last executing test programs: 1m11.201684791s ago: executing program 3 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x4001}) 1m10.844402769s ago: executing program 3 (id=71): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) setns(0xc9, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000200)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 1m10.843021057s ago: executing program 3 (id=73): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) r1 = syz_open_dev$video(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000280)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f0000000380)}, 0x400000}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000003c0)=0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000000c0)={0xcb, 0x9, 0x6, 0x538c, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ed010029bd70000400000003010000040047800d632cabc71df766a8067aab"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) (async) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000280)}, 0x400000}) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x1, 0x1, 0x2}) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f0000000380)}, 0x400000}) (async) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000003c0)=0x2) (async) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) (async) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000000c0)={0xcb, 0x9, 0x6, 0x538c, 0x7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ed010029bd70000400000003010000040047800d632cabc71df766a8067aab"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 1m10.632771102s ago: executing program 3 (id=77): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), &(0x7f0000000700)=@v3={0x3000000, [{0x3, 0x3}, {0x3, 0x1ff}], 0xee01}, 0x18, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1c8) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x387) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) (async) ioctl$sock_ifreq(r1, 0x891a, &(0x7f0000000a00)={'vcan0\x00', @ifru_addrs=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}}) (async) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) truncate(&(0x7f0000000880)='./file0/file1\x00', 0xe2) (async) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000400)={[&(0x7f0000000200)=':\x00']}, 0x0, 0x1000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) r2 = socket(0x10, 0x803, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffd71) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80042, 0x4d) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1) fallocate(r3, 0x0, 0x37e9, 0x2f92) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000a40)={0x2, 'team_slave_1\x00', 0x1}, 0x18) (async) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x5, &(0x7f00000002c0)={0x3, 0x4, 0xfffffff7}) (async) ptrace$cont(0x18, r4, 0x80, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x5721, 0x16, 0x0, 0x0) 1m10.553801821s ago: executing program 3 (id=78): r0 = socket(0x10, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xe0002012}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='mounts\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8800004, 0x3000003, 0x401d031, r5, 0x0) (async) syz_clone3(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002480)=""/126, 0x7e}, {&(0x7f0000002500)=""/60, 0x3c}], 0x2, &(0x7f0000002580)=""/205, 0xcd}, 0x7}, {{&(0x7f0000002780)=@llc, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002800)=""/194, 0xc2}, {&(0x7f0000002900)=""/98, 0x62}, {&(0x7f0000002980)=""/53, 0x35}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/132, 0x84}, {&(0x7f0000002c40)=""/156, 0x9c}, {&(0x7f0000002d00)=""/162, 0xa2}], 0x1000000000000013, &(0x7f0000002e40)=""/161, 0xa1}, 0x58}], 0x2, 0x2, 0x0) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) ioctl$KIOCSOUND(r5, 0x4b2f, 0x400000000000007f) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000040)=0xfe5f, 0x12) (async, rerun: 32) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) (async, rerun: 32) getsockname$unix(r0, &(0x7f00000002c0), 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./proc/mtrr\x00', &(0x7f00000026c0), 0x0, &(0x7f0000002700)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/mtrr\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000380)={@id={0x2, 0x0, @b}}) 1m10.483791352s ago: executing program 3 (id=79): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0xe, {0x400, 0xd, 0x80, 0x1}}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='./tracefs\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs/instances/foo\x00', 0x200) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000001, 0x9, 0x100000001, 0x3, 0x3, 0x5, 0x7, 0xfffffffffffffffc, 0x100fff}) open(&(0x7f00000001c0)='./file1\x00', 0x66802, 0x102e2bfa2a6732ad) 1m10.45799158s ago: executing program 32 (id=79): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0xe, {0x400, 0xd, 0x80, 0x1}}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='./tracefs\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs/instances/foo\x00', 0x200) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000001, 0x9, 0x100000001, 0x3, 0x3, 0x5, 0x7, 0xfffffffffffffffc, 0x100fff}) open(&(0x7f00000001c0)='./file1\x00', 0x66802, 0x102e2bfa2a6732ad) 58.672459359s ago: executing program 4 (id=221): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x5}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r2, 0x0, 0x0, 0x0, 0x40000000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000380)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000480)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0d10c8c5ff585f3efcb561d8eea1003150a20af9f1bd79c028d7a4520560fe046e710116c838047cf4ed27701fee0c0e93fcabd3c5185a1982b3222fa0e995c6fb0cd20063846921ae"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 58.323224119s ago: executing program 4 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) (async) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) (async) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bind$phonet(r2, &(0x7f00000000c0)={0x23, 0x1, 0x8}, 0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl(r2, 0x89ed, &(0x7f0000000180)='\x00\x00\x00\x00') read(r2, &(0x7f0000000500)=""/64, 0x40) 58.322536743s ago: executing program 4 (id=223): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1}]}}]}, 0x38}}, 0x4048000) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = fsmount(r3, 0x0, 0x2) (rerun: 32) fchdir(r4) (async) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000140)) 58.232877426s ago: executing program 4 (id=224): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f00000003c0)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000540)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fb, &(0x7f00000000c0)={'bond0\x00', @random="00009e0c1100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x20) r2 = socket(0x1, 0x2, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x0) ioctl$CDROMEJECT(r3, 0x5309) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x10) ioctl$CDROMPLAYTRKIND(r3, 0x5304, &(0x7f0000000280)={0x8, 0x9, 0x9, 0x6}) getsockopt$sock_timeval(r2, 0x1, 0x49, 0x0, &(0x7f0000000100)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000400)={0x0, 0x1400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r5, &(0x7f0000000140)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000500)={[], [{@subj_role={'subj_role', 0x3d, '\\)\'b%*@.'}}]}) 57.974030845s ago: executing program 4 (id=225): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="707265765f73746174652e66756e6374696f6e203d3d3666f5ad", 0x1a) close(r0) (async) close(r0) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0xa842, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0xa842, 0x2) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) 57.693391163s ago: executing program 4 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0xe, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20241, 0x1002}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r8, 0x80000000) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2210088, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0100002f0009002abd70000000000005000000080111"], 0x11c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000001812000000000000000000", @ANYRES32, @ANYBLOB="0000000300000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 57.57379819s ago: executing program 33 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0xe, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20241, 0x1002}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r8, 0x80000000) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2210088, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0100002f0009002abd70000000000005000000080111"], 0x11c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000001812000000000000000000", @ANYRES32, @ANYBLOB="0000000300000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 45.840906567s ago: executing program 5 (id=366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1c0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000100)="489370e781b18a7975") ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000540)) 42.79169768s ago: executing program 5 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x200000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000540)=0x13) 42.785678424s ago: executing program 5 (id=390): rt_sigqueueinfo(0x0, 0x30, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074657374") write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c0100003801000001000000000900"/47) 42.673541486s ago: executing program 5 (id=391): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2003000, 0x0) ptrace(0x11, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r0, 0xc138fd03, &(0x7f0000000400)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001b40)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="0504"], 0x9c}, 0x1, 0x400000000000000, 0x0, 0x24000d25}, 0x4040084) write(0xffffffffffffffff, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00}irror', 0xffffffffffffffa0) ioctl(r0, 0xc138fd09, &(0x7f0000000480)="040000000000000000000000a00100003801000001") r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee00}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x9, &(0x7f00000002c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x81, 0x1, 0x2}, @generic={0x95}], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) landlock_restrict_self(r4, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) ptrace(0x11, 0x0) ptrace(0x10, r6) 42.673280084s ago: executing program 5 (id=392): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @sdr={0x59565955}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0423f798730000000000000000000056f779a5db3a8b4ce8f711b0c53a2000"], 0x10) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000382000/0x3000)=nil, 0x3000}}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)=0x9) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = userfaultfd(0x801) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000700)="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", 0xff0}, {&(0x7f0000001700)="40f68b310a15dc6d31a73735425255a352", 0x11}], 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001740)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mremap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000619000/0x3000)=nil) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="20010000000000000000000000000001000004d66c000000fc0200000000000000000000000000010700000000000000a002000000000000090000000000000003000000000000000a00000000000000090000000000000009000000000000000080000000000000000000006c1000000600000000000000580900000000000076000000000000007c24000006000000080000002cbd700000000000020003380f0000000000000004000000008000001c00040003004e244e200000fc020000000000000000000000000001"], 0x114}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 42.403333112s ago: executing program 5 (id=393): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) (async) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='proto\x00', &(0x7f0000000080)='proto\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f657874656e642c6163638173733d61667363616368652c76657273696f6e3d3970323030302e7500", @ANYRESHEX]) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/111, 0x6f}], 0x1, &(0x7f0000000580)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000380)='./file0\x00', 0x108843, 0x98) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="cf040100ec36165584657a607e0008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000040) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="cf040100ec36165584657a607e0008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000040) 42.318101429s ago: executing program 34 (id=393): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) (async) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='proto\x00', &(0x7f0000000080)='proto\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f657874656e642c6163638173733d61667363616368652c76657273696f6e3d3970323030302e7500", @ANYRESHEX]) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/111, 0x6f}], 0x1, &(0x7f0000000580)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000380)='./file0\x00', 0x108843, 0x98) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="cf040100ec36165584657a607e0008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000040) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="cf040100ec36165584657a607e0008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000040) 4.281415493s ago: executing program 0 (id=645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x2040081) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc070}, 0x4) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040801}, 0x400c080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000600)=@gcm_256={{0x303}, "075bb943038fa096", "982eb2a73e1c216014ce8a50e6c464938ff09e37a6bfdfb23c053a3a5eafd43a", "5900b05a", "b8b774294b1f359c"}, 0x38) r7 = open(&(0x7f0000000640)='./file0\x00', 0x40, 0x85) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000007c0), r5) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r5) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000a80), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x3, {0x6}}}}, {{@arp={@loopback, @remote, 0xffffffff, 0xffffffff, 0x5, 0x10, {@empty, {[0x0, 0x0, 0xff, 0x80, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0xffff, 0x6, 0x92a, 0x22, 'tunl0\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@multicast1, @broadcast, 0xff000000, 0xff000000, 0x3, 0x7, {@empty, {[0x0, 0xff, 0x0, 0x1fe, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x0, 0x6, 0x6, 0x9, 0x735, 'batadv_slave_1\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000f00)) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000f80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r10, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000044) bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r7}, 0x8) r13 = syz_usb_connect$cdc_ecm(0x3, 0xb1, &(0x7f0000001100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x80, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "1b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0x401, 0x4}, [@mdlm_detail={0x43, 0x24, 0x13, 0xff, "1aaa5342d2dc70b34bada53dca47b783998d33d11f339b2cc2c1b9351facc49782930725b7260354574ddc42093a3053bfd6a74835f8dcb8c54bb24d0e49c3"}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x20, 0x3, 0x3}, @obex={0x5, 0x24, 0x15, 0xc}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xf4, 0x8b, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x28, 0x81, 0x26, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xf, 0x0, 0xfa}}}}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x8, 0x2, 0x7, 0x10, 0x1}, 0x135, &(0x7f0000001200)={0x5, 0xf, 0x135, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0xff0f, 0x3, [0xff3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x9, 0x0, 0x20}, @generic={0xba, 0x10, 0xb, "9e65bdb0441594c32345e6320b0d8bfd93c1706715c4b0113ceb4b92059c857df04eb25eda94a59e4e86caac7472728a8d8a91103a7cccbca19ff585af24a558eb13eb42cd85b8c40e9bd8e571d205e59511869ee4133012b38b2c2b7601dface3ca40d5c063cd6561574d86f1fd2f6c54b2adac381edd8e2eea779f5cce124c95a20b5af2dfa0af6472d836fcf10d641f27281bae3fe1e77fb4f947ec234d559eb3004392379f0e03c7ac19d7189eb3f5b634e264b5a0"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4fecfc7e30308c5d12b5dd7b38b77447"}, @generic={0x45, 0x10, 0xb, "f2e38dbb0d08802a5908b14a937c2678881442c4346fb50a65bb5d4013c770e7ef522dc5de8f7c8ec264df609de3c1bccf84699a2348f5310ee1379a20f861416861"}]}, 0x3, [{0x90, &(0x7f0000001340)=@string={0x90, 0x3, "183064e1a402428772ca720af8569d1f18851506d8622fecf37a918f04dcc7314931d5c08aecf341176eeeae3e494cb1de2e3251e0848450a37ccb3deb7a049f830e28aca08cd6a13d52148acf71a2c311a95940f15a243e0938de86ef37d2faed86560c06a92fccb7f1c5e1500dd1bd8a0ceddf4504f9308d7389ef7be04d9fa371c1f5aeedc0aff0186ff05a20"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x2409}}, {0xbd, &(0x7f0000001440)=@string={0xbd, 0x3, "9919190992d0b71fc75cb8f5defc75ac82146e64b0a3ebfa75d8381b3de6f38c131d286701f448507da2a6f50065dd0d74886bc3b3b8c8a89d3c111ed5afb8597ecbbaa10c50e3b0fb5d2b805c7015e418ecf2ae6ba3b4cfa787d638cf85d35598cfe9360689bdcff142d6d5cd08a3965d9edaedd280e6e68977c101eeb7aedeb08de87a8db766ea638b4c31d131f088ecdeac3685a8e14f74ae2ac19e5a4d727baed00878ed19cf085043ece296f6184774e862fd48f906023345"}}]}) syz_usb_control_io$cdc_ecm(r13, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x40, 0x6, 0xdb, {0xdb, 0x1, "1b86ffc28d8f028bfb61aa5c87781867478375ec6d56e64b9075b22aa99ef730adcabdbd3e284c6f614de63334b5f85fdac21dd2627b459a665b00dc6dcde5b5a95fe49ffa71678f83cde68b1c0f65a1161b523ab1fee6030d71fd460a7a44752fc6933b7790019efde656b49cc9ce10aea4bef5f33d650aa0db15fe3bef116268e75767819266bae3688264f1135f62c125b68f1bef94b649c686ebf773d3b700b560b2ab84c6b13e4131173c4208c7ac5a531c4f8167a9df886611e280724b8234d55739a12b3fc2271bf5c846aa71e4f9616fdb30dafb64"}}, &(0x7f0000001640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001780)={0x1c, &(0x7f00000016c0)={0x40, 0xa, 0x23, "a29c360e0017317a86038e575aafd5f890e7d7a01e329826239205ebafb2503296fd2c"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x4}}) connect$llc(r7, &(0x7f00000017c0)={0x1a, 0x325, 0xa6, 0x8, 0x9, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x404c010) 2.852379644s ago: executing program 0 (id=648): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f00000007c0)={0xa, 0x0, [{0xc0000001, 0x9, 0x0, 0x79, 0x3, 0x5, 0x40}, {0x80000008, 0x58d, 0x5, 0x8, 0x10001, 0x9, 0xf}, {0x80000008, 0x7, 0x2, 0x714e, 0x80, 0x5afb, 0x8d7}, {0xc0000001, 0x5, 0x6, 0x7, 0x3ff, 0x400, 0x1f}, {0xc0000001, 0x200, 0x0, 0x4, 0x4, 0x4}, {0x80000001, 0x4, 0x6, 0xa5e, 0x1, 0x1, 0x6}, {0x80000000, 0x2, 0x6, 0xad7b, 0x7, 0x480000, 0x1}, {0x7, 0x4, 0x6, 0x8000, 0x5, 0xe5e6, 0x2}, {0xc0000000, 0x9, 0x2, 0x6, 0x4, 0x10, 0x43b}, {0x2, 0x6, 0x0, 0xe, 0xf09, 0x2, 0xf48}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000540)={0xb, [[0x9, 0x2, 0x9, 0x2d, 0x1, 0x9, 0x4, 0x6], [0x5, 0x8578, 0x3, 0xd2e6, 0x9, 0x8, 0x458c, 0x5], [0xfffffe00, 0x8, 0x7f, 0xfffffffc, 0x3, 0x0, 0x101, 0x2]], '\x00', [{0x80000001, 0xe9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x1}, {0x7ff, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1}, {0x1, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xfffffff7, 0x7, 0x0, 0x1, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x8, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x80, 0x1, 0x0, 0x1, 0x1}, {0xb, 0x3, 0x1, 0x1, 0x1}, {0x2, 0x2000, 0x0, 0x1}], '\x00', 0x23a3}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf250f00000004000380240007800c0003"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x36, &(0x7f0000000c40)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x68, 0x0, 0xf8, 0x1, 0x0, @multicast2, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x8, 0x7, 0x1, 0x0, 0x70}}}}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000980)=0x8) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000080)=0x17) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 2.492866229s ago: executing program 2 (id=649): timerfd_create(0x9, 0x80800) 2.492433023s ago: executing program 2 (id=650): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x5, 0x3, 0x6, 0xb8a6}) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000440)={0x1, 0x0, 0x98, &(0x7f0000000380)={0x287a6656, 0x11, 0x7}}) r4 = accept4(r0, 0x0, 0x0, 0x0) close(r4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f0000000300)='syz0\x00', 0x1ff) write$cgroup_devices(r6, &(0x7f0000000280)={'c', ' *:* ', 'w\x00'}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.353296494s ago: executing program 2 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809, "b2fd"}}}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f00000002c0)='7', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x2}}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809, "b2fd"}}}}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async) write(r3, &(0x7f00000002c0)='7', 0x1) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) (async) 2.202980884s ago: executing program 2 (id=653): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000440)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000013000100000000000000", @ANYRES32], 0x54}}, 0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="400109"], 0x87) r5 = dup(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2b, 0x1, 0x70bd26, 0x4, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r7, &(0x7f0000000240)=0x774, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x6ded, &(0x7f0000000680)={0x0, 0x4279, 0x1, 0x801, 0x135}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000700), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40080) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000002c0)={0x6, r5, 0x80002}) futimesat(r9, &(0x7f0000000300)='./sys/class/tty/ttyS0/console\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0xea60}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1300000065e8ff03a8454730b042cd28d95900"], 0x13) 2.050974101s ago: executing program 0 (id=657): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='new defaul'], 0x2a, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000740)=' ') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x100, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000a00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text32={0x20, &(0x7f0000000a80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r10, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r11}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c80)={r11, r12}, 0xc) 2.047812986s ago: executing program 1 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05040000000000000000020000000900010073797a300000000044000000120a05040000000000000000020000000900010073797a30000000000b00020071756f74613000000800030000000002100004800c000100"], 0x9c}}, 0x8080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1ac, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe39}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff00000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x44000) 1.288460604s ago: executing program 1 (id=659): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x3, 0x2000c844) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 1.288165884s ago: executing program 2 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0xb0000) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x8000, 0x1, '\x00', &(0x7f0000000000)=0xf9}) r2 = syz_usbip_server_init(0x1) write$usbip_server(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000001"], 0x35) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x0, {0xd84, 0x6, 0x7}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x1ff, 0x0, '\x00', {0x0, @bt={0x8, 0x7ba78d2f, 0x1, 0x0, 0x328, 0xd, 0x0, 0x100, 0x400, 0x800, 0x1, 0x1, 0x10001, 0xfd, 0x1, 0x1, {0xe25, 0x401}, 0x8f, 0x5}}}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) (async) syz_open_dev$video(&(0x7f0000000040), 0x8, 0xb0000) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x8000, 0x1, '\x00', &(0x7f0000000000)=0xf9}) (async) syz_usbip_server_init(0x1) (async) write$usbip_server(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000001"], 0x35) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x0, {0xd84, 0x6, 0x7}}) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x1ff, 0x0, '\x00', {0x0, @bt={0x8, 0x7ba78d2f, 0x1, 0x0, 0x328, 0xd, 0x0, 0x100, 0x400, 0x800, 0x1, 0x1, 0x10001, 0xfd, 0x1, 0x1, {0xe25, 0x401}, 0x8f, 0x5}}}) (async) 1.221565497s ago: executing program 1 (id=661): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.172952744s ago: executing program 1 (id=663): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0xe2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000800)={0xc0, 0x0, 0x10000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x0, 0x0, 0x80010, r5, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000880)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r8, 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="230000000410000008000000c00b000001000000", @ANYRES32, @ANYBLOB="000000000000000000008ee0578c50e8e523b005", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r10, &(0x7f0000000680), 0x0, 0x4}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa81aaaaaaaabb86dd60000000001406fffe8000000000000000000000000000bbfe80000000004000000000005d55fd814e224ecadb052b234f5e84cad6617b99481d7467b2bde9a543bb44ca4d1611e9eb6ec0da1bf503ef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5018100090780000"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @multicast2}, 0x4, 0x1, 0x4, 0x4}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r6, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x40005) 1.069237031s ago: executing program 0 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x40101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) setsockopt(r4, 0x8, 0xec, &(0x7f0000000640)='L;', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) open(&(0x7f00000006c0)='./file0\x00', 0x40040, 0x1e9) acct(&(0x7f0000000700)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=[0x5], &(0x7f00000004c0)=[0x2], 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRES8=r6, @ANYRESHEX=r6, @ANYRESDEC=r6, @ANYBLOB="42c93df91ac9dd98f6fc0e4ea65d99f5038b9a685eaf6c507534957a92ffcd798a613bdd3a233f8899c5a6628b49151d9013f37f51a45c180d0528ff7c2324b4ec9998b236c63a2ca72f8c2ad3c3306ac026f46a562041aea0"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) 1.044517792s ago: executing program 1 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f00000001c0)={0x40, 0x30, 0x92, {0x92, 0x21, "b45e84b29ebb46106286645bb1f867db7449ab55ff8c4aa947545f68c2c8d85adc18d0e458bab40c790a5350a275e079c807307c005cce9ff3091bdba28869dffbd8c00287f1e3ba26e33c97f011fd4ec7bd14da0099602d99a106a9e1ab0690666a386efc36d0b802f5c7d5aa22cb44e73351035dfb647a6e9ab4f74e936e970d4257c6dab4488a454cc21825eafdbb"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000000)=ANY=[@ANYBLOB="002217000095c3df1feb645bec182a8ba36644aa318b08003fcfb73b819b573cebeb8d980357b4ccb671e41a6301c97dc4a8edb8bc"], &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x20a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x5, 0x2, "b2e8"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000440)=ANY=[@ANYBLOB="2001b400000055da8278739dcf844992be64535dec1e2dda1be474ce78f991a1ff8bc71d2cb9a68d7b42e6de4e18ea99f207b776961a4ee1fa977adfa80ad3eb972ff8d21d0cbc7b805e77ce3d826ca02732562a3bacc9477f9d3abc8df81c3c0d4b1a55ca4a24a4b96899c192d0b83c0c49bd450a7066f263b740decfb2646fe637fe6c0e9698b855b88dd413f9f9b1bda56e89a1e0562f9bff61c2043699ba7289ca9f3af623b8ede08b70e58320e0bc689c4f0e29f3f66928"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) syz_open_dev$video(&(0x7f0000000580), 0xfffffffffffffff7, 0x16b200) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x20, 0x0, 0x100, 0x70bd2c, 0x25ffdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000680)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000006c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000740)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x3, 0x9, 0x6, 0x400, 0x3fe, 0x215, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000800)=0x100000001, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) syz_emit_ethernet(0x2bc, &(0x7f0000005000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "379aed", 0x0, 0x2f, 0xff, @mcast2, @remote, {[@routing={0x2c, 0x0, 0x2, 0xf8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @empty, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @empty, @empty]}, @dstopts={0x2f}, @dstopts={0x2e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x140}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x0, [0x0, 0x0]}, @enc_lim, @generic={0xde, 0x0, "aabe015d1c0d2410df0da80b1179e883328808d1d1badb3a2c9125f4caf070833ba732df741a48e6e8b391b622546a4045eee3b0fa33c714070d907cde3fe2e77a7b808200fb133838616ea7af1d43c48ae67be1a453275995276c08c3baa25f6e71306f285f2e968b5b5f9b68828d79853417eefd0909210d2ccc806bb98e9bd9ca83d3"}]}, @hopopts={0x11, 0x0, '\x00', [@ra={0x5, 0x2, 0xdf5c}]}, @srh={0x3c, 0x0, 0x4, 0x0, 0x80, 0x20, 0x2, [@local, @loopback, @remote]}, @dstopts={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x8}, @pad1, @generic={0xc, 0x0, "fc11556403f1c44a8ffc174acc347ade74b89c34df3382c39442067d3cc14de300941916d7f4836596462029935589b76748b0369d6bb48c5f0edfc7cf3c54f04648a84aa625006482090d2e0e21a60f3204fde132683417e25f3eae05c2718b5dbec66647068fcea9b08c9e02451cea53583fa923c68004862c8aa6beb9d8a87205fd82bbfd7ca9324261264fa2735cc915241226cd3cf3d60132a093f0ff56c1d0602e446cebb23d2ea0d75456e6840cd6ab6fa0ba"}, @hao={0xc9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x200}, @jumbo={0xc2, 0x4, 0x101}, @generic={0x0, 0x0, "c4bc1b4a408af0c14d4b947cde37bbfe604e8316d69b372a4ca8a037754d4576f32bc5e0d1544c985454b0d24547e6a95b4a38a6693e49db72"}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0xffff], "e5c247ba3d18ab458ab4d7aedad15fc163cf4dd42bcff0a4443231afa14ed7ca61e9db3092f7c7d655df8c6f7461ceae4d76c6bd1c07d8a054669c23112e6933a24908291eca384d27e471af0fd0ac65843e10cacc1560014a3c108c762ec581de6d5b798eddde6a0dd578ff6226bc8aa840bd5b98b757524133f7ad84d5b299579b2e9f0daeb13b5e32b8e5ca4632549cd5764c60cc8515888be60c09d97616f15d846aa9200659dba1d464c219ee1073dad3974cdbc00db4d6971f6c570780a531bc6b951574"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xb85c, 0x4], "e8434aa25d76bdff11c75262eae61170ec12a1ac7e"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xd9ac], "6c3ee65845a5aa22a626664ddf3bcd2915b2df071726dbe26e621c7cc86de8a20a1464edf3a37f6b8fb10cc8ab436b86b632b23e3a114d181e226d88e17a97c9cb9d13d6cbccbd60d0b58ae93255b0a3eac2"}, {0x8, 0x88be, 0x0, {{0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x10000}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x1, 0x0, 0x2, 0x0, 0x81}, 0x2, {0x2, 0x8, 0x0, 0x5, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "93827959f583a4ef4505c3d5828e75f1bba6e3ecd47b5b483825bccdbf7628f36064545a7857159370fd5baf17b6988751245a434630d58314818f70f152c3dd9bb492552ef9eff6843454b07b309240a763"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x1c1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x80, &(0x7f0000000d80)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000000e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002e40)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002ec0)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r7, &(0x7f0000002f00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000007e80)="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", 0x2000, &(0x7f0000009e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10ff06000000000000000000000000007dfcb18e1aedd35852284ed718771309d9724298eba920ee6bc374ccf053ab00066f91b9253701be2b00217a416225edff0afe41996726f383f8ae35ac0e118e83d3cb95df6669f4d5f6c3cae89bc93b72561b5c68589d35ea3fe2809220d63257dfaab2cb18f627bea0d3830128b0416613166a11ed216506cf61435577f55cde790000000000000000"], 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000b40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 722.344669ms ago: executing program 2 (id=669): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testnqn\x00', 0x1, 0x5) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0xa031, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x2522a415b4f777d, 0x28) write(r1, &(0x7f0000000240)='1\x00', 0x1) read(r1, &(0x7f0000000280)=""/100, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/rom\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\x00', 0x1) read(r2, &(0x7f0000000380)=""/100, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000540)={'wlan1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f0000000940)={0x10000000}) write(r4, &(0x7f0000000440)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/rescan\x00', 0x1, 0x0) fsopen(&(0x7f0000000580)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000005c0)='i_\x00\x00\x00\x02\x00\x00\x10', &(0x7f0000000980)='%\x8bR\xafH\xd6e\x11\t\xec\xbb\xe3\xbd\xea\xb7q\x837\xff\xac\x1c\xba\xf0]\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\t\x00xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\xd5,\b\'<\x7f\xf9\xba\x90\x9e\xcd\xb0\xc0k\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\x81*\\\x16:O\b\xe0\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\x9aF\xe7\xa6\xef {fxbz_\x80,q\t\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf', 0x0) write(r7, &(0x7f00000004c0)='1\x00', 0x1) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') 672.60569ms ago: executing program 6 (id=670): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1f7) fanotify_init(0x0, 0x80000) pipe2(&(0x7f0000000080), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/softlockup_count', 0x88002, 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000480)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000500), 0xd) 579.839406ms ago: executing program 0 (id=671): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03292f04"], 0xf) 470.716478ms ago: executing program 6 (id=672): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x7, 0x4, 0x3, 0x8000567}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x80000001, r0, 'id1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x80000001, r0, 'id1\x00'}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0x3, 0x7, @vifc_lcl_addr=@local, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/uprobe_events\x00', 0x81, 0x41) write(r6, &(0x7f00000005c0)='-:t_st/event1 ./file0:', 0x16) (async) write(r6, &(0x7f00000005c0)='-:t_st/event1 ./file0:', 0x16) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2041) 401.786726ms ago: executing program 6 (id=673): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) syz_emit_ethernet(0xce, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x16, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x13, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @local]}, @end, @rr={0x7, 0x7, 0x87, [@loopback]}, @rr={0x7, 0xb, 0x5d, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xfb, 0x1, 0xc, [{@broadcast, 0x730e82e5}, {@remote, 0x6}]}, @timestamp={0x44, 0x8, 0x29, 0x0, 0x9, [0x4]}]}}, @redirect={0x5, 0x3, 0x0, @rand_addr=0x64010101, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, @private, @rand_addr=0x640100fe, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x4}]}]}}}}}}}, 0x0) 329.058097ms ago: executing program 6 (id=674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000ac0)=[{}, {}], 0x10, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000d40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fddbdf250f00000005002f000100000005002e000100000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000e80)={'tunl0\x00', 0x0, 0x10, 0x700, 0x24c0, 0x80, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x65, 0x0, 0xf, 0x4, 0x0, @local, @broadcast, {[@generic={0x86, 0x6, "8e4c152f"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000f40)=0x0, &(0x7f0000000f80)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001600)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001000)={0x5b0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x37, 0x2, 0x9, 0xffff}, {0x80, 0x6, 0x8, 0x6}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe2d3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r13}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x899f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xae}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r16 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) (async) io_setup(0x1000, &(0x7f00000001c0)=0x0) io_submit(r17, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x88, r16, 0x0, 0x0, 0xb}]) ioctl$RTC_EPOCH_SET(r16, 0x4008700e, 0x4) (async) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r20 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x602001) ioctl$SNDRV_PCM_IOCTL_FORWARD(r20, 0x40084149, &(0x7f0000000140)=0x7fffffff) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r18, r19}, 0xc) 198.32292ms ago: executing program 1 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f22d40f0136880066b80500000066b9006000000f01d9bad104ed0f6f4a00dbe43ea50f20a13ef20f2abe52780f01c9", 0x30}], 0xaaaaaaaaaaaab8b, 0x7, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) listen(r3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cifs\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000000340)='./cifs\x00', &(0x7f0000000380)='cifs\x00', 0x0, &(0x7f00000003c0)='vers=1.0,username=guest,password=,port=20000,soft\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r4, 0xc0184d03, &(0x7f00000000c0)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x1000, 0xeeee8000, 0x4, 0x92, 0x5, 0x3, 0x9, 0x6c, 0xc, 0xd2, 0xc8, 0x5}, {0x4, 0x30000, 0x0, 0xb, 0x80, 0xff, 0xdd, 0x8, 0x8, 0x1, 0x1, 0x8}, {0x7000, 0xffffffff, 0x0, 0x67, 0x3, 0x4, 0x2, 0x1, 0x7, 0x0, 0xd, 0x70}, {0x70000, 0x2, 0xa, 0x3, 0xb, 0x1, 0x6, 0x5, 0x7f, 0x4, 0x0, 0x9}, {0x8080000, 0xeeeb7000, 0x3, 0x8, 0x25, 0x1e, 0x5, 0xc, 0x7, 0x9, 0xd2, 0x7}, {0x200000, 0x58e884a07f655ef7, 0xc, 0x3, 0x10, 0xf3, 0x8, 0x89, 0x3, 0x9, 0x3, 0x5}, {0x40000, 0x4, 0xd, 0x5, 0x7, 0xb, 0x4, 0x4, 0x4, 0xaf, 0x3a, 0x3}, {0xb000, 0x2000, 0xf, 0x8, 0x62, 0x3, 0x1, 0x10, 0x75, 0x80, 0xc9, 0x9}, {0x54000, 0x77}, {0xfec00000, 0x2}, 0x80010000, 0x0, 0x0, 0x40100, 0x4, 0x3000, 0xc000, [0xfff, 0x4, 0x3, 0x3]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 102.96094ms ago: executing program 6 (id=676): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x4}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.206576ms ago: executing program 6 (id=677): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8) 0s ago: executing program 0 (id=678): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79) (async) open(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x120) rmdir(&(0x7f0000000280)='./file0/file0\x00') (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x7e) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x40) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x7e) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) setpgid(r3, r3) (async) setpgid(0x0, r3) (async) stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.930042][ T43] audit: type=1400 audit(1791714624.513:511): avc: denied { write } for pid=6908 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.948368][ T43] audit: type=1400 audit(1791714624.533:512): avc: denied { write } for pid=6907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.981307][ T43] audit: type=1400 audit(1791714624.563:513): avc: denied { create } for pid=6911 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.981839][ T43] audit: type=1400 audit(1791714624.563:514): avc: denied { getopt } for pid=6911 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.987017][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.042987][ C2] net_ratelimit: 232 callbacks suppressed [ 68.066594][ T43] audit: type=1400 audit(1791714624.653:515): avc: denied { write } for pid=6917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.211934][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.477856][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 68.495831][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.495871][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.496830][ T6854] bridge_slave_0: entered allmulticast mode [ 68.497692][ T6854] bridge_slave_0: entered promiscuous mode [ 68.498998][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.500149][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.500224][ T6854] bridge_slave_1: entered allmulticast mode [ 68.501312][ T6854] bridge_slave_1: entered promiscuous mode [ 68.628235][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.629470][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.641725][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.782286][ T6854] team0: Port device team_slave_0 added [ 68.806372][ T6854] team0: Port device team_slave_1 added [ 68.825934][ T6964] FAULT_INJECTION: forcing a failure. [ 68.825934][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 68.825959][ T6964] CPU: 2 UID: 0 PID: 6964 Comm: syz.1.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.825985][ T6964] Tainted: [L]=SOFTLOCKUP [ 68.825993][ T6964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.826006][ T6964] Call Trace: [ 68.826015][ T6964] [ 68.826023][ T6964] dump_stack_lvl+0x100/0x190 [ 68.826057][ T6964] should_fail_ex.cold+0x5/0xa [ 68.826087][ T6964] should_failslab+0xc2/0x120 [ 68.826127][ T6964] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.826151][ T6964] ? sctp_add_bind_addr+0xae/0x3e0 [ 68.826185][ T6964] sctp_add_bind_addr+0xae/0x3e0 [ 68.826216][ T6964] sctp_do_bind+0x36c/0x760 [ 68.826243][ T6964] sctp_inet_listen+0x69b/0x7f0 [ 68.826282][ T6964] ? __pfx_sctp_inet_listen+0x10/0x10 [ 68.826306][ T6964] ? __fget_files+0x21f/0x3d0 [ 68.826339][ T6964] __sys_listen_socket+0x108/0x150 [ 68.826369][ T6964] __sys_listen+0xa7/0x130 [ 68.826397][ T6964] __x64_sys_listen+0x53/0x80 [ 68.826446][ T6964] do_syscall_64+0x123/0x790 [ 68.826479][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.826501][ T6964] RIP: 0033:0x7f9a99b9e1d9 [ 68.826519][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.826538][ T6964] RSP: 002b:00007f9a9ab52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 68.826557][ T6964] RAX: ffffffffffffffda RBX: 00007f9a99e25fa0 RCX: 00007f9a99b9e1d9 [ 68.826570][ T6964] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 68.826581][ T6964] RBP: 00007f9a99c35888 R08: 0000000000000000 R09: 0000000000000000 [ 68.826593][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.826604][ T6964] R13: 00007f9a99e26038 R14: 00007f9a99e25fa0 R15: 00007ffc378e26f8 [ 68.826636][ T6964] [ 68.928614][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.928624][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.928645][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.947180][ T5805] hsr_slave_0: left promiscuous mode [ 68.949341][ T5805] hsr_slave_1: left promiscuous mode [ 68.949854][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.949865][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.952624][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.952632][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.960183][ T5805] veth1_macvtap: left promiscuous mode [ 68.960201][ T5805] veth0_macvtap: left promiscuous mode [ 68.960245][ T5805] veth1_vlan: left promiscuous mode [ 68.960274][ T5805] veth0_vlan: left promiscuous mode [ 69.083830][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.121612][ T5805] team0 (unregistering): Port device team_slave_1 removed [ 69.128355][ T5805] team0 (unregistering): Port device team_slave_0 removed [ 69.154245][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.154283][ T5740] Bluetooth: hci0: command tx timeout [ 69.163052][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.166817][ T1040] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.236202][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.236209][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.236222][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.316779][ T1040] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 69.319857][ T1040] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 69.319880][ T1040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.320845][ T1040] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 69.320856][ T1040] usb 6-1: Manufacturer: syz [ 69.322239][ T1040] usb 6-1: config 0 descriptor?? [ 69.336147][ T6854] hsr_slave_0: entered promiscuous mode [ 69.336705][ T6854] hsr_slave_1: entered promiscuous mode [ 69.337392][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 69.337406][ T6854] Cannot create hsr debugfs directory [ 69.393787][ T1040] rc_core: IR keymap rc-hauppauge not found [ 69.393795][ T1040] Registered IR keymap rc-empty [ 69.397808][ T1040] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 69.399025][ T1040] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 69.567499][ T5805] IPVS: stop unused estimator thread 0... [ 69.569680][ T63] usb 6-1: USB disconnect, device number 3 [ 69.653822][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.658967][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.659451][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.665310][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.665765][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.669707][ T6994] cgroup: Unknown subsys name 'cpuset' [ 69.674673][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.675028][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.688299][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.733077][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.797465][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.804797][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.823581][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.823661][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.830686][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.830756][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.883710][ T5876] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 69.884499][ T5876] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 69.884511][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 69.886226][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.886236][ T5876] usb 5-1: Product: syz [ 69.886243][ T5876] usb 5-1: Manufacturer: syz [ 69.886250][ T5876] usb 5-1: SerialNumber: syz [ 69.897470][ T5876] usb 5-1: config 0 descriptor?? [ 69.903621][ T5876] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 70.101596][ T5876] gspca_sunplus: reg_r err -32 [ 70.101631][ T5876] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 70.132477][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.301901][ T6854] veth0_vlan: entered promiscuous mode [ 70.309696][ T6854] veth1_vlan: entered promiscuous mode [ 70.341111][ T6854] veth0_macvtap: entered promiscuous mode [ 70.343750][ T6854] veth1_macvtap: entered promiscuous mode [ 70.360833][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.367059][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.374095][ T5805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.387372][ T5812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413346][ T5777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413371][ T5777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.494317][ T7028] vlan2: entered promiscuous mode [ 70.494326][ T7028] bridge0: entered promiscuous mode [ 70.515496][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.515509][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.551072][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.551084][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.556011][ T7031] loop0: detected capacity change from 0 to 3904 [ 70.600628][ T7031] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 70.600651][ T7031] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 70.600665][ T7031] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 70.600716][ T7031] loop0: [ 70.636129][ T7035] fuse: Bad value for 'rootmode' [ 70.636332][ T7035] fuse: Bad value for 'rootmode' [ 70.636526][ T7035] fuse: Bad value for 'rootmode' [ 70.636715][ T7035] fuse: Bad value for 'rootmode' [ 70.636952][ T7035] fuse: Bad value for 'rootmode' [ 70.637538][ T7035] fuse: Bad value for 'rootmode' [ 70.637726][ T7035] fuse: Bad value for 'rootmode' [ 70.637915][ T7035] fuse: Bad value for 'rootmode' [ 70.642787][ T7035] fuse: Bad value for 'rootmode' [ 70.643093][ T7035] fuse: Bad value for 'rootmode' [ 70.643315][ T7035] fuse: Bad value for 'rootmode' [ 70.643511][ T7035] fuse: Bad value for 'rootmode' [ 70.643705][ T7035] fuse: Bad value for 'rootmode' [ 70.643891][ T7035] fuse: Bad value for 'rootmode' [ 70.644077][ T7035] fuse: Bad value for 'rootmode' [ 70.644262][ T7035] fuse: Bad value for 'rootmode' [ 70.644454][ T7035] fuse: Bad value for 'rootmode' [ 70.644647][ T7035] fuse: Bad value for 'rootmode' [ 70.644835][ T7035] fuse: Bad value for 'rootmode' [ 70.648737][ T7035] fuse: Bad value for 'rootmode' [ 70.648932][ T7035] fuse: Bad value for 'rootmode' [ 70.649123][ T7035] fuse: Bad value for 'rootmode' [ 70.649327][ T7035] fuse: Bad value for 'rootmode' [ 70.649509][ T7035] fuse: Bad value for 'rootmode' [ 70.649714][ T7035] fuse: Bad value for 'rootmode' [ 70.649899][ T7035] fuse: Bad value for 'rootmode' [ 70.650118][ T7035] fuse: Bad value for 'rootmode' [ 70.650897][ T7035] fuse: Bad value for 'rootmode' [ 70.651102][ T7035] fuse: Bad value for 'rootmode' [ 70.651285][ T7035] fuse: Bad value for 'rootmode' [ 70.651495][ T7035] fuse: Bad value for 'rootmode' [ 70.651681][ T7035] fuse: Bad value for 'rootmode' [ 70.651824][ T7035] fuse: Bad value for 'rootmode' [ 70.651937][ T7035] fuse: Bad value for 'rootmode' [ 70.652061][ T7035] fuse: Bad value for 'rootmode' [ 70.652173][ T7035] fuse: Bad value for 'rootmode' [ 70.652296][ T7035] fuse: Bad value for 'rootmode' [ 70.652407][ T7035] fuse: Bad value for 'rootmode' [ 70.830999][ T7053] xt_hashlimit: size too large, truncated to 1048576 [ 71.095218][ T1479] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 71.153213][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.214964][ T1040] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 71.243110][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.243153][ T5735] Bluetooth: hci0: command tx timeout [ 71.243174][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.254708][ T1479] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.255704][ T1479] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 71.255728][ T1479] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 71.255747][ T1479] usb 7-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.255767][ T1479] usb 7-1: config 1 interface 0 has no altsetting 0 [ 71.256731][ T1479] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.256748][ T1479] usb 7-1: SerialNumber: syz [ 71.259046][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.259146][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.353108][ T1040] usb 10-1: device descriptor read/64, error -71 [ 71.396394][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396425][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.400842][ T849] cfg80211: failed to load regulatory.db [ 71.465400][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.465488][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.613105][ T1040] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 71.743064][ T1040] usb 10-1: device descriptor read/64, error -71 [ 71.853772][ T1040] usb usb10-port1: attempt power cycle [ 71.878036][ T1479] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 72.017185][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.017726][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.089855][ T849] usb 7-1: USB disconnect, device number 5 [ 72.098649][ T849] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 72.204010][ T1040] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 72.223764][ T1040] usb 10-1: device descriptor read/8, error -71 [ 72.483035][ T1040] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 72.495591][ T25] usb 5-1: USB disconnect, device number 10 [ 72.504310][ T1040] usb 10-1: device descriptor read/8, error -71 [ 72.601502][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 72.603672][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 72.603689][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 72.603699][ T7108] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 72.623934][ T1040] usb usb10-port1: unable to enumerate USB device [ 72.641837][ T7114] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 72.667092][ T7114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 72.672112][ T7119] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 72.672128][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 72.717075][ T7119] dummy0: left allmulticast mode [ 72.717215][ T7119] bridge0: port 3(dummy0) entered disabled state [ 72.721254][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 72.721268][ T43] audit: type=1400 audit(1791714629.303:549): avc: denied { prog_run } for pid=7117 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1 [ 72.724024][ T7120] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.282'. [ 72.744153][ T43] audit: type=1400 audit(1791714629.333:550): avc: denied { watch watch_reads } for pid=7110 comm="syz.2.280" path="/75/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.745121][ T7123] overlayfs: failed to resolve './bus': -2 [ 72.799852][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.285'. [ 72.868067][ T43] audit: type=1400 audit(1791714629.453:551): avc: denied { read } for pid=7134 comm="syz.1.286" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.868337][ T43] audit: type=1400 audit(1791714629.453:552): avc: denied { getopt } for pid=7134 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.882665][ T7137] cgroup: release_agent respecified [ 72.929420][ T7144] ptrace attach of "/syz-executor exec"[5736] was attempted by "/syz-executor exec"[7144] [ 73.160881][ T43] audit: type=1400 audit(1791714629.743:553): avc: denied { create } for pid=7159 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.161420][ T43] audit: type=1400 audit(1791714629.743:554): avc: denied { getopt } for pid=7159 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.162077][ T43] audit: type=1400 audit(1791714629.743:555): avc: denied { mount } for pid=7159 comm="syz.2.292" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.230475][ T7161] overlay: Unknown parameter 'obj_type' [ 73.245441][ T43] audit: type=1400 audit(1791714629.833:556): avc: denied { ioctl } for pid=7159 comm="syz.2.292" path="socket:[17669]" dev="sockfs" ino=17669 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.323204][ C0] net_ratelimit: 251 callbacks suppressed [ 73.324656][ T5740] Bluetooth: hci0: command tx timeout [ 73.347698][ T43] audit: type=1400 audit(1791714629.933:557): avc: denied { bind } for pid=7165 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.348148][ T43] audit: type=1400 audit(1791714629.933:558): avc: denied { listen } for pid=7165 comm="syz.2.294" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.349250][ T7166] netlink: NAT attribute has 5 unknown bytes [ 73.349273][ T7166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.386420][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 73.432822][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 73.442430][ T7172] geneve2: entered promiscuous mode [ 73.496614][ T7175] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 73.496627][ T7175] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.496922][ T7175] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 73.812297][ T7191] FAULT_INJECTION: forcing a failure. [ 73.812297][ T7191] name failslab, interval 1, probability 0, space 0, times 0 [ 73.812314][ T7191] CPU: 2 UID: 0 PID: 7191 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.812330][ T7191] Tainted: [L]=SOFTLOCKUP [ 73.812335][ T7191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.812341][ T7191] Call Trace: [ 73.812346][ T7191] [ 73.812351][ T7191] dump_stack_lvl+0x100/0x190 [ 73.812370][ T7191] should_fail_ex.cold+0x5/0xa [ 73.812387][ T7191] should_failslab+0xc2/0x120 [ 73.812409][ T7191] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.812424][ T7191] ? __proc_create+0xc1/0x8f0 [ 73.812437][ T7191] ? __proc_create+0x247/0x8f0 [ 73.812453][ T7191] __proc_create+0x247/0x8f0 [ 73.812472][ T7191] ? __pfx___proc_create+0x10/0x10 [ 73.812488][ T7191] ? _raw_write_unlock+0x28/0x50 [ 73.812503][ T7191] ? proc_register+0x56d/0x910 [ 73.812519][ T7191] proc_create_reg+0x75/0x170 [ 73.812534][ T7191] proc_create_net_data+0x8e/0x1c0 [ 73.812549][ T7191] ? __pfx_proc_create_net_data+0x10/0x10 [ 73.812563][ T7191] ? lockdep_init_map_type+0x5c/0x250 [ 73.812578][ T7191] ? timer_init_key+0x150/0x310 [ 73.812594][ T7191] ip_vs_conn_net_init+0x39d/0x4e0 [ 73.812612][ T7191] __ip_vs_init+0x27d/0x520 [ 73.812623][ T7191] ? __pfx___ip_vs_init+0x10/0x10 [ 73.812632][ T7191] ops_init+0x1e2/0x5f0 [ 73.812647][ T7191] setup_net+0x118/0x3a0 [ 73.812660][ T7191] ? __pfx_setup_net+0x10/0x10 [ 73.812676][ T7191] copy_net_ns+0x345/0x7a0 [ 73.812691][ T7191] create_new_namespaces+0x3ea/0xac0 [ 73.812709][ T7191] unshare_nsproxy_namespaces+0xf2/0x220 [ 73.812724][ T7191] ksys_unshare+0x4a2/0xb30 [ 73.812753][ T7191] ? __pfx_ksys_unshare+0x10/0x10 [ 73.812773][ T7191] __x64_sys_unshare+0x31/0x40 [ 73.812787][ T7191] do_syscall_64+0x123/0x790 [ 73.812805][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.812817][ T7191] RIP: 0033:0x7f97c1b9e1d9 [ 73.812827][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.812838][ T7191] RSP: 002b:00007f97c2b4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.812850][ T7191] RAX: ffffffffffffffda RBX: 00007f97c1e25fa0 RCX: 00007f97c1b9e1d9 [ 73.812858][ T7191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 73.812865][ T7191] RBP: 00007f97c1c35888 R08: 0000000000000000 R09: 0000000000000000 [ 73.812871][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.812878][ T7191] R13: 00007f97c1e26038 R14: 00007f97c1e25fa0 R15: 00007ffe3a922eb8 [ 73.812894][ T7191] [ 74.045004][ T7197] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 74.101746][ T7202] nfs4: Bad value for 'source' [ 74.152382][ T7207] FAULT_INJECTION: forcing a failure. [ 74.152382][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 74.152398][ T7207] CPU: 3 UID: 0 PID: 7207 Comm: syz.1.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.152413][ T7207] Tainted: [L]=SOFTLOCKUP [ 74.152417][ T7207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.152423][ T7207] Call Trace: [ 74.152428][ T7207] [ 74.152432][ T7207] dump_stack_lvl+0x100/0x190 [ 74.152453][ T7207] should_fail_ex.cold+0x5/0xa [ 74.152485][ T7207] should_failslab+0xc2/0x120 [ 74.152509][ T7207] __kmalloc_noprof+0xfc/0x840 [ 74.152525][ T7207] ? mpi_alloc_limb_space+0x31/0x60 [ 74.152544][ T7207] mpi_alloc_limb_space+0x31/0x60 [ 74.152560][ T7207] mpi_powm+0x436/0x1e50 [ 74.152584][ T7207] ? __pfx_mpi_powm+0x10/0x10 [ 74.152599][ T7207] ? __pfx_mpi_free+0x10/0x10 [ 74.152615][ T7207] ? mpi_free+0xe1/0x150 [ 74.152629][ T7207] ? kfree+0x22b/0x6d0 [ 74.152643][ T7207] ? mpi_free+0xe6/0x150 [ 74.152661][ T7207] rsa_enc+0x1fe/0x3b0 [ 74.152677][ T7207] ? __pfx_rsa_enc+0x10/0x10 [ 74.152693][ T7207] ? __virt_addr_valid+0x239/0x430 [ 74.152706][ T7207] ? sg_init_one+0xf5/0x1b0 [ 74.152720][ T7207] rsassa_pkcs1_verify+0x4eb/0xc20 [ 74.152742][ T7207] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 74.152768][ T7207] ? rsa_max_size+0xd/0x70 [ 74.152783][ T7207] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 74.152796][ T7207] public_key_verify_signature+0x5ee/0x910 [ 74.152814][ T7207] ? __pfx_public_key_verify_signature+0x10/0x10 [ 74.152835][ T7207] ? asymmetric_key_generate_id+0x7e/0x180 [ 74.152851][ T7207] x509_check_for_self_signed+0x325/0x510 [ 74.152869][ T7207] x509_cert_parse+0x60c/0x910 [ 74.152886][ T7207] x509_key_preparse+0x65/0x9c0 [ 74.152904][ T7207] asymmetric_key_preparse+0xce/0x1d0 [ 74.152916][ T7207] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 74.152929][ T7207] __key_create_or_update+0x413/0xe30 [ 74.152949][ T7207] ? __pfx___key_create_or_update+0x10/0x10 [ 74.152967][ T7207] ? lookup_user_key+0x3f3/0x1300 [ 74.152990][ T7207] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 74.153006][ T7207] ? __pfx_keyring_search_iterator+0x10/0x10 [ 74.153020][ T7207] key_create_or_update+0x42/0x60 [ 74.153039][ T7207] __do_sys_add_key+0x2e8/0x460 [ 74.153053][ T7207] ? __pfx___do_sys_add_key+0x10/0x10 [ 74.153071][ T7207] do_syscall_64+0x123/0x790 [ 74.153089][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.153101][ T7207] RIP: 0033:0x7f9a99b9e1d9 [ 74.153110][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.153121][ T7207] RSP: 002b:00007f9a9ab52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 74.153132][ T7207] RAX: ffffffffffffffda RBX: 00007f9a99e25fa0 RCX: 00007f9a99b9e1d9 [ 74.153139][ T7207] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 74.153146][ T7207] RBP: 00007f9a99c35888 R08: 000000000fb3d7c4 R09: 0000000000000000 [ 74.153153][ T7207] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 74.153160][ T7207] R13: 00007f9a99e26038 R14: 00007f9a99e25fa0 R15: 00007ffc378e26f8 [ 74.153175][ T7207] [ 74.403448][ T63] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 74.486789][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 74.486977][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 74.563460][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 74.568549][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.568591][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 74.570234][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.570253][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.570304][ T63] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.572210][ T63] usb 5-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 74.572227][ T63] usb 5-1: Product: syz [ 74.572239][ T63] usb 5-1: Manufacturer: syz [ 74.572251][ T63] usb 5-1: SerialNumber: syz [ 74.660037][ T7241] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 74.699470][ T7246] tipc: Started in network mode [ 74.699483][ T7246] tipc: Node identity 0ef068c46ccf, cluster identity 4711 [ 74.699602][ T7246] tipc: Enabled bearer , priority 0 [ 74.700611][ T7246] syzkaller0: entered promiscuous mode [ 74.700624][ T7246] syzkaller0: entered allmulticast mode [ 74.702123][ T7246] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 74.734303][ T7246] tipc: Resetting bearer [ 74.737073][ T7246] netlink: 'syz.5.315': attribute type 4 has an invalid length. [ 74.742626][ T7245] tipc: Resetting bearer [ 74.755414][ T7245] tipc: Disabling bearer [ 74.824557][ T7256] warning: `syz.2.317' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.923338][ T7260] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 74.932875][ T7262] FAULT_INJECTION: forcing a failure. [ 74.932875][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 74.932904][ T7262] CPU: 2 UID: 0 PID: 7262 Comm: syz.5.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.932943][ T7262] Tainted: [L]=SOFTLOCKUP [ 74.932952][ T7262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.932964][ T7262] Call Trace: [ 74.932971][ T7262] [ 74.932981][ T7262] dump_stack_lvl+0x100/0x190 [ 74.933011][ T7262] should_fail_ex.cold+0x5/0xa [ 74.933039][ T7262] should_failslab+0xc2/0x120 [ 74.933077][ T7262] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.933105][ T7262] ? do_getname+0x35/0x390 [ 74.933131][ T7262] do_getname+0x35/0x390 [ 74.933154][ T7262] __x64_sys_mkdirat+0x78/0xc0 [ 74.933184][ T7262] do_syscall_64+0x123/0x790 [ 74.933215][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.933234][ T7262] RIP: 0033:0x7f2c1399e1d9 [ 74.933250][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.933269][ T7262] RSP: 002b:00007f2c11bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 74.933289][ T7262] RAX: ffffffffffffffda RBX: 00007f2c13c25fa0 RCX: 00007f2c1399e1d9 [ 74.933302][ T7262] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 74.933315][ T7262] RBP: 00007f2c13a35888 R08: 0000000000000000 R09: 0000000000000000 [ 74.933327][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.933337][ T7262] R13: 00007f2c13c26038 R14: 00007f2c13c25fa0 R15: 00007fff4eb0cd08 [ 74.933363][ T7262] [ 75.006879][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.098041][ T7270] bridge0: port 3(macsec2) entered blocking state [ 75.098109][ T7270] bridge0: port 3(macsec2) entered disabled state [ 75.098183][ T7270] macsec2: entered allmulticast mode [ 75.102802][ T7270] macsec2: left allmulticast mode [ 75.163195][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 75.166800][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.168353][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.168376][ T10] usb 6-1: config 0 has no interface number 0 [ 75.168412][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.168436][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 75.168460][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.168486][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.168542][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.179193][ T10] usb 6-1: config 0 descriptor?? [ 75.195475][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 75.304353][ T7279] ecryptfs: Unknown parameter 'ecryptfs_enable_filename_crypto' [ 75.436111][ T30] usb 6-1: USB disconnect, device number 5 [ 75.506163][ T30] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 76.122340][ T63] cdc_ncm 5-1:1.0: skipping garbage [ 76.122348][ T63] cdc_ncm 5-1:1.0: skipping garbage [ 76.122355][ T63] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 76.122373][ T63] cdc_ncm 5-1:1.0: bind() failure [ 76.130322][ T7301] hsr_slave_0: left promiscuous mode [ 76.133627][ T7301] hsr_slave_1: left promiscuous mode [ 76.138979][ T63] usb 5-1: USB disconnect, device number 11 [ 76.166038][ T7305] wg1: entered allmulticast mode [ 76.171806][ T7306] pimreg: entered allmulticast mode [ 76.185071][ T7303] wg1: left allmulticast mode [ 76.185126][ T7303] pimreg: left allmulticast mode [ 76.213112][ T5805] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.213148][ T5805] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.213180][ T5805] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.213261][ T5805] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.432536][ T7321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7321 comm=syz.1.334 [ 76.436404][ T7321] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 76.449601][ T7321] jffs2: notice: (7321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.538971][ T7326] xt_limit: Overflow, try lower: 0/0 [ 76.781142][ T7336] FAULT_INJECTION: forcing a failure. [ 76.781142][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 76.781194][ T7336] CPU: 2 UID: 0 PID: 7336 Comm: syz.2.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.781220][ T7336] Tainted: [L]=SOFTLOCKUP [ 76.781227][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.781238][ T7336] Call Trace: [ 76.781245][ T7336] [ 76.781252][ T7336] dump_stack_lvl+0x100/0x190 [ 76.781285][ T7336] should_fail_ex.cold+0x5/0xa [ 76.781312][ T7336] should_failslab+0xc2/0x120 [ 76.781338][ T7336] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 76.781366][ T7336] ? key_alloc+0x423/0x1310 [ 76.781397][ T7336] kmemdup_noprof+0x29/0x60 [ 76.781417][ T7336] key_alloc+0x423/0x1310 [ 76.781449][ T7336] ? __kmalloc_noprof+0x350/0x840 [ 76.781479][ T7336] ? __pfx_key_alloc+0x10/0x10 [ 76.781508][ T7336] ? hook_cred_prepare+0x177/0x370 [ 76.781524][ T7336] keyring_alloc+0x44/0xc0 [ 76.781536][ T7336] lookup_user_key+0x9b8/0x1300 [ 76.781554][ T7336] ? __pfx_lookup_user_key+0x10/0x10 [ 76.781571][ T7336] ? __might_fault+0xc5/0x140 [ 76.781584][ T7336] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 76.781602][ T7336] ? _copy_from_user+0x59/0xd0 [ 76.781618][ T7336] ? memdup_user+0x82/0xe0 [ 76.781632][ T7336] __do_sys_add_key+0x2a6/0x460 [ 76.781646][ T7336] ? __pfx___do_sys_add_key+0x10/0x10 [ 76.781664][ T7336] do_syscall_64+0x123/0x790 [ 76.781682][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.781694][ T7336] RIP: 0033:0x7f0f49d9e1d9 [ 76.781704][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.781715][ T7336] RSP: 002b:00007f0f4ac6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 76.781726][ T7336] RAX: ffffffffffffffda RBX: 00007f0f4a025fa0 RCX: 00007f0f49d9e1d9 [ 76.781735][ T7336] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000400 [ 76.781744][ T7336] RBP: 00007f0f49e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 76.781751][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.781758][ T7336] R13: 00007f0f4a026038 R14: 00007f0f4a025fa0 R15: 00007fff1751ea28 [ 76.781773][ T7336] [ 76.872097][ T6854] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.878926][ T6854] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.878942][ T6854] failed to unregister udp with rpcbind [ 76.879367][ T6854] svc: failed to register nfsdv3 RPC service (errno 97). [ 76.879382][ T6854] svc: failed to register nfsaclv3 RPC service (errno 97). [ 76.879393][ T6854] failed to unregister udp with rpcbind [ 76.973139][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 77.123278][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 77.123879][ T30] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.124386][ T30] usb 5-1: config 0 has no interfaces? [ 77.124825][ T30] usb 5-1: config 0 has no interfaces? [ 77.125314][ T30] usb 5-1: config 0 has no interfaces? [ 77.127093][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.127108][ T30] usb 5-1: Product: syz [ 77.127119][ T30] usb 5-1: Manufacturer: syz [ 77.127130][ T30] usb 5-1: SerialNumber: syz [ 77.129456][ T30] usb 5-1: config 0 descriptor?? [ 77.178315][ T7364] affs: No valid root block on device sr0 [ 77.334365][ T7338] FAULT_INJECTION: forcing a failure. [ 77.334365][ T7338] name fail_futex, interval 1, probability 0, space 0, times 1 [ 77.334416][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.334434][ T7338] Tainted: [L]=SOFTLOCKUP [ 77.334439][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.334446][ T7338] Call Trace: [ 77.334451][ T7338] [ 77.334456][ T7338] dump_stack_lvl+0x100/0x190 [ 77.334477][ T7338] should_fail_ex.cold+0x5/0xa [ 77.334496][ T7338] get_futex_key+0x1d0/0x14f0 [ 77.334517][ T7338] ? __pfx_get_futex_key+0x10/0x10 [ 77.334531][ T7338] ? __fget_files+0x215/0x3d0 [ 77.334549][ T7338] ? __fget_files+0x21f/0x3d0 [ 77.334566][ T7338] futex_wake+0xf4/0x5e0 [ 77.334580][ T7338] ? __pfx_futex_wake+0x10/0x10 [ 77.334607][ T7338] ? rcu_read_lock_any_held+0x6a/0x90 [ 77.334619][ T7338] ? find_held_lock+0x2b/0x80 [ 77.334635][ T7338] ? ksys_write+0x190/0x250 [ 77.334648][ T7338] ? ksys_write+0x190/0x250 [ 77.334663][ T7338] do_futex+0x2b2/0x440 [ 77.334684][ T7338] ? __pfx_do_futex+0x10/0x10 [ 77.334712][ T7338] __x64_sys_futex+0x34f/0x4d0 [ 77.334743][ T7338] ? __pfx___x64_sys_futex+0x10/0x10 [ 77.334768][ T7338] ? __pfx___do_sys_prctl+0x10/0x10 [ 77.334790][ T7338] do_syscall_64+0x123/0x790 [ 77.334808][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.334820][ T7338] RIP: 0033:0x7f97c1b9e1d9 [ 77.334830][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.334841][ T7338] RSP: 002b:00007f97c2b4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.334853][ T7338] RAX: ffffffffffffffda RBX: 00007f97c1e25fa8 RCX: 00007f97c1b9e1d9 [ 77.334861][ T7338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97c1e25fac [ 77.334868][ T7338] RBP: 00007f97c1e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 77.334875][ T7338] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 77.334882][ T7338] R13: 00007f97c1e26038 R14: 00007ffe3a922dd0 R15: 00007ffe3a922eb8 [ 77.334896][ T7338] [ 77.335541][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.335842][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.345456][ T7338] bridge1: entered promiscuous mode [ 77.353393][ T5804] usb 5-1: USB disconnect, device number 12 [ 77.425328][ T7377] ubi0: attaching mtd0 [ 77.438365][ T7377] ubi0: scanning is finished [ 77.438414][ T7377] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 77.563355][ T7377] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 77.814692][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 77.814702][ T43] audit: type=1400 audit(1791714634.403:600): avc: denied { connect } for pid=7393 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.836914][ T7402] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 77.841027][ T43] audit: type=1400 audit(1791714634.423:601): avc: granted { setsecparam } for pid=7396 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 77.858331][ T43] audit: type=1400 audit(1791714634.443:602): avc: denied { read } for pid=7393 comm="syz.2.355" path="socket:[19701]" dev="sockfs" ino=19701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.912826][ T7412] netlink: 'syz.0.357': attribute type 2 has an invalid length. [ 77.912844][ T7412] __nla_validate_parse: 7 callbacks suppressed [ 77.912854][ T7412] netlink: 46 bytes leftover after parsing attributes in process `syz.0.357'. [ 77.971220][ T43] audit: type=1400 audit(1791714634.553:603): avc: denied { ioctl } for pid=7416 comm="syz.0.359" path="socket:[17960]" dev="sockfs" ino=17960 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.271977][ T7431] netlink: 'syz.0.359': attribute type 16 has an invalid length. [ 78.271988][ T7431] netlink: 'syz.0.359': attribute type 17 has an invalid length. [ 78.297761][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.297879][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.298108][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.298173][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.301901][ T7431] dummy0: left promiscuous mode [ 78.333994][ T5440] net_ratelimit: 302 callbacks suppressed [ 78.341189][ T7431] vcan1: left allmulticast mode [ 78.350461][ T7431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.351551][ T7431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.352689][ T7431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.359988][ T7431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.363490][ T7431] geneve2: left promiscuous mode [ 78.364852][ T7431] bridge1: left promiscuous mode [ 78.389295][ T43] audit: type=1400 audit(1791714634.973:604): avc: denied { write } for pid=7437 comm="syz.2.362" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.390995][ T43] audit: type=1400 audit(1791714634.973:605): avc: denied { read write } for pid=7437 comm="syz.2.362" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.391356][ T43] audit: type=1400 audit(1791714634.973:606): avc: denied { open } for pid=7437 comm="syz.2.362" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.391795][ T43] audit: type=1400 audit(1791714634.973:607): avc: denied { ioctl } for pid=7437 comm="syz.2.362" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.496548][ T43] audit: type=1400 audit(1791714635.083:608): avc: denied { watch watch_reads } for pid=7437 comm="syz.2.362" path="/proc/326/net/dev_snmp6" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 78.501360][ T7438] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 78.501929][ T43] audit: type=1400 audit(1791714635.083:609): avc: denied { getopt } for pid=7437 comm="syz.2.362" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.604823][ T7388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.777547][ T7456] FAULT_INJECTION: forcing a failure. [ 78.777547][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.777577][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.2.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.777604][ T7456] Tainted: [L]=SOFTLOCKUP [ 78.777612][ T7456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.777625][ T7456] Call Trace: [ 78.777632][ T7456] [ 78.777641][ T7456] dump_stack_lvl+0x100/0x190 [ 78.777675][ T7456] should_fail_ex.cold+0x5/0xa [ 78.777704][ T7456] strncpy_from_user+0x3b/0x2d0 [ 78.777737][ T7456] do_getname+0x78/0x390 [ 78.777762][ T7456] do_sys_openat2+0xc7/0x1e0 [ 78.777781][ T7456] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.777799][ T7456] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 78.777835][ T7456] __x64_sys_openat+0x12d/0x210 [ 78.777855][ T7456] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.777885][ T7456] do_syscall_64+0x123/0x790 [ 78.777916][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.777937][ T7456] RIP: 0033:0x7f0f49d5ea0e [ 78.777953][ T7456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.777970][ T7456] RSP: 002b:00007f0f4ac6bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.777991][ T7456] RAX: ffffffffffffffda RBX: 00007f0f4ac6c6c0 RCX: 00007f0f49d5ea0e [ 78.778005][ T7456] RDX: 000000000008a100 RSI: 00007f0f4ac6bc00 RDI: ffffffffffffff9c [ 78.778017][ T7456] RBP: 00007f0f4ac6bc00 R08: 0000000000000000 R09: 0000000000000000 [ 78.778029][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 78.778041][ T7456] R13: 00007f0f4a026038 R14: 00007f0f4a025fa0 R15: 00007fff1751ea28 [ 78.778089][ T7456] [ 79.022258][ T7468] overlay: ./file0 is not a directory [ 79.086966][ T7473] gadgetfs: bound to dummy_udc driver [ 79.088136][ T7474] cpuidle: using governor haltpoll [ 79.099868][ T7473] FAULT_INJECTION: forcing a failure. [ 79.099868][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 79.099887][ T7473] CPU: 3 UID: 0 PID: 7473 Comm: syz.2.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.099902][ T7473] Tainted: [L]=SOFTLOCKUP [ 79.099907][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.099913][ T7473] Call Trace: [ 79.099918][ T7473] [ 79.099922][ T7473] dump_stack_lvl+0x100/0x190 [ 79.099942][ T7473] should_fail_ex.cold+0x5/0xa [ 79.099978][ T7473] should_failslab+0xc2/0x120 [ 79.099995][ T7473] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.100011][ T7473] ? do_getname+0x35/0x390 [ 79.100026][ T7473] do_getname+0x35/0x390 [ 79.100043][ T7473] do_sys_openat2+0xc7/0x1e0 [ 79.100054][ T7473] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.100070][ T7473] __x64_sys_openat+0x12d/0x210 [ 79.100082][ T7473] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.100098][ T7473] do_syscall_64+0x123/0x790 [ 79.100117][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.100128][ T7473] RIP: 0033:0x7f0f49d9e1d9 [ 79.100138][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.100148][ T7473] RSP: 002b:00007f0f4ac6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.100159][ T7473] RAX: ffffffffffffffda RBX: 00007f0f4a025fa0 RCX: 00007f0f49d9e1d9 [ 79.100166][ T7473] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 79.100173][ T7473] RBP: 00007f0f49e35888 R08: 0000000000000000 R09: 0000000000000000 [ 79.100180][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.100186][ T7473] R13: 00007f0f4a026038 R14: 00007f0f4a025fa0 R15: 00007fff1751ea28 [ 79.100201][ T7473] [ 79.446603][ T7474] smpboot: CPU 1 is now offline [ 79.736967][ T25] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 79.758428][ T7514] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 79.818433][ T7514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.895169][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 79.895191][ T25] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40 [ 79.895971][ T25] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.895984][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 79.897729][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.897745][ T25] usb 5-1: Product: ࠝ [ 79.897756][ T25] usb 5-1: Manufacturer: ࠧ [ 79.897765][ T25] usb 5-1: SerialNumber: 㐁 [ 79.902426][ T25] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 79.902436][ T25] usb 5-1: no configuration chosen from 1 choice [ 79.986509][ T7517] bond1: (slave veth3): Enslaving as an active interface with a down link [ 79.999856][ T7514] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 80.009697][ T7514] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 80.443041][ T63] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 80.491981][ T7541] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 80.493102][ T7542] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 80.573203][ T63] usb 6-1: device descriptor read/64, error -71 [ 80.833224][ T63] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.963015][ T63] usb 6-1: device descriptor read/64, error -71 [ 81.073466][ T63] usb usb6-port1: attempt power cycle [ 81.423120][ T63] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.437430][ T63] usb 6-1: device descriptor read/8, error -71 [ 81.673273][ T63] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.703753][ T63] usb 6-1: device descriptor read/8, error -71 [ 81.782286][ T7559] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 81.782300][ T7559] device-mapper: ioctl: error adding target to table [ 81.814081][ T63] usb usb6-port1: unable to enumerate USB device [ 81.820870][ T7569] netlink: 136 bytes leftover after parsing attributes in process `syz.5.391'. [ 81.943328][ T5804] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.078309][ T10] usb 5-1: USB disconnect, device number 13 [ 82.093818][ T5804] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.095516][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.095529][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.095541][ T5804] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.095570][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.098376][ T5804] usb 7-1: config 0 descriptor?? [ 82.279516][ T7580] overlayfs: failed to resolve './file0': -2 [ 82.304691][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.309541][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.311061][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.312462][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.323114][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.341434][ T7588] tipc: Started in network mode [ 82.341447][ T7588] tipc: Node identity ac1414aa, cluster identity 4711 [ 82.354514][ T7588] tipc: New replicast peer: 172.20.20.187 [ 82.355195][ T7588] tipc: Enabled bearer , priority 10 [ 82.505710][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 82.510025][ T7553] bond0: (slave bond_slave_0): Releasing backup interface [ 82.527307][ T5804] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.561135][ T7553] bond_slave_0: entered promiscuous mode [ 82.561144][ T7553] bond_slave_0: entered allmulticast mode [ 82.707723][ T1040] usb 7-1: USB disconnect, device number 6 [ 82.930033][ T43] kauditd_printk_skb: 25441 callbacks suppressed [ 82.930045][ T43] audit: type=1400 audit(1791714639.513:26051): avc: denied { write } for pid=7613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.036260][ T43] audit: type=1400 audit(1791714639.623:26052): avc: denied { write } for pid=7619 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.146378][ T43] audit: type=1400 audit(1791714639.733:26053): avc: denied { write } for pid=7623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.171710][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.171791][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.171871][ T7584] bridge_slave_0: entered allmulticast mode [ 83.172727][ T7584] bridge_slave_0: entered promiscuous mode [ 83.186288][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.186457][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.186588][ T7584] bridge_slave_1: entered allmulticast mode [ 83.188053][ T7584] bridge_slave_1: entered promiscuous mode [ 83.197586][ T43] audit: type=1400 audit(1791714639.783:26054): avc: denied { write } for pid=7628 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.291275][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.303009][ T43] audit: type=1400 audit(1791714639.883:26055): avc: denied { write } for pid=7630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.322242][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.398899][ T7584] team0: Port device team_slave_0 added [ 83.401474][ T7584] team0: Port device team_slave_1 added [ 83.427441][ T7634] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 83.427461][ T7634] device-mapper: ioctl: error adding target to table [ 83.429079][ T43] audit: type=1400 audit(1791714640.013:26056): avc: denied { write } for pid=7647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.479011][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.479023][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.479044][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.480597][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.480609][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.480631][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.524746][ T1040] tipc: Node number set to 2886997162 [ 83.531561][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 83.605988][ T7584] hsr_slave_0: entered promiscuous mode [ 83.607084][ T7584] hsr_slave_1: entered promiscuous mode [ 83.607723][ T7584] debugfs: 'hsr0' already exists in 'hsr' [ 83.607739][ T7584] Cannot create hsr debugfs directory [ 83.633030][ C0] net_ratelimit: 180 callbacks suppressed [ 83.727841][ T43] audit: type=1400 audit(1791714640.313:26057): avc: denied { read } for pid=7674 comm="syz.2.407" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.735492][ T43] audit: type=1400 audit(1791714640.323:26058): avc: denied { ioctl } for pid=7674 comm="syz.2.407" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x7012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.736462][ T43] audit: type=1400 audit(1791714640.323:26059): avc: denied { create } for pid=7674 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.737956][ T43] audit: type=1400 audit(1791714640.323:26060): avc: denied { ioctl } for pid=7674 comm="syz.2.407" path="socket:[20799]" dev="sockfs" ino=20799 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.955489][ T7584] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.965404][ T7584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.965890][ T7584] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.975467][ T7584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.979801][ T7584] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.980714][ T7687] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 83.980728][ T7687] device-mapper: ioctl: error adding target to table [ 83.988491][ T7584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.989048][ T7584] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.007783][ T7584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.121409][ T7714] tmpfs: Bad value for 'mpol' [ 84.172817][ T7716] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 84.190264][ T7716] bond6: entered promiscuous mode [ 84.190525][ T7716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 84.228241][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.246879][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.265566][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.265642][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.280112][ T7723] program syz.0.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.289566][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.289608][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.355258][ T7733] EXT4-fs (loop0): unable to read superblock [ 84.364038][ T5735] Bluetooth: hci0: command tx timeout [ 84.377297][ T7733] binder: 7732:7733 ioctl c0306201 200000000240 returned -14 [ 84.556417][ T7747] program syz.0.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.599866][ T7750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.624824][ T7750] IPVS: ip_vs_add_dest(): server weight less than zero [ 84.624878][ T111] IPVS: starting estimator thread 0... [ 84.670442][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.724593][ T7753] IPVS: using max 26 ests per chain, 62400 per kthread [ 84.865809][ T7584] veth0_vlan: entered promiscuous mode [ 84.875282][ T7584] veth1_vlan: entered promiscuous mode [ 84.890859][ T7584] veth0_macvtap: entered promiscuous mode [ 84.897318][ T7584] veth1_macvtap: entered promiscuous mode [ 84.906719][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.910042][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.973372][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973402][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973419][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973436][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.019798][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.019808][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.063098][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.063112][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.126966][ T7780] futex_wake_op: syz.0.431 tries to shift op by 144; fix this program [ 85.173783][ T7785] overlayfs: unescaped trailing colons in lowerdir mount option. [ 85.216014][ T7785] CIFS: VFS: UNC: path must begin with // or \\ [ 85.216022][ T7785] Malformed UNC in devname [ 85.216022][ T7785] [ 85.216072][ T7785] CIFS: VFS: Malformed UNC in devname [ 85.258237][ T7789] fuse: Bad value for 'fd' [ 85.312040][ T7800] No control pipe specified [ 85.313032][ T7800] tipc: Started in network mode [ 85.313051][ T7800] tipc: Node identity ac1414aa, cluster identity 4711 [ 85.313244][ T7800] tipc: New replicast peer: 172.20.20.187 [ 85.313836][ T7800] tipc: Enabled bearer , priority 10 [ 85.317085][ T7800] /dev/sg0: Can't lookup blockdev [ 85.968644][ T7816] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 85.968660][ T7816] netlink: 224 bytes leftover after parsing attributes in process `syz.0.440'. [ 86.433162][ T5735] Bluetooth: hci0: command tx timeout [ 86.433294][ T6243] tipc: Node number set to 2886997162 [ 88.513346][ T5735] Bluetooth: hci0: command tx timeout [ 88.673071][ C0] net_ratelimit: 243 callbacks suppressed [ 90.593766][ T5735] Bluetooth: hci0: command tx timeout [ 93.049589][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 93.049606][ T43] audit: type=1400 audit(1791714649.633:26070): avc: denied { write } for pid=7826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.114550][ T43] audit: type=1400 audit(1791714649.703:26071): avc: denied { write } for pid=7829 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.793382][ C3] net_ratelimit: 85 callbacks suppressed [ 95.551429][ T43] audit: type=1400 audit(1791714652.133:26072): avc: denied { write } for pid=7833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.594372][ T43] audit: type=1400 audit(1791714652.183:26073): avc: denied { write } for pid=7836 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.833445][ T77] net_ratelimit: 55 callbacks suppressed [ 101.544351][ T7844] loop0: detected capacity change from 0 to 3904 [ 101.545089][ T7848] SELinux: Context is not valid (left unmapped). [ 101.545630][ T43] audit: type=1400 audit(1791714658.133:26074): avc: denied { relabelto } for pid=7845 comm="syz.1.442" name="blkio.bfq.io_serviced" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 101.545790][ T43] audit: type=1400 audit(1791714658.133:26075): avc: denied { associate } for pid=7845 comm="syz.1.442" name="blkio.bfq.io_serviced" dev="tmpfs" ino=659 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 101.550975][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 101.551039][ T7848] netlink: 'syz.1.442': attribute type 26 has an invalid length. [ 101.551136][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 101.552606][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 101.552650][ T7848] netlink: 'syz.1.442': attribute type 26 has an invalid length. [ 101.552687][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 101.573934][ T43] audit: type=1400 audit(1791714658.163:26076): avc: denied { unlink } for pid=5725 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 101.603983][ T7844] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 101.604005][ T7844] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 101.604017][ T7844] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 101.604062][ T7844] loop0: [ 101.633913][ T43] audit: type=1400 audit(1791714658.213:26077): avc: denied { getopt } for pid=7853 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.647620][ T43] audit: type=1400 audit(1791714658.233:26078): avc: denied { mount } for pid=7852 comm="syz.1.445" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.665268][ T43] audit: type=1400 audit(1791714658.243:26079): avc: denied { read } for pid=7852 comm="syz.1.445" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 101.670723][ T7854] nfsd: exp_rootfh path not found \ [ 101.764592][ T5740] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 101.764767][ T5740] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 101.934718][ T7881] netlink: 128 bytes leftover after parsing attributes in process `syz.2.452'. [ 101.957688][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 101.958051][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 102.023023][ T7002] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.084978][ T43] audit: type=1400 audit(1791714658.673:26080): avc: denied { create } for pid=7887 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 102.095971][ T43] audit: type=1400 audit(1791714658.683:26081): avc: denied { sys_admin } for pid=7887 comm="syz.2.455" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 102.173598][ T7002] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 102.175772][ T7002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.175789][ T7002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.175825][ T7002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.190432][ T7002] usb 5-1: config 0 descriptor?? [ 102.297894][ T43] audit: type=1400 audit(1791714658.883:26082): avc: denied { write } for pid=7897 comm="syz.6.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.298641][ T43] audit: type=1400 audit(1791714658.883:26083): avc: denied { connect } for pid=7897 comm="syz.6.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.344383][ T7900] Cannot find add_set index 65532 as target [ 102.351960][ T7900] F2FS-fs: Conflicting test_dummy_encryption options [ 102.389146][ T7906] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 102.389146][ T7906] The task syz.6.459 (7906) triggered the difference, watch for misbehavior. [ 102.867165][ T7862] hid-generic 0003:0627:0001.0001: pid 7862 passed too short report [ 102.867927][ T7862] veth0_vlan: entered allmulticast mode [ 102.872580][ T7002] usbhid 5-1:0.0: can't add hid device: -71 [ 102.872645][ T7002] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.873636][ T7860] veth0_vlan: left allmulticast mode [ 102.877223][ T7002] usb 5-1: USB disconnect, device number 14 [ 103.466206][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.466'. [ 103.481720][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 103.513568][ T7932] overlayfs: missing 'lowerdir' [ 103.522674][ T7934] overlayfs: missing 'lowerdir' [ 103.849008][ T7962] jffs2: notice: (7962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.873368][ C3] net_ratelimit: 92 callbacks suppressed [ 103.915418][ T7971] SELinux: syz.0.470 (7971) wrote to user. This is no longer supported. [ 103.916132][ T7971] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 104.068950][ T7975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.336472][ T7991] trusted_key: encrypted_key: master key parameter ']@4U:8|b5rI\ܪDH݀$' is invalid [ 104.346291][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.482'. [ 104.346389][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.482'. [ 104.347821][ T7991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7991 comm=syz.1.482 [ 104.398577][ T7989] virtio-fs: tag not found [ 104.617096][ T7997] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.820408][ T8009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8009 comm=syz.2.488 [ 105.159398][ T8035] FAULT_INJECTION: forcing a failure. [ 105.159398][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 105.159430][ T8035] CPU: 3 UID: 0 PID: 8035 Comm: syz.0.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.159457][ T8035] Tainted: [L]=SOFTLOCKUP [ 105.159466][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.159477][ T8035] Call Trace: [ 105.159485][ T8035] [ 105.159494][ T8035] dump_stack_lvl+0x100/0x190 [ 105.159528][ T8035] should_fail_ex.cold+0x5/0xa [ 105.159558][ T8035] should_failslab+0xc2/0x120 [ 105.159598][ T8035] kmem_cache_alloc_noprof+0x92/0x6a0 [ 105.159622][ T8035] ? __pfx_map_id_range_down+0x10/0x10 [ 105.159645][ T8035] ? rcu_is_watching+0x13/0xc0 [ 105.159671][ T8035] ? security_inode_alloc+0x3b/0x2c0 [ 105.159703][ T8035] security_inode_alloc+0x3b/0x2c0 [ 105.159729][ T8035] inode_init_always_gfp+0xc6f/0xfb0 [ 105.159763][ T8035] alloc_inode+0x8e/0x250 [ 105.159789][ T8035] sock_alloc+0x44/0x280 [ 105.159808][ T8035] ? security_socket_create+0x7f/0x250 [ 105.159843][ T8035] __sock_create+0xc2/0x860 [ 105.159875][ T8035] __sys_socket+0x14d/0x260 [ 105.159904][ T8035] ? __pfx___sys_socket+0x10/0x10 [ 105.159940][ T8035] __x64_sys_socket+0x72/0xb0 [ 105.159968][ T8035] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.159998][ T8035] do_syscall_64+0x123/0x790 [ 105.160028][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.160050][ T8035] RIP: 0033:0x7f97c1b9e1d9 [ 105.160067][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.160086][ T8035] RSP: 002b:00007f97c2b29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.160107][ T8035] RAX: ffffffffffffffda RBX: 00007f97c1e26090 RCX: 00007f97c1b9e1d9 [ 105.160121][ T8035] RDX: 0000008000000004 RSI: 0000000000000003 RDI: 0000000000000010 [ 105.160133][ T8035] RBP: 00007f97c1c35888 R08: 0000000000000000 R09: 0000000000000000 [ 105.160145][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.160158][ T8035] R13: 00007f97c1e26128 R14: 00007f97c1e26090 R15: 00007ffe3a922eb8 [ 105.160186][ T8035] [ 105.803375][ T7002] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 105.956107][ T7002] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 105.957032][ T7002] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.957067][ T7002] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 105.957087][ T7002] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.957185][ T7002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.138206][ T5740] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 106.146170][ T5876] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 106.295198][ T5876] usb 11-1: unable to get BOS descriptor or descriptor too short [ 106.295224][ T5876] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 106.296642][ T5876] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 106.296656][ T5876] usb 11-1: config 142 has no interface number 0 [ 106.296674][ T5876] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 106.296687][ T5876] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 106.296747][ T5876] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 106.296760][ T5876] usb 11-1: config 142 interface 251 has no altsetting 0 [ 106.299441][ T5876] usb 11-1: string descriptor 0 read error: -22 [ 106.299563][ T5876] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.302555][ T8081] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 106.302683][ T8081] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 106.306675][ T5876] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 106.326175][ T5876] usb 11-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 106.390741][ T7002] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 106.390749][ T7002] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 106.404255][ T7002] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 106.409156][ T7002] usb 5-1: USB disconnect, device number 15 [ 106.665931][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 106.665948][ T43] audit: type=1400 audit(1791714663.253:26096): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.701057][ T8114] __nla_validate_parse: 6 callbacks suppressed [ 106.701070][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 106.715216][ T8114] syz.2.507 (8114): /proc/8113/oom_adj is deprecated, please use /proc/8113/oom_score_adj instead. [ 106.715613][ T8114] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 106.772433][ T8116] bridge1: entered promiscuous mode [ 106.772482][ T8116] bridge1: entered allmulticast mode [ 106.809547][ T8116] FAULT_INJECTION: forcing a failure. [ 106.809547][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 106.809634][ T8116] CPU: 3 UID: 0 PID: 8116 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.809650][ T8116] Tainted: [L]=SOFTLOCKUP [ 106.809654][ T8116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.809661][ T8116] Call Trace: [ 106.809666][ T8116] [ 106.809671][ T8116] dump_stack_lvl+0x100/0x190 [ 106.809691][ T8116] should_fail_ex.cold+0x5/0xa [ 106.809708][ T8116] should_failslab+0xc2/0x120 [ 106.809725][ T8116] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.809738][ T8116] ? pty_common_install+0x10e/0xb30 [ 106.809757][ T8116] pty_common_install+0x10e/0xb30 [ 106.809788][ T8116] ? __pfx_pty_unix98_install+0x10/0x10 [ 106.809803][ T8116] tty_init_dev.part.0+0x9e/0x470 [ 106.809816][ T8116] tty_init_dev+0x60/0x80 [ 106.809827][ T8116] ? __pfx_ptmx_open+0x10/0x10 [ 106.809841][ T8116] ptmx_open+0x128/0x360 [ 106.809855][ T8116] ? __pfx_ptmx_open+0x10/0x10 [ 106.809869][ T8116] chrdev_open+0x234/0x6a0 [ 106.809885][ T8116] ? __pfx_chrdev_open+0x10/0x10 [ 106.809901][ T8116] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 106.809917][ T8116] do_dentry_open+0x6ab/0x14d0 [ 106.809931][ T8116] ? __pfx_chrdev_open+0x10/0x10 [ 106.809954][ T8116] vfs_open+0x82/0x3f0 [ 106.809973][ T8116] path_openat+0x19fa/0x2440 [ 106.809992][ T8116] ? __pfx_path_openat+0x10/0x10 [ 106.810013][ T8116] do_file_open+0x20e/0x430 [ 106.810034][ T8116] ? __pfx_do_file_open+0x10/0x10 [ 106.810074][ T8116] ? _raw_spin_unlock+0x28/0x50 [ 106.810100][ T8116] ? alloc_fd+0x471/0x7a0 [ 106.810133][ T8116] do_sys_openat2+0x10f/0x1e0 [ 106.810145][ T8116] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.810161][ T8116] __x64_sys_openat+0x12d/0x210 [ 106.810172][ T8116] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.810189][ T8116] do_syscall_64+0x123/0x790 [ 106.810206][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.810218][ T8116] RIP: 0033:0x7f0f49d9e1d9 [ 106.810228][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.810262][ T8116] RSP: 002b:00007f0f4ac6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.810281][ T8116] RAX: ffffffffffffffda RBX: 00007f0f4a025fa0 RCX: 00007f0f49d9e1d9 [ 106.810293][ T8116] RDX: 0000000000000002 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 106.810305][ T8116] RBP: 00007f0f49e35888 R08: 0000000000000000 R09: 0000000000000000 [ 106.810316][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.810327][ T8116] R13: 00007f0f4a026038 R14: 00007f0f4a025fa0 R15: 00007fff1751ea28 [ 106.810342][ T8116] [ 106.874524][ T8116] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 106.874549][ T8116] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.874574][ T8116] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 106.874593][ T8116] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 106.874605][ T8116] page dumped because: unmovable page [ 106.874614][ T8116] page_owner tracks the page as allocated [ 106.874622][ T8116] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 6586, tgid 6586 (vhci_rx), ts 61341256131 [ 106.874652][ T8116] post_alloc_hook+0xfd/0x120 [ 106.874674][ T8116] get_page_from_freelist+0x110d/0x35d0 [ 106.874696][ T8116] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 106.874718][ T8116] alloc_pages_mpol+0x201/0x550 [ 106.874746][ T8116] alloc_pages_noprof+0x1a/0x160 [ 106.874764][ T8116] __vmalloc_node_range_noprof+0x833/0x1420 [ 106.874792][ T8116] __vmalloc_node_noprof+0xad/0xf0 [ 106.874818][ T8116] kcov_remote_start+0x518/0x6d0 [ 106.874842][ T8116] vhci_rx_loop+0x114/0xa60 [ 106.874870][ T8116] kthread+0x373/0x450 [ 106.874896][ T8116] ret_from_fork+0x730/0xd60 [ 106.874917][ T8116] ret_from_fork_asm+0x1a/0x30 [ 106.874936][ T8116] page_owner free stack trace missing [ 106.886406][ T43] audit: type=1400 audit(1791714663.473:26098): avc: denied { search } for pid=5118 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.886431][ T43] audit: type=1400 audit(1791714663.473:26099): avc: denied { append } for pid=5118 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.886451][ T43] audit: type=1400 audit(1791714663.473:26100): avc: denied { open } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.886523][ T43] audit: type=1400 audit(1791714663.473:26101): avc: denied { getattr } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.887644][ T43] audit: type=1400 audit(1791714663.463:26097): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.899985][ T5823] usb 11-1: USB disconnect, device number 2 [ 106.907818][ T8081] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -19 [ 106.907832][ T8081] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 106.907864][ T8081] cyphidcom ttyUSB0: cypress_open - failed submitting read urb, error -19 [ 106.918449][ T5823] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 106.919185][ T5823] cypress_m8 11-1:142.251: device disconnected [ 106.970075][ T43] audit: type=1400 audit(1791714663.553:26102): avc: denied { write } for pid=8122 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.293059][ T7002] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.443164][ T7002] usb 7-1: Using ep0 maxpacket: 8 [ 107.446761][ T7002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.447742][ T7002] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 107.447789][ T7002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 107.447814][ T7002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.447831][ T7002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 107.447847][ T7002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 107.447863][ T7002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.447902][ T7002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.466045][ T8142] binder: 8141:8142 ioctl c0306201 200000000380 returned -22 [ 107.656658][ T7002] usb 7-1: GET_CAPABILITIES returned 0 [ 107.656691][ T7002] usbtmc 7-1:16.0: can't read capabilities [ 107.676232][ T8151] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 107.676249][ T8151] device-mapper: ioctl: error adding target to table [ 107.714008][ T8164] bridge2: entered promiscuous mode [ 107.714026][ T8164] bridge2: entered allmulticast mode [ 107.716608][ T8167] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 107.767433][ T8164] FAULT_INJECTION: forcing a failure. [ 107.767433][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 107.767467][ T8164] CPU: 2 UID: 0 PID: 8164 Comm: syz.6.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.767494][ T8164] Tainted: [L]=SOFTLOCKUP [ 107.767503][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.767515][ T8164] Call Trace: [ 107.767522][ T8164] [ 107.767530][ T8164] dump_stack_lvl+0x100/0x190 [ 107.767564][ T8164] should_fail_ex.cold+0x5/0xa [ 107.767593][ T8164] should_failslab+0xc2/0x120 [ 107.767623][ T8164] __kmalloc_cache_noprof+0x91/0x6d0 [ 107.767649][ T8164] ? pty_common_install+0x10e/0xb30 [ 107.767680][ T8164] pty_common_install+0x10e/0xb30 [ 107.767709][ T8164] ? __pfx_pty_unix98_install+0x10/0x10 [ 107.767737][ T8164] tty_init_dev.part.0+0x9e/0x470 [ 107.767759][ T8164] tty_init_dev+0x60/0x80 [ 107.767778][ T8164] ? __pfx_ptmx_open+0x10/0x10 [ 107.767802][ T8164] ptmx_open+0x128/0x360 [ 107.767828][ T8164] ? __pfx_ptmx_open+0x10/0x10 [ 107.767853][ T8164] chrdev_open+0x234/0x6a0 [ 107.767880][ T8164] ? __pfx_chrdev_open+0x10/0x10 [ 107.767910][ T8164] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 107.767938][ T8164] do_dentry_open+0x6ab/0x14d0 [ 107.767962][ T8164] ? __pfx_chrdev_open+0x10/0x10 [ 107.767996][ T8164] vfs_open+0x82/0x3f0 [ 107.768028][ T8164] path_openat+0x19fa/0x2440 [ 107.768061][ T8164] ? __pfx_path_openat+0x10/0x10 [ 107.768098][ T8164] do_file_open+0x20e/0x430 [ 107.768129][ T8164] ? __pfx_do_file_open+0x10/0x10 [ 107.768177][ T8164] ? _raw_spin_unlock+0x28/0x50 [ 107.768202][ T8164] ? alloc_fd+0x471/0x7a0 [ 107.768238][ T8164] do_sys_openat2+0x10f/0x1e0 [ 107.768264][ T8164] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.768297][ T8164] __x64_sys_openat+0x12d/0x210 [ 107.768317][ T8164] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.768344][ T8164] do_syscall_64+0x123/0x790 [ 107.768376][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.768396][ T8164] RIP: 0033:0x7f04f879e1d9 [ 107.768414][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.768434][ T8164] RSP: 002b:00007f04f968b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.768454][ T8164] RAX: ffffffffffffffda RBX: 00007f04f8a25fa0 RCX: 00007f04f879e1d9 [ 107.768468][ T8164] RDX: 0000000000000002 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 107.768482][ T8164] RBP: 00007f04f8835888 R08: 0000000000000000 R09: 0000000000000000 [ 107.768495][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.768507][ T8164] R13: 00007f04f8a26038 R14: 00007f04f8a25fa0 R15: 00007ffe466874a8 [ 107.768537][ T8164] [ 107.792277][ T8164] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 107.792293][ T8164] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.792308][ T8164] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 107.792322][ T8164] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 107.792329][ T8164] page dumped because: unmovable page [ 107.792335][ T8164] page_owner tracks the page as allocated [ 107.792339][ T8164] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 6586, tgid 6586 (vhci_rx), ts 61341256131 [ 107.792356][ T8164] post_alloc_hook+0xfd/0x120 [ 107.792370][ T8164] get_page_from_freelist+0x110d/0x35d0 [ 107.792382][ T8164] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 107.792394][ T8164] alloc_pages_mpol+0x201/0x550 [ 107.792410][ T8164] alloc_pages_noprof+0x1a/0x160 [ 107.792420][ T8164] __vmalloc_node_range_noprof+0x833/0x1420 [ 107.792436][ T8164] __vmalloc_node_noprof+0xad/0xf0 [ 107.792452][ T8164] kcov_remote_start+0x518/0x6d0 [ 107.792466][ T8164] vhci_rx_loop+0x114/0xa60 [ 107.792481][ T8164] kthread+0x373/0x450 [ 107.792496][ T8164] ret_from_fork+0x730/0xd60 [ 107.792507][ T8164] ret_from_fork_asm+0x1a/0x30 [ 107.792519][ T8164] page_owner free stack trace missing [ 107.841332][ T43] audit: type=1400 audit(1791714664.423:26103): avc: denied { write } for pid=8169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.897107][ T8177] netlink: 'syz.0.521': attribute type 30 has an invalid length. [ 107.956050][ T43] audit: type=1400 audit(1791714664.543:26104): avc: denied { write } for pid=8179 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.981858][ T5823] usb 7-1: USB disconnect, device number 7 [ 108.253648][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 108.263407][ T43] audit: type=1400 audit(1791714664.853:26105): avc: denied { write } for pid=8200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.341686][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 108.350906][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 108.434953][ T5440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.881318][ T8249] mmap: syz.6.532 (8249) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.923003][ C3] net_ratelimit: 153 callbacks suppressed [ 109.836180][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 109.901056][ T8281] lo: entered allmulticast mode [ 109.901454][ T8281] tunl0: entered allmulticast mode [ 109.901833][ T8281] gre0: entered allmulticast mode [ 109.902209][ T8281] gretap0: entered allmulticast mode [ 109.902677][ T8281] erspan0: entered allmulticast mode [ 109.903175][ T8281] ip_vti0: entered allmulticast mode [ 109.903547][ T8281] ip6_vti0: entered allmulticast mode [ 109.903882][ T8281] sit0: entered allmulticast mode [ 109.904207][ T8281] ip6tnl0: entered allmulticast mode [ 109.904518][ T8281] ip6gre0: entered allmulticast mode [ 109.905274][ T8281] syz_tun: entered allmulticast mode [ 109.905759][ T8281] ip6gretap0: entered allmulticast mode [ 109.906150][ T8281] bridge0: entered allmulticast mode [ 109.906705][ T8281] vcan0: entered allmulticast mode [ 109.907075][ T8281] bond0: entered allmulticast mode [ 109.907091][ T8281] bond_slave_0: entered allmulticast mode [ 109.907104][ T8281] bond_slave_1: entered allmulticast mode [ 109.907595][ T8281] team0: entered allmulticast mode [ 109.907607][ T8281] team_slave_0: entered allmulticast mode [ 109.907618][ T8281] team_slave_1: entered allmulticast mode [ 109.908110][ T8281] dummy0: entered allmulticast mode [ 109.909347][ T8281] nlmon0: entered allmulticast mode [ 109.909721][ T8281] batadv0: entered allmulticast mode [ 109.910200][ T8281] veth0: entered allmulticast mode [ 109.910620][ T8281] veth1: entered allmulticast mode [ 109.910988][ T8281] wg0: entered allmulticast mode [ 109.911354][ T8281] wg1: entered allmulticast mode [ 109.911715][ T8281] wg2: entered allmulticast mode [ 109.912058][ T8281] veth0_to_bridge: entered allmulticast mode [ 109.913367][ T8281] veth1_to_bridge: entered allmulticast mode [ 109.914264][ T8281] veth0_to_bond: entered allmulticast mode [ 109.915015][ T8281] veth1_to_bond: entered allmulticast mode [ 109.916667][ T8281] veth0_to_team: entered allmulticast mode [ 109.917525][ T8281] veth1_to_team: entered allmulticast mode [ 109.918285][ T8281] veth0_to_batadv: entered allmulticast mode [ 109.918578][ T8281] batadv_slave_0: entered allmulticast mode [ 109.918993][ T8281] veth1_to_batadv: entered allmulticast mode [ 109.919385][ T8281] batadv_slave_1: entered allmulticast mode [ 109.919758][ T8281] xfrm0: entered allmulticast mode [ 109.920130][ T8281] veth0_to_hsr: entered allmulticast mode [ 109.920508][ T8281] hsr_slave_0: entered allmulticast mode [ 109.920873][ T8281] veth1_to_hsr: entered allmulticast mode [ 109.921247][ T8281] hsr_slave_1: entered allmulticast mode [ 109.921706][ T8281] hsr0: entered allmulticast mode [ 109.922105][ T8281] veth1_virt_wifi: entered allmulticast mode [ 109.922545][ T8281] veth0_virt_wifi: entered allmulticast mode [ 109.922917][ T8281] virt_wifi0: entered allmulticast mode [ 109.924163][ T8281] veth1_vlan: entered allmulticast mode [ 109.924545][ T8281] veth0_vlan: entered allmulticast mode [ 109.925047][ T8281] vlan0: entered allmulticast mode [ 109.925805][ T8281] vlan1: entered allmulticast mode [ 109.926209][ T8281] macvlan0: entered allmulticast mode [ 109.926739][ T8281] macvlan1: entered allmulticast mode [ 109.927167][ T8281] ipvlan0: entered allmulticast mode [ 109.927561][ T8281] ipvlan1: entered allmulticast mode [ 109.927925][ T8281] veth1_macvtap: entered allmulticast mode [ 109.928304][ T8281] veth0_macvtap: entered allmulticast mode [ 109.928680][ T8281] macvtap0: entered allmulticast mode [ 109.929143][ T8281] macsec0: entered allmulticast mode [ 109.929470][ T8281] geneve0: entered allmulticast mode [ 109.929843][ T8281] geneve1: entered allmulticast mode [ 109.930258][ T8281] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 109.930725][ T8281] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 109.931173][ T8281] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 109.931660][ T8281] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 109.932124][ T8281] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 109.932488][ T8281] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 109.932832][ T8281] vcan1: entered allmulticast mode [ 109.937848][ T8281] dummy1: entered allmulticast mode [ 109.938284][ T8281] bond1: entered allmulticast mode [ 109.938797][ T8281] bond2: entered allmulticast mode [ 109.941301][ T8281] bond3: entered allmulticast mode [ 109.941850][ T8281] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 109.942262][ T8281] bond4: entered allmulticast mode [ 109.942745][ T8281] bond5: entered allmulticast mode [ 109.943998][ T8281] veth2: entered allmulticast mode [ 109.944407][ T8281] veth3: entered allmulticast mode [ 109.944767][ T8281] geneve2: entered allmulticast mode [ 109.945164][ T8281] bridge1: entered allmulticast mode [ 109.945542][ T8281] bond6: entered allmulticast mode [ 109.946015][ T8281] vlan2: entered allmulticast mode [ 110.144208][ T5740] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 110.149062][ T8292] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 110.149073][ T8292] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 110.149081][ T8292] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 110.149087][ T8292] One or more global auth toks could not properly register; rc = [-22] [ 110.149103][ T8292] Error validating options; rc = [-22] [ 111.208485][ T8298] netlink: 'syz.1.550': attribute type 30 has an invalid length. [ 111.373193][ T8309] netlink: 'syz.0.551': attribute type 19 has an invalid length. [ 111.390064][ T8309] ip6tnl1: entered allmulticast mode [ 111.392463][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.392645][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.410203][ T5440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.413441][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.693226][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.693296][ T6243] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 111.855124][ T6243] usb 6-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice= 0.40 [ 111.857738][ T6243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.857748][ T6243] usb 6-1: Product: ꄤ닠駍찇숔彆垤覧−꣦老믒渥ꤨ輗⺰དྷ杋펋⺜騠⩖黿뉯럋맹 [ 111.857758][ T6243] usb 6-1: Manufacturer: 㐊 [ 111.857766][ T6243] usb 6-1: SerialNumber: 懲矽כֿ隘玈ﵻ赖⭰ꉨꀒว衬嵁퍥驇꭪縊䝲希∵氜甆䰽錳㼔戒澍ϧ객㶍ḝ鳱諢念몈탭榬ȥ蝽㩍흒몲賧㘳㶎玑幀ᨎ䮖洣ꊝᱞ컬멒儤쿯潒汔㐶ૈ鑿鞨雳ꠟ锿确撳㍮Ⴓꈆ态퐹渐З凲ಬ퉉窯ഈ궻ㅭ᧞缸ࣔ˾됼 [ 112.022913][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 112.023085][ T43] audit: type=1400 audit(1791714669.606:26119): avc: denied { ioctl } for pid=8333 comm="syz.6.557" path="socket:[24071]" dev="sockfs" ino=24071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.259443][ T6243] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.260467][ T6243] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 112.284196][ T6243] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.289183][ T6243] usb 6-1: USB disconnect, device number 10 [ 112.387745][ T8339] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.559'. [ 112.987221][ T43] audit: type=1400 audit(1791714670.576:26120): avc: denied { read append } for pid=8350 comm="syz.1.561" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.987354][ T43] audit: type=1400 audit(1791714670.576:26121): avc: denied { open } for pid=8350 comm="syz.1.561" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.988233][ T43] audit: type=1400 audit(1791714670.576:26122): avc: denied { ioctl } for pid=8350 comm="syz.1.561" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.075980][ T5740] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 113.076007][ T5740] Bluetooth: hci3: unexpected event for opcode 0x042f [ 113.620480][ T8355] netlink: 'syz.2.562': attribute type 30 has an invalid length. [ 113.785031][ T43] audit: type=1400 audit(1791714671.376:26123): avc: denied { map } for pid=8352 comm="syz.1.570" path="/148/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=75235549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.931447][ T8371] netlink: 32 bytes leftover after parsing attributes in process `syz.6.564'. [ 113.963016][ C3] net_ratelimit: 235 callbacks suppressed [ 113.964168][ T43] audit: type=1400 audit(1791714671.556:26124): avc: denied { ioctl } for pid=8374 comm="syz.2.565" path="socket:[24106]" dev="sockfs" ino=24106 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.969273][ T8375] tipc: Started in network mode [ 113.969291][ T8375] tipc: Node identity , cluster identity 4711 [ 113.969302][ T8375] tipc: Failed to set node id, please configure manually [ 113.969336][ T8375] tipc: Enabling of bearer rejected, failed to enable media [ 113.980489][ T8375] CUSE: unknown device info "" [ 113.980501][ T8375] CUSE: unknown device info "" [ 113.980508][ T8375] CUSE: unknown device info "" [ 113.980514][ T8375] CUSE: unknown device info "" [ 113.980521][ T8375] CUSE: unknown device info "" [ 113.980528][ T8375] CUSE: unknown device info "" [ 113.980534][ T8375] CUSE: unknown device info "" [ 113.980541][ T8375] CUSE: unknown device info "" [ 113.980548][ T8375] CUSE: unknown device info "" [ 113.980554][ T8375] CUSE: DEVNAME unspecified [ 114.003747][ T43] audit: type=1400 audit(1791714671.586:26125): avc: denied { write } for pid=8373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.095300][ T43] audit: type=1400 audit(1791714671.676:26126): avc: denied { write } for pid=8383 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.152300][ T5440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.154029][ T43] audit: type=1400 audit(1791714671.746:26127): avc: denied { map } for pid=8391 comm="syz.0.571" path="socket:[24600]" dev="sockfs" ino=24600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.154227][ T43] audit: type=1400 audit(1791714671.746:26128): avc: denied { read write } for pid=8391 comm="syz.0.571" path="socket:[24600]" dev="sockfs" ino=24600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.225988][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.261770][ T8396] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 114.261914][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.265975][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.267865][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.267973][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.268072][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.268165][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.268257][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.268356][ T8396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 114.415963][ T8411] ip_tables: iptables: counters copy to user failed while replacing table [ 114.417787][ T8411] FAULT_INJECTION: forcing a failure. [ 114.417787][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.417807][ T8411] CPU: 2 UID: 0 PID: 8411 Comm: syz.0.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.417824][ T8411] Tainted: [L]=SOFTLOCKUP [ 114.417828][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.417835][ T8411] Call Trace: [ 114.417840][ T8411] [ 114.417845][ T8411] dump_stack_lvl+0x100/0x190 [ 114.417865][ T8411] should_fail_ex.cold+0x5/0xa [ 114.417882][ T8411] _copy_from_user+0x2e/0xd0 [ 114.417900][ T8411] move_addr_to_kernel+0x65/0x170 [ 114.417936][ T8411] __sys_sendto+0x1b8/0x4e0 [ 114.417954][ T8411] ? __pfx___sys_sendto+0x10/0x10 [ 114.417975][ T8411] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 114.418001][ T8411] __x64_sys_sendto+0xe0/0x1c0 [ 114.418019][ T8411] ? do_syscall_64+0xae/0x790 [ 114.418034][ T8411] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.418050][ T8411] do_syscall_64+0x123/0x790 [ 114.418067][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.418079][ T8411] RIP: 0033:0x7f97c1b5ea0e [ 114.418089][ T8411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.418099][ T8411] RSP: 002b:00007f97c2b48e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.418111][ T8411] RAX: ffffffffffffffda RBX: 00007f97c2b4a6c0 RCX: 00007f97c1b5ea0e [ 114.418118][ T8411] RDX: 0000000000000020 RSI: 00007f97c2b49000 RDI: 000000000000000a [ 114.418125][ T8411] RBP: 0000000000000000 R08: 00007f97c2b48f04 R09: 000000000000000c [ 114.418133][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 114.418140][ T8411] R13: 00007f97c2b48f58 R14: 00007f97c2b49000 R15: 0000000000000000 [ 114.418154][ T8411] [ 114.435392][ T8411] 9pnet_virtio: no channels available for device syz [ 114.653286][ T5804] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 114.753831][ T5440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.808389][ T5804] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.809283][ T5804] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.809298][ T5804] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.809313][ T5804] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 114.809327][ T5804] usb 7-1: config 0 interface 0 has no altsetting 0 [ 114.811105][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.811116][ T5804] usb 7-1: Product: syz [ 114.811124][ T5804] usb 7-1: Manufacturer: syz [ 114.811132][ T5804] usb 7-1: SerialNumber: syz [ 114.814801][ T5804] usb 7-1: config 0 descriptor?? [ 114.817740][ T8417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.829197][ T5804] usb 7-1: selecting invalid altsetting 0 [ 114.881938][ T8442] tmpfs: Unknown parameter 'usrqunta_block_hardlimit' [ 115.055667][ T5419] usb 7-1: USB disconnect, device number 8 [ 115.203392][ T5821] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 115.333091][ T5821] usb 6-1: device descriptor read/64, error -71 [ 115.393196][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.573035][ T5821] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 115.713436][ T5821] usb 6-1: device descriptor read/64, error -71 [ 115.823677][ T5821] usb usb6-port1: attempt power cycle [ 115.949107][ T8487] fuse: Bad value for 'fd' [ 116.035374][ T8486] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 116.035433][ T8486] device-mapper: ioctl: error adding target to table [ 116.164636][ T5821] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 116.197012][ T5821] usb 6-1: device descriptor read/8, error -71 [ 116.455631][ T5821] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 116.473565][ T5821] usb 6-1: device descriptor read/8, error -71 [ 116.583282][ T5821] usb usb6-port1: unable to enumerate USB device [ 116.824782][ T8532] ubi0: attaching mtd0 [ 116.832446][ T8532] ubi0: scanning is finished [ 116.832473][ T8532] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 116.880004][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 116.999507][ T8532] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 117.049687][ T8544] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 117.049702][ T8544] device-mapper: ioctl: error adding target to table [ 117.099488][ T8555] FAULT_INJECTION: forcing a failure. [ 117.099488][ T8555] name fail_futex, interval 1, probability 0, space 0, times 0 [ 117.099507][ T8555] CPU: 3 UID: 0 PID: 8555 Comm: syz.2.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.099522][ T8555] Tainted: [L]=SOFTLOCKUP [ 117.099526][ T8555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.099533][ T8555] Call Trace: [ 117.099537][ T8555] [ 117.099542][ T8555] dump_stack_lvl+0x100/0x190 [ 117.099563][ T8555] should_fail_ex.cold+0x5/0xa [ 117.099579][ T8555] get_futex_key+0x1d0/0x14f0 [ 117.099598][ T8555] ? __pfx_get_futex_key+0x10/0x10 [ 117.099619][ T8555] futex_wait_setup+0x91/0x540 [ 117.099635][ T8555] __futex_wait+0x19f/0x300 [ 117.099649][ T8555] ? __pfx___futex_wait+0x10/0x10 [ 117.099660][ T8555] ? __pfx_try_to_wake_up+0x10/0x10 [ 117.099673][ T8555] ? futex_hash+0x311/0x400 [ 117.099689][ T8555] ? __pfx_futex_wake_mark+0x10/0x10 [ 117.099703][ T8555] ? find_held_lock+0x2b/0x80 [ 117.099720][ T8555] ? futex_wake+0x4ea/0x5e0 [ 117.099735][ T8555] futex_wait+0xe6/0x370 [ 117.099747][ T8555] ? __pfx_futex_wait+0x10/0x10 [ 117.099763][ T8555] ? __pfx_do_pagemap_scan+0x10/0x10 [ 117.099780][ T8555] ? do_vfs_ioctl+0x226/0x13e0 [ 117.099795][ T8555] do_futex+0x265/0x440 [ 117.099812][ T8555] ? __pfx_do_futex+0x10/0x10 [ 117.099832][ T8555] __x64_sys_futex+0x34f/0x4d0 [ 117.099850][ T8555] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.099873][ T8555] ? selinux_file_ioctl+0xb6/0x290 [ 117.099895][ T8555] do_syscall_64+0x123/0x790 [ 117.099932][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.099945][ T8555] RIP: 0033:0x7f0f49d9e1d9 [ 117.099955][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.099967][ T8555] RSP: 002b:00007f0f4ac6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.099979][ T8555] RAX: ffffffffffffffda RBX: 00007f0f4a025fa8 RCX: 00007f0f49d9e1d9 [ 117.099986][ T8555] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f4a025fa8 [ 117.099993][ T8555] RBP: 00007f0f4a025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 117.099999][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.100006][ T8555] R13: 00007f0f4a026038 R14: 00007fff1751e940 R15: 00007fff1751ea28 [ 117.100021][ T8555] [ 117.103652][ T8555] input: syz1 as /devices/virtual/input/input8 [ 117.163931][ T8558] overlayfs: workdir and upperdir must be separate subtrees [ 117.978379][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 117.978392][ T43] audit: type=1326 audit(1791714675.566:26144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.1.609" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a99b9e1d9 code=0x0 [ 118.008696][ T8560] nvme nvme0: failed to connect socket: -512 [ 118.021231][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.6.610'. [ 118.031818][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.610'. [ 118.031832][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.610'. [ 118.082712][ T8584] binder: BINDER_SET_CONTEXT_MGR already set [ 118.082719][ T8584] binder: 8580:8584 ioctl 4018620d 2000000001c0 returned -16 [ 118.092058][ T43] audit: type=1326 audit(1791714675.676:26145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.1.609" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a99b9e1d9 code=0x0 [ 118.101688][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 118.185026][ T8597] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 118.185045][ T8597] device-mapper: ioctl: error adding target to table [ 118.224721][ T43] audit: type=1400 audit(1791714675.816:26146): avc: denied { write } for pid=8604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.278997][ T43] audit: type=1400 audit(1791714675.866:26147): avc: denied { write } for pid=8607 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.337093][ T43] audit: type=1400 audit(1791714675.926:26148): avc: denied { wake_alarm } for pid=8611 comm="syz.2.615" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.368765][ T8615] Bluetooth: MGMT ver 1.23 [ 118.467715][ T8620] 9pnet_virtio: no channels available for device syz [ 118.577313][ T8557] kexec: Could not allocate control_code_buffer [ 118.651073][ T8627] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 118.651091][ T8627] device-mapper: ioctl: error adding target to table [ 118.668233][ T8639] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 118.677934][ T8639] cramfs: wrong magic [ 119.073031][ C3] net_ratelimit: 174 callbacks suppressed [ 119.112649][ T8665] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 119.112664][ T8665] device-mapper: ioctl: error adding target to table [ 119.126419][ T8669] input: syz0 as /devices/virtual/input/input9 [ 119.203157][ T5876] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 119.226684][ T8679] tmpfs: Bad value for 'nr_inodes' [ 119.302921][ T43] audit: type=1400 audit(1791714676.886:26149): avc: denied { read } for pid=8684 comm="syz.2.640" dev="nsfs" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.303357][ T43] audit: type=1400 audit(1791714676.896:26150): avc: denied { open } for pid=8684 comm="syz.2.640" path="net:[4026532946]" dev="nsfs" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.361581][ T43] audit: type=1400 audit(1791714676.946:26151): avc: denied { create } for pid=8689 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.373328][ T5876] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 119.374343][ T5876] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 119.374363][ T5876] usb 6-1: config 1 has no interface number 0 [ 119.374395][ T5876] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16 [ 119.374421][ T5876] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 119.376461][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.376477][ T5876] usb 6-1: Product: syz [ 119.376489][ T5876] usb 6-1: Manufacturer: syz [ 119.376502][ T5876] usb 6-1: SerialNumber: syz [ 119.423888][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.423980][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.430832][ T5876] usb 6-1: Error in usbnet_get_endpoints (-22) [ 119.483604][ T63] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 119.487379][ T43] audit: type=1400 audit(1791714677.076:26152): avc: denied { ioctl } for pid=8689 comm="syz.0.642" path="socket:[24872]" dev="sockfs" ino=24872 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.487532][ T8690] syzkaller0: entered promiscuous mode [ 119.487549][ T8690] syzkaller0: entered allmulticast mode [ 119.629106][ T43] audit: type=1400 audit(1791714677.216:26153): avc: denied { write } for pid=8654 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.645090][ T63] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.648023][ T63] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.648036][ T63] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.648049][ T63] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.648060][ T63] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.648089][ T63] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.649558][ T63] usb 11-1: config 0 descriptor?? [ 119.655987][ T5876] usb 6-1: USB disconnect, device number 15 [ 119.885646][ T63] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 120.533042][ T5876] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 120.693952][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 120.695623][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.696560][ T5876] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 120.696574][ T5876] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.696587][ T5876] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 120.696598][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0 [ 120.698429][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.698439][ T5876] usb 5-1: Product: ᦙङ킒ᾷ峇ﳞ걵ᒂ摮ꎰ﫫ᬸ賳ᴓ木偈ꉽ攀ෝ衴썫뢳꣈㲝ḑ꿕妸쭾ꆺ倌냣巻耫灜껲ꍫ쾴螧㣖藏嗓쾘㛩褆쾽䋱헖࣍隣鹝胒瞉ǁ럮趰竨랍譣ㅌ㇑裰㚬ꢅ信깴섪媞牍깻࣐켙倈離᣶瑇拨䣽۹㌂ [ 120.698454][ T5876] usb 5-1: Manufacturer: ␉ [ 120.698462][ T5876] usb 5-1: SerialNumber: syz [ 120.701171][ T8705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.701273][ T8705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.108887][ T5876] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 121.122278][ T5876] usb 5-1: USB disconnect, device number 16 [ 121.470243][ T5740] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 122.188043][ T8740] FAULT_INJECTION: forcing a failure. [ 122.188043][ T8740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.188063][ T8740] CPU: 3 UID: 0 PID: 8740 Comm: syz.2.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.188078][ T8740] Tainted: [L]=SOFTLOCKUP [ 122.188083][ T8740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.188090][ T8740] Call Trace: [ 122.188094][ T8740] [ 122.188099][ T8740] dump_stack_lvl+0x100/0x190 [ 122.188119][ T8740] should_fail_ex.cold+0x5/0xa [ 122.188134][ T8740] ? prepare_alloc_pages+0x16d/0x5b0 [ 122.188160][ T8740] should_fail_alloc_page+0xeb/0x140 [ 122.188178][ T8740] prepare_alloc_pages+0x1f0/0x5b0 [ 122.188197][ T8740] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 122.188216][ T8740] ? free_unref_folios+0x81c/0x1790 [ 122.188228][ T8740] ? free_unref_folios+0x7e1/0x1790 [ 122.188248][ T8740] ? __lock_acquire+0x5c0/0x1f40 [ 122.188263][ T8740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.188278][ T8740] ? __css_rstat_updated+0x1ce/0x590 [ 122.188295][ T8740] ? lock_acquire+0x1d1/0x380 [ 122.188308][ T8740] ? do_raw_spin_lock+0x128/0x260 [ 122.188324][ T8740] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.188340][ T8740] ? find_held_lock+0x2b/0x80 [ 122.188361][ T8740] ? __lock_acquire+0x5c0/0x1f40 [ 122.188375][ T8740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.188390][ T8740] ? policy_nodemask+0xed/0x4f0 [ 122.188426][ T8740] alloc_pages_mpol+0x201/0x550 [ 122.188452][ T8740] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.188474][ T8740] folio_alloc_mpol_noprof+0x36/0x260 [ 122.188487][ T8740] shmem_alloc_folio+0x135/0x160 [ 122.188505][ T8740] shmem_alloc_and_add_folio+0x371/0xd40 [ 122.188521][ T8740] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 122.188534][ T8740] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 122.188549][ T8740] shmem_get_folio_gfp+0x75b/0x1980 [ 122.188564][ T8740] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 122.188578][ T8740] ? filemap_map_pages+0x1155/0x2060 [ 122.188598][ T8740] shmem_fault+0x1fb/0xa30 [ 122.188610][ T8740] ? __pfx_shmem_fault+0x10/0x10 [ 122.188624][ T8740] ? __pfx_filemap_map_pages+0x10/0x10 [ 122.188643][ T8740] ? find_held_lock+0x2b/0x80 [ 122.188661][ T8740] ? __pfx_filemap_map_pages+0x10/0x10 [ 122.188677][ T8740] __do_fault+0x10b/0x440 [ 122.188693][ T8740] do_fault+0xb3f/0x1830 [ 122.188710][ T8740] ? __pfx_do_fault+0x10/0x10 [ 122.188725][ T8740] ? rcu_read_unlock+0x2d/0xb0 [ 122.188736][ T8740] ? rcu_read_unlock+0x2d/0xb0 [ 122.188747][ T8740] ? __pte_offset_map+0x179/0x310 [ 122.188764][ T8740] __handle_mm_fault+0x150b/0x2f60 [ 122.188779][ T8740] ? __pfx___handle_mm_fault+0x10/0x10 [ 122.188790][ T8740] ? pte_offset_map_lock+0x174/0x320 [ 122.188805][ T8740] ? find_held_lock+0x2b/0x80 [ 122.188822][ T8740] ? find_held_lock+0x2b/0x80 [ 122.188838][ T8740] ? follow_page_pte+0x536/0x1050 [ 122.188861][ T8740] handle_mm_fault+0x363/0xa20 [ 122.188876][ T8740] __get_user_pages+0x8ae/0x2c30 [ 122.188895][ T8740] ? __pfx_mt_find+0x10/0x10 [ 122.188913][ T8740] ? __pfx___get_user_pages+0x10/0x10 [ 122.188934][ T8740] populate_vma_page_range+0x267/0x3f0 [ 122.189027][ T8740] ? __pfx_populate_vma_page_range+0x10/0x10 [ 122.189044][ T8740] ? __pfx_find_vma_intersection+0x10/0x10 [ 122.189063][ T8740] __mm_populate+0x107/0x3a0 [ 122.189080][ T8740] ? __pfx___mm_populate+0x10/0x10 [ 122.189098][ T8740] ? up_write+0x2dc/0x5b0 [ 122.189114][ T8740] vm_mmap_pgoff+0x441/0x470 [ 122.189130][ T8740] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 122.189147][ T8740] ? __pfx_do_futex+0x10/0x10 [ 122.189167][ T8740] ksys_mmap_pgoff+0xe4/0x610 [ 122.189182][ T8740] ? __x64_sys_futex+0x358/0x4d0 [ 122.189199][ T8740] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 122.189215][ T8740] ? xfd_validate_state+0x129/0x190 [ 122.189231][ T8740] __x64_sys_mmap+0x125/0x190 [ 122.189246][ T8740] do_syscall_64+0x123/0x790 [ 122.189263][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.189275][ T8740] RIP: 0033:0x7f0f49d9e1d9 [ 122.189286][ T8740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.189297][ T8740] RSP: 002b:00007f0f4ac6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.189308][ T8740] RAX: ffffffffffffffda RBX: 00007f0f4a025fa0 RCX: 00007f0f49d9e1d9 [ 122.189315][ T8740] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000 [ 122.189322][ T8740] RBP: 00007f0f49e35888 R08: ffffffffffffffff R09: 0000000013732000 [ 122.189329][ T8740] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 122.189336][ T8740] R13: 00007f0f4a026038 R14: 00007f0f4a025fa0 R15: 00007fff1751ea28 [ 122.189351][ T8740] [ 122.263418][ T5821] usb 11-1: USB disconnect, device number 3 [ 122.365562][ T8753] ip6erspan0: entered allmulticast mode [ 122.421223][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 123.163612][ T8748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.163727][ T8756] nbd: couldn't find device at index -2146435068 [ 123.235185][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.250517][ T8781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 123.250538][ T8781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.251906][ T8781] vhci_hcd vhci_hcd.0: Device attached [ 123.252215][ T8782] vhci_hcd: unknown pdu 1 [ 123.255523][ T12] vhci_hcd vhci_hcd.2: stop threads [ 123.255539][ T12] vhci_hcd vhci_hcd.2: release socket [ 123.255557][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 123.261211][ T8786] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 123.261231][ T8786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.262202][ T8786] vhci_hcd vhci_hcd.0: Device attached [ 123.262486][ T8788] vhci_hcd: connection closed [ 123.263858][ T12] vhci_hcd vhci_hcd.2: stop threads [ 123.263874][ T12] vhci_hcd vhci_hcd.2: release socket [ 123.263889][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 123.296275][ T8791] Bluetooth: MGMT ver 1.23 [ 123.687209][ T8809] validate_nla: 28 callbacks suppressed [ 123.687218][ T8809] netlink: 'syz.6.667': attribute type 30 has an invalid length. [ 123.776895][ T8813] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.668'. [ 123.858869][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 123.858884][ T43] audit: type=1400 audit(1791714681.446:26160): avc: denied { bind } for pid=8818 comm="syz.6.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.869075][ T43] audit: type=1400 audit(1791714681.456:26161): avc: denied { write } for pid=8814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.943454][ T5740] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 123.943495][ T5740] Bluetooth: hci2: unexpected event for opcode 0x042f [ 123.969830][ T43] audit: type=1400 audit(1791714681.556:26162): avc: denied { write } for pid=8825 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.986866][ T8816] Console: switching to colour dummy device 80x25 [ 124.040241][ T5440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.049549][ T8832] netlink: 'syz.6.672': attribute type 11 has an invalid length. [ 124.049719][ T8831] netlink: 'syz.6.672': attribute type 11 has an invalid length. [ 124.165884][ T43] audit: type=1400 audit(1791714681.756:26163): avc: denied { write } for pid=8835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.192173][ T8842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8842 comm=syz.6.674 [ 124.239502][ T8829] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 124.249810][ T43] audit: type=1400 audit(1791714681.836:26164): avc: denied { write } for pid=8845 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.260327][ T8829] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 124.260467][ T8829] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 124.260523][ T8829] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 124.260617][ T8829] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 124.261129][ T8829] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 124.289064][ T8829] pci 0000:00:01.0: Adding to iommu group 1 [ 124.297730][ T8829] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 124.297742][ T8829] pci 0000:00:01.0: vgaarb: bridge control possible [ 124.297750][ T8829] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 124.318515][ T8829] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 124.321474][ T8829] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 124.329773][ T8829] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 124.353043][ C3] net_ratelimit: 138 callbacks suppressed [ 124.402431][ T43] audit: type=1400 audit(1791714681.986:26165): avc: denied { write } for pid=8849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.414050][ T8852] netlink: 'syz.6.676': attribute type 30 has an invalid length. [ 124.431679][ T8829] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 124.431771][ T8829] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 124.432755][ T8848] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 124.432755][ T8848] [ 124.433140][ T8848] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 124.435760][ T8829] [drm] features: -virgl +edid -resource_blob -host_visible [ 124.435771][ T8829] [drm] features: -context_init -blob_alignment [ 124.443598][ T8848] CIFS: Attempting to mount //172.20.20.170/share [ 124.526140][ T8829] ------------[ cut here ]------------ [ 124.526151][ T8829] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 124.526179][ T8829] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#3: syz.2.669/8829 [ 124.537006][ T8829] Modules linked in: [ 124.538799][ T8829] CPU: 3 UID: 0 PID: 8829 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.543711][ T8829] Tainted: [L]=SOFTLOCKUP [ 124.545489][ T8829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.549746][ T8829] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 124.551928][ T8829] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 86 f9 8f 74 1f 48 8b 7b 58 48 89 ee e8 d2 0f 72 09 85 c0 75 e0 48 8d 3d 97 fa eb 0f 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 52 11 72 09 48 85 c0 0f [ 124.560266][ T8829] RSP: 0018:ffffc9000308ef18 EFLAGS: 00010246 [ 124.562869][ T8829] RAX: 0000000000000000 RBX: ffff888100aab2c0 RCX: fffff52000611dbe [ 124.566522][ T8829] RDX: 0000000000000000 RSI: ffffffff8c91c2c0 RDI: ffffffff9249f1d0 [ 124.569792][ T8829] RBP: ffffffff8c91c2c0 R08: 0000000000000000 R09: fffffbfff248ad0b [ 124.573180][ T8829] R10: ffffc9000308ef18 R11: 0000000000000001 R12: 0000000000000000 [ 124.576517][ T8829] R13: ffffc9000308ef88 R14: 00000000000000d8 R15: ffff888039d34fce [ 124.579851][ T8829] FS: 00007f0f4ac4b6c0(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 124.581517][ T43] audit: type=1400 audit(1791714682.166:26166): avc: denied { write } for pid=8858 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.590487][ T8829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.592540][ T8829] CR2: 00007f04f8787800 CR3: 00000000633ba000 CR4: 0000000000352ef0 [ 124.597284][ T8829] Call Trace: [ 124.598466][ T8829] [ 124.599574][ T8829] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 124.601593][ T8829] ? __pfx__printk+0x10/0x10 [ 124.603391][ T8829] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 124.605577][ T8829] ? lockdep_init_map_type+0x5c/0x250 [ 124.607501][ T8829] virtio_gpu_init.cold+0x40d/0x1293 [ 124.609129][ T8829] ? vga_remove_vgacon.cold+0x1d/0x99 [ 124.610872][ T8829] ? __pfx_virtio_gpu_init+0x10/0x10 [ 124.612548][ T8829] ? is_console_locked+0x9/0x20 [ 124.614152][ T8829] ? con_is_bound+0x141/0x190 [ 124.615669][ T8829] ? vga_remove_vgacon+0x21/0x30 [ 124.617262][ T8829] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 124.619478][ T8829] virtio_gpu_probe+0x21c/0x360 [ 124.621012][ T8829] virtio_dev_probe+0x6a2/0xbe0 [ 124.622556][ T8829] ? __pfx_virtio_dev_probe+0x10/0x10 [ 124.624565][ T8829] ? kernfs_create_link+0x1bd/0x240 [ 124.626284][ T8829] ? kernfs_put+0x3f/0x60 [ 124.627778][ T8829] ? sysfs_do_create_link_sd+0xbb/0x140 [ 124.629525][ T8829] ? sysfs_create_link+0x68/0xc0 [ 124.631095][ T8829] ? __pfx_virtio_dev_probe+0x10/0x10 [ 124.632784][ T8829] really_probe+0x241/0xa60 [ 124.634652][ T8829] __driver_probe_device+0x210/0x460 [ 124.636920][ T8829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.639446][ T8829] driver_probe_device+0x4a/0x140 [ 124.641596][ T8829] __device_attach_driver+0x1df/0x320 [ 124.643939][ T8829] ? __pfx___device_attach_driver+0x10/0x10 [ 124.646075][ T8829] bus_for_each_drv+0x159/0x1e0 [ 124.647618][ T8829] ? __pfx_bus_for_each_drv+0x10/0x10 [ 124.649343][ T8829] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.651017][ T8829] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 124.652856][ T8829] __device_attach+0x1e4/0x4d0 [ 124.654674][ T8829] ? __pfx___device_attach+0x10/0x10 [ 124.656343][ T8829] ? do_raw_spin_unlock+0x145/0x1e0 [ 124.657889][ T8829] device_initial_probe+0xaf/0xd0 [ 124.659477][ T8829] bus_probe_device+0x64/0x160 [ 124.660990][ T8829] device_add+0x121d/0x1970 [ 124.662763][ T8829] ? __pfx_device_add+0x10/0x10 [ 124.664784][ T8829] ? __pfx___might_resched+0x10/0x10 [ 124.666680][ T8829] ? iowrite8+0x2b/0xb0 [ 124.668002][ T8829] ? iowrite8+0x2e/0xb0 [ 124.669316][ T8829] ? ioread8+0x8f/0xd0 [ 124.670635][ T8829] register_virtio_device+0x4f0/0x5d0 [ 124.672338][ T8829] ? __pfx_register_virtio_device+0x10/0x10 [ 124.674414][ T8829] ? __pfx_pcibios_set_master+0x10/0x10 [ 124.676127][ T8829] ? __raw_spin_lock_init+0x3a/0x110 [ 124.677739][ T8829] ? __pfx_virtio_pci_probe+0x10/0x10 [ 124.679353][ T8829] virtio_pci_probe+0x255/0x410 [ 124.680836][ T8829] local_pci_probe+0xdd/0x1b0 [ 124.682618][ T8829] pci_call_probe+0x176/0x800 [ 124.684774][ T8829] ? pci_match_device+0x147/0x7d0 [ 124.686751][ T8829] ? __pfx_pci_call_probe+0x10/0x10 [ 124.688658][ T8829] ? __pfx_pci_match_device+0x10/0x10 [ 124.690352][ T8829] ? up_write+0x2dc/0x5b0 [ 124.691807][ T8829] pci_device_probe+0x25b/0x400 [ 124.693571][ T8829] ? __pfx_pci_device_probe+0x10/0x10 [ 124.695204][ T8829] ? kernfs_create_link+0x1bd/0x240 [ 124.696880][ T8829] ? sysfs_create_link+0x68/0xc0 [ 124.698476][ T8829] ? __pfx_pci_device_probe+0x10/0x10 [ 124.700150][ T8829] really_probe+0x241/0xa60 [ 124.701585][ T8829] __driver_probe_device+0x210/0x460 [ 124.703396][ T8829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.705266][ T8829] driver_probe_device+0x4a/0x140 [ 124.706823][ T8829] __device_attach_driver+0x1df/0x320 [ 124.708537][ T8829] ? __pfx___device_attach_driver+0x10/0x10 [ 124.710442][ T8829] bus_for_each_drv+0x159/0x1e0 [ 124.711982][ T8829] ? __pfx_bus_for_each_drv+0x10/0x10 [ 124.714152][ T8829] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.715763][ T8829] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 124.717481][ T8829] __device_attach+0x1e4/0x4d0 [ 124.718939][ T8829] ? __pfx___device_attach+0x10/0x10 [ 124.720530][ T8829] ? do_raw_spin_unlock+0x145/0x1e0 [ 124.722151][ T8829] device_initial_probe+0xaf/0xd0 [ 124.723826][ T8829] pci_bus_add_device+0xc5/0x100 [ 124.725466][ T8829] pci_bus_add_devices+0x9a/0x1f0 [ 124.726993][ T8829] pci_rescan_bus+0x2a/0x40 [ 124.728458][ T8829] rescan_store+0xfb/0x130 [ 124.729895][ T8829] ? __pfx_rescan_store+0x10/0x10 [ 124.731504][ T8829] ? sysfs_file_kobj+0xe4/0x290 [ 124.733292][ T8829] ? __pfx_rescan_store+0x10/0x10 [ 124.734897][ T8829] bus_attr_store+0x74/0xb0 [ 124.736270][ T8829] ? __pfx_bus_attr_store+0x10/0x10 [ 124.737900][ T8829] sysfs_kf_write+0xf2/0x150 [ 124.739428][ T8829] kernfs_fop_write_iter+0x3e0/0x5f0 [ 124.741023][ T8829] ? __pfx_sysfs_kf_write+0x10/0x10 [ 124.742672][ T8829] vfs_write+0x6af/0x1050 [ 124.744425][ T8829] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 124.746484][ T8829] ? __pfx_vfs_write+0x10/0x10 [ 124.748023][ T8829] ? find_held_lock+0x2b/0x80 [ 124.749577][ T8829] ksys_write+0x12a/0x250 [ 124.750995][ T8829] ? __pfx_ksys_write+0x10/0x10 [ 124.752497][ T8829] do_syscall_64+0x123/0x790 [ 124.754308][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.756261][ T8829] RIP: 0033:0x7f0f49d9e1d9 [ 124.757657][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.764064][ T8829] RSP: 002b:00007f0f4ac4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.766965][ T8829] RAX: ffffffffffffffda RBX: 00007f0f4a026090 RCX: 00007f0f49d9e1d9 [ 124.769492][ T8829] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000009 [ 124.772023][ T8829] RBP: 00007f0f49e35888 R08: 0000000000000000 R09: 0000000000000000 [ 124.774922][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.777466][ T8829] R13: 00007f0f4a026128 R14: 00007f0f4a026090 R15: 00007fff1751ea28 [ 124.780037][ T8829] [ 124.781085][ T8829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.783518][ T8829] CPU: 3 UID: 0 PID: 8829 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.787237][ T8829] Tainted: [L]=SOFTLOCKUP [ 124.788714][ T8829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.792288][ T8829] Call Trace: [ 124.793546][ T8829] [ 124.794676][ T8829] dump_stack_lvl+0x100/0x190 [ 124.796429][ T8829] vpanic+0x553/0x970 [ 124.797920][ T8829] ? __pfx_vpanic+0x10/0x10 [ 124.799626][ T8829] panic+0xd1/0xe0 [ 124.801040][ T8829] ? __pfx_panic+0x10/0x10 [ 124.802710][ T8829] check_panic_on_warn.cold+0x19/0x34 [ 124.804558][ T8829] ? __kmem_cache_create_args+0xa9/0x430 [ 124.806451][ T8829] __warn.cold+0x191/0x318 [ 124.807993][ T8829] __report_bug+0x30f/0x440 [ 124.809583][ T8829] ? __kmem_cache_create_args+0xa9/0x430 [ 124.811670][ T8829] ? __pfx___report_bug+0x10/0x10 [ 124.813539][ T8829] ? __mutex_lock+0x26c/0x1bd0 [ 124.815332][ T8829] ? __kmem_cache_create_args+0x44/0x430 [ 124.817410][ T8829] report_bug_entry+0xe2/0x290 [ 124.819197][ T8829] ? __kmem_cache_create_args+0xac/0x430 [ 124.821285][ T8829] handle_bug+0x1cd/0x2a0 [ 124.822886][ T8829] exc_invalid_op+0x17/0x50 [ 124.824551][ T8829] asm_exc_invalid_op+0x1a/0x20 [ 124.826361][ T8829] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 124.828671][ T8829] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 86 f9 8f 74 1f 48 8b 7b 58 48 89 ee e8 d2 0f 72 09 85 c0 75 e0 48 8d 3d 97 fa eb 0f 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 52 11 72 09 48 85 c0 0f [ 124.835511][ T8829] RSP: 0018:ffffc9000308ef18 EFLAGS: 00010246 [ 124.837626][ T8829] RAX: 0000000000000000 RBX: ffff888100aab2c0 RCX: fffff52000611dbe [ 124.840660][ T8829] RDX: 0000000000000000 RSI: ffffffff8c91c2c0 RDI: ffffffff9249f1d0 [ 124.843422][ T8829] RBP: ffffffff8c91c2c0 R08: 0000000000000000 R09: fffffbfff248ad0b [ 124.846245][ T8829] R10: ffffc9000308ef18 R11: 0000000000000001 R12: 0000000000000000 [ 124.849001][ T8829] R13: ffffc9000308ef88 R14: 00000000000000d8 R15: ffff888039d34fce [ 124.851905][ T8829] ? __kmem_cache_create_args+0x9e/0x430 [ 124.853866][ T8829] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 124.855564][ T8829] ? __pfx__printk+0x10/0x10 [ 124.857383][ T8829] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 124.859467][ T8829] ? lockdep_init_map_type+0x5c/0x250 [ 124.861230][ T8829] virtio_gpu_init.cold+0x40d/0x1293 [ 124.863406][ T8829] ? vga_remove_vgacon.cold+0x1d/0x99 [ 124.865297][ T8829] ? __pfx_virtio_gpu_init+0x10/0x10 [ 124.866985][ T8829] ? is_console_locked+0x9/0x20 [ 124.868949][ T8829] ? con_is_bound+0x141/0x190 [ 124.870689][ T8829] ? vga_remove_vgacon+0x21/0x30 [ 124.872263][ T8829] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 124.874934][ T8829] virtio_gpu_probe+0x21c/0x360 [ 124.876559][ T8829] virtio_dev_probe+0x6a2/0xbe0 [ 124.878114][ T8829] ? __pfx_virtio_dev_probe+0x10/0x10 [ 124.880299][ T8829] ? kernfs_create_link+0x1bd/0x240 [ 124.882111][ T8829] ? kernfs_put+0x3f/0x60 [ 124.883492][ T8829] ? sysfs_do_create_link_sd+0xbb/0x140 [ 124.885626][ T8829] ? sysfs_create_link+0x68/0xc0 [ 124.887515][ T8829] ? __pfx_virtio_dev_probe+0x10/0x10 [ 124.889194][ T8829] really_probe+0x241/0xa60 [ 124.890955][ T8829] __driver_probe_device+0x210/0x460 [ 124.893061][ T8829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.894875][ T8829] driver_probe_device+0x4a/0x140 [ 124.896755][ T8829] __device_attach_driver+0x1df/0x320 [ 124.898702][ T8829] ? __pfx___device_attach_driver+0x10/0x10 [ 124.900458][ T8829] bus_for_each_drv+0x159/0x1e0 [ 124.902246][ T8829] ? __pfx_bus_for_each_drv+0x10/0x10 [ 124.904354][ T8829] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.905991][ T8829] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 124.908137][ T8829] __device_attach+0x1e4/0x4d0 [ 124.910070][ T8829] ? __pfx___device_attach+0x10/0x10 [ 124.911751][ T8829] ? do_raw_spin_unlock+0x145/0x1e0 [ 124.913666][ T8829] device_initial_probe+0xaf/0xd0 [ 124.915665][ T8829] bus_probe_device+0x64/0x160 [ 124.917161][ T8829] device_add+0x121d/0x1970 [ 124.918673][ T8829] ? __pfx_device_add+0x10/0x10 [ 124.920638][ T8829] ? __pfx___might_resched+0x10/0x10 [ 124.922309][ T8829] ? iowrite8+0x2b/0xb0 [ 124.923599][ T8829] ? iowrite8+0x2e/0xb0 [ 124.925255][ T8829] ? ioread8+0x8f/0xd0 [ 124.926902][ T8829] register_virtio_device+0x4f0/0x5d0 [ 124.928588][ T8829] ? __pfx_register_virtio_device+0x10/0x10 [ 124.930774][ T8829] ? __pfx_pcibios_set_master+0x10/0x10 [ 124.932867][ T8829] ? __raw_spin_lock_init+0x3a/0x110 [ 124.934750][ T8829] ? __pfx_virtio_pci_probe+0x10/0x10 [ 124.936751][ T8829] virtio_pci_probe+0x255/0x410 [ 124.938581][ T8829] local_pci_probe+0xdd/0x1b0 [ 124.940076][ T8829] pci_call_probe+0x176/0x800 [ 124.941859][ T8829] ? pci_match_device+0x147/0x7d0 [ 124.943847][ T8829] ? __pfx_pci_call_probe+0x10/0x10 [ 124.945514][ T8829] ? __pfx_pci_match_device+0x10/0x10 [ 124.947592][ T8829] ? up_write+0x2dc/0x5b0 [ 124.949374][ T8829] pci_device_probe+0x25b/0x400 [ 124.951314][ T8829] ? __pfx_pci_device_probe+0x10/0x10 [ 124.953430][ T8829] ? kernfs_create_link+0x1bd/0x240 [ 124.955446][ T8829] ? sysfs_create_link+0x68/0xc0 [ 124.957329][ T8829] ? __pfx_pci_device_probe+0x10/0x10 [ 124.959348][ T8829] really_probe+0x241/0xa60 [ 124.960973][ T8829] __driver_probe_device+0x210/0x460 [ 124.963091][ T8829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.965392][ T8829] driver_probe_device+0x4a/0x140 [ 124.967413][ T8829] __device_attach_driver+0x1df/0x320 [ 124.969526][ T8829] ? __pfx___device_attach_driver+0x10/0x10 [ 124.971882][ T8829] bus_for_each_drv+0x159/0x1e0 [ 124.973814][ T8829] ? __pfx_bus_for_each_drv+0x10/0x10 [ 124.975891][ T8829] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.977940][ T8829] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 124.980147][ T8829] __device_attach+0x1e4/0x4d0 [ 124.981995][ T8829] ? __pfx___device_attach+0x10/0x10 [ 124.984088][ T8829] ? do_raw_spin_unlock+0x145/0x1e0 [ 124.986180][ T8829] device_initial_probe+0xaf/0xd0 [ 124.988236][ T8829] pci_bus_add_device+0xc5/0x100 [ 124.990237][ T8829] pci_bus_add_devices+0x9a/0x1f0 [ 124.992183][ T8829] pci_rescan_bus+0x2a/0x40 [ 124.993996][ T8829] rescan_store+0xfb/0x130 [ 124.995760][ T8829] ? __pfx_rescan_store+0x10/0x10 [ 124.997681][ T8829] ? sysfs_file_kobj+0xe4/0x290 [ 124.999648][ T8829] ? __pfx_rescan_store+0x10/0x10 [ 125.001543][ T8829] bus_attr_store+0x74/0xb0 [ 125.003282][ T8829] ? __pfx_bus_attr_store+0x10/0x10 [ 125.005316][ T8829] sysfs_kf_write+0xf2/0x150 [ 125.007180][ T8829] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.009258][ T8829] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.011335][ T8829] vfs_write+0x6af/0x1050 [ 125.013061][ T8829] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.015330][ T8829] ? __pfx_vfs_write+0x10/0x10 [ 125.017175][ T8829] ? find_held_lock+0x2b/0x80 [ 125.019061][ T8829] ksys_write+0x12a/0x250 [ 125.020779][ T8829] ? __pfx_ksys_write+0x10/0x10 [ 125.022707][ T8829] do_syscall_64+0x123/0x790 [ 125.024446][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.026661][ T8829] RIP: 0033:0x7f0f49d9e1d9 [ 125.028442][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.035918][ T8829] RSP: 002b:00007f0f4ac4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.039183][ T8829] RAX: ffffffffffffffda RBX: 00007f0f4a026090 RCX: 00007f0f49d9e1d9 [ 125.042226][ T8829] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000009 [ 125.045199][ T8829] RBP: 00007f0f49e35888 R08: 0000000000000000 R09: 0000000000000000 [ 125.048143][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.051193][ T8829] R13: 00007f0f4a026128 R14: 00007f0f4a026090 R15: 00007fff1751ea28 [ 125.054214][ T8829] [ 125.056186][ T8829] Kernel Offset: disabled [ 125.057908][ T8829] Rebooting in 86400 seconds..