last executing test programs: 20.278436963s ago: executing program 2 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0xb, 0x0, &(0x7f0000000840)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000010000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d65746100000000140002800800034000000000080002400000000e0900010073fdb830000000000900020073797a3200000000140000001100010000000000000000000000000a2754306d9ef6789b5f3cbc85769f63b052c4f85195af7f207c4424a0580842d2e43c30bccd3c6a3f802a35ff091c016cd6f0d1fa3bb43de45051989e89ebf47dabce1399c75d100b0ad82b24fc"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xd0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x74, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x68, 0x3, "54f573a0f9a34bcd5ee2351d4c688f1bc54957018ae3d09d4b2d5ef8e95f79784d6176b687f93e919d46a5346c929c91ac8bec5951d09854df7a2af35847571444dd3ae95355afa118fd869850688b474452e1da71b368bead163cc94bad6fd6cbd3e681"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40080c8}, 0x4048881) 19.225411465s ago: executing program 2 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.301625029s ago: executing program 2 (id=393): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 13.597228703s ago: executing program 1 (id=401): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, 0x0, 0x0, r3}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_triestat\x00') pread64(r7, &(0x7f0000001900)=""/4079, 0xfef, 0x2a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0400130006001200000000000600b500850100000a000600ffffffffffff00000400ac00"], 0x40}}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 12.282082734s ago: executing program 0 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000dc0)="801904460f0836440fc76e0a6766470fc730f083ac9f054900000048b836a6fe72000000000f23d00f21f8352000000e0f23f866baf80cb828bd708bef66bafc0c66ed43dfbf2f000000410f01cac46179294e00", 0x54}], 0x1, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 2) 11.803991064s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x0, [0x200, 0x0, 0x1, 0x8, 0xe, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x0, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x0, 0x4, 0x0, 0x7e0, 0x10000, 0x0, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x7, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x5, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x0, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0x0, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0x0, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x409, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x3ff, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40150}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300c713d530e3ffcec67cb7f06b90", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b700000000000400b800"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 11.645141932s ago: executing program 1 (id=407): close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x6d7d, 0x2003) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff0000000000000000000700000000000000160000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r2, 0x35, 0x1, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r8, r2, 0x10, 0x0, @val=@netkit={@link_id, r9}}, 0x40) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r10, 0x400455c8, 0x1) 9.462487697s ago: executing program 1 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=0x0, @ANYBLOB="fd89421b6911b8755e28b5fcb86a51015e6ffab3a6133a5bef8ecadde5fd922fcc888f203bb18be5b99263ce7e29648626d750fd11833e25e400785b4584a3b4a1cf7204a1d0daf5afb7a5a562e1bb13d00dd3a5e1be2d938794ad275604388393f48835fc35c9a1344419f71981affdf6755eeeabe72c08a247a6fb1881db6978901b"], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private0, 0x7fffffff}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0x57867165, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, 0xffffffffffffffff) 8.374212426s ago: executing program 0 (id=410): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) timer_create(0x3, &(0x7f0000000480)={0x0, 0x27, 0x1}, &(0x7f00000004c0)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x1000a, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "4000f869"}, 0x0, 0x3, {0x0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') fanotify_mark(r3, 0x1, 0x8001000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000f90b20af40fa9e9c961856c0c6900080000000000080000009500000000000900000076000000006e51da84d4d6918faacc4f76982d521a9a9239b751ebf151cceff6d499cb9b0a731b70c093bf40f581ea556319cd430f7901259aa60731628165dd6b376ecf1b2e1b2eb52edbdc97d48e662df7bc2fac2fa4692012adf96ff3403f833fb45be5084bb2b5b8728494a91faa24034ead57"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) connect$ax25(r5, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) creat(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000b28500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0, 0x1b8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 8.35243856s ago: executing program 2 (id=411): r0 = fanotify_init(0x200, 0x0) r1 = dup(r0) write$FUSE_INTERRUPT(r1, &(0x7f00000005c0)={0x10}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000015c0)=0x80, 0x12) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="100000000010"], 0x10}], 0x1}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4080, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000012400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1a0000000000000001000000000000002f6465762f6675736500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f00000005c0)=[{&(0x7f0000000300)=@in6={0xa, 0x4e23, 0xa, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000340)="c0a0dfd8db8552660c4e2cf8d414c34b", 0x1}], 0x1, 0x0, 0xffffffffffffff76}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000000000)) 7.561247917s ago: executing program 1 (id=413): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x7) 7.529547s ago: executing program 3 (id=414): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 2) 6.363158715s ago: executing program 1 (id=415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x0, 0x0, 0xb, 0x1fd, 0x1}) 6.298398642s ago: executing program 3 (id=416): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=', 0x1}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa01b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.983786891s ago: executing program 0 (id=417): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 5.959105007s ago: executing program 3 (id=418): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r3, &(0x7f0000000140)='./mnt\x00', &(0x7f00000003c0)=""/211, 0xd3) syz_emit_ethernet(0xc8e, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x40000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10003, 0x0, &(0x7f00003d3000/0x4000)=nil}) 4.956957334s ago: executing program 3 (id=419): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {}, 0xfe}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x5) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='1K'], 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) 4.798305338s ago: executing program 2 (id=420): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) sendfile(r2, r3, &(0x7f0000000000), 0x11) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x95, &(0x7f0000000180)=""/149}, 0x90) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f00000003c0)=""/224) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x1000) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/143, 0x8f}], 0x1, 0x9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.773875206s ago: executing program 3 (id=421): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 3.741345721s ago: executing program 0 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x5609, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="a65b000010000000a7a0000000000000010400002c83"]) ioctl$TCFLSH(r1, 0x8910, 0x20001114) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) 3.502498258s ago: executing program 4 (id=423): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x800, 0x20008894, 0x20}, 0x48) 2.453885164s ago: executing program 0 (id=424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=0x0, @ANYBLOB="fd89421b6911b8755e28b5fcb86a51015e6ffab3a6133a5bef8ecadde5fd922fcc888f203bb18be5b99263ce7e29648626d750fd11833e25e400785b4584a3b4a1cf7204a1d0daf5afb7a5a562e1bb13d00dd3a5e1be2d938794ad275604388393f48835fc35c9a1344419f71981affdf6755eeeabe72c08a247a6fb1881db6978901b"], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private0, 0x7fffffff}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0x57867165, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, 0xffffffffffffffff) 2.25771184s ago: executing program 4 (id=425): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r0, &(0x7f0000001340)={0xa, 0x4e21, 0x10000, @local}, 0x1c) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) getrandom(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080), 0x6) setuid(0xee00) write(r5, &(0x7f0000000000)="01dd3b74", 0x9) readv(r4, &(0x7f0000000680), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7, 0x8, 0x9, 0x3, 0x5, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) 1.842206099s ago: executing program 1 (id=426): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804200000086dd602e843500140600fe80000000000000ff07000000000000fe8000000000000000000000000000aa000000003b69ab3098406d37159fe9b29de41935cb99ee0270b8580153d9387de1749238b04dcee284bd93cb96006142b036bec7ce07be8b2d9dcc922d0beeb18d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000e7ff00000000000000000000181100000e1bfb45e2c0258b7ed4479297d69b30c2604c7f607e6cf353df7e43122d885ffb45380200000000000000305f991e15c24b6cb9106eb862a2d1c5314767033e645dd44e981d825aedae96100345e474e3ce5e82aa819eab1750c11ee2c178743e82ec3a12e0f7a22f4bcda446371457a759ce2be0f4e5de9685222145d2a374735ca05bab0a8677ccb53859", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1.836382854s ago: executing program 4 (id=427): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0xe}}}}}, 0x0) r1 = gettid() tgkill(0x0, r1, 0x0) 1.766325251s ago: executing program 2 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.766012413s ago: executing program 4 (id=429): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r3, &(0x7f0000000140)='./mnt\x00', &(0x7f00000003c0)=""/211, 0xd3) syz_emit_ethernet(0xc8e, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x40000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10003, 0x0, &(0x7f00003d3000/0x4000)=nil}) 722.558222ms ago: executing program 4 (id=430): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000007440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x4, 0x2}, 0x10) 26.349793ms ago: executing program 4 (id=431): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x526b, 0xbbb, {"f62f2dad4a0b4880eb96be226640f81b"}, 0x4, 0x2, 0x4}}}, 0xa0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe8, &(0x7f0000000080)={[{0xe2, 0x4e00, "41f7e962549a4cfeb33633df0a82ff87a089f276ed33f9a25c95f1590d2f9b07d2f4e2a65976dbd9661ee0942e41a24124297641192228b334b9972372f6c7baff3963bafa04277f4d7417509f64ed1f3fe367c01132bc7854127d07b5cd76b98dc9eb33693fc4532a7dfca43889198f38d2c77c9ad70e98665d3d8c0adab49d71feeb0e837120ec23b9a28ef388eec6d8f40b31b4c06c8072cbbaa7593e940f549656c9b8c00b3e72d91d70e45c07c92d770785cf60c006a42397f13db9fab2d6af976809e4cce867bd3f19afb6e370b9568f04839635d616260e7dc02278a42126"}]}) 0s ago: executing program 0 (id=432): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000002080)) kernel console output (not intermixed with test programs): wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438712][ T29] audit: type=1400 audit(1721577707.247:141): avc: denied { read } for pid=5208 comm="syz.0.9" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.466693][ T29] audit: type=1400 audit(1721577707.407:142): avc: denied { open } for pid=5208 comm="syz.0.9" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.466762][ T29] audit: type=1400 audit(1721577708.167:143): avc: denied { ioctl } for pid=5208 comm="syz.0.9" path="/dev/dri/card0" dev="devtmpfs" ino=629 ioctlcmd=0x6406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.467714][ T29] audit: type=1400 audit(1721577708.387:144): avc: denied { read } for pid=5208 comm="syz.0.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.467775][ T29] audit: type=1400 audit(1721577708.387:145): avc: denied { open } for pid=5208 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.546760][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.675254][ T29] audit: type=1400 audit(1721577708.587:146): avc: denied { ioctl } for pid=5208 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.700332][ T5212] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.927061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.131773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.430844][ T5228] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.541438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.560162][ T29] audit: type=1400 audit(1721577709.117:147): avc: denied { mounton } for pid=5221 comm="syz.1.2" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.171574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.254718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268522][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.552215][ T5233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 94.643482][ T5233] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.218428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.266184][ T5237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.354846][ T5240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14'. [ 95.879146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.913253][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 95.913273][ T29] audit: type=1400 audit(1721577711.827:158): avc: denied { name_bind } for pid=5239 comm="syz.4.14" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 95.941708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.046868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.071401][ T29] audit: type=1400 audit(1721577711.827:159): avc: denied { node_bind } for pid=5239 comm="syz.4.14" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 96.306729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 100.567742][ T5255] overlayfs: missing 'workdir' [ 101.382761][ T5260] slcan: can't register candev [ 101.388226][ T5260] Falling back ldisc for ptm0. [ 101.721013][ T29] audit: type=1400 audit(1721577717.637:160): avc: denied { create } for pid=5249 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.880426][ T5267] netlink: 256 bytes leftover after parsing attributes in process `syz.0.21'. [ 102.556826][ T29] audit: type=1400 audit(1721577718.457:161): avc: denied { prog_run } for pid=5249 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.989203][ T5272] netlink: 256 bytes leftover after parsing attributes in process `syz.1.22'. [ 104.061680][ T5275] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.125816][ T5275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.060257][ T5283] netlink: 256 bytes leftover after parsing attributes in process `syz.4.24'. [ 105.848330][ T5290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28'. [ 107.121443][ T5307] netlink: 256 bytes leftover after parsing attributes in process `syz.0.33'. [ 110.768817][ T5314] Process accounting resumed [ 110.826464][ T5313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.366120][ T5320] netlink: 256 bytes leftover after parsing attributes in process `syz.4.36'. [ 112.570494][ T5327] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 112.808045][ T5327] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.190920][ T5334] netlink: 256 bytes leftover after parsing attributes in process `syz.2.39'. [ 114.103078][ T5339] netlink: 48 bytes leftover after parsing attributes in process `syz.4.42'. [ 115.149751][ T5346] netlink: 256 bytes leftover after parsing attributes in process `syz.2.43'. [ 116.017067][ T5349] FAULT_INJECTION: forcing a failure. [ 116.017067][ T5349] name failslab, interval 1, probability 0, space 0, times 1 [ 116.118818][ T5352] netlink: 256 bytes leftover after parsing attributes in process `syz.3.44'. [ 116.553882][ T5349] CPU: 0 PID: 5349 Comm: syz.0.45 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 116.563494][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 116.573588][ T5349] Call Trace: [ 116.576892][ T5349] [ 116.579842][ T5349] dump_stack_lvl+0x16c/0x1f0 [ 116.584554][ T5349] should_fail_ex+0x497/0x5b0 [ 116.589272][ T5349] ? inet_select_addr+0x615/0xae0 [ 116.594327][ T5349] should_failslab+0x9/0x20 [ 116.598863][ T5349] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 116.604264][ T5349] ? dst_alloc+0x99/0x1a0 [ 116.608615][ T5349] dst_alloc+0x99/0x1a0 [ 116.612789][ T5349] rt_dst_alloc+0x35/0x3a0 [ 116.617217][ T5349] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 116.623215][ T5349] ip_route_output_key_hash+0x138/0x2e0 [ 116.628777][ T5349] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 116.634858][ T5349] ? __pfx_lock_release+0x10/0x10 [ 116.639893][ T5349] ip_route_output_flow+0x27/0x150 [ 116.645021][ T5349] udp_sendmsg+0x1d06/0x2b50 [ 116.649622][ T5349] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 116.655181][ T5349] ? __pfx_udp_sendmsg+0x10/0x10 [ 116.660132][ T5349] ? find_held_lock+0x2d/0x110 [ 116.664920][ T5349] ? inet_autobind+0x145/0x1a0 [ 116.669751][ T5349] ? __pfx_lock_release+0x10/0x10 [ 116.674785][ T5349] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.680170][ T5349] ? __local_bh_enable_ip+0xa4/0x120 [ 116.685470][ T5349] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.690685][ T5349] ? inet_autobind+0x145/0x1a0 [ 116.695465][ T5349] ? __local_bh_enable_ip+0xa4/0x120 [ 116.700765][ T5349] ? __pfx_udp_sendmsg+0x10/0x10 [ 116.705717][ T5349] ? inet_sendmsg+0x105/0x140 [ 116.710405][ T5349] inet_sendmsg+0x105/0x140 [ 116.714923][ T5349] __sys_sendto+0x42c/0x4e0 [ 116.719451][ T5349] ? __pfx___sys_sendto+0x10/0x10 [ 116.724495][ T5349] ? ksys_write+0x1ab/0x260 [ 116.729008][ T5349] ? __pfx_ksys_write+0x10/0x10 [ 116.733869][ T5349] __x64_sys_sendto+0xe0/0x1c0 [ 116.738641][ T5349] ? do_syscall_64+0x91/0x250 [ 116.743333][ T5349] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.748541][ T5349] do_syscall_64+0xcd/0x250 [ 116.753061][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.758998][ T5349] RIP: 0033:0x7fa6fcf75b59 [ 116.763444][ T5349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.783072][ T5349] RSP: 002b:00007fa6fdcb3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.791506][ T5349] RAX: ffffffffffffffda RBX: 00007fa6fd105f60 RCX: 00007fa6fcf75b59 [ 116.799491][ T5349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.807489][ T5349] RBP: 00007fa6fdcb30a0 R08: 0000000020000080 R09: 0000000000000010 [ 116.815474][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.823465][ T5349] R13: 000000000000000b R14: 00007fa6fd105f60 R15: 00007ffe9172d128 [ 116.831451][ T5349] [ 116.886693][ T29] audit: type=1400 audit(1721577732.487:162): avc: denied { ioctl } for pid=5353 comm="syz.4.47" path="socket:[7076]" dev="sockfs" ino=7076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.074159][ T29] audit: type=1400 audit(1721577732.487:163): avc: denied { bind } for pid=5353 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.276236][ T29] audit: type=1400 audit(1721577732.497:164): avc: denied { connect } for pid=5353 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.306689][ T29] audit: type=1400 audit(1721577732.497:165): avc: denied { read write } for pid=5353 comm="syz.4.47" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.413446][ T29] audit: type=1400 audit(1721577732.497:166): avc: denied { open } for pid=5353 comm="syz.4.47" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.795115][ T5373] netlink: 256 bytes leftover after parsing attributes in process `syz.0.49'. [ 120.687899][ T29] audit: type=1400 audit(1721577732.497:167): avc: denied { map } for pid=5353 comm="syz.4.47" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.710596][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.138697][ T29] audit: type=1400 audit(1721577732.497:168): avc: denied { execute } for pid=5353 comm="syz.4.47" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.161776][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.686775][ T29] audit: type=1400 audit(1721577737.517:169): avc: denied { create } for pid=5377 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.823604][ T29] audit: type=1400 audit(1721577737.547:170): avc: denied { connect } for pid=5377 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.843003][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.904449][ T29] audit: type=1400 audit(1721577737.547:171): avc: denied { read } for pid=5377 comm="syz.0.53" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.926930][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.141339][ T29] audit: type=1400 audit(1721577737.547:172): avc: denied { open } for pid=5377 comm="syz.0.53" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.355117][ T29] audit: type=1400 audit(1721577737.547:173): avc: denied { ioctl } for pid=5377 comm="syz.0.53" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.587676][ T29] audit: type=1400 audit(1721577737.557:174): avc: denied { bind } for pid=5377 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.644604][ T29] audit: type=1400 audit(1721577737.597:175): avc: denied { write } for pid=5377 comm="syz.0.53" path="socket:[7112]" dev="sockfs" ino=7112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.798824][ T5394] netlink: 256 bytes leftover after parsing attributes in process `syz.4.56'. [ 123.316458][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.338931][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.365645][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.378461][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.391437][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.399032][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.399229][ T5395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.57'. [ 123.450830][ T29] audit: type=1400 audit(1721577739.367:176): avc: denied { mounton } for pid=5391 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 123.636265][ T5399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.58'. [ 124.074326][ T2458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.597871][ T2458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.473215][ T5105] Bluetooth: hci1: command tx timeout [ 125.847184][ T29] audit: type=1400 audit(1721577741.757:177): avc: denied { ioctl } for pid=5410 comm="syz.3.62" path="socket:[8211]" dev="sockfs" ino=8211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.690860][ T5105] Bluetooth: hci1: command tx timeout [ 127.839707][ T5423] netlink: 256 bytes leftover after parsing attributes in process `syz.3.63'. [ 127.985023][ T2458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.010311][ T2458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.351790][ T5440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.69'. [ 130.156727][ T5105] Bluetooth: hci1: command tx timeout [ 131.358933][ T29] audit: type=1400 audit(1721577747.277:178): avc: denied { search } for pid=4759 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.833180][ T5391] chnl_net:caif_netlink_parms(): no params data found [ 131.919989][ T2458] bridge_slave_1: left allmulticast mode [ 131.926506][ T2458] bridge_slave_1: left promiscuous mode [ 131.934558][ T2458] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.057229][ T29] audit: type=1400 audit(1721577747.937:179): avc: denied { read } for pid=5458 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.080227][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.108766][ T2458] bridge_slave_0: left allmulticast mode [ 132.173016][ T2458] bridge_slave_0: left promiscuous mode [ 132.211334][ T5105] Bluetooth: hci1: command tx timeout [ 132.221690][ T2458] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.237831][ T29] audit: type=1400 audit(1721577747.937:180): avc: denied { open } for pid=5458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.296477][ T29] audit: type=1400 audit(1721577747.937:181): avc: denied { getattr } for pid=5458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.286018][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.292662][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.778290][ T29] audit: type=1400 audit(1721577750.697:182): avc: denied { mounton } for pid=5462 comm="syz.2.74" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.910255][ T29] audit: type=1400 audit(1721577750.727:183): avc: denied { mount } for pid=5462 comm="syz.2.74" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.959189][ T5475] netlink: 256 bytes leftover after parsing attributes in process `syz.2.74'. [ 136.066848][ T29] audit: type=1400 audit(1721577751.977:184): avc: denied { write } for pid=5456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.249297][ T29] audit: type=1400 audit(1721577751.977:185): avc: denied { add_name } for pid=5456 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.284741][ T29] audit: type=1400 audit(1721577751.987:186): avc: denied { create } for pid=5486 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.307245][ T29] audit: type=1400 audit(1721577751.987:187): avc: denied { write } for pid=5486 comm="syz.3.77" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 136.377476][ T29] audit: type=1400 audit(1721577751.987:188): avc: denied { open } for pid=5486 comm="syz.3.77" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 136.432558][ T5493] overlayfs: failed to resolve './file1/file0': -2 [ 136.456377][ T29] audit: type=1400 audit(1721577752.337:189): avc: denied { mount } for pid=5486 comm="syz.3.77" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.478084][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.578563][ T29] audit: type=1400 audit(1721577752.487:190): avc: denied { remove_name } for pid=5492 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.686475][ T5500] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.688997][ T29] audit: type=1400 audit(1721577752.587:191): avc: denied { create } for pid=5499 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.779675][ T29] audit: type=1400 audit(1721577752.637:192): avc: denied { setopt } for pid=5499 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.808988][ T2458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.845592][ T2458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.870013][ T2458] bond0 (unregistering): Released all slaves [ 137.299369][ T5505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'. [ 137.354912][ T5506] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 137.408429][ T5506] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 137.454308][ T5506] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.82'. [ 138.106251][ T5516] netlink: 256 bytes leftover after parsing attributes in process `syz.4.81'. [ 139.360816][ T5530] FAULT_INJECTION: forcing a failure. [ 139.360816][ T5530] name failslab, interval 1, probability 0, space 0, times 0 [ 139.407223][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.414432][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.417616][ T5530] CPU: 1 PID: 5530 Comm: syz.0.85 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 139.431024][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.441100][ T5530] Call Trace: [ 139.444394][ T5530] [ 139.447327][ T5530] dump_stack_lvl+0x16c/0x1f0 [ 139.452008][ T5530] should_fail_ex+0x497/0x5b0 [ 139.456683][ T5530] should_failslab+0x9/0x20 [ 139.461178][ T5530] __kmalloc_noprof+0xcb/0x400 [ 139.465932][ T5530] ? d_absolute_path+0x137/0x1b0 [ 139.470869][ T5530] tomoyo_encode2+0x100/0x3e0 [ 139.475553][ T5530] tomoyo_encode+0x29/0x50 [ 139.479968][ T5530] tomoyo_realpath_from_path+0x19d/0x720 [ 139.485598][ T5530] tomoyo_path_number_perm+0x245/0x590 [ 139.491048][ T5530] ? tomoyo_path_number_perm+0x232/0x590 [ 139.496677][ T5530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.502654][ T5530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.508630][ T5530] ? __fget_files+0x256/0x400 [ 139.513298][ T5530] security_file_ioctl+0x75/0xc0 [ 139.518243][ T5530] __x64_sys_ioctl+0xbb/0x220 [ 139.522933][ T5530] do_syscall_64+0xcd/0x250 [ 139.527436][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.533324][ T5530] RIP: 0033:0x7fa6fcf75b59 [ 139.537725][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.557325][ T5530] RSP: 002b:00007fa6fdcb3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.565730][ T5530] RAX: ffffffffffffffda RBX: 00007fa6fd105f60 RCX: 00007fa6fcf75b59 [ 139.573708][ T5530] RDX: 0000000020000000 RSI: 0000000000003b72 RDI: 0000000000000003 [ 139.581713][ T5530] RBP: 00007fa6fdcb30a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.589716][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.597712][ T5530] R13: 000000000000000b R14: 00007fa6fd105f60 R15: 00007ffe9172d128 [ 139.605719][ T5530] [ 139.677879][ T5391] bridge_slave_0: entered allmulticast mode [ 139.688305][ T5391] bridge_slave_0: entered promiscuous mode [ 139.700006][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.719287][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.746857][ T5391] bridge_slave_1: entered allmulticast mode [ 139.766687][ T5391] bridge_slave_1: entered promiscuous mode [ 139.917160][ T5530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.163342][ T29] audit: type=1400 audit(1721577756.077:193): avc: denied { connect } for pid=5537 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.228037][ T29] audit: type=1400 audit(1721577756.117:194): avc: denied { setopt } for pid=5537 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.470855][ T29] audit: type=1400 audit(1721577756.127:195): avc: denied { unmount } for pid=5091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.884658][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.920188][ T29] audit: type=1400 audit(1721577756.137:196): avc: denied { bind } for pid=5537 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.949275][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.518865][ T5549] sched: RT throttling activated [ 145.187886][ T29] audit: type=1400 audit(1721577756.167:197): avc: denied { write } for pid=5537 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.366749][ T29] audit: type=1400 audit(1721577756.417:198): avc: denied { read } for pid=5537 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.476716][ T29] audit: type=1400 audit(1721577756.897:199): avc: denied { create } for pid=5548 comm="syz.3.89" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.705888][ T5563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.94'. [ 145.744103][ T29] audit: type=1400 audit(1721577756.897:200): avc: denied { map } for pid=5548 comm="syz.3.89" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.248432][ T29] audit: type=1400 audit(1721577756.897:201): avc: denied { read write } for pid=5548 comm="syz.3.89" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.114583][ T29] audit: type=1400 audit(1721577761.277:202): avc: denied { create } for pid=5551 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.350546][ T5391] team0: Port device team_slave_0 added [ 147.384489][ T2458] hsr_slave_0: left promiscuous mode [ 147.507134][ T2458] hsr_slave_1: left promiscuous mode [ 147.546684][ T29] audit: type=1400 audit(1721577761.337:203): avc: denied { write } for pid=5551 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.603156][ T2458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.619173][ T29] audit: type=1400 audit(1721577761.337:204): avc: denied { connect } for pid=5551 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.645495][ T2458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.667714][ T2458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.675216][ T2458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.723661][ T29] audit: type=1400 audit(1721577761.337:205): avc: denied { name_connect } for pid=5551 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 147.776854][ T29] audit: type=1400 audit(1721577761.377:206): avc: denied { listen } for pid=5551 comm="syz.2.91" lport=50323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.059560][ T2458] veth1_macvtap: left promiscuous mode [ 148.065634][ T2458] veth0_macvtap: left promiscuous mode [ 148.071446][ T2458] veth1_vlan: left promiscuous mode [ 148.097217][ T2458] veth0_vlan: left promiscuous mode [ 150.517179][ T5597] slcan: can't register candev [ 150.522971][ T5597] Falling back ldisc for ptm1. [ 150.603524][ T29] audit: type=1326 audit(1721577766.507:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.3.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca775b59 code=0x0 [ 150.626238][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.738567][ T29] audit: type=1400 audit(1721577766.637:208): avc: denied { read write } for pid=5585 comm="syz.3.100" name="video36" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.832418][ T29] audit: type=1400 audit(1721577766.647:209): avc: denied { open } for pid=5585 comm="syz.3.100" path="/dev/video36" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 151.026179][ T29] audit: type=1400 audit(1721577766.707:210): avc: denied { ioctl } for pid=5585 comm="syz.3.100" path="/dev/video36" dev="devtmpfs" ino=960 ioctlcmd=0x5618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 151.051396][ T29] audit: type=1400 audit(1721577766.737:211): avc: denied { read } for pid=5602 comm="syz.0.102" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.074592][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.227560][ T5607] overlayfs: missing 'workdir' [ 151.415112][ T29] audit: type=1400 audit(1721577766.747:212): avc: denied { open } for pid=5602 comm="syz.0.102" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.663506][ T29] audit: type=1400 audit(1721577767.067:213): avc: denied { wake_alarm } for pid=5602 comm="syz.0.102" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.716710][ T29] audit: type=1400 audit(1721577767.197:214): avc: denied { create } for pid=5602 comm="syz.0.102" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.865304][ T29] audit: type=1400 audit(1721577767.197:215): avc: denied { link } for pid=5602 comm="syz.0.102" name="file1" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.116910][ T29] audit: type=1400 audit(1721577767.997:216): avc: denied { create } for pid=5611 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.002170][ T2458] team0 (unregistering): Port device team_slave_1 removed [ 153.164324][ T2458] team0 (unregistering): Port device team_slave_0 removed [ 153.370846][ T5624] FAULT_INJECTION: forcing a failure. [ 153.370846][ T5624] name failslab, interval 1, probability 0, space 0, times 0 [ 153.384416][ T5624] CPU: 1 PID: 5624 Comm: syz.3.106 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 153.394095][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 153.404167][ T5624] Call Trace: [ 153.407442][ T5624] [ 153.410365][ T5624] dump_stack_lvl+0x16c/0x1f0 [ 153.415043][ T5624] should_fail_ex+0x497/0x5b0 [ 153.419901][ T5624] should_failslab+0x9/0x20 [ 153.424410][ T5624] __kmalloc_noprof+0xcb/0x400 [ 153.429199][ T5624] tomoyo_encode2+0x100/0x3e0 [ 153.433880][ T5624] tomoyo_encode+0x29/0x50 [ 153.438307][ T5624] tomoyo_realpath_from_path+0x19d/0x720 [ 153.443978][ T5624] ? tomoyo_profile+0x47/0x60 [ 153.448665][ T5624] tomoyo_path_number_perm+0x245/0x590 [ 153.454142][ T5624] ? tomoyo_path_number_perm+0x232/0x590 [ 153.459773][ T5624] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.465752][ T5624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.471732][ T5624] ? __fget_files+0x256/0x400 [ 153.476404][ T5624] security_file_ioctl+0x75/0xc0 [ 153.481344][ T5624] __x64_sys_ioctl+0xbb/0x220 [ 153.486014][ T5624] do_syscall_64+0xcd/0x250 [ 153.490538][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.496453][ T5624] RIP: 0033:0x7ff5ca775b59 [ 153.500861][ T5624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.520480][ T5624] RSP: 002b:00007ff5cb5db048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.528904][ T5624] RAX: ffffffffffffffda RBX: 00007ff5ca905f60 RCX: 00007ff5ca775b59 [ 153.536877][ T5624] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 153.544867][ T5624] RBP: 00007ff5cb5db0a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.552844][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.560814][ T5624] R13: 000000000000000b R14: 00007ff5ca905f60 R15: 00007ffd3d003d28 [ 153.568785][ T5624] [ 153.571888][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.584548][ T5624] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.914052][ T5628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.107'. [ 154.893135][ T5391] team0: Port device team_slave_1 added [ 155.163140][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.193604][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.455550][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.214668][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 156.214688][ T29] audit: type=1400 audit(1721577771.507:233): avc: denied { create } for pid=5642 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.217764][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.328540][ T29] audit: type=1400 audit(1721577772.237:234): avc: denied { map } for pid=5644 comm="syz.0.112" path="socket:[9387]" dev="sockfs" ino=9387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 156.336698][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.639201][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.674798][ T5391] hsr_slave_0: entered promiscuous mode [ 157.739689][ T29] audit: type=1400 audit(1721577773.657:235): avc: denied { create } for pid=5664 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.800239][ T5666] Process accounting resumed [ 157.840605][ T5391] hsr_slave_1: entered promiscuous mode [ 157.868621][ T29] audit: type=1400 audit(1721577773.737:236): avc: denied { write } for pid=5664 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.928628][ T5391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.960110][ T5391] Cannot create hsr debugfs directory [ 157.970322][ T29] audit: type=1400 audit(1721577773.877:237): avc: denied { create } for pid=5664 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.365589][ T29] audit: type=1400 audit(1721577774.277:238): avc: denied { ioctl } for pid=5672 comm="syz.2.117" path="socket:[9425]" dev="sockfs" ino=9425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.535689][ T29] audit: type=1400 audit(1721577774.307:239): avc: denied { create } for pid=5649 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.636856][ T29] audit: type=1400 audit(1721577774.307:240): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=1914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.694444][ T5681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.119'. [ 158.698892][ T5682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.120'. [ 158.767271][ T29] audit: type=1400 audit(1721577774.307:241): avc: denied { append } for pid=5649 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=1914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.000946][ T29] audit: type=1400 audit(1721577775.917:242): avc: denied { unlink } for pid=5683 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=1914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.924194][ T29] audit: type=1400 audit(1721577777.837:243): avc: denied { create } for pid=5695 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.218239][ T29] audit: type=1400 audit(1721577778.137:244): avc: denied { ioctl } for pid=5695 comm="syz.0.125" path="socket:[8719]" dev="sockfs" ino=8719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.287372][ T5714] Process accounting resumed [ 162.343486][ T29] audit: type=1400 audit(1721577778.167:245): avc: denied { bind } for pid=5695 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.401120][ T29] audit: type=1400 audit(1721577778.167:246): avc: denied { setopt } for pid=5695 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.513465][ T29] audit: type=1400 audit(1721577778.167:247): avc: denied { write } for pid=5695 comm="syz.0.125" path="socket:[8731]" dev="sockfs" ino=8731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.562877][ T29] audit: type=1400 audit(1721577778.177:248): avc: denied { write } for pid=5695 comm="syz.0.125" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.592290][ T29] audit: type=1400 audit(1721577778.177:249): avc: denied { open } for pid=5695 comm="syz.0.125" path="/dev/input/event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.642650][ T29] audit: type=1400 audit(1721577778.177:250): avc: denied { read } for pid=5695 comm="syz.0.125" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.696845][ T29] audit: type=1400 audit(1721577778.257:251): avc: denied { create } for pid=5715 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.717179][ T29] audit: type=1400 audit(1721577778.257:252): avc: denied { create } for pid=5715 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.050202][ T5731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.132'. [ 165.669096][ T5391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.683822][ T5745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'. [ 165.712303][ T5391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.287288][ T5391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.857245][ T5391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.264121][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.537928][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.592278][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.599545][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.612875][ T5768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.139'. [ 167.682577][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.689842][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.925589][ T5783] Process accounting resumed [ 169.810500][ T5796] overlayfs: missing 'lowerdir' [ 169.824374][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 169.824391][ T29] audit: type=1400 audit(1721577785.737:260): avc: denied { sqpoll } for pid=5794 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.956955][ T5804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.146'. [ 170.980077][ T29] audit: type=1400 audit(1721577786.817:261): avc: denied { read } for pid=5811 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.000443][ T29] audit: type=1400 audit(1721577786.827:262): avc: denied { read write } for pid=5811 comm="syz.3.147" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.025762][ T29] audit: type=1400 audit(1721577786.827:263): avc: denied { open } for pid=5811 comm="syz.3.147" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.042034][ T5817] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 171.301932][ T5817] batman_adv: batadv0: Adding interface: team0 [ 171.308191][ T5817] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.333535][ T5817] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 171.420328][ T5817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 172.011510][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.070564][ T5818] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 172.086687][ T5818] netlink: 2 bytes leftover after parsing attributes in process `syz.3.147'. [ 172.095562][ T5818] team0: entered promiscuous mode [ 172.321282][ T5818] team_slave_0: entered promiscuous mode [ 172.546994][ T5818] team_slave_1: entered promiscuous mode [ 172.590746][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.599204][ T5830] Process accounting resumed [ 172.704771][ T5818] batman_adv: batadv0: Interface activated: team0 [ 172.731491][ T5834] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 172.746349][ T29] audit: type=1400 audit(1721577788.647:264): avc: denied { setopt } for pid=5828 comm="syz.2.151" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.770696][ T5818] batman_adv: batadv0: Interface deactivated: team0 [ 172.796179][ T5818] batman_adv: batadv0: Removing interface: team0 [ 172.823611][ T5818] bridge0: port 3(team0) entered blocking state [ 172.850441][ T5818] bridge0: port 3(team0) entered disabled state [ 172.860423][ T5818] team0: entered allmulticast mode [ 172.870082][ T5818] team_slave_0: entered allmulticast mode [ 172.917852][ T5818] team_slave_1: entered allmulticast mode [ 173.039099][ T5818] bridge0: port 3(team0) entered blocking state [ 173.045774][ T5818] bridge0: port 3(team0) entered forwarding state [ 173.288960][ T5391] veth0_vlan: entered promiscuous mode [ 173.361213][ T5391] veth1_vlan: entered promiscuous mode [ 174.454709][ T5391] veth0_macvtap: entered promiscuous mode [ 174.468742][ T5391] veth1_macvtap: entered promiscuous mode [ 174.502565][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.514565][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.528690][ T5855] Process accounting resumed [ 174.533400][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.573317][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.594315][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.625265][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.660449][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.696898][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.750508][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.817006][ T5861] overlayfs: missing 'lowerdir' [ 174.824038][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.860359][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.868544][ T29] audit: type=1400 audit(1721577790.767:265): avc: denied { bind } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.885437][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.930952][ T5863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.157'. [ 174.964475][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.142004][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.148224][ T29] audit: type=1400 audit(1721577790.767:266): avc: denied { listen } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.152794][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.183735][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.196598][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.213449][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.248356][ T5391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.261051][ T5391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.669142][ T5391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.673646][ T29] audit: type=1400 audit(1721577790.787:267): avc: denied { connect } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.720261][ T29] audit: type=1400 audit(1721577790.837:268): avc: denied { accept } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.740563][ T29] audit: type=1400 audit(1721577790.837:269): avc: denied { write } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.816625][ T5391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.875221][ T29] audit: type=1400 audit(1721577790.847:270): avc: denied { read } for pid=5862 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.969800][ T29] audit: type=1400 audit(1721577791.127:271): avc: denied { view } for pid=5866 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 176.112680][ T5879] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 176.190661][ T29] audit: type=1400 audit(1721577791.127:272): avc: denied { create } for pid=5866 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 176.380177][ T29] audit: type=1400 audit(1721577791.127:273): avc: denied { read } for pid=5866 comm="syz.4.158" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.674546][ T5879] batman_adv: batadv0: Adding interface: team0 [ 176.681349][ T5879] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.696802][ T29] audit: type=1400 audit(1721577791.127:274): avc: denied { open } for pid=5866 comm="syz.4.158" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.726802][ T5879] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 177.237334][ T5894] 9pnet_fd: Insufficient options for proto=fd [ 177.278923][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'. [ 177.307783][ T5883] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 177.315525][ T5883] netlink: 2 bytes leftover after parsing attributes in process `syz.4.160'. [ 177.377467][ T5883] team0: entered promiscuous mode [ 177.536829][ T5883] team_slave_0: entered promiscuous mode [ 177.635163][ T5883] team_slave_1: entered promiscuous mode [ 177.857919][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.904086][ T5883] batman_adv: batadv0: Interface activated: team0 [ 177.951472][ T5883] batman_adv: batadv0: Interface deactivated: team0 [ 177.974472][ T5883] batman_adv: batadv0: Removing interface: team0 [ 178.058354][ T5883] bridge0: port 3(team0) entered blocking state [ 178.074895][ T5883] bridge0: port 3(team0) entered disabled state [ 178.082141][ T5883] team0: entered allmulticast mode [ 178.095014][ T5883] team_slave_0: entered allmulticast mode [ 178.102229][ T5883] team_slave_1: entered allmulticast mode [ 178.133698][ T5883] bridge0: port 3(team0) entered blocking state [ 178.140089][ T5883] bridge0: port 3(team0) entered forwarding state [ 178.180773][ T2419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.397185][ T2419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.558068][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.568727][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.576972][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.586302][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.594729][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.608762][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.669558][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 180.669578][ T29] audit: type=1400 audit(1721577796.587:279): avc: denied { setopt } for pid=5923 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.995307][ T29] audit: type=1400 audit(1721577796.877:280): avc: denied { shutdown } for pid=5923 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.813903][ T29] audit: type=1400 audit(1721577797.697:281): avc: denied { create } for pid=5929 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.872470][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 181.897098][ T5937] overlay: filesystem on ./bus not supported as upperdir [ 181.901828][ T29] audit: type=1400 audit(1721577797.807:282): avc: denied { write } for pid=5923 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.986881][ T29] audit: type=1400 audit(1721577797.807:283): avc: denied { nlmsg_read } for pid=5923 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.031422][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.140870][ T5941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.295692][ T29] audit: type=1400 audit(1721577797.937:284): avc: denied { bind } for pid=5929 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.423248][ T29] audit: type=1400 audit(1721577798.337:285): avc: denied { execute } for pid=5929 comm="syz.4.170" name="file1" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.447841][ T5930] process 'syz.4.170' launched './file1' with NULL argv: empty string added [ 182.478908][ T29] audit: type=1400 audit(1721577798.337:286): avc: denied { create } for pid=5954 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.514405][ T29] audit: type=1400 audit(1721577798.387:287): avc: denied { execute_no_trans } for pid=5929 comm="syz.4.170" path="/42/file1" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.685855][ T29] audit: type=1400 audit(1721577798.387:288): avc: denied { getopt } for pid=5929 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 182.695788][ T5105] Bluetooth: hci1: command tx timeout [ 182.974999][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.441934][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'. [ 184.021266][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 184.514099][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.736702][ T54] Bluetooth: hci1: command tx timeout [ 184.800116][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 184.899260][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.515519][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.750150][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.464115][ T5926] bridge_slave_0: entered allmulticast mode [ 186.502894][ T5926] bridge_slave_0: entered promiscuous mode [ 186.540472][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.576730][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.584102][ T5926] bridge_slave_1: entered allmulticast mode [ 186.660108][ T5926] bridge_slave_1: entered promiscuous mode [ 186.816838][ T54] Bluetooth: hci1: command tx timeout [ 188.041497][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.443914][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.906799][ T54] Bluetooth: hci1: command tx timeout [ 189.262523][ T6026] slcan: can't register candev [ 189.267673][ T6026] Falling back ldisc for ptm0. [ 189.636529][ T5926] team0: Port device team_slave_0 added [ 189.659247][ T12] bridge_slave_1: left allmulticast mode [ 189.664895][ T12] bridge_slave_1: left promiscuous mode [ 189.886947][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.938208][ T12] bridge_slave_0: left allmulticast mode [ 189.943905][ T12] bridge_slave_0: left promiscuous mode [ 189.996390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.659117][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.692099][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.705399][ T12] bond0 (unregistering): Released all slaves [ 193.720861][ T5926] team0: Port device team_slave_1 added [ 194.027235][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.215429][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.990321][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.997674][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.997960][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.125991][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.331091][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.357513][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.333764][ T6091] blktrace: Concurrent blktraces are not allowed on loop3 [ 197.510107][ T5926] hsr_slave_0: entered promiscuous mode [ 197.516387][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 197.516403][ T29] audit: type=1400 audit(1721577813.427:293): avc: denied { create } for pid=6092 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.569739][ T5926] hsr_slave_1: entered promiscuous mode [ 197.587967][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.595626][ T5926] Cannot create hsr debugfs directory [ 197.625465][ T6096] overlay: filesystem on ./bus not supported as upperdir [ 198.693715][ T29] audit: type=1400 audit(1721577814.607:294): avc: denied { setopt } for pid=6103 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.469637][ T12] hsr_slave_0: left promiscuous mode [ 199.512149][ T12] hsr_slave_1: left promiscuous mode [ 199.571666][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.596696][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.642917][ T6118] capability: warning: `syz.3.202' uses deprecated v2 capabilities in a way that may be insecure [ 199.673514][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.728097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.854099][ T12] veth1_macvtap: left promiscuous mode [ 201.044731][ T12] veth0_macvtap: left promiscuous mode [ 201.072975][ T12] veth1_vlan: left promiscuous mode [ 201.790545][ T12] veth0_vlan: left promiscuous mode [ 201.791858][ C1] eth0: bad gso: type: 1, size: 1408 [ 204.220268][ T5095] Bluetooth: hci0: command 0x0406 tx timeout [ 204.252553][ T5095] Bluetooth: hci3: command 0x0406 tx timeout [ 204.260894][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 204.267229][ T5112] Bluetooth: hci4: command 0x0406 tx timeout [ 204.516488][ T29] audit: type=1400 audit(1721577818.577:295): avc: denied { write } for pid=6138 comm="syz.4.209" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.586244][ T6144] slcan: can't register candev [ 204.591964][ T6144] Falling back ldisc for ptm0. [ 204.959315][ T6152] overlay: filesystem on ./bus not supported as upperdir [ 206.660209][ T12] team0 (unregistering): Port device team_slave_1 removed [ 206.735935][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.177767][ T6186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6186 comm=syz.0.220 [ 209.531280][ T6186] team0: Port device team_slave_1 removed [ 209.543042][ T6194] overlay: filesystem on ./bus not supported as upperdir [ 209.627882][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 209.823969][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.833074][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.841177][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.850894][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.863309][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.873833][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.925188][ T6200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6200 comm=syz.2.223 [ 210.149966][ T29] audit: type=1400 audit(1721577826.067:296): avc: denied { read } for pid=6197 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 210.170934][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 211.022763][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 211.061696][ T6210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6210 comm=syz.4.225 [ 211.088236][ T6210] FAULT_INJECTION: forcing a failure. [ 211.088236][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 211.115559][ T6210] CPU: 1 PID: 6210 Comm: syz.4.225 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 211.125248][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.135329][ T6210] Call Trace: [ 211.138629][ T6210] [ 211.141579][ T6210] dump_stack_lvl+0x16c/0x1f0 [ 211.146319][ T6210] should_fail_ex+0x497/0x5b0 [ 211.151045][ T6210] should_failslab+0x9/0x20 [ 211.155589][ T6210] kmem_cache_alloc_node_noprof+0x71/0x310 [ 211.161432][ T6210] ? __alloc_skb+0x2b1/0x380 [ 211.166052][ T6210] __alloc_skb+0x2b1/0x380 [ 211.170497][ T6210] ? __pfx___alloc_skb+0x10/0x10 [ 211.175464][ T6210] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 211.181485][ T6210] netlink_alloc_large_skb+0x69/0x130 [ 211.186896][ T6210] netlink_sendmsg+0x689/0xd70 [ 211.191693][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.197012][ T6210] ? __import_iovec+0x1fd/0x6e0 [ 211.201902][ T6210] ____sys_sendmsg+0xab5/0xc90 [ 211.206693][ T6210] ? copy_msghdr_from_user+0x10b/0x160 [ 211.212183][ T6210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.217491][ T6210] ? find_held_lock+0x2d/0x110 [ 211.222282][ T6210] ? __pfx___lock_acquire+0x10/0x10 [ 211.227510][ T6210] ___sys_sendmsg+0x135/0x1e0 [ 211.232223][ T6210] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.237457][ T6210] ? ksys_write+0x21c/0x260 [ 211.241989][ T6210] ? __fget_light+0x173/0x210 [ 211.246692][ T6210] __sys_sendmsg+0x117/0x1f0 [ 211.251314][ T6210] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.256462][ T6210] do_syscall_64+0xcd/0x250 [ 211.261003][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.266929][ T6210] RIP: 0033:0x7fef85f75b59 [ 211.271375][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.291016][ T6210] RSP: 002b:00007fef86c72048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.299485][ T6210] RAX: ffffffffffffffda RBX: 00007fef86106038 RCX: 00007fef85f75b59 [ 211.307484][ T6210] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 211.315486][ T6210] RBP: 00007fef86c720a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.323486][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.331486][ T6210] R13: 000000000000006e R14: 00007fef86106038 R15: 00007ffe18c508f8 [ 211.339487][ T6210] [ 211.350643][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 211.804200][ T6227] FAULT_INJECTION: forcing a failure. [ 211.804200][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 211.836768][ T6227] CPU: 0 PID: 6227 Comm: syz.4.228 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 211.846468][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.856522][ T6227] Call Trace: [ 211.859807][ T6227] [ 211.862742][ T6227] dump_stack_lvl+0x16c/0x1f0 [ 211.867432][ T6227] should_fail_ex+0x497/0x5b0 [ 211.872120][ T6227] should_failslab+0x9/0x20 [ 211.876624][ T6227] kmem_cache_alloc_node_noprof+0x71/0x310 [ 211.882435][ T6227] ? __alloc_skb+0x2b1/0x380 [ 211.887026][ T6227] __alloc_skb+0x2b1/0x380 [ 211.891526][ T6227] ? __pfx___alloc_skb+0x10/0x10 [ 211.896456][ T6227] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 211.902475][ T6227] netlink_alloc_large_skb+0x69/0x130 [ 211.907862][ T6227] netlink_sendmsg+0x689/0xd70 [ 211.912626][ T6227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.917912][ T6227] ? __import_iovec+0x1fd/0x6e0 [ 211.922772][ T6227] ____sys_sendmsg+0xab5/0xc90 [ 211.927545][ T6227] ? copy_msghdr_from_user+0x10b/0x160 [ 211.933003][ T6227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.938276][ T6227] ? find_held_lock+0x2d/0x110 [ 211.943038][ T6227] ? __pfx___lock_acquire+0x10/0x10 [ 211.948233][ T6227] ___sys_sendmsg+0x135/0x1e0 [ 211.952910][ T6227] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.958107][ T6227] ? ksys_write+0x21c/0x260 [ 211.962611][ T6227] ? __fget_light+0x173/0x210 [ 211.967301][ T6227] __sys_sendmsg+0x117/0x1f0 [ 211.971886][ T6227] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.977002][ T6227] do_syscall_64+0xcd/0x250 [ 211.981517][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.987414][ T6227] RIP: 0033:0x7fef85f75b59 [ 211.991824][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.011459][ T6227] RSP: 002b:00007fef86c93048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.019871][ T6227] RAX: ffffffffffffffda RBX: 00007fef86105f60 RCX: 00007fef85f75b59 [ 212.027850][ T6227] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 212.035810][ T6227] RBP: 00007fef86c930a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.043770][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.051735][ T6227] R13: 000000000000000b R14: 00007fef86105f60 R15: 00007ffe18c508f8 [ 212.059700][ T6227] [ 212.062725][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.090552][ T54] Bluetooth: hci0: command tx timeout [ 213.839272][ T6243] overlay: filesystem on ./bus not supported as upperdir [ 213.854016][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.176815][ T54] Bluetooth: hci0: command tx timeout [ 214.443056][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 214.493137][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.649077][ T6260] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 214.659398][ T6260] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.675371][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.686203][ T6260] vhci_hcd vhci_hcd.0: Device attached [ 214.708995][ T6261] vhci_hcd: connection closed [ 214.727850][ T2458] vhci_hcd: stop threads [ 214.765707][ T2458] vhci_hcd: release socket [ 214.782191][ T2458] vhci_hcd: disconnect device [ 214.849620][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 214.992086][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.043686][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 215.055896][ T6265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.236'. [ 215.225686][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.242712][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.253124][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.374131][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.541488][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.558239][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.565601][ T6196] bridge_slave_0: entered allmulticast mode [ 215.574207][ T6196] bridge_slave_0: entered promiscuous mode [ 215.575531][ T29] audit: type=1400 audit(1721577831.487:297): avc: denied { bind } for pid=6277 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.585010][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.612249][ T29] audit: type=1400 audit(1721577831.487:298): avc: denied { name_bind } for pid=6277 comm="syz.4.238" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 215.642967][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.651712][ T6196] bridge_slave_1: entered allmulticast mode [ 215.667932][ T6196] bridge_slave_1: entered promiscuous mode [ 215.713403][ T29] audit: type=1400 audit(1721577831.487:299): avc: denied { node_bind } for pid=6277 comm="syz.4.238" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 215.744998][ T29] audit: type=1326 audit(1721577831.577:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.4.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef85f75b59 code=0x0 [ 216.804774][ T54] Bluetooth: hci0: command tx timeout [ 216.819731][ C1] eth0: bad gso: type: 1, size: 1408 [ 216.911009][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.961942][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.065119][ T12] team0: left allmulticast mode [ 217.070420][ T12] team_slave_0: left allmulticast mode [ 217.090274][ T12] team_slave_1: left allmulticast mode [ 217.097990][ T12] bridge0: port 3(team0) entered disabled state [ 217.130824][ T6287] overlayfs: missing 'workdir' [ 217.213048][ T12] bridge_slave_1: left allmulticast mode [ 217.247097][ T12] bridge_slave_1: left promiscuous mode [ 217.257410][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.291523][ T12] bridge_slave_0: left allmulticast mode [ 217.328553][ T12] bridge_slave_0: left promiscuous mode [ 217.347651][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.745204][ T6302] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0': -2 [ 218.818585][ T54] Bluetooth: hci0: command tx timeout [ 219.771504][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.798270][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.822268][ T12] bond0 (unregistering): Released all slaves [ 219.938436][ T6196] team0: Port device team_slave_0 added [ 219.991580][ T6196] team0: Port device team_slave_1 added [ 220.373054][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.563659][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.319433][ T29] audit: type=1400 audit(1721577837.237:301): avc: denied { write } for pid=6346 comm="syz.4.250" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 221.343492][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.354181][ T29] audit: type=1400 audit(1721577837.267:302): avc: denied { rename } for pid=4527 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.377768][ T29] audit: type=1400 audit(1721577837.267:303): avc: denied { unlink } for pid=4527 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.400328][ T29] audit: type=1400 audit(1721577837.267:304): avc: denied { create } for pid=4527 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.518511][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.525514][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.658682][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.693133][ T6356] overlayfs: missing 'workdir' [ 222.017228][ T29] audit: type=1400 audit(1721577837.927:305): avc: denied { ioctl } for pid=6352 comm="syz.4.252" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.150419][ T12] hsr_slave_0: left promiscuous mode [ 222.163133][ T12] hsr_slave_1: left promiscuous mode [ 222.190822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.225033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.271298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.303093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.390298][ T12] veth1_macvtap: left promiscuous mode [ 222.413842][ T12] veth0_macvtap: left promiscuous mode [ 222.440821][ T12] veth1_vlan: left promiscuous mode [ 222.446133][ T12] veth0_vlan: left promiscuous mode [ 224.302436][ T12] team_slave_1 (unregistering): left promiscuous mode [ 224.336124][ T12] team0 (unregistering): Port device team_slave_1 removed [ 224.447471][ T12] team_slave_0 (unregistering): left promiscuous mode [ 224.466447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.976781][ T6399] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 226.019541][ T6399] batman_adv: batadv0: Adding interface: team0 [ 226.025717][ T6399] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.106795][ T6399] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 226.135448][ T6400] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 226.144205][ T6400] netlink: 2 bytes leftover after parsing attributes in process `syz.0.255'. [ 226.155429][ T6400] team0: entered promiscuous mode [ 226.165479][ T6400] team_slave_0: entered promiscuous mode [ 226.183993][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.195435][ T6400] batman_adv: batadv0: Interface activated: team0 [ 226.205572][ T6400] batman_adv: batadv0: Interface deactivated: team0 [ 226.215304][ T6400] batman_adv: batadv0: Removing interface: team0 [ 226.390998][ T6400] bridge0: port 3(team0) entered blocking state [ 226.403238][ T6400] bridge0: port 3(team0) entered disabled state [ 226.424595][ T6400] team0: entered allmulticast mode [ 226.430629][ T6400] team_slave_0: entered allmulticast mode [ 226.445577][ T6400] bridge0: port 3(team0) entered blocking state [ 226.451955][ T6400] bridge0: port 3(team0) entered forwarding state [ 226.518584][ T6196] hsr_slave_0: entered promiscuous mode [ 226.537974][ T6196] hsr_slave_1: entered promiscuous mode [ 226.568177][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.595516][ T6196] Cannot create hsr debugfs directory [ 226.967699][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.170121][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.408316][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.415482][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.339987][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.348060][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.495598][ T6444] overlayfs: missing 'workdir' [ 229.872365][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.914585][ T6196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.979774][ T6196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.048719][ T6196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.119474][ T6196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.457497][ T5926] veth0_vlan: entered promiscuous mode [ 230.587676][ T5926] veth1_vlan: entered promiscuous mode [ 230.948813][ T5926] veth0_macvtap: entered promiscuous mode [ 231.029367][ T5926] veth1_macvtap: entered promiscuous mode [ 231.104152][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.143104][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.179491][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.224477][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.248347][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.306068][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.355765][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.423109][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.505612][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.560441][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.618558][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.655582][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.700377][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.736206][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.790018][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.945137][ T5926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.993940][ T5926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.993973][ T5926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.993995][ T5926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.039532][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.172307][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.172489][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.224115][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.224205][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.312532][ T6495] Process accounting resumed [ 232.622548][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.660655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.904725][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.956378][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.921334][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.066343][ T6196] veth0_vlan: entered promiscuous mode [ 235.106586][ T6196] veth1_vlan: entered promiscuous mode [ 236.244565][ T6196] veth0_macvtap: entered promiscuous mode [ 236.347135][ T6196] veth1_macvtap: entered promiscuous mode [ 236.429786][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.444583][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.486718][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.549668][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.603040][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.658645][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.685245][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.862580][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.884836][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.785311][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.826658][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.903687][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.946995][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.966641][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.984528][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.025890][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.072246][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.102750][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.162638][ T6196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.183310][ T6535] Bluetooth: MGMT ver 1.23 [ 238.207349][ T6196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.227601][ T6196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.245117][ T6196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.627963][ T2868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.661284][ T2868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.881784][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.907092][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.197132][ T6542] Process accounting resumed [ 239.565459][ T6550] wg1: entered promiscuous mode [ 239.910142][ T29] audit: type=1400 audit(1721577855.777:306): avc: denied { write } for pid=6552 comm="syz.4.282" name="fib_trie" dev="proc" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 240.615796][ T6559] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.370456][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 245.892830][ T6608] wg1: entered promiscuous mode [ 246.238566][ T6616] FAULT_INJECTION: forcing a failure. [ 246.238566][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 246.259401][ T6616] CPU: 1 PID: 6616 Comm: syz.1.298 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 246.269078][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 246.279152][ T6616] Call Trace: [ 246.282443][ T6616] [ 246.285388][ T6616] dump_stack_lvl+0x16c/0x1f0 [ 246.290092][ T6616] should_fail_ex+0x497/0x5b0 [ 246.294775][ T6616] should_failslab+0x9/0x20 [ 246.299278][ T6616] kmem_cache_alloc_node_noprof+0x71/0x310 [ 246.305081][ T6616] ? __alloc_skb+0x2b1/0x380 [ 246.309666][ T6616] __alloc_skb+0x2b1/0x380 [ 246.314076][ T6616] ? __pfx___alloc_skb+0x10/0x10 [ 246.319010][ T6616] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 246.324994][ T6616] netlink_alloc_large_skb+0x69/0x130 [ 246.330372][ T6616] netlink_sendmsg+0x689/0xd70 [ 246.335132][ T6616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.340419][ T6616] ? __import_iovec+0x1fd/0x6e0 [ 246.345271][ T6616] ____sys_sendmsg+0xab5/0xc90 [ 246.350039][ T6616] ? copy_msghdr_from_user+0x10b/0x160 [ 246.355517][ T6616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.360810][ T6616] ? find_held_lock+0x2d/0x110 [ 246.365588][ T6616] ? __pfx___lock_acquire+0x10/0x10 [ 246.370796][ T6616] ___sys_sendmsg+0x135/0x1e0 [ 246.375485][ T6616] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.380696][ T6616] ? ksys_write+0x21c/0x260 [ 246.385214][ T6616] ? __fget_light+0x173/0x210 [ 246.389899][ T6616] __sys_sendmsg+0x117/0x1f0 [ 246.394503][ T6616] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.399647][ T6616] do_syscall_64+0xcd/0x250 [ 246.404184][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.410099][ T6616] RIP: 0033:0x7f6f49b75b59 [ 246.414519][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.434145][ T6616] RSP: 002b:00007f6f4a9ad048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.442568][ T6616] RAX: ffffffffffffffda RBX: 00007f6f49d05f60 RCX: 00007f6f49b75b59 [ 246.450544][ T6616] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 246.458518][ T6616] RBP: 00007f6f4a9ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.466493][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.474466][ T6616] R13: 000000000000000b R14: 00007f6f49d05f60 R15: 00007fff24463b88 [ 246.482444][ T6616] [ 246.975189][ T29] audit: type=1400 audit(1721577862.887:307): avc: denied { write } for pid=6617 comm="syz.2.299" path="socket:[14559]" dev="sockfs" ino=14559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.195776][ T6635] Zero length message leads to an empty skb [ 247.270552][ T6635] netlink: 256 bytes leftover after parsing attributes in process `syz.4.302'. [ 248.406143][ T6643] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.913127][ T6662] can0: slcan on ptm0. [ 250.490566][ T6653] can0 (unregistered): slcan off ptm0. [ 252.764540][ T6686] Process accounting resumed [ 254.656397][ T29] audit: type=1400 audit(1721577870.567:308): avc: denied { ioctl } for pid=6700 comm="syz.1.320" path="socket:[14738]" dev="sockfs" ino=14738 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 254.889412][ T54] Bluetooth: hci1: unexpected event 0x30 length: 23 > 3 [ 255.434100][ T6711] can0: slcan on ptm0. [ 256.117954][ T6710] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 256.132752][ T6710] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 256.168484][ T6706] can0 (unregistered): slcan off ptm0. [ 256.339517][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.345880][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.937629][ T29] audit: type=1400 audit(1721577872.857:309): avc: denied { shutdown } for pid=6717 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 257.149520][ T6723] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 257.172801][ T6723] batman_adv: batadv0: Adding interface: team0 [ 257.182882][ T6723] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.208206][ T6723] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 257.226179][ T6723] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 257.234053][ T6723] netlink: 2 bytes leftover after parsing attributes in process `syz.3.325'. [ 257.243268][ T6723] team0: entered promiscuous mode [ 257.248658][ T6723] team_slave_0: entered promiscuous mode [ 257.254946][ T6723] team_slave_1: entered promiscuous mode [ 257.265186][ T6723] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.272509][ T6723] batman_adv: batadv0: Interface activated: team0 [ 257.308371][ T6723] batman_adv: batadv0: Interface deactivated: team0 [ 257.319974][ T6723] batman_adv: batadv0: Removing interface: team0 [ 257.329573][ T6723] bridge0: port 3(team0) entered blocking state [ 257.336114][ T6723] bridge0: port 3(team0) entered disabled state [ 257.342810][ T6723] team0: entered allmulticast mode [ 257.348059][ T6723] team_slave_0: entered allmulticast mode [ 257.353873][ T6723] team_slave_1: entered allmulticast mode [ 257.364932][ T6723] bridge0: port 3(team0) entered blocking state [ 257.371510][ T6723] bridge0: port 3(team0) entered forwarding state [ 257.450523][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 257.943987][ T29] audit: type=1400 audit(1721577873.837:310): avc: denied { relabelfrom } for pid=6717 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 258.055106][ T29] audit: type=1400 audit(1721577873.887:311): avc: denied { relabelto } for pid=6717 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 258.074757][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.214876][ T29] audit: type=1326 audit(1721577874.107:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f49b75b59 code=0x0 [ 260.120878][ T6755] Process accounting resumed [ 260.777408][ T54] Bluetooth: hci1: unexpected event 0x30 length: 23 > 3 [ 260.927641][ T6761] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 260.945203][ T6761] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 262.272194][ T6773] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 262.447489][ T6773] bridge0: port 3(team0) entered disabled state [ 262.632940][ T6773] team0: left allmulticast mode [ 262.642226][ T6773] team_slave_0: left allmulticast mode [ 262.703921][ T6773] team_slave_1: left allmulticast mode [ 262.715919][ T6773] team0: left promiscuous mode [ 262.721901][ T6773] team_slave_0: left promiscuous mode [ 262.787279][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 262.816995][ T6773] team_slave_1: left promiscuous mode [ 262.824436][ T6773] bridge0: port 3(team0) entered disabled state [ 263.865304][ T6773] batman_adv: batadv0: Adding interface: team0 [ 263.886628][ T6773] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.912546][ T6773] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 263.930809][ T6774] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 263.942524][ T6774] netlink: 2 bytes leftover after parsing attributes in process `syz.3.338'. [ 263.951797][ T6774] team0: entered promiscuous mode [ 263.956936][ T6774] team_slave_0: entered promiscuous mode [ 263.964665][ T6774] team_slave_1: entered promiscuous mode [ 263.978697][ T6774] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.986595][ T6774] batman_adv: batadv0: Interface activated: team0 [ 263.993398][ T6774] batman_adv: batadv0: Interface deactivated: team0 [ 264.000291][ T6774] batman_adv: batadv0: Removing interface: team0 [ 264.452145][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 264.862683][ T6774] bridge0: port 3(team0) entered blocking state [ 264.875858][ T6774] bridge0: port 3(team0) entered disabled state [ 264.891055][ T6774] team0: entered allmulticast mode [ 264.896277][ T6774] team_slave_0: entered allmulticast mode [ 264.904049][ T6774] team_slave_1: entered allmulticast mode [ 264.920776][ T6774] bridge0: port 3(team0) entered blocking state [ 264.927298][ T6774] bridge0: port 3(team0) entered forwarding state [ 265.016683][ T6790] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 265.108329][ T6790] batman_adv: batadv0: Adding interface: team0 [ 265.156124][ T6790] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.181332][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.245235][ T6790] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 265.286646][ T6793] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 265.302259][ T6793] netlink: 2 bytes leftover after parsing attributes in process `syz.1.341'. [ 265.819101][ T6793] team0: entered promiscuous mode [ 265.890024][ T6793] team_slave_0: entered promiscuous mode [ 266.107895][ T6793] team_slave_1: entered promiscuous mode [ 266.169819][ T6808] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 266.446831][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.467066][ T6793] batman_adv: batadv0: Interface activated: team0 [ 266.482301][ T6793] batman_adv: batadv0: Interface deactivated: team0 [ 266.500551][ T6793] batman_adv: batadv0: Removing interface: team0 [ 266.511220][ T6793] bridge0: port 3(team0) entered blocking state [ 266.517936][ T6793] bridge0: port 3(team0) entered disabled state [ 266.525890][ T6793] team0: entered allmulticast mode [ 266.531609][ T6793] team_slave_0: entered allmulticast mode [ 266.537563][ T6793] team_slave_1: entered allmulticast mode [ 266.546815][ T6793] bridge0: port 3(team0) entered blocking state [ 266.553201][ T6793] bridge0: port 3(team0) entered forwarding state [ 267.142247][ T29] audit: type=1400 audit(1721577883.057:313): avc: denied { connect } for pid=6817 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 268.588581][ T6828] FAULT_INJECTION: forcing a failure. [ 268.588581][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 268.601320][ T6828] CPU: 1 PID: 6828 Comm: syz.0.350 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 268.610975][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 268.621061][ T6828] Call Trace: [ 268.624356][ T6828] [ 268.627299][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 268.632011][ T6828] should_fail_ex+0x497/0x5b0 [ 268.636724][ T6828] should_failslab+0x9/0x20 [ 268.641255][ T6828] __kmalloc_noprof+0xcb/0x400 [ 268.646049][ T6828] ? d_absolute_path+0x137/0x1b0 [ 268.651027][ T6828] tomoyo_encode2+0x100/0x3e0 [ 268.655740][ T6828] tomoyo_encode+0x29/0x50 [ 268.660201][ T6828] tomoyo_realpath_from_path+0x19d/0x720 [ 268.665887][ T6828] tomoyo_path_number_perm+0x245/0x590 [ 268.671390][ T6828] ? tomoyo_path_number_perm+0x232/0x590 [ 268.677051][ T6828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.683064][ T6828] ? find_held_lock+0x2d/0x110 [ 268.687883][ T6828] ? __pfx_lock_release+0x10/0x10 [ 268.692949][ T6828] ? rcu_is_watching+0x12/0xc0 [ 268.697743][ T6828] ? __rcu_read_unlock+0x2b4/0x580 [ 268.702902][ T6828] ? __fget_files+0x256/0x400 [ 268.707627][ T6828] security_file_ioctl+0x75/0xc0 [ 268.712612][ T6828] __x64_sys_ioctl+0xbb/0x220 [ 268.717347][ T6828] do_syscall_64+0xcd/0x250 [ 268.721982][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.727936][ T6828] RIP: 0033:0x7fa6fcf75b59 [ 268.732382][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.752028][ T6828] RSP: 002b:00007fa6fdc71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.760471][ T6828] RAX: ffffffffffffffda RBX: 00007fa6fd106110 RCX: 00007fa6fcf75b59 [ 268.768462][ T6828] RDX: 0000000020000240 RSI: 0000000040305839 RDI: 0000000000000008 [ 268.776467][ T6828] RBP: 00007fa6fdc710a0 R08: 0000000000000000 R09: 0000000000000000 [ 268.784479][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.792484][ T6828] R13: 000000000000006e R14: 00007fa6fd106110 R15: 00007ffe9172d128 [ 268.800500][ T6828] [ 268.805622][ T6828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.896765][ T29] audit: type=1400 audit(1721577884.487:314): avc: denied { mounton } for pid=6823 comm="syz.0.350" path="/proc/356/task" dev="proc" ino=15063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 269.941390][ T6836] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 270.172718][ T6836] bridge0: port 3(team0) entered disabled state [ 270.259173][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.352'. [ 270.343342][ T6836] team0: left allmulticast mode [ 270.376712][ T6836] team_slave_0: left allmulticast mode [ 270.458241][ T6836] team_slave_1: left allmulticast mode [ 270.463745][ T6836] team0: left promiscuous mode [ 270.508769][ T6836] team_slave_0: left promiscuous mode [ 270.527041][ T6836] team_slave_1: left promiscuous mode [ 270.533469][ T6836] bridge0: port 3(team0) entered disabled state [ 270.773577][ T6836] batman_adv: batadv0: Adding interface: team0 [ 271.701590][ T29] audit: type=1400 audit(1721577886.997:315): avc: denied { write } for pid=6846 comm="syz.2.354" name="task" dev="proc" ino=15095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 271.726465][ T29] audit: type=1400 audit(1721577886.997:316): avc: denied { add_name } for pid=6846 comm="syz.2.354" name="blkio.throttle.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 271.746755][ T6836] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.774592][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.786737][ T29] audit: type=1400 audit(1721577887.007:317): avc: denied { create } for pid=6846 comm="syz.2.354" name="blkio.throttle.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 271.809695][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.886726][ T6836] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 271.921229][ T6837] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 272.166504][ T29] audit: type=1400 audit(1721577887.007:318): avc: denied { associate } for pid=6846 comm="syz.2.354" name="blkio.throttle.io_service_bytes_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 272.190690][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.283544][ T6837] netlink: 2 bytes leftover after parsing attributes in process `syz.1.352'. [ 272.344250][ T29] audit: type=1400 audit(1721577887.817:319): avc: denied { read } for pid=6853 comm="syz.3.356" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.497733][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 272.566368][ T6837] team0: entered promiscuous mode [ 272.571641][ T29] audit: type=1400 audit(1721577887.817:320): avc: denied { open } for pid=6853 comm="syz.3.356" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.571712][ T29] audit: type=1400 audit(1721577887.867:321): avc: denied { ioctl } for pid=6853 comm="syz.3.356" path="/dev/iommu" dev="devtmpfs" ino=626 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.571785][ T29] audit: type=1400 audit(1721577888.477:322): avc: denied { write } for pid=6858 comm="syz.0.357" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.594633][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.642171][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.798717][ T6837] team_slave_0: entered promiscuous mode [ 272.805395][ T6837] team_slave_1: entered promiscuous mode [ 272.842367][ T6837] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.863144][ T6837] batman_adv: batadv0: Interface activated: team0 [ 272.870800][ T6837] batman_adv: batadv0: Interface deactivated: team0 [ 272.884257][ T6837] batman_adv: batadv0: Removing interface: team0 [ 272.905398][ T6837] bridge0: port 3(team0) entered blocking state [ 272.919883][ T1731] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 272.930731][ T6837] bridge0: port 3(team0) entered disabled state [ 272.941922][ T6837] team0: entered allmulticast mode [ 272.949635][ T6837] team_slave_0: entered allmulticast mode [ 272.955559][ T6837] team_slave_1: entered allmulticast mode [ 272.966398][ T6837] bridge0: port 3(team0) entered blocking state [ 272.973158][ T6837] bridge0: port 3(team0) entered forwarding state [ 273.210129][ T1731] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.223366][ T1731] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 273.233487][ T1731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.301023][ T1731] usb 1-1: config 0 descriptor?? [ 273.441849][ T6856] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 273.601609][ T1731] ath6kl: Failed to submit usb control message: -71 [ 273.623340][ T6856] batman_adv: batadv0: Adding interface: team0 [ 273.629680][ T1731] ath6kl: unable to send the bmi data to the device: -71 [ 273.640074][ T1731] ath6kl: Unable to send get target info: -71 [ 273.650409][ T1731] ath6kl: Failed to init ath6kl core: -71 [ 273.665679][ T1731] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 273.695444][ T6856] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.709244][ T1731] usb 1-1: USB disconnect, device number 2 [ 273.763566][ T6856] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 273.805801][ T6857] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 274.057254][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.355'. [ 274.066957][ T6857] team0: entered promiscuous mode [ 274.075603][ T6857] team_slave_0: entered promiscuous mode [ 274.409071][ T6874] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 274.462825][ T6857] team_slave_1: entered promiscuous mode [ 274.473737][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.481097][ T6857] batman_adv: batadv0: Interface activated: team0 [ 274.493624][ T6857] batman_adv: batadv0: Interface deactivated: team0 [ 274.510117][ T6857] batman_adv: batadv0: Removing interface: team0 [ 274.520653][ T6857] bridge0: port 3(team0) entered blocking state [ 274.531332][ T6857] bridge0: port 3(team0) entered disabled state [ 274.543377][ T6857] team0: entered allmulticast mode [ 274.543394][ T6857] team_slave_0: entered allmulticast mode [ 274.543409][ T6857] team_slave_1: entered allmulticast mode [ 274.545764][ T6857] bridge0: port 3(team0) entered blocking state [ 274.545896][ T6857] bridge0: port 3(team0) entered forwarding state [ 275.575521][ T29] audit: type=1400 audit(1721577891.487:323): avc: denied { create } for pid=6885 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 275.825279][ T29] audit: type=1400 audit(1721577891.517:324): avc: denied { write } for pid=6885 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 275.933893][ T6890] netlink: 256 bytes leftover after parsing attributes in process `syz.1.365'. [ 277.868464][ T6895] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 277.876866][ T6895] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 277.888519][ T6895] overlayfs: missing 'lowerdir' [ 279.317975][ T6908] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 279.409044][ T6909] FAULT_INJECTION: forcing a failure. [ 279.409044][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 279.431091][ T6908] bridge0: port 3(team0) entered disabled state [ 279.439896][ T6908] team0: left allmulticast mode [ 279.444869][ T6908] team_slave_0: left allmulticast mode [ 279.450640][ T6908] team_slave_1: left allmulticast mode [ 279.456210][ T6908] team0: left promiscuous mode [ 279.461862][ T6908] team_slave_0: left promiscuous mode [ 279.468826][ T6908] team_slave_1: left promiscuous mode [ 279.475048][ T6908] bridge0: port 3(team0) entered disabled state [ 279.553212][ T6908] batman_adv: batadv0: Adding interface: team0 [ 279.559807][ T6908] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.559981][ T6909] CPU: 0 PID: 6909 Comm: syz.0.369 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 279.585124][ T6908] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 279.594562][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 279.594581][ T6909] Call Trace: [ 279.594592][ T6909] [ 279.594603][ T6909] dump_stack_lvl+0x16c/0x1f0 [ 279.607824][ T6910] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 279.614369][ T6909] should_fail_ex+0x497/0x5b0 [ 279.617786][ T6910] netlink: 2 bytes leftover after parsing attributes in process `syz.2.370'. [ 279.620574][ T6909] should_failslab+0x9/0x20 [ 279.625356][ T6910] team0: entered promiscuous mode [ 279.632921][ T6909] kmem_cache_alloc_node_noprof+0x71/0x310 [ 279.632956][ T6909] ? __alloc_skb+0x2b1/0x380 [ 279.632986][ T6909] __alloc_skb+0x2b1/0x380 [ 279.637669][ T6910] team_slave_0: entered promiscuous mode [ 279.646378][ T6909] ? __pfx___alloc_skb+0x10/0x10 [ 279.651168][ T6910] team_slave_1: entered promiscuous mode [ 279.655868][ T6909] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 279.664268][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.666220][ T6909] netlink_alloc_large_skb+0x69/0x130 [ 279.671136][ T6910] batman_adv: batadv0: Interface activated: team0 [ 279.676229][ T6909] netlink_sendmsg+0x689/0xd70 [ 279.681753][ T6910] batman_adv: batadv0: Interface deactivated: team0 [ 279.686763][ T6909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.686807][ T6909] ? __import_iovec+0x1fd/0x6e0 [ 279.692857][ T6910] batman_adv: batadv0: Removing interface: team0 [ 279.699359][ T6909] ____sys_sendmsg+0xab5/0xc90 [ 279.699394][ T6909] ? copy_msghdr_from_user+0x10b/0x160 [ 279.749154][ T6909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.754444][ T6909] ? find_held_lock+0x2d/0x110 [ 279.759206][ T6909] ? __pfx___lock_acquire+0x10/0x10 [ 279.764402][ T6909] ___sys_sendmsg+0x135/0x1e0 [ 279.769074][ T6909] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.774267][ T6909] ? ksys_write+0x21c/0x260 [ 279.778761][ T6909] ? __fget_light+0x173/0x210 [ 279.783426][ T6909] __sys_sendmsg+0x117/0x1f0 [ 279.788008][ T6909] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.793114][ T6909] do_syscall_64+0xcd/0x250 [ 279.797614][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.803505][ T6909] RIP: 0033:0x7fa6fcf75b59 [ 279.807923][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.827548][ T6909] RSP: 002b:00007fa6fdcb3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.835952][ T6909] RAX: ffffffffffffffda RBX: 00007fa6fd105f60 RCX: 00007fa6fcf75b59 [ 279.843911][ T6909] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000004 [ 279.851872][ T6909] RBP: 00007fa6fdcb30a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.859844][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.867811][ T6909] R13: 000000000000000b R14: 00007fa6fd105f60 R15: 00007ffe9172d128 [ 279.875775][ T6909] [ 279.878879][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.956332][ T6910] bridge0: port 3(team0) entered blocking state [ 280.059233][ T6910] bridge0: port 3(team0) entered disabled state [ 280.144661][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 280.197187][ T6910] team0: entered allmulticast mode [ 280.202425][ T6910] team_slave_0: entered allmulticast mode [ 280.246695][ T6910] team_slave_1: entered allmulticast mode [ 280.361430][ T6910] bridge0: port 3(team0) entered blocking state [ 280.368047][ T6910] bridge0: port 3(team0) entered forwarding state [ 281.175766][ T6925] netlink: 256 bytes leftover after parsing attributes in process `syz.0.372'. [ 281.258539][ T6927] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 281.295118][ T6927] bridge0: port 3(team0) entered disabled state [ 281.395538][ T6927] team0: left allmulticast mode [ 281.440243][ T6927] team_slave_0: left allmulticast mode [ 281.453239][ T6927] team_slave_1: left allmulticast mode [ 281.461887][ T6927] team0: left promiscuous mode [ 281.467973][ T6927] team_slave_0: left promiscuous mode [ 281.475961][ T6927] team_slave_1: left promiscuous mode [ 281.488097][ T6927] bridge0: port 3(team0) entered disabled state [ 281.667067][ T6933] netlink: 256 bytes leftover after parsing attributes in process `syz.1.377'. [ 281.822410][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 281.862834][ T6927] batman_adv: batadv0: Adding interface: team0 [ 281.902517][ T6927] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.972496][ T6927] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 282.030252][ T6928] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 282.046909][ T6928] netlink: 2 bytes leftover after parsing attributes in process `syz.2.374'. [ 282.067045][ T6928] team0: entered promiscuous mode [ 282.114701][ T6928] team_slave_0: entered promiscuous mode [ 282.122924][ T6928] team_slave_1: entered promiscuous mode [ 282.189983][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.205048][ T6928] batman_adv: batadv0: Interface activated: team0 [ 282.213119][ T6928] batman_adv: batadv0: Interface deactivated: team0 [ 282.219963][ T6928] batman_adv: batadv0: Removing interface: team0 [ 282.378859][ T6928] bridge0: port 3(team0) entered blocking state [ 282.411907][ T6928] bridge0: port 3(team0) entered disabled state [ 282.452968][ T6928] team0: entered allmulticast mode [ 282.482442][ T6928] team_slave_0: entered allmulticast mode [ 282.500742][ T6928] team_slave_1: entered allmulticast mode [ 282.531883][ T6928] bridge0: port 3(team0) entered blocking state [ 282.538294][ T6928] bridge0: port 3(team0) entered forwarding state [ 282.965575][ T6955] netlink: 256 bytes leftover after parsing attributes in process `syz.1.379'. [ 284.780020][ C1] eth0: bad gso: type: 1, size: 1408 [ 285.664455][ T29] audit: type=1400 audit(1721577901.567:325): avc: denied { name_bind } for pid=6949 comm="syz.3.381" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 285.907688][ T6972] netlink: 256 bytes leftover after parsing attributes in process `syz.0.384'. [ 286.108058][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.248450][ T6976] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 286.655393][ T29] audit: type=1400 audit(1721577902.567:326): avc: denied { getopt } for pid=6981 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.737582][ T6987] netlink: 256 bytes leftover after parsing attributes in process `syz.3.389'. [ 287.724863][ T6991] netlink: 'syz.4.390': attribute type 3 has an invalid length. [ 287.934121][ T6996] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 287.949645][ T6996] bridge0: port 3(team0) entered disabled state [ 287.969798][ T6996] team0: left allmulticast mode [ 287.974781][ T6996] team_slave_0: left allmulticast mode [ 287.980594][ T6996] team_slave_1: left allmulticast mode [ 287.986176][ T6996] team0: left promiscuous mode [ 287.992141][ T6996] team_slave_0: left promiscuous mode [ 287.998041][ T6996] team_slave_1: left promiscuous mode [ 288.008692][ T6996] bridge0: port 3(team0) entered disabled state [ 288.294302][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.392'. [ 288.385786][ T6996] batman_adv: batadv0: Adding interface: team0 [ 288.487877][ T6996] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.515091][ T6996] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 288.528073][ T6997] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 288.535915][ T6997] netlink: 2 bytes leftover after parsing attributes in process `syz.3.392'. [ 288.545338][ T6997] team0: entered promiscuous mode [ 288.550535][ T6997] team_slave_0: entered promiscuous mode [ 288.556721][ T6997] team_slave_1: entered promiscuous mode [ 288.567029][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.574299][ T6997] batman_adv: batadv0: Interface activated: team0 [ 288.596793][ T6997] batman_adv: batadv0: Interface deactivated: team0 [ 288.603754][ T6997] batman_adv: batadv0: Removing interface: team0 [ 288.806910][ T6997] bridge0: port 3(team0) entered blocking state [ 288.885219][ T6997] bridge0: port 3(team0) entered disabled state [ 288.909420][ T6997] team0: entered allmulticast mode [ 288.924800][ T6997] team_slave_0: entered allmulticast mode [ 288.965299][ T6997] team_slave_1: entered allmulticast mode [ 289.006221][ T6997] bridge0: port 3(team0) entered blocking state [ 289.012703][ T6997] bridge0: port 3(team0) entered forwarding state [ 289.076935][ T6993] netlink: 'syz.4.390': attribute type 3 has an invalid length. [ 291.210437][ T7014] netlink: 256 bytes leftover after parsing attributes in process `syz.2.393'. [ 291.380386][ T29] audit: type=1400 audit(1721577907.287:327): avc: denied { lock } for pid=7019 comm="syz.4.397" path="socket:[14059]" dev="sockfs" ino=14059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 291.407281][ T7020] FAULT_INJECTION: forcing a failure. [ 291.407281][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 291.488384][ T7020] CPU: 0 PID: 7020 Comm: syz.4.397 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 291.498075][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 291.508157][ T7020] Call Trace: [ 291.511457][ T7020] [ 291.514404][ T7020] dump_stack_lvl+0x16c/0x1f0 [ 291.519120][ T7020] should_fail_ex+0x497/0x5b0 [ 291.523837][ T7020] should_failslab+0x9/0x20 [ 291.528370][ T7020] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 291.533774][ T7020] ? fcntl_setlk+0xad/0xe20 [ 291.538316][ T7020] fcntl_setlk+0xad/0xe20 [ 291.542680][ T7020] ? __pfx_fcntl_setlk+0x10/0x10 [ 291.547662][ T7020] ? __pfx_lock_release+0x10/0x10 [ 291.552715][ T7020] ? __pfx___might_resched+0x10/0x10 [ 291.558039][ T7020] ? __might_fault+0xe3/0x190 [ 291.562759][ T7020] do_fcntl+0x43b/0x1380 [ 291.567032][ T7020] ? __pfx_do_fcntl+0x10/0x10 [ 291.571750][ T7020] ? selinux_file_fcntl+0x97/0x180 [ 291.576911][ T7020] __x64_sys_fcntl+0x174/0x200 [ 291.581722][ T7020] do_syscall_64+0xcd/0x250 [ 291.586264][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.592188][ T7020] RIP: 0033:0x7fef85f75b59 [ 291.596625][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.616263][ T7020] RSP: 002b:00007fef86c93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 291.624720][ T7020] RAX: ffffffffffffffda RBX: 00007fef86105f60 RCX: 00007fef85f75b59 [ 291.632718][ T7020] RDX: 00000000200031c0 RSI: 0000000000000026 RDI: 0000000000000005 [ 291.640715][ T7020] RBP: 00007fef86c930a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.648714][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.656722][ T7020] R13: 000000000000000b R14: 00007fef86105f60 R15: 00007ffe18c508f8 [ 291.664721][ T7020] [ 291.667869][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.321054][ T7041] netlink: 256 bytes leftover after parsing attributes in process `syz.4.402'. [ 294.140204][ T7037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.292061][ T7037] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 294.764198][ T7051] FAULT_INJECTION: forcing a failure. [ 294.764198][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 294.801864][ T7051] CPU: 0 PID: 7051 Comm: syz.0.404 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 294.811544][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 294.821596][ T7051] Call Trace: [ 294.824864][ T7051] [ 294.827788][ T7051] dump_stack_lvl+0x16c/0x1f0 [ 294.832470][ T7051] should_fail_ex+0x497/0x5b0 [ 294.837155][ T7051] should_failslab+0x9/0x20 [ 294.841652][ T7051] __kmalloc_noprof+0xcb/0x400 [ 294.846408][ T7051] tomoyo_encode2+0x100/0x3e0 [ 294.851080][ T7051] tomoyo_encode+0x29/0x50 [ 294.855491][ T7051] tomoyo_realpath_from_path+0x19d/0x720 [ 294.861138][ T7051] ? tomoyo_profile+0x47/0x60 [ 294.865808][ T7051] tomoyo_path_number_perm+0x245/0x590 [ 294.871261][ T7051] ? tomoyo_path_number_perm+0x232/0x590 [ 294.876887][ T7051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.882863][ T7051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.888842][ T7051] ? __fget_files+0x256/0x400 [ 294.893515][ T7051] security_file_ioctl+0x75/0xc0 [ 294.898451][ T7051] __x64_sys_ioctl+0xbb/0x220 [ 294.903119][ T7051] do_syscall_64+0xcd/0x250 [ 294.907622][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.913576][ T7051] RIP: 0033:0x7fa6fcf75b59 [ 294.918007][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.937609][ T7051] RSP: 002b:00007fa6fdc71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.946008][ T7051] RAX: ffffffffffffffda RBX: 00007fa6fd106110 RCX: 00007fa6fcf75b59 [ 294.953968][ T7051] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 294.961943][ T7051] RBP: 00007fa6fdc710a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.969930][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.977893][ T7051] R13: 000000000000006e R14: 00007fa6fd106110 R15: 00007ffe9172d128 [ 294.985853][ T7051] [ 294.988869][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.163909][ T7051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.857194][ T7056] netlink: 'syz.3.405': attribute type 10 has an invalid length. [ 296.027740][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.405'. [ 296.177030][ T29] audit: type=1400 audit(1721577911.947:328): avc: denied { ioctl } for pid=7060 comm="syz.1.407" path="socket:[15359]" dev="sockfs" ino=15359 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 296.876572][ T7056] bridge0: port 3(team0) entered disabled state [ 297.075869][ T7056] team0: left allmulticast mode [ 297.083917][ T7056] team_slave_0: left allmulticast mode [ 297.090188][ T7056] team_slave_1: left allmulticast mode [ 297.095774][ T7056] team0: left promiscuous mode [ 297.100704][ T7056] team_slave_0: left promiscuous mode [ 297.106708][ T7056] team_slave_1: left promiscuous mode [ 297.117196][ T7056] bridge0: port 3(team0) entered disabled state [ 297.799061][ T29] audit: type=1400 audit(1721577913.717:329): avc: denied { append } for pid=7073 comm="syz.1.409" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 297.822109][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.833739][ T7056] batman_adv: batadv0: Adding interface: team0 [ 297.857429][ T7056] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.959305][ T7056] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 297.989207][ T7057] netlink: 'syz.3.405': attribute type 10 has an invalid length. [ 298.027733][ T7057] netlink: 2 bytes leftover after parsing attributes in process `syz.3.405'. [ 298.087111][ T7057] team0: entered promiscuous mode [ 298.102468][ T7057] team_slave_0: entered promiscuous mode [ 298.129459][ T7057] team_slave_1: entered promiscuous mode [ 298.164237][ T7057] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.185121][ T7057] batman_adv: batadv0: Interface activated: team0 [ 298.237886][ T7057] batman_adv: batadv0: Interface deactivated: team0 [ 298.254811][ T7075] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 298.276472][ T7057] batman_adv: batadv0: Removing interface: team0 [ 298.301639][ T29] audit: type=1400 audit(1721577914.207:330): avc: denied { write } for pid=7079 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 298.302527][ T7057] bridge0: port 3(team0) entered blocking state [ 298.365387][ T7057] bridge0: port 3(team0) entered disabled state [ 298.366279][ T29] audit: type=1800 audit(1721577914.277:331): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.411" name="/" dev="fuse" ino=1 res=0 errno=0 [ 298.393381][ T7057] team0: entered allmulticast mode [ 298.398930][ T7057] team_slave_0: entered allmulticast mode [ 298.405159][ T7057] team_slave_1: entered allmulticast mode [ 298.432329][ T7057] bridge0: port 3(team0) entered blocking state [ 298.438776][ T7057] bridge0: port 3(team0) entered forwarding state [ 298.502178][ T29] audit: type=1400 audit(1721577914.387:332): avc: denied { setopt } for pid=7079 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.521724][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.409839][ T7097] netlink: 256 bytes leftover after parsing attributes in process `syz.1.413'. [ 299.629600][ T7093] FAULT_INJECTION: forcing a failure. [ 299.629600][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 299.663215][ T7093] CPU: 1 PID: 7093 Comm: syz.3.414 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 299.672913][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 299.682988][ T7093] Call Trace: [ 299.686282][ T7093] [ 299.689229][ T7093] dump_stack_lvl+0x16c/0x1f0 [ 299.693936][ T7093] should_fail_ex+0x497/0x5b0 [ 299.698645][ T7093] _copy_to_user+0x30/0xc0 [ 299.703094][ T7093] simple_read_from_buffer+0xd0/0x160 [ 299.708585][ T7093] proc_fail_nth_read+0x1b0/0x290 [ 299.713653][ T7093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.719266][ T7093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.724848][ T7093] vfs_read+0x1d4/0xbd0 [ 299.729029][ T7093] ? __fdget_pos+0xeb/0x180 [ 299.733562][ T7093] ? __pfx_vfs_read+0x10/0x10 [ 299.738265][ T7093] ? __pfx___mutex_lock+0x10/0x10 [ 299.743318][ T7093] ? __fget_files+0x256/0x400 [ 299.748021][ T7093] ksys_read+0x12f/0x260 [ 299.752288][ T7093] ? __pfx_ksys_read+0x10/0x10 [ 299.757094][ T7093] do_syscall_64+0xcd/0x250 [ 299.761644][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.767571][ T7093] RIP: 0033:0x7fdae737463c [ 299.772014][ T7093] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 299.791655][ T7093] RSP: 002b:00007fdae80d1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.800095][ T7093] RAX: ffffffffffffffda RBX: 00007fdae7506038 RCX: 00007fdae737463c [ 299.808093][ T7093] RDX: 000000000000000f RSI: 00007fdae80d10b0 RDI: 0000000000000005 [ 299.816086][ T7093] RBP: 00007fdae80d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 299.824078][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.832066][ T7093] R13: 000000000000006e R14: 00007fdae7506038 R15: 00007fff32acef58 [ 299.840061][ T7093] [ 300.126648][ T29] audit: type=1400 audit(1721577916.027:333): avc: denied { create } for pid=7086 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 300.188630][ T29] audit: type=1400 audit(1721577916.027:334): avc: denied { ioctl } for pid=7086 comm="syz.4.412" path="socket:[15418]" dev="sockfs" ino=15418 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.959117][ T7131] netlink: 256 bytes leftover after parsing attributes in process `syz.3.421'. [ 304.499305][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 306.401846][ C0] ------------[ cut here ]------------ [ 306.407365][ C0] UBSAN: array-index-out-of-bounds in ./kernel/bpf/devmap.c:385:33 [ 306.415252][ C0] index 16 is out of range for type 'xdp_frame *[16]' [ 306.422067][ C0] CPU: 0 PID: 7150 Comm: syz.1.426 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 306.431737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 306.441831][ C0] Call Trace: [ 306.445147][ C0] [ 306.448026][ C0] dump_stack_lvl+0x16c/0x1f0 [ 306.452756][ C0] __ubsan_handle_out_of_bounds+0x110/0x150 [ 306.458660][ C0] bq_xmit_all+0xbec/0xdd0 [ 306.463081][ C0] ? __free_old_xmit+0x3db/0x5e0 [ 306.468043][ C0] ? common_interrupt+0xb5/0xd0 [ 306.472978][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 306.477932][ C0] ? find_held_lock+0x2d/0x110 [ 306.482711][ C0] ? virtnet_poll_tx+0x362/0x6b0 [ 306.487647][ C0] ? __pfx_lock_release+0x10/0x10 [ 306.492686][ C0] ? napi_complete_done+0x3fa/0x9a0 [ 306.497901][ C0] ? common_interrupt+0xd/0xd0 [ 306.502698][ C0] __dev_flush+0x85/0x1e0 [ 306.507053][ C0] xdp_do_check_flushed+0x26b/0x4e0 [ 306.512369][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 306.517755][ C0] net_rx_action+0xa92/0x1010 [ 306.522440][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 306.527602][ C0] ? __pfx_mark_lock+0x10/0x10 [ 306.532419][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 306.537664][ C0] ? sched_clock+0x38/0x60 [ 306.542083][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 306.547145][ C0] ? mark_held_locks+0x9f/0xe0 [ 306.552006][ C0] handle_softirqs+0x216/0x8f0 [ 306.556793][ C0] ? handle_edge_irq+0x40f/0xd10 [ 306.561762][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 306.567055][ C0] irq_exit_rcu+0xbb/0x120 [ 306.571498][ C0] common_interrupt+0xb0/0xd0 [ 306.576177][ C0] [ 306.579113][ C0] [ 306.582040][ C0] asm_common_interrupt+0x26/0x40 [ 306.587086][ C0] RIP: 0010:kasan_check_range+0x5a/0x1a0 [ 306.592726][ C0] Code: b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 <49> 8d 59 01 48 89 da 48 29 ea 48 83 fa 10 0f 8e 8d 00 00 00 41 89 [ 306.612336][ C0] RSP: 0018:ffffc90003267b48 EFLAGS: 00000286 [ 306.618405][ C0] RAX: fffffbfff1cfd014 RBX: ffffffff8e7e80a0 RCX: ffffffff81669e02 [ 306.626372][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e7e80a0 [ 306.634343][ C0] RBP: fffffbfff1cfd014 R08: 0000000000000000 R09: fffffbfff1cfd014 [ 306.642321][ C0] R10: ffffffff8e7e80a7 R11: 0000000000000000 R12: ffff88801f312000 [ 306.650291][ C0] R13: ffff88802bff7c78 R14: ffffc90003267bc8 R15: 0000000000000f00 [ 306.658274][ C0] ? mutex_is_locked+0x12/0x50 [ 306.663052][ C0] mutex_is_locked+0x12/0x50 [ 306.667645][ C0] rng_dev_read+0x44e/0x720 [ 306.672162][ C0] ? __pfx_virtio_read+0x10/0x10 [ 306.677121][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 306.682152][ C0] ? avc_policy_seqno+0x9/0x20 [ 306.686917][ C0] ? security_file_permission+0x98/0xc0 [ 306.692470][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 306.697494][ C0] vfs_readv+0x6cb/0x8a0 [ 306.701736][ C0] ? futex_wait+0x121/0x380 [ 306.706240][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 306.711001][ C0] ? find_held_lock+0x2d/0x110 [ 306.715765][ C0] ? __pfx_lock_release+0x10/0x10 [ 306.720791][ C0] ? __x64_sys_preadv+0x22b/0x310 [ 306.725815][ C0] __x64_sys_preadv+0x22b/0x310 [ 306.730670][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 306.736040][ C0] do_syscall_64+0xcd/0x250 [ 306.740557][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.746457][ C0] RIP: 0033:0x7f6f49b75b59 [ 306.750873][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.770484][ C0] RSP: 002b:00007f6f4a9ad048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 306.778920][ C0] RAX: ffffffffffffffda RBX: 00007f6f49d05f60 RCX: 00007f6f49b75b59 [ 306.786892][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000007 [ 306.794867][ C0] RBP: 00007f6f49be4e5d R08: 0000000000000000 R09: 0000000000000000 [ 306.802840][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.810810][ C0] R13: 000000000000000b R14: 00007f6f49d05f60 R15: 00007fff24463b88 [ 306.818793][ C0] [ 306.821896][ C0] ---[ end trace ]--- [ 306.825890][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 306.833099][ C0] CPU: 0 PID: 7150 Comm: syz.1.426 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 306.842727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 306.852782][ C0] Call Trace: [ 306.856059][ C0] [ 306.858897][ C0] dump_stack_lvl+0x3d/0x1f0 [ 306.863490][ C0] panic+0x6f5/0x7a0 [ 306.867389][ C0] ? mark_held_locks+0x9f/0xe0 [ 306.872155][ C0] ? __pfx_panic+0x10/0x10 [ 306.876579][ C0] ? common_interrupt+0xd/0xd0 [ 306.881372][ C0] ? __pfx__printk+0x10/0x10 [ 306.885987][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 306.891304][ C0] ? common_interrupt+0xd/0xd0 [ 306.896087][ C0] check_panic_on_warn+0xab/0xb0 [ 306.901035][ C0] __ubsan_handle_out_of_bounds+0x137/0x150 [ 306.906931][ C0] bq_xmit_all+0xbec/0xdd0 [ 306.911341][ C0] ? __free_old_xmit+0x3db/0x5e0 [ 306.916275][ C0] ? common_interrupt+0xb5/0xd0 [ 306.921139][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 306.926079][ C0] ? find_held_lock+0x2d/0x110 [ 306.930840][ C0] ? virtnet_poll_tx+0x362/0x6b0 [ 306.935770][ C0] ? __pfx_lock_release+0x10/0x10 [ 306.940788][ C0] ? napi_complete_done+0x3fa/0x9a0 [ 306.945995][ C0] ? common_interrupt+0xd/0xd0 [ 306.950764][ C0] __dev_flush+0x85/0x1e0 [ 306.955089][ C0] xdp_do_check_flushed+0x26b/0x4e0 [ 306.960286][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 306.965655][ C0] net_rx_action+0xa92/0x1010 [ 306.970325][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 306.975427][ C0] ? __pfx_mark_lock+0x10/0x10 [ 306.980185][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 306.985376][ C0] ? sched_clock+0x38/0x60 [ 306.989786][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 306.994627][ C0] ? mark_held_locks+0x9f/0xe0 [ 306.999382][ C0] handle_softirqs+0x216/0x8f0 [ 307.004141][ C0] ? handle_edge_irq+0x40f/0xd10 [ 307.009070][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 307.014349][ C0] irq_exit_rcu+0xbb/0x120 [ 307.018762][ C0] common_interrupt+0xb0/0xd0 [ 307.023433][ C0] [ 307.026351][ C0] [ 307.029270][ C0] asm_common_interrupt+0x26/0x40 [ 307.034289][ C0] RIP: 0010:kasan_check_range+0x5a/0x1a0 [ 307.039927][ C0] Code: b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 <49> 8d 59 01 48 89 da 48 29 ea 48 83 fa 10 0f 8e 8d 00 00 00 41 89 [ 307.059537][ C0] RSP: 0018:ffffc90003267b48 EFLAGS: 00000286 [ 307.065620][ C0] RAX: fffffbfff1cfd014 RBX: ffffffff8e7e80a0 RCX: ffffffff81669e02 [ 307.073602][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e7e80a0 [ 307.081587][ C0] RBP: fffffbfff1cfd014 R08: 0000000000000000 R09: fffffbfff1cfd014 [ 307.089554][ C0] R10: ffffffff8e7e80a7 R11: 0000000000000000 R12: ffff88801f312000 [ 307.097523][ C0] R13: ffff88802bff7c78 R14: ffffc90003267bc8 R15: 0000000000000f00 [ 307.105487][ C0] ? mutex_is_locked+0x12/0x50 [ 307.110252][ C0] mutex_is_locked+0x12/0x50 [ 307.114834][ C0] rng_dev_read+0x44e/0x720 [ 307.119332][ C0] ? __pfx_virtio_read+0x10/0x10 [ 307.124262][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 307.129277][ C0] ? avc_policy_seqno+0x9/0x20 [ 307.134030][ C0] ? security_file_permission+0x98/0xc0 [ 307.139574][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 307.144591][ C0] vfs_readv+0x6cb/0x8a0 [ 307.148844][ C0] ? futex_wait+0x121/0x380 [ 307.153370][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 307.158127][ C0] ? find_held_lock+0x2d/0x110 [ 307.162888][ C0] ? __pfx_lock_release+0x10/0x10 [ 307.167907][ C0] ? __x64_sys_preadv+0x22b/0x310 [ 307.172926][ C0] __x64_sys_preadv+0x22b/0x310 [ 307.177772][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 307.183140][ C0] do_syscall_64+0xcd/0x250 [ 307.187651][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.193541][ C0] RIP: 0033:0x7f6f49b75b59 [ 307.197948][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.217553][ C0] RSP: 002b:00007f6f4a9ad048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 307.225958][ C0] RAX: ffffffffffffffda RBX: 00007f6f49d05f60 RCX: 00007f6f49b75b59 [ 307.233921][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000007 [ 307.241889][ C0] RBP: 00007f6f49be4e5d R08: 0000000000000000 R09: 0000000000000000 [ 307.249859][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.257849][ C0] R13: 000000000000000b R14: 00007f6f49d05f60 R15: 00007fff24463b88 [ 307.265818][ C0] [ 307.269182][ C0] Kernel Offset: disabled [ 307.273501][ C0] Rebooting in 86400 seconds..