last executing test programs: 6m6.260140225s ago: executing program 3 (id=708): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r2 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc20x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000140)=""/150, 0x96, 0x10061, &(0x7f0000000200)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80) 6m4.886717852s ago: executing program 3 (id=711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x34, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xff000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 6m4.501414241s ago: executing program 3 (id=713): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/Loopback.usb0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r1, 0x12) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, 0x0, 0x0, 0x200) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xff000000, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0xff, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 6m3.745105247s ago: executing program 3 (id=715): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000280)=0x4, 0x4) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x48040) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x20000) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000300)={0x31, &(0x7f0000000100)=[{0x1d, '\x00', @st={0x4, [{0x2, @svalue=0x8001}, {0x1, @svalue=0x4}, {0x2}, {0x0, @svalue=0x9}]}, 0x2}]}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x81000) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x7d9}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x10200, 0x2, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e23, 0x31190e8e, @mcast2, 0x4}, 0x1c) (async) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x2, 0x3) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 6m0.990498698s ago: executing program 3 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2], 0x60}}, 0x0) (fail_nth: 7) 6m0.686246448s ago: executing program 32 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2], 0x60}}, 0x0) (fail_nth: 7) 3m17.263819373s ago: executing program 1 (id=1932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x1, 0x7, 0x4, 0x5, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r0, 0x82}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 3m16.25274599s ago: executing program 1 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r0, &(0x7f00000003c0)="91", 0xffffffb5) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="e362af07de04e5c83d6b8e0dfae0038ded0866f70510f531f8", 0x19, r0}, 0x68) close(r0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) execveat(r1, &(0x7f00000004c0)='./file0/file1\x00', &(0x7f0000000200)={[&(0x7f0000000180)=',{^\x00', &(0x7f00000001c0)='{-{\x00']}, &(0x7f0000000480)={[&(0x7f0000000240)='metacopy=on', &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000002c0)='lowerdir', &(0x7f0000000340), &(0x7f00000003c0)='meta\xaecopy=q', &(0x7f0000000440)='{:/$$+/$#/@{\xdf&}{]}%\x00']}, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600b40900000800810009000000080027000200f5"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r5, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 3m15.330475344s ago: executing program 1 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 3m14.763530493s ago: executing program 1 (id=1954): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200d02) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) close(0x3) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x7, 0x8) poll(&(0x7f0000000d40)=[{r0, 0x8}], 0x1, 0x7) 3m14.673853715s ago: executing program 1 (id=1955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty, 0xfffffffd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000301140fe800000000000000300000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) 3m13.3913327s ago: executing program 1 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000040000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2], 0x60}}, 0x0) 3m12.947961875s ago: executing program 33 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000040000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2], 0x60}}, 0x0) 2m53.793882054s ago: executing program 2 (id=2056): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="f3af66b8010000000f01c12e670f01c3660fc77002f20f1c006766c74424006a0000006766c7442402f9ffffff6766c744240600000000670f011424660f38806600640fc7acae00ba4000ec0fa7c0"}], 0x1, 0x82, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e"], 0xec) 2m53.490849573s ago: executing program 2 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x34}}, 0x20040890) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0xffffffffffffff7b}, 0x1, 0x0, 0x0, 0x10}, 0x4880) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 2m52.663761219s ago: executing program 2 (id=2068): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6014d71800140600fe8000000000000000000000000007aafe80000d00"], 0x0) 2m52.573752284s ago: executing program 2 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4201, 0x800000, @local}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1e, 0x2, @remote, 0x806}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) (async) syz_emit_ethernet(0x16a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/362], 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) (async) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x400800, 0x8, 0x24}, 0x18) (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x1, 0x1, 0x8, 0x4, 0xc, "73c1ddad094153138e890feafeeae28e51a56e", 0x5a4, 0x1ff}) 2m52.461475417s ago: executing program 2 (id=2070): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x1c, 0x80, 0x9, 0x48, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0xc0, 0x19f, 0x5}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000049c0)="bc", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000100000000000000100000018000000040000001d00000007000000851000bcc2fffffb183800000100000000000000000000009500000000002000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x66, &(0x7f0000000000)=""/102, 0x0, 0x63, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa04000000000000000004aa00137ddc030000"], 0x0) 2m52.066800939s ago: executing program 2 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.918354253s ago: executing program 34 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.192672409s ago: executing program 0 (id=3447): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r2, 0x80000000}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0xff}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049e0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x4804, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`\xcd4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x90) fchmodat(r6, &(0x7f0000000140)='./file0\x00', 0xc) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x1, 0x7, 0x4, 0x5, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) r8 = openat(0xffffffffffffff9c, 0x0, 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r8, 0x82}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl(r5, 0x8b2a, &(0x7f0000000400)="18ac6709b307301b1a9476c896774c84354024ac575518c83fbb073ae4fb0f9df3c031c104eba5141f2e15f0b9f804e145dfc0503384bb112c6288ae8a010cb7ddd25af0ef27762b6fd0958bfdd9f8d0a324be70dc815205fb45f556bcc80398882134401a5fb8f042d24aa7a359a092333da125ca84d073b4d822629888cfede9997015305665726c3b73f6c07a122f7942bfdc00d018576e") 37.271247778s ago: executing program 0 (id=3459): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000007fff000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 37.269995373s ago: executing program 0 (id=3461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000280)=@phonet={0x23, 0x7, 0x9, 0xbb}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)="76f3af5a720d768ff7b30bf7f935abdfb9eca7a19245803e7472558d8c4dc0589a76d1a3f2644927e5708a4d6e7bf7f0a76f0922127d722c1fcb84de8946bcfd8a641125ea0ee1eaa9fcd40641d262e9ab0c6563764987085f8a3bbace4d2697421eb27f3165c95ed93cf1ace299f7bdc14908562c7cc1ae1289ac1d770d4c454380a66ff332396d92603bbeb2f4f04b5b", 0x91}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="424f9d43399953eea7c0e2edb7b529c80601dda0c80324762df846cc0438a30efd6772010182f445972fa375d60f", 0x2e}], 0x3, &(0x7f0000001580)=[{0x38, 0x3a, 0x101, "a5c09e5ed28522e0099fe522c9d46c78e52644d1957ab82b48289b9ece96b5cb0b96"}, {0xa0, 0x113, 0x6, "a6f7434899c67b123ca631749dfa5c8948ce923e829e88ffff91cba0f1e12f7dd130dcff08435d495a58c60e652e1e02d58be5c929acbcde06213a99a0e87e3b59b2c20820a2eb6d117fbf94a1fbb6a4eb636ed97ce6d4a05dc606a801d44d4d77d554487d6080a96a7866353797b85d8a9cfc5743da3a2cec0df4c1257488a56741a44539b5e3e155de2c2c487b2a"}, {0x40, 0x113, 0x3ff, "b0d34f19d037cec8c7ad25baf170406b34d6f79e9bd201c40801f2f93a30a18bb8cc8e3a036c5067de46"}, {0x98, 0x10e, 0xfffffffc, "0c42cb3e88534e506b94272a9125673bf560a7b3ff7f9a49cf500138b707fdf7e2428164858046b620aff69f7ef37dba5ebca39d75764d833aca002be12d3331de9a157550d176747212369d11d36bea3c51ec61d0e7d750cc872e072b3a04b128965b9431ae17c7dd35861046517878f170d98c8e65a0ea3740ecceb4c4e0d17d6003"}, {0x38, 0x110, 0x9, "86d2db8660c043036c102d7ddf7f7db1be585b25b4b466329f9dca89627ea20d2c53"}], 0x1e8}}, {{&(0x7f0000001780)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001800)="8325665fe8", 0x5}, {&(0x7f0000001840)="35ef72a242ddaec294392bbe45c719c25275002abcaa02adb2b4d13199a10839002beb8550ec62549b7bc4", 0x2b}], 0x2}}, {{&(0x7f0000001940)=@xdp={0x2c, 0xb, 0x0, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000019c0)="68a3efdf77e9eaaf986b496b875de77e23d36dcc77394abf975fb19adde84e85bcbf46c210d0a907ee1010535e0ac89f2e88b8f71a8d240de1128bc0a26cf930d626132af40f702a0dbd9f65c628d0f2265d21af14e72e43fd0747548a947db355d527322a5387c8c1a89d432114eb55db5ed53c7e0f1aa9199e43e28b6b10bf4880", 0x82}, {&(0x7f0000001a80)="3b298b02b3bcaa90e8f7234f71e3d12c2e287d3244b3b946f9d7188fba117204609cf975992f1ff9b3d0bd465e9bfecea96e88d5386505fecc92b5794a44b2fc0f0b0f7f07c227996bbced6760f442ba0b3c50ce89dc7c4365ec39e0467560ebfa02bd69f7c4fe8ba076f304411d56cb57dd7992d817a85a4b869b565b5c35802dd71b5a7b30fbb0408e1ded9c7ae77e13bcec74a06d3c65c18d8809dca0fc077aa69a2776a5610b3903d79bb7661cc294ddebd32c9864a1ae765cc75919de5f558384b494110a5aeb3b4a320edd1a27ecf2b3ab72431fac7c497fe9c5dc152dce", 0xe1}, {&(0x7f0000001b80)="9a7cbea10ecf47b480b655655c3222de36f86fb99686fe8c7870a8a7684c6c967a6f2ab9dc3797ed50abab629363c0e797e56bc258c62da960b73449a4209956bfd21859313118055e6fd653d6defcfdf23f31cea85dbaf5878021d1aa30cf49193bd1162b4a7135f7fc020a5835c0c3e63a61c563f51f6c096e2095ab59b6dbdb13f74c3aba0daa6acc9aa332ae92cce5050abdc9273fed075922daf0be3c62b10143dd49be28de340a1ec9ba5896602195f34d2540b8da989f289933e5ed8515a9a73c90ad12d8f63ef597823f5724701e6482201217ac775876fe799226f3861a5828f6db21", 0xe7}], 0x3, &(0x7f0000001cc0)=ANY=[@ANYBLOB="f0532290f738000000000000efffffff03000000386da4ee21ee5504129b8a1ffaedafe44808a0b190e26cf5ddca7d94fb6d535692544e00"], 0x38}}], 0x3, 0x48800) 37.251075403s ago: executing program 0 (id=3463): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100008dff02"}) 37.163528912s ago: executing program 0 (id=3467): r0 = syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000001180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}]}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000080)='0\x00', 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xd, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 37.163319594s ago: executing program 0 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0c, {0x2, 0x0, @rand_addr=0x64010102}, 'veth0_to_bond\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x52, {0x2, 0x2000, @private=0xa010102}, 'syz_tun\x00'}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 23.780933243s ago: executing program 4 (id=3631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000002000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80f0ff000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 23.703424201s ago: executing program 4 (id=3633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000fff5020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 23.703048411s ago: executing program 4 (id=3635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000280)=@phonet={0x23, 0x7, 0x9, 0xbb}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)="76f3af5a720d768ff7b30bf7f935abdfb9eca7a19245803e7472558d8c4dc0589a76d1a3f2644927e5708a4d6e7bf7f0a76f0922127d722c1fcb84de8946bcfd8a641125ea0ee1eaa9fcd40641d262e9ab0c6563764987085f8a3bbace4d2697421eb27f3165c95ed93cf1ace299f7bdc14908562c7cc1ae1289ac1d770d4c454380a66ff332396d92603bbeb2f4f04b5b", 0x91}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="424f9d43399953eea7c0e2edb7b529c80601dda0c80324762df846cc0438a30efd6772010182f445972fa375d60f", 0x2e}], 0x3, &(0x7f0000001580)=[{0x38, 0x3a, 0x101, "a5c09e5ed28522e0099fe522c9d46c78e52644d1957ab82b48289b9ece96b5cb0b96"}, {0xa0, 0x113, 0x6, "a6f7434899c67b123ca631749dfa5c8948ce923e829e88ffff91cba0f1e12f7dd130dcff08435d495a58c60e652e1e02d58be5c929acbcde06213a99a0e87e3b59b2c20820a2eb6d117fbf94a1fbb6a4eb636ed97ce6d4a05dc606a801d44d4d77d554487d6080a96a7866353797b85d8a9cfc5743da3a2cec0df4c1257488a56741a44539b5e3e155de2c2c487b2a"}, {0x40, 0x113, 0x3ff, "b0d34f19d037cec8c7ad25baf170406b34d6f79e9bd201c40801f2f93a30a18bb8cc8e3a036c5067de46"}, {0x98, 0x10e, 0xfffffffc, "0c42cb3e88534e506b94272a9125673bf560a7b3ff7f9a49cf500138b707fdf7e2428164858046b620aff69f7ef37dba5ebca39d75764d833aca002be12d3331de9a157550d176747212369d11d36bea3c51ec61d0e7d750cc872e072b3a04b128965b9431ae17c7dd35861046517878f170d98c8e65a0ea3740ecceb4c4e0d17d6003"}, {0x38, 0x110, 0x9, "86d2db8660c043036c102d7ddf7f7db1be585b25b4b466329f9dca89627ea20d2c53"}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001800)="8325665fe8", 0x5}, {&(0x7f0000001840)}], 0x2}}], 0x2, 0x48800) 23.657627092s ago: executing program 4 (id=3637): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x1, @remote, @local}}}}, 0x0) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) ioctl$EVIOCGVERSION(r8, 0x80044501, &(0x7f0000001e40)=""/161) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 22.643037973s ago: executing program 4 (id=3648): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r1, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r2 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$igmp6(0xa, 0x3, 0x3a) 22.313412668s ago: executing program 4 (id=3651): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400feffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 22.254479512s ago: executing program 35 (id=3651): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400feffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 22.088048863s ago: executing program 36 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0c, {0x2, 0x0, @rand_addr=0x64010102}, 'veth0_to_bond\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x52, {0x2, 0x2000, @private=0xa010102}, 'syz_tun\x00'}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 1.702748978s ago: executing program 8 (id=4046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000001800000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.633140663s ago: executing program 8 (id=4048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002"], 0x44}, 0x1, 0x0, 0x3f}, 0x0) 1.631742701s ago: executing program 8 (id=4051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="0f20e035002000000f22e0f0f79311b700000fa58f0c470000650f01cbb9800000c00f3235010000000f30360fae95003800000f019a0100000066b84d000f00d0dbe10f78ce", 0x46}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.40290746s ago: executing program 8 (id=4057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="53d7d8a2530e6d61a6140724cbc58819000000040000419df5cf939d75d94e37f25f0000000016da26c9", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 1.322770078s ago: executing program 8 (id=4061): syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @void, {@generic={0x88f7}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0x3, @empty, 0x3ff}}, 0x1}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r3, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) 901.30284ms ago: executing program 6 (id=4070): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) dup3(r1, r0, 0x80000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100), 0x4) fcntl$setstatus(r0, 0x4, 0x2400) write(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)="5b1e9d92092cf9c72957c6f6fb99279c1cc4230ba958d32e574f39cada6bd8656e65854f4d35ec4aaa352c02", 0x2c, 0xffffffffffffffff) 830.765995ms ago: executing program 6 (id=4072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2], 0x60}}, 0x0) 830.497683ms ago: executing program 5 (id=4073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x1}) 829.590347ms ago: executing program 6 (id=4074): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x6, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic="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", @typed={0x0, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x0, 0x6d, 0x0, 0x1, [@typed={0x0, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x0, 0xbf, 0x0, 0x1, [@nested={0x0, 0x45}, @generic="49a49406d3aca5aea2d74aeb6365364a92aa2d172992ecba8dfd5ef365004e572658a3f9f4b34e3adfef29471b51337b45dc1f2076d624e9060d1bf1e4b7e3585a9e954be6e1eb1fb9275d2330d10fa518eaeaec4eb2ad955d7bca07a9b8e418c875caddfc931734cf9f1d8ee1efcae3e2dd52fa175326d0c19641ae404979698addfe63eba0d780732012ab7769f50ccdb800c59b405f17d9b59e3af3807462ae43bd1563e9313becf114c7e76f22a7d8a37609cede9ca85facd280b0e61f4767413b67703517f86fddd635a7549ebee3fd70494e3d78853e4336f3fb00742687f94a7263a536390ce2280835cfb955f6efdacc1fdbaf37f2a9970decc36d45096ca1c548ba0e2409f7284a38957defa5bff0034355761dbfa47e2e16da29d4a747f1ae780f63107addd898d1cc002b8984b708e8c55de4c57b68188e453904973aab1437507a130959a546af61b772ff3804a0f9d27eb76d667064e47838a04a955f28d7e50d7c4709bcefb78e51b3600d2a9074b32705f94688c85568987637ead77525b54d693c62d316632bda803faefaa5bccd6ea4e37e9836e4dd923b8b7939c6f7dec81742ee2a6729199b841b9813e4f3ed8acdecf4409b0deeca74779906b28c06c8cd6b80db8e206466227b2a1de3cc9bda998e06ea82064d2d6cbbd1452377bb0c7cf89ac6c33359d88f2f44f13261ca9ead98fdddac045b67514e55d0a812c01a8e7fc792cd8ee67773aea88b302131f85c29218afedcb3bf757e5645cf45d377b1d8b97f38a40928a75bf94b6b2632aba15f06952b3c3c95d848ac647de8c6864528dc9969342440e54ef186f654710e95abf2178026d4b70017933ed74d9f80208fb851d3c91ac3ca4b78ac88bac39f9b7aa6fc21f006e6770b03071e43c3ee07f5228da41a89e3dd52570a4d4c4a9f53765853b8ce4784341ed4fae186a7ed27cb40a2c807f382ab2575658879a47326920cf5d41f0e3263fae57610780a22596c0a83218bd8d2ad51ca931d06b2d68963ad2e1bd89acef0007a8e0983a41c4eb9a1b162ebfb5afb24bb96e163d7d3e53197d5b944a7bb87d3ed5a551b93058b9fadc5c51c27033ff4c45e9f87af69793a524842b4ad2ddfb4ea10fc663929673a005631527b71a273ef9f940dbe59b6f40ead7a38182fafa0a66cae105d6cb883870fcafbf5928cc82378835898fd78eebfea862ca2694952f0b6ceb06296178dd33d4f16a4c45dc00897822dc3bc40c50de768adf3ef6a123c2625971ed41978523fceedf0316ffcc20cf0e3a0a7b3835d3b1cea548e7b17fd6b419ec75ea8ad1c9e021986ba836c2374f4b3055f5a8e3ca487404094cd41849e3d6d8621ba2f4efbad6270c192712475ebc4a00f1b9ff5d3d989234e0a97293fb9d3531c13eb37c39247b21a0d9ffa1f4ad7f148ffcd51d8953f7e37e6745e828ebf2bee16d35cfeffd3df2cd620e6d24d43a660f280df49d2b4e79b7bd8fb77eba54f7dd5fa15e069a71ad0a90ad2cddc9840d2b86e25825c7f80e72d74b8121750193b5151bad2e0d310a75ff492d8cd78af0b05b5613414266246e0e198cc8b4472267c40818d786ca41518f2dd21d8ffa8bfc03817d11a03d61a42b406d7dd55a57494fa44458b71d59a4b635da74d5743bf331f0e7e7b0a83c97a1c6040f4b669e5cf901cc670402a3add6c9df3bfb3ac5c099bc59cc4d7d087d217abfac1933326ee13e00f6ea2030adf46ee0d58010c229b602c70ecb449e7cc967942b9aeb2a8043e2d9aee636d00a062a2768b0472a7936b3fef92dacce739e299dba6f2c418143f6f1ae089c22a5c5cd9e6fb3232518022c9301d0d054326bc96f74a586500cdfd0401d4ab8794ed456c187d9d7cd8e1822931b903750ad02398dc5080b48f8c591f886e58d97b0be90a9975ee24ff6de9267417878f977a4c4ee8f4607e3baab27a26513b2aa13ba54038533badec60ce88c441269a84ca0302d987122910f9c08e49249575798d31539ae49cae5b68a3a7be7da3a1843bf1cf0bb8abc4fc43bb2ed979709c0f919d95e3998db3e2d48f7aa2f312aa748ccd236ca4224ac3eadcd815b2699b2e47daaf2d28855073ecfbfa48bd62916d1c1c6d13a577d5259bee9ffa5ddce6b9e48fa369265955662b62794a8442f1e8189ecee41552631b55af094209189450535c568e8eac511fa750e4f65a201d8f6ce1fa17538254ed80cf1e77928ecf98b54a3281bbea6881a0c3d0dd8bf8f9912c168426ecd1ba8fc41846bc786c1e83a9ca43e3b342c9b35cde32b5c7ed8fc0f0696c9859a0dc3ad3c9e72647f7b366b7611f9c2b9bc070bb89fc4dda38d6a579361c2cdea2b883e776aff26b5cf6438e9dd1df72c8e4e17e1f43ebc9a47da3ed46446aebfdd7ffac237587928e4b0079ceca9d8467b6c9b1a4ef4200dbb77cf12a6a21270cb33023551df30f9728c3666aeefc6c4de10afc02aef2198883dde24eb18c82cdf9e46d304185ba93fcdcd17ac4ba6be9360945a96c1b04e0a561d544cf981f903e25f64828ea8aae7cce55b6928e97c1af6db61a4bce19d9a06767ff571822c2d34032886052995e2bfcd55aef531860a5f04ead3f0a2cdb769b2f2e8deb2f6d926dc0ce5dbf41f8f99af3ce8d102a5f784dfa0308d9964553576543a6ead5785bdef3ccf8133e8918ec1cca5067cb8bf25d5c9df905344d3bda224e5869f4919b8e6dbf8bd1f861ccc4eae64f9aca5a7b990611a769f5e066c667267921602657713b9ea7b244a220888cf7e0b9590ffd45e9d3978d0f2225c64dc7b6bffd03a2607c2cca407e2a7cf3213262bd5cd5f914ffac195f19aa1bf3c66944750e955edbcb8b4bd2878e01110f36e895283028628715efbf295b1838cea1857c662fe579c47483e68ba1f037ff6b276925d37213b571ea1bfc3422099c792336b0e28599498e30fe38b408e741162c7f9d7236c03c2cd01eb42acb4718436d94caed8640dfeea79de712955a2bd298b44485d4becf3a18e10133e11138c2b2a2638d7acefc044611f22b95a7b3bbd235972797022fd7c352335b1984ce16e1a4ea2079732d7a148c9403e6f02555cf13545c133b513e9d16c9f1f3f9da6f0c3c6c84e940b24dcd20d613641091ab0a2c642adab44f6d536fa0d46210f2f890395a3549d00ed1f9df84c388dd276c64e25abe735eea7879a57954cff62a3e5e40601558e08aaf9e85bb0feda9909749b63df377ddfa0f7714760431ee5754a1d4930030d586fd9c824d745c9107983e0ae41cf9971db4b783c1431ee261698d4f75d8039668d264fab325f789738a758f8491ec829bf8814987bb92ea35f3a3af4d9757a4f07db28bb1b1079dc1dcfdd97e01f7cce94b09ac7e8d746a9ffa6ab84483aaca06f824a2907e0237c8ca504a6413fa31e848d35feb9293fda60ad4f4f76a67ca8a902a5cb05e58efdfbe6af9048f10c7206d8540680a9f151fb340ff81e7c9d309aefede0ec28ce7c76880379be4d1e443bb266465296bc9543795dfa5bf08cd80478091f9b9c17fda43605bc54d92a66d08d72e2cbf9daa2c80d65974f54ce11e754972074619badc79d9289bdcae5ef13118946621d555d009b9a9dc9564b27ba2c1bbb7968dbee6380efae3904519a81d8aaca4733aaa59bd573b0d877d75c3e8f535ad3e364014c426e9246eec024282317da4ce18bef3b7008425e26db70de7ca08d789cca1201e89cce076fadeb9e03ddbe6caead53e47596408637abb406d31954d6fc473d6c763908bb796603bf11321d7b3879eb0eb01002deaac44c018470b13f379d413d38a72662d2aa4f75baedf867ca670324c5334e78bd0efb6c80a6c53fd65cae8b767858455a5990e2290ff11efd4c4a97a0be3c516b3cde98acc188ffbd11e85266d2c073dc238a5439ab4ed123d9095bbe74b7c3ec0c02182946b3112b0c200fb942ab688319e20bb8c1363fa3ff329e9b645ac841c61abbf52eea8ca326701da361dd3b749b320cf1162901aa680b67671682f2d6154eba2fc0f6f2c516217bda0b2fa81e568ee3d8e6e8a7d35607e730487fe7d4f77b1e108ed8c9278a8553c6e3e779cc068c684fc410d097824f6c1f21dcc114b80dc56638a50435bf16e7c523d8102fa9870f8f0f3d86c5125dc6316d9688e4dff329febc646cf3dfa29267b8692196c483d4162cec6a5deafc8b782d709bdd11b21a9e660918e1a684d3025d135de57ba3bbf7489f9c76804c55270ab092f20ab9132c4207d13269c8ff9c570f6bf479b15bce9b8aa22f87729591a65976f074cc8cf9f4b1345021c4e00b4ebdb8c06e12da6c2fd76d128cf7540fb16127f5c3a4c1e9a9ad5f0e2075ca920512a7d69601cd223b8181393869f97badbdcdc84cafba1610a1b519981c317d237b6c2d3ce5cc2d029ce0cd77de2ed1615a7476303de38af95b4a33712da589c9f63addb41a9ca756e0e62e849b10fe64ad3db4f3c0a8840b4d79bc75f5c04bbd6ad122bf39e670207fe8aedb4afc6b860c5ff77be81652d9e320fac66e9024d3b4755919082641d90955f8d30b229aaa169ffd17a30074939589347fece5283634d049c8bfc5f85cd2a7c6358b0a6942e35b09a97276d55c2f8be3b3fcb29e3fb62a08f5b9ca5549cd304b2d78891faf25aa30407b45dc7fdab24f70c4bb3cb8192c213fea876ae26c7bab53569a1359b77ab7cbca9371316fbdb9b1087ddc6806bb7196a5ddc1eab8aaab48c81678de568dd4b53eae9eab3b3e93219ac0cc3c2189e14290d95554e1d59e12f3cab624e767682f450f12d023c7ecfd7797618cc9dd9e583bf6a4b1390f39761fb909d48247f0f8700fbb91d3841c9e924e72cba011d8f6f0b1bead0ce7e1c7ed6ce6deb030f6616969b76713450ed05725078b3e1ab6766fb0fd4b81c67702bd9ee894bb896cc43718a52aa220e07e36d2068213d296798fe2d485743d0b83dc0c16f5074998479e15fe9d510866ed1d503e416302f490a8f18612e2e49e317a2e2024c8ab0a0c2fb886c9a6b11ffdbfe04178d0cc7ec4148162b8ea28ad4c0c3ce8bd53f64dd35a88fd640b4e22303658f726b79ce65b87c1ec10dde63e06163f788d0af8c63aa9c21fd9bbfb147448547d784a5af79610fd3a195d5ab615b72c7715b3120ebdcf9ade069931f762f2ff0973ddb7c58b09b13eea3d3644e4518758c2b4cf91431a25905200373faf40a1be2c7c68edf2b5924b3d230ccc76980dec3099786e78a106c26052168ffe095a80523aed6ddc3d866c4457e0ccdd0f3896520fa44ae469eaaa4885c537a4b83758eedf993d8750de6f9610c0b57b9f2546b3bfd8d6572213ee220f30a2f15427c971d639f8d22e0e367e860fe3b1e978e63a915a8edca70bdb7933ddaafcd1aef1d49a11b402327191901f9f941b105a8a5808cdd411d4992508322ea88a2124731d9d9dcf0d9942d5c01bc183ad3aafabea71b14658c26d1e0b9cb19a2ac8a46f2eb703fe8004ff1bed1a07189cfd5803a3228aab72dbed7d04dbacdb7ac0f3e49041d451e9453a8d4a8234954dfd1658c0ee9583901e8ae2ae97f6f75d522dff5f8e26663710ec0058fcab8ff7c5b98014aa412e1c91444d767bc62e5737544a1dba8abb0f51f66bb435f03973c8bf7f77b9a31cb2eb4056801c34de447460b5602f9dfc86eb0e9bd357cf4b475dc20beb36c081bd871c60332a2d6f47ba11f0e6c598cfd718e0b0eb19f108905e3af679a2cc9b623be57559b384d03ad6e104145557c0fe9d94476d3fbae0589bc", @nested={0x0, 0x6b}, @nested={0x0, 0x135}, @typed={0x0, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0x0, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x0, 0xba}]}, @nested={0x0, 0x99, 0x0, 0x1, [@nested={0x0, 0xd0}]}, @nested={0x0, 0x52, 0x0, 0x1, [@typed={0x0, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x0, 0x33, 0x0, 0x0, @uid}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 829.385749ms ago: executing program 5 (id=4075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000400)='0x5', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x100, 0x2, 0x0, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000140)={0x8, 0x0, 0x0, 'queue0\x00', 0x5}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000002c0)=0x140, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f00000005c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f00000000c0)={0x3, "5a025ff26c7b4e670de7eef729236d262620cad56c9cc1df661f65d18d0b3161", 0x3, 0x4, 0x6, 0x8e1, 0x4, 0x2, 0x2}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) 692.872637ms ago: executing program 7 (id=4077): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe8000000000000000000000001f0001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) 688.971401ms ago: executing program 6 (id=4078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe80fffffff500000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) 492.823388ms ago: executing program 7 (id=4079): r0 = eventfd2(0x100, 0x800) writev(r0, &(0x7f0000002900)=[{&(0x7f0000000000)="83b011c0b7922e5105b71bd37927408d0dae5032c8fb5fd30c30e0a350d1e2a82109ad0860846378e2f5a23a0e97c2f27a6352a77eee6153b90543b4d01a1f6c6749ddef35ce", 0x46}, {&(0x7f0000000380)="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", 0x152}, {&(0x7f00000000c0)="496fe5078b9dda4b5bc7df3595695552db9bcaef62", 0x15}, {&(0x7f00000001c0)="5ddf9a1608efd129f1a36eb513046e2a870c497ed0136e605fe8e3eeeeba5ad637c0e38119f8fd67b55caade50ad9f62060534f96ad49ed8b0b4f759f48f2854e4827f64b374f6330338a07bfe66e2f84d7a8d72e2a8452fc5082dcd1b2239933b06722eba0ae0c76de8fea432cd356e6cf650c244586d56e1e4a5ec2a4d65b88148b69f14427978d2c2e43fd9f4ccb944efb6630df23fea022aa0784141d9b7f0f081a2afc72783601aa8c83c09b83e4705c6b752247208b430b8b1ffb1a71c32b022799007f647c3f5cb5fa2f510fdd4e5dc72f35e62fe51dd8385", 0xdc}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="9b98fc7be50b9af43a1047405146d1a26b8f2026a8dba21e44756e9a11f42994daf1e303e9c7af8a40f6a2aa7f3d54c7349492985a8e8ae81a849fd1ac27ede9e0b593f2d1f0a2f7faa014852550da549f5e0d72adad3f88f187d808508e7c2f85d929546092c26e78f6", 0x6a}, {&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000002840)="43255d91633ef5562d1fc2666c6c2a0b93215928e1e8777c2d5c984a60f6cfe8166c612ab954241c7898cb0bd36f7060e4661d4205152d5fac1dc6efe83d314bc86902588f01128b22561447a159e846f176ee14c86b6a120d63b34a9b4f55c8d6f4ffdd3058fe2b9e9b5c25555fd87a5e926fd1847388730e79871a0c1ff83c8efdf5e18b35498fea2f6aadcc937c193b52e0e821141f7dc905b6d45b138fc6b5d58ba7544976210f514ca5d3d55dc2a1a592de91f1e859a22ef3", 0xbb}], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="250000001879dfcf02f20afe23f1c3173a00db8d00000000000000000200000000000006ce5d5fac0600150004000000"], 0x30}}, 0x0) 412.445717ms ago: executing program 7 (id=4080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 412.173131ms ago: executing program 8 (id=4081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x0, 0x8, 0xd8, {0xd8, 0x23, "42a5b9c659381d5d6b9c1325ea4766cd9b89531d51b6a8b40de3f26a048cabd5ae977fc0f4094be6b1609c05c26347d7ad318418055611f6eb0b801ebd425e85f2fcc9ab673a25af5a40c9023b6a030508738c4a40d6795b40588449f030c8590f11ac7652efe6d68d39cbbcf65b90dfdf4541f44f486e77b9392aee5fdeae92dd2422ee821b670fa0214a93fdd29d6aabd03254a2cfb193898d784df6ad5151621dc4499ed6b875407e58b44d1fcd2775d615b9e3ee6fce3b37b9bd2d61358fa107b67d003fd5e05c62f827fb4f3eb95fb35148c0ab"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000300)={0x0, 0xf, 0x63, {0x5, 0xf, 0x63, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "4492e25ed4a373274b47117264b406b1"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "4dcdbcc91866c168a26c2824d91d1ecc"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x43, 0x2, 0x0, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "5f60bee07f2cb30c44389684d84b45c9"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x0, 0xf000, 0x2, [0xff00, 0xff00f0]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0xf8, 0x2, "6ac0d547", "ead12825"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x3, 0x1, 0x8, 0x0, 0x3}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000440)={0x40, 0x5, 0xb3, "6e85268da9da8f3017a39250294e8779a96071560e719c6644e7f8811f8b87c30ab6cac4ac793e27afae91e9504952a542e8eb7a1c7d32315b9cb7fb59657ffb9b1d2f723ca80674d4b189624f7361c4a237d0cc5139334a30b0c8c73c79c8a7230b9722b8a71f49504872cea6931b14c4003f3bef42aa36e7a05e1e8af253d08127a56bfe721eacd37733f65d8d5214a1a033efc007133108bcacbcd79727a73ac8207a353745dacd6662e2f4cb8a3068232e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x120, 0x40, [0xf0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "8093"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xfa}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="7ea1032fe3da"}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @random="143754c4bb5c"}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "58e1"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{}], 0x1, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) 412.073256ms ago: executing program 6 (id=4082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b0400000000000000000200000e440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 323.119481ms ago: executing program 5 (id=4083): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 322.817866ms ago: executing program 6 (id=4084): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r4, &(0x7f0000000280)=""/79, 0x4f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4d0}]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x17, 0xf, 0x0, @multicast2}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8717, 0x20, 0x80000001, 0x4, {{0x24, 0x4, 0x0, 0x27, 0x90, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @multicast1, {[@end, @rr={0x7, 0x23, 0x7b, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xbf, [@broadcast, @multicast2, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8f, 0x1, 0x7, [{@multicast1, 0x1}, {@private=0xa010102, 0xde7}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x1}, {@multicast2, 0xdb6b}, {@private=0xa010100, 0xfffffff7}, {@local, 0x214}]}]}}}}}) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@xdp={0x2c, 0x9, r5, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="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", 0xe}], 0x1000005d, 0x0, 0x0, 0x11000000}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0xc0c4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) 321.194247ms ago: executing program 5 (id=4085): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 208.541491ms ago: executing program 7 (id=4086): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x6, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic="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", @typed={0x0, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x0, 0x6d, 0x0, 0x1, [@typed={0x0, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x0, 0xbf, 0x0, 0x1, [@nested={0x0, 0x45}, @generic="49a49406d3aca5aea2d74aeb6365364a92aa2d172992ecba8dfd5ef365004e572658a3f9f4b34e3adfef29471b51337b45dc1f2076d624e9060d1bf1e4b7e3585a9e954be6e1eb1fb9275d2330d10fa518eaeaec4eb2ad955d7bca07a9b8e418c875caddfc931734cf9f1d8ee1efcae3e2dd52fa175326d0c19641ae404979698addfe63eba0d780732012ab7769f50ccdb800c59b405f17d9b59e3af3807462ae43bd1563e9313becf114c7e76f22a7d8a37609cede9ca85facd280b0e61f4767413b67703517f86fddd635a7549ebee3fd70494e3d78853e4336f3fb00742687f94a7263a536390ce2280835cfb955f6efdacc1fdbaf37f2a9970decc36d45096ca1c548ba0e2409f7284a38957defa5bff0034355761dbfa47e2e16da29d4a747f1ae780f63107addd898d1cc002b8984b708e8c55de4c57b68188e453904973aab1437507a130959a546af61b772ff3804a0f9d27eb76d667064e47838a04a955f28d7e50d7c4709bcefb78e51b3600d2a9074b32705f94688c85568987637ead77525b54d693c62d316632bda803faefaa5bccd6ea4e37e9836e4dd923b8b7939c6f7dec81742ee2a6729199b841b9813e4f3ed8acdecf4409b0deeca74779906b28c06c8cd6b80db8e206466227b2a1de3cc9bda998e06ea82064d2d6cbbd1452377bb0c7cf89ac6c33359d88f2f44f13261ca9ead98fdddac045b67514e55d0a812c01a8e7fc792cd8ee67773aea88b302131f85c29218afedcb3bf757e5645cf45d377b1d8b97f38a40928a75bf94b6b2632aba15f06952b3c3c95d848ac647de8c6864528dc9969342440e54ef186f654710e95abf2178026d4b70017933ed74d9f80208fb851d3c91ac3ca4b78ac88bac39f9b7aa6fc21f006e6770b03071e43c3ee07f5228da41a89e3dd52570a4d4c4a9f53765853b8ce4784341ed4fae186a7ed27cb40a2c807f382ab2575658879a47326920cf5d41f0e3263fae57610780a22596c0a83218bd8d2ad51ca931d06b2d68963ad2e1bd89acef0007a8e0983a41c4eb9a1b162ebfb5afb24bb96e163d7d3e53197d5b944a7bb87d3ed5a551b93058b9fadc5c51c27033ff4c45e9f87af69793a524842b4ad2ddfb4ea10fc663929673a005631527b71a273ef9f940dbe59b6f40ead7a38182fafa0a66cae105d6cb883870fcafbf5928cc82378835898fd78eebfea862ca2694952f0b6ceb06296178dd33d4f16a4c45dc00897822dc3bc40c50de768adf3ef6a123c2625971ed41978523fceedf0316ffcc20cf0e3a0a7b3835d3b1cea548e7b17fd6b419ec75ea8ad1c9e021986ba836c2374f4b3055f5a8e3ca487404094cd41849e3d6d8621ba2f4efbad6270c192712475ebc4a00f1b9ff5d3d989234e0a97293fb9d3531c13eb37c39247b21a0d9ffa1f4ad7f148ffcd51d8953f7e37e6745e828ebf2bee16d35cfeffd3df2cd620e6d24d43a660f280df49d2b4e79b7bd8fb77eba54f7dd5fa15e069a71ad0a90ad2cddc9840d2b86e25825c7f80e72d74b8121750193b5151bad2e0d310a75ff492d8cd78af0b05b5613414266246e0e198cc8b4472267c40818d786ca41518f2dd21d8ffa8bfc03817d11a03d61a42b406d7dd55a57494fa44458b71d59a4b635da74d5743bf331f0e7e7b0a83c97a1c6040f4b669e5cf901cc670402a3add6c9df3bfb3ac5c099bc59cc4d7d087d217abfac1933326ee13e00f6ea2030adf46ee0d58010c229b602c70ecb449e7cc967942b9aeb2a8043e2d9aee636d00a062a2768b0472a7936b3fef92dacce739e299dba6f2c418143f6f1ae089c22a5c5cd9e6fb3232518022c9301d0d054326bc96f74a586500cdfd0401d4ab8794ed456c187d9d7cd8e1822931b903750ad02398dc5080b48f8c591f886e58d97b0be90a9975ee24ff6de9267417878f977a4c4ee8f4607e3baab27a26513b2aa13ba54038533badec60ce88c441269a84ca0302d987122910f9c08e49249575798d31539ae49cae5b68a3a7be7da3a1843bf1cf0bb8abc4fc43bb2ed979709c0f919d95e3998db3e2d48f7aa2f312aa748ccd236ca4224ac3eadcd815b2699b2e47daaf2d28855073ecfbfa48bd62916d1c1c6d13a577d5259bee9ffa5ddce6b9e48fa369265955662b62794a8442f1e8189ecee41552631b55af094209189450535c568e8eac511fa750e4f65a201d8f6ce1fa17538254ed80cf1e77928ecf98b54a3281bbea6881a0c3d0dd8bf8f9912c168426ecd1ba8fc41846bc786c1e83a9ca43e3b342c9b35cde32b5c7ed8fc0f0696c9859a0dc3ad3c9e72647f7b366b7611f9c2b9bc070bb89fc4dda38d6a579361c2cdea2b883e776aff26b5cf6438e9dd1df72c8e4e17e1f43ebc9a47da3ed46446aebfdd7ffac237587928e4b0079ceca9d8467b6c9b1a4ef4200dbb77cf12a6a21270cb33023551df30f9728c3666aeefc6c4de10afc02aef2198883dde24eb18c82cdf9e46d304185ba93fcdcd17ac4ba6be9360945a96c1b04e0a561d544cf981f903e25f64828ea8aae7cce55b6928e97c1af6db61a4bce19d9a06767ff571822c2d34032886052995e2bfcd55aef531860a5f04ead3f0a2cdb769b2f2e8deb2f6d926dc0ce5dbf41f8f99af3ce8d102a5f784dfa0308d9964553576543a6ead5785bdef3ccf8133e8918ec1cca5067cb8bf25d5c9df905344d3bda224e5869f4919b8e6dbf8bd1f861ccc4eae64f9aca5a7b990611a769f5e066c667267921602657713b9ea7b244a220888cf7e0b9590ffd45e9d3978d0f2225c64dc7b6bffd03a2607c2cca407e2a7cf3213262bd5cd5f914ffac195f19aa1bf3c66944750e955edbcb8b4bd2878e01110f36e895283028628715efbf295b1838cea1857c662fe579c47483e68ba1f037ff6b276925d37213b571ea1bfc3422099c792336b0e28599498e30fe38b408e741162c7f9d7236c03c2cd01eb42acb4718436d94caed8640dfeea79de712955a2bd298b44485d4becf3a18e10133e11138c2b2a2638d7acefc044611f22b95a7b3bbd235972797022fd7c352335b1984ce16e1a4ea2079732d7a148c9403e6f02555cf13545c133b513e9d16c9f1f3f9da6f0c3c6c84e940b24dcd20d613641091ab0a2c642adab44f6d536fa0d46210f2f890395a3549d00ed1f9df84c388dd276c64e25abe735eea7879a57954cff62a3e5e40601558e08aaf9e85bb0feda9909749b63df377ddfa0f7714760431ee5754a1d4930030d586fd9c824d745c9107983e0ae41cf9971db4b783c1431ee261698d4f75d8039668d264fab325f789738a758f8491ec829bf8814987bb92ea35f3a3af4d9757a4f07db28bb1b1079dc1dcfdd97e01f7cce94b09ac7e8d746a9ffa6ab84483aaca06f824a2907e0237c8ca504a6413fa31e848d35feb9293fda60ad4f4f76a67ca8a902a5cb05e58efdfbe6af9048f10c7206d8540680a9f151fb340ff81e7c9d309aefede0ec28ce7c76880379be4d1e443bb266465296bc9543795dfa5bf08cd80478091f9b9c17fda43605bc54d92a66d08d72e2cbf9daa2c80d65974f54ce11e754972074619badc79d9289bdcae5ef13118946621d555d009b9a9dc9564b27ba2c1bbb7968dbee6380efae3904519a81d8aaca4733aaa59bd573b0d877d75c3e8f535ad3e364014c426e9246eec024282317da4ce18bef3b7008425e26db70de7ca08d789cca1201e89cce076fadeb9e03ddbe6caead53e47596408637abb406d31954d6fc473d6c763908bb796603bf11321d7b3879eb0eb01002deaac44c018470b13f379d413d38a72662d2aa4f75baedf867ca670324c5334e78bd0efb6c80a6c53fd65cae8b767858455a5990e2290ff11efd4c4a97a0be3c516b3cde98acc188ffbd11e85266d2c073dc238a5439ab4ed123d9095bbe74b7c3ec0c02182946b3112b0c200fb942ab688319e20bb8c1363fa3ff329e9b645ac841c61abbf52eea8ca326701da361dd3b749b320cf1162901aa680b67671682f2d6154eba2fc0f6f2c516217bda0b2fa81e568ee3d8e6e8a7d35607e730487fe7d4f77b1e108ed8c9278a8553c6e3e779cc068c684fc410d097824f6c1f21dcc114b80dc56638a50435bf16e7c523d8102fa9870f8f0f3d86c5125dc6316d9688e4dff329febc646cf3dfa29267b8692196c483d4162cec6a5deafc8b782d709bdd11b21a9e660918e1a684d3025d135de57ba3bbf7489f9c76804c55270ab092f20ab9132c4207d13269c8ff9c570f6bf479b15bce9b8aa22f87729591a65976f074cc8cf9f4b1345021c4e00b4ebdb8c06e12da6c2fd76d128cf7540fb16127f5c3a4c1e9a9ad5f0e2075ca920512a7d69601cd223b8181393869f97badbdcdc84cafba1610a1b519981c317d237b6c2d3ce5cc2d029ce0cd77de2ed1615a7476303de38af95b4a33712da589c9f63addb41a9ca756e0e62e849b10fe64ad3db4f3c0a8840b4d79bc75f5c04bbd6ad122bf39e670207fe8aedb4afc6b860c5ff77be81652d9e320fac66e9024d3b4755919082641d90955f8d30b229aaa169ffd17a30074939589347fece5283634d049c8bfc5f85cd2a7c6358b0a6942e35b09a97276d55c2f8be3b3fcb29e3fb62a08f5b9ca5549cd304b2d78891faf25aa30407b45dc7fdab24f70c4bb3cb8192c213fea876ae26c7bab53569a1359b77ab7cbca9371316fbdb9b1087ddc6806bb7196a5ddc1eab8aaab48c81678de568dd4b53eae9eab3b3e93219ac0cc3c2189e14290d95554e1d59e12f3cab624e767682f450f12d023c7ecfd7797618cc9dd9e583bf6a4b1390f39761fb909d48247f0f8700fbb91d3841c9e924e72cba011d8f6f0b1bead0ce7e1c7ed6ce6deb030f6616969b76713450ed05725078b3e1ab6766fb0fd4b81c67702bd9ee894bb896cc43718a52aa220e07e36d2068213d296798fe2d485743d0b83dc0c16f5074998479e15fe9d510866ed1d503e416302f490a8f18612e2e49e317a2e2024c8ab0a0c2fb886c9a6b11ffdbfe04178d0cc7ec4148162b8ea28ad4c0c3ce8bd53f64dd35a88fd640b4e22303658f726b79ce65b87c1ec10dde63e06163f788d0af8c63aa9c21fd9bbfb147448547d784a5af79610fd3a195d5ab615b72c7715b3120ebdcf9ade069931f762f2ff0973ddb7c58b09b13eea3d3644e4518758c2b4cf91431a25905200373faf40a1be2c7c68edf2b5924b3d230ccc76980dec3099786e78a106c26052168ffe095a80523aed6ddc3d866c4457e0ccdd0f3896520fa44ae469eaaa4885c537a4b83758eedf993d8750de6f9610c0b57b9f2546b3bfd8d6572213ee220f30a2f15427c971d639f8d22e0e367e860fe3b1e978e63a915a8edca70bdb7933ddaafcd1aef1d49a11b402327191901f9f941b105a8a5808cdd411d4992508322ea88a2124731d9d9dcf0d9942d5c01bc183ad3aafabea71b14658c26d1e0b9cb19a2ac8a46f2eb703fe8004ff1bed1a07189cfd5803a3228aab72dbed7d04dbacdb7ac0f3e49041d451e9453a8d4a8234954dfd1658c0ee9583901e8ae2ae97f6f75d522dff5f8e26663710ec0058fcab8ff7c5b98014aa412e1c91444d767bc62e5737544a1dba8abb0f51f66bb435f03973c8bf7f77b9a31cb2eb4056801c34de447460b5602f9dfc86eb0e9bd357cf4b475dc20beb36c081bd871c60332a2d6f47ba11f0e6c598cfd718e0b0eb19f108905e3af679a2cc9b623be57559b384d03ad6e104145557c0fe9d94476d3fbae0589bc", @nested={0x0, 0x6b}, @nested={0x0, 0x135}, @typed={0x0, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0x0, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x0, 0xba}]}, @nested={0x0, 0x99, 0x0, 0x1, [@nested={0x0, 0xd0}]}, @nested={0x0, 0x52, 0x0, 0x1, [@typed={0x0, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x0, 0x33, 0x0, 0x0, @uid}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 148.280486ms ago: executing program 7 (id=4087): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 72.814996ms ago: executing program 5 (id=4088): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty, 0x10000}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r1, 0x4}}, 0x5d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 156.493µs ago: executing program 5 (id=4089): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000fc0000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 0s ago: executing program 7 (id=4090): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) kernel console output (not intermixed with test programs): m_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.667263][ T42] audit: type=1400 audit(1786060899.695:7235): avc: denied { ioctl } for pid=15478 comm="syz.4.3129" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.754189][ T5753] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 483.797067][ T5090] Bluetooth: hci2: command 0x1003 tx timeout [ 484.086474][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.643933][T15511] FAULT_INJECTION: forcing a failure. [ 484.643933][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.671977][T15511] CPU: 3 UID: 0 PID: 15511 Comm: syz.6.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.672010][T15511] Tainted: [L]=SOFTLOCKUP [ 484.672016][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.672027][T15511] Call Trace: [ 484.672034][T15511] [ 484.672043][T15511] dump_stack_lvl+0x100/0x190 [ 484.672076][T15511] should_fail_ex.cold+0x5/0xa [ 484.672100][T15511] _copy_to_user+0x32/0xd0 [ 484.672130][T15511] simple_read_from_buffer+0xcb/0x170 [ 484.672152][T15511] proc_fail_nth_read+0x1af/0x230 [ 484.672183][T15511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.672212][T15511] ? rw_verify_area+0xce/0x6d0 [ 484.672238][T15511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.672262][T15511] vfs_read+0x1e4/0xb40 [ 484.672292][T15511] ? __pfx_vfs_read+0x10/0x10 [ 484.672326][T15511] ? __fget_files+0x215/0x3d0 [ 484.672352][T15511] ? __fget_files+0x21f/0x3d0 [ 484.672398][T15511] ksys_read+0x12a/0x250 [ 484.672424][T15511] ? __pfx_ksys_read+0x10/0x10 [ 484.672453][T15511] do_syscall_64+0x115/0x870 [ 484.672474][T15511] ? clear_bhb_loop+0x70/0xc0 [ 484.672496][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.672514][T15511] RIP: 0033:0x7f6d9315e90e [ 484.672532][T15511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.672549][T15511] RSP: 002b:00007f6d9414afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.672571][T15511] RAX: ffffffffffffffda RBX: 00007f6d9414b6c0 RCX: 00007f6d9315e90e [ 484.672583][T15511] RDX: 000000000000000f RSI: 00007f6d9414b0a0 RDI: 0000000000000004 [ 484.672594][T15511] RBP: 00007f6d9414b090 R08: 0000000000000000 R09: 0000000000000000 [ 484.672605][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.672616][T15511] R13: 00007f6d93426038 R14: 00007f6d93425fa0 R15: 00007ffc69ba02c8 [ 484.672642][T15511] [ 484.731391][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.933120][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.939907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.966066][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.038729][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.114852][T15521] Cannot find map_set index 135 as target [ 485.120268][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.178166][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 485.188325][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 485.276885][T15527] FAULT_INJECTION: forcing a failure. [ 485.276885][T15527] name failslab, interval 1, probability 0, space 0, times 0 [ 485.309407][T15527] CPU: 2 UID: 0 PID: 15527 Comm: syz.4.3149 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.309438][T15527] Tainted: [L]=SOFTLOCKUP [ 485.309445][T15527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.309455][T15527] Call Trace: [ 485.309462][T15527] [ 485.309470][T15527] dump_stack_lvl+0x100/0x190 [ 485.309499][T15527] should_fail_ex.cold+0x5/0xa [ 485.309521][T15527] should_failslab+0xc2/0x120 [ 485.309545][T15527] __kmalloc_noprof+0xfc/0x820 [ 485.309566][T15527] ? rcu_is_watching+0x12/0xc0 [ 485.309594][T15527] ? tomoyo_realpath_from_path+0xb6/0x690 [ 485.309619][T15527] tomoyo_realpath_from_path+0xb6/0x690 [ 485.309643][T15527] tomoyo_path_number_perm+0x23c/0x580 [ 485.309667][T15527] ? tomoyo_path_number_perm+0x22e/0x580 [ 485.309693][T15527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.309742][T15527] ? find_held_lock+0x2b/0x80 [ 485.309758][T15527] ? __fget_files+0x215/0x3d0 [ 485.309774][T15527] ? hook_file_ioctl_common+0x140/0x440 [ 485.309793][T15527] ? __fget_files+0x215/0x3d0 [ 485.309812][T15527] ? __fget_files+0x21f/0x3d0 [ 485.309832][T15527] security_file_ioctl+0xd3/0x230 [ 485.309858][T15527] __x64_sys_ioctl+0xb7/0x210 [ 485.309884][T15527] do_syscall_64+0x115/0x870 [ 485.309906][T15527] ? clear_bhb_loop+0x70/0xc0 [ 485.309928][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.309946][T15527] RIP: 0033:0x7faf13f9e0d9 [ 485.309962][T15527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.310016][T15527] RSP: 002b:00007faf14e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.310035][T15527] RAX: ffffffffffffffda RBX: 00007faf14225fa0 RCX: 00007faf13f9e0d9 [ 485.310047][T15527] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 485.310058][T15527] RBP: 00007faf14e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.310069][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.310079][T15527] R13: 00007faf14226038 R14: 00007faf14225fa0 R15: 00007ffda6e8fdc8 [ 485.310106][T15527] [ 485.310115][T15527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.400012][ T42] audit: type=1400 audit(1786060901.485:7236): avc: denied { map } for pid=15528 comm="syz.5.3151" path="/dev/vbi3" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 486.447610][T15560] CIFS: Attempting to mount //127.0.0.1/share [ 486.451561][T15560] CIFS: VFS: Error connecting to socket. Aborting operation. [ 486.457787][T15560] CIFS: VFS: cifs_mount failed w/return code = -101 [ 486.688913][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 486.710766][T15572] macvlan0: entered allmulticast mode [ 486.721811][T15572] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 486.918559][ T42] audit: type=1400 audit(1786060903.005:7237): avc: denied { write } for pid=15581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.998722][ T42] audit: type=1400 audit(1786060903.085:7238): avc: denied { write } for pid=15586 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.212859][T15599] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3174'. [ 487.271299][ T42] audit: type=1400 audit(1786060903.355:7239): avc: denied { write } for pid=15600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.303456][T15608] Cannot find del_set index 0 as target [ 487.363167][T15610] FAULT_INJECTION: forcing a failure. [ 487.363167][T15610] name failslab, interval 1, probability 0, space 0, times 0 [ 487.368381][T15610] CPU: 2 UID: 0 PID: 15610 Comm: syz.0.3176 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.368403][T15610] Tainted: [L]=SOFTLOCKUP [ 487.368407][T15610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.368414][T15610] Call Trace: [ 487.368419][T15610] [ 487.368425][T15610] dump_stack_lvl+0x100/0x190 [ 487.368445][T15610] should_fail_ex.cold+0x5/0xa [ 487.368461][T15610] should_failslab+0xc2/0x120 [ 487.368477][T15610] __kmalloc_noprof+0xfc/0x820 [ 487.368491][T15610] ? tomoyo_encode2+0xfb/0x3c0 [ 487.368506][T15610] tomoyo_encode2+0xfb/0x3c0 [ 487.368519][T15610] tomoyo_encode+0x29/0x50 [ 487.368529][T15610] tomoyo_realpath_from_path+0x18c/0x690 [ 487.368545][T15610] tomoyo_path_number_perm+0x23c/0x580 [ 487.368561][T15610] ? tomoyo_path_number_perm+0x22e/0x580 [ 487.368578][T15610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 487.368609][T15610] ? find_held_lock+0x2b/0x80 [ 487.368622][T15610] ? __fget_files+0x215/0x3d0 [ 487.368633][T15610] ? hook_file_ioctl_common+0x140/0x440 [ 487.368646][T15610] ? __fget_files+0x215/0x3d0 [ 487.368660][T15610] ? __fget_files+0x21f/0x3d0 [ 487.368673][T15610] security_file_ioctl+0xd3/0x230 [ 487.368692][T15610] __x64_sys_ioctl+0xb7/0x210 [ 487.368710][T15610] do_syscall_64+0x115/0x870 [ 487.368726][T15610] ? clear_bhb_loop+0x70/0xc0 [ 487.368747][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.368764][T15610] RIP: 0033:0x7f925bd9e0d9 [ 487.368780][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.368798][T15610] RSP: 002b:00007f9259ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.368819][T15610] RAX: ffffffffffffffda RBX: 00007f925c025fa0 RCX: 00007f925bd9e0d9 [ 487.368831][T15610] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 487.368842][T15610] RBP: 00007f9259ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.368852][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.368862][T15610] R13: 00007f925c026038 R14: 00007f925c025fa0 R15: 00007ffe49bc3308 [ 487.368889][T15610] [ 487.368910][T15610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.412996][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 487.416508][ T42] audit: type=1400 audit(1786060903.485:7240): avc: denied { write } for pid=15613 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.520363][T15617] vivid-000: ================= START STATUS ================= [ 487.532071][T15617] vivid-000: Test Pattern: 75% Colorbar [ 487.538290][T15617] vivid-000: Fill Percentage of Frame: 100 [ 487.540567][T15617] vivid-000: Horizontal Movement: No Movement [ 487.544302][T15617] vivid-000: Vertical Movement: No Movement [ 487.546792][T15617] vivid-000: OSD Text Mode: All [ 487.548939][T15617] vivid-000: Show Border: false [ 487.551042][T15617] vivid-000: Show Square: false [ 487.556036][T15617] vivid-000: Sensor Flipped Horizontally: false [ 487.558846][T15617] vivid-000: Sensor Flipped Vertically: false [ 487.562033][T15617] vivid-000: Insert SAV Code in Image: false [ 487.565279][T15618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 487.578861][T15617] vivid-000: Insert EAV Code in Image: true [ 487.582498][T15617] vivid-000: Insert Video Guard Band: false [ 487.587948][T15617] vivid-000: Reduced Framerate: false [ 487.597576][T15617] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 487.601998][T15617] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 487.603108][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 487.606683][T15617] vivid-000: Enable Capture Cropping: true [ 487.611430][T15617] vivid-000: Enable Capture Composing: true [ 487.611497][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 487.615051][T15617] vivid-000: Enable Capture Scaler: true [ 487.620888][T15617] vivid-000: Timestamp Source: End of Frame [ 487.621707][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.625353][T15617] vivid-000: Colorspace: sRGB [ 487.629766][ T10] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.631399][T15617] vivid-000: Transfer Function: Default [ 487.631437][T15617] vivid-000: Y'CbCr Encoding: BT.2020 Constant Luminance [ 487.631458][T15617] vivid-000: HSV Encoding: Hue 0-179 [ 487.631477][T15617] vivid-000: Quantization: Default [ 487.643629][ T10] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 487.645255][T15617] vivid-000: Apply Alpha To Red Only: [ 487.647370][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.651329][T15617] false [ 487.651355][T15617] vivid-000: Standard Aspect Ratio: 4x3 [ 487.651380][T15617] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 487.651406][T15617] vivid-000: DV Timings: 640x480p59 [ 487.653871][ T10] usb 9-1: Product: syz [ 487.657115][T15617] inactive [ 487.657137][T15617] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 487.657163][T15617] vivid-000: Maximum EDID Blocks: [ 487.658490][ T10] usb 9-1: Manufacturer: syz [ 487.660863][T15617] 2 [ 487.664347][ T10] usb 9-1: SerialNumber: syz [ 487.666480][T15617] [ 487.666493][T15617] vivid-000: Limited RGB Range (16-235): false [ 487.666524][T15617] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 487.691357][T15617] vivid-000: Power Present: 0x00000001 [ 487.694345][T15617] tpg source WxH: 320x240 (Y'CbCr) [ 487.696738][T15617] tpg field: 1 [ 487.698285][T15617] tpg crop: (0,0)/320x240 [ 487.700189][T15617] tpg compose: (0,0)/320x240 [ 487.704547][T15617] tpg colorspace: 8 [ 487.706268][T15617] tpg transfer function: 0/0 [ 487.712128][T15617] tpg Y'CbCr encoding: 7/0 [ 487.714505][T15617] tpg quantization: 0/0 [ 487.716404][T15617] tpg RGB range: 0/2 [ 487.718166][T15617] vivid-000: ================== END STATUS ================== [ 487.894557][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.897790][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 487.915698][T15634] CIFS: Attempting to mount //127.0.0.1/share [ 487.955932][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3185'. [ 487.969392][T15636] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 487.974360][ T10] usb 9-1: USB disconnect, device number 11 [ 487.975345][T15640] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3183'. [ 488.009156][T15634] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 488.021293][T15634] CIFS: VFS: cifs_mount failed w/return code = -11 [ 488.043029][ C3] net_ratelimit: 15 callbacks suppressed [ 488.043052][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.055730][T15632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.063653][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.066936][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.223392][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.321484][T15659] ip6gretap0: entered promiscuous mode [ 488.375963][T15654] No control pipe specified [ 488.654321][ T42] audit: type=1326 audit(1786060904.745:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.3193" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f925bd9e0d9 code=0x0 [ 488.775187][T15686] Cannot find map_set index 135 as target [ 488.973838][T15694] FAULT_INJECTION: forcing a failure. [ 488.973838][T15694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.978975][T15694] CPU: 1 UID: 0 PID: 15694 Comm: syz.6.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.979008][T15694] Tainted: [L]=SOFTLOCKUP [ 488.979016][T15694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.979028][T15694] Call Trace: [ 488.979047][T15694] [ 488.979055][T15694] dump_stack_lvl+0x100/0x190 [ 488.979237][T15694] should_fail_ex.cold+0x5/0xa [ 488.979260][T15694] _copy_from_user+0x2e/0xd0 [ 488.979292][T15694] udmabuf_ioctl+0x112/0x300 [ 488.979321][T15694] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 488.979342][T15694] ? selinux_file_ioctl+0xb6/0x290 [ 488.979360][T15694] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 488.979376][T15694] __x64_sys_ioctl+0x18e/0x210 [ 488.979399][T15694] do_syscall_64+0x115/0x870 [ 488.979436][T15694] ? clear_bhb_loop+0x70/0xc0 [ 488.979456][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.979470][T15694] RIP: 0033:0x7f6d9319e0d9 [ 488.979485][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.979499][T15694] RSP: 002b:00007f6d9414b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.979522][T15694] RAX: ffffffffffffffda RBX: 00007f6d93425fa0 RCX: 00007f6d9319e0d9 [ 488.979534][T15694] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 488.979545][T15694] RBP: 00007f6d9414b090 R08: 0000000000000000 R09: 0000000000000000 [ 488.979555][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.979563][T15694] R13: 00007f6d93426038 R14: 00007f6d93425fa0 R15: 00007ffc69ba02c8 [ 488.979577][T15694] [ 489.078015][T15696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.083428][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.262987][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.411593][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3207'. [ 489.415952][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3207'. [ 489.520525][T15719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3211'. [ 489.535913][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.539635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.816367][T15748] CIFS: Attempting to mount //127.0.0.1/share [ 489.841621][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3223'. [ 489.867912][T15750] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 489.872034][T15748] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 489.876254][T15748] CIFS: VFS: cifs_mount failed w/return code = -11 [ 489.878872][T15754] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3222'. [ 489.935647][T15763] Cannot find map_set index 135 as target [ 489.954029][T15768] FAULT_INJECTION: forcing a failure. [ 489.954029][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 489.958465][T15768] CPU: 1 UID: 0 PID: 15768 Comm: syz.0.3229 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.958495][T15768] Tainted: [L]=SOFTLOCKUP [ 489.958502][T15768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.958514][T15768] Call Trace: [ 489.958521][T15768] [ 489.958530][T15768] dump_stack_lvl+0x100/0x190 [ 489.958561][T15768] should_fail_ex.cold+0x5/0xa [ 489.958585][T15768] should_failslab+0xc2/0x120 [ 489.958638][T15768] __kmalloc_cache_noprof+0x91/0x6c0 [ 489.958675][T15768] ? kasan_quarantine_put+0x104/0x240 [ 489.958697][T15768] ? udmabuf_create+0xc0/0x12a0 [ 489.958727][T15768] udmabuf_create+0xc0/0x12a0 [ 489.958753][T15768] ? __lock_acquire+0x49f/0x1a40 [ 489.958801][T15768] ? __pfx_udmabuf_create+0x10/0x10 [ 489.958825][T15768] ? find_held_lock+0x2b/0x80 [ 489.958841][T15768] ? __might_fault+0xc5/0x140 [ 489.958859][T15768] ? __might_fault+0xc5/0x140 [ 489.958886][T15768] udmabuf_ioctl+0x18f/0x300 [ 489.958908][T15768] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 489.958940][T15768] ? selinux_file_ioctl+0xb6/0x290 [ 489.958959][T15768] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 489.958984][T15768] __x64_sys_ioctl+0x18e/0x210 [ 489.959010][T15768] do_syscall_64+0x115/0x870 [ 489.959032][T15768] ? clear_bhb_loop+0x70/0xc0 [ 489.959056][T15768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.959073][T15768] RIP: 0033:0x7f925bd9e0d9 [ 489.959088][T15768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.959105][T15768] RSP: 002b:00007f9259ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.959119][T15768] RAX: ffffffffffffffda RBX: 00007f925c025fa0 RCX: 00007f925bd9e0d9 [ 489.959126][T15768] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 489.959133][T15768] RBP: 00007f9259ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.959139][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.959145][T15768] R13: 00007f925c026038 R14: 00007f925c025fa0 R15: 00007ffe49bc3308 [ 489.959158][T15768] [ 490.106823][ T42] audit: type=1400 audit(1786060906.185:7242): avc: denied { ioctl } for pid=15774 comm="syz.0.3232" path="socket:[57650]" dev="sockfs" ino=57650 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 490.291340][T15786] CIFS: Attempting to mount //127.0.0.1/share [ 490.296225][T15786] CIFS: VFS: Error connecting to socket. Aborting operation. [ 490.298849][T15786] CIFS: VFS: cifs_mount failed w/return code = -101 [ 490.354627][T15789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3236'. [ 490.541704][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3240'. [ 490.617198][ T42] audit: type=1400 audit(1786060906.705:7243): avc: denied { write } for pid=15800 comm="syz.6.3242" name="functions" dev="configfs" ino=17830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 490.625062][ T5090] Bluetooth: hci2: command 0x1003 tx timeout [ 490.625124][ T5753] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 490.647332][ T42] audit: type=1400 audit(1786060906.735:7244): avc: denied { write } for pid=15800 comm="syz.6.3242" name="mjpeg" dev="configfs" ino=56069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 490.662587][ T42] audit: type=1800 audit(1786060906.745:7245): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3242" name="bmaControls" dev="configfs" ino=56079 res=0 errno=0 [ 490.731140][ T42] audit: type=1400 audit(1786060906.815:7246): avc: denied { search } for pid=15806 comm="syz.6.3245" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 490.738106][ T42] audit: type=1400 audit(1786060906.815:7247): avc: denied { read write } for pid=15806 comm="syz.6.3245" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 490.746196][ T42] audit: type=1400 audit(1786060906.815:7248): avc: denied { open } for pid=15806 comm="syz.6.3245" path="/272/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 490.917636][ T42] audit: type=1326 audit(1786060907.005:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15820 comm="syz.4.3249" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7faf13f97e57 code=0x0 [ 491.422268][T15856] CIFS: Attempting to mount //127.0.0.1/share [ 491.473710][T15858] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 491.478487][T15856] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 491.485019][T15856] CIFS: VFS: cifs_mount failed w/return code = -11 [ 491.556291][T15872] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 491.988635][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.994699][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.259080][T15937] __nla_validate_parse: 11 callbacks suppressed [ 492.259099][T15937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3297'. [ 492.438293][T15957] binder: BINDER_SET_CONTEXT_MGR already set [ 492.442605][T15957] binder: 15954:15957 ioctl 4018620d 200000000240 returned -16 [ 492.519970][T15965] geneve2: entered promiscuous mode [ 492.521890][T15965] geneve2: entered allmulticast mode [ 492.590973][T15976] Cannot find map_set index 135 as target [ 492.632265][T15980] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.3312'. [ 492.636936][T15980] veth0_to_bond: default FDB implementation only supports local addresses [ 492.656918][T15984] netlink: 'syz.0.3313': attribute type 39 has an invalid length. [ 492.982615][ T849] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 493.076449][T15998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3320'. [ 493.088356][T15999] syzkaller0: entered promiscuous mode [ 493.090150][T15999] syzkaller0: entered allmulticast mode [ 493.150294][ T849] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 493.153708][ T849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.165642][ T849] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 006 [ 493.178631][T16005] net_ratelimit: 45 callbacks suppressed [ 493.178646][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.191551][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.196984][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.200400][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.204351][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.207329][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.210196][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.214103][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.217017][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.219781][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.500847][T16016] CIFS: Attempting to mount //127.0.0.1/share [ 493.556856][T16017] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 493.557323][T16018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3327'. [ 493.559646][T16016] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 493.566186][T16016] CIFS: VFS: cifs_mount failed w/return code = -11 [ 493.567857][ T849] (null): failure reading functionality [ 493.705342][T16029] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 493.772511][ T849] i2c i2c-2: failure reading functionality [ 493.786937][ T849] i2c i2c-2: connected i2c-tiny-usb device [ 494.075581][T15999] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 494.078005][T16040] CIFS: Attempting to mount //127.0.0.1/share [ 494.129719][T16041] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 494.133243][T16069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3337'. [ 494.135669][T16066] virtio-fs: tag not found [ 494.138527][T16040] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 494.146713][T16040] CIFS: VFS: cifs_mount failed w/return code = -11 [ 494.243524][ T42] audit: type=1400 audit(1786060910.335:7250): avc: denied { accept } for pid=16080 comm="syz.4.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.299879][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3343'. [ 494.362911][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 494.366759][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3344'. [ 494.591614][T16112] FAULT_INJECTION: forcing a failure. [ 494.591614][T16112] name failslab, interval 1, probability 0, space 0, times 0 [ 494.596115][T16112] CPU: 1 UID: 0 PID: 16112 Comm: syz.6.3351 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.596140][T16112] Tainted: [L]=SOFTLOCKUP [ 494.596147][T16112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.596157][T16112] Call Trace: [ 494.596172][T16112] [ 494.596180][T16112] dump_stack_lvl+0x100/0x190 [ 494.596238][T16112] should_fail_ex.cold+0x5/0xa [ 494.596273][T16112] should_failslab+0xc2/0x120 [ 494.596303][T16112] __kmalloc_noprof+0xfc/0x820 [ 494.596332][T16112] ? rcu_is_watching+0x12/0xc0 [ 494.596370][T16112] ? tomoyo_realpath_from_path+0xb6/0x690 [ 494.596402][T16112] tomoyo_realpath_from_path+0xb6/0x690 [ 494.596425][T16112] tomoyo_path_number_perm+0x23c/0x580 [ 494.596449][T16112] ? tomoyo_path_number_perm+0x22e/0x580 [ 494.596474][T16112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.596523][T16112] ? find_held_lock+0x2b/0x80 [ 494.596549][T16112] ? __fget_files+0x215/0x3d0 [ 494.596565][T16112] ? hook_file_ioctl_common+0x140/0x440 [ 494.596585][T16112] ? __fget_files+0x215/0x3d0 [ 494.596607][T16112] ? __fget_files+0x21f/0x3d0 [ 494.596635][T16112] security_file_ioctl+0xd3/0x230 [ 494.596666][T16112] __x64_sys_ioctl+0xb7/0x210 [ 494.596693][T16112] do_syscall_64+0x115/0x870 [ 494.596725][T16112] ? clear_bhb_loop+0x70/0xc0 [ 494.596743][T16112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.596755][T16112] RIP: 0033:0x7f6d9319e0d9 [ 494.596766][T16112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.596777][T16112] RSP: 002b:00007f6d9412a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.596789][T16112] RAX: ffffffffffffffda RBX: 00007f6d93426090 RCX: 00007f6d9319e0d9 [ 494.596796][T16112] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 494.596803][T16112] RBP: 00007f6d9412a090 R08: 0000000000000000 R09: 0000000000000000 [ 494.596809][T16112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.596815][T16112] R13: 00007f6d93426128 R14: 00007f6d93426090 R15: 00007ffc69ba02c8 [ 494.596829][T16112] [ 494.596835][T16112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.703407][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 494.853979][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.856842][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.860078][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.863310][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 494.866787][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 494.871441][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.874456][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.876941][ T10] usb 9-1: Product: syz [ 494.878275][ T10] usb 9-1: Manufacturer: syz [ 494.883286][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 494.885013][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 494.890595][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 494.892597][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 495.102590][ T5753] Bluetooth: hci0: command 0x0405 tx timeout [ 495.344207][ T10] usb 9-1: USB disconnect, device number 12 [ 495.344941][ C1] cdc_wdm 9-1:1.0: Unexpected error -71 [ 495.352121][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 495.359775][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'. [ 495.363584][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3352'. [ 495.486500][T16129] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 495.554359][T16117] netlink: 'syz.4.3349': attribute type 1 has an invalid length. [ 495.569317][T16117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.917468][ T42] audit: type=1400 audit(1786060912.005:7251): avc: denied { map } for pid=16145 comm="syz.6.3363" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 496.278833][T16159] sit0: entered promiscuous mode [ 496.284643][T16159] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 496.371708][T14962] usb 10-1: USB disconnect, device number 6 [ 496.420549][T16161] CIFS: Attempting to mount //127.0.0.1/share [ 496.472160][T16165] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 496.477092][T16161] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 496.482523][T16161] CIFS: VFS: cifs_mount failed w/return code = -11 [ 496.711516][T16196] FAULT_INJECTION: forcing a failure. [ 496.711516][T16196] name failslab, interval 1, probability 0, space 0, times 0 [ 496.717009][T16196] CPU: 3 UID: 0 PID: 16196 Comm: syz.5.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.717029][T16196] Tainted: [L]=SOFTLOCKUP [ 496.717033][T16196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.717040][T16196] Call Trace: [ 496.717045][T16196] [ 496.717050][T16196] dump_stack_lvl+0x100/0x190 [ 496.717069][T16196] should_fail_ex.cold+0x5/0xa [ 496.717084][T16196] should_failslab+0xc2/0x120 [ 496.717099][T16196] __kmalloc_noprof+0xfc/0x820 [ 496.717112][T16196] ? __pfx_dynamic_dname+0x10/0x10 [ 496.717129][T16196] ? tomoyo_encode2+0xfb/0x3c0 [ 496.717143][T16196] tomoyo_encode2+0xfb/0x3c0 [ 496.717156][T16196] tomoyo_encode+0x29/0x50 [ 496.717168][T16196] tomoyo_realpath_from_path+0x18c/0x690 [ 496.717183][T16196] tomoyo_path_number_perm+0x23c/0x580 [ 496.717198][T16196] ? tomoyo_path_number_perm+0x22e/0x580 [ 496.717215][T16196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 496.717244][T16196] ? find_held_lock+0x2b/0x80 [ 496.717255][T16196] ? __fget_files+0x215/0x3d0 [ 496.717265][T16196] ? hook_file_ioctl_common+0x140/0x440 [ 496.717278][T16196] ? __fget_files+0x215/0x3d0 [ 496.717291][T16196] ? __fget_files+0x21f/0x3d0 [ 496.717304][T16196] security_file_ioctl+0xd3/0x230 [ 496.717326][T16196] __x64_sys_ioctl+0xb7/0x210 [ 496.717350][T16196] do_syscall_64+0x115/0x870 [ 496.717370][T16196] ? clear_bhb_loop+0x70/0xc0 [ 496.717394][T16196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.717413][T16196] RIP: 0033:0x7f6c6c79e0d9 [ 496.717430][T16196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.717448][T16196] RSP: 002b:00007f6c6d626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.717466][T16196] RAX: ffffffffffffffda RBX: 00007f6c6ca26090 RCX: 00007f6c6c79e0d9 [ 496.717474][T16196] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 496.717480][T16196] RBP: 00007f6c6d626090 R08: 0000000000000000 R09: 0000000000000000 [ 496.717487][T16196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.717493][T16196] R13: 00007f6c6ca26128 R14: 00007f6c6ca26090 R15: 00007ffe0c5af738 [ 496.717508][T16196] [ 496.717519][T16196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 496.837128][T16201] CIFS: Attempting to mount //127.0.0.1/share [ 496.840295][T16201] CIFS: VFS: Error connecting to socket. Aborting operation. [ 496.843785][T16201] CIFS: VFS: cifs_mount failed w/return code = -101 [ 497.516031][T16211] Cannot find map_set index 135 as target [ 497.587800][T16221] __nla_validate_parse: 4 callbacks suppressed [ 497.587821][T16221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3391'. [ 497.744509][T16235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3397'. [ 497.818586][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3401'. [ 497.822290][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3401'. [ 497.824613][T16246] CIFS: Attempting to mount //127.0.0.1/share [ 497.881772][T16250] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 497.883013][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3402'. [ 497.888199][T16246] CIFS: VFS: cifs_mount failed w/return code = -112 [ 497.979133][ T42] audit: type=1400 audit(1786060914.065:7252): avc: denied { setcurrent } for pid=16264 comm="syz.0.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 498.023603][T16271] Cannot find del_set index 0 as target [ 498.068536][ T42] audit: type=1400 audit(1786060914.155:7253): avc: denied { mounton } for pid=16274 comm="syz.0.3414" path="/197/file0" dev="hugetlbfs" ino=59915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 498.068963][T16275] overlayfs: maximum fs stacking depth exceeded [ 498.081717][T16277] FAULT_INJECTION: forcing a failure. [ 498.081717][T16277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.087233][T16277] CPU: 2 UID: 0 PID: 16277 Comm: syz.5.3412 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.087262][T16277] Tainted: [L]=SOFTLOCKUP [ 498.087275][T16277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.087286][T16277] Call Trace: [ 498.087293][T16277] [ 498.087300][T16277] dump_stack_lvl+0x100/0x190 [ 498.087330][T16277] should_fail_ex.cold+0x5/0xa [ 498.087355][T16277] _copy_from_user+0x2e/0xd0 [ 498.087382][T16277] wext_handle_ioctl+0xc9/0x1b0 [ 498.087430][T16277] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 498.087456][T16277] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 498.087483][T16277] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 498.087516][T16277] sock_ioctl+0x2d4/0x6b0 [ 498.087553][T16277] ? __pfx_sock_ioctl+0x10/0x10 [ 498.087569][T16277] ? hook_file_ioctl_common+0x140/0x440 [ 498.087598][T16277] ? selinux_file_ioctl+0x13b/0x290 [ 498.087614][T16277] ? selinux_file_ioctl+0xb6/0x290 [ 498.087633][T16277] ? __pfx_sock_ioctl+0x10/0x10 [ 498.087653][T16277] __x64_sys_ioctl+0x18e/0x210 [ 498.087680][T16277] do_syscall_64+0x115/0x870 [ 498.087703][T16277] ? clear_bhb_loop+0x70/0xc0 [ 498.087725][T16277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.087742][T16277] RIP: 0033:0x7f6c6c79e0d9 [ 498.087760][T16277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.087776][T16277] RSP: 002b:00007f6c6d626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.087795][T16277] RAX: ffffffffffffffda RBX: 00007f6c6ca26090 RCX: 00007f6c6c79e0d9 [ 498.087806][T16277] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 498.087816][T16277] RBP: 00007f6c6d626090 R08: 0000000000000000 R09: 0000000000000000 [ 498.087827][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.087837][T16277] R13: 00007f6c6ca26128 R14: 00007f6c6ca26090 R15: 00007ffe0c5af738 [ 498.087862][T16277] [ 498.087937][T16278] CIFS: Attempting to mount //127.0.0.1/share [ 498.102539][ T42] audit: type=1400 audit(1786060914.185:7254): avc: denied { watch } for pid=16274 comm="syz.0.3414" path="/proc/525" dev="proc" ino=58289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 498.140063][T16279] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 498.163777][T16280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3415'. [ 498.175623][T16278] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 498.175742][T16278] CIFS: VFS: cifs_mount failed w/return code = -11 [ 498.192655][ C2] net_ratelimit: 93 callbacks suppressed [ 498.192673][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.199247][T16276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.203400][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.206291][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.229990][T16284] FAULT_INJECTION: forcing a failure. [ 498.229990][T16284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.234340][T16284] CPU: 3 UID: 0 PID: 16284 Comm: syz.6.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.234359][T16284] Tainted: [L]=SOFTLOCKUP [ 498.234363][T16284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.234370][T16284] Call Trace: [ 498.234375][T16284] [ 498.234380][T16284] dump_stack_lvl+0x100/0x190 [ 498.234399][T16284] should_fail_ex.cold+0x5/0xa [ 498.234415][T16284] _copy_to_user+0x32/0xd0 [ 498.234432][T16284] simple_read_from_buffer+0xcb/0x170 [ 498.234446][T16284] proc_fail_nth_read+0x1af/0x230 [ 498.234468][T16284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.234486][T16284] ? rw_verify_area+0xce/0x6d0 [ 498.234513][T16284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.234529][T16284] vfs_read+0x1e4/0xb40 [ 498.234548][T16284] ? __pfx_vfs_read+0x10/0x10 [ 498.234565][T16284] ? __fget_files+0x215/0x3d0 [ 498.234586][T16284] ? __fget_files+0x21f/0x3d0 [ 498.234608][T16284] ksys_read+0x12a/0x250 [ 498.234629][T16284] ? __pfx_ksys_read+0x10/0x10 [ 498.234649][T16284] do_syscall_64+0x115/0x870 [ 498.234668][T16284] ? clear_bhb_loop+0x70/0xc0 [ 498.234682][T16284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.234698][T16284] RIP: 0033:0x7f6d9315e90e [ 498.234713][T16284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.234742][T16284] RSP: 002b:00007f6d9414afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.234754][T16284] RAX: ffffffffffffffda RBX: 00007f6d9414b6c0 RCX: 00007f6d9315e90e [ 498.234760][T16284] RDX: 000000000000000f RSI: 00007f6d9414b0a0 RDI: 0000000000000005 [ 498.234767][T16284] RBP: 00007f6d9414b090 R08: 0000000000000000 R09: 0000000000000000 [ 498.234773][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.234779][T16284] R13: 00007f6d93426038 R14: 00007f6d93425fa0 R15: 00007ffc69ba02c8 [ 498.234794][T16284] [ 498.378204][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 498.490096][ T42] audit: type=1400 audit(1786060914.575:7255): avc: denied { read } for pid=16306 comm="syz.0.3427" name="cpu_dma_latency" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 498.502837][ T42] audit: type=1400 audit(1786060914.575:7256): avc: denied { open } for pid=16306 comm="syz.0.3427" path="/204/dev/cpu_dma_latency" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 498.513286][ T42] audit: type=1400 audit(1786060914.595:7257): avc: denied { mounton } for pid=16306 comm="syz.0.3427" path="/204/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 498.623389][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.637169][T16316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3430'. [ 498.867111][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 498.870687][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 498.991730][T16332] Cannot find map_set index 135 as target [ 499.431365][ T42] audit: type=1400 audit(1786060915.515:7258): avc: denied { write } for pid=16348 comm="syz.5.3445" name="functions" dev="configfs" ino=17830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 499.441039][ T42] audit: type=1400 audit(1786060915.525:7259): avc: denied { write } for pid=16348 comm="syz.5.3445" name="configs" dev="configfs" ino=17831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 499.448344][ T42] audit: type=1400 audit(1786060915.535:7260): avc: denied { write } for pid=16348 comm="syz.5.3445" name="c.2" dev="configfs" ino=61044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 499.663124][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.066389][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.222794][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.223165][T16384] Cannot find map_set index 135 as target [ 500.466096][ T5753] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 500.703059][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.899152][T13838] Bluetooth: hci2: Frame reassembly failed (-84) [ 501.103094][ T5761] Bluetooth: hci5: command 0x1003 tx timeout [ 501.110612][ T5090] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 501.345318][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.348288][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.467587][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 501.467601][ T42] audit: type=1400 audit(1786060917.555:7264): avc: denied { append } for pid=16432 comm="syz.4.3478" path="/419/file0/cpuacct.usage_percpu" dev="9p" ino=78395417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.479060][ T42] audit: type=1400 audit(1786060917.565:7265): avc: denied { lock } for pid=16432 comm="syz.4.3478" path="/419/file0/cpuacct.usage_percpu" dev="9p" ino=78395417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.543428][ T42] audit: type=1400 audit(1786060917.635:7266): avc: denied { create } for pid=16432 comm="syz.4.3478" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.561163][T16435] overlay: ./file0 is not a directory [ 501.567596][ T42] audit: type=1400 audit(1786060917.655:7267): avc: denied { ioctl } for pid=16432 comm="syz.4.3478" path="/419/file0/cpuacct.usage_percpu" dev="9p" ino=78395417 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.743419][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.911976][T16446] CIFS: Attempting to mount //127.0.0.1/share [ 501.966207][T16447] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 501.969982][T16446] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 501.975106][T16446] CIFS: VFS: cifs_mount failed w/return code = -11 [ 502.321870][T16468] netlink: 'syz.6.3490': attribute type 6 has an invalid length. [ 502.335988][ T5549] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.337722][T16469] netlink: 'syz.6.3490': attribute type 23 has an invalid length. [ 502.344784][ T5549] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.344848][ T5549] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.364007][ T5549] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.377596][T16471] XFS (nbd4): SB validate failed with error -5. [ 502.410019][T16471] netlink: 'syz.4.3491': attribute type 3 has an invalid length. [ 502.421336][T16471] exFAT-fs (nullb0): invalid boot record signature [ 502.422509][T16478] CIFS: Attempting to mount //127.0.0.1/share [ 502.425403][T16471] exFAT-fs (nullb0): failed to read boot sector [ 502.429132][T16471] exFAT-fs (nullb0): failed to recognize exfat type [ 502.476310][T16479] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 502.488270][T16478] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 502.492136][T16478] CIFS: VFS: cifs_mount failed w/return code = -11 [ 502.526000][T13838] Bluetooth: hci5: Frame reassembly failed (-90) [ 502.533576][T16482] Bluetooth: hci5: Frame reassembly failed (-84) [ 502.622075][T16489] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 502.626707][T16491] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 4 out of range (51000000..2150000000) [ 502.795625][T16501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16501 comm=syz.6.3500 [ 502.801654][T16501] netlink: 'syz.6.3500': attribute type 3 has an invalid length. [ 502.809248][T16501] netlink: 'syz.6.3500': attribute type 3 has an invalid length. [ 502.943005][ T5761] Bluetooth: hci2: command 0x1003 tx timeout [ 502.950474][ T5753] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 503.032556][T16505] __nla_validate_parse: 8 callbacks suppressed [ 503.032569][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3502'. [ 503.047204][T16505] XFS (nbd5): SB validate failed with error -5. [ 503.067401][T16505] netlink: 'syz.5.3502': attribute type 3 has an invalid length. [ 503.072207][T16505] exFAT-fs (nullb0): invalid boot record signature [ 503.080172][T16505] exFAT-fs (nullb0): failed to read boot sector [ 503.083220][T16505] exFAT-fs (nullb0): failed to recognize exfat type [ 503.155081][T16517] CIFS: Attempting to mount //127.0.0.1/share [ 503.206678][T16519] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 503.210910][T16520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3503'. [ 503.239584][T16517] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 503.244166][T16517] CIFS: VFS: cifs_mount failed w/return code = -11 [ 503.267325][ T10] net_ratelimit: 19 callbacks suppressed [ 503.267345][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.292600][T16522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3504'. [ 503.509523][T16530] FAULT_INJECTION: forcing a failure. [ 503.509523][T16530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.515364][T16530] CPU: 1 UID: 0 PID: 16530 Comm: syz.5.3507 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.515393][T16530] Tainted: [L]=SOFTLOCKUP [ 503.515400][T16530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.515410][T16530] Call Trace: [ 503.515427][T16530] [ 503.515434][T16530] dump_stack_lvl+0x100/0x190 [ 503.515493][T16530] should_fail_ex.cold+0x5/0xa [ 503.515528][T16530] _copy_to_user+0x32/0xd0 [ 503.515557][T16530] simple_read_from_buffer+0xcb/0x170 [ 503.515580][T16530] proc_fail_nth_read+0x1af/0x230 [ 503.515610][T16530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.515639][T16530] ? rw_verify_area+0xce/0x6d0 [ 503.515675][T16530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.515702][T16530] vfs_read+0x1e4/0xb40 [ 503.515733][T16530] ? __pfx_vfs_read+0x10/0x10 [ 503.515760][T16530] ? __fget_files+0x215/0x3d0 [ 503.515786][T16530] ? __fget_files+0x21f/0x3d0 [ 503.515813][T16530] ksys_read+0x12a/0x250 [ 503.515841][T16530] ? __pfx_ksys_read+0x10/0x10 [ 503.515876][T16530] do_syscall_64+0x115/0x870 [ 503.515913][T16530] ? clear_bhb_loop+0x70/0xc0 [ 503.515938][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.515956][T16530] RIP: 0033:0x7f6c6c75e90e [ 503.515973][T16530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.515990][T16530] RSP: 002b:00007f6c6d625fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.516010][T16530] RAX: ffffffffffffffda RBX: 00007f6c6d6266c0 RCX: 00007f6c6c75e90e [ 503.516023][T16530] RDX: 000000000000000f RSI: 00007f6c6d6260a0 RDI: 0000000000000005 [ 503.516035][T16530] RBP: 00007f6c6d626090 R08: 0000000000000000 R09: 0000000000000000 [ 503.516046][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.516055][T16530] R13: 00007f6c6ca26128 R14: 00007f6c6ca26090 R15: 00007ffe0c5af738 [ 503.516082][T16530] [ 503.832981][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.892783][T16540] SELinux: truncated policydb string identifier [ 503.894904][T16540] SELinux: failed to load policy [ 503.994538][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3512'. [ 504.009233][T16543] XFS (nbd6): SB validate failed with error -5. [ 504.049798][T16543] netlink: 'syz.6.3512': attribute type 3 has an invalid length. [ 504.059764][T16543] exFAT-fs (nullb0): invalid boot record signature [ 504.061840][T16543] exFAT-fs (nullb0): failed to read boot sector [ 504.062918][T16552] CIFS: Attempting to mount //127.0.0.1/share [ 504.068129][T16543] exFAT-fs (nullb0): failed to recognize exfat type [ 504.117697][T16553] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 504.124134][T16556] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3513'. [ 504.126686][T16552] CIFS: VFS: cifs_mount failed w/return code = -112 [ 504.353468][T16566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.357264][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.407104][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3521'. [ 504.410986][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3521'. [ 504.545902][ T5761] Bluetooth: hci5: command 0x1003 tx timeout [ 504.547533][ T5090] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 504.647712][T16577] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3524:16577 [ 504.653596][T16579] CIFS: Attempting to mount //127.0.0.1/share [ 504.667449][T16577] /dev/sg0: Can't lookup blockdev [ 504.711154][T16580] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 504.714773][T16581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3525'. [ 504.714776][T16579] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 504.714855][T16579] CIFS: VFS: cifs_mount failed w/return code = -11 [ 504.863354][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.059939][T16596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3532'. [ 505.114541][T16598] netlink: 'syz.4.3533': attribute type 8 has an invalid length. [ 505.252198][T16609] CIFS: Attempting to mount //127.0.0.1/share [ 505.297938][T16615] xt_socket: unknown flags 0x58 [ 505.300845][T16611] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 505.307293][T16609] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 505.311319][T16609] CIFS: VFS: cifs_mount failed w/return code = -11 [ 505.318432][T16616] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3537'. [ 505.915024][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.315928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.426820][ T5090] Bluetooth: hci1: link tx timeout [ 506.430184][ T5090] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.457609][T16651] CIFS: Attempting to mount //127.0.0.1/share [ 506.464383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.473258][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.511848][T16655] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 506.515638][T16651] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 506.521989][T16651] CIFS: VFS: cifs_mount failed w/return code = -11 [ 506.704068][T16057] Bluetooth: hci2: Frame reassembly failed (-90) [ 506.847144][ T42] audit: type=1400 audit(1786060922.935:7268): avc: denied { write } for pid=16676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.915562][ T42] audit: type=1400 audit(1786060923.005:7269): avc: denied { write } for pid=16679 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.029073][ T42] audit: type=1400 audit(1786060923.115:7270): avc: denied { write } for pid=16682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.082307][ T42] audit: type=1400 audit(1786060923.165:7271): avc: denied { write } for pid=16685 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.551812][ T42] audit: type=1400 audit(1786060923.635:7272): avc: denied { write } for pid=16687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.614143][ T42] audit: type=1400 audit(1786060923.705:7273): avc: denied { write } for pid=16690 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.708666][ T42] audit: type=1400 audit(1786060923.795:7274): avc: denied { write } for pid=16692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.767338][ T42] audit: type=1400 audit(1786060923.855:7275): avc: denied { write } for pid=16695 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.871664][ T42] audit: type=1400 audit(1786060923.955:7276): avc: denied { write } for pid=16697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.930468][ T42] audit: type=1400 audit(1786060924.015:7277): avc: denied { write } for pid=16700 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.472747][T14131] Bluetooth: hci1: command 0x0406 tx timeout [ 508.542593][ T5761] Bluetooth: hci4: command 0x0406 tx timeout [ 508.707649][ T5090] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 508.791253][T16707] net_ratelimit: 4 callbacks suppressed [ 508.791267][T16707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.796570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.860871][T16713] __nla_validate_parse: 3 callbacks suppressed [ 508.860891][T16713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3561'. [ 508.914192][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.917747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.971765][T16722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.975356][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.033671][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.109048][T16724] CIFS: Attempting to mount //127.0.0.1/share [ 509.112155][T16724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.116898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.123261][T16724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.164498][T16727] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 509.167579][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3568'. [ 509.174029][T16724] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 509.177743][T16724] CIFS: VFS: cifs_mount failed w/return code = -11 [ 509.596095][T16704] binder: 16702:16704 ioctl c0306201 200000000040 returned -14 [ 509.664880][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 509.673180][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3574'. [ 510.122520][ T34] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 510.252551][ T34] usb 11-1: device descriptor read/64, error -71 [ 510.257907][T16760] nvme_fabrics: missing parameter 'transport=%s' [ 510.263028][T16760] nvme_fabrics: missing parameter 'nqn=%s' [ 510.292131][T16760] nvme_fabrics: missing parameter 'transport=%s' [ 510.294563][T16760] nvme_fabrics: missing parameter 'nqn=%s' [ 510.492737][ T34] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 510.622994][ T34] usb 11-1: device descriptor read/64, error -71 [ 510.732882][ T34] usb usb11-port1: attempt power cycle [ 510.906589][T16773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16773 comm=syz.5.3584 [ 510.911106][T16773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=16773 comm=syz.5.3584 [ 510.916460][T16773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=16773 comm=syz.5.3584 [ 511.082584][ T34] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 511.105676][ T34] usb 11-1: device descriptor read/8, error -71 [ 511.345301][T16778] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 511.352631][ T34] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 511.373797][ T34] usb 11-1: device descriptor read/8, error -71 [ 511.494187][ T34] usb usb11-port1: unable to enumerate USB device [ 511.607236][T16793] Cannot find map_set index 135 as target [ 512.136842][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3603'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 512.211454][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 512.211467][ T42] audit: type=1400 audit(1786060928.295:7285): avc: denied { map } for pid=16823 comm="syz.4.3605" path="/453/file0/blkio.throttle.io_service_bytes" dev="9p" ino=78395421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 512.610195][ T42] audit: type=1400 audit(1786060928.695:7286): avc: denied { map } for pid=16833 comm="syz.5.3609" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 512.977912][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3625'. [ 512.979832][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3624'. [ 512.984524][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3624'. [ 513.814721][ T42] audit: type=1400 audit(1786060929.905:7287): avc: denied { cmd } for pid=16875 comm="syz.6.3623" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 513.940264][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 513.946963][T16891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3630'. [ 514.032303][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3634'. [ 514.222787][ T5899] net_ratelimit: 20 callbacks suppressed [ 514.222808][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.438988][T16914] unsupported nla_type 1571 [ 514.840738][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3644'. [ 514.844619][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 514.876455][T16929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.879962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.130986][ T42] audit: type=1400 audit(1786060931.215:7288): avc: denied { write } for pid=16934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.200691][ T42] audit: type=1400 audit(1786060931.285:7289): avc: denied { write } for pid=16939 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.234325][T16909] bond0: (slave syz_tun): Releasing backup interface [ 515.275147][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.309257][ T42] audit: type=1400 audit(1786060931.395:7290): avc: denied { write } for pid=16941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.332694][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3650'. [ 515.353779][T16945] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3650'. [ 515.378616][ T42] audit: type=1400 audit(1786060931.465:7291): avc: denied { write } for pid=16946 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.484850][ T42] audit: type=1400 audit(1786060931.575:7292): avc: denied { write } for pid=16949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.542956][ T42] audit: type=1400 audit(1786060931.635:7293): avc: denied { write } for pid=16953 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.592915][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.609266][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.631549][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.638297][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.645676][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.649233][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.767638][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.773970][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.777102][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.780890][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.784298][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.854346][T16096] tipc: Resetting bearer [ 515.904250][T16096] tipc: Disabling bearer [ 516.184509][ T5826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.187953][ T5826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.283774][ T5826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.291331][ T5826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.303342][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.317054][T16955] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.319595][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.322008][T16955] bridge_slave_0: entered allmulticast mode [ 516.325032][T16955] bridge_slave_0: entered promiscuous mode [ 516.335325][T16955] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.337802][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.340184][T16955] bridge_slave_1: entered allmulticast mode [ 516.344935][T16955] bridge_slave_1: entered promiscuous mode [ 516.367263][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3659'. [ 516.370407][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3659'. [ 516.397371][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.416894][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.455587][T16955] team0: Port device team_slave_0 added [ 516.457753][T17011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3660'. [ 516.489138][ T5826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.494543][ T5826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.511980][T16955] team0: Port device team_slave_1 added [ 516.551536][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.556530][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.566817][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.574520][ T42] audit: type=1400 audit(1786060932.665:7294): avc: denied { accept } for pid=17017 comm="syz.6.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 516.594266][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.597188][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.608100][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.650944][ T5826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.655221][ T5826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.699785][T16955] hsr_slave_0: entered promiscuous mode [ 516.702182][T16955] hsr_slave_1: entered promiscuous mode [ 516.707733][T16964] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.710411][T16964] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.713228][T16964] bridge_slave_0: entered allmulticast mode [ 516.715386][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.716067][T16964] bridge_slave_0: entered promiscuous mode [ 516.729779][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.732620][T16964] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.735430][T16964] bridge_slave_1: entered allmulticast mode [ 516.739388][T16964] bridge_slave_1: entered promiscuous mode [ 516.800432][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.829083][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.865548][T16964] team0: Port device team_slave_0 added [ 516.885311][T16964] team0: Port device team_slave_1 added [ 516.918777][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.921193][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.931431][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.937953][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.940749][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.950343][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.025003][ T5826] bridge_slave_1: left allmulticast mode [ 517.027600][ T5826] bridge_slave_1: left promiscuous mode [ 517.030156][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.039137][ T5826] bridge_slave_0: left allmulticast mode [ 517.041585][ T5826] bridge_slave_0: left promiscuous mode [ 517.044901][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.209457][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.220398][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.233084][ T5826] bond0 (unregistering): Released all slaves [ 517.239424][ T5826] bond1 (unregistering): Released all slaves [ 517.267699][T16964] hsr_slave_0: entered promiscuous mode [ 517.270125][T16964] hsr_slave_1: entered promiscuous mode [ 517.272255][T16964] debugfs: 'hsr0' already exists in 'hsr' [ 517.274305][T16964] Cannot create hsr debugfs directory [ 517.361664][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.377277][ T5826] tipc: Left network mode [ 517.538493][T16955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 517.544663][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.547561][T16955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 517.551570][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.571103][T16955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 517.580754][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.586171][T16955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 517.588216][ T42] audit: type=1400 audit(1786060933.675:7295): avc: denied { write } for pid=17030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.615981][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.637933][ T5826] hsr_slave_0: left promiscuous mode [ 517.640360][ T5826] hsr_slave_1: left promiscuous mode [ 517.642789][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.645343][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.648213][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.650526][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.662702][ T42] audit: type=1400 audit(1786060933.745:7296): avc: denied { write } for pid=17040 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.676019][ T5826] veth1_macvtap: left promiscuous mode [ 517.677852][ T5826] veth0_macvtap: left promiscuous mode [ 517.679637][ T5826] veth1_vlan: left promiscuous mode [ 517.681441][ T5826] veth0_vlan: left promiscuous mode [ 517.750334][ T5753] Bluetooth: hci0: command tx timeout [ 517.822687][ T5753] Bluetooth: hci2: command tx timeout [ 517.881990][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 517.892849][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 517.982027][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 518.105297][T16964] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 518.108131][T17058] CIFS: Attempting to mount //127.0.0.1/share [ 518.109912][T16964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.110548][T17058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.114789][T16964] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 518.120133][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.129329][T16964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.136309][T16964] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 518.145892][T16964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.153111][T16964] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 518.163299][T17062] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 518.182449][T16964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.229323][T17058] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 518.234217][T17058] CIFS: VFS: cifs_mount failed w/return code = -11 [ 518.237646][T17065] bridge4: entered promiscuous mode [ 518.239419][T17065] bridge4: entered allmulticast mode [ 518.241368][ T42] audit: type=1400 audit(1786060934.325:7297): avc: denied { write } for pid=17066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.253449][T16955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.287451][T16955] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.302243][T13848] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.304678][T13848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.315448][T13848] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.318028][T13848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.328186][ T42] audit: type=1400 audit(1786060934.415:7298): avc: denied { write } for pid=17075 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.375024][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 518.384646][T16964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.394661][ T5826] IPVS: stop unused estimator thread 0... [ 518.413326][T16964] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.479675][ T42] audit: type=1400 audit(1786060934.565:7299): avc: denied { write } for pid=17086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.545656][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.548402][T16057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.548841][ T42] audit: type=1400 audit(1786060934.635:7300): avc: denied { write } for pid=17090 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.571892][T13848] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.575079][T13848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.636370][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 518.750579][ T42] audit: type=1400 audit(1786060934.835:7301): avc: denied { write } for pid=17099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.819821][T16955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.822315][ T42] audit: type=1400 audit(1786060934.905:7302): avc: denied { write } for pid=17110 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.883619][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 518.896539][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.040358][T16955] veth0_vlan: entered promiscuous mode [ 519.073172][T16955] veth1_vlan: entered promiscuous mode [ 519.086946][T16964] veth0_vlan: entered promiscuous mode [ 519.112057][T16964] veth1_vlan: entered promiscuous mode [ 519.117395][T16955] veth0_macvtap: entered promiscuous mode [ 519.130028][T16955] veth1_macvtap: entered promiscuous mode [ 519.145750][T16955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.161379][T16955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.164707][T16964] veth0_macvtap: entered promiscuous mode [ 519.182597][T16964] veth1_macvtap: entered promiscuous mode [ 519.286608][ T2317] net_ratelimit: 14 callbacks suppressed [ 519.286623][ T2317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.349754][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.368394][T17138] __nla_validate_parse: 6 callbacks suppressed [ 519.368406][T17138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3679'. [ 519.374768][ T5826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.394454][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.423341][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.447000][T13848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.452449][T13848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.464189][ T5826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.492487][ T5826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.499274][ T5826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.511069][ T5826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.531432][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.535834][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.555248][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.565511][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.572573][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3681'. [ 519.585680][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.608087][T13848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.617860][T13848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.653194][ T5827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.655689][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'. [ 519.656699][ T5827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.659612][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 519.752709][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.806402][ T42] audit: type=1400 audit(1786060935.895:7303): avc: denied { map } for pid=17168 comm="syz.8.3687" path="/proc/7/numa_maps" dev="proc" ino=64509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 519.835815][ T5753] Bluetooth: hci0: command tx timeout [ 519.898630][T17177] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3691'. [ 519.909847][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3692'. [ 519.913015][ T5753] Bluetooth: hci2: command tx timeout [ 520.039582][T17196] Format for deleting device is "id" (uint). [ 520.067297][T17197] 9pnet_virtio: no channels available for device syz [ 520.115986][T17206] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3704'. [ 520.117569][T17208] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3705'. [ 520.222679][T17219] CIFS: Attempting to mount //127.0.0.1/share [ 520.289916][T17221] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 520.292865][T17226] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 520.292882][T17226] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 520.300351][T17228] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3708'. [ 520.315408][T17219] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 520.321499][T17219] CIFS: VFS: cifs_mount failed w/return code = -11 [ 520.376522][T17235] netlink: 'syz.7.3713': attribute type 1 has an invalid length. [ 520.465112][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.520240][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3718'. [ 520.523643][T17249] Cannot find del_set index 0 as target [ 520.573216][ T42] audit: type=1400 audit(1786060936.665:7304): avc: denied { unmount } for pid=16955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 520.578875][T17255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.579285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.813680][T17280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.817483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.861505][T17285] CUSE: unknown device info "" [ 520.864509][T17285] CUSE: unknown device info "" [ 520.866834][T17285] CUSE: unknown device info "" [ 520.868954][T17285] CUSE: unknown device info "" [ 520.870871][T17285] CUSE: zero length info key specified [ 520.874196][T17284] FAULT_INJECTION: forcing a failure. [ 520.874196][T17284] name failslab, interval 1, probability 0, space 0, times 0 [ 520.874529][T17288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17288 comm=syz.6.3734 [ 520.879056][T17284] CPU: 3 UID: 0 PID: 17284 Comm: syz.5.3733 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.879075][T17284] Tainted: [L]=SOFTLOCKUP [ 520.879079][T17284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.879087][T17284] Call Trace: [ 520.879101][T17284] [ 520.879106][T17284] dump_stack_lvl+0x100/0x190 [ 520.879134][T17284] should_fail_ex.cold+0x5/0xa [ 520.879157][T17284] should_failslab+0xc2/0x120 [ 520.879179][T17284] kmem_cache_alloc_noprof+0x91/0x6a0 [ 520.879200][T17284] ? do_getname+0x35/0x390 [ 520.879227][T17284] do_getname+0x35/0x390 [ 520.879250][T17284] user_path_at+0x26/0x60 [ 520.879268][T17284] __x64_sys_mount+0x1fb/0x310 [ 520.879291][T17284] ? __pfx___x64_sys_mount+0x10/0x10 [ 520.879319][T17284] do_syscall_64+0x115/0x870 [ 520.879349][T17284] ? clear_bhb_loop+0x70/0xc0 [ 520.879371][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.879388][T17284] RIP: 0033:0x7f6c6c79e0d9 [ 520.879403][T17284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.879419][T17284] RSP: 002b:00007f6c6d647028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 520.879437][T17284] RAX: ffffffffffffffda RBX: 00007f6c6ca25fa0 RCX: 00007f6c6c79e0d9 [ 520.879447][T17284] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 520.879458][T17284] RBP: 00007f6c6d647090 R08: 0000200000000300 R09: 0000000000000000 [ 520.879468][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.879477][T17284] R13: 00007f6c6ca26038 R14: 00007f6c6ca25fa0 R15: 00007ffe0c5af738 [ 520.879500][T17284] [ 520.881039][T17277] vcan0: tx address claim with dest, not broadcast [ 520.889090][T17287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17287 comm=syz.6.3734 [ 521.009477][T17288] Illegal XDP return value 2233717531 on prog (id 206) dev N/A, expect packet loss! [ 521.021912][T17294] CIFS: Attempting to mount //127.0.0.1/share [ 521.079168][T17295] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 521.090994][T17294] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 521.094213][T17294] CIFS: VFS: cifs_mount failed w/return code = -11 [ 521.217522][T17305] tmpfs: Cannot change global quota limit on remount [ 521.276962][T17309] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 521.505561][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.637781][T17312] futex_wake_op: syz.8.3743 tries to shift op by 32; fix this program [ 521.695580][T17317] Cannot find del_set index 0 as target [ 521.912568][ T5753] Bluetooth: hci0: command tx timeout [ 521.982828][ T5753] Bluetooth: hci2: command tx timeout [ 522.046258][T17350] vlan2: entered promiscuous mode [ 522.049075][T17350] bridge0: entered promiscuous mode [ 522.377536][T17378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.020738][ T848] IPVS: starting estimator thread 0... [ 523.102834][T15409] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 523.122778][T17430] IPVS: using max 44 ests per chain, 105600 per kthread [ 523.269780][T15409] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.281928][T15409] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 523.286434][T15409] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.289576][T15409] usb 12-1: Product: syz [ 523.291326][T15409] usb 12-1: Manufacturer: syz [ 523.293410][T15409] usb 12-1: SerialNumber: syz [ 523.300971][T15409] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 523.304374][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 87 [ 523.307512][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 7 [ 523.311743][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 523.321962][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 82 [ 523.328167][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 523.334527][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 523.337153][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 85 [ 523.339975][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 5 [ 523.366200][T15409] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 523.370657][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 83 [ 523.374052][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 523.377094][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 3 [ 523.379609][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 4 [ 523.384905][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 86 [ 523.393578][T15409] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 523.398346][T15409] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 523.664980][T17453] Bluetooth: MGMT ver 1.23 [ 523.690805][T17468] Cannot find del_set index 0 as target [ 523.799450][T17475] FAULT_INJECTION: forcing a failure. [ 523.799450][T17475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.805652][T17475] CPU: 2 UID: 0 PID: 17475 Comm: syz.8.3804 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.805673][T17475] Tainted: [L]=SOFTLOCKUP [ 523.805677][T17475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.805692][T17475] Call Trace: [ 523.805703][T17475] [ 523.805708][T17475] dump_stack_lvl+0x100/0x190 [ 523.805769][T17475] should_fail_ex.cold+0x5/0xa [ 523.805814][T17475] _copy_from_iter+0x1f4/0x1690 [ 523.805847][T17475] ? __pfx__copy_from_iter+0x10/0x10 [ 523.805864][T17475] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 523.805893][T17475] copy_page_from_iter+0x238/0x300 [ 523.805911][T17475] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 523.805929][T17475] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 523.805941][T17475] ? unwind_get_return_address+0x59/0xa0 [ 523.805959][T17475] ? arch_stack_walk+0xa6/0xf0 [ 523.805983][T17475] ? _kstrtoull+0x13c/0x1f0 [ 523.805993][T17475] ? __pfx__kstrtoull+0x10/0x10 [ 523.806006][T17475] tun_get_user+0x16d6/0x3c20 [ 523.806023][T17475] ? __pfx_tun_get_user+0x10/0x10 [ 523.806036][T17475] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 523.806058][T17475] ? find_held_lock+0x2b/0x80 [ 523.806073][T17475] ? tun_get+0x191/0x370 [ 523.806084][T17475] ? tun_get+0x191/0x370 [ 523.806099][T17475] tun_chr_write_iter+0xdc/0x200 [ 523.806112][T17475] vfs_write+0x6ac/0x1050 [ 523.806137][T17475] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 523.806150][T17475] ? __pfx_vfs_write+0x10/0x10 [ 523.806166][T17475] ? find_held_lock+0x2b/0x80 [ 523.806184][T17475] ksys_write+0x12a/0x250 [ 523.806194][T17475] ? __pfx_ksys_write+0x10/0x10 [ 523.806207][T17475] do_syscall_64+0x115/0x870 [ 523.806228][T17475] ? clear_bhb_loop+0x70/0xc0 [ 523.806242][T17475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.806254][T17475] RIP: 0033:0x7fc3ce55e90e [ 523.806265][T17475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 523.806281][T17475] RSP: 002b:00007fc3cf503fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.806303][T17475] RAX: ffffffffffffffda RBX: 00007fc3cf5046c0 RCX: 00007fc3ce55e90e [ 523.806316][T17475] RDX: 0000000000000066 RSI: 0000200000000880 RDI: 00000000000000c8 [ 523.806328][T17475] RBP: 00007fc3cf504090 R08: 0000000000000000 R09: 0000000000000000 [ 523.806339][T17475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.806349][T17475] R13: 00007fc3ce826038 R14: 00007fc3ce825fa0 R15: 00007ffc30459798 [ 523.806364][T17475] [ 523.982865][ T5090] Bluetooth: hci0: command tx timeout [ 524.048624][T17492] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 524.051199][T17492] [U] J"—e:ÀÆ" [ 524.063754][ T5090] Bluetooth: hci2: command tx timeout [ 524.080782][T17495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 524.255729][T17509] Cannot find del_set index 0 as target [ 524.331730][ T5761] Bluetooth: hci4: hcon ffff88802f8d0000 sent 1 < count 7 [ 524.552284][T17531] __nla_validate_parse: 27 callbacks suppressed [ 524.552306][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3825'. [ 524.559631][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3825'. [ 524.636362][ T5899] net_ratelimit: 13 callbacks suppressed [ 524.636384][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.768742][T17553] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3832'. [ 524.860282][ T5761] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 524.861309][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'. [ 524.870607][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3835'. [ 524.943101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.182589][ T5902] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 525.332500][ T5902] usb 11-1: Using ep0 maxpacket: 32 [ 525.336287][ T5902] usb 11-1: config 1 interface 0 altsetting 250 endpoint 0x2 has an invalid bInterval 112, changing to 10 [ 525.339984][ T5902] usb 11-1: config 1 interface 0 has no altsetting 0 [ 525.345031][ T5902] usb 11-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 525.348946][ T5902] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.352320][ T5902] usb 11-1: Product: syz [ 525.354524][ T5902] usb 11-1: Manufacturer: syz [ 525.356599][ T5902] usb 11-1: SerialNumber: syz [ 525.572487][T17569] kAFS: unable to lookup cell '(,c¾ûL' [ 525.574288][T17566] kAFS: unable to lookup cell '(,c¾ûL' [ 525.586062][ T5902] usbhid 11-1:1.0: can't add hid device: -71 [ 525.588336][ T5902] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 525.596835][ T5902] usb 11-1: USB disconnect, device number 9 [ 525.673021][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.833175][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.925472][ T5753] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 525.927006][ T34] usb 12-1: USB disconnect, device number 2 [ 525.941160][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 525.970410][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 525.983496][ T34] keyspan 12-1:1.0: device disconnected [ 526.003640][T17583] (syz.7.3841,17583,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 526.010006][T17583] (syz.7.3841,17583,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 526.015152][T17583] (syz.7.3841,17583,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 526.018484][T17583] (syz.7.3841,17583,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 526.065242][T17592] Cannot find del_set index 0 as target [ 526.079698][T17590] FAULT_INJECTION: forcing a failure. [ 526.079698][T17590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.088687][T17590] CPU: 2 UID: 0 PID: 17590 Comm: syz.5.3843 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.088719][T17590] Tainted: [L]=SOFTLOCKUP [ 526.088726][T17590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 526.088738][T17590] Call Trace: [ 526.088745][T17590] [ 526.088753][T17590] dump_stack_lvl+0x100/0x190 [ 526.088785][T17590] should_fail_ex.cold+0x5/0xa [ 526.088809][T17590] _copy_to_user+0x32/0xd0 [ 526.088838][T17590] simple_read_from_buffer+0xcb/0x170 [ 526.088860][T17590] proc_fail_nth_read+0x1af/0x230 [ 526.088889][T17590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.088918][T17590] ? rw_verify_area+0xce/0x6d0 [ 526.088944][T17590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.088971][T17590] vfs_read+0x1e4/0xb40 [ 526.089003][T17590] ? __pfx_vfs_read+0x10/0x10 [ 526.089027][T17590] ? __fget_files+0x215/0x3d0 [ 526.089051][T17590] ? __fget_files+0x21f/0x3d0 [ 526.089077][T17590] ksys_read+0x12a/0x250 [ 526.089104][T17590] ? __pfx_ksys_read+0x10/0x10 [ 526.089129][T17590] ? trace_syscall_enter+0xd9/0x110 [ 526.089182][T17590] do_syscall_64+0x115/0x870 [ 526.089205][T17590] ? clear_bhb_loop+0x70/0xc0 [ 526.089228][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.089246][T17590] RIP: 0033:0x7f6c6c75e90e [ 526.089262][T17590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.089278][T17590] RSP: 002b:00007f6c6d646fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.089297][T17590] RAX: ffffffffffffffda RBX: 00007f6c6d6476c0 RCX: 00007f6c6c75e90e [ 526.089309][T17590] RDX: 000000000000000f RSI: 00007f6c6d6470a0 RDI: 000000000000001a [ 526.089320][T17590] RBP: 00007f6c6d647090 R08: 0000000000000000 R09: 0000000000000000 [ 526.089330][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.089341][T17590] R13: 00007f6c6ca26038 R14: 00007f6c6ca25fa0 R15: 00007ffe0c5af738 [ 526.089366][T17590] [ 526.152564][ T5753] Bluetooth: hci2: command 0x2016 tx timeout [ 526.302990][ T5761] Bluetooth: hci0: command 0x0406 tx timeout [ 526.598377][T17627] Cannot find map_set index 135 as target [ 526.676912][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3863'. [ 526.680678][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3863'. [ 526.704747][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.794851][T17650] CIFS: Attempting to mount //127.0.0.1/share [ 526.848637][T17651] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 526.852641][T17653] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3867'. [ 526.853134][T17650] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 526.861593][T17650] CIFS: VFS: cifs_mount failed w/return code = -11 [ 526.913944][T17657] bridge1: entered allmulticast mode [ 527.219442][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3874'. [ 527.222507][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 527.388967][T17683] syzkaller0: entered promiscuous mode [ 527.391411][T17683] syzkaller0: entered allmulticast mode [ 527.466699][T17689] Cannot find map_set index 135 as target [ 527.623153][T17703] vlan2: entered promiscuous mode [ 527.624850][T17703] bridge0: entered promiscuous mode [ 527.661631][T17712] : renamed from bond_slave_0 (while UP) [ 527.744244][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.760233][T17723] tipc: Started in network mode [ 527.761908][T17723] tipc: Node identity , cluster identity 4711 [ 527.765635][T17723] tipc: Failed to obtain node identity [ 527.767470][T17723] tipc: Enabling of bearer rejected, failed to enable media [ 527.811418][T17726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.020839][T17739] xt_policy: output policy not valid in PREROUTING and INPUT [ 528.156704][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 528.156723][ T42] audit: type=1400 audit(1786060944.245:7307): avc: denied { name_bind } for pid=17742 comm="syz.8.3901" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 528.230681][ T5761] Bluetooth: hci2: command 0x2016 tx timeout [ 528.328095][T17754] netlink: 'syz.6.3904': attribute type 12 has an invalid length. [ 528.550380][T17772] xt_cgroup: invalid path, errno=-2 [ 528.553346][T17772] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 528.639008][T17781] FAULT_INJECTION: forcing a failure. [ 528.639008][T17781] name failslab, interval 1, probability 0, space 0, times 0 [ 528.644051][T17781] CPU: 1 UID: 0 PID: 17781 Comm: syz.5.3909 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.644085][T17781] Tainted: [L]=SOFTLOCKUP [ 528.644091][T17781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 528.644101][T17781] Call Trace: [ 528.644116][T17781] [ 528.644124][T17781] dump_stack_lvl+0x100/0x190 [ 528.644214][T17781] should_fail_ex.cold+0x5/0xa [ 528.644245][T17781] should_failslab+0xc2/0x120 [ 528.644283][T17781] __kmalloc_cache_noprof+0x91/0x6c0 [ 528.644318][T17781] ? find_held_lock+0x2b/0x80 [ 528.644348][T17781] ? alloc_fs_context+0x57/0xf40 [ 528.644385][T17781] alloc_fs_context+0x57/0xf40 [ 528.644406][T17781] ? __get_fs_type+0xe3/0x200 [ 528.644429][T17781] path_mount+0xdbd/0x23d0 [ 528.644453][T17781] ? __pfx_path_mount+0x10/0x10 [ 528.644471][T17781] ? lockdep_hardirqs_on+0x78/0x100 [ 528.644522][T17781] ? putname+0xb1/0x110 [ 528.644539][T17781] ? kmem_cache_free+0x127/0x6b0 [ 528.644562][T17781] ? __x64_sys_mount+0x293/0x310 [ 528.644581][T17781] __x64_sys_mount+0x293/0x310 [ 528.644602][T17781] ? __pfx___x64_sys_mount+0x10/0x10 [ 528.644621][T17781] ? trace_syscall_enter+0xd9/0x110 [ 528.644658][T17781] do_syscall_64+0x115/0x870 [ 528.644678][T17781] ? clear_bhb_loop+0x70/0xc0 [ 528.644699][T17781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.644715][T17781] RIP: 0033:0x7f6c6c79e0d9 [ 528.644731][T17781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.644747][T17781] RSP: 002b:00007f6c6d647028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.644765][T17781] RAX: ffffffffffffffda RBX: 00007f6c6ca25fa0 RCX: 00007f6c6c79e0d9 [ 528.644776][T17781] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 528.644785][T17781] RBP: 00007f6c6d647090 R08: 0000200000000300 R09: 0000000000000000 [ 528.644795][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.644804][T17781] R13: 00007f6c6ca26038 R14: 00007f6c6ca25fa0 R15: 00007ffe0c5af738 [ 528.644825][T17781] [ 528.792930][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.873182][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.879184][ T2317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.204243][ T42] audit: type=1400 audit(1786060945.295:7308): avc: denied { write } for pid=17807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.260392][ T42] audit: type=1400 audit(1786060945.345:7309): avc: denied { write } for pid=17810 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.313932][T17815] CIFS: Attempting to mount //127.0.0.1/share [ 529.352740][ T5753] Bluetooth: hci3: command 0x0406 tx timeout [ 529.368016][T17819] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 529.373704][T17815] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 529.381357][T17815] CIFS: VFS: cifs_mount failed w/return code = -11 [ 529.562570][T17835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=17835 comm=syz.8.3918 [ 529.597914][T17839] netlink: 'syz.5.3920': attribute type 1 has an invalid length. [ 529.606516][T17832] __nla_validate_parse: 8 callbacks suppressed [ 529.606531][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3919'. [ 529.652024][T17839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6671 sclass=netlink_route_socket pid=17839 comm=syz.5.3920 [ 529.685806][ T42] audit: type=1400 audit(1786060945.775:7310): avc: denied { write } for pid=17846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.732758][T17849] Cannot find add_set index 65532 as target [ 529.774950][ T42] audit: type=1400 audit(1786060945.865:7311): avc: denied { write } for pid=17853 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.834798][ T34] net_ratelimit: 2 callbacks suppressed [ 529.834813][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.926875][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3928'. [ 529.930640][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3928'. [ 529.942193][T17866] CIFS: Attempting to mount //127.0.0.1/share [ 530.001204][T17870] FAULT_INJECTION: forcing a failure. [ 530.001204][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 530.011507][T17870] CPU: 1 UID: 0 PID: 17870 Comm: syz.7.3930 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.011538][T17870] Tainted: [L]=SOFTLOCKUP [ 530.011545][T17870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.011555][T17870] Call Trace: [ 530.011563][T17870] [ 530.011570][T17870] dump_stack_lvl+0x100/0x190 [ 530.011603][T17870] should_fail_ex.cold+0x5/0xa [ 530.011628][T17870] should_failslab+0xc2/0x120 [ 530.011653][T17870] __kmalloc_cache_noprof+0x91/0x6c0 [ 530.011682][T17870] ? kasan_save_track+0x14/0x30 [ 530.011705][T17870] ? smb3_init_fs_context+0xb1/0xb90 [ 530.011754][T17870] smb3_init_fs_context+0xb1/0xb90 [ 530.011786][T17870] alloc_fs_context+0x60c/0xf40 [ 530.011818][T17870] path_mount+0xdbd/0x23d0 [ 530.011848][T17870] ? __pfx_path_mount+0x10/0x10 [ 530.011870][T17870] ? lockdep_hardirqs_on+0x78/0x100 [ 530.011898][T17870] ? putname+0xb1/0x110 [ 530.011919][T17870] ? kmem_cache_free+0x127/0x6b0 [ 530.011952][T17870] ? __x64_sys_mount+0x293/0x310 [ 530.011974][T17870] __x64_sys_mount+0x293/0x310 [ 530.011997][T17870] ? __pfx___x64_sys_mount+0x10/0x10 [ 530.012020][T17870] ? trace_syscall_enter+0xd9/0x110 [ 530.012062][T17870] do_syscall_64+0x115/0x870 [ 530.012083][T17870] ? clear_bhb_loop+0x70/0xc0 [ 530.012106][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.012125][T17870] RIP: 0033:0x7f2cded9e0d9 [ 530.012141][T17870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.012160][T17870] RSP: 002b:00007f2cdfb80028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 530.012180][T17870] RAX: ffffffffffffffda RBX: 00007f2cdf025fa0 RCX: 00007f2cded9e0d9 [ 530.012193][T17870] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 530.012205][T17870] RBP: 00007f2cdfb80090 R08: 0000200000000300 R09: 0000000000000000 [ 530.012216][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.012227][T17870] R13: 00007f2cdf026038 R14: 00007f2cdf025fa0 R15: 00007fffe550b958 [ 530.012253][T17870] [ 530.064444][T17874] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3929'. [ 530.080720][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3931'. [ 530.104127][T17870] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3930'. [ 530.160974][ T42] audit: type=1400 audit(1786060946.245:7312): avc: denied { write } for pid=17876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.221534][ T42] audit: type=1400 audit(1786060946.305:7313): avc: denied { write } for pid=17879 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.357697][T17889] binder: 17888:17889 ioctl c0306201 200000000540 returned -22 [ 530.361385][T17889] binder: 17888:17889 ioctl c0306201 200000000640 returned -22 [ 530.365137][T17889] binder: 17888:17889 ioctl 891c 200000000040 returned -22 [ 530.370336][T17891] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3936'. [ 530.546236][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3940'. [ 530.758435][T17866] CIFS: VFS: Error connecting to socket. Aborting operation. [ 530.761448][T17866] CIFS: VFS: cifs_mount failed w/return code = -4 [ 530.863052][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.867360][ T5753] Bluetooth: hci2: command 0x2016 tx timeout [ 530.937131][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3947'. [ 530.945170][ T42] audit: type=1400 audit(1786060947.035:7314): avc: denied { write } for pid=17935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.999384][T17949] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3949'. [ 531.011382][ T42] audit: type=1400 audit(1786060947.095:7315): avc: denied { write } for pid=17945 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.038986][T17953] CIFS: Attempting to mount //127.0.0.1/share [ 531.091083][T17954] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 531.100285][T17953] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 531.107491][T17953] CIFS: VFS: cifs_mount failed w/return code = -11 [ 531.142993][T17965] CIFS: Attempting to mount //127.0.0.1/share [ 531.145566][T17958] netlink: 'syz.5.3948': attribute type 4 has an invalid length. [ 531.146105][T17958] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 531.155419][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.158971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.170586][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.177096][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.181651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.184911][T17968] bridge0: port 3(syz_tun) entered blocking state [ 531.185051][T17968] bridge0: port 3(syz_tun) entered disabled state [ 531.185197][T17968] syz_tun: entered allmulticast mode [ 531.186537][T17968] syz_tun: entered promiscuous mode [ 531.191122][T17970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.196938][T17968] bridge0: port 3(syz_tun) entered blocking state [ 531.198807][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.200913][T17968] bridge0: port 3(syz_tun) entered forwarding state [ 531.206231][T17969] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 531.209147][T17965] CIFS: VFS: cifs_mount failed w/return code = -112 [ 531.380848][T17987] nvme_fcloop: unknown parameter or missing value 'wwn' [ 531.534588][T18000] netlink: 'syz.6.3965': attribute type 16 has an invalid length. [ 531.653636][T18003] CIFS: Attempting to mount //127.0.0.1/share [ 532.382793][ T5761] Bluetooth: hci4: command 0x0406 tx timeout [ 532.403365][T18023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=18023 comm=syz.7.3971 [ 532.484869][T18003] CIFS: VFS: Error connecting to socket. Aborting operation. [ 532.489267][T18003] CIFS: VFS: cifs_mount failed w/return code = -4 [ 532.591650][T18030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 532.776437][T18043] comedi comedi3: dt2817: I/O base address or length out of range [ 532.964212][ T5090] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 533.899799][T18060] SELinux: failed to load policy [ 534.277116][ T42] audit: type=1400 audit(1786060951.361:7316): avc: denied { setattr } for pid=18103 comm="syz.5.4001" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 534.338084][ T42] audit: type=1800 audit(1786060951.421:7317): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.4001" name="/sg0" dev="devtmpfs" ino=722 res=0 errno=0 [ 534.358685][T18108] netlink: 'syz.7.4002': attribute type 1 has an invalid length. [ 534.374675][T18108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.394332][T18108] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 534.401566][T18114] FAULT_INJECTION: forcing a failure. [ 534.401566][T18114] name failslab, interval 1, probability 0, space 0, times 0 [ 534.405825][T18114] CPU: 0 UID: 0 PID: 18114 Comm: syz.6.4004 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.405856][T18114] Tainted: [L]=SOFTLOCKUP [ 534.405862][T18114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.405874][T18114] Call Trace: [ 534.405880][T18114] [ 534.405888][T18114] dump_stack_lvl+0x100/0x190 [ 534.405967][T18114] should_fail_ex.cold+0x5/0xa [ 534.405991][T18114] should_failslab+0xc2/0x120 [ 534.406024][T18114] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 534.406054][T18114] ? smb3_parse_devname+0x199/0x500 [ 534.406095][T18114] kstrndup+0x64/0x120 [ 534.406126][T18114] smb3_parse_devname+0x199/0x500 [ 534.406151][T18114] smb3_fs_context_parse_param+0x3f02/0x7740 [ 534.406178][T18114] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 534.406203][T18114] ? __pfx_selinux_fs_context_parse_param+0x10/0x10 [ 534.406242][T18114] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 534.406271][T18114] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 534.406295][T18114] ? vfs_parse_fs_param+0x200/0x3b0 [ 534.406317][T18114] vfs_parse_fs_param+0x200/0x3b0 [ 534.406333][T18114] vfs_parse_fs_qstr+0x138/0x1c0 [ 534.406348][T18114] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 534.406368][T18114] smb3_fs_context_parse_monolithic+0x231/0x300 [ 534.406390][T18114] ? __pfx_smb3_fs_context_parse_monolithic+0x10/0x10 [ 534.406408][T18114] ? alloc_fs_context+0x65a/0xf40 [ 534.406424][T18114] path_mount+0x77f/0x23d0 [ 534.406444][T18114] ? __pfx_path_mount+0x10/0x10 [ 534.406456][T18114] ? lockdep_hardirqs_on+0x78/0x100 [ 534.406492][T18114] ? putname+0xb1/0x110 [ 534.406503][T18114] ? kmem_cache_free+0x127/0x6b0 [ 534.406520][T18114] ? __x64_sys_mount+0x293/0x310 [ 534.406533][T18114] __x64_sys_mount+0x293/0x310 [ 534.406549][T18114] ? __pfx___x64_sys_mount+0x10/0x10 [ 534.406563][T18114] ? trace_syscall_enter+0xd9/0x110 [ 534.406589][T18114] do_syscall_64+0x115/0x870 [ 534.406603][T18114] ? clear_bhb_loop+0x70/0xc0 [ 534.406618][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.406629][T18114] RIP: 0033:0x7f6d9319e0d9 [ 534.406640][T18114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.406651][T18114] RSP: 002b:00007f6d9414b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.406663][T18114] RAX: ffffffffffffffda RBX: 00007f6d93425fa0 RCX: 00007f6d9319e0d9 [ 534.406670][T18114] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 534.406677][T18114] RBP: 00007f6d9414b090 R08: 0000200000000300 R09: 0000000000000000 [ 534.406683][T18114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.406690][T18114] R13: 00007f6d93426038 R14: 00007f6d93425fa0 R15: 00007ffc69ba02c8 [ 534.406703][T18114] [ 534.406711][T18114] Unable to allocate memory for devname [ 534.406711][T18114] [ 534.409513][T18108] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 534.410424][T18114] CIFS: VFS: Unable to allocate memory for devname [ 534.588458][ T5761] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 534.809939][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.813452][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.816849][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.820230][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.823120][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.825861][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.828447][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.830960][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.833532][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.836077][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.838727][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.842157][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.845920][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.849281][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.852550][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.855896][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.858902][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.862052][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.865203][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.868414][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.871368][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.874462][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.876954][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.879561][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.882158][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.884763][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.887106][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.889525][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.892027][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.894972][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.897435][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.899929][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.902445][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.904838][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.907307][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.909863][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.912323][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.914802][T18137] binder: 18135:18137 ioctl c0306201 200000000640 returned -22 [ 534.953273][ T5856] net_ratelimit: 16 callbacks suppressed [ 534.953292][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.955825][T18143] __nla_validate_parse: 16 callbacks suppressed [ 534.955841][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4015'. [ 534.965784][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4015'. [ 535.033389][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.145198][T18155] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 535.149830][T18155] netlink: 'syz.8.4019': attribute type 16 has an invalid length. [ 535.153817][T18155] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.4019'. [ 535.214059][T18157] CIFS: Attempting to mount //127.0.0.1/share [ 535.267304][T18158] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 535.271327][T18157] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 535.276653][T18157] CIFS: VFS: cifs_mount failed w/return code = -11 [ 535.279765][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4023'. [ 535.288699][T18157] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4020'. [ 535.325153][T18167] Cannot find map_set index 135 as target [ 535.451493][T18162] nvme nvme0: rdma connection establishment failed (-104) [ 535.632237][T18189] CIFS: Attempting to mount //127.0.0.1/share [ 535.635092][T18189] CIFS: VFS: Error connecting to socket. Aborting operation. [ 535.637645][T18189] CIFS: VFS: cifs_mount failed w/return code = -111 [ 535.648263][T18191] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4033'. [ 535.676144][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4036'. [ 535.679087][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4036'. [ 535.695859][T18198] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4035'. [ 535.700837][T18199] netlink: zone id is out of range [ 535.704660][T18199] netlink: zone id is out of range [ 535.777008][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4039'. [ 535.781079][T18204] netlink: 'syz.8.4039': attribute type 26 has an invalid length. [ 535.787243][T18204] netlink: 'syz.8.4039': attribute type 26 has an invalid length. [ 535.801093][T18204] netdevsim netdevsim8 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 535.940708][T18212] team0 (unregistering): Port device team_slave_0 removed [ 535.947171][T18212] team0 (unregistering): Port device team_slave_1 removed [ 535.981354][T18214] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 535.985930][T18214] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 536.063571][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.108238][ T42] audit: type=1400 audit(1786060953.191:7318): avc: denied { bind } for pid=18223 comm="syz.5.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 536.144112][T18229] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 536.254791][T18237] openvswitch: netlink: IP tunnel dst address not specified [ 536.271963][T18237] Mount JFS Failure: -5 [ 536.274135][T18237] jfs_mount failed w/return code = -5 [ 536.366375][ T42] audit: type=1400 audit(1786060953.451:7319): avc: denied { getopt } for pid=18245 comm="syz.5.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 536.414164][T18246] kvm: user requested TSC rate below hardware speed [ 536.896773][T18277] binder: BINDER_SET_CONTEXT_MGR already set [ 536.898760][T18277] binder: 18275:18277 ioctl 4018620d 200000000100 returned -16 [ 536.952585][ T42] audit: type=1400 audit(1786060954.031:7320): avc: denied { write } for pid=18280 comm="syz.5.4075" name="usb_gadget" dev="configfs" ino=6426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.964210][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.970455][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.974466][ T42] audit: type=1400 audit(1786060954.031:7321): avc: denied { write } for pid=18280 comm="syz.5.4075" name="functions" dev="configfs" ino=71648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.989089][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.995163][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.999319][ T42] audit: type=1400 audit(1786060954.031:7322): avc: denied { setopt } for pid=18280 comm="syz.5.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 537.021801][ T42] audit: type=1400 audit(1786060954.051:7323): avc: denied { write } for pid=18280 comm="syz.5.4075" name="configs" dev="configfs" ino=71649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.049246][ T42] audit: type=1400 audit(1786060954.051:7324): avc: denied { write } for pid=18280 comm="syz.5.4075" name="c.1" dev="configfs" ino=72291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.082696][ T42] audit: type=1400 audit(1786060954.061:7325): avc: denied { write } for pid=18280 comm="syz.5.4075" name="c.1" dev="configfs" ino=72291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.102593][T14131] Bluetooth: hci0: command 0x0406 tx timeout [ 537.268610][T18290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31000 sclass=netlink_route_socket pid=18290 comm=syz.7.4079 [ 537.330330][T18294] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 537.335691][T18295] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 537.594816][ T5761] Bluetooth: hci3: command 0x0406 tx timeout [ 537.784237][T18318] [ 537.785271][T18318] ====================================================== [ 537.787993][T18318] WARNING: possible circular locking dependency detected [ 537.790602][T18318] syzkaller #0 Tainted: G L [ 537.793053][T18318] ------------------------------------------------------ [ 537.795768][T18318] syz.7.4090/18318 is trying to acquire lock: [ 537.798188][T18318] ffff8880278e3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600 [ 537.802094][T18318] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.802094][T18318] but task is already holding lock: [ 537.805063][T18318] ffff88803f8f58b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 537.808584][T18318] [ 537.808584][T18318] which lock already depends on the new lock. [ 537.808584][T18318] [ 537.812576][T18318] [ 537.812576][T18318] the existing dependency chain (in reverse order) is: [ 537.816063][T18318] [ 537.816063][T18318] -> #4 (&eq->sysfs_lock){+.+.}-{4:4}: [ 537.819016][T18318] lock_acquire+0x1b9/0x370 [ 537.821041][T18318] __mutex_lock+0x1a4/0x1bd0 [ 537.823121][T18318] elevator_exit+0x88/0xf0 [ 537.825087][T18318] elevator_switch+0x3a7/0x7e0 [ 537.827185][T18318] elevator_change+0x352/0x530 [ 537.829271][T18318] elevator_set_none+0x92/0xf0 [ 537.831371][T18318] blk_unregister_queue+0x178/0x310 [ 537.833565][T18318] __del_gendisk+0x2e3/0xb20 [ 537.835602][T18318] del_gendisk+0x10e/0x1b0 [ 537.837552][T18318] loop_control_ioctl+0x4f8/0x620 [ 537.839766][T18318] __x64_sys_ioctl+0x18e/0x210 [ 537.841880][T18318] do_syscall_64+0x115/0x870 [ 537.843901][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.846349][T18318] [ 537.846349][T18318] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 537.849383][T18318] lock_acquire+0x1b9/0x370 [ 537.851394][T18318] __mutex_lock+0x1a4/0x1bd0 [ 537.853447][T18318] elevator_change+0x1bc/0x530 [ 537.855559][T18318] elv_iosched_store+0x3be/0x460 [ 537.857710][T18318] queue_attr_store+0x25f/0x2f0 [ 537.859836][T18318] sysfs_kf_write+0xf2/0x150 [ 537.861892][T18318] kernfs_fop_write_iter+0x3e0/0x5f0 [ 537.864210][T18318] vfs_write+0x6ac/0x1050 [ 537.866166][T18318] ksys_write+0x12a/0x250 [ 537.868105][T18318] do_syscall_64+0x115/0x870 [ 537.870125][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.872639][T18318] [ 537.872639][T18318] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 537.875983][T18318] lock_acquire+0x1b9/0x370 [ 537.877983][T18318] blk_alloc_queue+0x610/0x790 [ 537.880074][T18318] blk_mq_alloc_queue+0x174/0x290 [ 537.882284][T18318] __blk_mq_alloc_disk+0x29/0x120 [ 537.884407][T18318] loop_add+0x498/0xb60 [ 537.886257][T18318] loop_init+0x1d3/0x200 [ 537.888139][T18318] do_one_initcall+0x11d/0x700 [ 537.890240][T18318] kernel_init_freeable+0x6ea/0x7b0 [ 537.892477][T18318] kernel_init+0x1f/0x1e0 [ 537.894386][T18318] ret_from_fork+0x72b/0xd50 [ 537.896407][T18318] ret_from_fork_asm+0x1a/0x30 [ 537.898498][T18318] [ 537.898498][T18318] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 537.901323][T18318] lock_acquire+0x1b9/0x370 [ 537.903325][T18318] fs_reclaim_acquire+0xc4/0x100 [ 537.905493][T18318] kmem_cache_alloc_noprof+0x63/0x6a0 [ 537.907841][T18318] __radix_tree_preload+0x330/0x820 [ 537.910112][T18318] blkg_conf_prep+0x489/0xf10 [ 537.912250][T18318] tg_set_conf.isra.0+0x1ed/0x500 [ 537.914459][T18318] cgroup_file_write+0x1e6/0x8a0 [ 537.916635][T18318] kernfs_fop_write_iter+0x3e0/0x5f0 [ 537.918975][T18318] vfs_write+0x6ac/0x1050 [ 537.920927][T18318] ksys_write+0x12a/0x250 [ 537.922847][T18318] do_syscall_64+0x115/0x870 [ 537.924871][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.927403][T18318] [ 537.927403][T18318] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}: [ 537.930375][T18318] check_prev_add+0xeb/0xe60 [ 537.932419][T18318] __lock_acquire+0x136c/0x1a40 [ 537.934526][T18318] lock_acquire+0x1b9/0x370 [ 537.936505][T18318] __mutex_lock+0x1a4/0x1bd0 [ 537.938520][T18318] blkcg_deactivate_policy+0x167/0x600 [ 537.940861][T18318] bfq_exit_queue+0x29d/0x430 [ 537.942917][T18318] blk_mq_exit_sched+0x20e/0x4e0 [ 537.945054][T18318] elevator_exit+0x93/0xf0 [ 537.947033][T18318] elevator_switch+0x3a7/0x7e0 [ 537.949115][T18318] elevator_change+0x352/0x530 [ 537.951241][T18318] elevator_set_none+0x92/0xf0 [ 537.953328][T18318] blk_unregister_queue+0x178/0x310 [ 537.955586][T18318] __del_gendisk+0x2e3/0xb20 [ 537.957599][T18318] del_gendisk+0x10e/0x1b0 [ 537.959566][T18318] loop_control_ioctl+0x4f8/0x620 [ 537.961779][T18318] __x64_sys_ioctl+0x18e/0x210 [ 537.963878][T18318] do_syscall_64+0x115/0x870 [ 537.965898][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.968383][T18318] [ 537.968383][T18318] other info that might help us debug this: [ 537.968383][T18318] [ 537.972329][T18318] Chain exists of: [ 537.972329][T18318] &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock [ 537.972329][T18318] [ 537.977357][T18318] Possible unsafe locking scenario: [ 537.977357][T18318] [ 537.980219][T18318] CPU0 CPU1 [ 537.982353][T18318] ---- ---- [ 537.984414][T18318] lock(&eq->sysfs_lock); [ 537.986155][T18318] lock(&q->elevator_lock); [ 537.988861][T18318] lock(&eq->sysfs_lock); [ 537.991591][T18318] lock(&q->blkcg_mutex); [ 537.993332][T18318] [ 537.993332][T18318] *** DEADLOCK *** [ 537.993332][T18318] [ 537.996434][T18318] 3 locks held by syz.7.4090/18318: [ 537.998512][T18318] #0: ffff8880291133a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0 [ 538.002421][T18318] #1: ffff8880278e3d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 538.006204][T18318] #2: ffff88803f8f58b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 538.009812][T18318] [ 538.009812][T18318] stack backtrace: [ 538.012153][T18318] CPU: 0 UID: 0 PID: 18318 Comm: syz.7.4090 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.012183][T18318] Tainted: [L]=SOFTLOCKUP [ 538.012191][T18318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.012201][T18318] Call Trace: [ 538.012219][T18318] [ 538.012231][T18318] dump_stack_lvl+0x100/0x190 [ 538.012258][T18318] print_circular_bug.cold+0x178/0x1c7 [ 538.012285][T18318] check_noncircular+0x146/0x160 [ 538.012309][T18318] check_prev_add+0xeb/0xe60 [ 538.012329][T18318] __lock_acquire+0x136c/0x1a40 [ 538.012350][T18318] lock_acquire+0x1b9/0x370 [ 538.012367][T18318] ? blkcg_deactivate_policy+0x167/0x600 [ 538.012392][T18318] ? __pfx___might_resched+0x10/0x10 [ 538.012428][T18318] __mutex_lock+0x1a4/0x1bd0 [ 538.012454][T18318] ? blkcg_deactivate_policy+0x167/0x600 [ 538.012480][T18318] ? blkcg_deactivate_policy+0x167/0x600 [ 538.012501][T18318] ? mark_held_locks+0x40/0x70 [ 538.012519][T18318] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 538.012536][T18318] ? __pfx___mutex_lock+0x10/0x10 [ 538.012555][T18318] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.012573][T18318] ? percpu_ref_is_zero+0xe7/0x150 [ 538.012591][T18318] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 538.012610][T18318] ? __blk_freeze_queue_start+0xd2/0x460 [ 538.012634][T18318] ? blkcg_deactivate_policy+0x167/0x600 [ 538.012655][T18318] blkcg_deactivate_policy+0x167/0x600 [ 538.012680][T18318] bfq_exit_queue+0x29d/0x430 [ 538.012697][T18318] ? __pfx_bfq_exit_queue+0x10/0x10 [ 538.012716][T18318] blk_mq_exit_sched+0x20e/0x4e0 [ 538.012741][T18318] elevator_exit+0x93/0xf0 [ 538.012760][T18318] elevator_switch+0x3a7/0x7e0 [ 538.012780][T18318] elevator_change+0x352/0x530 [ 538.012801][T18318] elevator_set_none+0x92/0xf0 [ 538.012821][T18318] ? __pfx_elevator_set_none+0x10/0x10 [ 538.012843][T18318] ? kobject_put+0xb9/0x640 [ 538.012867][T18318] blk_unregister_queue+0x178/0x310 [ 538.012888][T18318] __del_gendisk+0x2e3/0xb20 [ 538.012905][T18318] ? del_gendisk+0xb9/0x1b0 [ 538.012921][T18318] ? __pfx___del_gendisk+0x10/0x10 [ 538.012939][T18318] ? up_write+0x2e5/0x5c0 [ 538.012972][T18318] del_gendisk+0x10e/0x1b0 [ 538.012988][T18318] loop_control_ioctl+0x4f8/0x620 [ 538.013007][T18318] ? __pfx_loop_control_ioctl+0x10/0x10 [ 538.013023][T18318] ? selinux_file_ioctl+0x13b/0x290 [ 538.013051][T18318] ? selinux_file_ioctl+0xb6/0x290 [ 538.013067][T18318] ? __pfx_loop_control_ioctl+0x10/0x10 [ 538.013086][T18318] __x64_sys_ioctl+0x18e/0x210 [ 538.013111][T18318] do_syscall_64+0x115/0x870 [ 538.013132][T18318] ? clear_bhb_loop+0x70/0xc0 [ 538.013151][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.013169][T18318] RIP: 0033:0x7f2cded9e0d9 [ 538.013186][T18318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.013205][T18318] RSP: 002b:00007f2cdfb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.013223][T18318] RAX: ffffffffffffffda RBX: 00007f2cdf025fa0 RCX: 00007f2cded9e0d9 [ 538.013233][T18318] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 538.013242][T18318] RBP: 00007f2cdee35024 R08: 0000000000000000 R09: 0000000000000000 [ 538.013251][T18318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.013261][T18318] R13: 00007f2cdf026038 R14: 00007f2cdf025fa0 R15: 00007fffe550b958 [ 538.013275][T18318] [ 538.540626][ T5827] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.545221][ T5827] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.658238][T17982] bridge0: port 3(syz_tun) entered disabled state [ 538.662956][T17982] syz_tun (unregistering): left allmulticast mode [ 538.665587][T17982] syz_tun (unregistering): left promiscuous mode [ 538.668231][T17982] bridge0: port 3(syz_tun) entered disabled state [ 538.680509][ T5827] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.684881][ T5827] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.809571][ T5827] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.813233][ T5827] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.866266][ T5827] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.869528][ T5827] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.943785][ T5827] bridge_slave_1: left allmulticast mode [ 538.946213][ T5827] bridge_slave_1: left promiscuous mode [ 538.948771][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.953312][ T5827] bridge_slave_0: left allmulticast mode [ 538.955727][ T5827] bridge_slave_0: left promiscuous mode [ 538.958247][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.003225][ T5827] bond1 (unregistering): (slave gretap1): Releasing active interface [ 539.029363][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.035150][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.039006][ T5827] bond0 (unregistering): Released all slaves [ 539.043034][ T5827] bond1 (unregistering): Released all slaves [ 539.149866][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 539.260886][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 539.271443][ T5827] hsr_slave_0: left promiscuous mode [ 539.276058][ T5827] hsr_slave_1: left promiscuous mode [ 539.278077][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.280395][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.283870][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.286206][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.290574][ T5827] veth1_macvtap: left promiscuous mode [ 539.292434][ T5827] veth0_macvtap: left promiscuous mode [ 539.294227][ T5827] veth1_vlan: left promiscuous mode [ 539.295881][ T5827] veth0_vlan: left promiscuous mode [ 539.508337][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 539.508357][ T42] audit: type=1400 audit(1786060956.581:7331): avc: denied { write } for pid=18336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.541843][ T42] audit: type=1400 audit(1786060956.621:7332): avc: denied { write } for pid=18339 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.570741][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 539.644967][ T42] audit: type=1400 audit(1786060956.731:7333): avc: denied { write } for pid=18343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.678624][ T42] audit: type=1400 audit(1786060956.761:7334): avc: denied { write } for pid=18346 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.710278][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17 [ 539.732756][ T5827] IPVS: stop unused estimator thread 0... [ 539.787904][ T5827] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.859114][ T5827] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.948046][ T5827] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.016484][ T5827] netdevsim netdevsim8 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.077713][ T5827] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.145861][ T42] audit: type=1400 audit(1786060957.231:7335): avc: denied { write } for pid=18352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.156817][ T5827] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.194069][ T42] audit: type=1400 audit(1786060957.281:7336): avc: denied { write } for pid=18355 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.227346][ T5447] 8021q: adding VLAN 0 to HW filter on device eth18 [ 540.238841][ T5827] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.298206][ T42] audit: type=1400 audit(1786060957.381:7337): avc: denied { write } for pid=18358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.311218][ T5827] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.345772][ T42] audit: type=1400 audit(1786060957.431:7338): avc: denied { write } for pid=18361 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.397924][ T5447] 8021q: adding VLAN 0 to HW filter on device eth19 [ 540.402660][ T5827] bridge_slave_1: left allmulticast mode [ 540.405111][ T5827] bridge_slave_1: left promiscuous mode [ 540.407480][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.411633][ T5827] bridge_slave_0: left allmulticast mode [ 540.413816][ T5827] bridge_slave_0: left promiscuous mode [ 540.416324][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.423802][ T5827] bridge_slave_1: left allmulticast mode [ 540.426218][ T5827] bridge_slave_1: left promiscuous mode [ 540.428668][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.434043][ T5827] bridge_slave_0: left allmulticast mode [ 540.436528][ T5827] bridge_slave_0: left promiscuous mode [ 540.438998][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.512459][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.517880][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.543539][ T5827] bond0 (unregistering): Released all slaves [ 540.566939][ T5827] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 540.570163][ T5827] net_ratelimit: 1089 callbacks suppressed [ 540.570178][ T5827] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 540.576335][ T5827] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 540.579255][ T5827] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - 1e:f5:a9:1a:29:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 540.597164][ T5827] bond0 (unregistering): (slave 30): Releasing backup interface [ 540.600813][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.606878][ T5827] bond0 (unregistering): Released all slaves [ 540.610724][ T5827] bond1 (unregistering): (slave dummy0): Removing an active aggregator [ 540.613969][ T5827] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 540.617394][ T5827] bond1 (unregistering): Released all slaves [ 540.674218][ T42] audit: type=1400 audit(1786060957.761:7339): avc: denied { write } for pid=18364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.721908][ T42] audit: type=1400 audit(1786060957.801:7340): avc: denied { write } for pid=18367 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.757543][ T5447] 8021q: adding VLAN 0 to HW filter on device eth20 [ 540.885247][ T5447] 8021q: adding VLAN 0 to HW filter on device eth21 [ 541.052901][ T5827] hsr_slave_0: left promiscuous mode [ 541.056483][ T5827] hsr_slave_1: left promiscuous mode [ 541.059158][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.062286][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.065863][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.068912][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.075494][ T5827] hsr_slave_0: left promiscuous mode [ 541.078168][ T5827] hsr_slave_1: left promiscuous mode [ 541.080801][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.084535][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.088041][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.091135][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.098520][ T5827] veth1_macvtap: left promiscuous mode [ 541.100810][ T5827] veth0_macvtap: left promiscuous mode [ 541.103363][ T5827] veth1_vlan: left promiscuous mode [ 541.105642][ T5827] veth0_vlan: left promiscuous mode [ 541.108684][ T5827] veth1_macvtap: left promiscuous mode [ 541.110999][ T5827] veth0_macvtap: left promiscuous mode [ 541.113400][ T5827] veth1_vlan: left promiscuous mode [ 541.115572][ T5827] veth0_vlan: left promiscuous mode [ 541.247654][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 541.255221][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 541.349659][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 541.365185][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 541.416125][ T5447] 8021q: adding VLAN 0 to HW filter on device eth22 [ 541.580988][ T5447] 8021q: adding VLAN 0 to HW filter on device eth23 [ 541.704599][ T5447] 8021q: adding VLAN 0 to HW filter on device eth24 [ 541.842160][ T5447] 8021q: adding VLAN 0 to HW filter on device eth25 [ 547.428455][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.496339][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.538879][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.645527][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0