}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xd, 0x0, 0x9, [0x1f4e829b, 0x80000000]}, @lsrr={0x83, 0x17, 0xfa, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @local, @local]}, @rr={0x7, 0xf, 0x11, [@empty, @private=0xa010102, @multicast2]}, @end, @lsrr={0x83, 0xb, 0x26, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0x2, [{@private=0xa010102, 0x1}, {@remote}, {@local, 0x7ff}, {@private=0xa010100, 0x3}, {@local, 0x400}]}]}}}}}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fddbdf2510000000040005010500d500010000000400170108000c000300000008000300", @ANYRES32=r8, @ANYBLOB="08000d00070000001c000e008e77b77973c18b46ebfd080a5a5e29b4c65cf93416e59720"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="418b95ff54ca833b041bd348120100c95640adf8c4fb92a8b9f85d0000000020341d0400400000000001090224000100000000090400000103010000092100000001"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 05:35:50 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) fcntl$dupfd(r3, 0x0, r0) [ 248.153788][ T8474] SELinux: security_context_str_to_sid(user_u) failed for (dev tracefs, type tracefs) errno=-22 [ 248.230989][ T8480] SELinux: security_context_str_to_sid(user_u) failed for (dev tracefs, type tracefs) errno=-22 05:35:50 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:50 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:50 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000380)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x0, 0x2, 0x2, r2}, &(0x7f0000000180)=0x10) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$USBDEVFS_GETDRIVER(r5, 0x7c81, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x61, 0x8, 0xa3, 0xf7, 0x7f, 0x0, 0xe0, 0x1, 0x0, 0x4, 0xb6, 0x8, 0x1}, {0x6, 0xfffe, 0x1, 0x0, 0xee, 0x5, 0x1, 0x0, 0x5, 0x4, 0x1, 0x1f, 0x6}, {0x1, 0x1, 0x5, 0xff, 0x3, 0x4, 0x7f, 0x3f, 0x1c, 0x5, 0x77, 0x0, 0x86b}], 0x3}) 05:35:50 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) 05:35:50 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 248.484803][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 248.524098][ T8492] SELinux: security_context_str_to_sid(user_u) failed for (dev tracefs, type tracefs) errno=-22 05:35:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$USBDEVFS_GETDRIVER(r8, 0x7c81, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r9 = fcntl$dupfd(r5, 0x0, r4) ioctl$USBDEVFS_GETDRIVER(r9, 0x7c81, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000200)=0x220000, 0x4) 05:35:50 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:50 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:51 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:51 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) [ 248.764697][ T17] usb 5-1: device descriptor read/64, error 18 [ 249.154841][ T17] usb 5-1: device descriptor read/64, error 18 [ 249.427858][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.714739][ T17] usb 5-1: device descriptor read/64, error 18 [ 250.104750][ T17] usb 5-1: device descriptor read/64, error 18 [ 250.226986][ T17] usb usb5-port1: attempt power cycle [ 250.394811][ T246] tipc: TX() has been purged, node left! [ 250.557347][ T246] tipc: TX() has been purged, node left! [ 250.724794][ T246] tipc: TX() has been purged, node left! [ 250.894868][ T246] tipc: TX() has been purged, node left! [ 250.954775][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd 05:35:53 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:53 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:53 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) 05:35:53 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) [ 251.064754][ T246] tipc: TX() has been purged, node left! 05:35:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(r0, r2) ioctl$TCFLSH(r3, 0x5452, 0x746000) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x81) 05:35:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0xfc, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x48, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0xfffffffffffffee7}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}]}, @IFLA_PROTO_DOWN={0x5}]}, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 251.136809][ T17] usb 5-1: device descriptor read/8, error -71 05:35:53 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:53 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="72617700cc000000000000000000000000000000000000000000000000000000020000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007801e00100000000000000000000000000000000000000000801726563656e74000000000800000000000000000000000000000000000001000000000000000032740ea8b6bd47f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000c0ac00000000feffffff"], 0x1) [ 251.354859][ T17] usb 5-1: device descriptor read/8, error -71 05:35:53 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:53 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:53 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) 05:35:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x301040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$USBDEVFS_GETDRIVER(r6, 0x7c81, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x4, r6}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0xc6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x680e00, 0x0) sendmmsg(r0, &(0x7f00000038c0), 0x2fd, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 05:35:53 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 251.622418][ T8542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:35:54 executing program 0: shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 251.738667][ T8542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:35:54 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) [ 251.788375][ T8542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:35:54 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:54 executing program 2: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) 05:35:54 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:54 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:54 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x200004) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80002, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000800020002000000080001000200000008000100020000000800010000000000080001000300000008000200020000000800020002000000080001000300000008000100010000000800090002000000"], 0x64}, 0x1, 0x0, 0x0, 0x8008}, 0x40099) listen(0xffffffffffffffff, 0x6) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x11, &(0x7f0000000200)={r7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x5}, 0x8) sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="230ad4679af3a2156f7756ae7b81b857d38584827c56a3fde0757692be77a7831af0282268e65a623cf02df294aa0277ba5c00cc5c2c6745", 0x38}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x20) 05:35:54 executing program 0: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:54 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000180)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) fchmod(0xffffffffffffffff, 0x80) 05:35:54 executing program 2: shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) [ 252.470789][ T29] audit: type=1800 audit(1594445754.665:13): pid=8579 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15846 res=0 05:35:54 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r1, &(0x7f0000001400)=';', 0x2ffc00) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:54 executing program 0: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:54 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:35:55 executing program 0: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:55 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:55 executing program 2: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) [ 253.222188][ T29] audit: type=1800 audit(1594445755.414:14): pid=8582 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15846 res=0 05:35:55 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:55 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000180)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) fchmod(0xffffffffffffffff, 0x80) 05:35:57 executing program 2: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:35:57 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x200004) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80002, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000800020002000000080001000200000008000100020000000800010000000000080001000300000008000200020000000800020002000000080001000300000008000100010000000800090002000000"], 0x64}, 0x1, 0x0, 0x0, 0x8008}, 0x40099) listen(0xffffffffffffffff, 0x6) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x11, &(0x7f0000000200)={r7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x5}, 0x8) sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="230ad4679af3a2156f7756ae7b81b857d38584827c56a3fde0757692be77a7831af0282268e65a623cf02df294aa0277ba5c00cc5c2c6745", 0x38}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x20) 05:35:57 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:57 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:58 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:35:58 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) 05:35:58 executing program 2: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:35:58 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 255.931741][ T29] audit: type=1800 audit(1594445758.124:15): pid=8638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15871 res=0 05:35:58 executing program 1: shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:35:58 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 3: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:00 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000180)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) fchmod(0xffffffffffffffff, 0x80) 05:36:00 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x4c4) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000340)={0xfffffff8, 0x1, 'client0\x00', 0x6, "957740da7102ecaa", "924a880102fedc544f67a858622262d85ba4e4e498d44b7b3360da8bc273ea5a", 0x478a, 0x4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x0, 0x0, 0x5, {0x5, 0x0, "d94428"}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x188, &(0x7f0000000080)={[{0xb0, 0x4e00, "9ca3d6c38d9dafadc6c6356b0fc392adf4e0d612f7d6626585782e49b6239cb031ac1d77b112c55b5ade8247183be503debefc0deacde6652a2c3bd58ce9b4500e01ea8e19defd64f523ad56cd527dc99955689078aa47a9e7da919e1f1a2d424f4eb15a71f36ad0b9dab4aebf17b358c0649352603870f9f3d5e5f8d93407de8dd3a3e538310c871899cc34dedc57175783b2b145df7d4988cd6f8a375f2a43765bf289f338b335706524124d372309"}, {0x19, 0x4e00, "b061a7ac259ae9376a4fbf901ff6028ee42e9866e4430e2325"}, {0xe, 0x4e00, "f648cbc4261b36164678c2b541c9"}, {0x9c, 0x4e00, "327a5bcadcfcd70f7c4424f90b09233c3f1e9ebe12ec5df01815d7fccf6641b75fa6f3f8a659b089c6bb5d14a089dbf4d65b964c8b2d1d941d344d430c68307ca7b1f5a910c65d9d9c3d6205aba1a1c8bc21b3fbcf23d40c1e2a5ec154f0d6a7b0d678d857ea01b03f950a7a0ed9906b9967a497cd6ad5105429bf1ce6548f317e02e963d6e9d1367c1cf93e59ab3a4acd809a6cf7dcbe1d0d74ac37"}]}) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x6) r8 = accept$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c) fcntl$dupfd(r5, 0x406, r8) 05:36:00 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:00 executing program 3: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:00 executing program 1: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:00 executing program 1: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:00 executing program 3: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:00 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) [ 258.534966][ T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.834979][ T17] usb 6-1: device descriptor read/64, error 18 [ 259.226723][ T17] usb 6-1: device descriptor read/64, error 18 05:36:01 executing program 1: r0 = syz_open_dev$media(0x0, 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:01 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 259.495259][ T17] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 259.815167][ T17] usb 6-1: device descriptor read/64, error 18 [ 260.205050][ T17] usb 6-1: device descriptor read/64, error 18 [ 260.325107][ T17] usb usb6-port1: attempt power cycle 05:36:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x401, 0x1) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:36:03 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) 05:36:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0xd, 0xfffffffffffffffe, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001400)=@sack_info={0x0, 0xff, 0x1f}, &(0x7f0000001440)=0xc) recvmsg$qrtr(r3, &(0x7f00000013c0)={&(0x7f0000000000), 0xc, &(0x7f0000001300)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/230, 0xe6}], 0x4, &(0x7f0000001340)=[{0x70, 0x0, 0x0, ""/93}], 0x70, 0x10002}, 0x38, 0x18000) 05:36:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:03 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 261.035061][ T17] usb 6-1: new high-speed USB device number 4 using dummy_hcd 05:36:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$USBDEVFS_GETDRIVER(r5, 0x7c81, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/23}, {&(0x7f0000000300)=""/211}], 0x10000000000000c9, 0x100000007fc) lseek(r2, 0x1, 0x4) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x84002, 0x0) sendfile(r2, r6, 0x0, 0x8400f7fffff8) ftruncate(r1, 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), 0x0) 05:36:03 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) [ 261.145200][ T17] usb 6-1: device descriptor read/8, error -71 05:36:03 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) [ 261.289021][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 261.365130][ T17] usb 6-1: device descriptor read/8, error -71 05:36:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x401, 0x1) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:36:03 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 261.537108][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:03 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 05:36:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) [ 261.753287][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x401, 0x1) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:36:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:04 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:04 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x401, 0x1) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 262.344225][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:04 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:04 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) [ 262.484378][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:04 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:04 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000}, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) setpgid(r1, r2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}}) socket$kcm(0x10, 0x0, 0x10) 05:36:04 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:04 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x1a1f, 0x0, 0x401, 0x2, 0x20, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0), &(0x7f0000000340)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef) write(0xffffffffffffffff, &(0x7f0000000300)="c43d1e530970e54252", 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:04 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 262.718662][ T8809] FAULT_INJECTION: forcing a failure. [ 262.718662][ T8809] name failslab, interval 1, probability 0, space 0, times 1 [ 262.809043][ T8809] CPU: 0 PID: 8809 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 262.818096][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.828294][ T8809] Call Trace: [ 262.831973][ T8809] dump_stack+0x18f/0x20d [ 262.836488][ T8809] should_fail.cold+0x5/0x14 [ 262.841260][ T8809] ? tomoyo_realpath_from_path+0xc3/0x620 [ 262.847157][ T8809] should_failslab+0x5/0xf [ 262.851755][ T8809] __kmalloc+0x27d/0x340 05:36:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:05 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 262.856030][ T8809] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 262.861906][ T8809] tomoyo_realpath_from_path+0xc3/0x620 [ 262.868777][ T8809] ? tomoyo_profile+0x42/0x50 [ 262.873819][ T8809] tomoyo_path_number_perm+0x1cb/0x4d0 [ 262.879306][ T8809] ? tomoyo_path_number_perm+0x183/0x4d0 [ 262.885155][ T8809] ? tomoyo_execute_permission+0x470/0x470 [ 262.891504][ T8809] ? lock_acquire+0x1f1/0xad0 [ 262.896200][ T8809] ? delayed_put_pid+0x30/0x30 [ 262.901247][ T8809] ? lock_is_held_type+0xb0/0xe0 [ 262.906322][ T8809] ? selinux_inode_getsecctx+0x90/0x90 [ 262.912007][ T8809] ? __mutex_unlock_slowpath+0xe2/0x610 [ 262.917582][ T8809] ? lock_is_held_type+0xb0/0xe0 [ 262.922822][ T8809] ? __fget_files+0x294/0x400 [ 262.927678][ T8809] security_file_ioctl+0x50/0xb0 [ 262.932654][ T8809] ksys_ioctl+0x50/0x180 [ 262.936925][ T8809] __x64_sys_ioctl+0x6f/0xb0 [ 262.941547][ T8809] ? lockdep_hardirqs_on+0x6a/0xe0 [ 262.946916][ T8809] do_syscall_64+0x60/0xe0 [ 262.951437][ T8809] entry_SYSCALL_64_after_hwframe+0x44/0xa9 05:36:05 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) [ 262.957537][ T8809] RIP: 0033:0x45cba9 [ 262.961731][ T8809] Code: Bad RIP value. [ 262.965816][ T8809] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.974405][ T8809] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 262.982419][ T8809] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 262.990654][ T8809] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.998876][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 05:36:05 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) [ 263.007155][ T8809] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 263.038336][ T8828] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:36:05 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) [ 263.179168][ T8809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.355346][ T8840] FAULT_INJECTION: forcing a failure. [ 263.355346][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 263.370718][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.393430][ T8840] CPU: 1 PID: 8840 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 263.402435][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.412961][ T8840] Call Trace: [ 263.416288][ T8840] dump_stack+0x18f/0x20d [ 263.420651][ T8840] should_fail.cold+0x5/0x14 [ 263.425516][ T8840] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.431111][ T8840] should_failslab+0x5/0xf [ 263.435559][ T8840] __kmalloc+0x27d/0x340 [ 263.440015][ T8840] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.445973][ T8840] tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.451293][ T8840] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.457163][ T8840] tomoyo_encode+0x28/0x50 [ 263.461606][ T8840] tomoyo_realpath_from_path+0x186/0x620 [ 263.467280][ T8840] tomoyo_path_number_perm+0x1cb/0x4d0 [ 263.472864][ T8840] ? tomoyo_path_number_perm+0x183/0x4d0 [ 263.478539][ T8840] ? tomoyo_execute_permission+0x470/0x470 [ 263.484386][ T8840] ? lock_acquire+0x1f1/0xad0 [ 263.489093][ T8840] ? delayed_put_pid+0x30/0x30 [ 263.493900][ T8840] ? lock_is_held_type+0xb0/0xe0 [ 263.498917][ T8840] ? selinux_inode_getsecctx+0x90/0x90 [ 263.505475][ T8840] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.511202][ T8840] ? lock_is_held_type+0xb0/0xe0 [ 263.516201][ T8840] ? __fget_files+0x294/0x400 [ 263.521006][ T8840] security_file_ioctl+0x50/0xb0 [ 263.526146][ T8840] ksys_ioctl+0x50/0x180 [ 263.530545][ T8840] __x64_sys_ioctl+0x6f/0xb0 [ 263.535166][ T8840] ? lockdep_hardirqs_on+0x6a/0xe0 [ 263.540386][ T8840] do_syscall_64+0x60/0xe0 [ 263.544862][ T8840] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.550936][ T8840] RIP: 0033:0x45cba9 [ 263.554839][ T8840] Code: Bad RIP value. [ 263.559008][ T8840] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.567539][ T8840] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 263.575736][ T8840] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 263.584218][ T8840] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 263.592332][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 263.601289][ T8840] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 263.929997][ T8840] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:06 executing program 4: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101002, 0x0, 0x2}, 0x18) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x4, 0x1d, 0x4, 0x7, "2af94346f9ce2af19074ce63990f009e11c0098fa8120c9dbdd22497c818a5c2"}) ioctl$EVIOCSCLOCKID(r1, 0x40104593, &(0x7f0000000000)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r3, r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180)=0x4, 0x4) 05:36:06 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:06 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x402c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x410080, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) faccessat2(r0, &(0x7f0000000000)='./bus/../file0\x00', 0x1c2, 0x1000) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @broadcast}], 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r4, 0x7c81, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)='batadv\x00', 0x7, 0x0) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r1, r3, 0x0, 0x80001d00c0d0) open_by_handle_at(r2, &(0x7f0000000140)={0x48, 0x7f, "7402eb393f0c5af87b21964f6a4233f38eeb42c80846d4d353a44c2fddafe15d7538d6af2f643facd100672add56bc2d42d1e11ca9c501855b32393d45eee396"}, 0x408000) close(0xffffffffffffffff) 05:36:06 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:36:06 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:06 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:06 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:36:06 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) [ 264.160532][ T8857] FAULT_INJECTION: forcing a failure. [ 264.160532][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 264.226418][ T8857] CPU: 1 PID: 8857 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 264.235191][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.245374][ T8857] Call Trace: [ 264.248712][ T8857] dump_stack+0x18f/0x20d [ 264.253193][ T8857] should_fail.cold+0x5/0x14 [ 264.258179][ T8857] should_failslab+0x5/0xf [ 264.263110][ T8857] kmem_cache_alloc+0x2a9/0x3b0 [ 264.268170][ T8857] __d_alloc+0x2a/0x920 [ 264.269163][ T29] audit: type=1800 audit(1594445766.424:16): pid=8861 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15926 res=0 [ 264.272549][ T8857] d_alloc_pseudo+0x19/0x70 [ 264.272572][ T8857] alloc_file_pseudo+0xc6/0x250 [ 264.272589][ T8857] ? rwlock_bug.part.0+0x90/0x90 [ 264.272606][ T8857] ? alloc_file+0x5a0/0x5a0 [ 264.272630][ T8857] ? do_raw_spin_unlock+0x171/0x230 [ 264.317466][ T8857] ? _raw_spin_unlock+0x24/0x40 [ 264.322449][ T8857] ? __alloc_fd+0x28d/0x600 [ 264.327165][ T8857] anon_inode_getfile+0xc8/0x1f0 [ 264.332268][ T8857] media_request_alloc+0xec/0x500 [ 264.337438][ T8857] media_device_request_alloc+0x9b/0xd0 [ 264.343125][ T8857] media_device_ioctl+0x268/0x440 [ 264.348350][ T8857] ? media_device_pci_init+0x250/0x250 [ 264.353860][ T8857] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 264.359794][ T8857] ? do_vfs_ioctl+0x27d/0x1090 [ 264.364865][ T8857] ? generic_block_fiemap+0x60/0x60 [ 264.370294][ T8857] ? selinux_inode_getsecctx+0x90/0x90 [ 264.375792][ T8857] ? __mutex_unlock_slowpath+0xe2/0x610 [ 264.381739][ T8857] ? lock_is_held_type+0xb0/0xe0 [ 264.386723][ T8857] ? __fget_files+0x294/0x400 [ 264.391663][ T8857] ? media_device_pci_init+0x250/0x250 [ 264.397145][ T8857] media_ioctl+0xf2/0x150 [ 264.401502][ T8857] ? media_write+0x1c0/0x1c0 [ 264.406120][ T8857] ksys_ioctl+0x11a/0x180 [ 264.410502][ T8857] __x64_sys_ioctl+0x6f/0xb0 [ 264.415339][ T8857] ? lockdep_hardirqs_on+0x6a/0xe0 [ 264.420481][ T8857] do_syscall_64+0x60/0xe0 05:36:06 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) [ 264.424923][ T8857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.430839][ T8857] RIP: 0033:0x45cba9 [ 264.434777][ T8857] Code: Bad RIP value. [ 264.438862][ T8857] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.447308][ T8857] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 264.456260][ T8857] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 264.464262][ T8857] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 05:36:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r3+30000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0xe4}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x14) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 264.472271][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 264.480398][ T8857] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 05:36:06 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:36:06 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) 05:36:06 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:06 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) [ 264.789997][ T8886] FAULT_INJECTION: forcing a failure. [ 264.789997][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 264.815523][ T8886] CPU: 0 PID: 8886 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 264.824159][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.834232][ T8886] Call Trace: 05:36:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x2d78, 0x30, 0x3ed, 0x0, 0x0, {}, [{0x2d64, 0x1, [@m_pedit={0x2d60, 0x5, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x2cb8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xfc, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x200, 0x2, 0x8, 0x6, 0x8}, 0x7f, 0x7, [{0x4, 0x2, 0x0, 0x7fff, 0x80000001, 0x1}]}, [{0x1, 0x7, 0x8000, 0x8dc6, 0x6, 0x10000}, {0x7, 0xff, 0x3, 0x10001, 0x5, 0x1}, {0x5, 0x200, 0x6ae, 0xd2, 0x9, 0xb97d}, {0xe33f, 0x5, 0xfffffffb, 0x80000001}, {0x200, 0x7f, 0x3, 0x4, 0x80000000, 0x9277}, {0x0, 0x7, 0x0, 0x9, 0x1, 0xffffffff}, {0x1, 0x6de, 0x5bdf, 0x0, 0x7, 0x80000001}, {0x7, 0x800, 0x3, 0x7fffffff, 0xfffffffa}, {0x0, 0x1, 0x400, 0xfff, 0xff, 0x6}, {0x2, 0x6, 0x6, 0x778d649e, 0x5, 0xfff}, {0x0, 0x6, 0x9, 0x0, 0x6, 0x81}, {0x3ff, 0x3, 0x1ff, 0x5, 0x11, 0x1ff}, {0x8, 0xfffffffe, 0x1, 0x4, 0x3, 0xf4ef}, {0xffff, 0x0, 0x1ff, 0x1, 0x6, 0x7}, {0x3, 0x8, 0x9, 0x3, 0xfffffffd, 0x5}, {0x401, 0x3, 0x7, 0x4, 0x4, 0x7}, {0x8001, 0xfff, 0x1, 0xa30, 0x20, 0xf651}, {0x108, 0xaf, 0x10000, 0xc000, 0x5, 0x2}, {0xcfea, 0x8, 0x7c2b, 0x401, 0x5, 0x3ff}, {0x3f, 0x1, 0x7, 0x6, 0x40, 0x69f}, {0x7, 0x368, 0x81, 0x7fffffff, 0x6, 0x7ff}, {0x6ed2ab12, 0x1, 0x4, 0x200, 0xc3}, {0x8, 0x4, 0x3f, 0x4, 0x800, 0x2}, {0x3ff, 0x80000000, 0x2, 0x3, 0x19c, 0x3c}, {0x3, 0x10000, 0x8, 0x0, 0x8000, 0x8}, {0x8, 0x9, 0x6, 0x200, 0x3a7, 0x80000000}, {0x5, 0x0, 0x1, 0x1, 0x7, 0xfffffff8}, {0x6, 0x10000, 0x8, 0xffff, 0x3f, 0xfffff000}, {0x3816, 0x3, 0x5, 0xb4dd, 0x800, 0x40}, {0x101, 0x13e30bb6, 0x50000000, 0x7, 0x8001, 0x5}, {0xfffffcc9, 0x303, 0x9, 0x1, 0x80, 0x1}, {0x40, 0x1, 0x6, 0x200, 0x7, 0x76}, {0x1f, 0x7, 0x33e1, 0x9e47, 0x8, 0x80000001}, {0x401, 0x7, 0x7, 0x7}, {0x7fffffff, 0x4, 0x4, 0x2, 0x7fff, 0x1}, {0x7, 0x5, 0xe0, 0x3, 0x3f, 0x401}, {0x3, 0x9, 0x7, 0x7ff, 0x400000, 0x3ff}, {0x100, 0xd2, 0x8, 0x6, 0x80000001}, {0x0, 0x7fffffff, 0x6, 0x3, 0x2, 0x8}, {0x5, 0x6, 0x5, 0x9, 0x7, 0x2a5}, {0x0, 0x7f, 0x5, 0x4347, 0x2}, {0x9, 0x5, 0x200, 0xb97, 0x5, 0x4}, {0x0, 0x0, 0xfff, 0x8, 0x4, 0x5}, {0x400, 0x40, 0x0, 0x3fbf, 0x5, 0x96}, {0x10000, 0xfffffc01, 0x2, 0x0, 0x3, 0x5}, {0x1ff, 0x6, 0x6, 0x81, 0x0, 0x8}, {0x3, 0x80, 0x2, 0x3}, {0x7fff, 0x9, 0x8, 0x2, 0x7, 0x1ff}, {0xfffffffd, 0x8, 0x2, 0x8f4, 0x3f, 0x80000001}, {0x1ad, 0x1, 0x6, 0x7fff, 0x800, 0x2dac}, {0x10000, 0x7, 0x5, 0x0, 0x7fffffff, 0x5b}, {0x4, 0xffffffff, 0x3, 0x0, 0x1, 0x10001}, {0x6, 0x1000, 0x3, 0x21, 0x5599, 0x3}, {0x2285b20c, 0x0, 0x380, 0xc6b7, 0x5, 0x310}, {0x6, 0x2, 0x2, 0x7ff, 0x80, 0x6}, {0x1, 0x5, 0x0, 0x7fff, 0xe13, 0xf}, {0x1, 0xffff, 0x1000, 0x0, 0xd12, 0xfffffffc}, {0x7fff, 0x3f, 0x1, 0x2, 0x68, 0x7ff}, {0x81, 0x4, 0xfff, 0x3, 0x0, 0x9}, {0x9, 0x7f, 0x0, 0x80000001, 0x80000000, 0x7}, {0xd4, 0x5, 0x3, 0x8001, 0x10000, 0x2}, {0x7, 0xb8, 0x3, 0x2, 0x4, 0x72d9}, {0x1, 0x23000, 0xf7, 0x800, 0x2, 0x8c}, {0x2, 0x8, 0x0, 0x4, 0x10001, 0x3f}, {0x7, 0x4, 0x8, 0x5, 0x2, 0x80}, {0x6, 0x8, 0x3, 0x6, 0xbfbb, 0x101}, {0x0, 0x3, 0x8, 0x101, 0xfffffffd, 0x6}, {0xaf7, 0xc58, 0x200, 0x7f, 0xf0, 0x9}, {0x80, 0x3b, 0x1e3, 0x7, 0x20, 0x80000000}, {0x6, 0x200, 0x9, 0x1b, 0x2, 0x81}, {0x10001, 0x401, 0x0, 0x1, 0xfffffffa, 0x10000}, {0x60, 0xffffffff, 0xfffffffa, 0xe45, 0x81, 0x10000}, {0x1a, 0x3, 0x1, 0xe8f, 0x7, 0x8001}, {0x1, 0x2, 0xf4fa, 0x1ff, 0x9, 0x7}, {0x5, 0x40, 0x4, 0x4, 0xc2a, 0xffffff36}, {0x20, 0x3, 0x961, 0x0, 0x4a52, 0xa70}, {0x20, 0x637, 0x5, 0x4, 0x7, 0x3}, {0x10348, 0xffffffff, 0x0, 0x5d1, 0x8001, 0x6}, {0x3, 0x800, 0x9a, 0x400, 0x0, 0x5}, {0x4, 0x1, 0xfff, 0x9, 0x2, 0x6}, {0x4, 0x7, 0x7ff, 0x3, 0x98f7, 0x3}, {0x0, 0x58af, 0x6, 0x8, 0x6, 0xffffffff}, {0xfffffff9, 0x81, 0x1ff, 0x0, 0x80000001, 0x8}, {0x4, 0x80000001, 0x6, 0x0, 0xd1, 0x5}, {0xe9b8, 0x9, 0x100, 0xd5, 0x7cd, 0x8382e138}, {0xdb4, 0x20, 0x7, 0x48a55dd1, 0x6, 0x5}, {0x0, 0xa56, 0x7, 0xc4, 0x8, 0xfffffe01}, {0x5, 0x40, 0xadc3, 0x1, 0xffffff01, 0x8}, {0x100, 0x0, 0x6, 0xfffff72f, 0x3, 0x8}, {0x6, 0xff, 0x7ff, 0x1ff, 0x2a}, {0x6, 0xff, 0x9, 0x2, 0xdb2, 0x80000001}, {0x1, 0x7fffffff, 0x4, 0x3, 0x8, 0x2}, {0x80000000, 0x5, 0x9, 0x1, 0xc1, 0x3}, {0x9, 0x8, 0x0, 0x2f3, 0x3, 0xfffffffc}, {0xfffffbff, 0x2, 0x6, 0x8, 0xfffffffd, 0xfffffe01}, {0x7, 0xfffffc00, 0x0, 0x80000000, 0xffffffff, 0x400}, {0xffffffe1, 0x1, 0x995, 0x0, 0x5, 0x4}, {0x81, 0x8, 0x5e7, 0x80000001, 0x81, 0xffff}, {0x8, 0x3ff, 0xc, 0x0, 0x7, 0xfcb}, {0x5, 0x7, 0x5, 0x200, 0x0, 0x1}, {0x401, 0x10, 0x2, 0x2, 0x7f, 0x4}, {0x6, 0x1, 0x72, 0xc7d0, 0x7ff, 0xfff}, {0x7, 0x4, 0x2, 0x6, 0x94000000, 0x8}, {0xf7e0, 0x5, 0x9, 0x5ce73a69, 0x2, 0x7}, {0xbb5, 0x2, 0xffffffff, 0xda, 0x0, 0x200}, {0x8, 0x3, 0x7ef827ce, 0x7fff, 0x10001, 0x7}, {0x2, 0x640, 0x1, 0x0, 0xdbf90ab1, 0x55}, {0x8, 0x2, 0x5, 0x63d7, 0x0, 0x3f}, {0x7, 0x6, 0x8, 0xefaa, 0x8, 0xfffffffe}, {0x101, 0x80000000, 0x0, 0x6, 0x7, 0x9bec}, {0x100, 0x40, 0x1, 0x1000, 0x2, 0x2}, {0x6, 0xee8b, 0x3, 0x3f, 0x400, 0x3}, {0x9, 0x63, 0x5, 0x7, 0x800, 0x20}, {0x3, 0x1, 0x2, 0x20, 0x1ff, 0x851d}, {0xfffffff7, 0xfffffffc, 0x7, 0x7, 0xffffffff, 0xaf66}, {0x8, 0x2, 0x9, 0x7ff, 0x8, 0x4}, {0x7fff, 0x6, 0x7, 0xffffffff, 0x1}, {0x7, 0x5, 0x1ff, 0xfffffffc, 0x200, 0x4}, {0x6, 0x0, 0x0, 0x7f, 0x9, 0x7}, {0x0, 0x3f, 0x1, 0x3, 0x3f, 0x4}, {0xffffff6c, 0x7, 0x9, 0x3, 0xffffffd3, 0x3f}, {0x3, 0x0, 0xfffffff8, 0x0, 0x80000001, 0x1c5}, {0x7fffffff, 0x891, 0x7ff, 0x3, 0x8, 0x2}, {0x9, 0x9, 0x6, 0x8, 0x800, 0x47}, {0x27c, 0xd5, 0x8, 0x7fff, 0x6, 0x80000000}, {0x8000, 0x6, 0x100, 0x3ff, 0x2, 0x3}, {0xffffffff, 0x8001, 0x27, 0x5, 0x100, 0x3}, {0x3, 0xdf17, 0x263, 0x7, 0x3ff, 0x2}], [{}, {0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x7}, {0x4}, {0x2}, {0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x7b20174948369069}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {0x2}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {}, {0x3}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0xef56bd49800c3e2f}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0xf597c25dbd98775c}, {0xa}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3, 0x69b4, 0xffffffffdfffffff, 0x1, 0x9}, 0xf8, 0x7, [{0x0, 0x322c94ac, 0x4, 0x10001, 0x1000, 0x6}, {0x5, 0x97f6, 0x0, 0x136, 0x0, 0x7}]}, [{0x4, 0x2, 0xfff, 0x238, 0x7, 0xa9ad}, {0x8, 0x9, 0x9, 0x7, 0x7, 0x3}, {0xa261, 0x6, 0x1, 0x5, 0x8001, 0x65}, {0x401, 0x4, 0x3, 0x7, 0x6bf1, 0x5}, {0x706b, 0x8, 0x3, 0x3f, 0x80000000, 0x3f}, {0x0, 0x10000, 0x6, 0x8000, 0x1f, 0xb8}, {0xfffffffb, 0x6, 0x5, 0x1ff, 0x0, 0x8}, {0x2, 0x7, 0x1, 0x4, 0xfffffbff, 0xdd3}, {0x2, 0x1, 0x55a, 0x8001, 0x4, 0x9}, {0x80000001, 0x6, 0x2, 0x7fffffff, 0x0, 0x5}, {0x4, 0x7ff, 0x8, 0x5, 0x124ad0d0, 0x5}, {0x5, 0x6, 0x6, 0x9b, 0x40, 0xfa21}, {0xff, 0x9, 0xfffff000, 0x4f5256fb, 0x7fff, 0x1}, {0xdab, 0x5, 0xffffffea, 0x6, 0x9}, {0x20, 0xffffffff, 0x5, 0xffffec69, 0x76, 0x5}, {0x2, 0x3ff, 0x8f, 0x0, 0x1, 0x1}, {0x5, 0x7f, 0x5, 0x5, 0xe935, 0x59da}, {0x81, 0x1, 0x4, 0x4, 0x80000000, 0x7f}, {0x1, 0x111, 0x1, 0x3, 0x80000000, 0x200}, {0x6, 0x0, 0x8c, 0x7, 0xffffffff, 0x8001}, {0xffff, 0x8001, 0x80000001, 0x2f, 0x86d, 0x5}, {0x7, 0x1, 0xa0e, 0x6, 0xfffffff7, 0x4}, {0x7fffffff, 0x1c, 0x40, 0x4, 0x5, 0x401}, {0x2, 0x401, 0x4, 0x81, 0x200, 0x3}, {0x5, 0x4, 0x101, 0x4, 0x8, 0x1}, {0x81, 0x0, 0x5, 0x3, 0x20, 0x3f}, {0x0, 0x7, 0x2, 0x1ff, 0x5490, 0x10000}, {0x100, 0xed, 0xffffffff, 0x0, 0x4, 0xfffffffe}, {0x0, 0x101, 0xff, 0xf24, 0x6, 0x7e5}, {0xfffffff8, 0x3, 0x6, 0xe8, 0x67, 0x6ba}, {0x800, 0x400, 0x8, 0x8, 0x800, 0x100}, {0x1, 0x4, 0x1ff, 0x9, 0x0, 0xd77}, {0x9, 0xe6, 0x4, 0x3, 0x8001, 0x1}, {0x5, 0x2, 0x3ff, 0x80000000, 0x5, 0x3ff}, {0xd2, 0x5616, 0xffff, 0x4, 0x2, 0x7}, {0x7f, 0x72, 0x8, 0xf0f3, 0x1, 0x5}, {0x6, 0x9, 0x1ff, 0x1, 0x2, 0xab4b}, {0x80, 0x8, 0x0, 0x8, 0x0, 0x401}, {0x0, 0x10000, 0xed, 0x0, 0x2, 0x773}, {0x6, 0x755b3d62, 0xd5, 0x20, 0x3, 0x2}, {0xf2a7, 0x1, 0x3800000, 0x3ff, 0x5, 0x4}, {0x58e428aa, 0x7fff, 0xc53, 0x97, 0x4, 0xf30000}, {0x5, 0x9, 0x1, 0x6, 0x1000, 0x6}, {0x8, 0x1f, 0x1, 0x101, 0x6, 0x6}, {0xffff0000, 0x3ff, 0x100, 0x5, 0x101}, {0x8, 0x1, 0x400, 0x1, 0x8, 0x8}, {0x2, 0x4, 0x1, 0x2, 0x800}, {0x7fffffff, 0xfffeffff, 0x381, 0x5, 0x6, 0x1a}, {0x0, 0x459, 0x7, 0x101, 0x5, 0x10000}, {0x10001, 0x0, 0xfffff224, 0x6, 0x7f, 0x5a}, {0xbc, 0x2, 0x6, 0x200000, 0xe195, 0x3}, {0x138b, 0x80, 0x4, 0x6, 0x97f, 0x200}, {0x4, 0x3, 0xfffffff7, 0x7, 0x3, 0x3ff}, {0xffffffff, 0x1, 0x1, 0x20da, 0x20, 0x40a}, {0x3, 0x3f, 0x5, 0x7, 0x20, 0x5}, {0x5, 0x80, 0x9, 0x200, 0x7, 0x3}, {0x20, 0x1, 0x8000, 0x80, 0x1, 0x4}, {0x80000001, 0x0, 0x6908, 0x6e54, 0x7, 0xff}, {0x1, 0x6, 0x8, 0x9, 0x8000, 0x4}, {0x100, 0xfff, 0x5343, 0x2, 0x2}, {0x2, 0x94f, 0x35f6, 0x3, 0x8, 0x9}, {0x4, 0x8a0, 0x0, 0xd2, 0x4, 0x1000}, {0x9, 0x5, 0x8, 0x8, 0x3f, 0x9}, {0xc303, 0x7, 0xfff, 0xf33, 0x8, 0x7}, {0xb0e, 0x7f, 0x8, 0x1, 0xecdf, 0x3}, {0x2, 0x7f, 0x152, 0x1, 0x187, 0x3}, {0x6ec, 0x1000, 0x100, 0x401, 0x101, 0x8}, {0x3f, 0x6, 0x32e, 0x1, 0x1, 0x2}, {0x2, 0x42, 0x1, 0xa503, 0x7f, 0x6}, {0x0, 0x7fff, 0x8, 0x8001, 0x6, 0x800}, {0x26, 0xfff, 0x1ff, 0xfff, 0x0, 0x7ff}, {0x0, 0x6, 0x3, 0x8001, 0x1, 0xa803}, {0x6, 0x8, 0x101, 0x3, 0x80000001, 0x81}, {0x3f, 0x1000, 0xff, 0x8, 0x4, 0x8}, {0x4df, 0x2, 0x8, 0x4, 0x7fc00, 0x8}, {0x400, 0x80000000, 0xffff0000, 0x80, 0x1, 0x5}, {0x0, 0x5, 0x0, 0x2, 0x4, 0x7}, {0x200, 0x80000001, 0x2, 0x5, 0x0, 0xb9b}, {0x1, 0x0, 0xbf, 0xa4, 0x2, 0xff}, {0x81, 0x200, 0x23d, 0x2031, 0x6, 0x3}, {0x9, 0x3f, 0x7ff, 0x4, 0x11e, 0x6}, {0x2, 0x400, 0x5, 0xe3, 0x80000000, 0x3f}, {0x1, 0x7, 0xf40d, 0x9f}, {0x2d2e885, 0x3, 0x1, 0x4, 0xe779, 0x1}, {0x5, 0x584a, 0x7ff, 0x3, 0x20, 0x7fff}, {0x2, 0x3, 0xffff, 0x80000000, 0x3, 0xffff}, {0x1, 0x5a9, 0x6, 0x5, 0x7ff, 0x6}, {0xff, 0x5, 0x3, 0x7ff, 0x3, 0x4}, {0xfffffff8, 0x0, 0x4, 0x80000001, 0x766, 0x98}, {0x179, 0xb6, 0xdee8, 0x10001, 0x4585, 0xd5}, {0x2, 0x80, 0x101, 0xcf, 0x0, 0x8}, {0xac, 0x10001, 0x6, 0x1, 0x6, 0x8}, {0x0, 0x7, 0x8, 0x1ff, 0xda, 0x1}, {0x4, 0x1, 0x80, 0x80000001, 0x5, 0x1}, {0xffffffbc, 0x70, 0x80000001, 0x10001, 0x4, 0x8000}, {0x0, 0x8, 0x101, 0x349, 0x0, 0x3}, {0x1, 0x0, 0xffffffff, 0xa11, 0x149d, 0x2}, {0x3, 0xfffffffe, 0x5, 0x8000, 0x361d, 0x800}, {0x101, 0x798a6975, 0xca2c12a, 0x3, 0x7, 0x7fff}, {0x2, 0xcd, 0x20, 0x5, 0xfffffffe, 0x1f}, {0x3, 0x3, 0x1, 0x2, 0x5, 0x7}, {0x2, 0xfffffffb, 0xbc, 0x4, 0x3, 0x9}, {0x5, 0x100, 0x8000, 0x10000, 0x6}, {0x1000, 0x3f, 0x4, 0x100, 0x1f, 0x4}, {0xffffffff, 0x4, 0x200, 0x10001, 0x100, 0x2389}, {0x2, 0x5, 0x5, 0x4, 0x6, 0x101}, {0x4, 0x80000001, 0x7, 0x4, 0x2, 0x6}, {0x9, 0x7, 0xb2f, 0x1ff, 0x9, 0x5}, {0x5, 0x0, 0x81, 0xff, 0x0, 0x5}, {0x4, 0x7, 0x3, 0x0, 0x1b, 0xc79}, {0x60000, 0x9, 0x18, 0x80000000, 0x908f, 0x4}, {0x4, 0x7, 0x0, 0x1ff, 0x1, 0x200}, {0x139, 0x1, 0x1, 0x3, 0x7f, 0x3}, {0x4, 0x20, 0x8001, 0x6, 0x1, 0xff}, {0x0, 0x4, 0x0, 0xfffffffa, 0x1ff, 0x2}, {0x3, 0xfffff001, 0x5, 0x6, 0x5, 0x4}, {0x3, 0x7, 0x9, 0x80, 0x0, 0x800}, {0x41, 0x200, 0x401, 0xfffff800, 0x0, 0x8}, {0x2, 0x0, 0x7, 0x8, 0x3f, 0xffffffff}, {0x9, 0xf1, 0x40, 0x3, 0x6, 0x3}, {0x1, 0x80, 0x1, 0x8, 0x6, 0x758}, {0x8, 0x3, 0x9369, 0x2, 0xa1, 0xfffffc01}, {0x1, 0x7c, 0x5, 0x3ff, 0x6, 0x400}, {0xaf14, 0x0, 0xd87, 0x2, 0x4, 0x10000}, {0x8001, 0x9, 0x1f, 0xffff, 0x9, 0x7}, {0x8000, 0x90, 0x6, 0x4, 0x2ba0, 0x6}, {0x40, 0x3, 0x8, 0x2, 0x9fdc, 0x6}, {0xffffffff, 0x93, 0x2, 0x200, 0x4, 0x8b}], [{0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0xa09bba8f16694e39}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x2b6a04667b185b0e}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0xaf0ffc115bb62d78, 0x1}, {0x3}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x7}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x2}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xffff, 0x3ff, 0x3, 0x8, 0xda}, 0x1, 0x26, [{0xff, 0x2, 0x1000, 0x8080, 0xfff, 0x80000001}, {0x7, 0x2, 0x8, 0x80, 0x16f, 0x1000}, {0x4, 0x6, 0x74, 0x401, 0x6, 0x20}, {0x0, 0x0, 0x3, 0x226, 0x80000001, 0x4}, {0x1, 0x0, 0x1, 0x8, 0x800}]}, [{0x3ff, 0x4027, 0xff, 0xfffff724, 0xfff, 0x7}, {0x7, 0x401, 0x1, 0x5, 0x0, 0x80000001}, {0x1000, 0x20, 0x3, 0x2, 0x5, 0x3f}, {0x2, 0x2, 0x4, 0x4000, 0x401, 0xffffff5a}, {0x3, 0x2, 0x101, 0x5, 0x6, 0x5}, {0x3, 0x7, 0xd37, 0x8, 0x1}, {0xffffff01, 0x1, 0x5, 0x20, 0x7, 0x8}, {0x1, 0x7, 0x1, 0x400, 0x426, 0x5}, {0x1000000, 0x8, 0x893, 0x3, 0x4, 0x1}, {0x800, 0xaa97, 0x1, 0x34, 0x8001, 0x2}, {0x6, 0x9, 0x800, 0x5, 0x8, 0x9}, {0x1, 0x8, 0x0, 0x4, 0x2, 0x3ff}, {0x7, 0x3, 0x4cf1f0fa, 0x8001, 0x0, 0x28b}, {0x4, 0x6, 0x1, 0x20, 0x4, 0x9}, {0x9, 0x81, 0x5, 0x1, 0x1, 0x5a}, {0x9, 0x1, 0x101, 0x7, 0x6, 0x5}, {0x5, 0x0, 0x3, 0x1, 0xffff, 0x100}, {0x9, 0x80000000, 0x81, 0x81, 0xf19, 0x26fd}, {0x10000, 0x8c, 0x7, 0x3, 0x6, 0x7}, {0x80000001, 0x479, 0x1ff, 0x5, 0x0, 0x2}, {0xfffffffb, 0x2, 0x3, 0xf9, 0x8c, 0x7}, {0x9, 0x1, 0x80000000, 0x200, 0x8, 0x6d6}, {0x2787, 0x7, 0x6aa, 0x4, 0x9, 0xdd3a}, {0xc6, 0x8, 0x81, 0x3, 0x3cf6, 0xed}, {0x81, 0x40, 0x6, 0x3f, 0x46e, 0x7}, {0x7f, 0x1, 0x0, 0x6, 0x1, 0xfffffffa}, {0x7fffffff, 0x400, 0x40000000, 0x8, 0x0, 0x78a07f6c}, {0xfffffff8, 0x80, 0x27, 0xfffff800, 0x4e0, 0x8}, {0x1, 0x9, 0x7, 0x7, 0x3f, 0xd2c}, {0x6, 0x0, 0x9, 0x401, 0x8, 0x3}, {0xc1b, 0x2, 0x3, 0x401, 0x5, 0x2}, {0x800, 0x0, 0xfff, 0x8, 0x80000000, 0x1}, {0x800, 0x80000001, 0x7f81, 0x3, 0x8001, 0x80}, {0x689a, 0x3, 0x7, 0xfff, 0x1ff, 0x8001}, {0x6, 0x81, 0xbf, 0x5, 0x1, 0x2f}, {0x7, 0x9, 0x7fff, 0x7fffffff, 0x200, 0x8}, {0x5, 0x31, 0x556, 0x0, 0x0, 0xffff4612}, {0x3, 0x0, 0x91bf, 0x101, 0x7ff, 0x3f}, {0x200, 0x4b25a04a, 0x5, 0x1, 0x401, 0x6}, {0x8, 0x7, 0x7, 0xb637, 0x0, 0x5}, {0x8, 0x8, 0x40, 0x3, 0x9, 0x800}, {0x2, 0x7, 0x2, 0x2, 0x4, 0x7ff}, {0x0, 0xfdd8, 0x5, 0x7ab8, 0x3, 0x5}, {0x5, 0xffffff80, 0x2, 0x72, 0x1, 0x411}, {0x8, 0x9, 0x80000001, 0x0, 0x3fb4, 0x1}, {0xffffd206, 0x6b8, 0x308, 0x5, 0x5, 0x3}, {0x7fff, 0x4, 0x7, 0x3ed, 0x1, 0xfffffff9}, {0x6, 0x787e, 0x40, 0x2, 0x5, 0x7}, {0x4, 0x5a, 0x8, 0x0, 0x1, 0x400}, {0x0, 0xffffffff, 0x40000000, 0xfffffeff, 0x7, 0x3}, {0x7fffffff, 0xfffffffa, 0xfffffffb, 0x0, 0x800, 0x1}, {0xb8, 0x9, 0xff, 0x8, 0x3, 0x86}, {0x0, 0x2, 0x1ff0, 0xc0a, 0x2, 0x8}, {0x7, 0x1ff, 0x0, 0x20, 0x3, 0x2}, {0x3369, 0x8, 0x6, 0xfffffff7}, {0x2, 0x9, 0xb5b, 0x3, 0xcd, 0x8753}, {0x1, 0x9, 0xffff, 0x9, 0xffff, 0x81}, {0x100, 0xffff, 0x4, 0x8, 0x0, 0x7}, {0x11600000, 0x953, 0x5, 0x4, 0x6, 0xff}, {0x3, 0x5, 0x49b, 0x81, 0x100, 0x1e10}, {0x81, 0x200, 0x1, 0x3ff, 0x7f, 0x1ff}, {0x1, 0x0, 0x2, 0x53b, 0x87e36431, 0x401}, {0x5, 0x1, 0xffffff81, 0x48, 0xfffffffc, 0x10001}, {0x3ff, 0x2, 0x7, 0x9, 0x7, 0x80000000}, {0x4, 0x4, 0x2, 0x7, 0x72, 0x2}, {0x9, 0x400, 0x4, 0x10000, 0xff, 0x8}, {0x1f32, 0x3, 0x40, 0x7ce, 0x1}, {0x100, 0x3, 0xfffffffa, 0xffff, 0x1000, 0x80}, {0x9, 0x0, 0x6, 0xffff, 0x1ff, 0x5}, {0xa4f, 0x7, 0x447, 0x8, 0x8, 0xdc}, {0x0, 0x3f, 0x20, 0xbb, 0x9, 0x8}, {0xfffffffc, 0x4, 0x2, 0x81, 0x5, 0x1f}, {0x94ff, 0x101, 0x1000, 0xe71, 0x5, 0x8}, {0x8000, 0x4, 0xfffffc00, 0xa2, 0x20, 0x5}, {0x7, 0xfff, 0x1f, 0x5, 0xe, 0xdd81}, {0x153, 0x1f, 0x5, 0x1, 0x10000, 0x7}, {0x0, 0x7, 0x3, 0x6849, 0x7, 0x1745}, {0x10001, 0x7, 0x9, 0xf01, 0x9, 0x7fff}, {0x80000001, 0x8, 0xaa, 0x1, 0xffffffc0, 0x80}, {0x0, 0x4, 0x80000000, 0x3, 0x0, 0x4}, {0x0, 0x401, 0xe35b, 0x8, 0x5, 0x3}, {0x6, 0x40, 0x200, 0x7bbb, 0x5, 0x5}, {0x8, 0xf35, 0x8e02, 0xfffffffd, 0x8, 0x1}, {0x7c000000, 0x0, 0x750, 0xbd3, 0x7, 0xfffffc00}, {0x2, 0xa0000000, 0x7f, 0x1, 0x3, 0x4}, {0xfff, 0x3, 0x8000, 0x40, 0x562, 0xfffffa2f}, {0x7fffffff, 0x6c8, 0x7fffffff, 0x6, 0x4, 0x9}, {0x7, 0x7, 0x6, 0xdbd2, 0xfffffff8, 0x39e}, {0x6, 0xfffffbff, 0x5, 0x0, 0x7, 0xffff}, {0x0, 0x2, 0x883, 0x0, 0x10001, 0x1}, {0xffff, 0x61, 0x8000, 0x1000, 0x2, 0x7}, {0x1, 0x3, 0x9, 0x0, 0x9, 0x8}, {0x6d, 0x7d9d66cc, 0x7, 0x0, 0x8000, 0x6}, {0x3f, 0x9, 0x1, 0x9, 0x8000, 0x5}, {0x3, 0x10000, 0x1, 0xe8, 0xff, 0xd6}, {0xfffff5a3, 0x82a1, 0xba, 0x1ff, 0x6, 0x800}, {0x2, 0x6, 0x9, 0x1, 0x9, 0x8000}, {0x5, 0x80000000, 0x1, 0x2, 0x6, 0x5}, {0x2, 0x81, 0x6, 0xfffffff9, 0x8, 0xff}, {0x7, 0x6, 0x0, 0xc76e, 0x7, 0x4}, {0x8, 0x8, 0x9, 0x4, 0x2, 0x6a}, {0x10001, 0xffffffff, 0x1, 0x401, 0x200, 0x9}, {0x6, 0x4, 0xfc, 0x9, 0x200, 0xffffffc7}, {0x8, 0x5, 0x7ff, 0x4, 0x40, 0x5}, {0xfffffffb, 0x10000, 0x7fffffff, 0xffffffff, 0xfffffffb, 0x6}, {0x227246d3, 0x8, 0x6, 0x180, 0x0, 0x7}, {0x2, 0x5, 0x3, 0x3, 0x1, 0x101}, {0x8, 0x80, 0x1, 0x101, 0x1, 0x8}, {0xfffff000, 0x1ff, 0x10000, 0xffffffff, 0x80000000, 0x7f}, {0xffffff8d, 0x0, 0x401, 0x5, 0xfd9, 0x9}, {0x4, 0x7, 0x6bf0ac57, 0x0, 0x1, 0x3f}, {0x1000, 0x9, 0x5, 0x1, 0x2f8, 0x20}, {0x37b, 0x200, 0x82, 0x7f, 0x2, 0x2}, {0xffffffff, 0x9, 0x0, 0x6, 0x0, 0x1000}, {0x1, 0xe2fc, 0x7, 0x49a9, 0xa951, 0xfff}, {0x1, 0x4, 0x0, 0x3, 0x2, 0x400}, {0x2, 0x401, 0x6, 0x10000, 0x7, 0x401}, {0x9, 0x2400, 0x1000, 0x8, 0x3, 0xfffffff7}, {0x1, 0xfffffffc, 0xffffffff, 0x8, 0x8, 0x80}, {0x1, 0xffffffff, 0x6, 0x8, 0x8, 0x182}, {0x2, 0x431e, 0x8, 0x5, 0xffffffc1}, {0x47, 0x8001, 0x0, 0x1, 0x5, 0x5707}, {0x80000001, 0x8, 0x100, 0xfb, 0x8001, 0x8}, {0x7ff, 0x5, 0x2ac00000, 0x4, 0xffff3a3e, 0xdd}, {0x19, 0x80, 0x7, 0x398c, 0x3, 0x2}, {0x2d, 0x7, 0x642, 0x10000, 0x4, 0xb9d}, {0x0, 0x1, 0x40, 0x5, 0x8, 0x5}, {0x11d8, 0x20, 0x1, 0x9, 0xfffff161, 0x2}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0xed9671fbd840dfc8}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x6, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0xb710901cadb6ef8}, {0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x7}, {0x2, 0x12ac2ef1d27cfdc4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x6719cffbcadc81a9}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0xa, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x2}, {0x1}, {0x0, 0xbbb023ea643305f2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7ba4d69817920a71}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x80, 0x6, "9ab62456480fa56d428da43548478869b41eaac38e876d4c7a04f498b9dd6271cba42458602fe2e864f9e586c60cf261bc00456dd67232d9230b9a8a7dcb7cbc84dd5f76b4851a028800739465d2b6b0ee303fe12f47fa613fe47b8fe79b0e585a92fdeca21c5751d62fcbdba7e8c4015ba2a3d78396ad8fdb0caa80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2d78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) setsockopt(r0, 0xd95b, 0x8000, &(0x7f00000000c0)="de02c97f9790832aac3274035e9eec793daf0dc401a5aff0bac56f3b2934a76563d95c962a310e9c8eb0981639838e271b5186175c56538e7dfa384517103859451d3b05f7f761355686c7a9bee2976ad853cc68ce657469215a35d7b76588727e1dad2330109739e93191c96764873138185052997579c0b476c6dfbea6cdad3ad69993f060f2d7f616b3dc1c0773ac5a89890bf31e6f0086b00b8a4c5bdaca783bd0ea2d2061bbfe6c0b183e5e9d4d7ede08816473c988532ae19b139a8a6dd966d62cdc4c9d81fbd1a56f7229c02b9089397ecf2d0d6885d144f631e16ebe57e53939ce7ccca2fb0350148be63e4402573e46698dccf2", 0xf8) [ 264.837552][ T8886] dump_stack+0x18f/0x20d [ 264.841912][ T8886] should_fail.cold+0x5/0x14 [ 264.846534][ T8886] ? tomoyo_realpath_from_path+0xc3/0x620 [ 264.852283][ T8886] should_failslab+0x5/0xf [ 264.856738][ T8886] __kmalloc+0x27d/0x340 [ 264.861014][ T8886] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 264.866579][ T8886] tomoyo_realpath_from_path+0xc3/0x620 [ 264.872138][ T8886] ? tomoyo_profile+0x42/0x50 [ 264.876836][ T8886] tomoyo_path_number_perm+0x1cb/0x4d0 [ 264.882318][ T8886] ? tomoyo_path_number_perm+0x183/0x4d0 [ 264.887963][ T8886] ? tomoyo_execute_permission+0x470/0x470 [ 264.893781][ T8886] ? lock_acquire+0x1f1/0xad0 [ 264.898467][ T8886] ? delayed_put_pid+0x30/0x30 [ 264.903251][ T8886] ? find_held_lock+0x2d/0x110 [ 264.908056][ T8886] ? selinux_inode_getsecctx+0x90/0x90 [ 264.913562][ T8886] ? __mutex_unlock_slowpath+0xe2/0x610 [ 264.919126][ T8886] ? lock_is_held_type+0xb0/0xe0 [ 264.924084][ T8886] ? __fget_files+0x294/0x400 [ 264.928786][ T8886] security_file_ioctl+0x50/0xb0 [ 264.933740][ T8886] ksys_ioctl+0x50/0x180 05:36:07 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x7c81, 0x0) [ 264.938000][ T8886] __x64_sys_ioctl+0x6f/0xb0 [ 264.942642][ T8886] ? lockdep_hardirqs_on+0x6a/0xe0 [ 264.948030][ T8886] do_syscall_64+0x60/0xe0 [ 264.952494][ T8886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.958407][ T8886] RIP: 0033:0x45cba9 [ 264.962303][ T8886] Code: Bad RIP value. [ 264.966373][ T8886] RSP: 002b:00007f0e9e81cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.974799][ T8886] RAX: ffffffffffffffda RBX: 00000000004f1900 RCX: 000000000045cba9 [ 264.982787][ T8886] RDX: 0000000000000000 RSI: 0000000000007c81 RDI: 0000000000000005 05:36:07 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) [ 264.990793][ T8886] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.998777][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 265.006794][ T8886] R13: 00000000000005f0 R14: 00000000004c8d39 R15: 00007f0e9e81d6d4 [ 265.018890][ T29] audit: type=1400 audit(1594445767.164:17): avc: denied { name_connect } for pid=8891 comm="syz-executor.4" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 265.050975][ T8888] FAULT_INJECTION: forcing a failure. [ 265.050975][ T8888] name failslab, interval 1, probability 0, space 0, times 0 [ 265.088257][ T29] audit: type=1400 audit(1594445767.284:18): avc: denied { ioctl } for pid=8891 comm="syz-executor.4" path="socket:[39415]" dev="sockfs" ino=39415 ioctlcmd=0x8982 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 265.125821][ T8888] CPU: 0 PID: 8888 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 265.134471][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.144564][ T8888] Call Trace: [ 265.147895][ T8888] dump_stack+0x18f/0x20d [ 265.152284][ T8888] should_fail.cold+0x5/0x14 [ 265.156912][ T8888] should_failslab+0x5/0xf [ 265.161355][ T8888] kmem_cache_alloc+0x2a9/0x3b0 [ 265.166240][ T8888] __d_alloc+0x2a/0x920 [ 265.170434][ T8888] d_alloc_pseudo+0x19/0x70 [ 265.174963][ T8888] alloc_file_pseudo+0xc6/0x250 [ 265.179846][ T8888] ? rwlock_bug.part.0+0x90/0x90 [ 265.184795][ T8888] ? alloc_file+0x5a0/0x5a0 [ 265.189319][ T8888] ? do_raw_spin_unlock+0x171/0x230 [ 265.194535][ T8888] ? _raw_spin_unlock+0x24/0x40 [ 265.199579][ T8888] ? __alloc_fd+0x28d/0x600 [ 265.204099][ T8888] anon_inode_getfile+0xc8/0x1f0 [ 265.209054][ T8888] media_request_alloc+0xec/0x500 [ 265.214132][ T8888] media_device_request_alloc+0x9b/0xd0 [ 265.219710][ T8888] media_device_ioctl+0x268/0x440 [ 265.224769][ T8888] ? media_device_pci_init+0x250/0x250 [ 265.230280][ T8888] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 265.236199][ T8888] ? do_vfs_ioctl+0x27d/0x1090 [ 265.240968][ T8888] ? generic_block_fiemap+0x60/0x60 [ 265.246180][ T8888] ? selinux_inode_getsecctx+0x90/0x90 [ 265.251661][ T8888] ? __mutex_unlock_slowpath+0xe2/0x610 [ 265.257217][ T8888] ? lock_is_held_type+0xb0/0xe0 [ 265.262182][ T8888] ? __fget_files+0x294/0x400 [ 265.266873][ T8888] ? media_device_pci_init+0x250/0x250 [ 265.272374][ T8888] media_ioctl+0xf2/0x150 [ 265.276729][ T8888] ? media_write+0x1c0/0x1c0 [ 265.281353][ T8888] ksys_ioctl+0x11a/0x180 [ 265.285710][ T8888] __x64_sys_ioctl+0x6f/0xb0 [ 265.290346][ T8888] ? lockdep_hardirqs_on+0x6a/0xe0 [ 265.295832][ T8888] do_syscall_64+0x60/0xe0 [ 265.300279][ T8888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.306206][ T8888] RIP: 0033:0x45cba9 [ 265.310097][ T8888] Code: Bad RIP value. [ 265.314169][ T8888] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.322621][ T8888] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 265.330610][ T8888] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 265.338614][ T8888] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 05:36:07 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 05:36:07 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 265.346614][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 265.354600][ T8888] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 265.387734][ T8886] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b8022ef90f41ade5ec7278dea5783f793e8e76a7caa4875807f24d30bf613677857e2017dd911caae188a045437c12bb7d394e459a8d699d2425a193858e5c8e76ccde5ddc8155f9db1099"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x284401, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/114, 0x72, 0x1, 0x6}, @flat=@handle={0x73682a85, 0x100b, 0x1}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0x1, 0x0, &(0x7f0000000140)="0e"}) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7}}, 0x30) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 05:36:07 executing program 0 (fault-call:3 fault-nth:1): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:07 executing program 2 (fault-call:1 fault-nth:4): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:07 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:07 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) [ 265.615535][ T29] audit: type=1400 audit(1594445767.804:19): avc: denied { set_context_mgr } for pid=8908 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 [ 265.621821][ T8911] binder: 8908:8911 unknown command -114425160 [ 265.699124][ T8915] FAULT_INJECTION: forcing a failure. [ 265.699124][ T8915] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 265.712461][ T8915] CPU: 1 PID: 8915 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 265.713441][ T8911] binder: 8908:8911 ioctl c0306201 20000200 returned -22 [ 265.721062][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.721085][ T8915] Call Trace: [ 265.721119][ T8915] dump_stack+0x18f/0x20d [ 265.721144][ T8915] should_fail.cold+0x5/0x14 [ 265.721170][ T8915] __alloc_pages_nodemask+0x1a3/0x930 [ 265.721191][ T8915] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 265.721221][ T8915] cache_grow_begin+0x8c/0xb20 [ 265.721242][ T8915] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 265.721270][ T8915] cache_alloc_refill+0x27b/0x340 [ 265.776524][ T8913] binder: BINDER_SET_CONTEXT_MGR already set [ 265.777826][ T8915] ? lockdep_hardirqs_off+0x66/0xa0 [ 265.777855][ T8915] ? tomoyo_realpath_from_path+0xc3/0x620 [ 265.777871][ T8915] __kmalloc+0x319/0x340 [ 265.777896][ T8915] tomoyo_realpath_from_path+0xc3/0x620 [ 265.784035][ T8913] binder: 8908:8913 ioctl 40046207 0 returned -16 [ 265.789264][ T8915] ? tomoyo_profile+0x42/0x50 [ 265.789283][ T8915] tomoyo_path_number_perm+0x1cb/0x4d0 [ 265.789296][ T8915] ? tomoyo_path_number_perm+0x183/0x4d0 [ 265.789311][ T8915] ? tomoyo_execute_permission+0x470/0x470 [ 265.789327][ T8915] ? lock_acquire+0x1f1/0xad0 [ 265.789340][ T8915] ? delayed_put_pid+0x30/0x30 [ 265.789359][ T8915] ? find_held_lock+0x2d/0x110 [ 265.789391][ T8915] ? selinux_inode_getsecctx+0x90/0x90 [ 265.804233][ T8911] binder: BINDER_SET_CONTEXT_MGR already set [ 265.805544][ T8915] ? __mutex_unlock_slowpath+0xe2/0x610 [ 265.805562][ T8915] ? lock_is_held_type+0xb0/0xe0 [ 265.805585][ T8915] ? __fget_files+0x294/0x400 [ 265.805610][ T8915] security_file_ioctl+0x50/0xb0 [ 265.805633][ T8915] ksys_ioctl+0x50/0x180 [ 265.825514][ T8911] binder: 8908:8911 ioctl 40046207 0 returned -16 [ 265.827835][ T8915] __x64_sys_ioctl+0x6f/0xb0 [ 265.827854][ T8915] ? lockdep_hardirqs_on+0x6a/0xe0 05:36:08 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 265.827869][ T8915] do_syscall_64+0x60/0xe0 [ 265.827896][ T8915] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.910279][ T8915] RIP: 0033:0x45cba9 [ 265.914358][ T8915] Code: Bad RIP value. [ 265.918456][ T8915] RSP: 002b:00007f0e9e81cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.926912][ T8915] RAX: ffffffffffffffda RBX: 00000000004f1900 RCX: 000000000045cba9 [ 265.934933][ T8915] RDX: 0000000000000000 RSI: 0000000000007c81 RDI: 0000000000000005 [ 265.942918][ T8915] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 265.950907][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 265.958895][ T8915] R13: 00000000000005f0 R14: 00000000004c8d39 R15: 00007f0e9e81d6d4 [ 266.010157][ T8924] FAULT_INJECTION: forcing a failure. [ 266.010157][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 266.039709][ T8925] FAULT_INJECTION: forcing a failure. [ 266.039709][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 266.071406][ T8924] CPU: 1 PID: 8924 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 266.080041][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.090112][ T8924] Call Trace: [ 266.093418][ T8924] dump_stack+0x18f/0x20d [ 266.097763][ T8924] should_fail.cold+0x5/0x14 [ 266.102412][ T8924] should_failslab+0x5/0xf [ 266.106845][ T8924] kmem_cache_alloc+0x2a9/0x3b0 [ 266.111719][ T8924] __alloc_file+0x21/0x350 [ 266.116161][ T8924] alloc_empty_file+0x6d/0x170 [ 266.120948][ T8924] alloc_file+0x5e/0x5a0 [ 266.125209][ T8924] alloc_file_pseudo+0x165/0x250 [ 266.130179][ T8924] ? alloc_file+0x5a0/0x5a0 [ 266.134709][ T8924] ? _raw_spin_unlock+0x24/0x40 [ 266.139571][ T8924] ? __alloc_fd+0x28d/0x600 [ 266.144088][ T8924] anon_inode_getfile+0xc8/0x1f0 [ 266.149042][ T8924] media_request_alloc+0xec/0x500 [ 266.154068][ T8924] media_device_request_alloc+0x9b/0xd0 [ 266.159615][ T8924] media_device_ioctl+0x268/0x440 [ 266.164647][ T8924] ? media_device_pci_init+0x250/0x250 [ 266.173522][ T8924] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 266.179423][ T8924] ? do_vfs_ioctl+0x27d/0x1090 [ 266.184188][ T8924] ? generic_block_fiemap+0x60/0x60 [ 266.189400][ T8924] ? selinux_inode_getsecctx+0x90/0x90 [ 266.194876][ T8924] ? __mutex_unlock_slowpath+0xe2/0x610 [ 266.200434][ T8924] ? lock_is_held_type+0xb0/0xe0 [ 266.205384][ T8924] ? __fget_files+0x294/0x400 [ 266.210068][ T8924] ? media_device_pci_init+0x250/0x250 [ 266.215993][ T8924] media_ioctl+0xf2/0x150 [ 266.220341][ T8924] ? media_write+0x1c0/0x1c0 [ 266.224946][ T8924] ksys_ioctl+0x11a/0x180 [ 266.229294][ T8924] __x64_sys_ioctl+0x6f/0xb0 [ 266.233922][ T8924] ? lockdep_hardirqs_on+0x6a/0xe0 [ 266.239484][ T8924] do_syscall_64+0x60/0xe0 [ 266.243918][ T8924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.249815][ T8924] RIP: 0033:0x45cba9 [ 266.253697][ T8924] Code: Bad RIP value. [ 266.257756][ T8924] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.266174][ T8924] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 266.274142][ T8924] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 266.282127][ T8924] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.290096][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 266.298064][ T8924] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 266.323886][ T8925] CPU: 0 PID: 8925 Comm: syz-executor.3 Not tainted 5.8.0-rc4-syzkaller #0 [ 266.332515][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.342608][ T8925] Call Trace: [ 266.345948][ T8925] dump_stack+0x18f/0x20d [ 266.350297][ T8925] should_fail.cold+0x5/0x14 [ 266.354907][ T8925] ? tomoyo_realpath_from_path+0xc3/0x620 [ 266.360655][ T8925] should_failslab+0x5/0xf [ 266.365088][ T8925] __kmalloc+0x27d/0x340 [ 266.369357][ T8925] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 266.374941][ T8925] tomoyo_realpath_from_path+0xc3/0x620 [ 266.380506][ T8925] ? tomoyo_profile+0x42/0x50 [ 266.385219][ T8925] tomoyo_path_number_perm+0x1cb/0x4d0 [ 266.390697][ T8925] ? tomoyo_path_number_perm+0x183/0x4d0 [ 266.396356][ T8925] ? tomoyo_execute_permission+0x470/0x470 [ 266.402181][ T8925] ? lock_acquire+0x1f1/0xad0 [ 266.406891][ T8925] ? delayed_put_pid+0x30/0x30 [ 266.411973][ T8925] ? find_held_lock+0x2d/0x110 [ 266.416773][ T8925] ? selinux_inode_getsecctx+0x90/0x90 [ 266.422249][ T8925] ? __mutex_unlock_slowpath+0xe2/0x610 [ 266.427822][ T8925] ? lock_is_held_type+0xb0/0xe0 [ 266.432773][ T8925] ? __fget_files+0x294/0x400 [ 266.437459][ T8925] security_file_ioctl+0x50/0xb0 [ 266.442404][ T8925] ksys_ioctl+0x50/0x180 [ 266.446652][ T8925] __x64_sys_ioctl+0x6f/0xb0 [ 266.451251][ T8925] ? lockdep_hardirqs_on+0x6a/0xe0 [ 266.456372][ T8925] do_syscall_64+0x60/0xe0 [ 266.460792][ T8925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.466692][ T8925] RIP: 0033:0x45cba9 [ 266.470584][ T8925] Code: Bad RIP value. [ 266.474666][ T8925] RSP: 002b:00007f99031b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.483181][ T8925] RAX: ffffffffffffffda RBX: 00000000004e88c0 RCX: 000000000045cba9 [ 266.491167][ T8925] RDX: 0000000000000000 RSI: 000000004010ae42 RDI: 0000000000000004 [ 266.499165][ T8925] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.507147][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 266.515138][ T8925] R13: 00000000000003af R14: 00000000004c6649 R15: 00007f99031b26d4 05:36:08 executing program 0 (fault-call:3 fault-nth:2): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) 05:36:08 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:36:08 executing program 2 (fault-call:1 fault-nth:5): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:08 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget(0x1, 0x142) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e73312632720000000000000000cb30303030303031309fff8a17607d00000000eca7861247d70c37ec3cfd1e4a4a7b3d4018644b1ba550d47880"]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 05:36:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) epoll_wait(r3, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$USBDEVFS_GETDRIVER(r5, 0x7c81, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/69) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x12c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x10000}, [@IFLA_AF_SPEC={0x104, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x9}, {0x8, 0x12, 0x0, 0x0, 0x1f}, {0x8, 0x1, 0x0, 0x0, 0x7}]}}, @AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x4}, {0x8, 0x7, 0x0, 0x0, 0xbb7}, {0x8, 0xa, 0x0, 0x0, 0x8}, {0x8, 0x1d, 0x0, 0x0, 0x120}, {0x8, 0xb, 0x0, 0x0, 0x1}, {0x8, 0x17, 0x0, 0x0, 0x4f3b}, {0x8, 0x0, 0x0, 0x0, 0xffffffff}, {0x8, 0x1c, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}]}, @IFLA_PROTO_DOWN={0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x890) bind$can_raw(r5, &(0x7f0000000040)={0x1d, r9}, 0x10) [ 266.659457][ T8925] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:09 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 05:36:09 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) [ 266.744012][ T8939] FAULT_INJECTION: forcing a failure. [ 266.744012][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 266.751818][ T8938] FAULT_INJECTION: forcing a failure. [ 266.751818][ T8938] name failslab, interval 1, probability 0, space 0, times 0 [ 266.785972][ T8944] 9pnet_virtio: no channels available for device 127.0.0.1 [ 266.840037][ T8939] CPU: 1 PID: 8939 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 266.848708][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.858806][ T8939] Call Trace: [ 266.862123][ T8939] dump_stack+0x18f/0x20d [ 266.866484][ T8939] should_fail.cold+0x5/0x14 [ 266.871121][ T8939] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 266.876691][ T8939] should_failslab+0x5/0xf [ 266.881237][ T8939] __kmalloc+0x27d/0x340 [ 266.885505][ T8939] ? tomoyo_realpath_from_path+0xc3/0x620 [ 266.891249][ T8939] tomoyo_encode2.part.0+0xe9/0x3a0 [ 266.896476][ T8939] ? tomoyo_realpath_from_path+0xc3/0x620 [ 266.902221][ T8939] tomoyo_encode+0x28/0x50 [ 266.906656][ T8939] tomoyo_realpath_from_path+0x186/0x620 [ 266.912331][ T8939] ? tomoyo_profile+0x42/0x50 [ 266.917048][ T8939] tomoyo_path_number_perm+0x1cb/0x4d0 [ 266.922522][ T8939] ? tomoyo_path_number_perm+0x183/0x4d0 [ 266.928180][ T8939] ? tomoyo_execute_permission+0x470/0x470 [ 266.934036][ T8939] ? lock_acquire+0x1f1/0xad0 [ 266.938733][ T8939] ? delayed_put_pid+0x30/0x30 [ 266.943525][ T8939] ? find_held_lock+0x2d/0x110 [ 266.948339][ T8939] ? selinux_inode_getsecctx+0x90/0x90 [ 266.953855][ T8939] ? __mutex_unlock_slowpath+0xe2/0x610 [ 266.959429][ T8939] ? lock_is_held_type+0xb0/0xe0 [ 266.964402][ T8939] ? __fget_files+0x294/0x400 [ 266.969114][ T8939] security_file_ioctl+0x50/0xb0 [ 266.974373][ T8939] ksys_ioctl+0x50/0x180 [ 266.978639][ T8939] __x64_sys_ioctl+0x6f/0xb0 [ 266.983245][ T8939] ? lockdep_hardirqs_on+0x6a/0xe0 [ 266.988377][ T8939] do_syscall_64+0x60/0xe0 [ 266.992814][ T8939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.998730][ T8939] RIP: 0033:0x45cba9 [ 267.002631][ T8939] Code: Bad RIP value. [ 267.006700][ T8939] RSP: 002b:00007f0e9e81cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.015132][ T8939] RAX: ffffffffffffffda RBX: 00000000004f1900 RCX: 000000000045cba9 [ 267.023150][ T8939] RDX: 0000000000000000 RSI: 0000000000007c81 RDI: 0000000000000005 [ 267.031142][ T8939] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.039131][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 267.047122][ T8939] R13: 00000000000005f0 R14: 00000000004c8d39 R15: 00007f0e9e81d6d4 [ 267.080284][ T8938] CPU: 0 PID: 8938 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 267.088922][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.099022][ T8938] Call Trace: [ 267.102335][ T8938] dump_stack+0x18f/0x20d [ 267.106691][ T8938] should_fail.cold+0x5/0x14 [ 267.111305][ T8938] should_failslab+0x5/0xf [ 267.115746][ T8938] kmem_cache_alloc+0x2a9/0x3b0 [ 267.120631][ T8938] security_file_alloc+0x34/0x170 [ 267.125682][ T8938] __alloc_file+0xd8/0x350 [ 267.129446][ T8951] FAULT_INJECTION: forcing a failure. [ 267.129446][ T8951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.130126][ T8938] alloc_empty_file+0x6d/0x170 [ 267.148117][ T8938] alloc_file+0x5e/0x5a0 [ 267.152398][ T8938] alloc_file_pseudo+0x165/0x250 [ 267.157370][ T8938] ? alloc_file+0x5a0/0x5a0 [ 267.162019][ T8938] ? _raw_spin_unlock+0x24/0x40 [ 267.167000][ T8938] ? __alloc_fd+0x28d/0x600 [ 267.171539][ T8938] anon_inode_getfile+0xc8/0x1f0 [ 267.176507][ T8938] media_request_alloc+0xec/0x500 [ 267.181555][ T8938] media_device_request_alloc+0x9b/0xd0 [ 267.187126][ T8938] media_device_ioctl+0x268/0x440 [ 267.192172][ T8938] ? media_device_pci_init+0x250/0x250 [ 267.197658][ T8938] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 267.203597][ T8938] ? do_vfs_ioctl+0x27d/0x1090 [ 267.208382][ T8938] ? generic_block_fiemap+0x60/0x60 [ 267.213603][ T8938] ? selinux_inode_getsecctx+0x90/0x90 [ 267.219083][ T8938] ? __mutex_unlock_slowpath+0xe2/0x610 [ 267.224647][ T8938] ? lock_is_held_type+0xb0/0xe0 [ 267.229610][ T8938] ? __fget_files+0x294/0x400 [ 267.234309][ T8938] ? media_device_pci_init+0x250/0x250 [ 267.239803][ T8938] media_ioctl+0xf2/0x150 [ 267.244154][ T8938] ? media_write+0x1c0/0x1c0 [ 267.248759][ T8938] ksys_ioctl+0x11a/0x180 [ 267.253110][ T8938] __x64_sys_ioctl+0x6f/0xb0 [ 267.257716][ T8938] ? lockdep_hardirqs_on+0x6a/0xe0 [ 267.262863][ T8938] do_syscall_64+0x60/0xe0 [ 267.267324][ T8938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.273236][ T8938] RIP: 0033:0x45cba9 [ 267.277133][ T8938] Code: Bad RIP value. [ 267.281204][ T8938] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.289648][ T8938] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 267.297736][ T8938] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 267.306430][ T8938] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.314419][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 267.322410][ T8938] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 267.330446][ T8951] CPU: 1 PID: 8951 Comm: syz-executor.3 Not tainted 5.8.0-rc4-syzkaller #0 [ 267.339066][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.349158][ T8951] Call Trace: [ 267.352478][ T8951] dump_stack+0x18f/0x20d [ 267.356849][ T8951] should_fail.cold+0x5/0x14 [ 267.361475][ T8951] __alloc_pages_nodemask+0x1a3/0x930 [ 267.366892][ T8951] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 267.373731][ T8951] cache_grow_begin+0x8c/0xb20 [ 267.378528][ T8951] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 267.384053][ T8951] cache_alloc_refill+0x27b/0x340 [ 267.389110][ T8951] ? lockdep_hardirqs_off+0x66/0xa0 [ 267.394337][ T8951] ? tomoyo_realpath_from_path+0xc3/0x620 [ 267.400083][ T8951] __kmalloc+0x319/0x340 [ 267.404400][ T8951] tomoyo_realpath_from_path+0xc3/0x620 [ 267.410012][ T8951] ? tomoyo_profile+0x42/0x50 [ 267.414759][ T8951] tomoyo_path_number_perm+0x1cb/0x4d0 [ 267.420282][ T8951] ? tomoyo_path_number_perm+0x183/0x4d0 [ 267.425971][ T8951] ? tomoyo_execute_permission+0x470/0x470 [ 267.431805][ T8951] ? lock_acquire+0x1f1/0xad0 [ 267.436529][ T8951] ? delayed_put_pid+0x30/0x30 [ 267.441329][ T8951] ? find_held_lock+0x2d/0x110 [ 267.446145][ T8951] ? selinux_inode_getsecctx+0x90/0x90 [ 267.451640][ T8951] ? __mutex_unlock_slowpath+0xe2/0x610 [ 267.457226][ T8951] ? lock_is_held_type+0xb0/0xe0 [ 267.462197][ T8951] ? __fget_files+0x294/0x400 [ 267.466913][ T8951] security_file_ioctl+0x50/0xb0 [ 267.471887][ T8951] ksys_ioctl+0x50/0x180 [ 267.476165][ T8951] __x64_sys_ioctl+0x6f/0xb0 [ 267.480779][ T8951] ? lockdep_hardirqs_on+0x6a/0xe0 [ 267.485910][ T8951] do_syscall_64+0x60/0xe0 05:36:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r3, 0x7c81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) read$alg(r5, &(0x7f0000000380)=""/211, 0xd3) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0xfc, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x48, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0xfffffffffffffee7}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}]}, @IFLA_PROTO_DOWN={0x5}]}, 0xfc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="80000010800000010000000243a6004c006600000829907864010102e0000001440cce11ac1e010100000081442c3461e0000001800000010000000000000401e0000001000005d8ffffffff00000000ac1414aa0000000682c0230741422e44d89e78484aae958cc2275e735c751e7903dacf457e329d612349b8cfe7223895d79e7cf9db40356c138575b7bd1be3d4e01c18d6344f53f0f034aeb3ac3f057a56a05a0d9033fc722f32b909b4af91338f8617cca1079acc23670b24e2d66811297882fb0c244c279243f472fddc659028ea67c7d065e1aa63849682b61da00d5cf0826f8653eae6cc660e33"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r8, 0x8047, 0x10, 0xffffff20, 0x2, {{0x3d, 0x4, 0x1, 0x6, 0xf4, 0x64, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@rr={0x7, 0x23, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @private=0xa010101, @multicast2, @private=0xa010101, @loopback, @remote]}, @end, @timestamp_addr={0x44, 0x44, 0xc0, 0x1, 0x8, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@empty, 0x40}, {@private=0xa010101, 0x2}, {@multicast2, 0x5}]}, @noop, @cipso={0x86, 0x51, 0x2, [{0x7, 0xc, "1341835c7192b42b5067"}, {0x5, 0xb, "61b7bd2e0469ffdd8e"}, {0x1, 0x4, "fd85"}, {0x1, 0x7, "84f90f8917"}, {0x2, 0x12, "b5d41c588bc91bb54b7c5e7d3ad0e290"}, {0x2, 0xb, "c14274067cb737ce29"}, {0x0, 0xc, "6f00e2e2976f8e5908a9"}]}, @timestamp_prespec={0x44, 0x24, 0x80, 0x3, 0x2, [{@empty, 0xffffffff}, {@broadcast, 0xffff8000}, {@local, 0xfffffc01}, {@local, 0x69d}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003b8c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000040012000800040000000000"], 0x48}}, 0x0) 05:36:09 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x7c81, 0x0) 05:36:09 executing program 2 (fault-call:1 fault-nth:6): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) 05:36:09 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x40, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xd1b8, 0xfff, 0x5, 0x80}, {0x6, 0x24, 0x1a, 0xc6, 0x3a}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x97, 0xff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8d, 0x6, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x84, 0x20, 0xa}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x10, 0x8, 0x8, 0x20, 0xbd}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "dafcfea0cdb93cc9e3b088d97310cd8d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x6, 0x4, 0xfff, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "395ed0ebd1b37798cdf0fb5f326ff3fd"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "7803a8434fc21504539dad48aeae5afc"}]}, 0x8, [{0xc5, &(0x7f00000001c0)=@string={0xc5, 0x3, "61180f8d54fcc16b856d79f987745e81f848eec1442895d07af7036f44d35c1880869763529a6051bab3c43a942bfdb2c55c204935999b1e5b32e28badef5337c865ce30c7fc90bc0f608a3b194dd75cf7f38dd2646428b44713b3ff24fb6bca8a43f3372c465f3a3fb8d8aaa3e1f8917e000dce3534b13df19626685d0477630caf3772a8340c0ecd19de773c87f39dbc15be0a1812cdc4f582dadf8fffcef8f6063bf502121566a23ec8c20c18da4078858e5297539448896c9eb1589b915560a6e4"}}, {0xde, &(0x7f00000002c0)=@string={0xde, 0x3, "b3ef377800ba3fbeb97913cbfd41ce91351fb744671f505689a7f57cad02fc558c8af51454ade36e4de9b9c49dfa8f22fd92b2e5e45ec4edd7f7defc65407ea82d6d2b379b4c913236b07b22e0edd94973b0b74491524f2d91a04e23263d13cca0d8b0707fe9de85642111b1072cceefdb1bd67bc2890f50fc25d362ccc366a14c4773ebf80b7d6feff7674daa9f3313a03eedfe4a15a2269cbbe6b70ef94aa5a8e2e92a4a7fba0929bf982e335042525497f2a5d8988008e200f28152616aeb224aefe1eea6d486d6f8f530bc173d2ac1ecfccd1bea805c198b6df0"}}, {0xfa, &(0x7f00000003c0)=@string={0xfa, 0x3, "53620239719379a616c9c181b4d7d9865ff244b233642d757d945b7fcaeb34fe1c23fa41b1ee7dda7eca2fa92d28466253c93477a187f9fb835cc454d7b5df5fc24cb24b93a5242039fc805a09cd67904e35eb69f5f19ed4ffae845322a88eb0e9023621d78bd20dcfb1a32b567f79424d5e0c7beb99a2f651807fd9c68207c4ee245f1598ff898b618b20d79dd6e1bd9b37e2df73e6909bdde3b15b7d27146c531e7fbf124c245450c381ab7b72c19e59e23991264ede87fe85bc496c0bb9801a377473a8979a6f8b7d2ae0a3cac49dab522efea7983a8fc023eac994a2fc0518d286d0d64b4665024a271aed7fc51e05d69dd142de9cec"}}, {0x43, &(0x7f00000004c0)=ANY=[@ANYBLOB="4303d34c8b4b28161af236784fa75dd15486c95387fda53b6712994df607e1ee17911f000000abc5e22e824bca901007dc0625a580ffb914fb2c11f07363b53b"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1db0230eb68841e9}}, {0x81, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) [ 267.490338][ T8951] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.496239][ T8951] RIP: 0033:0x45cba9 [ 267.500176][ T8951] Code: Bad RIP value. [ 267.504243][ T8951] RSP: 002b:00007f99031b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.512672][ T8951] RAX: ffffffffffffffda RBX: 00000000004e88c0 RCX: 000000000045cba9 [ 267.520665][ T8951] RDX: 0000000000000000 RSI: 000000004010ae42 RDI: 0000000000000004 [ 267.528659][ T8951] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.536686][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 267.544794][ T8951] R13: 00000000000003af R14: 00000000004c6649 R15: 00007f99031b26d4 [ 267.627920][ T8958] FAULT_INJECTION: forcing a failure. [ 267.627920][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 267.651831][ T8958] CPU: 0 PID: 8958 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 267.660454][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.670522][ T8958] Call Trace: [ 267.673831][ T8958] dump_stack+0x18f/0x20d [ 267.678180][ T8958] should_fail.cold+0x5/0x14 [ 267.682792][ T8958] should_failslab+0x5/0xf [ 267.687221][ T8958] kmem_cache_alloc_trace+0x240/0x2d0 [ 267.692617][ T8958] ? anon_inode_getfile+0x16d/0x1f0 [ 267.697841][ T8958] media_request_alloc+0x439/0x500 [ 267.702967][ T8958] media_device_request_alloc+0x9b/0xd0 [ 267.708531][ T8958] media_device_ioctl+0x268/0x440 [ 267.713575][ T8958] ? media_device_pci_init+0x250/0x250 [ 267.719063][ T8958] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 267.724977][ T8958] ? do_vfs_ioctl+0x27d/0x1090 [ 267.729756][ T8958] ? generic_block_fiemap+0x60/0x60 [ 267.734988][ T8958] ? selinux_inode_getsecctx+0x90/0x90 [ 267.740465][ T8958] ? __mutex_unlock_slowpath+0xe2/0x610 [ 267.746032][ T8958] ? lock_is_held_type+0xb0/0xe0 [ 267.750995][ T8958] ? __fget_files+0x294/0x400 [ 267.755693][ T8958] ? media_device_pci_init+0x250/0x250 [ 267.761166][ T8958] media_ioctl+0xf2/0x150 [ 267.765509][ T8958] ? media_write+0x1c0/0x1c0 [ 267.770114][ T8958] ksys_ioctl+0x11a/0x180 [ 267.774468][ T8958] __x64_sys_ioctl+0x6f/0xb0 [ 267.779076][ T8958] ? lockdep_hardirqs_on+0x6a/0xe0 [ 267.784222][ T8958] do_syscall_64+0x60/0xe0 [ 267.788661][ T8958] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.794562][ T8958] RIP: 0033:0x45cba9 [ 267.798535][ T8958] Code: Bad RIP value. [ 267.803123][ T8958] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.811540][ T8958] RAX: ffffffffffffffda RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 267.819530][ T8958] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 05:36:10 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 267.827503][ T8958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.835475][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 267.843446][ T8958] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 267.920376][ T2566] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 267.935005][ T8958] ================================================================== [ 267.943363][ T8958] BUG: KASAN: null-ptr-deref in media_request_close+0x4b/0x1c0 [ 267.950917][ T8958] Write of size 4 at addr 0000000000000008 by task syz-executor.2/8958 [ 267.959151][ T8958] [ 267.961488][ T8958] CPU: 0 PID: 8958 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 267.970064][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.980119][ T8958] Call Trace: [ 267.983417][ T8958] dump_stack+0x18f/0x20d [ 267.987754][ T8958] ? media_request_close+0x4b/0x1c0 [ 267.992954][ T8958] ? media_request_close+0x4b/0x1c0 [ 267.998153][ T8958] ? media_request_put+0x180/0x180 [ 268.003288][ T8958] kasan_report.cold+0x5/0x37 [ 268.003922][ T8939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.007969][ T8958] ? media_request_close+0x4b/0x1c0 [ 268.008003][ T8958] check_memory_region+0x13d/0x180 [ 268.008018][ T8958] media_request_close+0x4b/0x1c0 [ 268.008036][ T8958] __fput+0x33c/0x880 [ 268.008056][ T8958] task_work_run+0xdd/0x190 [ 268.008081][ T8958] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 268.008098][ T8958] do_syscall_64+0x6c/0xe0 [ 268.008114][ T8958] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.008132][ T8958] RIP: 0033:0x45cba9 [ 268.058491][ T8958] Code: Bad RIP value. [ 268.062555][ T8958] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:36:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x97, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$USBDEVFS_GETDRIVER(r2, 0x7c81, 0x0) [ 268.070976][ T8958] RAX: fffffffffffffff4 RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 268.078965][ T8958] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 268.086983][ T8958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.095236][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 268.103217][ T8958] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 268.111248][ T8958] ================================================================== [ 268.119343][ T8958] Disabling lock debugging due to kernel taint [ 268.164089][ T8958] Kernel panic - not syncing: panic_on_warn set ... [ 268.170725][ T8958] CPU: 0 PID: 8958 Comm: syz-executor.2 Tainted: G B 5.8.0-rc4-syzkaller #0 [ 268.175152][ T2566] usb 6-1: Invalid ep0 maxpacket: 512 [ 268.180698][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.180704][ T8958] Call Trace: [ 268.180730][ T8958] dump_stack+0x18f/0x20d [ 268.180748][ T8958] ? media_request_put+0x100/0x180 [ 268.180769][ T8958] ? media_request_put+0x180/0x180 [ 268.213959][ T8958] panic+0x2e3/0x75c [ 268.217858][ T8958] ? __warn_printk+0xf3/0xf3 [ 268.222455][ T8958] ? preempt_schedule_common+0x59/0xc0 [ 268.227921][ T8958] ? media_request_close+0x4b/0x1c0 [ 268.233127][ T8958] ? preempt_schedule_thunk+0x16/0x18 [ 268.238513][ T8958] ? trace_hardirqs_on+0x55/0x220 [ 268.243548][ T8958] ? media_request_close+0x4b/0x1c0 [ 268.248750][ T8958] ? media_request_close+0x4b/0x1c0 [ 268.253958][ T8958] ? media_request_put+0x180/0x180 [ 268.259074][ T8958] end_report+0x4d/0x53 [ 268.263237][ T8958] kasan_report.cold+0xd/0x37 [ 268.267948][ T8958] ? media_request_close+0x4b/0x1c0 [ 268.273157][ T8958] check_memory_region+0x13d/0x180 [ 268.278274][ T8958] media_request_close+0x4b/0x1c0 [ 268.283307][ T8958] __fput+0x33c/0x880 [ 268.287302][ T8958] task_work_run+0xdd/0x190 [ 268.291816][ T8958] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 268.297544][ T8958] do_syscall_64+0x6c/0xe0 [ 268.302196][ T8958] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.308093][ T8958] RIP: 0033:0x45cba9 [ 268.311978][ T8958] Code: Bad RIP value. [ 268.316041][ T8958] RSP: 002b:00007f4e3038ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.324454][ T8958] RAX: fffffffffffffff4 RBX: 00000000004e9fc0 RCX: 000000000045cba9 [ 268.332429][ T8958] RDX: 00000000200000c0 RSI: 0000000080047c05 RDI: 0000000000000003 [ 268.340418][ T8958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.345139][ T2566] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 268.348398][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 268.363905][ T8958] R13: 000000000000040b R14: 00000000004c6dde R15: 00007f4e3038f6d4 [ 268.372916][ T8958] Kernel Offset: disabled [ 268.377242][ T8958] Rebooting in 86400 seconds..