last executing test programs: 30.58681171s ago: executing program 2 (id=367): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xc03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x560, 0x0, 0x6}]}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000001000010600000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100"], 0x60}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80104300}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newroute={0x48, 0x18, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x4800}, [@RTA_MARK={0x8, 0x10, 0x400}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x0, 0x1, r7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) (async) sendmmsg$inet6(r6, &(0x7f0000002900)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x800}, 0x1c, &(0x7f0000002840)=[{0x0}], 0x1, &(0x7f0000002880)=[@flowinfo={{0x14, 0x29, 0xb, 0x200}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x68}}], 0x1, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x11, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 30.260345745s ago: executing program 2 (id=373): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000840), 0x8002, 0xa2000) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) exit(0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8948, &(0x7f0000000900)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x95}}, @delba={0x3, 0x2, {{0x0, 0x1}, 0x1f, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x82000000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) 30.138064287s ago: executing program 2 (id=374): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xfffffffffffffffa, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {}, {0x2}, {}, {0x0, 0x80, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe, 0x10}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x76c}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8005}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendto$packet(r3, &(0x7f0000000080)="00231800068cae23b89b88f08c409023e18255b70da4d72a6b585d9f0015274d697657e810f60000000016c4d75ba31c", 0x30, 0x4000000, &(0x7f0000000100)={0x11, 0x1b, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000180)=0xffffffffffff7fff, 0x8) 30.050590004s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 30.050208025s ago: executing program 2 (id=376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) ioctl$KVM_RUN(r0, 0xae80, 0x0) 29.430538206s ago: executing program 2 (id=380): socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) mount(&(0x7f0000000180), &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='rootfs\x00', 0x0, &(0x7f0000000240)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r1 = socket$inet6(0x10, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0xfffffffffffffc67}], 0x1}, 0x4000) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) (async) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) 29.371721469s ago: executing program 32 (id=380): socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) mount(&(0x7f0000000180), &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='rootfs\x00', 0x0, &(0x7f0000000240)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r1 = socket$inet6(0x10, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0xfffffffffffffc67}], 0x1}, 0x4000) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) (async) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) 7.437634379s ago: executing program 1 (id=681): set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xe84) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@cache_fscache}]}}) (async, rerun: 64) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x3882009, &(0x7f00000001c0)='discard') (async, rerun: 64) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000280)={0x6, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, {{0x2, 0x4e27, @empty}}}, 0x108) 7.30015042s ago: executing program 1 (id=687): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) r1 = accept4$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x800) bind$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r3, &(0x7f0000000300)={0x5, 0x80000000, 0x0, 0x4}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x400, 0x0, 0xfa419563edc5b992, 0xa, 0x3, 0x1}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002400)={0x10, 0x0, r6}, 0x10) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000002480)={0x2, 0x0, 0x18}) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f00000024c0)=0x8000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x5, 0x9, 0x1, 0x2, 0x3, 0x9, 0x1c4, 0x40, 0x14, 0x4, 0x9, 0x38, 0x1, 0xffff, 0x80, 0x1}, [{0x70000001, 0x2, 0x3, 0x5dc38db9, 0x9, 0x8, 0x401, 0x8}], "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", ['\x00']}, 0x1178) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000003680)=0x9, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003780)={0xa0, r8, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) ioctl$int_out(r4, 0x5460, &(0x7f00000038c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000003900)={0x80, 0xfeff, 0x203, 0x80000000, 0x622, 0x2, 0x7fffffff, 0xfffffeff, 0x1}, &(0x7f0000003940)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000003980)={r10}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), r7) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003c40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003a40)={0x194, r11, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2c5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2ae1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe4a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x91}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24008000}, 0x200400c4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003cc0), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000003e00)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d00)={0xb8, r12, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2cfd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x865a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8146}, 0x4000000) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004140)={0x11, 0x8, &(0x7f0000003e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003e80)='GPL\x00', 0x7, 0x65, &(0x7f0000003ec0)=""/101, 0x41000, 0x44, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000003fc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000004000)={0x0, 0xb, 0x3, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000004040)=[r7, r1], &(0x7f0000004080)=[{0x5, 0x2, 0x6, 0xa}, {0x5, 0x3, 0x2, 0xa}, {0x4, 0x1, 0x10, 0x3}, {0x0, 0x3, 0x0, 0x9}, {0x2, 0x4, 0x9, 0x7}, {0x3, 0x2, 0x8, 0xc}, {0x2, 0x5, 0xc, 0x1}, {0x0, 0x3, 0x10, 0xc}, {0x3, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x5}, 0x94) 6.960327268s ago: executing program 1 (id=693): r0 = getpgrp(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$UHID_INPUT(r1, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8000]}, 0x8, 0x800) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x2, r0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000340)=0x80000000, 0x4) bind$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000003c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) write(r3, &(0x7f0000000400)="01", 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000300)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)={0x239, 0x7d, 0x2, {{0x500, 0xf8, 0x0, 0x5000000, {0x10, 0x0, 0x4}, 0x800000, 0x0, 0xffffffff, 0xfffffffffffffffd, 0x26, '\x04nodev{cvfox\x92\xff\xff\xe9\\e\xf6+:\xc3\xff\x80\x02\x1f\x00\x00\xd0w\x93>vM\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x1da) 6.899292764s ago: executing program 1 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x2) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0xc4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) write(r1, &(0x7f0000000380)="9b16b43b1eb9c1e01c8b0d3843d8ff29f56fd7205be87ee9b8b91186829422f37f614d095d008cca24f2a315e37aed9899bca80a3cfd23fc28329619e84cbf2e9a8c79d86ca8e1b5bf80b34848116249c9c6f9fa12e3b1fa383765b684ab7ef5ba98b887f8b581935a54538a0cd3f405f98d9578102fce9d566ecbe48c5282699b0590b763bc86c98c297f69f8451d67a9b4cd714c8d921eabdac1b730008984438c2c9c8ef24cb39ac5c13e5657858763edee89ec62fda79983a1754db5c59cf0038bf899c2d211b3099dcc6e532b39a36d0c4189ae52807a6be1a8116b228b671aff2a8237ef921615b80c9eb5beed5b", 0xf1) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) (async) write$P9_RLERROR(r0, &(0x7f0000000180)=ANY=[], 0xa) 6.798256065s ago: executing program 1 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s0 device_path=/', 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x69b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb7210}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x4c}}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_clone(0xa00200, &(0x7f0000000140)="397e1a922bea36891d42aacfa09c09b195ff206a9a8b06232f9835cb96f87ec31968457e5782ea2327d1520ac1f5b4aed2ca30958637ee3ec5c405e7a6806e15f738d3387eb167d580417b0cba69e65feef2c3806c16e614e628e87c43e1", 0x5e, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)="b90305226ae64f40f7cf4d81ed6a72c91b55c57a5a01e963478e2b6636d2b8496a9587a53a5cc631012b8ced40ce84c7d9a6a2838b378abf252344c5e40c695e675c397390e7a9c5fd3d008908e3239c91800b5ddc9267be218f6c5b60d2a86c643bc801b1cd86f646292f85f391d1a7e245dd1b3dcfbae84b84143bcfe647a85746aa8a3524380eb97f3a1d6bdc45f1") sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x181}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000700)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r11], 0x54}}, 0x0) 6.330076432s ago: executing program 1 (id=699): fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0x4018aee3, &(0x7f0000000440)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @empty}, 0x1c) r2 = socket(0x1d, 0x2, 0x3ff) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x1, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000054}, 0x80) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000004000000000000000600ff0901a101851075dd950609018102090191028511750895130901810209019102c0c32a"], 0x13c) write$UHID_INPUT2(r3, &(0x7f0000000300)={0xc, {0x1, "10"}}, 0x7) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f00000003c0)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) 2.308396006s ago: executing program 4 (id=738): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2.230334454s ago: executing program 4 (id=739): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'veth1\x00', 0x1ff, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 2.22980811s ago: executing program 4 (id=740): syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x0) (async) r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ccf5e8e67650aa30c2e5d327f828f5ddf9312ca74ef98acbeeb7d6183607950e44fae3a0173e499ed396877e8880cd5af961a2f81e9d62c5d41da0f1dec4eae5d6a33db05eff0737b94eaee8cda574d958f2bcc523f1b28b488e4aabcdbba01138bc9d6ac8147c01e2e2855d3bb0ccd717f5b3e58acde119eaa2b3a6920c190c59ae6d2a8f7ffc1d5abc8ba941"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x80383, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000380)=""/182, &(0x7f0000000440)=0xb6) (async) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000380)=""/182, &(0x7f0000000440)=0xb6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000046b983e3b9e28f2f13f4c78600000a0000040900010073797a310000000008000540000000020900020073797a31000000000800fffffc1400000011000100"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000010004100000000000000000003e697c5b195d1606073280500000a2c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000eeda6f6fe1dd8747f05dacde2e18e2fab8a023b023de93549938c710d16331eb36b8e49cdb3ae5453e9de9c8093182380b56422fb5dd36dec9c98167152a5c40837322ceeb7e08556bbe30f4b37915d989d47509255b57e73e9da296902a49fc652dd1a3e40ca4ecd18053613dfb960400230c2892aaf65d15219de84adccecc9a76b0875610c50c6800000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) inotify_init1(0x80800) (async) r8 = inotify_init1(0x80800) inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x81) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0x5001}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000880)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 2.107337552s ago: executing program 4 (id=741): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x1, 0x6, 0x9, 0x8, 0x9, 0xa, 0x9, 0x5, 0x2, 0x2, 0xd, 0x8, 0xe, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1ff, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000005c0)=""/26, &(0x7f0000000600)=0x1a) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x20, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000180)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x48}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.959980137s ago: executing program 4 (id=742): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000004c0)={0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000004c0)={0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) (async) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000020000000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000002300000000000000480002"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x40, 0xfffffffc, 0x7, 0x80}) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./config\x00', 0xff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[], 0x10b4) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) 1.959316587s ago: executing program 4 (id=744): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x7]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @loopback, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x3c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$vim2m(0x0, 0x1, 0x2) socket$netlink(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r4, &(0x7f0000000640)=""/4151, 0x1037, 0xa8cf) timer_create(0x0, &(0x7f0000001680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000016c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000001700)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000001740)={{0x77359400}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) r6 = dup(r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_MAC={0xa, 0x6, @random="2b013ecd487f"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) write$nbd(r6, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x2, 0x4}, 0x10) read$FUSE(r6, &(0x7f0000008200)={0x2020}, 0xffffff0a) 1.910516626s ago: executing program 3 (id=745): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0408"], 0x7) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@rdmsr={0x66, 0x18, {0x3f1}}, @nested_amd_clgi={0x17f, 0x10}], 0x28}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000240)="f20f117200650f01f166b92d09020066b83400000066ba000000000f300fc7af00a0edba4200b002eebaf80c66b8ce1c608d66efbafc0cec0f20e06635000200000f22e00f01c866b9be0200000f32", 0x4f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f00000002c0)="392dc7b6d2071c91cf0fda85471d17bde8ab4623187570ae1258620cd4c11bd476360999880663f353696280ec9e808cfaaad2f57540b4ec9a5cfb088b3cdc579a36a85004fe9c114e4b5393960f0b166b457351f8682b5af4e7450f1bb0e5c55b68e10c9b6cdc06bafa0d86953dd4d8fb17c7d2ef55b37e4c26bb5557b23b5ce9dfc2a30f1b461331d187b7dc08c864339afae88f49c065498b04dd9e89d34b4144ddc02c4e0efa78b3995110f95bec246417c1204a5afe78fff917c5", 0xbd}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f91892a5df4ceb2b821d36f5c13402b40c12227c57e4a1229105e81697caa3917e230c25577f21d4f49c7207179d662cee8b3d8de999b6ff78806a0d6f6d2210793a1605bdeea8c016269c0c8e482cfcdbf5fdc51fbbf279c076a07b78545487332bd287b82855764f712bdaffb2649a618fe6767494cc73fc11c4a847217edf50fc5fe3905d8ec485882311", 0x8c}, {&(0x7f0000001440)="c2a18936759a7cb4b6dd6b5a0750a9da9d77ff3a40145b8273fdbb2710c405", 0x1f}, {&(0x7f0000001480)="ef67c1894f9689c23d8d8a04ca8ab9d8c84cc19535df43431f4302534aa3a8d59c752e98c4059db0a212f0a7e13b6b46b002b602aab1d342f161d3591d70a5afdfcddd064cc40b2677feeb0093558f527398ffc69c26fcd37a91c05f62770dd7140e78c50c3158136732ad1de1e6a5ffcb108426fb287c898188fc4341bcbee892af7c6070a64912224ccf7e63c83097ea272774157bd0403688dc93002d7caace99f202d437182837e9d0f6a91bc052d2d08eac424e0a71b33f409b462086b033e5d210", 0xc4}, {&(0x7f0000001580)="004d2652a9c79029c429f7ba3aa2e719bc54543c5d6339cf26d8d12e69218d99b15add5ab012a77ed6084e89cb7dd17d53348ef7c9ca0a01ffd04e16b0424fe2978c37805b1151327631b5ed3a29ba82a0eefcbd1c790a44f6017fda775b9bd3eb687230f758ea732b0ca8b07be85d056393d43c014617c678982f25225ff9bea02d935a7012eb6dea33fbd271f558f435", 0x91}], 0x6}}, {{&(0x7f00000016c0)={0xa, 0x4e24, 0x1, @mcast2, 0x909}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001700)="19f584a8a09b9b290f776bd34d9722c73e2a65cc4fb6941d2b345872951c48b48acb2344093b9fffd56f2297023a90be2dd06d7befb3471bb2e48c27943d73793feeffba365e2daa05f95d27d3744e28724d64df105ac9d70b3fd89eaabc593c513240992d72543eef10f37eb402b7e054f1a15f992662c3a97f74b30a3ddd8f1d11e2a4c04e676ca3dc0f8373d3ce6e44bef791f4f4af064b1e513e2cd257073f06b99e53c2663633bfabb3c25ca72982079cb694649743df9b595b4156e410370620215c0f790ccf171b8cfd6281432d2f9f3b70be9a25e6dbe38fc5b2d84481a5d3f679c83d585f73faaf5d52f58422087e1a31", 0xf5}, {&(0x7f0000001800)="1b9cb4a38d143b6951fce15f887d0cfb20f7d171d1206a97b91e92344ab28c420a4ae2b184504e2571effda7beb18aee3a9bd9075162fa4e004fd649bb0827a0922bff740b9b39565a54cc41f58174a77e29f2643ba3b53985", 0x59}, {&(0x7f0000001880)="21680b4b8beb9e5df2e3f975239ac9ee619856", 0x13}, {&(0x7f00000018c0)="fdc0305939baacf87c53bb7942d3a1b7418a69db292bf6d0c1e2952203f5c4d7fc1e81a430e063552a0adba91e5d15be9d625643627bb093c9694533354b4d6ba4027112a56872e397b9eb7a140ffdc4e870dcb916e1cc6920590be9a0f4a7196b7f3312844e31c5a0d17b3a6a2a1f7795f1954beb4dc1feadf36fffb563f0f1dde35f14c98886d0876a82b1499969b1a670e1123f30addc8a1f092e8096d326e0aaa50deeb2c5edcfccc7fbad03540a6afd7d7ad0e5801723f6c81fef8d8821115b49b37570856a", 0xfffffd64}], 0x4}}, {{&(0x7f0000001a00)={0xa, 0x4e23, 0x157e, @empty, 0xcf0}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001a40)="77bd064b9e56c7d01a5f9ca03b98ce2e0a19e6afbc921ac2f6beecf515aa379f896719a4f5b58141703b93dd780dc485cf3c858e5b791842c34f43c5f99a57fb644bb196dc3db5da51fe915bf51d6fce620f60680854245773e670d7a46bd4c81473d9c30e0b418b250a4ebecb4ef69ab27cc52c40b80420f1439c7393996ad26dc8ba7f6dac4a741bcc75bd11a2a25f14696020e3a60d072ffb09c564b9300cb890a1e71f050181412f0ab5b71b088e3f6edb2de8e77c58156468cd883cc1374a931f84a07160322c8121008a1e26b9e50e2bdb41077d1b6f97675fffbefe151f5294b46345d5686cb1d70e22f7f61558602767", 0xf4}, {&(0x7f0000001b40)="6efbd6661631d15774c27275ceb26974d550017edc29490953d6d64683579a76bea28b31bd0bd252ecc13e64993bff9c65a4a8433c443a1b279d3025cb2ee4ef1d1b788cf5d7c70e135b19f78eb5fb0b4342385bdeff50f5abc7a540320a84bbdfccb53a34112ea3e11576", 0x6b}, {&(0x7f0000001bc0)="53e00ff6d1d954d01a8f6f9202d4721a1c230988e53aa8f886fbef1705383f6e135abc617cac789dbf903a94505ddc82637122703a4e19edf105f78a1f450a3e41bbcca591514c27df69c3d522d5d41c6a536c2643a11c5a1f8deb26f95a5542f8e54041864121e469082a58a39f08259518799e", 0x74}, {&(0x7f0000001c40)="85d850ec59b78a65456c27f5b0602cb34a4d7ffcc212c19369c635c6464f10ebd7aa7ec79dc3e3d9b0ac131d146cb77956617f34", 0x34}, {&(0x7f0000001c80)="a34f493c9ab6faa68ccadb0ef622a29e41315bee81299f09ac8ef1536910b7068488c887be7600f2f6b1b5c086d53c0576d728e41626e0b4da2b430a6656675108e7ee9769330a263b9656456c69cef0df88d154d53e695675ccdf5dadfbfc25ed5b8e16d7cee2c6eefe08ba18d6aca7ca279b5e94441bc3b3b6bc", 0x7b}, {&(0x7f0000001d00)="9d9493b886561d0ca541a512f4bbf48646e63a1a383dc220019643375dc06807ea884e5e62982fb31569f6", 0x2b}, {&(0x7f0000001d40)="7e36afe5e4df5df6787675026c6b51ba4067eb269a0e4618d683def9d5bb4f3c76f213230cb5700934451369c6d628376455b9d76d0b537357f1b926906c7b59388c63fae0996a4877f65005c806e039be3678f0cbc02c0428817c3a3fb61899c9c81e661c14af7b681cd7fb31aaf194f4054e7ee049af765d1891ff096a8c0672bba56b6ac95e31f46f4d0f14eea8ca18e7fda318204296e0ec8df7e5ab82b7cdd9cb3603715b", 0xa7}], 0x7, &(0x7f0000001e80)=[@tclass={{0x14, 0x29, 0x43, 0x7}}], 0x18}}, {{&(0x7f0000001ec0)={0xa, 0x4e21, 0x4, @private0, 0xaa8d}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f00)="fb77d5ae17b87a0cd1119a7ac4cf67e4232b498fc4c99856678440f607a08299c678f0bed6170a785b35a772da3ed6de38b3fca23e728e008c693910476c3a810b21ff0003677e5eb1", 0x49}, {&(0x7f0000003180)="6641d246a02a94ad68037952305696944c8ad1c650f0a66f2692796e932d56b8dc20c2839bc416aec72018e842064d6fd63f2f5a6238174becd76fbb976c60e794cb5fb790cd33c4a66d46afc39e1ea9be42f26d67268cb12d291914d10c8109faddeeab90b4c44c70a527be45444a56ea88c8857d38d530ff2577437f39e6bf6c6f68dccad653c4345fab4ca3074d472ab7b6af556e854caef679e1123eb12b9396ccbee0f083a36780ba976b1cb4539b88dcd6f3e41e2974b66abb7208cfc0eaa105934f724efe932ddf5ac1ab3cde852a26cf362b1237262efda27ca31a963b7309508aa501c213ac5673ced10286d088", 0xf2}], 0x2, &(0x7f00000020c0)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x29, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x4e}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6f, 0x200, [0x2, 0x6, 0x4, 0x4, 0x78b]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002140)="bf4a175575de4046177541654ee4bd03d7b2a2d5334ade2adb7adc7df124a8985a6ee53435059074dcfcba616e2d7e97e3aa415f33a782fe", 0x38}, {&(0x7f0000002180)="c796e1e4d5b1c5af22152b805ed23f79771bc8494840c6f82ba5e0cd96977fc95de12786e2bd65e0f480d516718335c8161251dd43e8a2c0879c1a3cc03a3219c5994b96748741590e4381425dae7d5a6825b8ca87f6788b0388023768939195731a6c51a657bf965303f2053a9d6dfb0d99af89cb27ba4057b5b9a2d21f01520a0ec69a301a2052ef759a696413077f7395528ed2a5837222a93f5efe846154d9a47dacbce098866617909a23c3a7e59cdb77a3d4cc6f2cd2dad7909c48e0f6", 0xc0}, {&(0x7f0000002240)="b0ac4a3ff24f226060088b61ebd5", 0xe}, {&(0x7f0000002280)="8b4906b652d6810040471bdcc0c40002b8f63ef3741bd37572d8437d56d0217b3f2ca6f8b7fa85f537e4038f34d0025bd450bfca03e2ce6b99ad8837d9b0d8e732458704df7d786397a9bf17e932b234aa2fd59258e336ae005a3ded100ca4c6a58c7ba8d362e7fba323b05ee22be35e5f4ce380ae322cce000cabd84083de8fe0ca71c92194c1ba178eaea2d2aca5f2b14663e7f3df52d9", 0x98}, {&(0x7f0000002340)="f140c0bd739fed82774c0259618b874b6474efaced3af6bb500c1596a9257586820ca279e34f83b5a82fc6687e878d87bdea2f085b5e928f2478b6f9b1acfc178f33346529e99a66c2ac364dbcad5bead5e23e571abd6b08e33623647d915f5b8d4c2b30e0b2331ac82c222686709343772d46bfdb01ce1467f939ff574adba6b2885be665d66ff57060e4f507588edcc98d7464f7e3cb7ce609cea710001591ec42afd5dac088c904f2afeeb78e12f47f0b070211a67c5cdd7abdbdbe7b0ceb2465cef0b60c5cd2", 0xc8}, {&(0x7f0000002440)="c1618a7a37bbde34b53c201372afded9f35cd8a0de12cd0fa97b41098d42b355b52a8f18cd736e2168b440a67a94df4d141f8d570825bd9bf6ed32783f8f8dd3ace9700af625d26747a03105ce76f72119cae4c04f6276c6cdf0d5ddb642ec265256e4588f4c1b5838ed6a90ddc4ecb108c52c04e8f0e3a2f98f51d61d92ad7bed61453e918ba9a0860c80a930b9c69e3c885a1b56f76f91c8234277ab5f98efc637", 0xa2}, {&(0x7f0000002500)="669b13c660fad386093dc68c8a997712b60d7fd49180844136113997fddbab3080570608a3456ef55c88f07e19cbff7378a5041839c353f74fc1e05e4459e10b494e515f8124007a19265210f742f0fec9776ba08e5bad33afb3fcbefd0696e9ace965d0a8ad4b5047c69a183439cef88d8bffaff469c60c29aa64cf2a40db2f12e2d06b7ecb01d3912581c14fd81750a62447099bf9c8ab591157b1abc84c6ef1576fcfa01d080b9772c382ad44aef707", 0xb1}, {&(0x7f00000025c0)="ed2dacada1d9df1dbcee951f328e5a242c3cb95d657519f553638f31d0cff9e719b8db5aff58ad6c2054dba7bb9c", 0x2e}, {&(0x7f0000002600)="d6b5be10720054788e0d2fd14c671326fa03207dbc1fffc70fa57fcbe71b7f021afdc8b8752f99ecac2315be0814f616e4b07cb5cfa54513182035fce616da332410a9b9ed0aeb44f9f33a63b4bd30f13eac31a292d5ad2b74b5d556b7fd1ed5a5cc362d72265ef0a3b56e58757e3112b53fc8a73c4dd8808a86682b103647a15d6f152de8b35309d9ad497207cfcaa718a3bcb02bbba270c215978502eff793c0e6ad15f75174cf3fd2c7", 0xab}], 0x9, &(0x7f0000002780)=ANY=[@ANYBLOB="88000000000000002900000039000000000e000600000000ff010000000000000000000000000001fc010000000000000000000000000000fc00000000000000000000000000000020010000000000000000000000000000fe8000000000000000000000000000bbfe8000000000080000000000000000bb20010000000000000000000000000002140000000000000029000000430000000100010000000000"], 0xa0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002840)="8c7acc3bf55dcca7ec4238d56536cafb11ba2b44856b31029ff238ae28bf336f3a4c6cccf9785c0064569375c82316444ce41ee9c582843301399308442bc879179fd5eae4885f08f591b40b55dfd140b5dfc7857d443c6f30164102", 0x5c}, {&(0x7f00000028c0)="746967d86b72180011189fdfa52c0a41a25634db6b30828a7ee4033bc9b19a6f65f841ce5d0746cbad44e77f20614d512bcf1d385dfa83541b096b3bdf2ce53b48066ec8d771f79d3d75abe4c8c8259ea626667fb12eb40a2da1780f7310150eff44a1aad56d70368e3d8a1a29bae7b8356ef65695cdb14b1b16c3223acf2b81ae2c18510b7c4060960ec74eb5b45d4b055921d6cc1cc4a1605b3990f0d3274d37796b52675edb2008f5d5ebdc1e140dc806f04af67bd18cdf8abcadb6a1660a5b", 0xc1}, {&(0x7f00000029c0)="7a1c9cbbd727e7fbd3a7f06b8c8091fe189546e74e57d4263493d02eadb70f67cb2d737a8b6579678035f1d96a53f6bd92d979a7919650b5e1480e3d36b5ced41ae90d760c3f2afe5bbb3c01c1cd16d3f9c04dbfbcaea0358a7ce2c95214568953f93eb15ccb4b1761c3b4baec211841966dadc696945f67823b5e16", 0x7c}, {&(0x7f0000002a40)="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", 0xfe}], 0x4, &(0x7f0000002b80)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x108, 0x29, 0x37, {0x33, 0x1e, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x58, "f11726f4f1a345390331b3222e7b258c6f9c824535a0d3711e285a9b20223ff26177561d15d08a74c55b0a3d1fb2ee03e1f14ecb8d9f290fcc74221a2a57f997b35161c9333f1e378b0dd715b1c999df6dbea394b0f7af8c"}, @enc_lim={0x4, 0x1, 0x10}, @generic={0x10, 0x2f, "250e8767543a301916ed32cb8169afc3c47c36033ee598e7ed40480d3c7e41ded303f5093603efb27a1cc5ef71aa13"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x3, 0x7fff, [0x8, 0x2, 0x7fff, 0xe8, 0x0, 0x100]}}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x25, 0xd, '\x00', [@pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x929, [0x0, 0xfff, 0xb149, 0x3, 0x7, 0x6ff4ede2, 0xd]}}, @padn, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xff7b}, @ra={0x5, 0x2, 0xbd29}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x11, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x401}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x58, {0x0, 0x14, 0x54, 0x7, [0x7e, 0x5, 0x6, 0x0, 0x9, 0x8, 0xdd4, 0x6e28, 0x8001, 0x5]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x240}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)="d798430e7e1e327afe7d07c2b9bdb7f233c5508cb15cacba494bfb1d7b26eeb75942ffeef10b5fae3a37172a5877853ea5367eae17207d753722c3cb157a45f23ba72d51dd28c95913f217a0a0d22359b2615c9bcbdba0f9fc7a81c15b311a32f841c6d4ed3435ad17088951f65043cc4fddcaac345558c5f95df5c1d8bf93fd6c3c40bc01b9c4bb64991432aa27cb72e60c783c27993b5a5a17b1b89fd3ae5598a9a3082011ba71ed7042f92dcb2a683516be4f487361bd728432983b0765db70c6292b0995cc65b3779f665790f8368f146ff5d4b969b94502696f04610d46e353fcc1743ec4b6bc29b4541434c7b8db14969cf1ff83633a", 0xf9}], 0x1}}], 0x7, 0x4000) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.240598814s ago: executing program 3 (id=749): r0 = epoll_create1(0x80000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfffffd9d) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)) 1.140582717s ago: executing program 0 (id=750): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c8f8) 1.060667572s ago: executing program 0 (id=751): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 977.152897ms ago: executing program 0 (id=752): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xea030828}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x341141) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000240)={0x8, 0x80000000, 0x1, 'queue0\x00', 0x8}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'gretap0\x00', r3, 0x8000, 0x1, 0x2a, 0x0, {{0xb, 0x4, 0x0, 0x2a, 0x2c, 0x66, 0x0, 0x3e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x8e, [@loopback]}, @generic={0x7, 0x11, "d373392d6c87c044df4e6a0c01e551"}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1a5d5fe8e8990966) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x12}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {0xb, 0x8}, {0xb, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0000}, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000009c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000a00)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x1d, &(0x7f0000000780)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0xe, 0x1, 0x0, r7}, @alu={0x7, 0x1, 0xb, 0x8, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000000880)='GPL\x00', 0x1, 0xd5, &(0x7f00000008c0)=""/213, 0x41000, 0x0, '\x00', r8, 0x25, r7, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000ac0)=[{0x3, 0x1, 0xd, 0x4}, {0x0, 0x5, 0x1, 0xa}, {0x5, 0x3, 0x3, 0x1}, {0x2, 0x4, 0x9, 0x4}, {0x4, 0x2, 0x1, 0x6}, {0x5, 0x2, 0x1, 0x4}, {0x2, 0x1, 0x4, 0x1}, {0x2, 0x4, 0xf, 0x6}, {0x4, 0x2, 0xa, 0x8}, {0x0, 0x5, 0x8, 0xa}], 0x10, 0xffff}, 0x94) getpeername$packet(r7, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c80)=0x14) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000cc0)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r11, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000f40)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000f80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000fc0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001000)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r10, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x5c, r14, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22004084}, 0x4040000) 917.937312ms ago: executing program 0 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b60080001000040d88d5f6aaa33d01fd9b222104", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c0001001790000002000000080001"], 0xb8}}, 0x2) 916.682513ms ago: executing program 0 (id=754): mkdir(&(0x7f0000000000)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000ac0)={0x2020}, 0x2020) r2 = landlock_create_ruleset(&(0x7f0000002b00)={0x7f6e}, 0x18, 0x0) getpriority(0x1, 0x0) landlock_restrict_self(r2, 0x9) mount(0x0, &(0x7f0000000980)='./mysys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r3 = openat(r1, &(0x7f0000000a40)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x90d341, 0xc7) write$P9_RREADLINK(r3, &(0x7f0000000a80)={0x30, 0x17, 0x2, {0x2b, './mysys/bus/pci/devices/0000:00:01.0/enable'}}, 0x34) 310.005463ms ago: executing program 3 (id=755): r0 = socket(0x22, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 303.558045ms ago: executing program 3 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x180442) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000b840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4044881}}], 0x2, 0x20000880) pipe2$9p(&(0x7f0000000000), 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}}, 0x810) 200.618742ms ago: executing program 3 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00('], 0x50}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000680)={0x3, 0x0, {[0x100000000, 0x2, 0xfffffffffffffffb, 0x10, 0xfea, 0x4, 0x5, 0x3]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 70.454272ms ago: executing program 3 (id=758): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x0, 0x3, 0x3, 0x6, 0x1, "f441e21aa13fca594db63aa6a492d6ab767eaf"}) (async) ioctl$VT_RELDISP(r0, 0x5605) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000100)) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x4, 0x4eea, 0x4, 0x10, 0x16, "6db6363f9fdd363cd224f03af1048fbcd2b18f"}) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0x3, 0x3ff, 0x5}) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000640)={0x1fc, 0x1a, &(0x7f0000000240)="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"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x78) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000006c0)=0xf3a) (async) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg/2:0:0:0\x00', 0x52080, 0x0) ioctl$BSG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000740)) r5 = syz_usb_connect$uac3(0x2, 0xfb, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x30, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x3, 0x40, 0x10, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0xd0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x10, 0x1}, [@cluster_info_segment={0x6, 0x20, 0xff, 0x83, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6e, 0x3, 0x5, 0x7, "ea428c"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x9, 0xe, "fdd42b", "226da5"}, @as_header={0x17, 0x24, 0x1, 0x4, 0xf, 0x7, 0x1, 0xd, 0x2, 0xd, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x4, 0x1, 0x7, "f0", "0ff54a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5, 0xff, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x2, 0x40, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x0, 0x80, {0xa, 0x25, 0x25, 0x5, 0x10, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0xd5, 0x9, 0x5, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb1, 0x2, 0xf, 0x90, "d06426"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x1, 0x4, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7c, 0x6, 0xdb, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x71, 0xf3, 0x4, {0xa, 0x25, 0x25, 0x3, 0xfb, 0x8}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x0, 0x18, 0x3, 0x8, 0x40, 0x2}, 0x35, &(0x7f00000008c0)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x3f6fe5431d46cf5a, 0x4, 0xc, 0x79c}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xd, 0x5}, @wireless={0xb, 0x10, 0x1, 0x9, 0xa0, 0x4, 0x3, 0x5, 0x10}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "3fbef205775aba54607fbde585f75ace"}]}, 0x3, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x422}}, {0xe8, &(0x7f0000000940)=@string={0xe8, 0x3, "b02df83bb56da544c8278ed47570d7f3907fef7de1d8deccda020face34a0a52ece821514cc546ea63f739e52e6bb93c32840ee84098ad53b69d9c1a9fe723a9b960d07dd979d33d6428b96402c983d8fafb7567d8773bd61c7f837dc0cc631830a4b7f21337c877f9debe0ec258b90527e40c1fb6963e81237c54323908b7663f47d3c5d15a8ca9c77f0a03e54370a4043710f5a8eb2f098403be07baa98a6a43c0a504a8ddb0f005954d2e91e4e3bc6f5be86a9477253234845dacc707c8e4ca889a8021efce06bc017b9b08d520d3f59eeb5aa3871766e2ac4024d65bab42ddd5028dfb33"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_ep_write(r5, 0x0, 0xd7, &(0x7f0000000ac0)="611d76c478e89cd31f5f9a5a9b161ab29070db1c5d88b16c2191112e48e37990bedf97114c48637124108502481ae63116c0e782360215a6375ab705794698c44e435cbdaee4327706fabe58b62bf967d020eb24b90256004360281c941bd4ab94a238b2a995fcefb8fafe770c14e193e7a8dc611e91b077af8faac3e5effc0e557f954acd007358cdba4b5fd9230c70d2157dc39761f6509bbbf612f89ca415c2cb99ddcb984223e49ac4bc56837fdc1eecbdeb5c07a1307a8a7e56c2f2c2f28a93e8cd9f29750167e5823dc6434ab32933f92ea38fbc") (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00), 0x106}}, 0x20) (async) pipe2$9p(&(0x7f0000000d00)={0xffffffffffffffff}, 0x800) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x8000, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname={'aname', 0x3d, '^\\#+-@),\x89[+*,}-'}}, {@version_L}, {@dfltuid}, {@access_client}, {@cache_readahead}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) (async) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e40), 0x200100, 0x0) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000e80)={0x2, 0xc, 0x9, 0x8, "0584fc45ec6873bfb8cbeb575459c2d96be08462fddda3aefa79e4d529520be2"}) (async) lstat(&(0x7f0000000f80)='./file0/file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$pvfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x1022c00, &(0x7f0000001040)={[{'9p\x00'}, {'rfdno'}, {}, {'cache=readahead'}], [{@obj_type={'obj_type', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@subj_user={'subj_user', 0x3d, '-\':'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, 'wfdno'}}, {@permit_directio}]}) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r11, 0xf502, 0x0) 0s ago: executing program 0 (id=759): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x3592, 0x2, "f52412120b8c5fb6c46e6f3b57c6d343c342b9", 0x2000000, 0x6}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x48b, 0x0, 0x1, {0x22, 0xe27}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0x0, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x4, 0xb}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x9, 0x6, 0xff, 0x5}, 0x5d, &(0x7f0000000140)={0x5, 0xf, 0x5d, 0x1, [@generic={0x58, 0x10, 0x4, "5d7f7deedc8b1e2d0cb1368ca75d97f03d82d5a565b80b4bcfc98b64ca06363e5b7ed7b12fefe3496d2a135b3cb56e8a899bc8d31731ed917983092d6341d5bb5b51660a499d707cb02fb4aeb55e0037cffa11975a"}]}, 0x1, [{0x9c, &(0x7f00000001c0)=@string={0x9c, 0x3, "9ae8bb6835cf3bbec67b597347de59c3d97be18efe239aba9588c3cf8b8e36715c06c99b9d474f85b64526799682b1374c4d4293527c1b17fea2e2a7b6bbcf8a5b5127b2bf88e47e0605888d82085fe9fca0d779fc9004ecbd923b1be7f6572adb06dfe08403f6a8ef7ad1b573179a74cfe1761155d5716857b7cb7f4c0e202385ab12ee7964b6d86ccb25dde64fa1c3eb5441487dbe8d18c12c"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f00000002c0)={0x0, 0x5, 0x77, {0x77, 0x10, "d1b1d87f6e7e17c8375f949b297730c204a1e731b72c70ceede5abd85cfdd67cffbabaec85e7dca27deb61c57f3c9ffad009388e9e3ec8a56c2ec4c34d1a1768952681034bf068e4541ff6bc54a2d7318a8d6146da8420ac5bd19ae0d6cb67cfd401a3c4fbefffae9b3a5df05250debabfa6b63720"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000380)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x8, "19d428fd"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0x9, "a96f0755"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0xf39}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x40, 0xe, 0x54, "4acf33f1bf5649276a5e6a7af83572e895ed33f85beec61f1639073c41a16e31cd1051f49e954f60c668fbe27edf682a50073326bb85df4e06e687d9b520c15ce65761b71e9e6f1d37b609b18dc32049ce31b910"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9e}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x1, 0xbe, "d589d517426c1e57b9eeef1280b81479e605187fe46e4c1c363b7c45bd2b856d304323d5b19e74ab302ef55f963e98d382e1b79d995470863c84731ba3cb2f29c5f536ecf6b834a2823fc2032dd0ca935c0d67a543ef7b69ed51b37924614a59f9b0ee90834e641e3dc3f0faf1997a232f6481ff71604a7d97f96f79bdde4357c2be38f37f70a0514056bb2d895de22657f53083f8121d5ed7cf6d444616997addd957fcb2272e778fd162cd816b3e0d99dd79e77981789b17199f50bdbe"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_connect$uac3(0x1, 0xc9, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x5, 0x60, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x2e, 0x1}, [@selector_unit={0xd, 0x24, 0xc, 0x7f, 0x8, "4bfbdc481a00d448"}, @selector_unit={0x7, 0x24, 0xc, 0x8, 0x2, 'Ri'}, @power_domain={0x10, 0x24, 0x10, 0xa, 0x4, 0xeb4c, 0x4, "9d4871b06e5cb9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x40, 0x9, 0x5, {0xa, 0x25, 0x25, 0xd, 0xe0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0xd9d1, 0x1002, 0x0, 0x0, 0x1ff, 0xf8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xc73, 0x101, 0x0, "7edf205fbd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x5, 0x1, {0xa, 0x25, 0x25, 0x6, 0xeb, 0x7}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0xa, 0x9, 0x10, 0x40, 0x2}, 0x2e, &(0x7f0000000800)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x80, 0x6, 0x7f, 0x2c}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "25bb9d6d1f968ad9436b8d38fd7f6e89"}]}, 0x4, [{0x95, &(0x7f0000000840)=@string={0x95, 0x3, "6c13f05f308f91845035550e74825d04b62374d1fd9ba3058096dd7ee5b4b6acfbecd335ebcfe4bdf40bf7e0fb7959a70bd8739b5882713c4dab9f288d5d502b86114530f2fe4333ae55d9488517f474b2f7d68ed8389fadcecca6b8824285a35fe55917e70802660e1914a81060ef3f6bdd54463c69d3f83e838868e82e3b011a45ad7c76a6b6aac041084ea25020c7fda2d3"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x809}}, {0x9d, &(0x7f0000000980)=@string={0x9d, 0x3, "5f09c76f2dbec5ada167585effbdbf95cc744a882a5be2d4346874fe3e5af3d0f230f16f66fd3e55aa58f4ea17355519879343d9437ebee7f69b874d5baa0ba67e4dcf446d3cf08a93c9d8f63f3c9e89cb8777c93c071d412c5b3f47fd9866b44e0c5939bc5ac444a86f2511bbb70fcda74b8f65cd26c01aa42d455672088cf9de2bb9df9f831bd6f9691e0375e7c8c6678116adb3b94e47af98c2"}}]}) (async) r3 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async) syz_usb_control_io(r2, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x0, 0x1, 0x93, {0x93, 0x38, "417681c2bb14ad8755d271daf9c25b7faac40b75a892d88a7727fb5f7aff2687aeb13ac792e9ab994c7924e0031b27109cb7067d37032c9dbe54714d262c8088b81b4c89aeaae66f774ed50a1d90c5e2686b65156cfc400e0d20be6e0b7d5f3737e5b72826ad3d17154c83f9d70a6b1e97e77ba747ed823c80713e6370697050f99ebb69c217955d2595975ce797a45654"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000000bc0)={0x0, 0xf, 0xfb, {0x5, 0xf, 0xfb, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf1, "5bb1238c4abff44a51c4c1c0be70a2b6"}, @generic={0xe2, 0x10, 0x3, "d7857e9f15135e1c72ea5428e717d875ecb4ce2f4da49be5c1651d06c68bb3068c88523d182053568351d2428b34f7c5255d1f1f361e251975c718b7b45e37887439743dc4b2199bc69849235945d2ed586ac20a0619ea1c1a3d85ead500729a6857128605bc0a3b67a7d50b39cc0143e592f39b39a687c89fcb895967191fdd6346a1ca6f81111d653f0692abd7681a5d871bc0f3957093c5177edeaefad63ef34bcbc7fcad19e28b12b2ebcf4e280d105c9d2735d9b926893a880934629d9dcceddf06cf1d116d0651b4f16a3f37ec04d7c2ce50b75d503537621d888178"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x1, 0x3, "7fa26bb3", "cfc87ddc"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x9, 0xcc, 0x2, 0x33c, 0x7}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x20, 0x14, 0xe9, "f7aefcad64f9cf3021fecfe0380fb1f4116952a376913faa1ff8a181f856387a0d81dd5777b2ab7bdf0347aef6d61394199cf12c8d62804e163ca19687773ab17a3617031fe8fc0fcc7d25e1d5adf07edd050013ee4c811fb43d51ff51b371a7a49bf30f6811d65cda83cba4406db8355983c0835c3775582ba8739fd3b11fd5d0014eca768c0723c174639d2a12cbaea30c37e34cd86fa04b1035d3d5825943a0b9f4fe7bbed69b497132ee7345dc8c5d1885607bea9d400bfb1ba7d96b5e8c95fc5733750efac4709f0a003512a683551cb057f77ab5a8c819f1070a4952c255e6ac0ce3f69710c3"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf000]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0xeb}, &(0x7f0000001040)={0x40, 0xb, 0x2, "62e6"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x4d76}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001100)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "ca57"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x82}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x43}}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000001340)={0x4, 0x5, 0xd3b, 0x8001, 0xc7, "a58dc346cb8a76219273692e5d74d423ba3d27", 0x3}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000013c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000001400)=0x7) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000001540)={r1, &(0x7f0000001440)='\x00', 0x482002, &(0x7f0000001480)={@_ha_fsid={[0x7, 0x6]}, {0x0, 0x20, 0x948}}, 0x80, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x5}) getsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000001580)={@multicast2, @local}, &(0x7f00000015c0)=0x8) syz_usb_connect(0x6, 0x740, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0xb0, 0x38, 0xab, 0x8, 0x19d2, 0x1087, 0xa580, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72e, 0x3, 0xe, 0x1, 0x0, 0x5, "", [{{0x9, 0x4, 0x77, 0xd, 0x6, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}, @generic={0xc, 0x6, "cf14ffb5d5ae859ef155"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x1, 0x4, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0xe, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0xf7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x60}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x5, 0xae, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}]}}, {{0x9, 0x4, 0x78, 0xd9, 0x10, 0x93, 0x58, 0x65, 0x7f, [@generic={0xe8, 0x2, "98e7fc2f74be29807b19448e4a094182e57f3e88d8e974005ec87c8c7a75a213f44884d5cddab5d175999b28ad9f6a052b70d4b329bc5cc700efc4a17aaa4574f91fd5801018b729c27d182d39b492fb913aa68fca9aca9b2ca6b025e2cbcbdefab57d1c43bc2a3e72f80dcac076f2069e5bdcef07d73720cf2fe63ab2a17b71417ad1529c22f7731dabc513c19eb3f80f33b29787f4126520cc576e0443ae3f41a69edaee0e9ca89ba2dc7ef567a7eabb0e56a05e05a90f4adb15a22d53d157200b0b1e92879067f59203b581a1194b9e73511e709bbe3e506e460e8d9b1d093accf33a9d8b"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "dd6d2e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xd, 0xa0, 0x6}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfb}, @obex={0x5, 0x24, 0x15, 0xc}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7, 0xfa, 0x1, 0xfffe, 0x5}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x9, [0x54, 0x5f, 0x2]}]}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x5, 0x80, 0x7, [@generic={0x81, 0xa, "a66d203b65e55e47b3a43b829dbc3fbfe80ebf595bafbd520a23a944ad7235bffa679ef165c713f299eb1d6c07a641ee28a31d87e785e4705441e7d063abb01eb85d79e24e6cfd089e0a5dbe3e0e902c99d353cf4b875014bd1d60b8f4e71953efd817ca4fce0dcfa68b433c3cfa78911aad59fec0089502a876c475b495d2"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x1e7, 0x9, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x0, 0xf7, 0x85}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x3, 0x29, 0x6, [@generic={0x1e, 0x30, "0f9be5ab5a586789254c9a54e5013c013cf90eeeab4f8cb1b374de77"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x1, 0x5, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x3, 0x57, 0xcb}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x9, 0x6, 0x1, [@generic={0x5f, 0xf, "69b9cc333fc774d7cb8ac3bf17cda9d56c7a6ac9542d4109922b8fd5b9074fd81ad1b0dbd6c1f1cbdc45b217ea0f9fa33e458fcf752072a546653ff3c976c0b9b441f78f68fca6298f13ce5246f7b2c07e5171611c1bf8e0af597d7ae1"}, @generic={0xb, 0xb, "593dae45e0cf54e221"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0xd, 0x7, [@generic={0x2f, 0xc, "dc3faed8c2a3e52b2a0c7bd91047ce74095e72598f3f8cd72dd4868654e7eb6c7c1a13d3004468aa6d3f7e21c3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x7f, 0x3, 0x2, [@generic={0x69, 0x6, "ade321f1a83a93b16dd88cc8ccb7517e13d44bd94792f9ce7bce2b7d5d79b14c08383148657f348ac9d15043677d283bc6f11a69ea5f6a4a1f76ee0cf728f0e5217fe8a6687d0f1881ac907b2a4cfc3d06976577c8e86abc1ad5c526cbd75795af67e333bc125a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xe}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xfe, 0x5, 0x7d}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0xa, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x9, 0xf5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x13, 0xf9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2f80cac34c9ee9f5, 0x200, 0x34, 0x3, 0x5}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xd, 0x3, 0xf, [@generic={0x9c, 0x24, "377879e15f359024c8ef2f570b889d1d87b103b05fcdf21470e08146bcef308ebd0d4ec822b3a53c607434171c1e8d75eacfc77d8fc196d9c47717775d813ab6aad90b66abe9a1eb5f8fd3917d683a6324796cd333c5a14a3ea2770350a479b3399a0f11a05f5c3d2e79ee646ee931ec5337621d1805c767ae654438a19e78cb0536632dd9dd905120083de7b9bc475c7da693ddd10b465d0c9e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}, @generic={0x4, 0x5, "a01e"}]}}]}}, {{0x9, 0x4, 0xb8, 0x1, 0x8, 0xa3, 0x89, 0xe2, 0x3, [@hid_hid={0x9, 0x21, 0xada, 0x6, 0x1, {0x22, 0x5a0}}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0x5, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x83, 0x7, [@generic={0xe7, 0x21, "eedf60c73d548b7000d73d037e505342c390a4d730d4982a03cd4bdd6c2e9d4355d4084f8dcef9b3e5a8e52ce4fab054c931ad31bb16a33224e56e62fac95fb31c7f0d18558861ab28988dcdacb6290b5c160e4e8e7ad19e1ada2eaae8ccb9170e7acb1f1196f7f1ef931e21cea4d586fbdf1d093722b89998b25402d3bbfa94726ab8323783be9e26503431dbb49aac8f09ad0deb6c4fc2cbefea944396b95bef5ec25d9653287eac2929b24247d86f4ff63a340aa150141d17fdf6296bfa7846aaf5b3a338efd930d21f82301c7881bded490c6a0b91f60ec1d26dee526c726a046ab36d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7, 0x6, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0x5, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x1}, @generic={0x4a, 0x24, "11d4822eb80b46fd9cda7f48b2b2f33e724ea0d0f4276f311a5f1f45d24b3007028ff27b5efd1dc4eb69c94ff68a5a1ab6b0b71c6a82213fcd140830fe3cb922cbff2dc483fbbdd7"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x8, 0x35, 0x81}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x5, 0x80, 0x5, [@generic={0x30, 0x24, "e4effdd62a03a6faa97cdd065119bf8f318b51095d018ec3b238c686967603a0d630230a64d49d2ff97d0da1f87f"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x9, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0xc8, 0x8, [@generic={0xb2, 0x4, "568a413f9c5b7162444fd8017f0c4d098d41b1af1c4addf70cbd2b0dfe926ac50523afac13ccfe15b0e8bcd7750f51e7f5989b85669abc7eff2513b2e6c9353dbeda2c5db95fe8e2bb59cdd97bac071aeea19854703a072dbdce47e4fdab6743bad1f9c2350179f935446b0549c7287ef25a4565296397a30aa7ea9d0106e940bed4bd4f39f89ee24c0c207f996a7dc947e6f377503fc0a21aed3b3d3f3638f6b0db1c2684b3d0b5872a4105fa1035d5"}]}}]}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x110, 0x7, 0x2, 0x11, 0x10, 0x5}, 0x123, &(0x7f0000001d80)={0x5, 0xf, 0x123, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "706d5552e9b02e01abcc3912cc388039"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3c412b70bd1949aca6c8a7fcea96b46a"}, @generic={0x65, 0x10, 0x3, "a783a667a2e6b85aa7fb1dea0db1f4d7c95d8df7ee147a1d0b74261ce4f3bccd46d3432b4c056c32a62a4f71274060b7c022fc5e1accf9b73d8886e4c2a9a4f46ee94a0664797a7b5d9f3b0b6ddc81a3d917cc0e66097c8928bfca02678b13e8bca9"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0xb, 0x3}, @generic={0x84, 0x10, 0x1, "161d2d8d74763ed0617a26ae8e55f5ffbed033a77d237111bbb7e3a982d98a0f45169fad32cca372ba2add899fb539ab0593d1fd0985b337ccf924611d97aa8d7f59983ce6250f6b0cb3b0cdb26d28f24febd277dc0de671f62819d439667f69690b49462231f0fea6764206af42ccbf27248c12dcff72f1a137c6478c2e3e7232"}]}, 0x1, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x41a}}]}) (async) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000001f40)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000001fc0)={0x7, 'hsr0\x00', {0x5}}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004800}, 0x20000041) (async) syz_usb_connect$cdc_ncm(0x5, 0x7f, &(0x7f0000002100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x4, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "75dcd5ea88"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4689, 0x40, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x18}, [@network_terminal={0x7, 0x24, 0xa, 0x80, 0xcd, 0x46, 0xf7}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6, 0x44}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x96}}}}}}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x200, 0x9, 0xa, 0x6, 0x40, 0x1}, 0x79, &(0x7f00000021c0)={0x5, 0xf, 0x79, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xc9, 0x4, 0xc386}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x0, 0x80, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0xb8430b16fa0a6ebb, 0x6, 0x3, 0x8, 0x10}, @generic={0x36, 0x10, 0x4, "4bf9112c707e756c31b1b727942e4f9b2486c1fcb7a232acb7d6b87864a014164cd1f7309f73771414a0cb9cd74158f7067140"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "95d87bc8695cfc7925daa811bc8f1972"}]}, 0x1, [{0x7c, &(0x7f0000002240)=@string={0x7c, 0x3, "d2c6a0b8c78842cdfb959dd5b9d93f00a87169b34029f6a011c573d55256f8b71c5353c968db310c0cbda38c4c0d979ab2a86c907bbb981bad90522e3f94ec0a57b32f0e19d109906a14846ac0664402e21aa06e579af0e048763c06092bc75515ce64bf83f6ae3e933bc4210d3c67b285c2d1cf3fc375c4775b"}}]}) syz_usb_connect$uac3(0x3, 0xd7, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x80, 0xc0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0xc4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x84, 0xb, "f41a8e6069cc"}, @as_header={0x17, 0x24, 0x1, 0xb, 0xa, 0x1, 0x1002, 0xf9, 0x0, 0x3, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0xc8, 0x7, {0xa, 0x25, 0x25, 0xffff7fff, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffa, 0x1020, 0x7f, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x29, 0xb1, 0xb, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x5, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb9, 0x7, 0x8, 0x1, 0xd8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x1, 0x6, {0xa, 0x25, 0x25, 0x10000, 0x5, 0x1ff}}}}}}}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x240, 0x8, 0x5, 0xf, 0x20, 0x9}, 0xf7, &(0x7f0000002440)={0x5, 0xf, 0xf7, 0x3, [@generic={0xe5, 0x10, 0xa, "378e3d7bbe27843593530ad4d57b596b77c9541277bbf486ec069a0bc1ed1eb3f309c20b31bd157244bf3df251a628cc76dfb607dc7b692c330078857a97d21ef7e966ad083ab987da44da094e409cc5adc47a079b4c6be62fd42ff4156e4febb6680a7e16f083c90bfa4eedd944161ed2cb103d3bcdc2f6b9b7acf8185792f441b003e4174afbde1da617602964561e3526e2a29c39760fc8f4fd6311b1b5fa974c3d163a84b19ebfe108b88f7bb0afbba6e7f1b0df28912dd5cc934a17ba32260cdf833c2bc38c036964d601bfed67ded42f9730a083d654068fd96c43ba874797"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x8, 0x4}]}, 0x2, [{0x3c, &(0x7f0000002540)=@string={0x3c, 0x3, "14d176d25a86102555f46eeafadc7e95da3490944fef8a343cc6a078f5da021d1106b1709ee23d70006d80099a515236d5a4e1f5f1ddbc928702"}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0xc31}}]}) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000002600)) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x30040, 0x20) (async) syz_usb_connect$midi(0x0, 0xc6, &(0x7f0000002680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x7, 0x50, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7, 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x2, 0x1, [{0x7, 0x6}], 0x7b}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x60, 0x9, {0x14, 0x25, 0x1, 0x10, "24de71d5bc4a24af492da3d12974be70"}}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x9, 0x4, 0xff, {0x8, 0x25, 0x1, 0x4, "4f72fc10"}}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x9, 0x2, 0x40, {0x11, 0x25, 0x1, 0xd, "0114a15e148fa5534f5f440f1a"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x2, 0x6, 0x3, {0x14, 0x25, 0x1, 0x10, "c3f32cb6a1bc18f734991344c6f12122"}}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x1, 0x0, {0x10, 0x25, 0x1, 0xc, "7227b6127a53f1ecd20f3601"}}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x3, 0x2, 0x0, {0x6, 0x25, 0x1, 0x2, "b564"}}}]}}}}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x110, 0x6, 0xc, 0x3, 0xff, 0xc}, 0x34, &(0x7f00000027c0)={0x5, 0xf, 0x34, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0xf, 0xf, 0x1, [0xff00c0, 0x3f3f, 0xffff, 0x0, 0xff00ff, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x8, 0x30, 0xf55e, 0x6}]}, 0x1, [{0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x80c}}]}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x48, r7, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c080}, 0x20000800) kernel console output (not intermixed with test programs): 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.992720][ T6712] RSP: 002b:00007fc70971dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.992731][ T6712] RAX: ffffffffffffffda RBX: 00007fc70971e6c0 RCX: 00007fc70875fd8e [ 61.992739][ T6712] RDX: 000000000000000f RSI: 00007fc70971e0a0 RDI: 0000000000000005 [ 61.992745][ T6712] RBP: 00007fc70971e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.992752][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.992758][ T6712] R13: 00007fc708a26038 R14: 00007fc708a25fa0 R15: 00007fffca9d6268 [ 61.992773][ T6712] [ 62.252590][ T6738] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 62.306787][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 62.364681][ T6744] FAULT_INJECTION: forcing a failure. [ 62.364681][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 62.364703][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.2.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.364722][ T6744] Tainted: [L]=SOFTLOCKUP [ 62.364726][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.364733][ T6744] Call Trace: [ 62.364738][ T6744] [ 62.364742][ T6744] dump_stack_lvl+0x100/0x190 [ 62.364765][ T6744] should_fail_ex.cold+0x5/0xa [ 62.364785][ T6744] should_failslab+0xc2/0x120 [ 62.364797][ T6744] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 62.364818][ T6744] ? ovl_do_parse_layer+0x30/0x12b0 [ 62.364836][ T6744] kstrdup+0x51/0xe0 [ 62.364848][ T6744] ovl_do_parse_layer+0x30/0x12b0 [ 62.364867][ T6744] ovl_parse_param+0x1166/0x1580 [ 62.364883][ T6744] ? selinux_fs_context_parse_param+0xd8/0x130 [ 62.364898][ T6744] ? __pfx_ovl_parse_param+0x10/0x10 [ 62.364916][ T6744] ? static_key_count+0x5a/0x70 [ 62.364929][ T6744] ? __pfx_ovl_parse_param+0x10/0x10 [ 62.364943][ T6744] vfs_parse_fs_param+0x200/0x3b0 [ 62.364962][ T6744] vfs_parse_fs_qstr+0x138/0x1c0 [ 62.364979][ T6744] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 62.365002][ T6744] ? ovl_next_opt+0x143/0x1c0 [ 62.365016][ T6744] ? __pfx_ovl_next_opt+0x10/0x10 [ 62.365030][ T6744] vfs_parse_monolithic_sep+0x195/0x210 [ 62.365049][ T6744] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 62.365068][ T6744] ? alloc_fs_context+0x655/0xf40 [ 62.365105][ T6744] path_mount+0x77f/0x2850 [ 62.365125][ T6744] ? __pfx_path_mount+0x10/0x10 [ 62.365141][ T6744] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.365164][ T6744] ? putname+0xb1/0x110 [ 62.365178][ T6744] ? kmem_cache_free+0x127/0x6c0 [ 62.365198][ T6744] ? __x64_sys_mount+0x293/0x310 [ 62.365214][ T6744] __x64_sys_mount+0x293/0x310 [ 62.365231][ T6744] ? __pfx___x64_sys_mount+0x10/0x10 [ 62.365252][ T6744] do_syscall_64+0x123/0x790 [ 62.365272][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.365285][ T6744] RIP: 0033:0x7fdc3ff9f559 [ 62.365295][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.365306][ T6744] RSP: 002b:00007fdc40d88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.365318][ T6744] RAX: ffffffffffffffda RBX: 00007fdc40225fa0 RCX: 00007fdc3ff9f559 [ 62.365326][ T6744] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 62.365333][ T6744] RBP: 00007fdc40036b20 R08: 00002000000002c0 R09: 0000000000000000 [ 62.365339][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.365346][ T6744] R13: 00007fdc40226038 R14: 00007fdc40225fa0 R15: 00007ffff45ef938 [ 62.365361][ T6744] [ 62.407901][ T5797] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.545327][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 62.841405][ T6763] syzkaller1: entered allmulticast mode [ 62.998278][ T6765] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 63.027828][ T1666] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 63.197934][ T1666] usb 7-1: Using ep0 maxpacket: 8 [ 63.201963][ T1666] usb 7-1: unable to get BOS descriptor or descriptor too short [ 63.201989][ T1666] usb 7-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 63.202786][ T1666] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 63.202800][ T1666] usb 7-1: config 0 has no interface number 0 [ 63.202818][ T1666] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 63.202832][ T1666] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 63.202844][ T1666] usb 7-1: config 0 interface 88 has no altsetting 0 [ 63.205429][ T1666] usb 7-1: string descriptor 0 read error: -22 [ 63.205524][ T1666] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 63.213877][ T1666] usb 7-1: config 0 descriptor?? [ 63.251108][ T1666] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.88/input/input6 [ 63.312843][ T6793] xt_hashlimit: size too large, truncated to 1048576 [ 63.957860][ T6418] udevd[6418]: Error opening device "/dev/input/event4": Input/output error [ 63.958093][ T6418] udevd[6418]: Unable to EVIOCGABS device "/dev/input/event4" [ 63.958169][ T6418] udevd[6418]: Unable to EVIOCGABS device "/dev/input/event4" [ 63.986706][ T29] usb 7-1: USB disconnect, device number 7 [ 64.028609][ T6814] capability: warning: `syz.1.263' uses 32-bit capabilities (legacy support in use) [ 64.118097][ T64] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 64.264761][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 64.307176][ T6829] syzkaller1: entered promiscuous mode [ 64.307192][ T6829] syzkaller1: entered allmulticast mode [ 64.377931][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.488241][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.527850][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 64.528325][ T34] usb 5-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 64.529125][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.530406][ T34] usb 5-1: config 0 descriptor?? [ 64.543134][ T34] as10x_usb: device has been detected [ 64.543489][ T34] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 64.553512][ T34] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 64.563040][ T34] as10x_usb: error during firmware upload part1 [ 64.563557][ T34] Registered device nBox DVB-T Dongle [ 64.745096][ T6821] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.751134][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.751228][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.120510][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 65.131173][ T6835] program syz.3.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.184128][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.184250][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.184359][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.232141][ T6849] 0x0000000000ec-0x0000000000f2 : "" [ 65.241429][ T6849] ftl_cs: FTL header corrupt! [ 65.293874][ T6852] batman_adv: batadv0: Adding interface: veth0 [ 65.293887][ T6852] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.293903][ T6852] batman_adv: batadv0: Interface activated: veth0 [ 65.296991][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.297006][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.298694][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.298707][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.301789][ T6852] batman_adv: batadv0: Interface deactivated: veth0 [ 65.301800][ T6852] batman_adv: batadv0: Removing interface: veth0 [ 65.697851][ T5864] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 65.768612][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.847954][ T5864] usb 7-1: Using ep0 maxpacket: 8 [ 65.849329][ T5864] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.850340][ T5864] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 65.850389][ T5864] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.850408][ T5864] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.850428][ T5864] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.850447][ T5864] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.850481][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.917958][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 65.918670][ T64] usb 6-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 65.919668][ T64] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.919687][ T64] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.919714][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.923660][ T64] usb 6-1: config 0 descriptor?? [ 66.057434][ T5864] usb 7-1: usb_control_msg returned -32 [ 66.057460][ T5864] usbtmc 7-1:16.0: can't read capabilities [ 66.354208][ T6873] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 66.577936][ T5797] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.817990][ T5797] Bluetooth: hci4: command 0x1003 tx timeout [ 66.819263][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.220890][ T41] usb 5-1: USB disconnect, device number 3 [ 67.221363][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 67.221378][ T42] audit: type=1400 audit(2000000005.129:518): avc: denied { unmount } for pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.234291][ T41] Unregistered device nBox DVB-T Dongle [ 67.235058][ T41] as10x_usb: device has been disconnected [ 67.284504][ T6881] team0: No ports can be present during mode change [ 67.316039][ T42] audit: type=1400 audit(2000000005.219:519): avc: denied { append } for pid=6876 comm="syz.3.281" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.517593][ T42] audit: type=1400 audit(2000000005.419:520): avc: denied { mount } for pid=6887 comm="syz.3.285" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.518212][ T42] audit: type=1400 audit(2000000005.429:521): avc: denied { read } for pid=6887 comm="syz.3.285" name="dynamic_events" dev="tracefs" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.521709][ T42] audit: type=1400 audit(2000000005.429:522): avc: denied { ioctl } for pid=6887 comm="syz.3.285" path="/68/trace/dynamic_events" dev="tracefs" ino=2072 ioctlcmd=0x4068aea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.541637][ T42] audit: type=1400 audit(2000000005.449:523): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.637839][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.787902][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 67.789510][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.789534][ T41] usb 5-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 67.790283][ T41] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 67.790297][ T41] usb 5-1: config 0 has no interface number 0 [ 67.790316][ T41] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 67.790329][ T41] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 67.790341][ T41] usb 5-1: config 0 interface 88 has no altsetting 0 [ 67.793151][ T41] usb 5-1: string descriptor 0 read error: -22 [ 67.793253][ T41] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 67.796558][ T41] usb 5-1: config 0 descriptor?? [ 67.804186][ T41] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.88/input/input7 [ 67.855733][ T5790] udevd[5790]: Error opening device "/dev/input/event4": Input/output error [ 67.855834][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 67.855917][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 68.060731][ T41] usb 5-1: USB disconnect, device number 4 [ 68.347890][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.470543][ T5864] usb 7-1: USB disconnect, device number 8 [ 68.498551][ T34] usb 8-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 68.499665][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 68.499687][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 68.501485][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.501504][ T34] usb 8-1: Product: syz [ 68.501515][ T34] usb 8-1: Manufacturer: syz [ 68.501527][ T34] usb 8-1: SerialNumber: syz [ 68.502839][ T42] audit: type=1400 audit(2000000006.409:524): avc: denied { write } for pid=6896 comm="syz.2.288" name="nullb" dev="configfs" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.529072][ T64] usb 6-1: USB disconnect, device number 3 [ 68.557600][ T6899] device-mapper: ioctl: Invalid geometry supplied. [ 68.578170][ T42] audit: type=1400 audit(2000000006.479:525): avc: denied { open } for pid=6903 comm="syz.1.290" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.589582][ T42] audit: type=1400 audit(2000000006.499:526): avc: denied { ioctl } for pid=6903 comm="syz.1.290" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x40186f03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.634177][ T42] audit: type=1400 audit(2000000006.539:527): avc: denied { mount } for pid=6910 comm="syz.0.291" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.673052][ T6911] __nla_validate_parse: 32 callbacks suppressed [ 68.673072][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 68.673099][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 68.678556][ T6911] geneve2: entered promiscuous mode [ 68.678577][ T6911] geneve2: entered allmulticast mode [ 68.690093][ T6899] device-mapper: table: 248:1: integrity: Invalid internal hash (-ENOENT) [ 68.690175][ T6899] device-mapper: ioctl: error adding target to table [ 68.721154][ T34] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 68.823235][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 68.839513][ T6921] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.082547][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 69.122623][ T6932] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 69.268248][ T6942] netlink: 'syz.3.287': attribute type 7 has an invalid length. [ 69.268269][ T6942] netlink: 'syz.3.287': attribute type 5 has an invalid length. [ 69.268280][ T6942] netlink: 17 bytes leftover after parsing attributes in process `syz.3.287'. [ 69.393589][ T6951] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 69.403050][ T6951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6951 comm=syz.2.299 [ 69.445603][ T6955] random: crng reseeded on system resumption [ 69.454083][ T6955] vcan0: tx address claim with dest, not broadcast [ 69.454433][ T6955] Bluetooth: MGMT ver 1.23 [ 69.515684][ T6961] usb usb8: usbfs: process 6961 (syz.2.302) did not claim interface 0 before use [ 69.526069][ T6964] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 69.536473][ T6964] bond1: entered promiscuous mode [ 69.536671][ T6964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.543388][ T6968] netlink: 164 bytes leftover after parsing attributes in process `syz.2.304'. [ 69.546618][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 69.617738][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'. [ 70.224936][ T7013] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 70.257049][ T7009] kvm: pic: non byte write [ 70.266540][ T7017] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 70.271623][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.272084][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.280319][ T7017] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'. [ 70.282826][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.282877][ T7017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.283022][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.283080][ T7017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.294020][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.294129][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.365912][ T7029] UBIFS error (pid: 7029): cannot open "ubi:0", error -19 [ 70.733704][ T7042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7042 comm=syz.0.323 [ 70.735852][ T7042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1831 sclass=netlink_route_socket pid=7042 comm=syz.0.323 [ 70.739195][ T7042] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 70.757998][ T7042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.761533][ T7042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7042 comm=syz.0.323 [ 70.959568][ T7061] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 71.135867][ T1044] usb 8-1: USB disconnect, device number 2 [ 71.147420][ T1044] usblp0: removed [ 71.221975][ T7074] xt_connbytes: Forcing CT accounting to be enabled [ 71.261848][ T7083] nvmet: adding nsid 1 to subsystem testsubsys [ 71.286280][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.292529][ T1451] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292577][ T1451] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.303822][ T7082] null_blk: disk nullb1 created [ 71.303889][ T1046] cfg80211: failed to load regulatory.db [ 71.612882][ T7099] program syz.2.336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.612989][ T7099] ata1.00: invalid transfer count 0 [ 71.629505][ T7099] Console: switching to colour dummy device 80x25 [ 71.668247][ T7100] xt_bpf: check failed: parse error [ 72.013269][ T7102] misc userio: The device must be registered before sending interrupts [ 72.117964][ T64] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 72.133653][ T7122] TC_ACT_REPEAT abuse ? [ 74.234846][ T7073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.341307][ T7131] trusted_key: encrypted_key: master key parameter '@' is invalid [ 74.409178][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 74.409196][ T42] audit: type=1400 audit(2000000012.319:576): avc: denied { create } for pid=7130 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.423993][ T42] audit: type=1400 audit(2000000012.329:577): avc: denied { write } for pid=7139 comm="syz.3.346" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.426163][ T7140] loop0: detected capacity change from 0 to 3904 [ 74.478758][ T7140] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.478780][ T7140] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.478831][ T7140] loop0: [ 74.504070][ T42] audit: type=1400 audit(2000000012.409:578): avc: denied { write } for pid=7139 comm="syz.3.346" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.504868][ T42] audit: type=1400 audit(2000000012.409:579): avc: denied { ioctl } for pid=7139 comm="syz.3.346" path="socket:[15719]" dev="sockfs" ino=15719 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.871774][ T7166] autofs: Unknown parameter './file1' [ 74.951865][ T7174] 9p: Bad value for 'wfdno' [ 75.194505][ T7188] mmap: syz.3.359 (7188) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.248274][ T1046] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 75.333702][ T7192] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 75.398266][ T7196] ip6tnl0: entered allmulticast mode [ 75.402598][ T42] audit: type=1400 audit(2000000013.309:580): avc: denied { connect } for pid=7198 comm="syz.0.362" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.421396][ T1046] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.422275][ T1046] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 75.422299][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 75.422313][ T1046] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.422326][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 75.422340][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 75.423182][ T1046] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 75.423204][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 75.423217][ T1046] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.423230][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 75.423244][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 75.424090][ T1046] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 75.424111][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 75.424125][ T1046] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.424138][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 75.424151][ T1046] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 75.425774][ T7199] warning: `syz.0.362' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.427396][ T1046] usb 6-1: string descriptor 0 read error: -22 [ 75.427482][ T1046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.433119][ T1046] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 75.480232][ T7201] __nla_validate_parse: 2 callbacks suppressed [ 75.480245][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 75.480424][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 75.543683][ T42] audit: type=1400 audit(2000000013.449:581): avc: denied { connect } for pid=7206 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.547379][ T42] audit: type=1400 audit(2000000013.449:582): avc: denied { setopt } for pid=7208 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.550941][ T7207] device-mapper: table: 248:4: writecache: Invalid block size (-EINVAL) [ 75.550957][ T7207] device-mapper: ioctl: error adding target to table [ 75.573326][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'. [ 75.573349][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 75.585178][ T7221] loop5: detected capacity change from 0 to 7 [ 75.588863][ T7221] Dev loop5: unable to read RDB block 7 [ 75.588883][ T7221] loop5: unable to read partition table [ 75.588966][ T7221] loop5: partition table beyond EOD, truncated [ 75.592114][ T7221] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 75.606972][ T42] audit: type=1400 audit(2000000013.509:583): avc: denied { cmd } for pid=7216 comm="iou-wrk-7220" path="socket:[14892]" dev="sockfs" ino=14892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.662340][ T42] audit: type=1400 audit(2000000013.569:584): avc: denied { setopt } for pid=7216 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.677599][ T42] audit: type=1400 audit(2000000013.579:585): avc: denied { getopt } for pid=7216 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.684220][ T5787] Bluetooth: hci1: unexpected event for opcode 0x4caa [ 75.693141][ T1046] usb 6-1: USB disconnect, device number 5 [ 76.127076][ T5785] tipc: Resetting bearer [ 76.141584][ T5785] tipc: Disabling bearer [ 76.353671][ T5634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.430813][ T5634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.608939][ T5634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.614609][ T7252] netlink: 14 bytes leftover after parsing attributes in process `syz.0.378'. [ 76.631634][ T7252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.634504][ T7252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.635876][ T7252] bond0 (unregistering): Released all slaves [ 76.695841][ T7262] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 76.695841][ T7262] The task syz.3.379 (7262) triggered the difference, watch for misbehavior. [ 76.697186][ T5634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.859548][ T1666] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 76.873768][ T5634] bridge_slave_1: left allmulticast mode [ 76.873868][ T5634] bridge_slave_1: left promiscuous mode [ 76.875122][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.879337][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.882459][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.885388][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.886336][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.886699][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.887416][ T5634] bridge_slave_0: left allmulticast mode [ 76.887430][ T5634] bridge_slave_0: left promiscuous mode [ 76.887893][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.027196][ T5634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.028511][ T1666] usb 5-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 77.029447][ T1666] usb 5-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 77.029465][ T1666] usb 5-1: config 6 has no interfaces? [ 77.029482][ T1666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.045264][ T5634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.048100][ T5634] bond0 (unregistering): Released all slaves [ 77.106003][ T5634] tipc: Left network mode [ 77.189833][ T7265] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.196192][ T5498] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.232252][ T7288] gretap1: entered allmulticast mode [ 77.234791][ T7288] team0: Port device gretap1 added [ 77.277165][ T7288] bridge0: port 3(team0) entered blocking state [ 77.277210][ T7288] bridge0: port 3(team0) entered disabled state [ 77.277296][ T7288] team0: entered allmulticast mode [ 77.277305][ T7288] team_slave_0: entered allmulticast mode [ 77.277323][ T7288] team_slave_1: entered allmulticast mode [ 77.279538][ T7288] team0: entered promiscuous mode [ 77.279552][ T7288] team_slave_0: entered promiscuous mode [ 77.279752][ T7288] team_slave_1: entered promiscuous mode [ 77.279831][ T7288] gretap1: entered promiscuous mode [ 77.456558][ T5498] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.474574][ T5634] hsr_slave_0: left promiscuous mode [ 77.475011][ T5634] hsr_slave_1: left promiscuous mode [ 77.475637][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.475666][ T5634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.476283][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.476294][ T5634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.491407][ T5634] veth1_macvtap: left promiscuous mode [ 77.491510][ T5634] veth0_macvtap: left promiscuous mode [ 77.491566][ T5634] veth1_vlan: left promiscuous mode [ 77.491636][ T5634] veth0_vlan: left promiscuous mode [ 77.645677][ T5634] team0 (unregistering): Port device team_slave_1 removed [ 77.654814][ T5634] team0 (unregistering): Port device team_slave_0 removed [ 77.873464][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.873671][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.873796][ T7265] bridge_slave_0: entered allmulticast mode [ 77.875252][ T7265] bridge_slave_0: entered promiscuous mode [ 77.878563][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.878700][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.878793][ T7265] bridge_slave_1: entered allmulticast mode [ 77.880130][ T7265] bridge_slave_1: entered promiscuous mode [ 77.904180][ T7265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.906715][ T7265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.930707][ T7265] team0: Port device team_slave_0 added [ 77.933666][ T7265] team0: Port device team_slave_1 added [ 77.955093][ T5498] 8021q: adding VLAN 0 to HW filter on device eth4 [ 77.956367][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.956376][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.956402][ T7265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.972630][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.972642][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.972808][ T7265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.990175][ T7326] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 78.001366][ T7265] hsr_slave_0: entered promiscuous mode [ 78.001802][ T7265] hsr_slave_1: entered promiscuous mode [ 78.165948][ T5498] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.181334][ T7265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.185801][ T7265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.186613][ T7265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.197484][ T7265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.201453][ T7265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.213724][ T7265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.214272][ T7265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.218863][ T7265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.241969][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.242018][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.242145][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.242191][ T7265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.264691][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 78.264714][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.267678][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 78.267698][ T7363] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.273338][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 78.273357][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.279724][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 78.279743][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.284795][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 78.284812][ T7363] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.291291][ T7363] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.301472][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.316816][ T7363] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.319633][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.329437][ T7364] netlink: 'syz.1.393': attribute type 30 has an invalid length. [ 78.414403][ T7265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.469388][ T7384] Invalid input. Must be >= 4608 [ 78.473169][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.473878][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.537600][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.539948][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.591676][ T7388] NFSD: Failed to start, no listeners configured. [ 78.613523][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.616173][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.716224][ T7389] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 78.717591][ T7265] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.717989][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.718026][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.718056][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.718084][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.779885][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.779965][ T7293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.813243][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.813297][ T7293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.908569][ T5634] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.908744][ T5634] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.908860][ T5634] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.908968][ T5634] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.969298][ T5797] Bluetooth: hci2: command tx timeout [ 79.168432][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.183586][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.318197][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 79.320778][ T29] usb 8-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 79.322303][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.322330][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.327024][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.327038][ T29] usb 8-1: Product: syz [ 79.327045][ T29] usb 8-1: Manufacturer: syz [ 79.327053][ T29] usb 8-1: SerialNumber: syz [ 79.331456][ T29] usb 8-1: config 0 descriptor?? [ 79.359281][ T7265] veth0_vlan: entered promiscuous mode [ 79.363270][ T7265] veth1_vlan: entered promiscuous mode [ 79.408206][ T7265] veth0_macvtap: entered promiscuous mode [ 79.413565][ T7265] veth1_macvtap: entered promiscuous mode [ 79.431976][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.435859][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.459544][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.459588][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.459683][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.459715][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.485710][ T7294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.485724][ T7294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.502547][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.502561][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.519100][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 79.519114][ T42] audit: type=1400 audit(2000000017.429:611): avc: denied { mounton } for pid=7265 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.539948][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 79.541857][ T29] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 79.548659][ T29] imon:send_packet: packet tx failed (-71) [ 79.561584][ T42] audit: type=1400 audit(2000000017.469:612): avc: denied { mounton } for pid=7265 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 79.568039][ T29] imon 8-1:0.0: panel buttons/knobs setup failed [ 79.606513][ T42] audit: type=1400 audit(2000000017.509:613): avc: denied { nlmsg_read } for pid=7429 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.617863][ T29] rc_core: IR keymap rc-imon-pad not found [ 79.617879][ T29] Registered IR keymap rc-empty [ 79.618177][ T29] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 79.618194][ T29] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 79.619528][ T29] imon:send_packet: packet tx failed (-71) [ 79.643409][ T29] imon 8-1:0.0: remote input dev register failed [ 79.644473][ T29] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 79.662844][ T29] imon 8-1:0.0: unable to initialize intf0, err 0 [ 79.668795][ T29] usb 8-1: USB disconnect, device number 3 [ 79.788961][ T42] audit: type=1400 audit(2000000017.699:614): avc: denied { append } for pid=7439 comm="syz.4.409" name="uprobe_events" dev="tracefs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.038422][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 80.148281][ T42] audit: type=1400 audit(2000000018.049:615): avc: denied { mounton } for pid=7468 comm="syz.1.415" path="/86/config" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.148313][ T42] audit: type=1326 audit(2000000018.059:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.1.415" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc70879f559 code=0x0 [ 80.148335][ T42] audit: type=1400 audit(2000000018.059:616): avc: denied { write } for pid=7468 comm="syz.1.415" name="functions" dev="configfs" ino=11993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.188649][ T29] usb 8-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 80.190020][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 80.190040][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 80.190054][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.191729][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.191742][ T29] usb 8-1: Product: syz [ 80.191750][ T29] usb 8-1: Manufacturer: syz [ 80.191758][ T29] usb 8-1: SerialNumber: syz [ 80.193104][ T29] usb 8-1: config 0 descriptor?? [ 80.195010][ T7397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.207269][ T42] audit: type=1400 audit(2000000018.109:618): avc: denied { write } for pid=7468 comm="syz.1.415" name="midi.usb0" dev="configfs" ino=17955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.207321][ T42] audit: type=1400 audit(2000000018.109:619): avc: denied { write } for pid=7468 comm="syz.1.415" name="configs" dev="configfs" ino=11994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.208324][ T42] audit: type=1400 audit(2000000018.109:620): avc: denied { write } for pid=7468 comm="syz.1.415" name="c.1" dev="configfs" ino=19631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.398951][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 80.401000][ T29] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 80.473957][ T7491] trusted_key: encrypted_key: insufficient parameters specified [ 80.658039][ T29] rc_core: IR keymap rc-imon-pad not found [ 80.658051][ T29] Registered IR keymap rc-empty [ 80.658088][ T29] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 80.658098][ T29] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 80.661677][ T7503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4122 sclass=netlink_route_socket pid=7503 comm=syz.0.424 [ 80.662215][ T7503] __nla_validate_parse: 70 callbacks suppressed [ 80.662228][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.424'. [ 80.662243][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.424'. [ 80.819699][ T29] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 80.822792][ T29] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 80.828091][ T29] imon 8-1:0.0: iMON device (15c2:0045) on usb<8:4> initialized [ 81.015085][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 81.048089][ T5797] Bluetooth: hci2: command tx timeout [ 81.055598][ T29] usb 8-1: USB disconnect, device number 4 [ 81.055841][ T7397] imon:send_packet: packet tx failed (-71) [ 81.068012][ T7397] imon:lcd_write: send packet failed! [ 81.252020][ T7531] jffs2: notice: (7531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.306696][ T7538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.431'. [ 81.873519][ T7558] device-mapper: table: 248:5: striped: Couldn't parse stripe destination (-ENOENT) [ 81.873593][ T7558] device-mapper: ioctl: error adding target to table [ 81.880289][ T7560] 9pnet: Found fid 0 not clunked [ 81.957217][ T7563] --map-set only usable from mangle table [ 81.960345][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 81.961838][ T7563] loop5: detected capacity change from 0 to 7 [ 81.963765][ T7563] loop5: [POWERTEC] p1 p2 p3 p4 [ 81.963968][ T7563] loop5: p1 start 811558262 is beyond EOD, truncated [ 81.963990][ T7563] loop5: p2 size 25165824 extends beyond EOD, truncated [ 81.972064][ T7563] loop5: p3 start 2036490101 is beyond EOD, truncated [ 81.972088][ T7563] loop5: p4 start 2621440 is beyond EOD, truncated [ 82.005119][ T6418] udevd[6418]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 82.006501][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 82.006566][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 82.012435][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 82.012454][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 82.029408][ T5866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.029489][ T5866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.029516][ T5866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.029535][ T5866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.040934][ T7570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.441'. [ 82.081597][ T7577] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 82.091488][ T1666] usb 5-1: string descriptor 0 read error: -32 [ 82.125988][ T7580] FAULT_INJECTION: forcing a failure. [ 82.125988][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 82.126010][ T7580] CPU: 2 UID: 0 PID: 7580 Comm: syz.4.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.126027][ T7580] Tainted: [L]=SOFTLOCKUP [ 82.126032][ T7580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.126039][ T7580] Call Trace: [ 82.126043][ T7580] [ 82.126048][ T7580] dump_stack_lvl+0x100/0x190 [ 82.126133][ T7580] should_fail_ex.cold+0x5/0xa [ 82.126161][ T7580] should_failslab+0xc2/0x120 [ 82.126194][ T7580] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.126215][ T7580] ? d_instantiate+0x8a/0xb0 [ 82.126232][ T7580] ? alloc_empty_file+0x5b/0x1c0 [ 82.126252][ T7580] alloc_empty_file+0x5b/0x1c0 [ 82.126268][ T7580] alloc_file_pseudo+0x17e/0x290 [ 82.126284][ T7580] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 82.126300][ T7580] ? alloc_fd+0x471/0x7a0 [ 82.126315][ T7580] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.126345][ T7580] __anon_inode_getfile+0xe8/0x280 [ 82.126360][ T7580] anon_inode_getfile_fmode+0x37/0xa0 [ 82.126374][ T7580] __do_sys_fanotify_init+0xa70/0xe10 [ 82.126409][ T7580] do_syscall_64+0x123/0x790 [ 82.126465][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.126481][ T7580] RIP: 0033:0x7f4109b9f559 [ 82.126492][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.126509][ T7580] RSP: 002b:00007f410a9d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 82.126522][ T7580] RAX: ffffffffffffffda RBX: 00007f4109e25fa0 RCX: 00007f4109b9f559 [ 82.126531][ T7580] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 82.126539][ T7580] RBP: 00007f4109c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.126546][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.126554][ T7580] R13: 00007f4109e26038 R14: 00007f4109e25fa0 R15: 00007ffd3f9193a8 [ 82.126571][ T7580] [ 82.253672][ T7593] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 82.337103][ T7599] ip6tnl1: entered allmulticast mode [ 82.339136][ T5866] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.339268][ T5866] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.378020][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.380171][ T7601] gadgetfs: bound to dummy_udc driver [ 82.394536][ T7601] FAULT_INJECTION: forcing a failure. [ 82.394536][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 82.394557][ T7601] CPU: 2 UID: 0 PID: 7601 Comm: syz.4.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.394574][ T7601] Tainted: [L]=SOFTLOCKUP [ 82.394578][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.394585][ T7601] Call Trace: [ 82.394589][ T7601] [ 82.394594][ T7601] dump_stack_lvl+0x100/0x190 [ 82.394617][ T7601] should_fail_ex.cold+0x5/0xa [ 82.394636][ T7601] should_failslab+0xc2/0x120 [ 82.394649][ T7601] __kmalloc_noprof+0xfc/0x840 [ 82.394665][ T7601] ? do_sys_openat2+0x163/0x1d0 [ 82.394680][ T7601] ? ima_write_template_field_data+0x59/0x1d0 [ 82.394727][ T7601] ima_write_template_field_data+0x59/0x1d0 [ 82.394746][ T7601] ima_eventdigest_init_common+0x158/0x460 [ 82.394765][ T7601] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 82.394793][ T7601] ? __kmalloc_noprof+0x350/0x840 [ 82.394810][ T7601] ? ima_alloc_init_template+0x19d/0x6d0 [ 82.394826][ T7601] ima_alloc_init_template+0x399/0x6d0 [ 82.394844][ T7601] ima_store_measurement+0x1e3/0x5b0 [ 82.394858][ T7601] ? __pfx_ima_store_measurement+0x10/0x10 [ 82.394901][ T7601] ? ima_d_path+0x137/0x260 [ 82.394918][ T7601] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 82.394940][ T7601] process_measurement+0x19cc/0x2350 [ 82.394959][ T7601] ? __pfx_process_measurement+0x10/0x10 [ 82.394973][ T7601] ? add_lock_to_list+0x9d/0x1d0 [ 82.394990][ T7601] ? check_prev_add+0x354/0xe60 [ 82.395019][ T7601] ? mark_held_locks+0x40/0x70 [ 82.395038][ T7601] ima_file_check+0xbf/0x110 [ 82.395052][ T7601] ? __pfx_ima_file_check+0x10/0x10 [ 82.395067][ T7601] security_file_post_open+0xc4/0x210 [ 82.395086][ T7601] path_openat+0x5d0/0x23f0 [ 82.395103][ T7601] ? __pfx_path_openat+0x10/0x10 [ 82.395120][ T7601] do_file_open+0x20e/0x430 [ 82.395135][ T7601] ? __pfx_do_file_open+0x10/0x10 [ 82.395159][ T7601] ? _raw_spin_unlock+0x28/0x50 [ 82.395177][ T7601] ? alloc_fd+0x471/0x7a0 [ 82.395195][ T7601] do_sys_openat2+0x163/0x1d0 [ 82.395210][ T7601] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.395231][ T7601] __x64_sys_openat+0x12d/0x210 [ 82.395247][ T7601] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.395268][ T7601] do_syscall_64+0x123/0x790 [ 82.395289][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.395302][ T7601] RIP: 0033:0x7f4109b9f559 [ 82.395313][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.395325][ T7601] RSP: 002b:00007f410a9d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.395337][ T7601] RAX: ffffffffffffffda RBX: 00007f4109e25fa0 RCX: 00007f4109b9f559 [ 82.395345][ T7601] RDX: 0000000000000002 RSI: 0000200000001480 RDI: ffffffffffffff9c [ 82.395352][ T7601] RBP: 00007f4109c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.395359][ T7601] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 82.395366][ T7601] R13: 00007f4109e26038 R14: 00007f4109e25fa0 R15: 00007ffd3f9193a8 [ 82.395382][ T7601] [ 82.478018][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.614183][ T7610] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.627969][ T5864] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.647873][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.648412][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.651573][ T7612] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.651591][ T7612] overlayfs: missing 'lowerdir' [ 82.653665][ T7612] ip_tables: iptables: counters copy to user failed while replacing table [ 82.747897][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 82.892741][ T5864] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.892769][ T5864] usb 6-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 82.892787][ T5864] usb 6-1: no configurations [ 82.892794][ T5864] usb 6-1: can't read configurations, error -22 [ 82.900526][ T29] usb 9-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 82.901687][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.901726][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.920243][ T29] as10x_usb: device has been detected [ 82.920850][ T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 82.935754][ T29] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 82.949593][ T29] as10x_usb: error during firmware upload part1 [ 82.950021][ T29] Registered device Abilis Systems DVB-Titan [ 83.048096][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.123734][ T7620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.137984][ T5797] Bluetooth: hci2: command tx timeout [ 83.307639][ T7627] md/raid1:md3: active with 1 out of 2 mirrors [ 83.308704][ T7627] md3: detected capacity change from 0 to 4096 [ 83.311759][ T7620] md: invalid raid superblock magic on ram7 [ 83.311772][ T7620] md: ram7 does not have a valid v0.90 superblock, not importing! [ 83.311828][ T7620] md: md_import_device returned -22 [ 83.557882][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.582419][ T5797] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 83.707986][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 83.709109][ T24] usb 8-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 83.709934][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.709951][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.709962][ T24] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.709976][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.709992][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.714006][ T24] usb 8-1: config 0 descriptor?? [ 84.127656][ T24] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:046D:C623.0002/input/input13 [ 84.226648][ T24] logitech 0003:046D:C623.0002: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 84.325526][ T7664] ip_tables: iptables: counters copy to user failed while replacing table [ 84.336843][ T7620] md3: detected capacity change from 4096 to 0 [ 84.336864][ T7620] md: md3 stopped. [ 84.348781][ T24] usb 8-1: USB disconnect, device number 5 [ 84.384571][ T5864] usb 9-1: USB disconnect, device number 2 [ 84.415547][ T7673] syzkaller1: entered promiscuous mode [ 84.415563][ T7673] syzkaller1: entered allmulticast mode [ 84.454679][ T5864] Unregistered device Abilis Systems DVB-Titan [ 84.456304][ T5864] as10x_usb: device has been disconnected [ 84.559558][ T42] kauditd_printk_skb: 1880 callbacks suppressed [ 84.559573][ T42] audit: type=1400 audit(2000000022.469:2501): avc: denied { write } for pid=7677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.559737][ T42] audit: type=1400 audit(2000000022.469:2502): avc: denied { create } for pid=7677 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.560153][ T42] audit: type=1400 audit(2000000022.469:2503): avc: denied { write } for pid=7677 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller1.dhcp" dev="tmpfs" ino=2585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.560555][ T42] audit: type=1400 audit(2000000022.469:2504): avc: denied { append } for pid=7677 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.dhcp" dev="tmpfs" ino=2585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.579083][ T7681] validate_nla: 58 callbacks suppressed [ 84.579104][ T7681] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 84.598779][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.612063][ T42] audit: type=1400 audit(2000000022.519:2505): avc: denied { write } for pid=7683 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.614287][ T42] audit: type=1400 audit(2000000022.519:2506): avc: denied { unlink } for pid=7683 comm="rm" name="resolv.conf.syzkaller1.dhcp" dev="tmpfs" ino=2585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.697268][ T42] audit: type=1400 audit(2000000022.599:2507): avc: denied { write } for pid=7688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.745646][ T42] audit: type=1400 audit(2000000022.649:2508): avc: denied { write } for pid=7693 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.834430][ T42] audit: type=1400 audit(2000000022.739:2509): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.914303][ T42] audit: type=1400 audit(2000000022.819:2510): avc: denied { write } for pid=7704 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.943814][ T7717] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.943828][ T7717] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.983771][ T7719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.108944][ T7736] set match dimension is over the limit! qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 85.208062][ T5787] Bluetooth: hci2: command tx timeout [ 85.216990][ T7744] loop7: detected capacity change from 0 to 7 [ 85.267542][ T25] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.267727][ T25] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.274884][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.274916][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.274969][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.274992][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275028][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275050][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275101][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275123][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275167][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275190][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275223][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275243][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275259][ T7744] ldm_validate_partition_table(): Disk read failed. [ 85.275288][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275309][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275342][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275363][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275396][ T7744] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.275417][ T7744] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.275456][ T7744] Dev loop7: unable to read RDB block 0 [ 85.275566][ T7744] loop7: unable to read partition table [ 85.275767][ T7744] loop7: partition table beyond EOD, truncated [ 85.275802][ T7744] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 85.286818][ T5943] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 85.334655][ T5943] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 85.378466][ T7770] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.449177][ T7772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7772 comm=syz.0.495 [ 85.550483][ T5943] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 85.589560][ T5943] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 85.617202][ T7787] netlink: 'syz.4.498': attribute type 2 has an invalid length. [ 85.694090][ T7790] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 85.695099][ T7790] bridge0: port 3(team0) entered blocking state [ 85.695157][ T7790] bridge0: port 3(team0) entered forwarding state [ 85.695305][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.695353][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.695464][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.695515][ T7790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.701651][ T7790] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.764776][ T7794] x_tables: ip_tables: osf match: only valid for protocol 6 [ 86.058357][ T5943] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 86.098893][ T5943] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 86.107122][ T7760] ceph: No mds server is up or the cluster is laggy [ 86.110138][ T7744] ceph: No mds server is up or the cluster is laggy [ 86.192851][ T7802] ptrace attach of "/syz-executor exec"[5786] was attempted by ""[7802] [ 86.218227][ T7805] futex_wake_op: syz.0.505 tries to shift op by -1; fix this program [ 86.258045][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 86.279260][ T7806] trusted_key: encrypted_key: insufficient parameters specified [ 86.432607][ T7814] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.563717][ T7813] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.608730][ T7833] FAULT_INJECTION: forcing a failure. [ 86.608730][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 86.608754][ T7833] CPU: 2 UID: 0 PID: 7833 Comm: syz.1.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.608772][ T7833] Tainted: [L]=SOFTLOCKUP [ 86.608777][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.608784][ T7833] Call Trace: [ 86.608789][ T7833] [ 86.608795][ T7833] dump_stack_lvl+0x100/0x190 [ 86.608888][ T7833] should_fail_ex.cold+0x5/0xa [ 86.608915][ T7833] should_failslab+0xc2/0x120 [ 86.608947][ T7833] __kmalloc_noprof+0xfc/0x840 [ 86.608967][ T7833] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 86.608990][ T7833] __memcg_list_lru_alloc+0x429/0x6a0 [ 86.609010][ T7833] ? xa_load+0x149/0x2c0 [ 86.609064][ T7833] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 86.609088][ T7833] ? rcu_read_unlock+0x17/0x60 [ 86.609108][ T7833] memcg_list_lru_alloc+0xdc/0x110 [ 86.609122][ T7833] __memcg_slab_post_alloc_hook+0x277/0x10b0 [ 86.609143][ T7833] ? kasan_save_track+0x14/0x30 [ 86.609165][ T7833] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 86.609185][ T7833] ? __d_alloc+0x34/0xad0 [ 86.609203][ T7833] __d_alloc+0x34/0xad0 [ 86.609220][ T7833] d_alloc_pseudo+0x1c/0xc0 [ 86.609231][ T7833] alloc_file_pseudo_noaccount+0x118/0x290 [ 86.609249][ T7833] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 86.609284][ T7833] ? iput+0x35/0x40 [ 86.609305][ T7833] bdev_file_open_by_dev+0x13a/0x210 [ 86.609354][ T7833] setup_bdev_super+0x78/0x770 [ 86.609374][ T7833] get_tree_bdev_flags+0x363/0x620 [ 86.609393][ T7833] ? __pfx_ufs_fill_super+0x10/0x10 [ 86.609423][ T7833] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.609443][ T7833] ? cap_capable+0x107/0x430 [ 86.609462][ T7833] ? bpf_lsm_capable+0x9/0x10 [ 86.609473][ T7833] ? security_capable+0x80/0x260 [ 86.609496][ T7833] vfs_get_tree+0x92/0x320 [ 86.609513][ T7833] path_mount+0x7d0/0x2850 [ 86.609533][ T7833] ? __pfx_path_mount+0x10/0x10 [ 86.609549][ T7833] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.609571][ T7833] ? putname+0xb1/0x110 [ 86.609585][ T7833] ? kmem_cache_free+0x127/0x6c0 [ 86.609605][ T7833] ? __x64_sys_mount+0x293/0x310 [ 86.609621][ T7833] __x64_sys_mount+0x293/0x310 [ 86.609638][ T7833] ? __pfx___x64_sys_mount+0x10/0x10 [ 86.609659][ T7833] do_syscall_64+0x123/0x790 [ 86.609680][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.609694][ T7833] RIP: 0033:0x7fc70879f559 [ 86.609704][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.609716][ T7833] RSP: 002b:00007fc70971e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.609729][ T7833] RAX: ffffffffffffffda RBX: 00007fc708a25fa0 RCX: 00007fc70879f559 [ 86.609736][ T7833] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 86.609744][ T7833] RBP: 00007fc708836b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.609751][ T7833] R10: 0000000000204009 R11: 0000000000000246 R12: 0000000000000000 [ 86.609758][ T7833] R13: 00007fc708a26038 R14: 00007fc708a25fa0 R15: 00007fffca9d6268 [ 86.609775][ T7833] [ 86.610771][ T7833] /dev/sr0: Can't open blockdev [ 86.769940][ T7843] __nla_validate_parse: 5 callbacks suppressed [ 86.769956][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 87.058536][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.058614][ T5797] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.427909][ T7867] syzkaller1: entered promiscuous mode [ 87.427924][ T7867] syzkaller1: entered allmulticast mode [ 87.722044][ T7876] loop7: detected capacity change from 0 to 16384 [ 87.888226][ T7876] FAULT_INJECTION: forcing a failure. [ 87.888226][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 87.888260][ T7876] CPU: 3 UID: 0 PID: 7876 Comm: syz.4.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.888287][ T7876] Tainted: [L]=SOFTLOCKUP [ 87.888294][ T7876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.888307][ T7876] Call Trace: [ 87.888315][ T7876] [ 87.888323][ T7876] dump_stack_lvl+0x100/0x190 [ 87.888432][ T7876] should_fail_ex.cold+0x5/0xa [ 87.888472][ T7876] should_failslab+0xc2/0x120 [ 87.888517][ T7876] __kmalloc_cache_noprof+0x91/0x6d0 [ 87.888546][ T7876] ? snd_seq_pool_new+0x44/0x230 [ 87.888633][ T7876] ? __pfx_snd_seq_open+0x10/0x10 [ 87.888661][ T7876] snd_seq_pool_new+0x44/0x230 [ 87.888695][ T7876] seq_create_client1+0x66/0x5c0 [ 87.888722][ T7876] ? __pfx_snd_seq_open+0x10/0x10 [ 87.888748][ T7876] snd_seq_open+0x41/0x530 [ 87.888775][ T7876] ? __pfx_snd_seq_open+0x10/0x10 [ 87.888811][ T7876] snd_open+0x201/0x450 [ 87.888851][ T7876] ? __pfx_snd_open+0x10/0x10 [ 87.888880][ T7876] chrdev_open+0x234/0x6a0 [ 87.888904][ T7876] ? __pfx_chrdev_open+0x10/0x10 [ 87.888929][ T7876] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 87.888967][ T7876] do_dentry_open+0x674/0x1470 [ 87.888987][ T7876] ? __pfx_chrdev_open+0x10/0x10 [ 87.889015][ T7876] vfs_open_consume+0xcc/0x460 [ 87.889045][ T7876] path_openat+0x1547/0x23f0 [ 87.889073][ T7876] ? __pfx_path_openat+0x10/0x10 [ 87.889103][ T7876] do_file_open+0x20e/0x430 [ 87.889128][ T7876] ? __pfx_do_file_open+0x10/0x10 [ 87.889171][ T7876] ? _raw_spin_unlock+0x28/0x50 [ 87.889246][ T7876] ? alloc_fd+0x471/0x7a0 [ 87.889280][ T7876] do_sys_openat2+0x163/0x1d0 [ 87.889307][ T7876] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.889332][ T7876] ? do_sock_setsockopt+0x101/0x1d0 [ 87.889376][ T7876] ? kfree+0x1e5/0x6d0 [ 87.889398][ T7876] ? selinux_socket_setsockopt+0x6a/0x80 [ 87.889451][ T7876] __x64_sys_openat+0x12d/0x210 [ 87.889479][ T7876] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.889516][ T7876] do_syscall_64+0x123/0x790 [ 87.889550][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.889580][ T7876] RIP: 0033:0x7f4109b9f559 [ 87.889598][ T7876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.889617][ T7876] RSP: 002b:00007f410a9d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.889639][ T7876] RAX: ffffffffffffffda RBX: 00007f4109e25fa0 RCX: 00007f4109b9f559 [ 87.889653][ T7876] RDX: 0000000000000200 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 87.889667][ T7876] RBP: 00007f4109c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 87.889679][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.889691][ T7876] R13: 00007f4109e26038 R14: 00007f4109e25fa0 R15: 00007ffd3f9193a8 [ 87.889719][ T7876] [ 87.908705][ T7879] loop7: detected capacity change from 16384 to 16383 [ 88.020070][ T7881] loop7: detected capacity change from 16383 to 0 [ 88.127893][ T7884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7884 comm=syz.4.525 [ 88.251211][ T7898] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 18005 (only 8 groups) [ 88.449710][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.449977][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.561938][ T7917] xt_esp: unknown flags DD [ 88.654685][ T7922] loop0: detected capacity change from 0 to 3904 [ 88.711657][ T7922] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 88.711675][ T7922] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 88.711705][ T7922] loop0: [ 89.211064][ T7975] XFS (nbd0): SB validate failed with error -5. [ 89.241516][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 89.241560][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 89.242421][ T7975] XFS (nbd0): io_pages changed from 0 to 1024, not restoring. [ 89.242437][ T7975] XFS (nbd0): ra_pages changed from 0 to 64, not restoring. [ 89.242968][ T7994] ufs: You didn't specify the type of your ufs filesystem [ 89.242968][ T7994] [ 89.242968][ T7994] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 89.242968][ T7994] [ 89.242968][ T7994] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 89.242994][ T7994] ufs: ufstype=old is supported read-only [ 89.400633][ T8003] ip6gre1: entered promiscuous mode [ 89.400657][ T8003] ip6gre1: entered allmulticast mode [ 89.407824][ T8003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.571730][ T8010] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.888722][ T5943] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 90.037976][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 90.038675][ T5943] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.040444][ T5943] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.042466][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.042486][ T5943] usb 6-1: Product: syz [ 90.042498][ T5943] usb 6-1: Manufacturer: syz [ 90.042510][ T5943] usb 6-1: SerialNumber: syz [ 90.045565][ T5943] usb 6-1: config 0 descriptor?? [ 90.046381][ T8016] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.047679][ T5943] hub 6-1:0.0: bad descriptor, ignoring hub [ 90.047699][ T5943] hub 6-1:0.0: probe with driver hub failed with error -5 [ 90.095204][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 90.095218][ T42] audit: type=1400 audit(2000000027.999:2543): avc: denied { write } for pid=8017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.170950][ T42] audit: type=1400 audit(2000000028.069:2544): avc: denied { write } for pid=8028 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.194186][ T8034] netlink: 'syz.4.556': attribute type 29 has an invalid length. [ 90.194567][ T42] audit: type=1400 audit(2000000028.099:2545): avc: denied { ioctl } for pid=8033 comm="syz.4.556" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x40089416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.227406][ T8036] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.557'. [ 90.283337][ T42] audit: type=1400 audit(2000000028.189:2546): avc: denied { write } for pid=8040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.337579][ T42] audit: type=1400 audit(2000000028.239:2547): avc: denied { write } for pid=8046 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.377552][ T8049] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 90.377572][ T8049] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.377629][ T8049] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 90.377642][ T8049] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 90.377650][ T8049] page dumped because: unmovable page [ 90.377657][ T8049] page_owner tracks the page as allocated [ 90.377662][ T8049] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5779, tgid 5779 (syz-executor), ts 46666584232 [ 90.377684][ T8049] post_alloc_hook+0xfd/0x120 [ 90.379105][ T8049] get_page_from_freelist+0x1113/0x35e0 [ 90.379125][ T8049] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 90.379141][ T8049] alloc_pages_mpol+0x201/0x560 [ 90.379155][ T8049] alloc_pages_noprof+0x1a/0x160 [ 90.379170][ T8049] __vmalloc_node_range_noprof+0x899/0x1440 [ 90.379183][ T8049] vmalloc_user_noprof+0x9e/0xe0 [ 90.379194][ T8049] kcov_ioctl+0x4d/0x750 [ 90.379224][ T8049] __x64_sys_ioctl+0x18e/0x210 [ 90.379244][ T8049] do_syscall_64+0x123/0x790 [ 90.379297][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.379325][ T8049] page_owner free stack trace missing [ 90.381484][ T42] audit: type=1400 audit(2000000028.289:2548): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.381518][ T42] audit: type=1400 audit(2000000028.289:2549): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.381542][ T42] audit: type=1400 audit(2000000028.289:2550): avc: denied { write search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.381564][ T42] audit: type=1400 audit(2000000028.289:2551): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.381585][ T42] audit: type=1400 audit(2000000028.289:2552): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.432312][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 90.739257][ T8062] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 90.743070][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 90.879025][ T8073] overlay: ./file0 is not a directory [ 90.880024][ T8074] overlay: ./file0 is not a directory [ 90.880080][ T8073] overlay: ./file0 is not a directory [ 90.882145][ T8073] overlay: ./file0 is not a directory [ 90.882904][ T8073] overlay: ./file0 is not a directory [ 90.883946][ T8073] overlay: ./file0 is not a directory [ 90.884914][ T8073] overlay: ./file0 is not a directory [ 90.885424][ T8073] overlay: ./file0 is not a directory [ 90.885855][ T8073] overlay: ./file0 is not a directory [ 90.886528][ T8073] overlay: ./file0 is not a directory [ 90.886972][ T8073] overlay: ./file0 is not a directory [ 90.887335][ T8073] overlay: ./file0 is not a directory [ 90.887694][ T8073] overlay: ./file0 is not a directory [ 90.894885][ T8073] overlay: ./file0 is not a directory [ 90.897188][ T8073] overlay: ./file0 is not a directory [ 90.901875][ T8073] overlay: ./file0 is not a directory [ 90.902950][ T8073] overlay: ./file0 is not a directory [ 90.904695][ T8073] overlay: ./file0 is not a directory [ 90.906346][ T8073] overlay: ./file0 is not a directory [ 90.908516][ T8073] overlay: ./file0 is not a directory [ 90.913567][ T8073] overlay: ./file0 is not a directory [ 90.914904][ T8073] overlay: ./file0 is not a directory [ 90.918278][ T8073] overlay: ./file0 is not a directory [ 90.923442][ T8073] overlay: ./file0 is not a directory [ 90.925485][ T8073] overlay: ./file0 is not a directory [ 90.934043][ T8073] overlay: ./file0 is not a directory [ 90.935239][ T8073] overlay: ./file0 is not a directory [ 90.936070][ T8073] overlay: ./file0 is not a directory [ 90.938398][ T8073] overlay: ./file0 is not a directory [ 90.940808][ T8073] overlay: ./file0 is not a directory [ 90.942536][ T8073] overlay: ./file0 is not a directory [ 90.943762][ T8073] overlay: ./file0 is not a directory [ 90.945445][ T8073] overlay: ./file0 is not a directory [ 90.947082][ T8073] overlay: ./file0 is not a directory [ 90.951406][ T8073] overlay: ./file0 is not a directory [ 90.952880][ T8073] overlay: ./file0 is not a directory [ 90.954178][ T8073] overlay: ./file0 is not a directory [ 90.955687][ T8073] overlay: ./file0 is not a directory [ 90.961166][ T1046] usb 6-1: USB disconnect, device number 8 [ 90.978194][ T8073] overlay: ./file0 is not a directory [ 90.979049][ T8073] overlay: ./file0 is not a directory [ 90.979885][ T8073] overlay: ./file0 is not a directory [ 90.980536][ T8073] overlay: ./file0 is not a directory [ 90.984005][ T8073] overlay: ./file0 is not a directory [ 90.984611][ T8073] overlay: ./file0 is not a directory [ 90.984963][ T8073] overlay: ./file0 is not a directory [ 90.985821][ T8073] overlay: ./file0 is not a directory [ 90.986326][ T8073] overlay: ./file0 is not a directory [ 90.986695][ T8073] overlay: ./file0 is not a directory [ 90.987062][ T8073] overlay: ./file0 is not a directory [ 90.987538][ T8073] overlay: ./file0 is not a directory [ 90.988597][ T8073] overlay: ./file0 is not a directory [ 91.018318][ T8080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8080 comm=syz.3.568 [ 91.061441][ T8083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.098133][ T1046] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 91.221305][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.246174][ T8105] FAULT_INJECTION: forcing a failure. [ 91.246174][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 91.246197][ T8105] CPU: 3 UID: 0 PID: 8105 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.246214][ T8105] Tainted: [L]=SOFTLOCKUP [ 91.246219][ T8105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.246226][ T8105] Call Trace: [ 91.246231][ T8105] [ 91.246237][ T8105] dump_stack_lvl+0x100/0x190 [ 91.246273][ T8105] should_fail_ex.cold+0x5/0xa [ 91.246294][ T8105] should_failslab+0xc2/0x120 [ 91.246308][ T8105] __kmalloc_cache_node_noprof+0x94/0x710 [ 91.246329][ T8105] ? __get_vm_area_node+0x124/0x350 [ 91.246362][ T8105] __get_vm_area_node+0x124/0x350 [ 91.246380][ T8105] ? bpf_prog_load+0x1c1f/0x2ba0 [ 91.246403][ T8105] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 91.246416][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.246439][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.246460][ T8105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.246475][ T8105] ? avc_has_perm_noaudit+0x145/0x470 [ 91.246515][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.246533][ T8105] __vmalloc_node_noprof+0xad/0xf0 [ 91.246548][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.246568][ T8105] __vmalloc_noprof+0xa3/0x120 [ 91.246581][ T8105] ? __pfx___vmalloc_noprof+0x10/0x10 [ 91.246596][ T8105] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 91.246616][ T8105] ? security_bpf_prog_load+0x10f/0x2f0 [ 91.246634][ T8105] ? bpf_vlog_init+0x118/0x150 [ 91.246648][ T8105] bpf_check+0x1c2b/0xa150 [ 91.246678][ T8105] ? __pfx_bpf_check+0x10/0x10 [ 91.246696][ T8105] ? lock_acquire+0x1d1/0x380 [ 91.246720][ T8105] ? bpf_prog_load+0x1b60/0x2ba0 [ 91.246737][ T8105] ? find_held_lock+0x2b/0x80 [ 91.246749][ T8105] ? bpf_prog_load+0x1b60/0x2ba0 [ 91.246769][ T8105] ? __asan_memset+0x23/0x50 [ 91.246790][ T8105] ? bpf_prog_load+0x1c1f/0x2ba0 [ 91.246807][ T8105] bpf_prog_load+0x1c1f/0x2ba0 [ 91.246824][ T8105] ? avc_has_perm_noaudit+0x11e/0x470 [ 91.246873][ T8105] ? __pfx_bpf_prog_load+0x10/0x10 [ 91.246910][ T8105] __sys_bpf+0x146f/0x4b60 [ 91.246933][ T8105] ? __pfx___sys_bpf+0x10/0x10 [ 91.246950][ T8105] ? find_held_lock+0x2b/0x80 [ 91.246963][ T8105] ? futex_wake+0x4ea/0x5e0 [ 91.246993][ T8105] ? __pfx_signal_setup_done+0x10/0x10 [ 91.247020][ T8105] ? __x64_sys_futex+0x34f/0x4d0 [ 91.247033][ T8105] ? __x64_sys_futex+0x358/0x4d0 [ 91.247050][ T8105] ? xfd_validate_state+0x129/0x190 [ 91.247068][ T8105] ? __x64_sys_bpf+0xce/0x140 [ 91.247078][ T8105] __x64_sys_bpf+0xce/0x140 [ 91.247090][ T8105] ? do_syscall_64+0xae/0x790 [ 91.247110][ T8105] do_syscall_64+0x123/0x790 [ 91.247130][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.247142][ T8105] RIP: 0033:0x7fafacb9f559 [ 91.247167][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.247180][ T8105] RSP: 002b:00007fafada84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.247193][ T8105] RAX: ffffffffffffffda RBX: 00007faface25fa0 RCX: 00007fafacb9f559 [ 91.247201][ T8105] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 91.247208][ T8105] RBP: 00007fafacc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.247215][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.247222][ T8105] R13: 00007faface26038 R14: 00007faface25fa0 R15: 00007ffc2ec98fd8 [ 91.247238][ T8105] [ 91.247407][ T8105] syz.3.578: vmalloc error: size 600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.247586][ T8105] CPU: 3 UID: 0 PID: 8105 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.247604][ T8105] Tainted: [L]=SOFTLOCKUP [ 91.247609][ T8105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.247616][ T8105] Call Trace: [ 91.247620][ T8105] [ 91.247625][ T8105] dump_stack_lvl+0x100/0x190 [ 91.247647][ T8105] warn_alloc.cold+0x9e/0xb2 [ 91.247661][ T8105] ? __pfx_warn_alloc+0x10/0x10 [ 91.247692][ T8105] ? __kasan_kmalloc+0x8a/0xb0 [ 91.247719][ T8105] ? __get_vm_area_node+0x22b/0x350 [ 91.247743][ T8105] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 91.247775][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.247797][ T8105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.247812][ T8105] ? avc_has_perm_noaudit+0x145/0x470 [ 91.247828][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.247845][ T8105] __vmalloc_node_noprof+0xad/0xf0 [ 91.247857][ T8105] ? bpf_check+0x1c2b/0xa150 [ 91.247875][ T8105] __vmalloc_noprof+0xa3/0x120 [ 91.247887][ T8105] ? __pfx___vmalloc_noprof+0x10/0x10 [ 91.247907][ T8105] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 91.247926][ T8105] ? security_bpf_prog_load+0x10f/0x2f0 [ 91.247945][ T8105] ? bpf_vlog_init+0x118/0x150 [ 91.247959][ T8105] bpf_check+0x1c2b/0xa150 [ 91.247989][ T8105] ? __pfx_bpf_check+0x10/0x10 [ 91.248007][ T8105] ? lock_acquire+0x1d1/0x380 [ 91.248024][ T8105] ? bpf_prog_load+0x1b60/0x2ba0 [ 91.248042][ T8105] ? find_held_lock+0x2b/0x80 [ 91.248055][ T8105] ? bpf_prog_load+0x1b60/0x2ba0 [ 91.248074][ T8105] ? __asan_memset+0x23/0x50 [ 91.248093][ T8105] ? bpf_prog_load+0x1c1f/0x2ba0 [ 91.248110][ T8105] bpf_prog_load+0x1c1f/0x2ba0 [ 91.248127][ T8105] ? avc_has_perm_noaudit+0x11e/0x470 [ 91.248144][ T8105] ? __pfx_bpf_prog_load+0x10/0x10 [ 91.248175][ T8105] __sys_bpf+0x146f/0x4b60 [ 91.248197][ T8105] ? __pfx___sys_bpf+0x10/0x10 [ 91.248214][ T8105] ? find_held_lock+0x2b/0x80 [ 91.248226][ T8105] ? futex_wake+0x4ea/0x5e0 [ 91.248253][ T8105] ? __pfx_signal_setup_done+0x10/0x10 [ 91.248279][ T8105] ? __x64_sys_futex+0x34f/0x4d0 [ 91.248292][ T8105] ? __x64_sys_futex+0x358/0x4d0 [ 91.248307][ T8105] ? xfd_validate_state+0x129/0x190 [ 91.248324][ T8105] ? __x64_sys_bpf+0xce/0x140 [ 91.248334][ T8105] __x64_sys_bpf+0xce/0x140 [ 91.248345][ T8105] ? do_syscall_64+0xae/0x790 [ 91.248365][ T8105] do_syscall_64+0x123/0x790 [ 91.248385][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.248399][ T8105] RIP: 0033:0x7fafacb9f559 [ 91.248409][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.248421][ T8105] RSP: 002b:00007fafada84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.248432][ T8105] RAX: ffffffffffffffda RBX: 00007faface25fa0 RCX: 00007fafacb9f559 [ 91.248439][ T8105] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 91.248447][ T8105] RBP: 00007fafacc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.248454][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.248461][ T8105] R13: 00007faface26038 R14: 00007faface25fa0 R15: 00007ffc2ec98fd8 [ 91.248477][ T8105] [ 91.249595][ T1046] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.252325][ T1046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 91.255040][ T1046] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.255059][ T1046] usb 6-1: Product: syz [ 91.255071][ T1046] usb 6-1: Manufacturer: syz [ 91.255083][ T1046] usb 6-1: SerialNumber: syz [ 91.260083][ T8105] Mem-Info: [ 91.260113][ T8105] active_anon:26910 inactive_anon:0 isolated_anon:0 [ 91.260113][ T8105] active_file:276 inactive_file:59423 isolated_file:0 [ 91.260113][ T8105] unevictable:1025 dirty:180 writeback:0 [ 91.260113][ T8105] slab_reclaimable:9995 slab_unreclaimable:73814 [ 91.260113][ T8105] mapped:25192 shmem:18043 pagetables:3699 [ 91.260113][ T8105] sec_pagetables:296 bounce:0 [ 91.260113][ T8105] kernel_misc_reclaimable:0 [ 91.260113][ T8105] free:428773 free_pcp:6864 free_cma:0 [ 91.260166][ T8105] Node 0 active_anon:105848kB inactive_anon:0kB active_file:1104kB inactive_file:236988kB unevictable:4100kB isolated(anon):0kB isolated(file):0kB mapped:96672kB dirty:700kB writeback:0kB shmem:70384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14368kB pagetables:9048kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 91.260222][ T8105] Node 1 active_anon:1792kB inactive_anon:0kB active_file:0kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:20kB writeback:0kB shmem:1788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:5748kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 91.260271][ T8105] Node 0 DMA free:6264kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8628kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 91.260327][ T8105] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 91.260359][ T8105] Node 0 DMA32 free:87592kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:97220kB inactive_anon:0kB active_file:1104kB inactive_file:236988kB unevictable:4100kB writepending:700kB zspages:0kB present:2080628kB managed:1230980kB mlocked:4kB bounce:0kB free_pcp:20532kB local_pcp:6024kB free_cma:0kB [ 91.260413][ T8105] lowmem_reserve[]: 0 0 0 0 0 [ 91.260444][ T8105] Node 1 Normal free:1621236kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1792kB inactive_anon:0kB active_file:0kB inactive_file:704kB unevictable:0kB writepending:20kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6884kB local_pcp:6532kB free_cma:0kB [ 91.260497][ T8105] lowmem_reserve[]: 0 0 0 0 0 [ 91.260527][ T8105] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 6*16kB (UM) 12*32kB (UM) 11*64kB (UM) 7*128kB (U) 6*256kB (U) 3*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 6264kB [ 91.260679][ T8105] Node 0 DMA32: 138*4kB (UME) 245*8kB (UME) 25*16kB (ME) 458*32kB (UME) 189*64kB (UME) 57*128kB (UME) 13*256kB (UME) 12*512kB (UME) 8*1024kB (UM) 6*2048kB (UM) 5*4096kB (UM) = 87392kB [ 91.260829][ T8105] Node 1 Normal: 333*4kB (UM) 292*8kB (UM) 288*16kB (UME) 264*32kB (UME) 248*64kB (UME) 254*128kB (UME) 249*256kB (UME) 229*512kB (UM) 215*1024kB (UME) 10*2048kB (UME) 277*4096kB (UM) = 1621332kB [ 91.260979][ T8105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.260994][ T8105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.261007][ T8105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.261022][ T8105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.261037][ T8105] 77738 total pagecache pages [ 91.261044][ T8105] 0 pages in swap cache [ 91.261050][ T8105] Free swap = 124996kB [ 91.261056][ T8105] Total swap = 124996kB [ 91.261063][ T8105] 1048443 pages RAM [ 91.261069][ T8105] 0 pages HighMem/MovableOnly [ 91.261076][ T8105] 291388 pages reserved [ 91.261082][ T8105] 0 pages cma reserved [ 91.267384][ T1046] usb 6-1: config 0 descriptor?? [ 91.267990][ T8045] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.269053][ T1046] hub 6-1:0.0: bad descriptor, ignoring hub [ 91.269066][ T1046] hub 6-1:0.0: probe with driver hub failed with error -5 [ 91.357611][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 91.443604][ T8112] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.480605][ T5797] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 91.578062][ T34] usb 6-1: USB disconnect, device number 9 [ 91.756264][ T8117] kAFS: unparsable volume name [ 91.901678][ T8127] overlayfs: conflicting options: nfs_export=on,index=off [ 92.185312][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 92.231080][ T8144] loop4: detected capacity change from 0 to 7 [ 92.234640][ T8144] Dev loop4: unable to read RDB block 7 [ 92.234658][ T8144] loop4: AHDI p1 p2 p3 [ 92.234669][ T8144] loop4: partition table partially beyond EOD, truncated [ 92.234761][ T8144] loop4: p1 start 1601398130 is beyond EOD, truncated [ 92.234772][ T8144] loop4: p2 start 1702059890 is beyond EOD, truncated [ 92.319821][ T7293] IPVS: starting estimator thread 0... [ 92.327461][ T8151] fuse: Unknown parameter 'max_red' [ 92.408077][ T8152] IPVS: using max 25 ests per chain, 60000 per kthread [ 92.461463][ T8157] overlayfs: fs on 'sys_mnt' does not support file handles, falling back to index=off,nfs_export=off. [ 92.848586][ T8176] netlink: 96 bytes leftover after parsing attributes in process `syz.0.598'. [ 93.207121][ T8207] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.210728][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.211007][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.271984][ T8212] team0: Device vxcan1 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 93.272196][ T8212] team0: Device vxcan1 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 93.507875][ T5943] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 93.657896][ T5943] usb 9-1: Invalid ep0 maxpacket: 64 [ 93.787874][ T5943] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 93.843204][ T8215] nvme_fabrics: missing parameter 'transport=%s' [ 93.843217][ T8215] nvme_fabrics: missing parameter 'nqn=%s' [ 93.937893][ T5943] usb 9-1: Invalid ep0 maxpacket: 64 [ 93.941403][ T5943] usb usb9-port1: attempt power cycle [ 94.112168][ T8227] netlink: 'syz.0.614': attribute type 3 has an invalid length. [ 94.112186][ T8227] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.614'. [ 94.238912][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 94.238938][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 94.238952][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 94.277883][ T5943] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 94.299159][ T5943] usb 9-1: Invalid ep0 maxpacket: 64 [ 94.328085][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.422648][ T8234] netlink: 'syz.0.617': attribute type 4 has an invalid length. [ 94.428360][ T5943] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 94.449046][ T5943] usb 9-1: Invalid ep0 maxpacket: 64 [ 94.449183][ T5943] usb usb9-port1: unable to enumerate USB device [ 94.548931][ T8244] cgroup: Need name or subsystem set [ 94.587876][ T1666] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 94.655444][ T8246] evm: overlay not supported [ 94.728404][ T1666] usb 8-1: device descriptor read/64, error -71 [ 94.977925][ T1666] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.107911][ T1666] usb 8-1: device descriptor read/64, error -71 [ 95.155880][ T8260] pim6reg99999999: entered allmulticast mode [ 95.160904][ T8260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.230189][ T1666] usb usb8-port1: attempt power cycle [ 95.578283][ T1666] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 95.598328][ T1666] usb 8-1: device descriptor read/8, error -71 [ 95.627975][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 95.627992][ T42] audit: type=1400 audit(2000000033.539:2577): avc: denied { name_bind } for pid=8282 comm="syz.0.632" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 95.662916][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 95.692379][ T5797] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 95.724438][ T8289] netlink: 68 bytes leftover after parsing attributes in process `syz.0.634'. [ 95.838870][ T1666] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.868327][ T1666] usb 8-1: device descriptor read/8, error -71 [ 95.962472][ T8303] jffs2: notice: (8303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.969349][ T42] audit: type=1400 audit(2000000000.260:2578): avc: denied { write } for pid=8302 comm="syz.1.636" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.969928][ T42] audit: type=1400 audit(2000000000.270:2579): avc: denied { add_name } for pid=8302 comm="syz.1.636" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.970502][ T42] audit: type=1400 audit(2000000000.270:2580): avc: denied { create } for pid=8302 comm="syz.1.636" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.977673][ T42] audit: type=1400 audit(2000000000.270:2581): avc: denied { write } for pid=8302 comm="syz.1.636" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.978636][ T8303] overlayfs: failed to resolve './file0': -2 [ 95.978691][ T42] audit: type=1400 audit(2000000000.280:2582): avc: denied { mounton } for pid=8302 comm="syz.1.636" path="/136/file0/bus" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.994699][ T1666] usb usb8-port1: unable to enumerate USB device [ 96.304446][ T42] audit: type=1400 audit(2000000000.600:2583): avc: denied { write } for pid=8305 comm="syz.4.637" path="socket:[23065]" dev="sockfs" ino=23065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.334471][ T42] audit: type=1400 audit(2000000000.630:2584): avc: denied { mount } for pid=8309 comm="syz.4.638" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 96.425274][ T42] audit: type=1400 audit(2000000000.720:2585): avc: denied { wake_alarm } for pid=8309 comm="syz.4.638" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.748408][ T42] audit: type=1400 audit(2000000001.050:2586): avc: denied { write } for pid=8327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.773807][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.642'. [ 96.817115][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 97.030053][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.145730][ T8370] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.145747][ T8370] overlayfs: failed to set xattr on upper [ 97.145752][ T8370] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.145756][ T8370] overlayfs: ...falling back to index=off. [ 97.145760][ T8370] overlayfs: ...falling back to uuid=null. [ 97.158978][ T8370] trusted_key: encrypted_key: insufficient parameters specified [ 97.673243][ T8407] loop2: detected capacity change from 0 to 7 [ 97.685352][ T8407] Dev loop2: unable to read RDB block 7 [ 97.685386][ T8407] loop2: unable to read partition table [ 97.685556][ T8407] loop2: partition table beyond EOD, truncated [ 97.685571][ T8407] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 97.726701][ T8410] __nla_validate_parse: 1 callbacks suppressed [ 97.726714][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 97.737841][ T1046] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.894088][ T8422] netlink: 'syz.4.657': attribute type 12 has an invalid length. [ 97.918623][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 97.919088][ T1046] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.920002][ T1046] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.920020][ T1046] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.920033][ T1046] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 97.920049][ T1046] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 97.920061][ T1046] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.920082][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.044660][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 98.103861][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 98.133489][ T1046] usb 8-1: GET_CAPABILITIES returned 0 [ 98.133518][ T1046] usbtmc 8-1:16.0: can't read capabilities [ 98.284747][ T8445] bridge0: port 3(dummy0) entered blocking state [ 98.284959][ T8445] bridge0: port 3(dummy0) entered disabled state [ 98.285111][ T8445] dummy0: entered allmulticast mode [ 98.286658][ T8445] dummy0: entered promiscuous mode [ 98.325567][ T1046] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.325859][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 98.340007][ T1046] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 98.351767][ T5864] usb 8-1: USB disconnect, device number 10 [ 98.576272][ T8471] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 98.675669][ T8489] netlink: ct family unspecified [ 98.704969][ T8491] sg_write: data in/out 196864/4 bytes for SCSI command 0x0-- guessing data in; [ 98.704969][ T8491] program syz.4.680 not setting count and/or reply_len properly [ 98.705401][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 98.705433][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 98.722054][ T8493] 9pnet_virtio: no channels available for device syz [ 98.722388][ T8493] 9pnet_virtio: no channels available for device syz [ 98.722719][ T8493] 9pnet_virtio: no channels available for device syz [ 98.723078][ T8493] 9pnet_virtio: no channels available for device syz [ 98.723405][ T8493] 9pnet_virtio: no channels available for device syz [ 98.729061][ T8493] 9pnet_virtio: no channels available for device syz [ 98.729323][ T8493] 9pnet_virtio: no channels available for device syz [ 98.729590][ T8493] 9pnet_virtio: no channels available for device syz [ 98.734229][ T8493] 9pnet_virtio: no channels available for device syz [ 98.737322][ T8493] 9pnet_virtio: no channels available for device syz [ 98.737642][ T8493] 9pnet_virtio: no channels available for device syz [ 98.738425][ T8493] 9pnet_virtio: no channels available for device syz [ 98.738852][ T8493] 9pnet_virtio: no channels available for device syz [ 98.739193][ T8493] 9pnet_virtio: no channels available for device syz [ 98.739557][ T8493] 9pnet_virtio: no channels available for device syz [ 98.742248][ T8493] 9pnet_virtio: no channels available for device syz [ 98.742621][ T8493] 9pnet_virtio: no channels available for device syz [ 98.742960][ T8493] 9pnet_virtio: no channels available for device syz [ 98.743249][ T8493] 9pnet_virtio: no channels available for device syz [ 98.743556][ T8493] 9pnet_virtio: no channels available for device syz [ 98.743858][ T8493] 9pnet_virtio: no channels available for device syz [ 98.744168][ T8493] 9pnet_virtio: no channels available for device syz [ 98.746909][ T8493] 9pnet_virtio: no channels available for device syz [ 98.747240][ T8493] 9pnet_virtio: no channels available for device syz [ 98.747553][ T8493] 9pnet_virtio: no channels available for device syz [ 98.748023][ T8493] 9pnet_virtio: no channels available for device syz [ 98.748335][ T8493] 9pnet_virtio: no channels available for device syz [ 98.751959][ T8493] 9pnet_virtio: no channels available for device syz [ 98.752983][ T8493] 9pnet_virtio: no channels available for device syz [ 98.753312][ T8493] 9pnet_virtio: no channels available for device syz [ 98.753628][ T8493] 9pnet_virtio: no channels available for device syz [ 98.753934][ T8493] 9pnet_virtio: no channels available for device syz [ 98.754279][ T8493] 9pnet_virtio: no channels available for device syz [ 98.756007][ T8493] 9pnet_virtio: no channels available for device syz [ 98.756322][ T8493] 9pnet_virtio: no channels available for device syz [ 98.757638][ T8493] 9pnet_virtio: no channels available for device syz [ 98.758692][ T8493] 9pnet_virtio: no channels available for device syz [ 98.761429][ T8493] 9pnet_virtio: no channels available for device syz [ 98.761743][ T8493] 9pnet_virtio: no channels available for device syz [ 98.762050][ T8493] 9pnet_virtio: no channels available for device syz [ 98.762353][ T8493] 9pnet_virtio: no channels available for device syz [ 98.762708][ T8493] 9pnet_virtio: no channels available for device syz [ 98.763051][ T8493] 9pnet_virtio: no channels available for device syz [ 98.763320][ T8493] 9pnet_virtio: no channels available for device syz [ 98.763581][ T8493] 9pnet_virtio: no channels available for device syz [ 98.763851][ T8493] 9pnet_virtio: no channels available for device syz [ 98.764130][ T8493] 9pnet_virtio: no channels available for device syz [ 98.764410][ T8493] 9pnet_virtio: no channels available for device syz [ 98.766867][ T8501] netlink: 666 bytes leftover after parsing attributes in process `syz.0.684'. [ 98.767101][ T8493] 9pnet_virtio: no channels available for device syz [ 98.767505][ T8493] 9pnet_virtio: no channels available for device syz [ 98.767903][ T8493] 9pnet_virtio: no channels available for device syz [ 98.768208][ T8493] 9pnet_virtio: no channels available for device syz [ 98.768520][ T8493] 9pnet_virtio: no channels available for device syz [ 98.768824][ T8493] 9pnet_virtio: no channels available for device syz [ 98.771550][ T8493] 9pnet_virtio: no channels available for device syz [ 98.772843][ T8493] 9pnet_virtio: no channels available for device syz [ 98.773137][ T8493] 9pnet_virtio: no channels available for device syz [ 98.773956][ T8493] 9pnet_virtio: no channels available for device syz [ 98.774268][ T8493] 9pnet_virtio: no channels available for device syz [ 98.774582][ T8493] 9pnet_virtio: no channels available for device syz [ 98.776798][ T8493] 9pnet_virtio: no channels available for device syz [ 98.777149][ T8493] 9pnet_virtio: no channels available for device syz [ 98.777464][ T8493] 9pnet_virtio: no channels available for device syz [ 98.779605][ T8493] 9pnet_virtio: no channels available for device syz [ 99.010563][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 99.082182][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.082386][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.329048][ T5943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 99.387706][ T8545] rnbd_client L607: Mapping device / on session s0, (access_mode: rw, nr_poll_queues: 0) [ 99.399239][ T8545] rnbd_client L1256: Session s0 not found, and path parameter not given [ 99.458886][ T5943] usb 9-1: device descriptor read/64, error -71 [ 99.519880][ T8547] hfsplus: unable to find HFS+ superblock [ 99.528926][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 99.698879][ T5943] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 99.826037][ T8552] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 99.829150][ T5943] usb 9-1: device descriptor read/64, error -71 [ 99.862966][ T8554] /dev/sr0: Can't open blockdev [ 99.867521][ T8554] batadv_slave_1: entered promiscuous mode [ 99.880479][ T8554] /dev/sr0: Can't open blockdev [ 99.887037][ T8553] batadv_slave_1: left promiscuous mode [ 99.938635][ T5943] usb usb9-port1: attempt power cycle [ 100.000989][ T8570] FAULT_INJECTION: forcing a failure. [ 100.000989][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 100.001012][ T8570] CPU: 2 UID: 0 PID: 8570 Comm: syz.0.706 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 100.001030][ T8570] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 100.001035][ T8570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.001043][ T8570] Call Trace: [ 100.001047][ T8570] [ 100.001053][ T8570] dump_stack_lvl+0x100/0x190 [ 100.001144][ T8570] should_fail_ex.cold+0x5/0xa [ 100.001172][ T8570] should_failslab+0xc2/0x120 [ 100.001204][ T8570] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.001224][ T8570] ? __kernfs_new_node+0xd2/0xa10 [ 100.001268][ T8570] __kernfs_new_node+0xd2/0xa10 [ 100.001290][ T8570] ? __pfx___kernfs_new_node+0x10/0x10 [ 100.001311][ T8570] ? lock_acquire+0x1d1/0x380 [ 100.001342][ T8570] ? kernfs_root+0x23/0x2a0 [ 100.001359][ T8570] ? find_held_lock+0x2b/0x80 [ 100.001372][ T8570] ? kernfs_root+0xee/0x2a0 [ 100.001388][ T8570] ? kernfs_root+0xee/0x2a0 [ 100.001409][ T8570] kernfs_new_node+0x194/0x200 [ 100.001429][ T8570] ? __pfx_kernfs_new_node+0x10/0x10 [ 100.001449][ T8570] ? kernfs_add_one+0x213/0xb40 [ 100.001470][ T8570] __kernfs_create_file+0x53/0x350 [ 100.001487][ T8570] sysfs_add_file_mode_ns+0x207/0x3c0 [ 100.001508][ T8570] internal_create_group+0x593/0xfb0 [ 100.001532][ T8570] ? __pfx_internal_create_group+0x10/0x10 [ 100.001552][ T8570] ? kernfs_create_link+0x1f1/0x280 [ 100.001568][ T8570] internal_create_groups+0x9d/0x150 [ 100.001586][ T8570] device_add+0x7c8/0x1970 [ 100.001640][ T8570] ? __pfx_device_add+0x10/0x10 [ 100.001657][ T8570] ? lockdep_init_map_type+0x5c/0x250 [ 100.001675][ T8570] ? __init_waitqueue_head+0xca/0x150 [ 100.001697][ T8570] netdev_register_kobject+0x1df/0x410 [ 100.001769][ T8570] register_netdevice+0x1313/0x26b0 [ 100.001795][ T8570] ? __pfx_register_netdevice+0x10/0x10 [ 100.001809][ T8570] ? dst_cache_init+0x266/0x350 [ 100.001827][ T8570] geneve_newlink+0x9a2/0x1250 [ 100.001869][ T8570] ? __pfx_geneve_newlink+0x10/0x10 [ 100.001893][ T8570] ? dev_validate_mtu+0xbf/0x190 [ 100.001908][ T8570] ? rtnl_create_link+0xa4b/0xf80 [ 100.001924][ T8570] ? __pfx_geneve_newlink+0x10/0x10 [ 100.001940][ T8570] rtnl_newlink+0x1697/0x2620 [ 100.001961][ T8570] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.001976][ T8570] ? avc_has_perm_noaudit+0x56/0x470 [ 100.002004][ T8570] ? find_held_lock+0x2b/0x80 [ 100.002016][ T8570] ? avc_has_perm_noaudit+0x11e/0x470 [ 100.002031][ T8570] ? avc_has_perm_noaudit+0x11e/0x470 [ 100.002061][ T8570] ? lock_acquire+0x1d1/0x380 [ 100.002078][ T8570] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 100.002094][ T8570] ? find_held_lock+0x2b/0x80 [ 100.002107][ T8570] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.002122][ T8570] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.002137][ T8570] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.002153][ T8570] rtnetlink_rcv_msg+0x95e/0xe90 [ 100.002171][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.002189][ T8570] ? __lock_acquire+0x5c0/0x1f40 [ 100.002210][ T8570] netlink_rcv_skb+0x159/0x420 [ 100.002240][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.002257][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.002277][ T8570] ? netlink_deliver_tap+0x1ae/0xb50 [ 100.002294][ T8570] netlink_unicast+0x668/0x950 [ 100.002311][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 100.002331][ T8570] netlink_sendmsg+0x9ac/0x10c0 [ 100.002348][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.002365][ T8570] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.002386][ T8570] ? ____sys_sendmsg+0xa99/0xc30 [ 100.002410][ T8570] ____sys_sendmsg+0xa99/0xc30 [ 100.002424][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.002441][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.002460][ T8570] ? plist_check_list+0x1b8/0x280 [ 100.002516][ T8570] ? plist_del+0x308/0x510 [ 100.002535][ T8570] ___sys_sendmsg+0x190/0x1e0 [ 100.002552][ T8570] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.002569][ T8570] ? futex_wake+0x220/0x5e0 [ 100.002593][ T8570] ? find_held_lock+0x2b/0x80 [ 100.002618][ T8570] __sys_sendmsg+0x160/0x210 [ 100.002632][ T8570] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.002654][ T8570] do_syscall_64+0x123/0x790 [ 100.002675][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.002689][ T8570] RIP: 0033:0x7f8c7cf9f559 [ 100.002700][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.002711][ T8570] RSP: 002b:00007f8c7ddc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.002724][ T8570] RAX: ffffffffffffffda RBX: 00007f8c7d225fa0 RCX: 00007f8c7cf9f559 [ 100.002732][ T8570] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 100.002740][ T8570] RBP: 00007f8c7d036b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.002747][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.002755][ T8570] R13: 00007f8c7d226038 R14: 00007f8c7d225fa0 R15: 00007fff8bc43d08 [ 100.002773][ T8570] [ 100.277925][ T5943] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 100.299514][ T5943] usb 9-1: device descriptor read/8, error -71 [ 100.456878][ T8585] loop2: detected capacity change from 0 to 7 [ 100.463522][ C2] blk_print_req_error: 6 callbacks suppressed [ 100.463534][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.463572][ C2] buffer_io_error: 5 callbacks suppressed [ 100.463578][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.463718][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.463748][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.463875][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.463903][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464038][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464067][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464195][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464224][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464337][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464364][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464489][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464517][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464681][ T8585] ldm_validate_partition_table(): Disk read failed. [ 100.464799][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464829][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.464949][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.464976][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.470074][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.470115][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.470929][ T8585] Dev loop2: unable to read RDB block 0 [ 100.472388][ T8585] loop2: unable to read partition table [ 100.472554][ T8585] loop2: partition table beyond EOD, truncated [ 100.472615][ T8585] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 100.537835][ T5943] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 100.558278][ T5943] usb 9-1: device descriptor read/8, error -71 [ 100.559489][ T8587] new mount options do not match the existing superblock, will be ignored [ 100.566580][ T8587] xt_hashlimit: overflow, rate too high: 1 [ 100.567087][ T8587] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 100.669531][ T5943] usb usb9-port1: unable to enumerate USB device [ 100.712038][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 100.712057][ T42] audit: type=1400 audit(2000000005.009:2637): avc: denied { unmount } for pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.753736][ T42] audit: type=1400 audit(2000000005.049:2638): avc: denied { write } for pid=8590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.804807][ T42] audit: type=1400 audit(2000000005.099:2639): avc: denied { write } for pid=8595 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.868017][ T42] audit: type=1400 audit(2000000005.169:2640): avc: denied { write } for pid=8599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.914811][ T42] audit: type=1400 audit(2000000005.209:2641): avc: denied { write } for pid=8609 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.915696][ T42] audit: type=1400 audit(2000000005.209:2642): avc: denied { mounton } for pid=8611 comm="syz.3.718" path="/143/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 100.984703][ T42] audit: type=1400 audit(2000000005.279:2643): avc: denied { write } for pid=8617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.030772][ T42] audit: type=1400 audit(2000000005.329:2644): avc: denied { write } for pid=8624 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.089625][ T42] audit: type=1400 audit(2000000005.389:2645): avc: denied { watch watch_reads } for pid=8618 comm="syz.0.719" path="/204/file0" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.090540][ T42] audit: type=1400 audit(2000000005.389:2646): avc: denied { write } for pid=8627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.741315][ T8613] overlayfs: statfs failed on './file0' [ 101.805733][ T8635] device-mapper: ioctl: Unable to rename non-existent device, to uuid CRP-syzd1 [ 101.858260][ T8637] loop7: detected capacity change from 0 to 7 [ 101.914878][ T8637] Dev loop7: unable to read RDB block 7 [ 101.915005][ T8637] loop7: unable to read partition table [ 101.916294][ T8637] loop7: partition table beyond EOD, truncated [ 101.916632][ T8637] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 101.953378][ T8641] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 101.953402][ T8641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.954226][ T8641] vhci_hcd vhci_hcd.0: Device attached [ 101.955502][ T8649] vhci_hcd: connection closed [ 101.959211][ T5866] vhci_hcd vhci_hcd.0: stop threads [ 101.959753][ T5866] vhci_hcd vhci_hcd.0: release socket [ 101.959774][ T5866] vhci_hcd vhci_hcd.0: disconnect device [ 102.647950][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.875272][ T8678] overlayfs: empty lowerdir [ 102.877301][ T5797] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 102.915560][ T8682] sctp: [Deprecated]: syz.3.729 (pid 8682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.915560][ T8682] Use struct sctp_sack_info instead [ 102.992217][ T8688] jffs2: notice: (8688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 103.061661][ T8691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.262391][ T8696] netlink: 'syz.3.733': attribute type 8 has an invalid length. [ 103.729926][ T8702] sctp: [Deprecated]: syz.4.735 (pid 8702) Use of int in maxseg socket option. [ 103.729926][ T8702] Use struct sctp_assoc_value instead [ 103.922916][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.740'. [ 104.026652][ T8716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=8716 comm=syz.4.741 [ 104.033420][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 104.053762][ T8716] team0: Port device team_slave_0 removed [ 104.157545][ T8718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.742'. [ 104.186312][ T8722] loop5: detected capacity change from 0 to 4095 [ 104.410684][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 104.420155][ T8733] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 104.438231][ T1666] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 104.450340][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.450568][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.454423][ T8737] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 104.588679][ T1666] usb 9-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 104.589600][ T1666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 104.589617][ T1666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.589629][ T1666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.591257][ T1666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.591276][ T1666] usb 9-1: Product: syz [ 104.591288][ T1666] usb 9-1: Manufacturer: syz [ 104.591300][ T1666] usb 9-1: SerialNumber: syz [ 104.593426][ T1666] usb 9-1: config 0 descriptor?? [ 104.799044][ T1666] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 104.999378][ T8743] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 105.021346][ T8743] bond0: entered promiscuous mode [ 105.022592][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.037614][ T8743] vlan2: entered allmulticast mode [ 105.037634][ T8743] bond0: entered allmulticast mode [ 105.811435][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 105.811455][ T42] audit: type=1400 audit(2000000010.109:2667): avc: denied { create } for pid=8763 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.129323][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.129604][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.131200][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.134624][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.136738][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.136959][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.137538][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.137728][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.138493][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.138745][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.247958][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.250216][ T5787] ------------[ cut here ]------------ [ 106.250226][ T5787] refcnt < 0 [ 106.250276][ T5787] WARNING: net/bluetooth/hci_conn.c:649 at hci_conn_timeout+0x16a/0x230, CPU#2: kworker/u34:2/5787 [ 106.258406][ T5787] Modules linked in: [ 106.259890][ T5787] CPU: 2 UID: 0 PID: 5787 Comm: kworker/u34:2 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 106.264055][ T5787] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 106.265931][ T5787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.269196][ T5787] Workqueue: hci1 hci_conn_timeout [ 106.270891][ T5787] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 106.272696][ T5787] Code: 44 0f b6 2d 73 16 86 07 31 ff 41 83 e5 40 44 89 ee e8 ca f7 2e f7 45 84 ed 0f 84 02 ff ff ff e9 d5 0e 94 f6 e8 a7 fd 2e f7 90 <0f> 0b 90 e8 9e fd 2e f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 106.278776][ T5787] RSP: 0018:ffffc900036e7bf8 EFLAGS: 00010293 [ 106.280738][ T5787] RAX: 0000000000000000 RBX: ffff88802764ca50 RCX: 0000000000000000 [ 106.283263][ T5787] RDX: ffff88802c04a580 RSI: ffffffff8adf4539 RDI: 0000000000000005 [ 106.285759][ T5787] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00000000ffffffff [ 106.288338][ T5787] R10: ffff88802764c013 R11: 000000000000776b R12: ffff88802764c000 [ 106.290801][ T5787] R13: ffff88802c04aa44 R14: 0000000000000000 R15: ffff888034962800 [ 106.293270][ T5787] FS: 0000000000000000(0000) GS:ffff8880d4690000(0000) knlGS:0000000000000000 [ 106.296078][ T5787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.297855][ T10] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 106.300726][ T5787] CR2: 00007f8c7b1d3fa8 CR3: 000000005216c000 CR4: 0000000000352ef0 [ 106.303225][ T5787] Call Trace: [ 106.304292][ T5787] [ 106.305238][ T5787] process_one_work+0xac7/0x1b10 [ 106.306829][ T5787] ? __pfx_process_one_work+0x10/0x10 [ 106.308755][ T5787] ? lock_acquire+0x1d1/0x380 [ 106.310304][ T5787] ? __pfx_hci_conn_timeout+0x10/0x10 [ 106.312334][ T5787] worker_thread+0x5ef/0xe50 [ 106.313899][ T5787] ? kthread+0x13a/0x450 [ 106.315628][ T5787] ? __pfx_worker_thread+0x10/0x10 [ 106.317310][ T5787] kthread+0x373/0x450 [ 106.318695][ T5787] ? __pfx_kthread+0x10/0x10 [ 106.320230][ T5787] ret_from_fork+0x730/0xd60 [ 106.321734][ T5787] ? __pfx_ret_from_fork+0x10/0x10 [ 106.323409][ T5787] ? __switch_to+0x800/0x10e0 [ 106.324924][ T5787] ? __pfx_kthread+0x10/0x10 [ 106.326449][ T5787] ret_from_fork_asm+0x1a/0x30 [ 106.328156][ T5787] [ 106.329380][ T5787] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.332253][ T5787] CPU: 2 UID: 0 PID: 5787 Comm: kworker/u34:2 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 106.335872][ T5787] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 106.337755][ T5787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.341009][ T5787] Workqueue: hci1 hci_conn_timeout [ 106.343073][ T5787] Call Trace: [ 106.344422][ T5787] [ 106.345624][ T5787] dump_stack_lvl+0x100/0x190 [ 106.347558][ T5787] vpanic+0x2dc/0x6f8 [ 106.349203][ T5787] panic+0xd1/0xe0 [ 106.350659][ T5787] ? __pfx_panic+0x10/0x10 [ 106.352402][ T5787] check_panic_on_warn.cold+0x19/0x34 [ 106.354217][ T5787] ? hci_conn_timeout+0x16a/0x230 [ 106.355754][ T5787] __warn.cold+0x191/0x321 [ 106.357104][ T5787] __report_bug+0x30f/0x440 [ 106.358474][ T5787] ? hci_conn_timeout+0x16a/0x230 [ 106.360364][ T5787] ? __pfx___report_bug+0x10/0x10 [ 106.361955][ T5787] ? add_lock_to_list+0x9d/0x1d0 [ 106.363550][ T5787] ? check_prev_add+0x354/0xe60 [ 106.365091][ T5787] ? __lock_acquire+0x5c0/0x1f40 [ 106.366690][ T5787] ? hci_conn_timeout+0x16a/0x230 [ 106.368286][ T5787] report_bug+0xb3/0x220 [ 106.369623][ T5787] ? hci_conn_timeout+0x16a/0x230 [ 106.371229][ T5787] handle_bug+0x16a/0x2a0 [ 106.372634][ T5787] exc_invalid_op+0x17/0x50 [ 106.374086][ T5787] asm_exc_invalid_op+0x1a/0x20 [ 106.375652][ T5787] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 106.377415][ T5787] Code: 44 0f b6 2d 73 16 86 07 31 ff 41 83 e5 40 44 89 ee e8 ca f7 2e f7 45 84 ed 0f 84 02 ff ff ff e9 d5 0e 94 f6 e8 a7 fd 2e f7 90 <0f> 0b 90 e8 9e fd 2e f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 106.383435][ T5787] RSP: 0018:ffffc900036e7bf8 EFLAGS: 00010293 [ 106.385330][ T5787] RAX: 0000000000000000 RBX: ffff88802764ca50 RCX: 0000000000000000 [ 106.387827][ T5787] RDX: ffff88802c04a580 RSI: ffffffff8adf4539 RDI: 0000000000000005 [ 106.390296][ T5787] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00000000ffffffff [ 106.393156][ T5787] R10: ffff88802764c013 R11: 000000000000776b R12: ffff88802764c000 [ 106.395716][ T5787] R13: ffff88802c04aa44 R14: 0000000000000000 R15: ffff888034962800 [ 106.398335][ T5787] ? hci_conn_timeout+0x169/0x230 [ 106.400011][ T5787] ? hci_conn_timeout+0x169/0x230 [ 106.401679][ T5787] process_one_work+0xac7/0x1b10 [ 106.403297][ T5787] ? __pfx_process_one_work+0x10/0x10 [ 106.404989][ T5787] ? lock_acquire+0x1d1/0x380 [ 106.406505][ T5787] ? __pfx_hci_conn_timeout+0x10/0x10 [ 106.408212][ T5787] worker_thread+0x5ef/0xe50 [ 106.409681][ T5787] ? kthread+0x13a/0x450 [ 106.410981][ T5787] ? __pfx_worker_thread+0x10/0x10 [ 106.412542][ T5787] kthread+0x373/0x450 [ 106.413753][ T5787] ? __pfx_kthread+0x10/0x10 [ 106.415206][ T5787] ret_from_fork+0x730/0xd60 [ 106.416677][ T5787] ? __pfx_ret_from_fork+0x10/0x10 [ 106.418291][ T5787] ? __switch_to+0x800/0x10e0 [ 106.419781][ T5787] ? __pfx_kthread+0x10/0x10 [ 106.421241][ T5787] ret_from_fork_asm+0x1a/0x30 [ 106.422783][ T5787] [ 106.424467][ T5787] Kernel Offset: disabled [ 106.425829][ T5787] Rebooting in 86400 seconds..