last executing test programs: 2m38.700766222s ago: executing program 3 (id=9): r0 = socket(0x28, 0x1, 0x7fffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80002, 0x0) sendfile(r3, r3, 0x0, 0x2000006) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0xd0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {0xd}, {0xffff, 0xffff}, {0x8}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x6, 0x5, 0x0, 0x1bd6, 0xfffffff8, 0x3}}, {0xa, 0x2, [0x5, 0xf801, 0x6]}}, {{0x1c, 0x1, {0x5, 0x3, 0x0, 0x2, 0x2, 0x6, 0xb1bc, 0x5}}, {0xe, 0x2, [0x8, 0x3, 0x4, 0x7fff, 0x2]}}, {{0x1c, 0x1, {0x3, 0x9, 0x6, 0x10, 0x1, 0x7, 0x6, 0x6}}, {0x10, 0x2, [0xffc0, 0xa31, 0x8, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x2, 0x1, 0xd71f, 0x9, 0x2, 0x5, 0x7600affd, 0x3}}, {0xa, 0x2, [0x3ff, 0x7, 0x2]}}]}]}, 0xd0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6c, &(0x7f0000000880)=ANY=[], 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000600)={0x8, 0x41}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) gettid() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x0, 0x0, [{{r1}, 0x2}, {{r5}, 0x8}, {{r1}, 0x80000001}, {{r0}, 0x1}, {{r4}, 0x3}, {{r3}, 0xfffffffffffffff5}]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80101, 0xb) fsopen(0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x10000, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x2, 0x0, 0x7}}, {0x3, 0x4, 0x0, 0x0, @adapter={0xd6a, 0x9, 0x8d, 0x1ff, 0x4}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 2m38.382010026s ago: executing program 3 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r3, 0x0, 0x0, 0x4}]) io_pgetevents(r4, 0x9, 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x8]}, 0x8}) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x4, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000209, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x9]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000014b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f01c20f20e035000020000f22e066ba4200ecc4e3f95d336aea60000000a1008feaa81209088000000f20e035000004000f22e00f0099f0000000c4c2310bfa66baf80cb85803468fef66bafc0ced", 0x4f}], 0x1, 0x75, &(0x7f00000000c0)=[@dstype3={0x7, 0x5}], 0x1) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000100)=0xc2cb, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x10000, 0x9, 0x9, 0xfd, 0xe4, 0x43, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x10000, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x6, 0x7, 0x0, 0xfb, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x4, 0x0, 0x1, 0x42, 0xb, 0xff, 0x1, 0x7, 0xe}, {0x10000, 0x7000, 0x8, 0x3, 0x5, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0x9, 0x8, 0xb1, 0x48, 0x21, 0x81, 0x83, 0x0, 0x1}, {0x30000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x70000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0x8f90000000000, 0x4, 0x80, 0xfff]}) 2m37.45228761s ago: executing program 3 (id=20): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e044e3520"], 0x7) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_open_dev$I2C(&(0x7f0000000080), 0x3, 0x4340) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) 2m36.559850783s ago: executing program 3 (id=30): syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x40000, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0xcc, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@TCA_STAB={0xc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xff, 0xd, 0x1, 0x0, 0x0, 0x4, 0x2}}, {0x8, 0x2, [0x2, 0x9]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0x0, 0x1, 0x7, 0xe2, 0x4}}, {0xc, 0x2, [0x7, 0x101, 0x8b, 0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x2400000, 0x2, 0x0, 0x400, 0x7}}, {0x12, 0x2, [0x9, 0x4, 0x2, 0x2, 0x9, 0xbe, 0x1628]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfffa, 0x7fffffff, 0x0, 0xcd2f, 0x0, 0x3}}, {0xa, 0x2, [0xff, 0x4e7, 0x0]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24044097}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x10c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r4}, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001024, r5, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)='\x00', 0x1) 2m36.46554824s ago: executing program 3 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0xc00e, 0x0}, 0x20) 2m35.750558413s ago: executing program 3 (id=39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) 2m35.679760161s ago: executing program 32 (id=39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) 2m28.398648095s ago: executing program 1 (id=140): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0300a50a60d5b58628b6f31a7b9dc5d97fd487cc9255464dc31ad23763"], 0x4) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$sock(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)='1UB', 0x3}, {&(0x7f0000000700)="6f646db4", 0x4}, {&(0x7f0000000740)="8ea62f7ad65e555d362bf21f8bf2a83ca447d085c3fa6579a40b1a4e14412521fa2dc947c5c01892ea858bbc53491d25a685116f37542f501ca4b880ccf61d1ad29f15dcfab6621ff7b6addaa56fb5516413849505983690c650261ae5cc02a26e86d8f1d9490828989600b5741062767222e9862a96d8b088cb8732bee720da865e0ef56ee925e722d51d4405d4d9efc1f7e54eb8860bb0843297255ba23c72d79cd05aea4be501adf2845c9af2f9bd2946f59d26d260047ad7ed813a", 0xbd}], 0x3}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000c000000080000000100000001400400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"/18], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, 0x0, 0x0, 0x4}, 0x20) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x7, 0x1}, 0x7, 0x1, 0x0, 0x0, "e2a6c20223b19db3"}, 0x10}, 0x1, 0x0, 0x0, 0x87cc434a7ba58f5d}, 0x80) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="e7ffffffffff"}) connect(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$admmidi(0x0, 0x7, 0x404501) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000300)={0xd, @sliced={0x1ff, [0x0, 0xe, 0x8, 0xad31, 0xfff, 0x6, 0x8001, 0x10, 0x3a, 0x3, 0x5, 0x75, 0xfffd, 0x5, 0xffff, 0x9, 0x7, 0x7, 0x40, 0x3ff, 0x1ff0, 0xfffe, 0x1ff, 0x3, 0x9, 0x768, 0x9fd4, 0x0, 0x0, 0x7, 0xf, 0x7800, 0x91a, 0x2, 0x5, 0xbc, 0xfffb, 0x2, 0x8, 0x4, 0xffff, 0x1, 0x5, 0x1, 0x8001, 0xff, 0xb1d4, 0xf], 0xca2}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000c80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="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"], 0x180}}, 0x4c0c0) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, 0x0) 2m26.989316271s ago: executing program 1 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{0x0}], 0x1}}], 0x1, 0x20080058) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000000340)=0x14) 2m26.988649922s ago: executing program 1 (id=155): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0x36, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) 2m26.920582072s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m26.848173599s ago: executing program 1 (id=160): r0 = socket$inet(0x2, 0x800, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x8000000, 0x1, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x8) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) close(0x4) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, 0xfffffffffffffffe) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000001dc0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x100, @empty, 0x3}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000c40)="3f1b0c7431dfc4a10a032f6a4897277aba2f7ecf0ed678110ccdcc81f433a0b80a4c51009105e0beb1cef5abf0e53e7cd9df49b2a7ef416ec2a426cd4c0c8c4938d34761474f2574835bfcf404edb7005e05e8910ff37d36899667c39541054199cbc42247b73c1593f7b7819e3eaba6ed3010b693d78119d991fade17bc370a4f80ad51c23205282fdf8db9143a20478f1653b441caefb79c7ab956abc180351032237b8249ff5c1c3432880dee0066b523a0389ee0f87f57723a23852b13ea0c61bb1ed445e5a041f73a19b26c3192bd344f00e8597c50aa4eb8fdf4d07a2fc4bf261e944d3a9daa246d6ef6ea609d49e1762dc8f23dcc693f512308de5ca8438b99ea5effa589fb10df2a884b2a8aefffc90c1b7b7d15df7b691223af05a22e378427852935828adcc71d0c489ad3c34b0ab6779fb4f2c1d05c5ebf9be5f7a33f69a27119ae74cc93e887c6366428569d2f853ba735fde4efa88701670b935ba3752e1e046374da4acabe201d79772d7bac8f04c82c5cbfa7ee65b1018208f4db5586f3e0d3759e307928d4cbd5e48e9a31867601f2c2467904eb68ea57ee9bd6d448f63e08db70e787ab5a2c2b1647f70ccab583d940742b27a5d20ef9e0aad755339e93610f4f2e0e7f0a285d081aa8faf4bdaf4155ddc789cc1bca7d111930f8fb14077dc0968c30bab25e1761c2c713d050d541cc63ff4815b2b9de451316edd3a2fee652de8a56b204ea204e4a5c81dd7b001fa5756feeec6c2967c2dd1336540c5d9b2ae6f3676135386f19ca93b86b19692227fae82639272dfa092e4d94a19ecf82896add9824d9f836112aaf28fce0e6f592a42a46d3665ae3a34463116164ff483f011359f01e28e2c6c3d973830496166f41a6ccbff1c1d684c47e7b3e94e487dd2bb453df4bf07d5be73d8efd75354f951ac5fdc63461150eb7d6fc79d69c75751d426e08d820ebb6f38368e33c74759172d7aa1ced5f6ec5e20b195482f1996d372bacc5e47eb4e711bb8de90b20ac3ba0490d253b4232ac88c7f9bc26c3d870356b809d063b110d286ce539c603bf1a3b50e2db7b33942793e542961a4f325e0195885504b2209468b44e8cb39a7d3ec519aedcde17d42db0067b562361a1609cb088a0589dbb24f62c131fae88ad45799ff05b31b06833d9f1b24cb85306cc4c68571d2388cb44eba57b5c93db9bebc8bb00a00236a1799dc39a87fc8670f1a28354cf1e91e5d3a30d6f2ddde11528bb6a257da024ca11fd4800f8ac3a19a04c08c4d9078c949acfce35f2dd49d648ad8813127a30e8209b51e0001624a91b29034cc4fc998a6cabe75c38200b995a65c6c96f70e4b4465968b286e79fe84fdc3d95cb3a67d79c408e9b1d1cae4e581425905ec66786a9c3664180c9df954b6b1a72e2f11127c147ba4d70be19851eea3956e9875e29ace3fdb4db77cedf3001c3fc3c08a749db1fa0b0f719f38fa78a283b5b64fe93cb6cbde8ed1f15aacd6dd398b9043b1feed5abfa380664b77f28257ca46ad6afd455ee2827262c4944d1a959a3b949122afbedc20322fa206acc947e09d702cdde5ad9781d5a7a2e7a761f6d058b2385ebd61fa016881b2be5619170c0f88654c2e6da627b8a780cfb1b22cb5bb6103e95a5b5b31961ce6214897341eb060295c2e7646fd4c260d2412646aced0bb14212d0c34dc1e60cb64d4570d7b31ee03dcecfbd49c037694a9a6dbfb7e89753aa771fccebb71dfd0f29f6a9fc878c11eb9b1bbbcc3002a38b7a0d6704dc4f44c26de75263b7b51874b01069e0a743061fdf984433230c348fa36158422f0972151d304ce1f04fed605107acdfe99c776c2be639f432e9b260c7d237ee1fd919e6a486f9a7f30dcc504b177af9d3fc36e8a8b6cf6721fcded5eceaa8c383df7ce3d7413a28ee2be6478494b485d5d64e70a6103d83dc52545821ff55e983bcf7973593a9652cb8d8b8f49325fb4c1d5f5035f15175c377297cc795ea32c95eb4ab4beffaf9110438bd859a0c7dfd0b1e4417", 0x5a0}], 0x1, &(0x7f0000001d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}, 0x40000) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a30000000004c000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000031800048009000100736e6d70000000000500030011"], 0x94}}, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) 2m26.419483817s ago: executing program 1 (id=166): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0x36, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) 2m26.316194078s ago: executing program 33 (id=166): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0x36, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) 2m23.780665602s ago: executing program 2 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x20}, 0x1, 0xf5, 0x0, 0x4001}, 0x8010) 2m23.779064518s ago: executing program 2 (id=198): r0 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x4000, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 2m23.720602315s ago: executing program 2 (id=199): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r1, 0x3f}, 0x10) (fail_nth: 4) 2m23.640047125s ago: executing program 2 (id=200): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000680)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cbd7000fddbdf250000000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20040000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20000000000000}) syz_emit_ethernet(0x82, &(0x7f0000000380)={@local, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "1b56d9", 0x48, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x7fff, 0x84, 0x1, @mcast1, @loopback, [], "a47b294c5b91324a5d6b000000000000000000e800000000"}}}}}}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) rt_sigsuspend(&(0x7f00000000c0)={[0x9d]}, 0xffffffffffffff98) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x201, 0x0) write(r7, &(0x7f0000000240)='1', 0x1) sendto$inet(r1, 0x0, 0x0, 0x200507f9, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0xf) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 2m23.504613764s ago: executing program 2 (id=201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="78be47b00ab3c2c0d23830f1cbff338242566449d6f055322018063871176a9df232fa976736986d5a6b5759a15c86d8a52d07f2181656ebb26cb897a4e2ac168048b4a7ddca6ee04548c9aea2ef40c66692e03e240345ac929df8cffae0641539cee77d9d9d513720ddedf7a1ad44f1ef4d83f8ed25e32be24b5affc811c027e95586a014eba165843646c44e7bf0b0a73c9a3c3170b6e6b6e4dd9ca6f99c48c03e8518d8418f56ba02cb97ffee0fb22748dc676263cd8396b6e7cb8c5132c3f259cd309a559fc28052e457f95a4ea4f6427f78", 0xd4}], 0x1}}], 0x1, 0x20080058) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000000340)=0x14) 2m22.950044107s ago: executing program 2 (id=204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$qrtrtun(r0, &(0x7f0000000600)=""/4096, 0x1000) r1 = io_uring_setup(0x19c0, &(0x7f0000000480)={0x0, 0x709f, 0x1, 0x2, 0x25a, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000100)={&(0x7f0000002000)={[{0x0}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x541e, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xf, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/msr/read_msr/enable\x00', 0x8000, 0x44) read(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x1, 0x5}) ioctl$SIOCSIFHWADDR(r8, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x20000000) 2m22.919818642s ago: executing program 34 (id=204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$qrtrtun(r0, &(0x7f0000000600)=""/4096, 0x1000) r1 = io_uring_setup(0x19c0, &(0x7f0000000480)={0x0, 0x709f, 0x1, 0x2, 0x25a, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000100)={&(0x7f0000002000)={[{0x0}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x541e, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xf, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/msr/read_msr/enable\x00', 0x8000, 0x44) read(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x1, 0x5}) ioctl$SIOCSIFHWADDR(r8, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x20000000) 2m13.517812825s ago: executing program 4 (id=290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001100)=""/124, 0x7c}], 0x1, 0x4f, 0x2) pwrite64$ublk_ch(r1, &(0x7f0000000100)=@buf_max_buf="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", 0x1000, 0x96ad) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) 2m11.380772684s ago: executing program 4 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES32=r1, @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x100, 0x3, 0x277}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000002c0)=""/241, &(0x7f00000003c0)=0xf1) close_range(r2, 0xffffffffffffffff, 0x0) 2m11.380565457s ago: executing program 4 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000f5240001801400018008000100e000000108000200e00040010c00028005000100000000002400028014100180080001000000000008000200ac1e0b14caf30e2a56e45769b7aec5bf00010c0002800500010000000000080007400000000150b9dfeeb18437a52beb43192f0b9108cafa1da696455de852666b8e58acf9198053cf6b8b118b4b78fdfc3b72ff180a1449f6e86a5f6765e8e16e05729f54ea8c245eddd84776a872b7d645915660f4ba34e7fac1c74613e0e4733e2f3c18a28d47fc9e1c"], 0x64}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x220083, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) connect$x25(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0x10, 0x3, 0x0) 2m9.268910223s ago: executing program 4 (id=325): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r1, &(0x7f0000000680)='nullb1\x00', 0x200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac) sendfile(r2, r2, 0x0, 0x400000000000007) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e22, @remote}}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000140), 0xf9f7, 0x202000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000100)=0x80000001, 0x4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0xc00, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000809}, 0x40) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f00000004c0)={0xa, "07c1efdb7b1ee7f9f95604285ea8c62c814b901793dbb0d260daf8746fc4bed0", 0x2, 0x1}) ppoll(&(0x7f00000003c0)=[{r4, 0x5010}], 0x1, &(0x7f0000000400), &(0x7f0000000440)={[0x10]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r2, &(0x7f0000000180)=r5, 0x12) 2m9.118991104s ago: executing program 4 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffd, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}, 0xc4) 2m8.830556948s ago: executing program 4 (id=331): bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41, 0x0, 0xffffffffffffffff, 0x1300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x2000}, 0x48) 2m8.79878429s ago: executing program 35 (id=331): bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41, 0x0, 0xffffffffffffffff, 0x1300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x2000}, 0x48) 3.409302829s ago: executing program 5 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = gettid() r4 = socket$inet6(0xa, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0x2, 0x4e1d, @local}, 0x10, 0x0}}], 0x1, 0xc080) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x1, &(0x7f0000000240)={0x0, 0x1d, 0x2, @thr={&(0x7f0000000140)="f00877b87469864dd2522a9bd51b157f1cc033", &(0x7f0000000180)="ac0fa16776f243628b947a5f5e7c38beae9b73e6649e883c5089a09f2209a653a70e273e59947b06c795046286de8b0544b03b4cc43460b89b296046f1e5e9e1318d421b8618f93b8ecd87aaa2677eb4d42dd207fb5988705177"}}, &(0x7f0000000280)) (async) timer_create(0x1, &(0x7f0000000240)={0x0, 0x1d, 0x2, @thr={&(0x7f0000000140)="f00877b87469864dd2522a9bd51b157f1cc033", &(0x7f0000000180)="ac0fa16776f243628b947a5f5e7c38beae9b73e6649e883c5089a09f2209a653a70e273e59947b06c795046286de8b0544b03b4cc43460b89b296046f1e5e9e1318d421b8618f93b8ecd87aaa2677eb4d42dd207fb5988705177"}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0xffe0, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 2.489796922s ago: executing program 5 (id=2853): userfaultfd(0x80801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) pipe(&(0x7f0000000580)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) r1 = io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xe7, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.388218154s ago: executing program 5 (id=2858): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffffb1, 0x35f242) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000000)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) close(r2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x281, 0x2}) 2.3259785s ago: executing program 7 (id=2859): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x46) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000200)=""/40, 0x28) 1.429440235s ago: executing program 7 (id=2863): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa655ade72aaaaaaaaaaaaaaaaaaaa220800450000b0000000000011907864010101ffffffff00004e24009c907801000000000000007b4b143b7461fd776b1c012bd14efbb049fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d26440cbb2c5a57df6072f4af6"], 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) sendmsg$kcm(r0, &(0x7f0000003c80)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @empty, 0xfffffffe}, 0x80, 0x0}, 0x8040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_to_batadv\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0xa, './file0\x00'}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/2:0:0:0\x00', 0x181a00, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000140)=0x5) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @empty}, 0x10) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r7], 0x128}, 0x4801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 1.137403873s ago: executing program 0 (id=2868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newsa={0xf0, 0x29, 0x633, 0x0, 0x25dfdbfd, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80008001, 0x0, 0xc0, 0x5, 0x0, 0x200, 0x8}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x300}, 0x70bd29, 0x3503, 0xa, 0x5}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) 1.137125661s ago: executing program 0 (id=2869): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.052604206s ago: executing program 6 (id=2870): r0 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) 1.05171209s ago: executing program 0 (id=2871): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c940000, 0x2, 0x3, 0x3, 0x1, 0x203}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000340)={0x3db33060, 0x0, &(0x7f00000002c0)=[r2, r3, r1]}, 0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xc5c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc30, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x10e, 0x6, 0x2, 0xbd7, 0x9e, 0xffffff01, 0x101, 0xfff, 0x200, 0x2, 0x1, 0x7ff, 0x40, 0x9, 0x2, 0x1000, 0x6, 0xff, 0xe, 0x4, 0x9, 0x8001, 0x9, 0x4, 0x8, 0xfffff454, 0x4, 0x7, 0x6, 0x2, 0x8, 0x3, 0xb30, 0x7, 0x8001, 0x6, 0xd9, 0x80, 0xa9, 0x6, 0x2, 0x4, 0x908, 0x0, 0x8, 0x7, 0x0, 0xfffffffd, 0x10000, 0x5, 0xdd6, 0x4, 0x200, 0x1400000, 0x800, 0x2, 0x0, 0x7ff, 0x7, 0xc653, 0x0, 0x7, 0x768a, 0x10, 0x64, 0x6, 0x8000, 0x1ff, 0x6987657e, 0x3, 0x7, 0xfff, 0x6, 0x493, 0x8001, 0x9, 0x1, 0x5b0, 0xa2f4, 0x3, 0x42, 0x5, 0xd3, 0x6, 0x6, 0x4, 0x5, 0x7ff, 0x7, 0x8, 0x5, 0x1ff, 0x8, 0x200, 0x6a6, 0x293, 0x7, 0x70, 0x1, 0x2, 0x80000000, 0x8000, 0xff, 0x5, 0x8000, 0x8, 0x9, 0x100, 0xfffffffe, 0x1, 0x1000, 0x0, 0x429, 0x7, 0x1, 0xa2fe, 0x80000000, 0x0, 0x7ff, 0x3102, 0x6, 0x10000, 0x3, 0x400, 0xaf34, 0x4, 0xc, 0x9fe, 0x2, 0x6, 0xe, 0x1, 0x2, 0x8, 0x0, 0x3, 0x8, 0x1, 0x6, 0x401, 0xa2d, 0x0, 0x9, 0x7, 0x80000000, 0x6, 0x2, 0x8, 0x4, 0xd94, 0x401, 0x3, 0x4, 0x8, 0x5, 0x9, 0x9e, 0xd, 0x8, 0x6, 0x9c, 0x5, 0x6, 0x725800, 0x0, 0x3, 0xd3, 0x7fff, 0x0, 0x2, 0x5, 0x137, 0x2, 0xe7, 0x101, 0x7, 0x8, 0xd3, 0xb, 0x1, 0x2, 0x0, 0x3, 0x3, 0x9, 0x2, 0x5, 0x9, 0xdbdc, 0x6, 0x7ff, 0x6, 0x7, 0x8000, 0x1, 0x1, 0x1, 0x4, 0x0, 0x4, 0x2, 0x6, 0x10000, 0xa, 0xfffffff9, 0x7, 0x0, 0x6, 0x6, 0x7ddb, 0x4c3, 0x5, 0x7f, 0x1ff, 0x2, 0x9db, 0x2, 0x4, 0x2, 0x9, 0x3, 0x200, 0xe, 0x79, 0xa6, 0x7, 0x9, 0x5, 0xffffffff, 0x2f8, 0x8, 0x10000, 0x744f, 0x4, 0x9, 0xe, 0x3ff, 0x4, 0x7d5365a6, 0x9, 0xf514, 0xf4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x8, 0x7ff, 0x1, 0xab, 0x8, 0x8, 0x9, 0x6, 0x6a]}, @TCA_TBF_RATE64={0xc, 0x4, 0xfb385e0ff2fc6c03}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x8, 0x46f, 0x9, 0x3, 0x2, 0x40, 0x1, 0xfffffff8, 0x9, 0x0, 0xf, 0x6, 0xfffffffa, 0x5, 0xdfdaef, 0x1, 0x8, 0x3, 0x8, 0x52, 0x80000001, 0x9, 0x2, 0x2, 0x3, 0x9, 0xe, 0xd, 0xca, 0xffffffff, 0x1, 0x8a0, 0x0, 0x9af, 0x1, 0x699a, 0x1000, 0xff, 0xd36, 0x4, 0x7f, 0x56a9, 0x4, 0x101, 0xb3, 0x9, 0x3, 0xf, 0x7fff, 0x800, 0x9, 0xbba, 0xfffffffb, 0x5, 0x7, 0xd, 0x6, 0x5, 0x4df1, 0xfffffff5, 0x74d, 0x8, 0x4, 0x91f, 0x5, 0x9, 0xa73, 0x9, 0x4, 0x6, 0x4, 0xe, 0x9, 0xd, 0x1, 0x9, 0x1, 0x6, 0x6703, 0x44, 0xfff, 0xe, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x5, 0x40, 0x8, 0x1, 0x0, 0x0, 0x8000, 0xffffc39c, 0xfffff001, 0x7, 0x2, 0x10, 0x80, 0x6, 0x7fff, 0x80000000, 0x7, 0x7, 0xd54, 0x4, 0x2cb, 0x19, 0xfffffff5, 0x8fa, 0x5, 0x9, 0x200, 0x1, 0x46, 0x400, 0x1, 0x7fffffff, 0x8, 0x1, 0x9, 0x5, 0x30b9, 0x9, 0x7fffffff, 0x2, 0x8, 0x2, 0x7, 0x6, 0xfffffff9, 0x6, 0x9, 0x6, 0x8, 0x1, 0x3, 0xc4f3, 0x10000, 0x4, 0x1, 0x80000001, 0x80000001, 0x3, 0x3, 0x1, 0x16c6, 0x1, 0x6, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x8b9, 0x4, 0x0, 0x5e72, 0x9, 0x5, 0x3ff, 0x2, 0x8001, 0x6, 0x7, 0x9, 0x8, 0x3, 0x9, 0x1, 0x1, 0x8001, 0x9, 0xb8, 0x1ff, 0x6, 0x3, 0x4, 0x8, 0x2, 0x380000, 0x7, 0x9, 0x8, 0x7, 0x40, 0x7, 0x4, 0xfffffffc, 0xb, 0x6, 0x2, 0x400, 0x7, 0xe, 0xe, 0x8, 0x1128dc49, 0xef3, 0x7f, 0xd4d08459, 0x1, 0x8fd, 0xa1a, 0x466, 0x4, 0xfffffffb, 0x40000000, 0x0, 0x80, 0x40, 0x7, 0xfffffff6, 0x82, 0x4, 0x1, 0xd8, 0x619, 0x2a, 0xa, 0x81, 0x5, 0x2, 0x4, 0x1000, 0xb964, 0x1, 0x9, 0x200, 0x80, 0x5, 0x3, 0x0, 0x224f0667, 0x5, 0x2, 0x8000, 0x40, 0x0, 0xeeb5, 0xfff, 0x6, 0x3, 0x9, 0x8, 0x2, 0x80, 0xd3, 0x3, 0x4, 0x6, 0x1, 0x6, 0x1000, 0xff]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc5a6dace8cadddad}, @TCA_TBF_PBURST={0x8, 0x7, 0x1f9c}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x3, 0x5, 0x815, 0xffffff66, 0x4, 0xb2ae, 0x1, 0xffff0734, 0x3, 0x7f, 0x43477bc, 0x80, 0x7, 0x7fe000, 0x6, 0xffff, 0x38000, 0x101, 0xffffff26, 0xe78, 0xe, 0x80000000, 0x8, 0x2, 0x6, 0x7f, 0x7fff, 0x7, 0x3, 0x9, 0x3, 0x1, 0x5, 0x8, 0x3, 0x10001, 0x9, 0xf, 0x9, 0xace, 0x76d, 0x3, 0x1, 0x3, 0xdbc, 0x5, 0x2, 0x7f, 0x6, 0x3ff, 0xfffffff7, 0x6, 0x329, 0x0, 0x5e, 0x8, 0xf, 0x6, 0x0, 0x6, 0xaa, 0xfffffffd, 0x4, 0x1886, 0x9, 0x8001, 0x4, 0x8, 0x8, 0x6b, 0x10, 0x3, 0xb, 0x0, 0xff, 0x0, 0x7, 0x6, 0xd2c2, 0x100, 0xfffffff9, 0x3, 0x4, 0xd150, 0x6, 0x9, 0x7, 0x1, 0x8, 0x1ff, 0x8, 0x0, 0xa8a, 0xb6f6, 0x6, 0x7, 0x8, 0x4, 0x3, 0x2, 0x1, 0x0, 0x7, 0x2, 0x7, 0x3, 0x1, 0x9, 0xce9, 0xa3a, 0xd21e, 0x1, 0x30000, 0xffff8001, 0x2, 0x8, 0x401, 0x7, 0x8, 0x2, 0x3, 0x9, 0x2, 0xffff, 0xcc5d, 0x10, 0x43c0d381, 0x2d, 0x1000, 0xffffffff, 0x3ff, 0xc91a, 0x9, 0x4, 0x4, 0xfffffd98, 0x9, 0x400, 0x2, 0x8001, 0x7, 0x1, 0x2, 0x4, 0x5, 0x81, 0x15c, 0x0, 0xd, 0x4, 0xffff, 0x8, 0x2, 0x3, 0x3, 0x9, 0x6, 0x4, 0x5, 0x0, 0x1, 0x9, 0x1, 0x1, 0x9, 0x5, 0xfff, 0x10001, 0xb38, 0x0, 0xffff, 0x4, 0x7fff, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x2, 0xfffffff8, 0xfffffff7, 0xe, 0x72f3, 0x4a2d, 0x9, 0x1, 0x2, 0x4, 0x80000001, 0x9, 0xfffffffe, 0x4, 0x2, 0x5000000, 0x3a84, 0x0, 0xa3c, 0x4a, 0x2e, 0x1ff, 0x10, 0x8000, 0x6c, 0x10000, 0x80000001, 0x2deac498, 0x8, 0x3, 0xb8, 0x200, 0x8, 0x5, 0x2, 0x1, 0xfffffffd, 0x7, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x9, 0x0, 0x7, 0xfffffff5, 0x0, 0x2e, 0x5, 0x9, 0x2400000, 0x4, 0xfffffffd, 0xf5, 0x1, 0x6, 0x899b, 0x2, 0x5, 0x75e, 0x5, 0x401, 0x0, 0x8001, 0x0, 0x1240, 0x5, 0x2, 0xfc000000, 0x0, 0x1ff]}]}}]}, 0xc5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e01b000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000003"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x20) r9 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000300), 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x82) fadvise64(r2, 0x9, 0xe, 0x1) 1.009721411s ago: executing program 6 (id=2872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2501000000050004000100000006"], 0x24}, 0x1, 0x0, 0x0, 0x4020004}, 0x10) 899.118854ms ago: executing program 6 (id=2873): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000000)=""/116, 0x74}, {0x0}], 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) r4 = open_tree(r2, &(0x7f00000000c0)='root/proc/sys\x00', 0x81000) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000240)={'bridge_slave_1\x00', {0x2, 0x0, @multicast1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x20, 0x4, 0x0, @multicast2, @loopback}}}}) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000102010200000000000000000100000106000740000200007fb2b7bd79aee6a85f9c0147baf87b277bddd188f57036ca5ebb783b60f520185277ae77f26b3b60ccc59ba14b5b0a02986cad310762301f54087aa13026a803629af943bae842770be0f87aeb4c2bfcc0cd8d2339ff985f79d898785382b6c94da8cecec1d4f07916b542b7de7e0f6cdad273f4ffb40f010ecf1435906a4b3f940a91a11a6b3cb6acff2552d48c7d8f5e247a4f9cf58e21bc423e5af52b92be4bbd1a5bb4d2172740"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c890}, 0x20004000) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1ffd, @remote}, 0x10, 0x0}, 0x3000c041) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) 898.784476ms ago: executing program 0 (id=2874): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}}, 0x4800) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r8, 0xe) 790.300994ms ago: executing program 6 (id=2875): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) 790.141112ms ago: executing program 5 (id=2876): r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_WAITID={0x32, 0x9, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, {0x0, 0x0, 0x4}}) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 723.210947ms ago: executing program 6 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x18010}, 0x0) 718.869919ms ago: executing program 5 (id=2878): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000300)=[@ioring_restriction_register_op, @ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_register_op={0x0, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x12}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}], 0x5) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, r4, 0x1, 0xffffffff, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x21}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x88b77261275ea80a}, 0x44800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f80)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004780)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x8000) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r2, r2, 0x3, 0xfffffffffffffffa, 0x3fff}) r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9$\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\xe7\xf5+Op\xc0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\r\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\x01\x00\x00\x00\x00\x00\x00\x00#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x17\x82\xfd\xcf\xbc\xbfmiS7\xa6\x87\xcdO\xa0E^\x90\xa8`-_b{.\vy\x11\xd0\x01*\xb7\x8e\xaf\x90\xf2\xa2\xf4\x9c\xe7\x11|z#\xd6@b\x15\x9b\xf9\xf4\xaa\xf7\x85\x06\x00\xf7\xc4\xf0\xf2\xa1I\x81\xe6i=~:\xbb\xc0\xec\x01\xddC\x84\xebWS\xb4\xf2N\xcaeu\x8b\x1a\x90V\x16FM\xa2[\x9c\xe8\xc4\x84j\x11\x95R\xdf\'Q=\v\xdf\x91\x7f\x03\x83\x9c}_\xafj\xef\xac\xdb\r\xf6\xa5\xed\x9c\xde\xa7x\x81\xb0b\x89\v\xf8P\x97NCv\xb1\xa6\x9d\x9d\xf1\xb8\xf1c\xfaE\xe9\xec\x92\xdd\x9f@\x8b\xfd\xa5\'\xddn\t\xe8\xb0M\x17W\xcaX\xad+\xbf|\x97\x0ec\xed\x18\xfea\x9axp\xb6t\xe5|\x05R\xef\xe9\xbe\xe4\xec\xdc\xe4D\x96\xdd\xdaG}\xef\xd9\xaf\xae\x95.\xd8%\xf7BtFjSd', 0x7) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000480)=0x6, 0x4) 717.328723ms ago: executing program 6 (id=2879): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0000000000000000000000020600000000000001", 0x14) read(r2, &(0x7f0000000308), 0x14) sendto$inet(r0, &(0x7f0000000300), 0x1c, 0x0, &(0x7f00000000c0)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/256, 0x100}], 0x1, &(0x7f0000000900)=""/256, 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (async) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) (async) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) (async) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) write(r3, &(0x7f0000000500)="0000000000000000000000020600000000000001", 0x14) (async) read(r2, &(0x7f0000000308), 0x14) (async) sendto$inet(r0, &(0x7f0000000300), 0x1c, 0x0, &(0x7f00000000c0)={0x2, 0x1234, @loopback}, 0x10) (async) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/256, 0x100}], 0x1, &(0x7f0000000900)=""/256, 0x100}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setns(0xc9, 0x0) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, 0x8) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) (async) 639.756229ms ago: executing program 0 (id=2880): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x6f82, &(0x7f0000000400)={0x0, 0x5544, 0x8, 0x2, 0x10000051}, 0x0, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xfffffffffffffea2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0x8, 0xfffffffc, 0x100004, {0x5, 0x8, 0xfffffffffffffffc, 0x9, 0xffffffffffffffff, 0x0, 0x100084, 0x4, 0x4, 0x2000, 0x9, 0x0, 0x0, 0xf0ee, 0x1001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) umount2(&(0x7f0000000040)='.\x00', 0x2) 639.478739ms ago: executing program 5 (id=2881): r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x40804}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000280)='pvfs2\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_proto_private(r6, 0x100891d, &(0x7f0000000f80)="b43a") sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES8=r0, @ANYRES64=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x200480c1) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r7, 0x4138, 0xe0a8, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) r8 = io_uring_setup(0x100007, &(0x7f0000000040)={0x0, 0x8e44, 0x10000, 0x1, 0xc1, 0x0, r7}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58010000100001000000000000000000fe8000ddff0900000000000000000000010000f4240c723e951162e28a2a7542ff000000000000000000ecdf4e2400000a00002000000000f4ffffff0000cd8eb526ef2718b848c33e013327c61e651c14d6ca618f167a6ea5aa2b0be8d851103c68f7e12970870ded016cefb87b65a293702dc6185f05431c64b14a649b73226906e189fd994a9a023e4e1df5d23a36ad013314", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fc0100000000000000000000000000ff00000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff09000000000000000400000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000000000000ffffffff2abd70000000800002000100e5000000000000001c001700000000002abd7000000000000000000000000000000000004c001400686d6163287368613235362900"/272], 0x158}}, 0x24004000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 579.593142ms ago: executing program 0 (id=2882): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb2, &(0x7f00000001c0)={[0x4]}, 0x8) 459.343758ms ago: executing program 7 (id=2883): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x21, 0x404, 0x772d42, 0x0, 0x0, 0x6c9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02f6ff000100070000000000040004000000000010000600005c000020"], 0x24, 0x3) 89.661409ms ago: executing program 7 (id=2884): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffe59, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}, 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000040)) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000086050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000030900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r8 = fsmount(r3, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000040), &(0x7f0000000100)=r8}, 0x20) fchdir(r8) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000180)={{0x33, @remote, 0x4e21, 0x0, 'none\x00', 0x28, 0x6, 0x60}, {@loopback, 0x4e21, 0x1, 0x6, 0x32, 0x7fffffff}}, 0x44) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001c00008067a025fd000c0005", @ANYRES32=r11, @ANYRESHEX=r7], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 192.145µs ago: executing program 7 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x3, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xffffff80, 0x4, 0xffffffff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @loopback}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x329000, 0x0) write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x2, 0x4, 0xff, 0xb}, @llc={@snap={0xaa, 0x1, "19bd", "59b0cc", 0x11, "72f62b3f1afa64ae469bbcffa0ab297218665abc986d76543433ac7ecb814d0358e9ca97"}}}, 0x3b) 0s ago: executing program 7 (id=2886): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', '', [], 0xa, "2011efffffffb073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b) kernel console output (not intermixed with test programs): 143.125904][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.532918][T10216] program syz.0.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.533004][T10216] ata1.00: invalid command format 9 [ 143.723663][T10222] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 143.796576][ T43] audit: type=1400 audit(1790225490.402:913): avc: denied { write } for pid=10220 comm="syz.0.1349" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.884745][T10229] fuse: Bad value for 'fd' [ 144.236417][T10259] fuse: Invalid rootmode [ 144.249033][ T43] audit: type=1400 audit(1790225490.852:914): avc: denied { mount } for pid=10247 comm="syz.7.1359" name="/" dev="ramfs" ino=33687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.251470][ T43] audit: type=1400 audit(1790225490.852:915): avc: denied { mounton } for pid=10247 comm="syz.7.1359" path="/bus" dev="ramfs" ino=33688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 144.291854][T10263] netlink: 'syz.0.1365': attribute type 3 has an invalid length. [ 144.291868][T10263] netlink: 'syz.0.1365': attribute type 1 has an invalid length. [ 144.337830][T10265] FAULT_INJECTION: forcing a failure. [ 144.337830][T10265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.337852][T10265] CPU: 2 UID: 0 PID: 10265 Comm: syz.7.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.337868][T10265] Tainted: [L]=SOFTLOCKUP [ 144.337872][T10265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.337878][T10265] Call Trace: [ 144.337882][T10265] [ 144.337886][T10265] dump_stack_lvl+0x100/0x190 [ 144.337917][T10265] should_fail_ex.cold+0x5/0xa [ 144.337933][T10265] _copy_from_user+0x2e/0xd0 [ 144.337949][T10265] move_addr_to_kernel+0x65/0x170 [ 144.337966][T10265] copy_msghdr_from_user+0x3f0/0x4c0 [ 144.337977][T10265] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.337990][T10265] ? _kstrtoull+0x144/0x200 [ 144.338004][T10265] ? __pfx__kstrtoull+0x10/0x10 [ 144.338021][T10265] ___sys_sendmsg+0x106/0x1e0 [ 144.338033][T10265] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.338049][T10265] ? __fget_files+0x34/0x3d0 [ 144.338072][T10265] __sys_sendmmsg+0x20c/0x440 [ 144.338088][T10265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.338102][T10265] ? ksys_write+0x190/0x250 [ 144.338123][T10265] ? fput+0x7c/0x100 [ 144.338139][T10265] ? ksys_write+0x1ac/0x250 [ 144.338150][T10265] ? __pfx_ksys_write+0x10/0x10 [ 144.338163][T10265] __x64_sys_sendmmsg+0x9c/0x100 [ 144.338178][T10265] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.338198][T10265] do_syscall_64+0x123/0x790 [ 144.338215][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.338226][T10265] RIP: 0033:0x7feedab9e159 [ 144.338239][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.338253][T10265] RSP: 002b:00007feedba11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.338267][T10265] RAX: ffffffffffffffda RBX: 00007feedae25fa0 RCX: 00007feedab9e159 [ 144.338276][T10265] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 144.338285][T10265] RBP: 00007feedba11090 R08: 0000000000000000 R09: 0000000000000000 [ 144.338295][T10265] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 144.338323][T10265] R13: 00007feedae26038 R14: 00007feedae25fa0 R15: 00007ffc0043db38 [ 144.338346][T10265] [ 144.446813][ T5730] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 144.449150][ T43] audit: type=1400 audit(1790225491.052:916): avc: denied { bind } for pid=10274 comm="syz.7.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.492961][T10267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=10267 comm=syz.0.1367 [ 144.557835][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1373'. [ 144.557884][T10286] netlink: 'syz.6.1373': attribute type 30 has an invalid length. [ 144.563472][T10287] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1371'. [ 144.563486][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1371'. [ 144.953030][T10309] fuse: fd is not a fuse device [ 145.182955][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 145.182968][ T43] audit: type=1400 audit(1790225491.782:919): avc: denied { create } for pid=10321 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 145.575680][T10332] No control pipe specified [ 145.612193][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1391'. [ 145.637472][T10341] FAULT_INJECTION: forcing a failure. [ 145.637472][T10341] name failslab, interval 1, probability 0, space 0, times 0 [ 145.637496][T10341] CPU: 3 UID: 0 PID: 10341 Comm: syz.5.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.637511][T10341] Tainted: [L]=SOFTLOCKUP [ 145.637515][T10341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.637522][T10341] Call Trace: [ 145.637526][T10341] [ 145.637530][T10341] dump_stack_lvl+0x100/0x190 [ 145.637550][T10341] should_fail_ex.cold+0x5/0xa [ 145.637567][T10341] should_failslab+0xc2/0x120 [ 145.637582][T10341] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 145.637596][T10341] ? __alloc_skb+0x140/0x710 [ 145.637612][T10341] __alloc_skb+0x140/0x710 [ 145.637624][T10341] ? __alloc_skb+0x5b7/0x710 [ 145.637636][T10341] ? __pfx___alloc_skb+0x10/0x10 [ 145.637653][T10341] netlink_ack+0x117/0xb80 [ 145.637666][T10341] ? rcu_is_watching+0x13/0xc0 [ 145.637682][T10341] ? trace_contention_end+0x126/0x160 [ 145.637698][T10341] netlink_rcv_skb+0x333/0x420 [ 145.637715][T10341] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 145.637735][T10341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.637778][T10341] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.637801][T10341] crypto_netlink_rcv+0x2a/0x40 [ 145.637818][T10341] netlink_unicast+0x585/0x850 [ 145.637839][T10341] ? __pfx_netlink_unicast+0x10/0x10 [ 145.637867][T10341] netlink_sendmsg+0x8b0/0xda0 [ 145.637883][T10341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.637898][T10341] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.637912][T10341] ____sys_sendmsg+0xa4d/0xbe0 [ 145.637928][T10341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.637942][T10341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.637963][T10341] ? lock_acquire+0x1d1/0x380 [ 145.637975][T10341] ? get_pid_task+0x2a/0x250 [ 145.637990][T10341] ___sys_sendmsg+0x190/0x1e0 [ 145.638002][T10341] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.638013][T10341] ? get_pid_task+0x106/0x250 [ 145.638035][T10341] ? find_held_lock+0x2b/0x80 [ 145.638060][T10341] __sys_sendmsg+0x160/0x210 [ 145.638076][T10341] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.638098][T10341] do_syscall_64+0x123/0x790 [ 145.638116][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.638127][T10341] RIP: 0033:0x7f852519e159 [ 145.638138][T10341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.638148][T10341] RSP: 002b:00007f85233d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.638160][T10341] RAX: ffffffffffffffda RBX: 00007f8525426090 RCX: 00007f852519e159 [ 145.638167][T10341] RDX: 00000000200080c0 RSI: 00002000000001c0 RDI: 0000000000000004 [ 145.638173][T10341] RBP: 00007f85233d5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.638180][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.638186][T10341] R13: 00007f8525426128 R14: 00007f8525426090 R15: 00007ffd6b2f7fc8 [ 145.638200][T10341] [ 145.776192][T10351] fuse: fd is not a fuse device [ 146.068024][T10376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 146.068053][T10376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.070308][T10376] vhci_hcd vhci_hcd.0: Device attached [ 146.334546][T10377] vhci_hcd: connection closed [ 146.334868][ T5806] vhci_hcd vhci_hcd.5: stop threads [ 146.334892][ T5806] vhci_hcd vhci_hcd.5: release socket [ 146.334934][ T5806] vhci_hcd vhci_hcd.5: disconnect device [ 146.355739][ T1610] usb 48-1: enqueue for inactive port 0 [ 146.579960][T10411] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 146.579988][T10411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.580151][T10411] vhci_hcd vhci_hcd.0: Device attached [ 146.606466][ T5542] net_ratelimit: 10 callbacks suppressed [ 146.606486][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.606652][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.609115][T10416] tipc: Started in network mode [ 146.609133][T10416] tipc: Node identity ac14140f, cluster identity 4711 [ 146.609690][T10416] tipc: New replicast peer: 255.255.255.255 [ 146.610079][T10416] tipc: Enabled bearer , priority 10 [ 146.614978][ T43] audit: type=1400 audit(1790225493.212:920): avc: denied { map } for pid=10415 comm="syz.6.1415" path="socket:[34996]" dev="sockfs" ino=34996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.615008][ T43] audit: type=1400 audit(1790225493.212:921): avc: denied { read write } for pid=10415 comm="syz.6.1415" path="socket:[34996]" dev="sockfs" ino=34996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.794728][ T43] audit: type=1400 audit(1790225493.392:922): avc: denied { read } for pid=10410 comm="syz.7.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.805396][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.847145][T10428] fuse: fd is not a fuse device [ 146.865234][ T9215] usb 52-1: SetAddress Request (10) to port 0 [ 146.865274][ T9215] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 146.868856][ T1610] usb usb48-port1: attempt power cycle [ 146.919187][T10412] vhci_hcd: connection reset by peer [ 146.936118][ T5806] vhci_hcd vhci_hcd.7: stop threads [ 146.936141][ T5806] vhci_hcd vhci_hcd.7: release socket [ 146.936183][ T5806] vhci_hcd vhci_hcd.7: disconnect device [ 147.079742][T10445] jffs2: notice: (10445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.091401][ T43] audit: type=1400 audit(1790225493.692:923): avc: denied { write } for pid=10438 comm="syz.5.1424" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.091829][ T43] audit: type=1400 audit(1790225493.692:924): avc: denied { add_name } for pid=10438 comm="syz.5.1424" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.121132][ T43] audit: type=1400 audit(1790225493.722:925): avc: denied { read write open } for pid=10438 comm="syz.5.1424" path="/292/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.143305][T10450] fuse: fd is not a fuse device [ 147.391642][T10473] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100] [ 147.391657][T10473] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 147.391665][T10473] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 147.391671][T10473] One or more global auth toks could not properly register; rc = [-22] [ 147.391686][T10473] Error validating options; rc = [-22] [ 147.401426][T10475] xt_nfacct: accounting object `' does not exist [ 147.439993][T10477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10477 comm=syz.6.1439 [ 147.440669][T10477] netlink: 774 bytes leftover after parsing attributes in process `syz.6.1439'. [ 147.447213][ T1610] usb usb48-port1: unable to enumerate USB device [ 147.621648][ T7503] tipc: Node number set to 2886997007 [ 147.745388][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.745507][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.761939][ T9214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.837007][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.853991][T10506] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 148.031522][ T43] audit: type=1400 audit(1790225494.632:926): avc: denied { ioctl } for pid=10516 comm="syz.0.1453" path="socket:[34562]" dev="sockfs" ino=34562 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.085764][T10523] ip_tables: iptables: counters copy to user failed while replacing table [ 148.185246][ T7503] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 148.336455][ T43] audit: type=1400 audit(1790225494.942:927): avc: denied { read write } for pid=10536 comm="syz.0.1461" name="usbmon9" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.336753][ T43] audit: type=1400 audit(1790225494.942:928): avc: denied { open } for pid=10536 comm="syz.0.1461" path="/dev/usbmon9" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.341801][T10541] program syz.0.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.341865][T10541] ata1.00: invalid command format 9 [ 148.355184][ T7503] usb 10-1: Invalid ep0 maxpacket: 16 [ 148.486409][ T7503] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 148.541823][T10561] fuse: Unknown parameter 'user_i00000000000000000000' [ 148.555636][ T9210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.655508][ T7503] usb 10-1: Invalid ep0 maxpacket: 16 [ 148.655847][ T7503] usb usb10-port1: attempt power cycle [ 148.834472][T10574] netlink: 'syz.0.1471': attribute type 29 has an invalid length. [ 149.005207][ T7503] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 149.027632][ T7503] usb 10-1: Invalid ep0 maxpacket: 16 [ 149.165201][ T7503] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 149.185823][ T7503] usb 10-1: Invalid ep0 maxpacket: 16 [ 149.186027][ T7503] usb usb10-port1: unable to enumerate USB device [ 149.669431][T10586] FAULT_INJECTION: forcing a failure. [ 149.669431][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 149.669454][T10586] CPU: 0 UID: 0 PID: 10586 Comm: syz.0.1474 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.669472][T10586] Tainted: [L]=SOFTLOCKUP [ 149.669476][T10586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.669482][T10586] Call Trace: [ 149.669486][T10586] [ 149.669491][T10586] dump_stack_lvl+0x100/0x190 [ 149.669522][T10586] should_fail_ex.cold+0x5/0xa [ 149.669538][T10586] should_failslab+0xc2/0x120 [ 149.669557][T10586] __kmalloc_noprof+0xfc/0x840 [ 149.669568][T10586] ? rcu_is_watching+0x13/0xc0 [ 149.669584][T10586] ? tomoyo_realpath_from_path+0xb6/0x690 [ 149.669601][T10586] tomoyo_realpath_from_path+0xb6/0x690 [ 149.669618][T10586] tomoyo_path_number_perm+0x23c/0x580 [ 149.669630][T10586] ? tomoyo_path_number_perm+0x22e/0x580 [ 149.669649][T10586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.669666][T10586] ? __lock_acquire+0x5c0/0x1f40 [ 149.669684][T10586] ? __fget_files+0x34/0x3d0 [ 149.669698][T10586] ? find_held_lock+0x2b/0x80 [ 149.669713][T10586] ? hook_file_ioctl_common+0x140/0x440 [ 149.669732][T10586] ? __fget_files+0x21f/0x3d0 [ 149.669748][T10586] security_file_ioctl+0xd3/0x230 [ 149.669761][T10586] __x64_sys_ioctl+0xb7/0x210 [ 149.669774][T10586] do_syscall_64+0x123/0x790 [ 149.669796][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.669822][T10586] RIP: 0033:0x7f15d1d9e159 [ 149.669832][T10586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.669842][T10586] RSP: 002b:00007f15d2c90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.669853][T10586] RAX: ffffffffffffffda RBX: 00007f15d2025fa0 RCX: 00007f15d1d9e159 [ 149.669860][T10586] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 149.669867][T10586] RBP: 00007f15d2c90090 R08: 0000000000000000 R09: 0000000000000000 [ 149.669873][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.669880][T10586] R13: 00007f15d2026038 R14: 00007f15d2025fa0 R15: 00007fffecb294a8 [ 149.669894][T10586] [ 149.669980][T10586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.748757][T10595] fuse: Unknown parameter 'user_i00000000000000000000' [ 149.846513][T10600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1478'. [ 149.848319][T10600] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1478'. [ 150.122172][T10617] fuse: Unknown parameter 'user_i00000000000000000000' [ 150.256194][T10624] FAULT_INJECTION: forcing a failure. [ 150.256194][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 150.256225][T10624] CPU: 2 UID: 0 PID: 10624 Comm: syz.0.1489 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.256248][T10624] Tainted: [L]=SOFTLOCKUP [ 150.256253][T10624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.256263][T10624] Call Trace: [ 150.256268][T10624] [ 150.256281][T10624] dump_stack_lvl+0x100/0x190 [ 150.256311][T10624] should_fail_ex.cold+0x5/0xa [ 150.256336][T10624] should_failslab+0xc2/0x120 [ 150.256356][T10624] __kmalloc_noprof+0xfc/0x840 [ 150.256376][T10624] ? tomoyo_encode2+0xfb/0x3c0 [ 150.256400][T10624] tomoyo_encode2+0xfb/0x3c0 [ 150.256422][T10624] tomoyo_encode+0x29/0x50 [ 150.256441][T10624] tomoyo_realpath_from_path+0x18c/0x690 [ 150.256466][T10624] tomoyo_path_number_perm+0x23c/0x580 [ 150.256483][T10624] ? tomoyo_path_number_perm+0x22e/0x580 [ 150.256501][T10624] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.256526][T10624] ? __lock_acquire+0x5c0/0x1f40 [ 150.256555][T10624] ? __fget_files+0x34/0x3d0 [ 150.256575][T10624] ? find_held_lock+0x2b/0x80 [ 150.256597][T10624] ? hook_file_ioctl_common+0x140/0x440 [ 150.256624][T10624] ? __fget_files+0x21f/0x3d0 [ 150.256648][T10624] security_file_ioctl+0xd3/0x230 [ 150.256668][T10624] __x64_sys_ioctl+0xb7/0x210 [ 150.256687][T10624] do_syscall_64+0x123/0x790 [ 150.256713][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.256730][T10624] RIP: 0033:0x7f15d1d9e159 [ 150.256743][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.256758][T10624] RSP: 002b:00007f15d2c90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.256774][T10624] RAX: ffffffffffffffda RBX: 00007f15d2025fa0 RCX: 00007f15d1d9e159 [ 150.256784][T10624] RDX: 00002000000003c0 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 150.256794][T10624] RBP: 00007f15d2c90090 R08: 0000000000000000 R09: 0000000000000000 [ 150.256804][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.256814][T10624] R13: 00007f15d2026038 R14: 00007f15d2025fa0 R15: 00007fffecb294a8 [ 150.256836][T10624] [ 150.256851][T10624] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.303044][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.805549][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.094790][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 151.094807][ T43] audit: type=1400 audit(1790225497.692:931): avc: denied { bind } for pid=10638 comm="syz.7.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.233110][T10647] No control pipe specified [ 151.250710][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1501'. [ 151.529760][ T43] audit: type=1400 audit(1790225498.132:932): avc: denied { write } for pid=10664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.629807][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.638442][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.639074][ T5730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.639824][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.640945][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.644681][ T43] audit: type=1400 audit(1790225498.242:933): avc: denied { write } for pid=10671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.743274][ T43] audit: type=1400 audit(1790225498.342:934): avc: denied { mount } for pid=10677 comm="syz.6.1506" name="/" dev="hugetlbfs" ino=35251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.779543][ T43] audit: type=1400 audit(1790225498.372:935): avc: denied { rename } for pid=10677 comm="syz.6.1506" name="file0" dev="tmpfs" ino=2301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.909959][ T43] audit: type=1400 audit(1790225498.512:936): avc: denied { write } for pid=10683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.925479][ T9215] usb 52-1: device descriptor read/8, error -110 [ 152.005555][ T7503] net_ratelimit: 13 callbacks suppressed [ 152.005574][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.038983][ T43] audit: type=1400 audit(1790225498.642:937): avc: denied { write } for pid=10696 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.116388][T10702] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1509'. [ 152.255894][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.256018][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.267502][ T9213] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 152.316523][T10720] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1514'. [ 152.317161][ T9215] usb usb52-port1: attempt power cycle [ 152.367771][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.367905][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.368010][T10672] bridge_slave_0: entered allmulticast mode [ 152.369256][T10672] bridge_slave_0: entered promiscuous mode [ 152.371275][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.371394][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.371488][T10672] bridge_slave_1: entered allmulticast mode [ 152.372759][T10672] bridge_slave_1: entered promiscuous mode [ 152.386112][T10723] fuse: Unknown parameter 'user_id00000000000000000000' [ 152.400387][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.406898][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.419187][T10694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.422502][ T43] audit: type=1400 audit(1790225499.022:938): avc: denied { append } for pid=10692 comm="syz.5.1508" name="error_log" dev="tracefs" ino=6406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 152.425574][ T43] audit: type=1400 audit(1790225499.022:939): avc: denied { ioctl } for pid=10692 comm="syz.5.1508" path="/297/trace/error_log" dev="tracefs" ino=6406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 152.450504][T10672] team0: Port device team_slave_0 added [ 152.453285][ T9213] usb 10-1: unable to get BOS descriptor or descriptor too short [ 152.453323][ T9213] usb 10-1: New USB device found, idVendor=51c4, idProduct=0100, bcdDevice=ec.72 [ 152.453351][ T9213] usb 10-1: too many configurations: 26, using maximum allowed: 8 [ 152.453714][T10672] team0: Port device team_slave_1 added [ 152.454150][ T9213] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 152.454176][ T9213] usb 10-1: can't read configurations, error -71 [ 152.481422][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.481439][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.481459][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.482906][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.482918][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.482939][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.528372][T10672] hsr_slave_0: entered promiscuous mode [ 152.528856][T10672] hsr_slave_1: entered promiscuous mode [ 152.529171][T10672] debugfs: 'hsr0' already exists in 'hsr' [ 152.529185][T10672] Cannot create hsr debugfs directory [ 152.557181][T10727] No control pipe specified [ 152.624577][T10733] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1519'. [ 152.747212][ T43] audit: type=1400 audit(1790225499.352:940): avc: denied { write } for pid=10735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.810740][T10672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.876817][ T9215] usb usb52-port1: unable to enumerate USB device [ 152.884398][T10672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.896915][T10749] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1523'. [ 152.919337][T10751] fuse: Bad value for 'fd' [ 152.989971][T10672] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 152.990207][T10672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.998350][T10755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.009369][T10757] No control pipe specified [ 153.036529][ T1610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.115409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.115731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.131373][ T13] bridge_slave_1: left allmulticast mode [ 153.131488][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.142263][T10768] FAULT_INJECTION: forcing a failure. [ 153.142263][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 153.142266][ T13] bridge_slave_0: left allmulticast mode [ 153.142283][ T13] bridge_slave_0: left promiscuous mode [ 153.142286][T10768] CPU: 3 UID: 0 PID: 10768 Comm: syz.7.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.142305][T10768] Tainted: [L]=SOFTLOCKUP [ 153.142309][T10768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.142316][T10768] Call Trace: [ 153.142320][T10768] [ 153.142326][T10768] dump_stack_lvl+0x100/0x190 [ 153.142349][T10768] should_fail_ex.cold+0x5/0xa [ 153.142367][T10768] should_failslab+0xc2/0x120 [ 153.142384][T10768] __kmalloc_noprof+0xfc/0x840 [ 153.142397][T10768] ? rcu_is_watching+0x13/0xc0 [ 153.142429][T10768] ? tomoyo_realpath_from_path+0xb6/0x690 [ 153.142451][T10768] tomoyo_realpath_from_path+0xb6/0x690 [ 153.142472][T10768] tomoyo_path_number_perm+0x23c/0x580 [ 153.142485][T10768] ? tomoyo_path_number_perm+0x22e/0x580 [ 153.142499][T10768] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.142514][T10768] ? __pfx_futex_wait+0x10/0x10 [ 153.142529][T10768] ? __lock_acquire+0x5c0/0x1f40 [ 153.142548][T10768] ? __fget_files+0x34/0x3d0 [ 153.142564][T10768] ? find_held_lock+0x2b/0x80 [ 153.142581][T10768] ? hook_file_ioctl_common+0x140/0x440 [ 153.142601][T10768] ? __fget_files+0x21f/0x3d0 [ 153.142619][T10768] security_file_ioctl+0xd3/0x230 [ 153.142634][T10768] __x64_sys_ioctl+0xb7/0x210 [ 153.142648][T10768] do_syscall_64+0x123/0x790 [ 153.142668][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.142690][T10768] RIP: 0033:0x7feedab9e159 [ 153.142701][T10768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.142715][T10768] RSP: 002b:00007feedba11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.142729][T10768] RAX: ffffffffffffffda RBX: 00007feedae25fa0 RCX: 00007feedab9e159 [ 153.142738][T10768] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000003 [ 153.142746][T10768] RBP: 00007feedac3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.142753][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.142760][T10768] R13: 00007feedae26038 R14: 00007feedae25fa0 R15: 00007ffc0043db38 [ 153.142775][T10768] [ 153.143171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.159981][T10770] sctp: [Deprecated]: syz.5.1531 (pid 10770) Use of int in max_burst socket option deprecated. [ 153.159981][T10770] Use struct sctp_assoc_value instead [ 153.160937][T10768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.221541][T10775] FAULT_INJECTION: forcing a failure. [ 153.221541][T10775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.221572][T10775] CPU: 2 UID: 0 PID: 10775 Comm: syz.7.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.221596][T10775] Tainted: [L]=SOFTLOCKUP [ 153.221601][T10775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.221610][T10775] Call Trace: [ 153.221624][T10775] [ 153.221632][T10775] dump_stack_lvl+0x100/0x190 [ 153.221661][T10775] should_fail_ex.cold+0x5/0xa [ 153.221683][T10775] strncpy_from_user+0x3b/0x2d0 [ 153.221706][T10775] do_getname+0x78/0x390 [ 153.221731][T10775] do_sys_openat2+0xc7/0x1e0 [ 153.221751][T10775] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.221772][T10775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.221801][T10775] __x64_sys_openat+0x12d/0x210 [ 153.221822][T10775] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.221851][T10775] do_syscall_64+0x123/0x790 [ 153.221875][T10775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.221889][T10775] RIP: 0033:0x7feedab5e98e [ 153.221904][T10775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.221920][T10775] RSP: 002b:00007feedba10f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.221937][T10775] RAX: ffffffffffffffda RBX: 00007feedba116c0 RCX: 00007feedab5e98e [ 153.221948][T10775] RDX: 0000000000000002 RSI: 00007feedac34972 RDI: ffffffffffffff9c [ 153.221958][T10775] RBP: 00007feedac3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.221967][T10775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.221976][T10775] R13: 00007feedae26038 R14: 00007feedae25fa0 R15: 00007ffc0043db38 [ 153.221998][T10775] [ 153.278041][T10780] fuse: Bad value for 'fd' [ 153.335511][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 153.371382][ T13] bridge0 (unregistering): left promiscuous mode [ 153.381723][T10784] No control pipe specified [ 153.396609][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.403682][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.412504][ T13] bond0 (unregistering): Released all slaves [ 153.421983][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'. [ 153.421998][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1537'. [ 153.452419][ T13] bond1 (unregistering): Released all slaves [ 153.463822][ T13] bond2 (unregistering): Released all slaves [ 153.469583][ T13] bond3 (unregistering): Released all slaves [ 153.505760][T10672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.516792][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.519203][T10672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.523673][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.524159][T10672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.526872][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.527384][T10672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.533509][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.586184][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.611006][T10797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.613526][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.616364][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.616409][ T7130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.620784][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.620829][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.686187][ T5740] Bluetooth: hci1: command tx timeout [ 153.764296][ T13] hsr_slave_0: left promiscuous mode [ 153.764746][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.764758][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.768566][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.768578][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.777967][ T13] veth1_macvtap: left promiscuous mode [ 153.777988][ T13] veth0_macvtap: left promiscuous mode [ 153.778031][ T13] veth1_vlan: left promiscuous mode [ 153.778113][ T13] veth0_vlan: left promiscuous mode [ 153.810971][T10811] fuse: Bad value for 'fd' [ 154.000808][ T13] team0 (unregistering): Port device team_slave_1 removed [ 154.014984][ T13] team0 (unregistering): Port device team_slave_0 removed [ 154.124755][T10813] macvtap1: entered allmulticast mode [ 154.124770][T10813] bond0: entered allmulticast mode [ 154.124779][T10813] bond_slave_0: entered allmulticast mode [ 154.124788][T10813] bond_slave_1: entered allmulticast mode [ 154.126218][T10813] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.129341][T10813] bond0: left allmulticast mode [ 154.129361][T10813] bond_slave_0: left allmulticast mode [ 154.129375][T10813] bond_slave_1: left allmulticast mode [ 154.353130][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.362297][T10842] fuse: fd is not a fuse device [ 154.409752][T10672] veth0_vlan: entered promiscuous mode [ 154.416092][T10672] veth1_vlan: entered promiscuous mode [ 154.429749][T10850] fuse: Unknown parameter '0x0000000000000004' [ 154.440163][T10672] veth0_macvtap: entered promiscuous mode [ 154.443838][T10672] veth1_macvtap: entered promiscuous mode [ 154.461203][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.469408][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.495647][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.495687][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.495713][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.495737][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.571402][ T7133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.571421][ T7133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.634472][T10858] loop4: detected capacity change from 0 to 2640 [ 154.653550][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.653570][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.654431][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654472][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654495][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654517][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654534][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654570][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654603][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654625][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654638][T10858] ldm_validate_partition_table(): Disk read failed. [ 154.654654][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654676][T10858] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.654710][T10858] Dev loop4: unable to read RDB block 0 [ 154.654833][T10858] loop4: unable to read partition table [ 154.655011][T10858] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 154.779685][T10864] FAULT_INJECTION: forcing a failure. [ 154.779685][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 154.779705][T10864] CPU: 0 UID: 0 PID: 10864 Comm: syz.0.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.779720][T10864] Tainted: [L]=SOFTLOCKUP [ 154.779725][T10864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.779731][T10864] Call Trace: [ 154.779735][T10864] [ 154.779739][T10864] dump_stack_lvl+0x100/0x190 [ 154.779759][T10864] should_fail_ex.cold+0x5/0xa [ 154.779775][T10864] should_failslab+0xc2/0x120 [ 154.779789][T10864] kmem_cache_alloc_noprof+0x92/0x6a0 [ 154.779802][T10864] ? skb_clone+0x190/0x400 [ 154.779826][T10864] skb_clone+0x190/0x400 [ 154.779840][T10864] nfnetlink_rcv_batch+0x1c8/0x2880 [ 154.779858][T10864] ? kmem_cache_free+0x127/0x6c0 [ 154.779877][T10864] ? __lock_acquire+0x5c0/0x1f40 [ 154.779891][T10864] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 154.779910][T10864] ? lock_acquire+0x1d1/0x380 [ 154.779921][T10864] ? avc_has_perm_noaudit+0x56/0x470 [ 154.779942][T10864] ? avc_has_perm_noaudit+0x145/0x470 [ 154.779959][T10864] ? __asan_memset+0x23/0x50 [ 154.779970][T10864] ? __nla_validate_parse+0x1e7/0x28b0 [ 154.779991][T10864] ? __pfx___nla_validate_parse+0x10/0x10 [ 154.780009][T10864] ? rcu_is_watching+0x13/0xc0 [ 154.780024][T10864] ? cap_capable+0x107/0x430 [ 154.780043][T10864] ? __nla_parse+0x40/0x60 [ 154.780084][T10864] nfnetlink_rcv+0x3bd/0x440 [ 154.780100][T10864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 154.780119][T10864] netlink_unicast+0x585/0x850 [ 154.780134][T10864] ? __pfx_netlink_unicast+0x10/0x10 [ 154.780152][T10864] ? __pfx_sock_has_perm+0x10/0x10 [ 154.780165][T10864] netlink_sendmsg+0x8b0/0xda0 [ 154.780180][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.780195][T10864] ? selinux_socket_sendmsg+0x198/0x2f0 [ 154.780208][T10864] ____sys_sendmsg+0xa4d/0xbe0 [ 154.780225][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.780239][T10864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.780259][T10864] ? lock_acquire+0x1d1/0x380 [ 154.780270][T10864] ? get_pid_task+0x2a/0x250 [ 154.780292][T10864] ___sys_sendmsg+0x190/0x1e0 [ 154.780310][T10864] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.780328][T10864] ? get_pid_task+0x106/0x250 [ 154.780359][T10864] ? find_held_lock+0x2b/0x80 [ 154.780400][T10864] __sys_sendmsg+0x160/0x210 [ 154.780422][T10864] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.780447][T10864] do_syscall_64+0x123/0x790 [ 154.780465][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.780477][T10864] RIP: 0033:0x7fbeb919e159 [ 154.780488][T10864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.780502][T10864] RSP: 002b:00007fbeba0c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.780519][T10864] RAX: ffffffffffffffda RBX: 00007fbeb9425fa0 RCX: 00007fbeb919e159 [ 154.780533][T10864] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 154.780543][T10864] RBP: 00007fbeba0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 154.780553][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.780565][T10864] R13: 00007fbeb9426038 R14: 00007fbeb9425fa0 R15: 00007ffc1d74afa8 [ 154.780587][T10864] [ 155.005275][ T1610] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 155.039797][T10877] fuse: Unknown parameter '0x0000000000000004' [ 155.085819][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 155.092329][T10879] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.092349][T10879] overlayfs: failed to set xattr on upper [ 155.092355][T10879] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.092361][T10879] overlayfs: ...falling back to index=off. [ 155.092367][T10879] overlayfs: ...falling back to uuid=null. [ 155.145343][ T1610] usb 12-1: device descriptor read/64, error -71 [ 155.154469][T10881] GUP no longer grows the stack in syz.0.1565 (10881): 200000002000-200000009000 (200000001000) [ 155.154501][T10881] CPU: 2 UID: 0 PID: 10881 Comm: syz.0.1565 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.154525][T10881] Tainted: [L]=SOFTLOCKUP [ 155.154532][T10881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.154542][T10881] Call Trace: [ 155.154548][T10881] [ 155.154556][T10881] dump_stack_lvl+0x100/0x190 [ 155.154586][T10881] gup_vma_lookup.cold+0x83/0x96 [ 155.154613][T10881] __get_user_pages+0x252/0x2c30 [ 155.154640][T10881] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.154685][T10881] ? __pfx___get_user_pages+0x10/0x10 [ 155.154707][T10881] ? unwind_get_return_address+0x59/0xa0 [ 155.154734][T10881] ? __pfx_down_read_killable+0x10/0x10 [ 155.154758][T10881] ? __lock_acquire+0x5c0/0x1f40 [ 155.154783][T10881] __gup_longterm_locked+0x279/0x16f0 [ 155.154807][T10881] ? stack_trace_save+0x8e/0xc0 [ 155.154830][T10881] ? __pfx___gup_longterm_locked+0x10/0x10 [ 155.154855][T10881] ? find_held_lock+0x2b/0x80 [ 155.154881][T10881] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 155.154907][T10881] gup_fast_fallback+0x16dc/0x2790 [ 155.154949][T10881] ? __pfx_gup_fast_fallback+0x10/0x10 [ 155.154979][T10881] ? rcu_is_watching+0x13/0xc0 [ 155.155010][T10881] pin_user_pages_fast+0xa7/0xf0 [ 155.155032][T10881] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 155.155055][T10881] ? io_pin_pages+0xc3/0x1d0 [ 155.155083][T10881] io_pin_pages+0xe6/0x1d0 [ 155.155108][T10881] __zcrx_create_area+0x44a/0x2280 [ 155.155137][T10881] ? __pfx___zcrx_create_area+0x10/0x10 [ 155.155153][T10881] ? io_register_zcrx+0x8d4/0x1e20 [ 155.155172][T10881] ? io_register_zcrx+0x8d4/0x1e20 [ 155.155197][T10881] io_register_zcrx+0x1420/0x1e20 [ 155.155222][T10881] ? __pfx_io_register_zcrx+0x10/0x10 [ 155.155254][T10881] ? lock_acquire+0x1d1/0x380 [ 155.155273][T10881] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 155.155308][T10881] ? rcu_is_watching+0x13/0xc0 [ 155.155334][T10881] ? trace_contention_end+0x126/0x160 [ 155.155371][T10881] ? __fget_files+0x215/0x3d0 [ 155.155409][T10881] __do_sys_io_uring_register+0x1193/0x1bc0 [ 155.155440][T10881] ? do_sock_setsockopt+0x101/0x1d0 [ 155.155468][T10881] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 155.155500][T10881] ? __x64_sys_futex+0x34f/0x4d0 [ 155.155525][T10881] ? __x64_sys_futex+0x358/0x4d0 [ 155.155555][T10881] ? xfd_validate_state+0x129/0x190 [ 155.155586][T10881] do_syscall_64+0x123/0x790 [ 155.155618][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.155638][T10881] RIP: 0033:0x7fbeb919e159 [ 155.155654][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.155672][T10881] RSP: 002b:00007fbeba0c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 155.155691][T10881] RAX: ffffffffffffffda RBX: 00007fbeb9425fa0 RCX: 00007fbeb919e159 [ 155.155704][T10881] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000004 [ 155.155716][T10881] RBP: 00007fbeb923506b R08: 0000000000000000 R09: 0000000000000000 [ 155.155728][T10881] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 155.155739][T10881] R13: 00007fbeb9426038 R14: 00007fbeb9425fa0 R15: 00007ffc1d74afa8 [ 155.155765][T10881] [ 155.258996][T10886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=10886 comm=syz.0.1567 [ 155.358168][T10891] rnbd_client L127: Can't parse path hp:127.0.0.1\ß?:…b”EzñîÜ[‡þ¶ÖßùÍÛµ¬°>,: -22 [ 155.361871][T10891] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1567'. [ 155.405343][ T1610] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 155.488518][T10896] FAULT_INJECTION: forcing a failure. [ 155.488518][T10896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.488539][T10896] CPU: 2 UID: 0 PID: 10896 Comm: syz.5.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.488554][T10896] Tainted: [L]=SOFTLOCKUP [ 155.488558][T10896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.488564][T10896] Call Trace: [ 155.488568][T10896] [ 155.488572][T10896] dump_stack_lvl+0x100/0x190 [ 155.488592][T10896] should_fail_ex.cold+0x5/0xa [ 155.488613][T10896] _copy_from_user+0x2e/0xd0 [ 155.488626][T10896] copy_msghdr_from_user+0x9f/0x4c0 [ 155.488638][T10896] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.488652][T10896] ? lock_acquire+0x1d1/0x380 [ 155.488664][T10896] ? get_pid_task+0x2a/0x250 [ 155.488680][T10896] ___sys_sendmsg+0x106/0x1e0 [ 155.488691][T10896] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.488702][T10896] ? get_pid_task+0x106/0x250 [ 155.488722][T10896] ? find_held_lock+0x2b/0x80 [ 155.488745][T10896] __sys_sendmsg+0x160/0x210 [ 155.488760][T10896] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.488790][T10896] do_syscall_64+0x123/0x790 [ 155.488816][T10896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.488836][T10896] RIP: 0033:0x7f852519e159 [ 155.488850][T10896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.488866][T10896] RSP: 002b:00007f85233f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.488885][T10896] RAX: ffffffffffffffda RBX: 00007f8525425fa0 RCX: 00007f852519e159 [ 155.488896][T10896] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 155.488903][T10896] RBP: 00007f85233f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.488909][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.488915][T10896] R13: 00007f8525426038 R14: 00007f8525425fa0 R15: 00007ffd6b2f7fc8 [ 155.488929][T10896] [ 155.536196][ T1610] usb 12-1: device descriptor read/64, error -71 [ 155.655469][ T1610] usb usb12-port1: attempt power cycle [ 155.682289][T10898] genirq: Flags mismatch irq 22. 00200000 (intel_ish_ipc) vs. 00200080 (eth0) [ 155.682326][T10898] intel_ish_ipc 0000:00:02.0: error -EBUSY: request_irq(22) ish_irq_handler 0x0 intel_ish_ipc [ 155.682357][T10898] intel_ish_ipc 0000:00:02.0: probe with driver intel_ish_ipc failed with error -16 [ 155.765244][ T5740] Bluetooth: hci1: command tx timeout [ 155.823296][T10907] fuse: Unknown parameter '0x0000000000000004' [ 155.860820][T10909] netlink: 'syz.5.1574': attribute type 1 has an invalid length. [ 156.005227][ T1610] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 156.035620][ T1610] usb 12-1: device descriptor read/8, error -71 [ 156.301841][ T1610] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 156.325835][ T1610] usb 12-1: device descriptor read/8, error -71 [ 156.435421][ T1610] usb usb12-port1: unable to enumerate USB device [ 156.456761][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 156.456778][ T43] audit: type=1400 audit(1790225503.062:948): avc: denied { getopt } for pid=10930 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.524801][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1583'. [ 156.524818][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1583'. [ 156.530424][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1583'. [ 156.530439][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1583'. [ 156.650028][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1585'. [ 156.650048][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1585'. [ 156.660598][T10938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.664153][T10938] bond2: (slave bond0): making interface the new active one [ 156.668403][T10938] bond2: (slave bond0): Enslaving as an active interface with an up link [ 156.670025][T10938] netlink: 'syz.6.1585': attribute type 4 has an invalid length. [ 156.670036][T10938] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1585'. [ 156.674518][T10938] .`: renamed from bond0 (while UP) [ 156.881859][T10948] FAULT_INJECTION: forcing a failure. [ 156.881859][T10948] name failslab, interval 1, probability 0, space 0, times 0 [ 156.881890][T10948] CPU: 0 UID: 0 PID: 10948 Comm: syz.5.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.881914][T10948] Tainted: [L]=SOFTLOCKUP [ 156.881921][T10948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.881931][T10948] Call Trace: [ 156.881937][T10948] [ 156.881944][T10948] dump_stack_lvl+0x100/0x190 [ 156.881974][T10948] should_fail_ex.cold+0x5/0xa [ 156.882000][T10948] should_failslab+0xc2/0x120 [ 156.882023][T10948] __kmalloc_noprof+0xfc/0x840 [ 156.882041][T10948] ? rcu_is_watching+0x13/0xc0 [ 156.882064][T10948] ? tomoyo_realpath_from_path+0xb6/0x690 [ 156.882093][T10948] tomoyo_realpath_from_path+0xb6/0x690 [ 156.882122][T10948] tomoyo_path_number_perm+0x23c/0x580 [ 156.882139][T10948] ? tomoyo_path_number_perm+0x22e/0x580 [ 156.882160][T10948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.882188][T10948] ? __lock_acquire+0x5c0/0x1f40 [ 156.882218][T10948] ? __fget_files+0x34/0x3d0 [ 156.882240][T10948] ? find_held_lock+0x2b/0x80 [ 156.882264][T10948] ? hook_file_ioctl_common+0x140/0x440 [ 156.882299][T10948] ? __fget_files+0x21f/0x3d0 [ 156.882328][T10948] security_file_ioctl+0xd3/0x230 [ 156.882352][T10948] __x64_sys_ioctl+0xb7/0x210 [ 156.882374][T10948] do_syscall_64+0x123/0x790 [ 156.882404][T10948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.882423][T10948] RIP: 0033:0x7f852519e159 [ 156.882439][T10948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.882456][T10948] RSP: 002b:00007f85233f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.882475][T10948] RAX: ffffffffffffffda RBX: 00007f8525425fa0 RCX: 00007f852519e159 [ 156.882487][T10948] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 156.882498][T10948] RBP: 00007f85233f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.882508][T10948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.882519][T10948] R13: 00007f8525426038 R14: 00007f8525425fa0 R15: 00007ffd6b2f7fc8 [ 156.882544][T10948] [ 156.882551][T10948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.080356][ T43] audit: type=1326 audit(1790225503.682:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.5.1591" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f852519e159 code=0x0 [ 157.212147][ T43] audit: type=1400 audit(1790225503.812:950): avc: denied { write } for pid=10966 comm="syz.0.1594" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.414575][T10969] overlay: Unknown parameter 'subj_user' [ 157.497006][ T43] audit: type=1800 audit(1790225504.102:951): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1595" name="/newroot/16/file0" dev="tmpfs" ino=109 res=0 errno=0 [ 157.497193][T10973] overlayfs: workdir and upperdir must be separate subtrees [ 157.627138][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'. [ 157.627162][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'. [ 157.683556][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1601'. [ 157.825533][T10994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.835180][T10998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.835397][ T5740] Bluetooth: hci1: command tx timeout [ 157.938891][T11004] fuse: Unknown parameter 'fd0x0000000000000004' [ 157.950146][T11006] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 157.990776][ T43] audit: type=1400 audit(1790225504.592:952): avc: denied { ioctl } for pid=11011 comm="syz.5.1612" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.029008][T11014] SELinux: security_context_str_to_sid () failed with errno=-22 [ 158.033722][T11015] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 158.232556][T11033] ip_tables: iptables: counters copy to user failed while replacing table [ 158.280479][ T43] audit: type=1400 audit(1790225504.882:953): avc: denied { write } for pid=11036 comm="syz.5.1619" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.359960][T11041] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 158.703199][T11064] ip6erspan0: entered allmulticast mode [ 158.709757][ T43] audit: type=1400 audit(1790225505.312:954): avc: denied { connect } for pid=11063 comm="syz.7.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.711828][T11064] fuse: fd is not a fuse device [ 159.374770][ T43] audit: type=1400 audit(1790225505.972:955): avc: denied { getopt } for pid=11107 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.435717][T11110] overlay: Unknown parameter 'ÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ./file0' [ 159.764315][T11136] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 159.764611][T11136] bridge0: left promiscuous mode [ 159.915764][ T5740] Bluetooth: hci1: command tx timeout [ 160.281310][ T43] audit: type=1400 audit(1790225506.882:956): avc: denied { ioctl } for pid=11168 comm="syz.7.1665" path="socket:[38421]" dev="sockfs" ino=38421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.449160][T11187] FAULT_INJECTION: forcing a failure. [ 160.449160][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.449182][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.5.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.449198][T11187] Tainted: [L]=SOFTLOCKUP [ 160.449203][T11187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.449209][T11187] Call Trace: [ 160.449214][T11187] [ 160.449219][T11187] dump_stack_lvl+0x100/0x190 [ 160.449248][T11187] should_fail_ex.cold+0x5/0xa [ 160.449266][T11187] _copy_to_user+0x32/0xd0 [ 160.449284][T11187] simple_read_from_buffer+0xcb/0x170 [ 160.449303][T11187] proc_fail_nth_read+0x1af/0x230 [ 160.449319][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.449335][T11187] ? rw_verify_area+0xce/0x6d0 [ 160.449352][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.449367][T11187] vfs_read+0x1e4/0xb40 [ 160.449379][T11187] ? lock_acquire+0x1d1/0x380 [ 160.449391][T11187] ? __fget_files+0x34/0x3d0 [ 160.449406][T11187] ? __pfx_vfs_read+0x10/0x10 [ 160.449416][T11187] ? find_held_lock+0x2b/0x80 [ 160.449433][T11187] ? __fget_files+0x215/0x3d0 [ 160.449450][T11187] ? __fget_files+0x21f/0x3d0 [ 160.449468][T11187] ksys_read+0x12a/0x250 [ 160.449480][T11187] ? __pfx_ksys_read+0x10/0x10 [ 160.449496][T11187] do_syscall_64+0x123/0x790 [ 160.449520][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.449532][T11187] RIP: 0033:0x7f852515e98e [ 160.449542][T11187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.449553][T11187] RSP: 002b:00007f85233f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.449565][T11187] RAX: ffffffffffffffda RBX: 00007f85233f66c0 RCX: 00007f852515e98e [ 160.449572][T11187] RDX: 000000000000000f RSI: 00007f85233f60a0 RDI: 0000000000000003 [ 160.449579][T11187] RBP: 00007f85233f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.449585][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.449592][T11187] R13: 00007f8525426038 R14: 00007f8525425fa0 R15: 00007ffd6b2f7fc8 [ 160.449606][T11187] [ 160.609571][T11202] overlayfs: failed to clone lowerpath [ 160.760491][ T43] audit: type=1400 audit(1790225507.362:957): avc: denied { ioctl } for pid=11213 comm="syz.5.1680" path="socket:[38542]" dev="sockfs" ino=38542 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.444693][T11225] xt_nfacct: accounting object `' does not exist [ 161.526549][T11231] __nla_validate_parse: 7 callbacks suppressed [ 161.526569][T11231] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1687'. [ 161.751528][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1689'. [ 161.759327][T11239] Could not find key with description: [syz] [ 161.759340][T11239] process_request_key_err: No key [ 161.759348][T11239] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 161.759358][T11239] One or more global auth toks could not properly register; rc = [-2] [ 161.759383][T11239] Error validating options; rc = [-2] [ 161.847576][T11251] ip_tables: iptables: counters copy to user failed while replacing table [ 161.960056][T11254] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1697'. [ 162.015067][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1698'. [ 162.036292][ T43] audit: type=1400 audit(1790225508.642:958): avc: denied { listen } for pid=11259 comm="syz.6.1699" path=2F3438302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 162.305815][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1706'. [ 162.361552][T11279] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1707'. [ 162.617388][T11248] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 162.617671][T11249] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 162.656675][T11287] netlink: 'syz.5.1711': attribute type 7 has an invalid length. [ 162.755731][T11292] No control pipe specified [ 162.883852][T11304] program syz.5.1715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.359866][T11310] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 163.359896][T11310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.360462][T11311] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 163.360487][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.486560][T11316] ip_tables: iptables: counters copy to user failed while replacing table [ 163.814461][T11327] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.846226][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.027971][T11343] No control pipe specified [ 164.055412][T11347] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1730'. [ 164.148338][ T43] audit: type=1400 audit(1790225510.752:959): avc: denied { read } for pid=11350 comm="syz.0.1731" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 164.148613][ T43] audit: type=1400 audit(1790225510.752:960): avc: denied { open } for pid=11350 comm="syz.0.1731" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 164.311959][T11360] overlayfs: missing 'lowerdir' [ 164.313338][T11361] overlayfs: failed to clone upperpath [ 164.324270][ T43] audit: type=1400 audit(1790225510.922:961): avc: denied { create } for pid=11358 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.374137][ C1] Remote OS is not known: 127.0.0.1:39578 -> 127.0.0.1:4420 [ 164.374137][ C1] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=27929 DF PROTO=TCP SPT=39578 DPT=4420 SEQ=2988119283 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080ABE86F5910000000001030309) [ 164.467325][ T5740] Bluetooth: hci1: hcon ffff8880346d8000 sent 1 < count 65532 [ 164.804205][T11383] syzkaller1: left promiscuous mode [ 164.804228][T11383] syzkaller1: left allmulticast mode [ 165.086634][T11394] No control pipe specified [ 165.238131][ T43] audit: type=1400 audit(1790225511.842:962): avc: denied { map } for pid=11398 comm="syz.0.1751" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.527738][ T43] audit: type=1400 audit(1790225512.132:963): avc: denied { block_suspend } for pid=11424 comm="syz.7.1759" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.550626][T11438] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1764'. [ 165.597610][ T43] audit: type=1400 audit(1790225512.202:964): avc: denied { accept } for pid=11442 comm="syz.5.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.597903][T11443] ip6t_srh: unknown srh invflags 7863 [ 165.778077][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1771'. [ 165.820159][ T43] audit: type=1400 audit(1790225512.422:965): avc: denied { watch } for pid=11466 comm="syz.5.1773" path="/367" dev="tmpfs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.820716][ T43] audit: type=1400 audit(1790225512.422:966): avc: denied { watch_sb } for pid=11466 comm="syz.5.1773" path="/367" dev="tmpfs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.839493][T11471] FAULT_INJECTION: forcing a failure. [ 165.839493][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 165.839525][T11471] CPU: 1 UID: 0 PID: 11471 Comm: syz.0.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.839550][T11471] Tainted: [L]=SOFTLOCKUP [ 165.839556][T11471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.839567][T11471] Call Trace: [ 165.839574][T11471] [ 165.839581][T11471] dump_stack_lvl+0x100/0x190 [ 165.839610][T11471] should_fail_ex.cold+0x5/0xa [ 165.839659][T11471] should_failslab+0xc2/0x120 [ 165.839687][T11471] __kmalloc_noprof+0xfc/0x840 [ 165.839703][T11471] ? rcu_is_watching+0x13/0xc0 [ 165.839728][T11471] ? tomoyo_realpath_from_path+0xb6/0x690 [ 165.839758][T11471] tomoyo_realpath_from_path+0xb6/0x690 [ 165.839788][T11471] tomoyo_path_number_perm+0x23c/0x580 [ 165.839803][T11471] ? tomoyo_path_number_perm+0x22e/0x580 [ 165.839825][T11471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.839847][T11471] ? __pfx_futex_wait+0x10/0x10 [ 165.839872][T11471] ? __lock_acquire+0x5c0/0x1f40 [ 165.839896][T11471] ? __fget_files+0x34/0x3d0 [ 165.839920][T11471] ? find_held_lock+0x2b/0x80 [ 165.839945][T11471] ? hook_file_ioctl_common+0x140/0x440 [ 165.839978][T11471] ? __fget_files+0x21f/0x3d0 [ 165.840026][T11471] security_file_ioctl+0xd3/0x230 [ 165.840054][T11471] __x64_sys_ioctl+0xb7/0x210 [ 165.840079][T11471] do_syscall_64+0x123/0x790 [ 165.840115][T11471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.840131][T11471] RIP: 0033:0x7fbeb919e159 [ 165.840146][T11471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.840163][T11471] RSP: 002b:00007fbeba0c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.840182][T11471] RAX: ffffffffffffffda RBX: 00007fbeb9425fa0 RCX: 00007fbeb919e159 [ 165.840201][T11471] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000003 [ 165.840214][T11471] RBP: 00007fbeb923506b R08: 0000000000000000 R09: 0000000000000000 [ 165.840222][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.840234][T11471] R13: 00007fbeb9426038 R14: 00007fbeb9425fa0 R15: 00007ffc1d74afa8 [ 165.840260][T11471] [ 165.840302][T11471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.916978][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.962000][T11481] batman_adv: batadv0: Adding interface: virt_wifi0 [ 165.962012][T11481] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.962027][T11481] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 166.215771][T11503] bridge2: entered promiscuous mode [ 166.449467][T11532] fuse: fd is not a fuse device [ 166.500570][T11537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=11537 comm=syz.5.1801 [ 166.546531][T11542] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1803'. [ 166.546555][T11542] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1803'. [ 166.588508][T11548] FAULT_INJECTION: forcing a failure. [ 166.588508][T11548] name failslab, interval 1, probability 0, space 0, times 0 [ 166.588542][T11548] CPU: 3 UID: 0 PID: 11548 Comm: syz.0.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.588569][T11548] Tainted: [L]=SOFTLOCKUP [ 166.588575][T11548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.588588][T11548] Call Trace: [ 166.588594][T11548] [ 166.588603][T11548] dump_stack_lvl+0x100/0x190 [ 166.588644][T11548] should_fail_ex.cold+0x5/0xa [ 166.588687][T11548] should_failslab+0xc2/0x120 [ 166.588714][T11548] __kmalloc_noprof+0xfc/0x840 [ 166.588737][T11548] ? nft_set_elem_init+0xd6/0x630 [ 166.588772][T11548] nft_set_elem_init+0xd6/0x630 [ 166.588798][T11548] nft_add_set_elem+0x2333/0x4280 [ 166.588829][T11548] ? trace_event_raw_event_xdp_cpumap_kthread+0x230/0x4e0 [ 166.588861][T11548] ? __pfx_nft_add_set_elem+0x10/0x10 [ 166.588883][T11548] ? is_bpf_text_address+0x94/0x1a0 [ 166.588909][T11548] ? kernel_text_address+0x8d/0x100 [ 166.588939][T11548] ? __kernel_text_address+0xd/0x30 [ 166.588968][T11548] ? unwind_get_return_address+0x59/0xa0 [ 166.589010][T11548] ? __pfx_stack_trace_save+0x10/0x10 [ 166.589029][T11548] ? unwind_get_return_address+0x59/0xa0 [ 166.589055][T11548] ? stack_depot_save_flags+0x27/0x9f0 [ 166.589095][T11548] ? __nla_validate_parse+0x1e7/0x28b0 [ 166.589138][T11548] ? nla_strcmp+0xff/0x130 [ 166.589169][T11548] ? nft_set_lookup_global+0x163/0x390 [ 166.589193][T11548] nf_tables_newsetelem+0x721/0xa60 [ 166.589222][T11548] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 166.589246][T11548] ? net_generic+0x25/0x2a0 [ 166.589277][T11548] ? __nla_parse+0x40/0x60 [ 166.589309][T11548] nfnetlink_rcv_batch+0x1410/0x2880 [ 166.589351][T11548] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 166.589385][T11548] ? lock_acquire+0x1d1/0x380 [ 166.589406][T11548] ? avc_has_perm_noaudit+0x56/0x470 [ 166.589443][T11548] ? avc_has_perm_noaudit+0x145/0x470 [ 166.589495][T11548] ? __nla_parse+0x40/0x60 [ 166.589527][T11548] nfnetlink_rcv+0x3bd/0x440 [ 166.589555][T11548] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 166.589588][T11548] netlink_unicast+0x585/0x850 [ 166.589616][T11548] ? __pfx_netlink_unicast+0x10/0x10 [ 166.589644][T11548] ? __pfx_sock_has_perm+0x10/0x10 [ 166.589669][T11548] netlink_sendmsg+0x8b0/0xda0 [ 166.589697][T11548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.589723][T11548] ? selinux_socket_sendmsg+0x198/0x2f0 [ 166.589748][T11548] ____sys_sendmsg+0xa4d/0xbe0 [ 166.589776][T11548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.589801][T11548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.589837][T11548] ? lock_acquire+0x1d1/0x380 [ 166.589857][T11548] ? get_pid_task+0x2a/0x250 [ 166.589885][T11548] ___sys_sendmsg+0x190/0x1e0 [ 166.589908][T11548] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.589927][T11548] ? get_pid_task+0x106/0x250 [ 166.589963][T11548] ? find_held_lock+0x2b/0x80 [ 166.590007][T11548] __sys_sendmsg+0x160/0x210 [ 166.590032][T11548] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.590071][T11548] do_syscall_64+0x123/0x790 [ 166.590104][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.590124][T11548] RIP: 0033:0x7fbeb919e159 [ 166.590141][T11548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.590159][T11548] RSP: 002b:00007fbeba0c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.590179][T11548] RAX: ffffffffffffffda RBX: 00007fbeb9425fa0 RCX: 00007fbeb919e159 [ 166.590191][T11548] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 166.590204][T11548] RBP: 00007fbeba0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.590216][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.590228][T11548] R13: 00007fbeb9426038 R14: 00007fbeb9425fa0 R15: 00007ffc1d74afa8 [ 166.590254][T11548] [ 166.658922][ T43] audit: type=1326 audit(1790225513.262:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.5.1808" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f852519e159 code=0x0 [ 167.007802][T11571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.363884][T11588] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 167.404978][T11590] jffs2: notice: (11590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 167.682187][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 167.682205][ T43] audit: type=1400 audit(1790225514.282:970): avc: denied { create } for pid=11604 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 168.589164][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1841'. [ 168.614171][ T43] audit: type=1400 audit(1790225515.212:971): avc: denied { name_bind } for pid=11653 comm="syz.6.1842" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 168.783637][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1848'. [ 168.783655][T11671] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.275683][T11701] ip_tables: iptables: counters copy to user failed while replacing table [ 169.990723][T11756] fuse: fd is not a fuse device [ 170.075020][T11762] fuse: fd is not a fuse device [ 170.117087][T11766] fuse: Bad value for 'fd' [ 170.825926][T11800] bridge0: port 3(syz_tun) entered blocking state [ 170.826026][T11800] bridge0: port 3(syz_tun) entered disabled state [ 170.826256][T11800] syz_tun: entered allmulticast mode [ 170.829092][T11800] syz_tun: entered promiscuous mode [ 170.830452][T11800] bridge0: port 3(syz_tun) entered blocking state [ 170.830511][T11800] bridge0: port 3(syz_tun) entered forwarding state [ 170.833520][T11800] netlink: 'syz.7.1899': attribute type 9 has an invalid length. [ 170.910266][T11808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.032282][T11819] netlink: 'syz.5.1905': attribute type 30 has an invalid length. [ 171.085918][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1907'. [ 171.491913][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 171.492053][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 171.492890][T11832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=11832 comm=syz.0.1910 [ 171.713321][ T7503] Process accounting resumed [ 171.737728][T11854] Process accounting resumed [ 171.788171][ T43] audit: type=1400 audit(1790225518.382:972): avc: denied { bind } for pid=11858 comm="syz.5.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.790478][T11859] netlink: 'syz.5.1921': attribute type 10 has an invalid length. [ 171.790512][T11859] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 171.792315][T11859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.793429][T11859] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 171.804071][T11859] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 171.909435][ T43] audit: type=1326 audit(1790225518.512:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.7.1926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feedab9e159 code=0x0 [ 172.021178][T11876] Invalid option length (480) for dns_resolver key [ 172.132064][T11884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1930'. [ 172.437566][ T43] audit: type=1326 audit(1790225519.032:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.437619][ T43] audit: type=1326 audit(1790225519.032:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.437657][ T43] audit: type=1326 audit(1790225519.032:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.437693][ T43] audit: type=1326 audit(1790225519.032:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.453515][ T43] audit: type=1326 audit(1790225519.052:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.455340][ T43] audit: type=1326 audit(1790225519.062:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.1931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852519e159 code=0x7ffc0000 [ 172.697387][T11908] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 172.769355][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 172.769374][ T43] audit: type=1326 audit(1790225519.372:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.0.1936" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeb919e159 code=0x0 [ 172.808946][T11912] team0 (unregistering): Port device team_slave_0 removed [ 172.820943][T11912] team0 (unregistering): Port device team_slave_1 removed [ 173.148897][T11925] overlayfs: failed to clone lowerpath [ 173.274784][T11930] syz_tun: left allmulticast mode [ 173.274802][T11930] syz_tun: left promiscuous mode [ 173.274930][T11930] bridge0: port 3(syz_tun) entered disabled state [ 173.300788][T11930] bridge_slave_0: left allmulticast mode [ 173.300807][T11930] bridge_slave_0: left promiscuous mode [ 173.300908][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.311654][T11930] bridge_slave_1: left allmulticast mode [ 173.311671][T11930] bridge_slave_1: left promiscuous mode [ 173.311755][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.328405][T11930] bond0: (slave bond_slave_0): Releasing backup interface [ 173.335559][T11930] bond0: (slave bond_slave_1): Releasing backup interface [ 173.359715][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.359769][T11930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.363338][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.363354][T11930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.364970][T11930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.420738][T11932] netlink: 'syz.7.1943': attribute type 1 has an invalid length. [ 173.430834][T11932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.459386][T11935] openvswitch: netlink: Key type 33 is out of range max 32 [ 173.502855][T11937] netlink: 'syz.7.1945': attribute type 7 has an invalid length. [ 173.819815][T11964] overlayfs: failed to clone upperpath [ 173.830529][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 173.936691][T11976] fuse: fd is not a fuse device [ 173.961007][T11978] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1961'. [ 174.093561][T11984] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 174.093891][T11984] CIFS: Attempting to mount //127.0.0.1/share [ 174.142386][T11984] CIFS: VFS: Error connecting to socket. Aborting operation. [ 174.142497][T11984] CIFS: VFS: cifs_mount failed w/return code = -111 [ 174.158665][T11989] overlayfs: failed to clone lowerpath [ 174.381293][ T43] audit: type=1400 audit(1790225520.982:1020): avc: denied { map } for pid=12001 comm="syz.0.1969" path="/111" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.516638][T12014] overlayfs: failed to clone lowerpath [ 174.594790][T12026] fuse: fd is not a fuse device [ 174.601793][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 174.634063][T12029] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 174.634082][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'. [ 174.750260][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1987'. [ 174.843139][T12050] overlayfs: failed to clone lowerpath [ 175.310336][T12086] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.542305][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 175.542329][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2013'. [ 175.869636][ T43] audit: type=1400 audit(1790225522.472:1021): avc: denied { create } for pid=12153 comm="syz.5.2026" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.870121][ T43] audit: type=1400 audit(1790225522.472:1022): avc: denied { write } for pid=12153 comm="syz.5.2026" name="file0" dev="tmpfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.870305][ T43] audit: type=1400 audit(1790225522.472:1023): avc: denied { open } for pid=12153 comm="syz.5.2026" path="/447/file0" dev="tmpfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.903904][ T43] audit: type=1400 audit(1790225522.502:1024): avc: denied { unlink } for pid=6443 comm="syz-executor" name="file0" dev="tmpfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.929163][T12162] netlink: 'syz.5.2030': attribute type 39 has an invalid length. [ 175.931296][T12163] netlink: 'syz.5.2030': attribute type 39 has an invalid length. [ 176.174441][T12181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.202802][T12183] netlink: 'syz.6.2038': attribute type 4 has an invalid length. [ 176.377297][T12204] netlink: 'syz.6.2046': attribute type 1 has an invalid length. [ 176.548800][T12229] veth1_macvtap: left promiscuous mode [ 176.593805][T12238] 9pnet_fd: Insufficient options for proto=fd [ 176.805358][T12268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12268 comm=syz.5.2068 [ 177.327581][ T43] audit: type=1400 audit(1790225523.932:1025): avc: denied { mount } for pid=12321 comm="syz.7.2090" name="/" dev="rpc_pipefs" ino=40610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 177.445426][T12337] overlayfs: failed to clone lowerpath [ 177.494189][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2101'. [ 177.494212][T12345] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.579857][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2106'. [ 177.581798][T12358] 9p: Bad value for 'source' [ 177.583336][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'. [ 177.583355][T12356] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.979558][T12396] netlink: 'syz.0.2119': attribute type 29 has an invalid length. [ 178.098664][T12405] netlink: 'syz.7.2123': attribute type 4 has an invalid length. [ 178.117777][T12407] ip_tables: iptables: counters copy to user failed while replacing table [ 178.212516][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 178.440600][T12433] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2134'. [ 178.440836][T12433] unsupported nlmsg_type 40 [ 178.583261][T12439] dvmrp0: entered allmulticast mode [ 179.030261][T12464] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 179.030277][T12464] netlink: 'syz.0.2146': attribute type 2 has an invalid length. [ 179.456400][T12481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34322 sclass=netlink_route_socket pid=12481 comm=syz.5.2152 [ 179.718523][T12501] netlink: 'syz.6.2158': attribute type 2 has an invalid length. [ 179.721123][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 180.118385][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2171'. [ 180.223821][T12545] netlink: Unknown conntrack attr (type=11779, max=9) [ 180.223854][T12545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.363893][T12569] ip_tables: iptables: counters copy to user failed while replacing table [ 180.374221][T12569] netlink: 'syz.7.2184': attribute type 15 has an invalid length. [ 180.379542][ T5740] Bluetooth: hci0: unexpected cc 0x2005 length: 4 > 1 [ 180.379569][ T5740] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 180.444865][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 180.569832][T12594] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2196'. [ 180.573724][ T43] audit: type=1400 audit(1790225527.172:1026): avc: denied { getopt } for pid=12592 comm="syz.5.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 180.641446][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 180.991019][T12650] overlayfs: failed to clone lowerpath [ 181.388153][ T5730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.392087][ T5730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.392915][ T5730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.394645][ T5730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.399953][ T5730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.460911][T12708] ip_tables: iptables: counters copy to user failed while replacing table [ 181.622822][T12717] ecryptfs_get_tree: kern_path() failed [ 181.691398][T12717] Reading sb failed; rc = [-20] [ 181.775363][T12720] netlink: 'syz.5.2237': attribute type 21 has an invalid length. [ 181.776507][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 181.894006][ T5730] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 181.898528][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 181.909746][ T5730] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 181.997807][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.031721][T12699] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.031882][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.031920][T12747] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2055 sclass=netlink_xfrm_socket pid=12747 comm=syz.0.2241 [ 182.031961][T12699] bridge_slave_0: entered allmulticast mode [ 182.032720][ T43] audit: type=1400 audit(1790225528.632:1027): avc: denied { read } for pid=12746 comm="syz.0.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.032744][T12699] bridge_slave_0: entered promiscuous mode [ 182.034376][T12699] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.034503][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.034589][T12699] bridge_slave_1: entered allmulticast mode [ 182.035985][T12699] bridge_slave_1: entered promiscuous mode [ 182.051467][T12699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.053133][T12699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.067588][T12699] team0: Port device team_slave_0 added [ 182.069840][T12699] team0: Port device team_slave_1 added [ 182.086176][T12699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.086187][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.086199][T12699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.087397][T12699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.087405][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.087484][T12699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.137255][T12699] hsr_slave_0: entered promiscuous mode [ 182.138131][T12699] hsr_slave_1: entered promiscuous mode [ 182.138666][T12699] debugfs: 'hsr0' already exists in 'hsr' [ 182.138684][T12699] Cannot create hsr debugfs directory [ 182.151298][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.247580][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.255661][T12758] netlink: 'syz.0.2246': attribute type 66 has an invalid length. [ 182.316102][T12699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.316136][T12699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.341259][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.391001][T12699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.391032][T12699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.431551][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.459572][T12699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.459595][T12699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.550420][T12699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.550474][T12699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.561068][T12721] xt_hashlimit: size too large, truncated to 1048576 [ 182.763642][T12699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.779129][T12699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.779883][T12699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.787552][T12699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.790710][T12699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.798112][T12699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.803126][T12699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.815986][T12699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.872932][T12699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.879649][T12699] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.883017][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.883065][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.887906][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.888013][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.126544][T12829] overlayfs: failed to clone upperpath [ 183.168635][ T43] audit: type=1400 audit(1790225529.772:1028): avc: denied { setopt } for pid=12831 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 183.168839][ T43] audit: type=1400 audit(1790225529.772:1029): avc: denied { write } for pid=12831 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 183.190029][T12699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.379894][T12699] veth0_vlan: entered promiscuous mode [ 183.383950][T12699] veth1_vlan: entered promiscuous mode [ 183.420802][T12699] veth0_macvtap: entered promiscuous mode [ 183.426458][T12699] veth1_macvtap: entered promiscuous mode [ 183.439710][T12699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.445775][ T5730] Bluetooth: hci4: command tx timeout [ 183.466778][T12699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.486649][ T5542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.486691][ T5542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.486722][ T5542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.486752][ T5542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.555942][T12856] dns_resolver: Unsupported content type (234) [ 183.614376][ T7130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.614396][ T7130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.639091][ T7135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.639104][ T7135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.690745][T12863] netlink: 'syz.6.2231': attribute type 21 has an invalid length. [ 183.695432][ T43] audit: type=1400 audit(1790225530.302:1030): avc: denied { append } for pid=12862 comm="syz.6.2231" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.798637][ T5730] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 184.253007][T12884] __nla_validate_parse: 7 callbacks suppressed [ 184.253027][T12884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2284'. [ 184.370759][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2291'. [ 184.557930][ T43] audit: type=1400 audit(1790225531.162:1031): avc: denied { write } for pid=12924 comm="syz.6.2303" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.558406][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2302'. [ 184.636028][T12933] IPVS: sh: FWM 3 0x00000003 - no destination available [ 185.049762][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2315'. [ 185.154476][T12964] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2319'. [ 185.154499][T12964] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2319'. [ 185.510639][T12994] netlink: 'syz.6.2331': attribute type 1 has an invalid length. [ 185.689502][T13002] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2334'. [ 185.755022][T13010] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2336'. [ 185.835194][ T5730] Bluetooth: hci4: command tx timeout [ 185.986377][T13023] fuse: fd is not a fuse device [ 186.024137][T13030] netlink: 'syz.0.2345': attribute type 3 has an invalid length. [ 186.024150][T13030] netlink: 'syz.0.2345': attribute type 2 has an invalid length. [ 186.190462][T13048] overlayfs: failed to resolve './file2': -2 [ 186.220098][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 186.348929][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2365'. [ 186.348953][T13078] openvswitch: netlink: Flow key attr not present in new flow. [ 186.423142][T13091] overlayfs: failed to clone upperpath [ 186.492149][T13100] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.938704][T13137] xt_hashlimit: size too large, truncated to 1048576 [ 187.633914][T13182] fuse: fd is not a fuse device [ 187.709419][T13190] netlink: 'syz.5.2405': attribute type 2 has an invalid length. [ 187.915284][ T5730] Bluetooth: hci4: command tx timeout [ 189.044139][T13261] 9pnet_virtio: no channels available for device mountinfo [ 189.054726][T13249] netlink: Unknown conntrack attr (type=8195, max=9) [ 189.054758][T13249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.060258][ T5740] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 189.060282][ T5740] CPU: 2 UID: 0 PID: 5740 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.060310][ T5740] Tainted: [L]=SOFTLOCKUP [ 189.060316][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.060329][ T5740] Workqueue: hci0 hci_rx_work [ 189.060356][ T5740] Call Trace: [ 189.060363][ T5740] [ 189.060370][ T5740] dump_stack_lvl+0x100/0x190 [ 189.060399][ T5740] sysfs_warn_dup.cold+0x1c/0x28 [ 189.060428][ T5740] sysfs_create_dir_ns+0x24b/0x2b0 [ 189.060455][ T5740] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 189.060480][ T5740] ? find_held_lock+0x2b/0x80 [ 189.060507][ T5740] ? kobject_add_internal+0x25f/0x930 [ 189.060529][ T5740] ? kobject_add_internal+0x25f/0x930 [ 189.060553][ T5740] ? do_raw_spin_unlock+0x145/0x1e0 [ 189.060588][ T5740] kobject_add_internal+0x2c8/0x930 [ 189.060616][ T5740] kobject_add+0x16a/0x1e0 [ 189.060639][ T5740] ? __pfx_kobject_add+0x10/0x10 [ 189.060658][ T5740] ? class_to_subsys+0x10f/0x150 [ 189.060689][ T5740] ? kobject_put+0xb9/0x640 [ 189.060707][ T5740] ? _raw_spin_unlock+0x28/0x50 [ 189.060736][ T5740] device_add+0x294/0x1970 [ 189.060761][ T5740] ? __pfx_dev_set_name+0x10/0x10 [ 189.060796][ T5740] ? __pfx_device_add+0x10/0x10 [ 189.060823][ T5740] ? mgmt_send_event_skb+0x2fb/0x460 [ 189.060852][ T5740] hci_conn_add_sysfs+0x1a3/0x260 [ 189.060881][ T5740] le_conn_complete_evt+0x122f/0x2130 [ 189.060910][ T5740] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 189.060930][ T5740] ? hci_event_packet+0x186/0xcd0 [ 189.060951][ T5740] ? hci_event_packet+0x186/0xcd0 [ 189.060976][ T5740] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 189.061001][ T5740] ? skb_pull_data+0x15f/0x1e0 [ 189.061034][ T5740] hci_le_meta_evt+0x34a/0x5f0 [ 189.061059][ T5740] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 189.061085][ T5740] hci_event_packet+0x51c/0xcd0 [ 189.061107][ T5740] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 189.061133][ T5740] ? __pfx_hci_event_packet+0x10/0x10 [ 189.061159][ T5740] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.061189][ T5740] hci_rx_work+0x451/0xfc0 [ 189.061212][ T5740] process_one_work+0xac7/0x1b10 [ 189.061248][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 189.061275][ T5740] ? lock_acquire+0x1d1/0x380 [ 189.061301][ T5740] ? __pfx_hci_rx_work+0x10/0x10 [ 189.061323][ T5740] worker_thread+0x5ef/0xe50 [ 189.061354][ T5740] ? kthread+0x13a/0x450 [ 189.061374][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 189.061397][ T5740] kthread+0x373/0x450 [ 189.061417][ T5740] ? __pfx_kthread+0x10/0x10 [ 189.061439][ T5740] ret_from_fork+0x730/0xd60 [ 189.061458][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 189.061475][ T5740] ? rcu_is_watching+0x13/0xc0 [ 189.061495][ T5740] ? __switch_to+0x800/0x10f0 [ 189.061517][ T5740] ? __pfx_kthread+0x10/0x10 [ 189.061542][ T5740] ret_from_fork_asm+0x1a/0x30 [ 189.061579][ T5740] [ 189.061623][ T5740] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.061652][ T5740] Bluetooth: hci0: failed to register connection device [ 189.096059][T13271] 9p: Bad value for 'wfdno' [ 189.142449][ T43] audit: type=1400 audit(1790225535.742:1032): avc: denied { create } for pid=13276 comm="syz.6.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.162248][T13281] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 189.321155][T13289] fuse: fd is not a fuse device [ 189.899605][ T43] audit: type=1400 audit(1790225536.502:1033): avc: denied { create } for pid=13315 comm="syz.7.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.900614][ T43] audit: type=1400 audit(1790225536.502:1034): avc: denied { ioctl } for pid=13315 comm="syz.7.2451" path="socket:[45513]" dev="sockfs" ino=45513 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.104347][T13328] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59705 sclass=netlink_xfrm_socket pid=13328 comm=syz.6.2454 [ 190.366940][ T43] audit: type=1400 audit(1790225536.972:1035): avc: denied { setopt } for pid=13347 comm="syz.0.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.456080][ T43] audit: type=1400 audit(1790225537.052:1036): avc: denied { getopt } for pid=13358 comm="syz.6.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.573144][ T43] audit: type=1400 audit(1790225537.172:1037): avc: denied { relabelfrom } for pid=13367 comm="syz.0.2464" name="SCTPv6" dev="sockfs" ino=45542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.573157][T13368] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 190.573343][ T43] audit: type=1400 audit(1790225537.172:1038): avc: denied { relabelto } for pid=13367 comm="syz.0.2464" name="SCTPv6" dev="sockfs" ino=45542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0" [ 190.579266][T13368] bridge0: port 3(team0) entered blocking state [ 190.579330][T13368] bridge0: port 3(team0) entered disabled state [ 190.579416][T13368] team0: entered allmulticast mode [ 190.579425][T13368] team_slave_0: entered allmulticast mode [ 190.579452][T13368] team_slave_1: entered allmulticast mode [ 190.580832][T13368] team0: entered promiscuous mode [ 190.580842][T13368] team_slave_0: entered promiscuous mode [ 190.580931][T13368] team_slave_1: entered promiscuous mode [ 190.585621][T13368] bridge0: port 3(team0) entered blocking state [ 190.585662][T13368] bridge0: port 3(team0) entered forwarding state [ 190.620271][T13373] netlink: 'syz.6.2466': attribute type 46 has an invalid length. [ 190.620286][T13373] __nla_validate_parse: 6 callbacks suppressed [ 190.620292][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2466'. [ 190.659655][T13376] ip_tables: iptables: counters copy to user failed while replacing table [ 190.835583][T13391] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.888675][T13397] openvswitch: netlink: Key type 33 is out of range max 32 [ 190.962553][T13405] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 190.979855][ T43] audit: type=1326 audit(1790225537.582:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13394 comm="syz.6.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d50d9e159 code=0x7fc00000 [ 190.983257][T13411] fuse: fd is not a fuse device [ 190.984678][ T43] audit: type=1326 audit(1790225793.647:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13394 comm="syz.6.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1d50d9e159 code=0x7fc00000 [ 190.984723][ T43] audit: type=1326 audit(1790225793.647:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13394 comm="syz.6.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d50d9e159 code=0x7fc00000 [ 191.052884][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2483'. [ 191.162183][T13428] overlayfs: failed to clone upperpath [ 191.289872][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2494'. [ 191.896780][T13473] jffs2: notice: (13473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 191.940509][T13476] ip_tables: iptables: counters copy to user failed while replacing table [ 192.332695][T13499] fuse: fd is not a fuse device [ 192.793570][T13538] MPI: mpi too large (16392 bits) [ 193.142078][T13565] netlink: 'syz.6.2542': attribute type 1 has an invalid length. [ 193.319578][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 193.414704][T13590] netlink: 'syz.0.2550': attribute type 4 has an invalid length. [ 193.600068][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'. [ 193.779540][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'. [ 193.832500][T13627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.980133][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2568'. [ 194.000364][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.290291][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2579'. [ 194.452771][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2588'. [ 194.511147][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'. [ 194.660448][ T43] kauditd_printk_skb: 1497 callbacks suppressed [ 194.660468][ T43] audit: type=1400 audit(1790225797.317:2539): avc: denied { read } for pid=13703 comm="syz.0.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.661671][T13704] overlayfs: failed to resolve '/t_misc/register': -2 [ 194.863223][T13709] overlayfs: failed to clone lowerpath [ 195.860496][T13766] ip_tables: iptables: counters copy to user failed while replacing table [ 195.873224][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 195.873339][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 195.964246][T13766] ceph: No mds server is up or the cluster is laggy [ 196.840000][T13810] __nla_validate_parse: 1 callbacks suppressed [ 196.840013][T13810] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2636'. [ 197.128146][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2646'. [ 197.128178][T13838] netlink: 'syz.5.2646': attribute type 30 has an invalid length. [ 197.175983][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176026][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176057][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176090][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176122][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176153][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176184][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.176215][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.215494][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2649'. [ 197.222462][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2649'. [ 197.270311][ T5740] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 197.274627][T13848] netlink: Unknown conntrack attr (type=11779, max=9) [ 197.274656][T13848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.867213][T13867] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2658'. [ 198.188994][T13904] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2674'. [ 198.202124][T13907] ubifs: Unknown parameter 'ecryptfs_sig' [ 198.718949][T13934] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2684'. [ 198.718972][T13934] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2684'. [ 200.023138][T14018] xt_hashlimit: size too large, truncated to 1048576 [ 200.115421][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 200.115436][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 200.577714][T14041] ip_tables: iptables: counters copy to user failed while replacing table [ 200.906005][T14056] netlink: Conntrack attr has 8 unknown bytes [ 200.906024][T14056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.011485][T14063] netlink: 'syz.6.2729': attribute type 1 has an invalid length. [ 201.058281][T14066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.099900][T14069] batadv_slave_0: entered promiscuous mode [ 201.099999][T14069] batadv_slave_0: left promiscuous mode [ 201.182099][ T43] audit: type=1400 audit(1790225803.837:2540): avc: denied { write } for pid=14072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.192566][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.194786][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.202227][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.203137][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.203370][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.250151][ T43] audit: type=1400 audit(1790225803.907:2541): avc: denied { write } for pid=14080 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.592572][ T43] audit: type=1400 audit(1790225804.247:2542): avc: denied { setopt } for pid=14106 comm="syz.7.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.592766][ T5730] Bluetooth: hci0: ISO packet too small [ 201.701721][T14074] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.701865][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.701990][T14074] bridge_slave_0: entered allmulticast mode [ 201.703604][T14074] bridge_slave_0: entered promiscuous mode [ 201.706117][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.706233][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.706334][T14074] bridge_slave_1: entered allmulticast mode [ 201.707958][T14074] bridge_slave_1: entered promiscuous mode [ 201.744599][T14074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.750612][T14074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.775557][T14074] team0: Port device team_slave_0 added [ 201.777924][T14074] team0: Port device team_slave_1 added [ 201.785026][T14119] fuse: fd is not a fuse device [ 201.800478][T14074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.800496][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.800525][T14074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.802174][T14074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.802186][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.802208][T14074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.841489][T14074] hsr_slave_0: entered promiscuous mode [ 201.842357][T14074] hsr_slave_1: entered promiscuous mode [ 201.842889][T14074] debugfs: 'hsr0' already exists in 'hsr' [ 201.842905][T14074] Cannot create hsr debugfs directory [ 201.971590][T14127] tmpfs: Unknown parameter 'grpquota_block_har' [ 201.973786][T14074] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.021585][T14129] __nla_validate_parse: 7 callbacks suppressed [ 202.021598][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'. [ 202.021607][T14129] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.052834][T14131] afs: Unknown parameter 'floc5¿ p¨óÉ s' [ 202.053855][T14074] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.180221][T14074] bond0: (slave netdevsim1): Releasing backup interface [ 202.181596][T14074] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode [ 202.183123][T14074] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.270148][T14074] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.453359][T14074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.456705][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.457410][T14074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.462726][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.463695][T14074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.471595][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.472508][T14074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.475543][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.530337][T14074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.539399][T14074] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.543042][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.543122][ T7132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.552068][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.552153][ T7132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.884101][T14074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.040658][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'. [ 203.040682][T14179] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.077792][T14074] veth0_vlan: entered promiscuous mode [ 203.095622][T14074] veth1_vlan: entered promiscuous mode [ 203.129605][T14074] veth0_macvtap: entered promiscuous mode [ 203.137216][T14074] veth1_macvtap: entered promiscuous mode [ 203.154847][T14074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.161016][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'. [ 203.163496][ T5730] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 203.164167][T14074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.186529][ T5829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.186613][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.186641][ T5829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.186670][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.276241][ T5730] Bluetooth: hci3: command tx timeout [ 203.318351][ T7132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.318372][ T7132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.352698][T14202] netlink: 'syz.0.2765': attribute type 63 has an invalid length. [ 203.352721][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2765'. [ 203.389541][ T7129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.389563][ T7129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.397758][ T43] audit: type=1400 audit(1790225806.057:2543): avc: denied { mounton } for pid=14074 comm="syz-executor" path="/syzkaller.cQ1cux/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 203.511776][T14215] 8021q: VLANs not supported on ipvlan1 [ 203.652470][T14231] FAULT_INJECTION: forcing a failure. [ 203.652470][T14231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.652502][T14231] CPU: 3 UID: 0 PID: 14231 Comm: syz.5.2777 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.652529][T14231] Tainted: [L]=SOFTLOCKUP [ 203.652535][T14231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.652547][T14231] Call Trace: [ 203.652555][T14231] [ 203.652562][T14231] dump_stack_lvl+0x100/0x190 [ 203.652596][T14231] should_fail_ex.cold+0x5/0xa [ 203.652623][T14231] _copy_from_user+0x2e/0xd0 [ 203.652662][T14231] copy_msghdr_from_user+0x9f/0x4c0 [ 203.652686][T14231] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 203.652713][T14231] ? lock_acquire+0x1d1/0x380 [ 203.652733][T14231] ? get_pid_task+0x2a/0x250 [ 203.652763][T14231] ___sys_sendmsg+0x106/0x1e0 [ 203.652784][T14231] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.652803][T14231] ? get_pid_task+0x106/0x250 [ 203.652839][T14231] ? find_held_lock+0x2b/0x80 [ 203.652880][T14231] __sys_sendmsg+0x160/0x210 [ 203.652906][T14231] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.652947][T14231] do_syscall_64+0x123/0x790 [ 203.652978][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.652999][T14231] RIP: 0033:0x7f519f19e159 [ 203.653015][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.653032][T14231] RSP: 002b:00007f51a013d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.653051][T14231] RAX: ffffffffffffffda RBX: 00007f519f425fa0 RCX: 00007f519f19e159 [ 203.653065][T14231] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 203.653076][T14231] RBP: 00007f51a013d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.653088][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.653099][T14231] R13: 00007f519f426038 R14: 00007f519f425fa0 R15: 00007ffcb2845718 [ 203.653124][T14231] [ 203.814644][T14245] syzkaller1: entered promiscuous mode [ 203.814658][T14245] syzkaller1: entered allmulticast mode [ 203.871736][T14251] batadv_slave_0: entered promiscuous mode [ 203.872748][T14251] bridge_slave_0: entered promiscuous mode [ 203.928115][T14256] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 203.958415][ T43] audit: type=1400 audit(1790225806.617:2544): avc: denied { write } for pid=14254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.041694][ T43] audit: type=1400 audit(1790225806.697:2545): avc: denied { write } for pid=14264 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.167970][ T43] audit: type=1400 audit(1790225806.827:2546): avc: denied { write } for pid=14270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.168006][T14274] batadv_slave_0: entered promiscuous mode [ 204.168189][T14274] batadv_slave_0: left promiscuous mode [ 204.282194][ T43] audit: type=1400 audit(1790225806.937:2547): avc: denied { write } for pid=14280 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.448734][ T43] audit: type=1400 audit(1790225807.107:2548): avc: denied { write } for pid=14289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.527869][ T43] audit: type=1400 audit(1790225807.187:2549): avc: denied { write } for pid=14302 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.588863][T14307] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 204.675776][T14313] binder: 14312:14313 ioctl c0306201 0 returned -14 [ 204.831079][T14328] netlink: 149 bytes leftover after parsing attributes in process `syz.0.2804'. [ 204.840865][T14327] batadv_slave_1: entered promiscuous mode [ 204.898526][T14326] batadv_slave_1: left promiscuous mode [ 205.308426][T14364] kAFS: unable to lookup cell '(,c¾Ì' [ 205.309301][T14364] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 205.355319][ T5730] Bluetooth: hci3: command tx timeout [ 205.441074][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2818'. [ 205.793726][T14406] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 206.021667][T14416] afs: Unknown parameter 'floc5¿ p¨óÉ s' [ 206.298402][ T5730] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 206.298427][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.298454][ T5730] Tainted: [L]=SOFTLOCKUP [ 206.298461][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.298474][ T5730] Workqueue: hci4 hci_rx_work [ 206.298515][ T5730] Call Trace: [ 206.298521][ T5730] [ 206.298529][ T5730] dump_stack_lvl+0x100/0x190 [ 206.298559][ T5730] sysfs_warn_dup.cold+0x1c/0x28 [ 206.298586][ T5730] sysfs_create_dir_ns+0x24b/0x2b0 [ 206.298617][ T5730] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 206.298640][ T5730] ? find_held_lock+0x2b/0x80 [ 206.298665][ T5730] ? kobject_add_internal+0x25f/0x930 [ 206.298690][ T5730] ? kobject_add_internal+0x25f/0x930 [ 206.298732][ T5730] ? do_raw_spin_unlock+0x145/0x1e0 [ 206.298759][ T5730] kobject_add_internal+0x2c8/0x930 [ 206.298785][ T5730] kobject_add+0x16a/0x1e0 [ 206.298806][ T5730] ? __pfx_kobject_add+0x10/0x10 [ 206.298824][ T5730] ? class_to_subsys+0x10f/0x150 [ 206.298850][ T5730] ? kobject_put+0xb9/0x640 [ 206.298861][ T5730] ? _raw_spin_unlock+0x28/0x50 [ 206.298879][ T5730] device_add+0x294/0x1970 [ 206.298900][ T5730] ? __pfx_dev_set_name+0x10/0x10 [ 206.298917][ T5730] ? __pfx_device_add+0x10/0x10 [ 206.298940][ T5730] ? mgmt_send_event_skb+0x2fb/0x460 [ 206.298971][ T5730] hci_conn_add_sysfs+0x1a3/0x260 [ 206.298996][ T5730] le_conn_complete_evt+0x122f/0x2130 [ 206.299025][ T5730] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 206.299051][ T5730] ? hci_event_packet+0x186/0xcd0 [ 206.299073][ T5730] ? hci_event_packet+0x186/0xcd0 [ 206.299101][ T5730] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 206.299123][ T5730] ? skb_pull_data+0x15f/0x1e0 [ 206.299144][ T5730] hci_le_meta_evt+0x34a/0x5f0 [ 206.299158][ T5730] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 206.299175][ T5730] hci_event_packet+0x51c/0xcd0 [ 206.299198][ T5730] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 206.299220][ T5730] ? __pfx_hci_event_packet+0x10/0x10 [ 206.299247][ T5730] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.299275][ T5730] hci_rx_work+0x451/0xfc0 [ 206.299297][ T5730] process_one_work+0xac7/0x1b10 [ 206.299332][ T5730] ? __pfx_process_one_work+0x10/0x10 [ 206.299359][ T5730] ? lock_acquire+0x1d1/0x380 [ 206.299385][ T5730] ? __pfx_hci_rx_work+0x10/0x10 [ 206.299414][ T5730] worker_thread+0x5ef/0xe50 [ 206.299449][ T5730] ? kthread+0x13a/0x450 [ 206.299472][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 206.299497][ T5730] kthread+0x373/0x450 [ 206.299518][ T5730] ? __pfx_kthread+0x10/0x10 [ 206.299536][ T5730] ret_from_fork+0x730/0xd60 [ 206.299553][ T5730] ? __pfx_ret_from_fork+0x10/0x10 [ 206.299567][ T5730] ? __switch_to+0x800/0x10f0 [ 206.299583][ T5730] ? __pfx_kthread+0x10/0x10 [ 206.299601][ T5730] ret_from_fork_asm+0x1a/0x30 [ 206.299622][ T5730] [ 206.301886][T14429] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 206.303034][ T5730] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 206.303065][ T5730] Bluetooth: hci4: failed to register connection device [ 206.311301][T14427] netlink: Unknown conntrack attr (type=10243, max=9) [ 206.311331][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.929894][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2845'. [ 206.969378][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2846'. [ 206.974702][T14454] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 207.210838][T14474] afs: Unknown parameter 'floc5¿ p¨óÉ s' [ 207.405886][T14484] ecryptfs_get_tree: kern_path() failed [ 207.411121][T14484] Reading sb failed; rc = [-2] [ 207.445337][ T5730] Bluetooth: hci3: command tx timeout [ 208.458105][T14506] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2868'. [ 208.925787][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'. [ 208.925806][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'. [ 208.925816][T14543] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 208.925826][T14543] iwpm_mapping_info_cb: Unable to parse nlmsg [ 208.939028][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 208.939046][ T43] audit: type=1400 audit(1790225811.597:2560): avc: denied { execute } for pid=14540 comm="syz.5.2878" dev="hugetlbfs" ino=50407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 208.942188][ T43] audit: type=1400 audit(1790225811.597:2561): avc: denied { execute_no_trans } for pid=14540 comm="syz.5.2878" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9240C1A65E0202864656C6574656429 dev="hugetlbfs" ino=50407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 209.467301][T14564] fuse: fd is not a fuse device [ 209.515527][ T5730] Bluetooth: hci3: command tx timeout [ 209.541239][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2884'. [ 209.541872][ T43] audit: type=1400 audit(1790225812.197:2562): avc: denied { mounton } for pid=14565 comm="syz.7.2884" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 209.747579][T14544] rxrpc: AF_RXRPC: Leaked client conn ffff888046b6e000 {1} [ 209.748074][T14544] ------------[ cut here ]------------ [ 209.748081][T14544] kernel BUG at net/rxrpc/conn_client.c:64! [ 209.748095][T14544] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 209.755945][T14544] CPU: 3 UID: 0 PID: 14544 Comm: krxrpcio/4660 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.761468][T14544] Tainted: [L]=SOFTLOCKUP [ 209.762944][T14544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.766341][T14544] RIP: 0010:rxrpc_purge_client_connections+0xc0/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 209.768391][T14544] Code: 2b 31 db 48 8d 6c 24 28 e8 1d 43 15 f7 48 89 ee 4c 89 ef 89 5c 24 28 e8 4e 86 d0 00 48 89 c3 48 85 c0 75 73 e8 01 43 15 f7 90 <0f> 0b e8 f9 42 15 f7 31 f6 4c 89 ef e8 7f 66 d5 00 31 ff 89 c3 89 [ 209.774674][T14544] RSP: 0018:ffffc9000603fa80 EFLAGS: 00010293 [ 209.776596][T14544] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 209.778927][T14544] RDX: ffff888057c2a580 RSI: ffffffff8af6df8f RDI: ffff888057c2a580 [ 209.781268][T14544] RBP: ffffc9000603faa8 R08: 0000000000000007 R09: 000000007fffffff [ 209.783644][T14544] R10: 0000000012cac421 R11: 0000000000000001 R12: ffff888046b6e038 [ 209.785993][T14544] R13: ffff888046b6b270 R14: ffff888046b6b038 R15: ffff88802e0c0180 [ 209.788369][T14544] FS: 0000000000000000(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 209.790948][T14544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.793084][T14544] CR2: 00007feedabeb840 CR3: 000000005e24f000 CR4: 0000000000352ef0 [ 209.795566][T14544] Call Trace: [ 209.796650][T14544] [ 209.797632][T14544] ? __pfx_rxrpc_purge_client_connections+0x10/0x10 [ 209.800091][T14544] ? rxrpc_purge_queue+0xad/0xd0 [ 209.801952][T14544] rxrpc_destroy_local+0x262/0x300 [ 209.803639][T14544] rxrpc_io_thread+0x2e1a/0x3820 [ 209.805274][T14544] ? do_raw_spin_lock+0x128/0x260 [ 209.807057][T14544] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 209.809049][T14544] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 209.811134][T14544] ? __set_cpus_allowed_ptr_locked+0x31c/0x7e0 [ 209.813272][T14544] ? __lock_acquire+0x5c0/0x1f40 [ 209.815370][T14544] ? __mutex_unlock_slowpath+0x35d/0x930 [ 209.817501][T14544] ? lockdep_count_forward_deps+0x180/0x200 [ 209.819619][T14544] ? do_raw_spin_lock+0x128/0x260 [ 209.821200][T14544] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.822784][T14544] ? __kthread_parkme+0x18f/0x230 [ 209.824294][T14544] ? kthread+0x13a/0x450 [ 209.825625][T14544] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 209.827245][T14544] ? kthread+0x373/0x450 [ 209.828560][T14544] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 209.830172][T14544] kthread+0x373/0x450 [ 209.831459][T14544] ? __pfx_kthread+0x10/0x10 [ 209.832868][T14544] ret_from_fork+0x730/0xd60 [ 209.834352][T14544] ? __pfx_ret_from_fork+0x10/0x10 [ 209.836208][T14544] ? __switch_to+0x800/0x10f0 [ 209.837999][T14544] ? __pfx_kthread+0x10/0x10 [ 209.839665][T14544] ret_from_fork_asm+0x1a/0x30 [ 209.841299][T14544] [ 209.842261][T14544] Modules linked in: [ 209.844236][T14544] ---[ end trace 0000000000000000 ]--- [ 209.846607][T14544] RIP: 0010:rxrpc_purge_client_connections+0xc0/0x1a0 [ 209.846628][T14544] Code: 2b 31 db 48 8d 6c 24 28 e8 1d 43 15 f7 48 89 ee 4c 89 ef 89 5c 24 28 e8 4e 86 d0 00 48 89 c3 48 85 c0 75 73 e8 01 43 15 f7 90 <0f> 0b e8 f9 42 15 f7 31 f6 4c 89 ef e8 7f 66 d5 00 31 ff 89 c3 89 [ 209.846638][T14544] RSP: 0018:ffffc9000603fa80 EFLAGS: 00010293 [ 209.846648][T14544] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 209.846654][T14544] RDX: ffff888057c2a580 RSI: ffffffff8af6df8f RDI: ffff888057c2a580 [ 209.846661][T14544] RBP: ffffc9000603faa8 R08: 0000000000000007 R09: 000000007fffffff [ 209.846667][T14544] R10: 0000000012cac421 R11: 0000000000000001 R12: ffff888046b6e038 [ 209.846674][T14544] R13: ffff888046b6b270 R14: ffff888046b6b038 R15: ffff88802e0c0180 [ 209.846680][T14544] FS: 0000000000000000(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 209.846705][T14544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.846714][T14544] CR2: 00007feedabeb840 CR3: 0000000030150000 CR4: 0000000000352ef0 [ 209.846722][T14544] Kernel panic - not syncing: Fatal exception [ 209.880705][T14544] Kernel Offset: disabled [ 209.882094][T14544] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:52:36 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff91e6dc0c RBX=ffffffff915d5918 RCX=dffffc0000000000 RDX=0000000000000003 RSI=0000000000000000 RDI=ffffffff915d590c RBP=ffffffff915d590c RSP=ffffc90006fd6f38 R8 =ffffffff91e6dc36 R9 =0000000000000000 R10=ffffc90006fd7038 R11=000000000000b0a9 R12=ffffffff915d5924 R13=ffffffff81b0a942 R14=ffffffff915d590c R15=ffffffff915d590c RIP=ffffffff81b99a2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feedb9f06c0 ffffffff 00c00000 GS =0000 ffff8880d5b53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000707000 CR3=000000002cc37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0043e026 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0043e026 00007ffc0043e02c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffffffff82c4d100 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8bf19a80 RDI=ffff88802b72ddc0 RBP=ffff88802b72ddc0 RSP=ffffc90005a37ac0 R8 =0000000000000000 R9 =ffffed1003ad4b0d R10=ffff88801d6a586b R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=ffff88801d6a5868 R15=0000000080000001 RIP=ffffffff85352e84 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feedba116c0 ffffffff 00c00000 GS =0000 ffff8880d5c53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b4b247cf40 CR3=000000002cc37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedb95d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0043e026 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0043e026 00007ffc0043e02c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedac35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 da0d751232f03f01 c83d23fe6ea02838 d7c1ef49e6e1c2db 73b0ffffffef1120 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1cd684dd68b3c25e 2dc29debc51ad1e6 dff45328635df6ed 9dd9eed9e849da0d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feedadf25f8 00007feedadf25c8 00007feedadf2600 00007feedadf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000119ba4 RBX=ffff88801f2d2580 RCX=ffffffff8bd191c5 RDX=0000000000000001 RSI=ffffffff8c623500 RDI=ffffffff81e0754e RBP=ffffed1003e5a4b0 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=ffffffff81d74e59 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd176ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=00000000478f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb9f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1d74b496 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1d74b496 00007ffc1d74b49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb923564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb923568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb92357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb9235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb93f2600 00007fbeb93f25e0 00007fbeb93f25e8 00007fbeb93f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb93f25f8 00007fbeb93f25c8 00007fbeb93f2600 00007fbeb93f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b125c5 RDI=ffffffff9bc71ea0 RBP=ffffffff9bc71e60 RSP=ffffc9000603f228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000034 R14=000000000000000d R15=ffffc9000603f540 RIP=ffffffff85b125ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feedabeb840 CR3=000000005e24f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b035d191619a86a0 4234b702ed155369 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 346d1fc6938d2ac8 19f9976ae79910aa ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cfca036c0c1c370 7898f3bfe22533a4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cbd6abb852fec69 bf38b34a47503fde ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 284c4bb6000570e5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 0000000000000080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000f7e155 284880160001bbdc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 285b6a5c0002adce 0000000028473038 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a669783e0127e7 2fa9cc84a4c0351b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84ca7a708a6293f4 04cf75aaccfa037f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d50ff2600 00007f1d50ff25e0 00007f1d50ff25e8 00007f1d50ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d50ff25f8 00007f1d50ff25c8 00007f1d50ff2600 00007f1d50ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000