last executing test programs: 4m20.491345186s ago: executing program 0 (id=1365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r1 = socket$netlink(0x10, 0x3, 0x4) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4m20.281402733s ago: executing program 0 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fb", 0x1}], 0x1}}], 0x1, 0x2008c058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 4m20.281105672s ago: executing program 0 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) 4m20.171409003s ago: executing program 0 (id=1372): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x39, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x65, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x63, 0x30, 0x30, 0x31, 0x30, 0x38, 0x1f, 0x61, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 4m20.171134522s ago: executing program 0 (id=1373): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x5103, &(0x7f0000000180)={0x0, 0x1370, 0x11000, 0x2, 0x2cf}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004"], 0x50) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m20.001084279s ago: executing program 0 (id=1375): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x35}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36, 0x64, 0x38, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x64, 0x31, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x33, 0x30, 0x62]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) 4m5.949767809s ago: executing program 1 (id=1597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) brk(0x200004ffc000) 4m5.879087819s ago: executing program 1 (id=1599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m5.81098459s ago: executing program 1 (id=1601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, 0xffffffffffffffff, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 4m5.554752702s ago: executing program 1 (id=1606): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x39, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x65, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x63, 0x30, 0x30, 0x31, 0x30, 0x38, 0x1f, 0x61, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 4m5.501470533s ago: executing program 1 (id=1608): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0xffffd4ea, 0x4) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 4m5.439126076s ago: executing program 1 (id=1609): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$usbfs(r0, &(0x7f0000000080)=""/143, 0x8f) 4m4.813959225s ago: executing program 32 (id=1375): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x35}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36, 0x64, 0x38, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x64, 0x31, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x33, 0x30, 0x62]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) 3m50.409374265s ago: executing program 33 (id=1609): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$usbfs(r0, &(0x7f0000000080)=""/143, 0x8f) 1m32.123133052s ago: executing program 4 (id=3602): write(0xffffffffffffffff, &(0x7f0000000380)='100', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x42000000) (fail_nth: 30) 1m32.000268235s ago: executing program 4 (id=3604): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000080)='0\x00', 0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000040)={0x3, 0x20, 0xfffffffffffff800, 0x20, 0x401}, 0x48) (async) write$tcp_mem(r2, &(0x7f0000000040)={0x3, 0x20, 0xfffffffffffff800, 0x20, 0x401}, 0x48) 1m32.000099693s ago: executing program 4 (id=3605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xfffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) utimensat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x501, 0x0) fspick(r3, &(0x7f0000000140)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1) r4 = getpid() prlimit64(r4, 0x2, &(0x7f0000000100)={0x8000000000000001, 0x7}, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='zonefs\x00', 0x0, &(0x7f0000000400)='\xcb\x03\x11I\xac)\xc5\x7f\xec\xe2 \x0fcrS~i\xcd\x88_p\xe1\x0e\xda\xfb\xc9\xc5\x8dY\xf7R\xfb\xa6\"\x9a=\'\xdc\x99}\xb2_\xb8\xe0D\xd2g\xd40}\xdf\xfd\xd6\x8d\xdb\xda\xdf\x8c\x1b\xd5kW_g\xfd\xa1\xb7jlN\xf5\x0e\xb9\x18\x1e\x9bx\xef@P\xb5>\xc3\xb0\xde\x96m\xc5]y\x81\x05\xc3\xf5\xc8\xd1/\xfe\xefqq`\xe0\x93\xeb\xf3\xc3jS,\x15\xe2\x12\xf2\x1a\x98\x04=\xe7\x1f\x12\xbf\xfc\xe6^\xa8\x8e\xb9 \xbbh\xa5.\xa9\x9e\xf2\xae8\xc4\x89\xb7\xca\x8e\v)\x84L\x92\xb1D\xd4\x845U+') write(r3, &(0x7f0000000b00)='127.0.0.1', 0x9) 1m31.880600772s ago: executing program 4 (id=3609): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x84a}, 0x94) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0x5, 0x4, 0x1, 'queue1\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mapper/control\x00', 0x2, 0x116) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfa, 0x60000000}, 0x50) 1m31.728753773s ago: executing program 4 (id=3612): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m31.600001196s ago: executing program 4 (id=3614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) write(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9, 0x1e, 0x0) 1m31.522454959s ago: executing program 34 (id=3614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) write(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9, 0x1e, 0x0) 1m22.734472428s ago: executing program 6 (id=3730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RCREATE(r1, &(0x7f0000000500)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x1}, 0x9}}, 0x18) 1m22.734243196s ago: executing program 6 (id=3731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x47, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m21.840067415s ago: executing program 6 (id=3736): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305006000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 1m21.800984549s ago: executing program 6 (id=3737): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f0000002400), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000002300)={0xa, 0x8, 0x7fff, 0x8, 0xffff, 0x8, 0xa}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd896ad000076f2"], 0x125) (async) unlink(&(0x7f00000002c0)='./file0\x00') (async) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78}) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e24, @local}, 0x10) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000002340)="dcb1ea1d01ec2feff0eb44b37a48451eb4b7ffaa6f24e7dc38abe18fc973087a1b6e72f3c59ad5a48b00e29e49763c703d0a72b525e4108d8055ba9c797e045651e0d9801c902001ac8f72f48a6699c79613d71cae478cd977239d8db9", 0x5d) syz_usb_connect(0x3, 0x34, 0x0, 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a53f70e0d64b8fd06d79a3a0892b8d437952eedceec4cf030223539716403bd67e1a06875157a6336762aa3e07aada8ee9630cd8c40560d0d92948633255135e4b2cd10f028191576c08c211f070fc0e2f922d61ebae57991e22b69eee3292daf7ce17601a33cc16b0eceb590778c43b6f6e6caa04e1", @ANYRES16=r2, @ANYBLOB="010000000000000000001800000018003080140001800500020000000000080001000100000008000300", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r7, 0xfdada000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000030528bd70040000090000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800230001040000"], 0x28}}, 0x0) 1m18.507798346s ago: executing program 6 (id=3772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x40, 0x0, 0x0) 1m18.270612716s ago: executing program 6 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) syz_emit_ethernet(0x10e, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="68ee69fe4ac9570fdcfd14c645da29844262963a4d43991418df6cbdc92f6b5bc74040878f01d34803e82abe1af8f6049997434d7d17e993060de4215a1d2d8250948e4149c1322519b28ea20e73f5eb828b3d64672c5e56ec4ae032c90c1fb15ad564af71644130424a18ccd6821cb74b0883de23abe2e10b3927d76a008718cd0f7102c13b089cce9074206300884dcbe971fd4b5dc0cd7e27cded"], 0x0) 1m18.19750939s ago: executing program 35 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) syz_emit_ethernet(0x10e, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="68ee69fe4ac9570fdcfd14c645da29844262963a4d43991418df6cbdc92f6b5bc74040878f01d34803e82abe1af8f6049997434d7d17e993060de4215a1d2d8250948e4149c1322519b28ea20e73f5eb828b3d64672c5e56ec4ae032c90c1fb15ad564af71644130424a18ccd6821cb74b0883de23abe2e10b3927d76a008718cd0f7102c13b089cce9074206300884dcbe971fd4b5dc0cd7e27cded"], 0x0) 1m15.538547708s ago: executing program 5 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x478}, 0x1, 0x0, 0x0, 0xc0}, 0x20004014) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m15.480087892s ago: executing program 5 (id=3804): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x280080, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) (async) ioctl$CDROM_DISC_STATUS(r0, 0x5327) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000080)) (async) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000080)={0x0}) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000100)={r2, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DVB_DVR_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000180)={0xc6, 0x80, 0x80000000, 0x595c, 0x26, 0x1}) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x11, 0x10, 0x70bd28, 0x25dfdbff, {0x13}, [@nested={0x24, 0x11a, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) memfd_secret(0x0) (async) r3 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000300)={r4, 0x1, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e20, 0xb8f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6f}, @in6={0xa, 0x4e23, 0xe4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @broadcast}], 0xd0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', r4, 0x4, 0x6, 0x1, 0x7f, 0x22, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x2, 0x1e}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r8 = accept4$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14, 0x80800) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000840)={@msf={0x2, 0x2, 0x81}, 0x2, 0x45, &(0x7f00000007c0)=""/69}) (async) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000840)={@msf={0x2, 0x2, 0x81}, 0x2, 0x45, &(0x7f00000007c0)=""/69}) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f0000000880)={0x15, 0x400}) (async) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f0000000880)={0x15, 0x400}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$mtd(r1, &(0x7f0000000900)="ee92de8d98aa7cf28fc0257e9da5c19636476ff722543f7b7369cd876d832da02b1882900e902a46f4aa91eb6dfd525a9f78c0cfc441ebe6413a0043af682416dd535a8cc80dc604ea9d9ddb12f003d7f6e301d0659bdb201cd5c40637031c4d50acdc01c18dedd863fe9530a37e114a34d7041241d8dcf993ee6211a9fda642153cb0be7dbce2e7b250f2d0d74c4cb587e0d04270a33007005deaed50aa02aa4fbc6b", 0xa3) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000009c0)={0x3, 0x4}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000b40)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r9, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x915}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb7f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x52c31adb60d7a643}, 0x0) r11 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20009050}, 0x4000) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20009050}, 0x4000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000000e80)={0x0, 0x0, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000f40)={&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d80)="8167901a7a170d2f3709eafe688218dc12e90ec7bc8afd8ff0d7f464d93cb21e78ce18d4a51c175168d7df5af939379cb3e2f776fe63ffb9aa6a9d44662ed833cf575d17153c4aad4cede0c46b95f9ab9fb194f2048a974895c567c06b345fb501bc7615a48250e6776e672b766800f603f329c31129c7d8800a5e1796be5f90940136dacc7ed3a521784ef89e4aaf5d6f4344f8fc5789e2b67fef0ff99ed2720faf", 0xa2}], 0x1, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r13]}}, @rights={{0x18, 0x1, 0x1, [r3, r8]}}], 0x48, 0x81}, 0x80004) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001000)={&(0x7f0000000f80), &(0x7f0000000fc0)=""/22, 0x16}) (async) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001000)={&(0x7f0000000f80), &(0x7f0000000fc0)=""/22, 0x16}) 1m15.419649885s ago: executing program 5 (id=3806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8, 0x1b, 0xffffffc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(r0, 0x0, 0x0) 1m15.418092609s ago: executing program 5 (id=3810): r0 = userfaultfd(0x80001) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='0', 0xffffffca) utimes(&(0x7f0000000000)='./file0\x00', 0x0) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0xfd, 0x80}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f0000000040)=[0x10, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) read(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x2, @private0, 0x80000001}, {0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0xffffffffffffffff, {[0xfff, 0x0, 0x81, 0x3, 0x80000001, 0x4, 0x1, 0x8001]}}, 0x5c) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='lzo-rle', 0x7) 1m15.307463518s ago: executing program 5 (id=3812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.878499287s ago: executing program 5 (id=3814): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) (fail_nth: 1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m14.821810741s ago: executing program 36 (id=3814): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) (fail_nth: 1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 32.780315283s ago: executing program 2 (id=4382): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1a8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='coda\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file1/file2\x00', 0x52) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000340)='nfsd\x00', 0x10011, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000210001002cbd7000fbdbdf250a14807a000000010a000000140002000000000000000000000000000000000114000100fe8000000000000000914b664a9e000000000000bb0500130001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file1/file2/file0\x00', 0x0, 0x8}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="055e2a535682cb0000060000000000000000", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000100), 0x12) listen(r9, 0x1) 32.699496024s ago: executing program 2 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf2564000000080001001c00000008000300e2945a72d628656d39b0f69b99f623c3248ecdf1115b122f8f3da05db87042bc9fe06d549d5f1f001ab61136995b393b4c65b900a35bf5f8", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24004001}, 0x4002014) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000000080), 0x0, 0x0, 0x0) fremovexattr(r9, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x48, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x2a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "4bc4e87b30f17060d396"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 26.843774877s ago: executing program 2 (id=4387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007440)='!', 0x1}], 0x1, 0x0, 0x3e8}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006180)="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", 0x224}], 0x1}}], 0x2, 0x4000092) 19.527361604s ago: executing program 2 (id=4387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007440)='!', 0x1}], 0x1, 0x0, 0x3e8}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006180)="8bb10ed6e7f8f14af22b2e472f4b3311b610b826202f319ac6c8565b3bcbd0c18710ca0ddb1f42a2dc704ab16d47a881240236cb2e5753e75b97564cde682a79223548240a700b1c06b00f5864f7c5b6d92d6cca5c373171cccee14b251f252d1f850237ece161ad5583090c8e3addcb4079b0cbf363510a1006985738c31170eaed70df45da1bf57d0d0a8861dd9f81edc343990464226730326a4bf14d50465e46bc8e21dd40eab3813366ff0372912a7dad2ba33bc45dabc9fa5d539a874176ad852329f2a7d8c1d416baaa63d9f7887b50ade8b837deea23b0cf02aaf4bd8ebc1d34f7c3a83503942fc5a11c81c2918def82c293140f22847a62743b97ce92913e29c8ff3b97745269748ae5d2389be10b7a937c9b96429d434fa20c92ab337856921a24ed6778dc293bd1244875fd333a9f01f85911a2b02e2a9286b1b9914f36bc2a5c4b9013c5088a1bec8e1b06c1e28a7a2ec0bc96152df418cacd9c19797f1d2922d3621f29645ea2c7f98a6cf735a1dbb33bb68a5cb34c274a75740a292ae6d318fd2d5a8bf0979cc01816f27a5ee340c565286797ee0e4f5b9c4fbd76a9246c242d39276bf4ffec8534ab5f5cfca88286ded4f133536712c1f92eb5cede9f9cee72e8c9b3289010c1ffe68813cc98a4d26835e98388ab8515ef30171cdeb4d5b8bb4d36ded9590e3e8ce39a3ea04309d1215c9460a80f19836bcf96693029b9e12c248c28e79fb31084776c456a76be7e5ee47d734563956f5b08f9cb3f18", 0x224}], 0x1}}], 0x2, 0x4000092) 12.476784679s ago: executing program 2 (id=4387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007440)='!', 0x1}], 0x1, 0x0, 0x3e8}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006180)="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", 0x224}], 0x1}}], 0x2, 0x4000092) 5.656007227s ago: executing program 2 (id=4387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007440)='!', 0x1}], 0x1, 0x0, 0x3e8}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006180)="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", 0x224}], 0x1}}], 0x2, 0x4000092) 1.387515915s ago: executing program 8 (id=4683): r0 = socket(0x0, 0x803, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x5c342) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8402, 0x1, 0x1}, 0x18, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r3, 0x40086806, 0x21) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$EVIOCGABS20(r1, 0x80184520, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.238661663s ago: executing program 7 (id=4684): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x3, "a8dfa6fcc25700000000aed10000df00000500", 0x3, 0x7ffffff8, 0x4, 0x3200e0, 0x4050805, 0xa}) 1.233380857s ago: executing program 7 (id=4685): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r1, &(0x7f0000000900)="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", 0x19a, 0x12, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 1.149210197s ago: executing program 7 (id=4687): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r2) 329.578816ms ago: executing program 7 (id=4688): r0 = timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) read(r0, &(0x7f0000000100)=""/137, 0xffda) timerfd_create(0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) read(r0, &(0x7f0000000100)=""/137, 0xffda) (async) 329.11951ms ago: executing program 8 (id=4690): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000300)="3c00000058001f000307f4f9002304000a04d65f08000100020100021700513500b0406700912deb5b859322340433b6156b5c11109c8c489786fcdc", 0x3c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 328.814633ms ago: executing program 8 (id=4691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 326.259948ms ago: executing program 8 (id=4692): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="c109000000000700001d1e010e", 0xd}, {&(0x7f0000000740)="a48f", 0x2}], 0x2}, 0x0) 322.783159ms ago: executing program 3 (id=4693): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8, @mcast1}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 250.322503ms ago: executing program 8 (id=4694): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f", 0x1}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)=[{&(0x7f00000027c0)="df", 0x1}], 0x1}}], 0x2, 0x40088c4) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 250.034483ms ago: executing program 3 (id=4695): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r1, &(0x7f0000000900)="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", 0x19a, 0x12, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 249.459038ms ago: executing program 7 (id=4696): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000209010100f13842c60000000a0000040900010073797a3000f8ffff070004800800ea4f7fffffff100002000c002280040001402120d60001924fd0ecb820ba93e7c6b2f2245fd2"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 117.847175ms ago: executing program 3 (id=4697): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r2) 117.560022ms ago: executing program 8 (id=4698): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4d}, 0x1, 0x0, 0x0, 0x14000000}, 0x24000091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7fff, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x0, 0x5}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 117.161102ms ago: executing program 3 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 10.051894ms ago: executing program 3 (id=4700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) 9.838078ms ago: executing program 7 (id=4701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r1, &(0x7f0000000940)='1', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b63, 0x4) 0s ago: executing program 3 (id=4702): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82803, 0x8e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = fanotify_init(0x8, 0x1000) r2 = open$dir(&(0x7f0000001380)='./file0/file0\x00', 0x40200, 0x80) fanotify_mark(r1, 0x0, 0x1001, r2, &(0x7f00000013c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x4100, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000001400)="0a40f30cbac8dd91852b3cc6fb282160f4bfe2095b31ebd07516140420a9e5ae05798df39a3abcb427543451b7c5eec3055ec2d476750ce11dc4352ebe345f08197295212fb416fce4b9a955b3b7265c9eb262d28e153ee71b032a074394d1261f2132be2e24340dd3013890066e270ad58f6436d74da2d39ee62562a796183cc1dfe402a3b32302676de409ca6093661d65dcc807f3ac8c7f67", 0x9a}, {&(0x7f0000000100)="39681e70a909a20c822134f6ade5afa1affd3e4d1198459dc85d56cef01964389924f1f53550514160a789eb7736996c7a656a617fc608e94c64deb10ec22c05d70b7dae78846a2346c28f178a57034ca2318989147d2f7bd1d55c8bc49c03011dd325748dab97ee5929fc55cf4a6a17afc76fdcc49ddff89aa888057d4718917f436d3d4cda73517324602a269ba693d33e6165e75988763ef0b0f67ab4bacc8450a770f1970e038e83e7da49762c0f6f855de16086e26c90971e757180131fda2cb98175e8e41281206307ccd424c3dcba2fe27a3a59205aec8e1cb6f6ae95024f74bc608e6a0d75c40e9c3dfd299861c129aa25890a6713572643aecb81273aa24577e7069c2d6f49aa90f092bf7717504c16aa6d2b135072138db72717f9dced9d67d57cd9ba9c2d5d97ed8a5f1b0a8b0a37a3d01a13fdc7c3dbe7f176c6252b0540d66a82340ba6648b509c8399d6fedc0de587eb31b8bef1e3f5fa2cf667032a2891ed682f2949097bbefc163be9774a4533cd4327e72d57c6ff1a174762c57d8bef3f991199385c3ba75e041bf660267d26451074e06e83f68f3be41a8c780a3681baa7d6580ba4e49c4d31c905a55e233cc7f911fed02690d11f5e344909909ed56d40ab4a221c49b2387b3b413b2178637f4316fe5196791cd1f5cda88abfa86f6dd493dd0f14e35108ad7483c655d27e3405df1957e2d2d16cbc5df869db9b4047b8be7e0f3ce0ed037f384d9640f8d9ba94b26c5664adbaf8d553493d6f6e49699b50485e4514c6472d8520e6c22ccc0b54275c70cb44bd5032f533474ce91ca574cd36002e31bff1bbd6598c486a1d9e7175e19826cc29cfc0bc02f46f851687946d52ecb49fc8a49cdbf4a6513bc1d78a308d7f17fa952334af5fdb6c8095850ea4cf7119cefd998792accc27fd52f729e57677e96afdd364dc26730f9f02906957376f860d4d9387874c16011eb3b13578abb59769809f4f4f9d2b1aebced4b5533bfb26f5db3c370dfcb8e6553cb465db53d3279a90cac9fa7fae786d53d6d1b73a5e7bbc14c264c80c09f0a701f7e413838d058e970bd432c42b36476a8d38936301322b49fe7b2ce2554b3b2123b349559c85ae6000235a650718b6e0becc15d2cf5e3181dfbcb20d781feaa8a28af63dd77bfc0a75dc30d595a322ba3618c9ec6b0c0942e6e993b75df17273260d88255d43ddfd4118f5799f032f70b9cce0bf8b28175fe947d70c4e0b1af2429be5df657a6cc6df9e78c9910d26b89a91275eeb170584f43e3e3b6a130f50af980c6b924c01c0735facbdb20dfd67d42b348cda023a06806d3ada0280f427edc1211528537b077a89ef8b773e930c1be15fc1b431566597db39c6e8704eb912fb9d8092c1260ff28399d37943d694d5c6fe13af0ecff995e5bf5ba52c9eb2644bb125bd540af8f9ddf14116407162a9ce3d1e2872a2dbc9d5dad8224e730e639f36648992044ba833c53672f420a961cefe6c72e637e6db3b649586807c3524d4ca6669497a0276ad643dcd208f577c36670552bacc04b8e960f62a682257bf163221ce3ede75fe43e1fd92f832b92ce58b97623d30e17c7a668cb997dcea056c39372438e30f353c90157bbc54838e93e443257a41b4f465bf5f8cbdda310cc1ee982a2fd455b6ea728588542fb5c57dcf0c9ac30cf27b4ab938061c2a9cd94a0dcdb2a62c0ac63d6f2f4a88977cbb5b140ecac81b20a3567e95dcb2ff6a974c6eded9afc67999463a14336806d3c7b6cb0f9a61bfbf96853066fa7796cebdbb3c75fd1a0ca35d720b326a452f2f1cbc8220accba29e7f812a074235f32397217af2b691f3412b187305f20e1d47c4b7da318a7e6d4083b62f7d1cc730d50e3c22d1930d7702afd6bb130df3d35306db0f28e2265e3d673fb96e2e7522873c8fb9f50be052d8d8eaad8b2d71d2af8f52793454fa88dcf12a263748ce19556d753b281d109d3004d7df6ea570789bb61b3f089555b9c2cbe84a09356564f70d84d1bbbf2184b690243b5402af78104ad6ad59a43371ba3f49a1cf77fac756c24da32c4f77c04d0b70c3593b368de469ba0998f5c90616519e49bd3a647ada17a03a7a88368efbbe1b200fa3026b99fbbeaa5af5df33bbb7d881a42743b9b56cd3225d5b9b21321f4343e274f8df6afaf247177837218d10984d0eb35f6c1cf03dd1ab7327d21d276f0ca146d5410f05f6e32f230cf68a1d64df5b7541c72f4362376df3b08e60c41d89a9c1f35c069b0d4fd2e063070ce86e316040aca6389fb701cd7ded1e581b5980d0ae9fd7cb5579aee267adbc1badb2c3d0daa080364ec5b702c658463010b660992b68777b246ce2ae0e55f6796c696c66ee21a59c6f8081a85210582f6f3025182ac4bde12d758923768b253ca0f11b65bd240637277df77c9883a96ffe204734c7a9b4f33b4ee5056980583dc872fd7df018209350a2f12dd0d9d93b52e2b3c57a8fe7086dfbe45ff4c9ea83607d7aadcd7d34775bea56d589ca35e9a52a5e09f857f87e333bdfbc21678e9c7cd97c49ff9e95b8b407bff9bea541e7ca7fc897964bdb2777054b9c738f477673a504e8544540d85b74d5bddee98590d0577813c47b148fe50e71d2ceb27025e6f483842057c11ac1d8824decec06657ff4a19ba56fdbc2f421d8ad98208b9ed94560c306a2c36fedcf6b65735aefe73421b7b5def7e845ed29f741813499c9e63f337d615c3e85b7463d75bb8557a64f277d7959c275ac787fa964cfb04dc06e299f538e4d4bf971e76a9404c863fe274d7d49d790d4968aa0b14b7620609b9a25588f02e1fe22697776021607b15d14a7e0a2ed68b3d6ae8fab8783899ba5239dece82bdf87f58d3fb7a38179807ba79bd27d5c458e7e4d0944fb08fb84743347f9d504c0adbbcbd6672f34e2b5990d4032b77f8d83fe72be9fb5c3c4bb9386143d03fb1125f3c8b280d4d3028a069294b5a7eabfdf3c9706cecb9c11a43d6852fca0567d318062076ccc6defe48f6829d7f77cffc1bb0c08effb840d7a17fecc0255fb128ccc00c6cd4cd56b3db30de5e7a69947b1c866d1fe8f716ae50c4c147d2df7a6272ba72596eaf110945de670e9f470bd62d99207191ed9c39240158188bd2600fa14637a4c2751ed086819effa4df36619a17320c9d242c1e411b1ea1d57ea58c6235b41a378a4bc517051fabe84f8795c238e4b2584570c811ec7800dcec4920523563038fd97dbb90bd549b516ade8c0b56a16632e2ea6b6206dc3018fa2637db5fc4585dc7fb26b83947a7bc17eb9b3e909b0dcd1af8d207d0b0abd23d09f20d4a164eb6f8e9cff0e7639d9b792e31a93efac12759ebd85eb830c4182251f373a26eedb5895d1fb4a67c65cf5f74efc65bc42c48d34fb8c6169e473d79611b876c2cc01ada0c6f54497c66499a0d63904d24c6241db1de1b15911cd3becd91f0d3c3c8edd78f7fab564c52741a90b350d3918f7649c61357a526af4094c31d723b11554050ae0281134b71d2e2d01c2ef363b28e547dd8ce2ae79b200f0b7d60671de853d2d31a9193368a0fc4fd29db44c538225ac3e8638b085771fe036ff1369ccc1e109afb3d14644fa67903a3e7ea2009407aee49b2834759d4463f9e2329cd5ab67f792a5dd6eea0cd91f76f90756ad91fbfddf4d05a8ec0a7ea27ddc1d6080b3f2d961eb3525ecadaa8b8476ce634cec6ef92a4122ab622204961ad8a7d2a64f93ef1e392d87558a9dc8b39d85446aeae45319452f92619c61b5a50ac73c2372f870ea9599a19b9cf3641a102b346281c4715c5a7b58d4c960aac6ca01b652203543662373450eb9b8fbcb15b7130b072aee1d35620860657dbfda8c9815a5e5655481f19da42a6271080dede42ba011d91384f726de370c1841bacec3b50388fd5085909ac796204b47a1803cd7706df7a7123df52eb09697a276fe44dae33d7435409b6ca8997ae8dd4310911b83ea9aa49befc852cf0221678b4ea2f8ef27e6f5b74db4172ec290aa7c9a555266a7ed28dba456c88b42f631e6995549f92636b84e509f00667003f7fea06b6886040bff5a7fb2b633ba713d91a8ccfe9c4a834ab235176b6179cfed57cf43be35d47e3aa53fa7f088e42c0145689acac9476997bf9ddaaa0e221a1a688e137818f522869067a1a45fbf6d9385eeb28f20d11061706ad1b5328c5c44c559b9aec8c8bff3c851a7808791ded732063ba5ef639cfcea689d2964565dccbb4048dbd9331961e0e35a821801f983c184b0b12d4eb19f09c98eec42d0adef7abea00f1844631b3136e9ab95d20c2467aebd78654de6eea2c8a2ba55f23fa3d784375cd248dad66abbeed79da3c61ab566c2a76f89f57accac237f6ffd30222a7a84de20d46ec38299fc2eca2fb24880830b34d7a4d41ed1f5d7bf688892c9cf9ae6a8cb1ed2743e8700247886513af6120a382a670ebab32bc5f6b19a4bab7c0f4bcd93a4f968e6da6a8c08a5dcc8d0896c18699dcc11df83ad91fd6204a3fa4cbe485cc44448e4c446c6b48cc598f786ef942c0bce8371c68d8d52094bf2095452ff7b8fca3aa3931533d83723761c6d2c5ffd5cb7dd2df6d9fc0a25599175b74aa68fd4b6b64119fafec5c60b02d6837c6c4dd2a304f67a84f61e0b661394ecb81233f2bf0efa852263b5a27b73b97c75f32f4d88ca3ea57cf8654ecdd8391ec2c880903b042405d00320d3b11a307099dd41389c5cc7086018390facd408999263b8489c7a72f38b5b8c873eeaf0ed3088661d25f3541c60934f157654c8bd5b7ba2cf4ce75cc6238855ff2a08c71375cae640531310aa309a9e6064944a882d8d23c40ba9aa7b7e94f9d201d6fa1f073af47999b0b69bf2994f9950596326dbd3bf56c5a7b5354b39d4f494ea3c4f95b86e937c939983c5ad37b883c43962ee7598370b2903237cc048c447dc9ad553ee49ffd97d70bafe77ada8257a45602b62347c965d1cd4e761e137269efa0f8213edf86c75531cc30921e0e17490eafc95626f58346c971ee3b58c9eeb02467bd8e343532f78cb3a54f011e641cc722a3ebbee41511ce5250489442600de75c4b22b1c8c266dc12e35597ea06d5a794b72115b997c3f228a781a32936d58b84ac0b16ae8a54401e0cd2c3977b9a891fc48cdca38572a3ec8f6655b3ade038536c1c889bdeeafff81797b95a3028cff704712c016becffe82cd3d657b19fb0d309d17183fd856cefbed9229f42c517ffd280f623d1b4ab2c9bcc802e2d0dd6e5ab3779475979d8df4b3c166bd638523f761d74007ba1a99a83d3389f27ad6449b18dca7f1be55c81a2d5b9370c4ebe5a3e6924367c058db47071c8a71f504b17894ff008d76e0ca65e4c4e5da20ebb958dfd83141513a99e27895e679d8fa807e28a131f3cafaf92471ed007ea7405445f768ae7ef6c38dff138c138803aef8d2289a73cc6e47f5e23029e3d69bb8291c5387e1d2ce3f68bff4fb658077f0d7e59845b5608ff7c418a9848046275910ca7db27078e32b66649570a7ac30361d842c96569477fca7362d44323374fdc54eb651048de2f37f02a24d2db0d37325ddb27faf1dddc62f17bbddea3983b38d70e8e6b393b1cbe2298775d113e5198208644634569138ab4518d23f56aa8e38eafd83c37bd25dc1164ab3ec6f8477faeedea12b5417654a34479e971d3d0204d2bedde8519c3ad45d13ff5d6a6ae3f32097602cf41d5b4b7496a16ce4d41ce08438ebc4a843ab2b033ad858d017708172c67255c5dad400461a3019", 0x1000}, {&(0x7f0000001100)="e9f5175fac5bf6ee76ba6c3535dd187d93438ff6412cefb1c205acbbb18ecd64d95b07a431e6e9422e49c4684f81d0ab3b3d094cf35726ea0271e0", 0x3b}, {&(0x7f00000014c0)="1161ec6c48089ee9cc2615a8ce35236c486ed5e9aec106a0f1ae65bb55a757e879a2605b401bd7a7b15d22abc0716a3312e9c17879d2de2afaa321b55c20ed9a0b4cbe98ee0e182c5c0050a831ee7057913bfe4d2253ce59d7b2abaf55c0ec8bbb7715cad52e7f8b81d000a1ab740c1e5a30c4f9b28641b12bd1df3b91df56effb83e742009eb8e92316e81872ac19b1184a32a2e9d71cc0a86a35c2ef3cf489bceae11c30fa9e483ed024073d99833dc1427793fccd615b46d0a0dfc4a096bb553b67e249077a10df747d3e7aa3229381f7d601d2be516ab0", 0xd9}, {&(0x7f0000001240)="1500a5f9c9fe2079d6d35e0184caf8c921362ca7927fdd6e5a0831a7b1b3a8531baa426f6d89031b153b8d4492c0cd7a06c74eb4d491e0140e79fb68e4c54b8795cfb3cbac9db4cc515d40fc637fae794768305b97727588f6b4e754efa63f53d4a34806eb3c0515005ba5ac69626216b0c1a1648be23257dda36ea8232019f92db23498b1ffffffff93ccb1843e174120fd4fd3db18fc41612cc3f68828062ee6dea780", 0xa4}], 0x5, 0x7, 0xb8, 0x16) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0) kernel console output (not intermixed with test programs): 8F [ 336.019346][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.019366][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.020261][T11830] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 336.020295][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.020318][T11830] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.020338][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.020360][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.021200][T11830] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 336.021231][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.021252][T11830] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.021272][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.021291][T11830] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.024259][T11830] usb 12-1: string descriptor 0 read error: -22 [ 336.024328][T11830] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.044061][T11830] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 336.058175][ T2366] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 336.058962][ T2366] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 336.058987][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.059005][ T2366] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.059023][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.059040][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.059822][ T2366] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 336.059846][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.059861][ T2366] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.059879][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.059897][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.060663][ T2366] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 336.060685][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.060702][ T2366] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.060719][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.060736][ T2366] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.067050][ T2366] usb 8-1: string descriptor 0 read error: -22 [ 336.067163][ T2366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.082713][ T2366] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 336.196952][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 336.348452][T17794] FAULT_INJECTION: forcing a failure. [ 336.348452][T17794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.348525][T17794] CPU: 3 UID: 0 PID: 17794 Comm: syz.2.4354 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.348562][T17794] Tainted: [L]=SOFTLOCKUP [ 336.348570][T17794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 336.348580][T17794] Call Trace: [ 336.348586][T17794] [ 336.348593][T17794] dump_stack_lvl+0x100/0x190 [ 336.348620][T17794] should_fail_ex.cold+0x5/0xa [ 336.348657][T17794] ? prepare_alloc_pages+0x16d/0x5b0 [ 336.348679][T17794] should_fail_alloc_page+0xeb/0x140 [ 336.348700][T17794] prepare_alloc_pages+0x1f0/0x5b0 [ 336.348719][T17794] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 336.348745][T17794] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 336.348772][T17794] ? stack_trace_save+0x8e/0xc0 [ 336.348797][T17794] ? __pfx_stack_trace_save+0x10/0x10 [ 336.348821][T17794] ? stack_depot_save_flags+0x27/0x9f0 [ 336.348843][T17794] ? kasan_save_stack+0x3f/0x50 [ 336.348860][T17794] ? kasan_save_stack+0x30/0x50 [ 336.348876][T17794] ? kasan_save_track+0x14/0x30 [ 336.348892][T17794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 336.348916][T17794] ? mmu_topup_memory_caches+0xbc/0x170 [ 336.348934][T17794] ? vcpu_run+0x395d/0x5e80 [ 336.348952][T17794] ? kvm_vcpu_ioctl+0x730/0x1700 [ 336.348972][T17794] ? __x64_sys_ioctl+0x18e/0x210 [ 336.349012][T17794] ? do_syscall_64+0x123/0x790 [ 336.349030][T17794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.349064][T17794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.349085][T17794] ? policy_nodemask+0xed/0x4f0 [ 336.349106][T17794] alloc_pages_mpol+0x201/0x550 [ 336.349128][T17794] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 336.349148][T17794] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 336.349175][T17794] alloc_pages_noprof+0x1a/0x160 [ 336.349196][T17794] get_free_pages_noprof+0x10/0xb0 [ 336.349212][T17794] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 336.349241][T17794] mmu_topup_memory_caches+0xbc/0x170 [ 336.349260][T17794] kvm_mmu_load+0xe8/0x2580 [ 336.349279][T17794] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 336.349301][T17794] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 336.349326][T17794] ? __pfx_kvm_mmu_load+0x10/0x10 [ 336.349343][T17794] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 336.349361][T17794] ? kvm_check_and_inject_events+0x896/0x1050 [ 336.349382][T17794] vcpu_run+0x395d/0x5e80 [ 336.349399][T17794] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 336.349430][T17794] ? __pfx_vcpu_run+0x10/0x10 [ 336.349452][T17794] ? lock_acquire+0x1d1/0x380 [ 336.349469][T17794] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 336.349491][T17794] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 336.349511][T17794] ? __local_bh_enable_ip+0xa5/0x120 [ 336.349532][T17794] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 336.349551][T17794] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 336.349576][T17794] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 336.349595][T17794] ? lock_acquire+0x1d1/0x380 [ 336.349611][T17794] ? do_raw_write_lock+0x11e/0x260 [ 336.349630][T17794] ? find_held_lock+0x2b/0x80 [ 336.349651][T17794] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 336.349671][T17794] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 336.349697][T17794] kvm_vcpu_ioctl+0x730/0x1700 [ 336.349720][T17794] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 336.349741][T17794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.349761][T17794] ? do_vfs_ioctl+0x226/0x13e0 [ 336.349786][T17794] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.349807][T17794] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 336.349835][T17794] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 336.349862][T17794] ? __fget_files+0x34/0x3d0 [ 336.349889][T17794] ? selinux_file_ioctl+0x13b/0x290 [ 336.349912][T17794] ? selinux_file_ioctl+0xb6/0x290 [ 336.349937][T17794] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 336.349960][T17794] __x64_sys_ioctl+0x18e/0x210 [ 336.349985][T17794] do_syscall_64+0x123/0x790 [ 336.350005][T17794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.350021][T17794] RIP: 0033:0x7f5336d9e159 [ 336.350036][T17794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.350051][T17794] RSP: 002b:00007f5337d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.350067][T17794] RAX: ffffffffffffffda RBX: 00007f5337025fa0 RCX: 00007f5336d9e159 [ 336.350078][T17794] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 336.350088][T17794] RBP: 00007f5337d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 336.350097][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.350107][T17794] R13: 00007f5337026038 R14: 00007f5337025fa0 R15: 00007ffdf94c96b8 [ 336.350129][T17794] [ 336.421036][ T2366] usb 8-1: USB disconnect, device number 10 [ 336.576433][T17801] hugetlbfs: Bad value 'x' for mount option 'size' [ 336.576433][T17801] [ 336.647846][T17810] netlink: 'syz.2.4360': attribute type 10 has an invalid length. [ 336.782545][T17818] selinux_netlink_send: 2230 callbacks suppressed [ 336.782842][T17818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=17818 comm=syz.8.4363 [ 337.806864][ T1688] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 337.814353][ T1688] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 337.825147][ T1688] lg-g15 0003:046D:C222.0006: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 337.880439][T17856] netlink: 'syz.2.4375': attribute type 5 has an invalid length. [ 337.898841][T17854] fido_id[17854]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 337.932000][T17858] netlink: 'syz.2.4375': attribute type 5 has an invalid length. [ 338.183201][T17861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.296333][T15972] usb 12-1: USB disconnect, device number 8 [ 338.569704][T17880] Failed to initialize the IGMP autojoin socket (err -2) [ 338.700025][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 338.700315][ T43] audit: type=1400 audit(1788120905.247:2286): avc: denied { mount } for pid=17882 comm="syz.2.4382" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 338.703086][ T43] audit: type=1400 audit(1788120905.247:2287): avc: denied { search } for pid=17882 comm="syz.2.4382" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 338.706670][T17888] FAULT_INJECTION: forcing a failure. [ 338.706670][T17888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.706689][T17888] CPU: 1 UID: 0 PID: 17888 Comm: syz.8.4384 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.706705][T17888] Tainted: [L]=SOFTLOCKUP [ 338.706710][T17888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.706716][T17888] Call Trace: [ 338.706720][T17888] [ 338.706724][T17888] dump_stack_lvl+0x100/0x190 [ 338.706756][T17888] should_fail_ex.cold+0x5/0xa [ 338.706770][T17888] ? prepare_alloc_pages+0x16d/0x5b0 [ 338.706790][T17888] should_fail_alloc_page+0xeb/0x140 [ 338.706810][T17888] prepare_alloc_pages+0x1f0/0x5b0 [ 338.706824][T17888] ? kernel_text_address+0x8d/0x100 [ 338.706842][T17888] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 338.706867][T17888] ? stack_trace_save+0x8e/0xc0 [ 338.706885][T17888] ? __pfx_stack_trace_save+0x10/0x10 [ 338.706903][T17888] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.706922][T17888] ? kasan_save_stack+0x3f/0x50 [ 338.706933][T17888] ? kasan_save_stack+0x30/0x50 [ 338.706944][T17888] ? kasan_save_track+0x14/0x30 [ 338.706955][T17888] ? __kasan_slab_alloc+0x89/0x90 [ 338.706967][T17888] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 338.706978][T17888] ? __pmd_alloc+0xbf/0x950 [ 338.706991][T17888] ? copy_page_range+0x3e98/0x57c0 [ 338.707004][T17888] ? dup_mmap+0x1230/0x2370 [ 338.707017][T17888] ? copy_process+0x4811/0x8370 [ 338.707029][T17888] ? kernel_clone+0x176/0x9d0 [ 338.707040][T17888] ? __do_sys_clone+0xd9/0x120 [ 338.707050][T17888] ? do_syscall_64+0x123/0x790 [ 338.707091][T17888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.707110][T17888] ? __lock_acquire+0x4c5/0x1ec0 [ 338.707121][T17888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.707135][T17888] ? policy_nodemask+0xed/0x4f0 [ 338.707150][T17888] alloc_pages_mpol+0x201/0x550 [ 338.707165][T17888] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 338.707183][T17888] alloc_pages_noprof+0x1a/0x160 [ 338.707199][T17888] pte_alloc_one+0x1c/0x3d0 [ 338.707216][T17888] __pte_alloc+0x6d/0x380 [ 338.707227][T17888] ? __pfx___pte_alloc+0x10/0x10 [ 338.707238][T17888] ? _raw_spin_unlock+0x28/0x50 [ 338.707258][T17888] ? __pmd_alloc+0x3fb/0x950 [ 338.707278][T17888] copy_page_range+0x3b36/0x57c0 [ 338.707324][T17888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.707343][T17888] ? __pfx_copy_page_range+0x10/0x10 [ 338.707363][T17888] ? mas_wr_store_entry+0xa4/0x1d50 [ 338.707394][T17888] ? mas_store+0x745/0xe20 [ 338.707414][T17888] ? __pfx___vma_start_write+0x10/0x10 [ 338.707432][T17888] dup_mmap+0x1230/0x2370 [ 338.707451][T17888] ? __pfx_dup_mmap+0x10/0x10 [ 338.707463][T17888] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 338.707482][T17888] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.707502][T17888] ? __lock_acquire+0x4c5/0x1ec0 [ 338.707519][T17888] ? lock_acquire+0x1d1/0x380 [ 338.707530][T17888] ? copy_process+0x4806/0x8370 [ 338.707548][T17888] copy_process+0x4811/0x8370 [ 338.707568][T17888] ? __pfx_copy_process+0x10/0x10 [ 338.707580][T17888] ? find_held_lock+0x2b/0x80 [ 338.707601][T17888] kernel_clone+0x176/0x9d0 [ 338.707612][T17888] ? find_held_lock+0x2b/0x80 [ 338.707628][T17888] ? __pfx_kernel_clone+0x10/0x10 [ 338.707647][T17888] ? ksys_write+0x190/0x250 [ 338.707657][T17888] ? lock_acquire+0x1d1/0x380 [ 338.707671][T17888] __do_sys_clone+0xd9/0x120 [ 338.707684][T17888] ? __pfx___do_sys_clone+0x10/0x10 [ 338.707696][T17888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.707715][T17888] ? ksys_write+0x1ac/0x250 [ 338.707724][T17888] ? __pfx_ksys_write+0x10/0x10 [ 338.707739][T17888] do_syscall_64+0x123/0x790 [ 338.707753][T17888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.707764][T17888] RIP: 0033:0x7fc907f9e159 [ 338.707774][T17888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.707785][T17888] RSP: 002b:00007fc908f28fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 338.707796][T17888] RAX: ffffffffffffffda RBX: 00007fc908225fa0 RCX: 00007fc907f9e159 [ 338.707804][T17888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 338.707810][T17888] RBP: 00007fc908f29090 R08: 0000000000000000 R09: 0000000000000000 [ 338.707817][T17888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 338.707823][T17888] R13: 00007fc908226038 R14: 00007fc908225fa0 R15: 00007ffcdeb87818 [ 338.707838][T17888] [ 338.719289][ T43] audit: type=1400 audit(1788120905.267:2288): avc: denied { unmount } for pid=11747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 338.889886][T17897] macvlan0: entered promiscuous mode [ 338.931634][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.933176][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.940634][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.943338][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.943853][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.042321][T11747] syz_tun (unregistering): left allmulticast mode [ 339.048834][T11747] bond0: (slave syz_tun): Removing an active aggregator [ 339.049254][T11747] bond0: (slave syz_tun): Releasing backup interface [ 339.109393][ T43] audit: type=1400 audit(1788120905.657:2289): avc: denied { cmd } for pid=17915 comm="iou-wrk-17916" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 339.198625][T17899] Failed to initialize the IGMP autojoin socket (err -2) [ 339.231717][T17930] Failed to initialize the IGMP autojoin socket (err -2) [ 339.276885][ T43] audit: type=1400 audit(1788120905.827:2290): avc: denied { map } for pid=17929 comm="syz.3.4397" path="/dev/v4l-subdev0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.276958][ T43] audit: type=1400 audit(1788120905.827:2291): avc: denied { execute } for pid=17929 comm="syz.3.4397" path="/dev/v4l-subdev0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.288863][ T43] audit: type=1326 audit(1788120905.837:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.3.4397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff839e159 code=0x0 [ 339.373960][ T43] audit: type=1400 audit(1788120905.917:2293): avc: denied { write } for pid=17935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.448002][ T43] audit: type=1400 audit(1788120905.997:2294): avc: denied { write } for pid=17943 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.451909][ T43] audit: type=1400 audit(1788120905.997:2295): avc: denied { write } for pid=17947 comm="syz.8.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.475727][T17899] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.476064][T17899] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.476146][T17899] bridge_slave_0: entered allmulticast mode [ 339.477136][T17899] bridge_slave_0: entered promiscuous mode [ 339.478491][T17899] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.478541][T17899] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.478606][T17899] bridge_slave_1: entered allmulticast mode [ 339.479392][T17899] bridge_slave_1: entered promiscuous mode [ 339.490236][T17948] fuse: Unknown parameter 'fd<0x00000000000000fc' [ 339.509508][T17899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.523956][T17899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.562454][T17899] smc: adding net device veth1_to_team with user defined pnetid S [ 339.588727][T17899] team0: Port device team_slave_0 added [ 339.594105][T17899] team0: Port device team_slave_1 added [ 339.633782][T17899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.633827][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.633868][T17899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.634686][T17899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.634694][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.634707][T17899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.656724][ T850] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 339.691450][T17962] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.64.0), cmd(3) [ 339.691711][T17962] device-mapper: ioctl: Invalid target message parameters. [ 339.709603][T17899] hsr_slave_0: entered promiscuous mode [ 339.719172][T17899] hsr_slave_1: entered promiscuous mode [ 339.723680][T17899] debugfs: 'hsr0' already exists in 'hsr' [ 339.723740][T17899] Cannot create hsr debugfs directory [ 339.750857][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4406'. [ 339.810232][ T850] usb 8-1: Using ep0 maxpacket: 16 [ 339.813124][ T850] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 339.818046][ T850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.818097][ T850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.818160][ T850] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.818197][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.835291][ T850] usb 8-1: config 0 descriptor?? [ 339.999121][T17899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.999196][T17899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.107050][T17899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.107122][T17899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.205753][T17899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.205804][T17899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.247848][ T850] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 340.247890][ T850] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 340.247941][ T850] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 340.247967][ T850] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 340.247994][ T850] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 340.262400][ T850] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 340.303255][ T850] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 340.306184][ T850] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 340.321605][T17899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.321672][T17899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.446998][T17940] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4399'. [ 340.529134][ T5584] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.529214][ T5584] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.554146][T17899] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 340.567351][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.570291][T17899] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 340.576738][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.577254][T17899] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 340.588499][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.589304][T17899] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 340.595593][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.597073][ T5584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.598857][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.774366][T17899] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.795377][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.798065][T16437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.830209][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.831564][T16437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.996040][ T5089] Bluetooth: hci4: command tx timeout [ 341.264141][T17899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.334347][T17899] veth0_vlan: entered promiscuous mode [ 341.378327][T17899] veth1_vlan: entered promiscuous mode [ 341.398805][T17899] veth0_macvtap: entered promiscuous mode [ 341.404314][T17899] veth1_macvtap: entered promiscuous mode [ 341.411482][ T5736] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 341.411538][ T5736] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 341.411615][ T5736] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 341.411653][ T5736] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 341.463418][T17899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.495760][T17899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.505701][T17899] net_ratelimit: 13 callbacks suppressed [ 341.507168][T17899] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 341.509988][T17899] wireguard: wg0: Could not create IPv4 socket [ 341.512071][T17899] wireguard: wg1: Could not create IPv4 socket [ 341.514516][T17899] wireguard: wg2: Could not create IPv4 socket [ 341.597060][ T850] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 341.749945][ T850] usb 8-1: device descriptor read/64, error -32 [ 341.986060][ T850] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 342.121844][ T850] usb 8-1: device descriptor read/64, error -32 [ 342.359464][ T850] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 342.380826][ T850] usb 8-1: device descriptor read/8, error -32 [ 342.540107][T18071] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 342.540107][T18071] [ 342.540160][T18071] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 342.540227][T18071] CIFS: Attempting to mount //127.0.0.1/share [ 342.543826][T18071] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 342.544005][T18071] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 342.544015][T18071] CIFS: VFS: Error connecting to socket. Aborting operation. [ 342.544035][T18071] CIFS: VFS: cifs_mount failed w/return code = -2 [ 342.629806][T18075] ntfs3(sr0): Primary boot signature is not NTFS. [ 342.633964][T18075] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 342.917729][T18101] netlink: 'syz.8.4425': attribute type 1 has an invalid length. [ 342.922399][T18102] netlink: 'syz.8.4425': attribute type 1 has an invalid length. [ 342.930725][T18101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.942717][T18100] bond2: (slave veth0_to_bond): Releasing backup interface [ 342.960929][T18100] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 342.976179][T18101] netlink: 'syz.8.4425': attribute type 10 has an invalid length. [ 342.977439][T18101] syz_tun: entered promiscuous mode [ 342.989843][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4427'. [ 342.990109][T18101] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 343.007069][T18110] macvlan2: entered allmulticast mode [ 343.051209][T18110] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.094697][T18114] syzkaller0: entered promiscuous mode [ 343.096699][T18114] syzkaller0: entered allmulticast mode [ 343.146712][T18124] input: syz0 as /devices/virtual/input/input14 [ 343.224439][T18132] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 343.281306][ T5736] usb 8-1: USB disconnect, device number 11 [ 343.748460][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 343.750796][ T43] audit: type=1400 audit(1788120910.297:2323): avc: denied { write } for pid=18152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.811479][ T43] audit: type=1400 audit(1788120910.357:2324): avc: denied { write } for pid=18155 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.905194][ T43] audit: type=1400 audit(1788120910.447:2325): avc: denied { write } for pid=18158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.956807][ T43] audit: type=1400 audit(1788120910.507:2326): avc: denied { write } for pid=18161 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.075983][ T43] audit: type=1400 audit(1788120910.617:2327): avc: denied { write } for pid=18164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.135621][ T43] audit: type=1400 audit(1788120910.677:2328): avc: denied { write } for pid=18176 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.213509][ T43] audit: type=1400 audit(1788120910.757:2329): avc: denied { write } for pid=18192 comm="syz.8.4440" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 344.236085][ T43] audit: type=1400 audit(1788120910.777:2330): avc: denied { listen } for pid=18194 comm="syz.3.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.245172][ T43] audit: type=1400 audit(1788120910.787:2331): avc: denied { accept } for pid=18194 comm="syz.3.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.245290][ T43] audit: type=1400 audit(1788120910.787:2332): avc: denied { ioctl } for pid=18194 comm="syz.3.4441" path="socket:[67003]" dev="sockfs" ino=67003 ioctlcmd=0x6445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.258720][T18195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4441'. [ 344.340873][T18207] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 344.352390][T18207] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 344.354158][T18207] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 344.359320][T18207] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 344.359410][T18207] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 344.359579][T18207] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 344.359880][T18207] pci 0000:00:02.0: enabling Extended Tags [ 344.401007][T18207] pci 0000:00:02.0: Adding to iommu group 2 [ 344.430450][T18207] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 344.432293][T18207] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 344.434319][T18207] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 344.437203][T18207] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 344.439068][T18207] pci 0000:00:02.0: BAR 2 [io 0x2020-0x203f]: assigned [ 344.507429][T18207] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 344.595703][T18207] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 344.645381][T18234] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 344.649049][T18234] overlayfs: failed to resolve './file0': -2 [ 344.725141][T18207] e1000e 0000:00:02.0 eth5: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 344.725207][T18207] e1000e 0000:00:02.0 eth5: Intel(R) PRO/1000 Network Connection [ 344.725429][T18207] e1000e 0000:00:02.0 eth5: MAC: 3, PHY: 8, PBA No: 000000-000 [ 344.847050][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.865550][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.868313][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.872645][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.875477][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.074925][T18244] Failed to initialize the IGMP autojoin socket (err -2) [ 345.245402][T18244] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.029691][T18244] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.105665][T18244] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.185033][T18244] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.368074][ T5584] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.376118][ T7642] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.406073][ T7642] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.417641][ T7642] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.918606][ T5747] Bluetooth: hci0: command 0x0406 tx timeout [ 346.996259][ T5739] Bluetooth: hci2: command tx timeout [ 347.508861][T18219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.513225][T18244] netdevsim netdevsim2 netdevsim0: renamed from eth6 [ 347.533414][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.537720][T18244] netdevsim netdevsim2 netdevsim1: renamed from eth7 [ 347.586930][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.591263][T18244] netdevsim netdevsim2 netdevsim2: renamed from eth8 [ 347.610056][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.613621][T18244] netdevsim netdevsim2 netdevsim3: renamed from eth14 [ 347.623147][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.686216][T18364] FAULT_INJECTION: forcing a failure. [ 347.686216][T18364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.686259][T18364] CPU: 0 UID: 0 PID: 18364 Comm: syz.7.4458 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.686287][T18364] Tainted: [L]=SOFTLOCKUP [ 347.686292][T18364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.686298][T18364] Call Trace: [ 347.686303][T18364] [ 347.686308][T18364] dump_stack_lvl+0x100/0x190 [ 347.686328][T18364] should_fail_ex.cold+0x5/0xa [ 347.686343][T18364] ? prepare_alloc_pages+0x16d/0x5b0 [ 347.686358][T18364] should_fail_alloc_page+0xeb/0x140 [ 347.686372][T18364] prepare_alloc_pages+0x1f0/0x5b0 [ 347.686386][T18364] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 347.686403][T18364] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 347.686422][T18364] ? stack_trace_save+0x8e/0xc0 [ 347.686440][T18364] ? __pfx_stack_trace_save+0x10/0x10 [ 347.686457][T18364] ? stack_depot_save_flags+0x27/0x9f0 [ 347.686472][T18364] ? kasan_save_stack+0x3f/0x50 [ 347.686483][T18364] ? kasan_save_stack+0x30/0x50 [ 347.686494][T18364] ? kasan_save_track+0x14/0x30 [ 347.686506][T18364] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 347.686522][T18364] ? mmu_topup_memory_caches+0xbc/0x170 [ 347.686535][T18364] ? vcpu_run+0x395d/0x5e80 [ 347.686548][T18364] ? kvm_vcpu_ioctl+0x730/0x1700 [ 347.686562][T18364] ? __x64_sys_ioctl+0x18e/0x210 [ 347.686578][T18364] ? do_syscall_64+0x123/0x790 [ 347.686591][T18364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.686614][T18364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.686628][T18364] ? policy_nodemask+0xed/0x4f0 [ 347.686643][T18364] alloc_pages_mpol+0x201/0x550 [ 347.686658][T18364] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 347.686672][T18364] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 347.686690][T18364] alloc_pages_noprof+0x1a/0x160 [ 347.686706][T18364] get_free_pages_noprof+0x10/0xb0 [ 347.686718][T18364] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 347.686738][T18364] mmu_topup_memory_caches+0xbc/0x170 [ 347.686751][T18364] kvm_mmu_load+0xe8/0x2580 [ 347.686764][T18364] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 347.686781][T18364] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 347.686799][T18364] ? __pfx_kvm_mmu_load+0x10/0x10 [ 347.686810][T18364] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 347.686828][T18364] ? kvm_check_and_inject_events+0x896/0x1050 [ 347.686843][T18364] vcpu_run+0x395d/0x5e80 [ 347.686855][T18364] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 347.686868][T18364] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 347.686889][T18364] ? __pfx_vcpu_run+0x10/0x10 [ 347.686903][T18364] ? lock_acquire+0x1d1/0x380 [ 347.686914][T18364] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 347.686929][T18364] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 347.686994][T18364] ? __local_bh_enable_ip+0xa5/0x120 [ 347.687009][T18364] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 347.687057][T18364] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 347.687078][T18364] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 347.687092][T18364] ? lock_acquire+0x1d1/0x380 [ 347.687103][T18364] ? do_raw_write_lock+0x11e/0x260 [ 347.687119][T18364] ? find_held_lock+0x2b/0x80 [ 347.687136][T18364] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 347.687151][T18364] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 347.687169][T18364] kvm_vcpu_ioctl+0x730/0x1700 [ 347.687185][T18364] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.687201][T18364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.687214][T18364] ? do_vfs_ioctl+0x226/0x13e0 [ 347.687232][T18364] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 347.687248][T18364] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 347.687268][T18364] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 347.687288][T18364] ? __fget_files+0x34/0x3d0 [ 347.687307][T18364] ? selinux_file_ioctl+0x13b/0x290 [ 347.687324][T18364] ? selinux_file_ioctl+0xb6/0x290 [ 347.687342][T18364] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.687358][T18364] __x64_sys_ioctl+0x18e/0x210 [ 347.687376][T18364] do_syscall_64+0x123/0x790 [ 347.687390][T18364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.687402][T18364] RIP: 0033:0x7fd20cf9e159 [ 347.687413][T18364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.687423][T18364] RSP: 002b:00007fd20de28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.687435][T18364] RAX: ffffffffffffffda RBX: 00007fd20d225fa0 RCX: 00007fd20cf9e159 [ 347.687442][T18364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 347.687449][T18364] RBP: 00007fd20de28090 R08: 0000000000000000 R09: 0000000000000000 [ 347.687455][T18364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.687462][T18364] R13: 00007fd20d226038 R14: 00007fd20d225fa0 R15: 00007ffcf1883ae8 [ 347.687477][T18364] [ 347.733990][T18368] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 347.734071][T18368] CIFS: Attempting to mount //127.0.0.1/share [ 347.736776][T18368] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 347.737065][T18368] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 347.737077][T18368] CIFS: VFS: Error connecting to socket. Aborting operation. [ 347.737108][T18368] CIFS: VFS: cifs_mount failed w/return code = -2 [ 347.811290][T18375] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 348.116609][T18406] FAULT_INJECTION: forcing a failure. [ 348.116609][T18406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.122175][T18406] CPU: 0 UID: 0 PID: 18406 Comm: syz.7.4463 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.122205][T18406] Tainted: [L]=SOFTLOCKUP [ 348.122210][T18406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.122217][T18406] Call Trace: [ 348.122222][T18406] [ 348.122227][T18406] dump_stack_lvl+0x100/0x190 [ 348.122248][T18406] should_fail_ex.cold+0x5/0xa [ 348.122265][T18406] _copy_from_user+0x2e/0xd0 [ 348.122283][T18406] kstrtouint_from_user+0xd6/0x1d0 [ 348.122296][T18406] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 348.122311][T18406] ? lock_acquire+0x1d1/0x380 [ 348.122327][T18406] proc_fail_nth_write+0x83/0x220 [ 348.122340][T18406] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.122357][T18406] vfs_write+0x2aa/0x1050 [ 348.122376][T18406] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.122388][T18406] ? lock_acquire+0x1d1/0x380 [ 348.122399][T18406] ? __fget_files+0x34/0x3d0 [ 348.122412][T18406] ? __pfx_vfs_write+0x10/0x10 [ 348.122428][T18406] ? find_held_lock+0x2b/0x80 [ 348.122444][T18406] ? __fget_files+0x215/0x3d0 [ 348.122458][T18406] ? __fget_files+0x21f/0x3d0 [ 348.122475][T18406] ksys_write+0x12a/0x250 [ 348.122485][T18406] ? __pfx_ksys_write+0x10/0x10 [ 348.122499][T18406] do_syscall_64+0x123/0x790 [ 348.122514][T18406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.122526][T18406] RIP: 0033:0x7fd20cf5e98e [ 348.122535][T18406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.122562][T18406] RSP: 002b:00007fd20de06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.122574][T18406] RAX: ffffffffffffffda RBX: 00007fd20de076c0 RCX: 00007fd20cf5e98e [ 348.122581][T18406] RDX: 0000000000000001 RSI: 00007fd20de070a0 RDI: 0000000000000004 [ 348.122587][T18406] RBP: 00007fd20de07090 R08: 0000000000000000 R09: 0000000000000000 [ 348.122594][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.122600][T18406] R13: 00007fd20d226128 R14: 00007fd20d226090 R15: 00007ffcf1883ae8 [ 348.122615][T18406] [ 348.213148][T18410] NILFS (nbd8): device size too small [ 348.220088][T18410] usb usb7: usbfs: process 18410 (syz.8.4465) did not claim interface 0 before use [ 348.236977][T18244] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 348.238247][T18244] wireguard: wg0: Could not create IPv4 socket [ 348.239369][T18244] wireguard: wg1: Could not create IPv4 socket [ 348.240596][T18244] wireguard: wg2: Could not create IPv4 socket [ 348.490405][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4468'. [ 348.502093][T18427] FAULT_INJECTION: forcing a failure. [ 348.502093][T18427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.502170][T18427] CPU: 1 UID: 0 PID: 18427 Comm: syz.8.4469 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.502201][T18427] Tainted: [L]=SOFTLOCKUP [ 348.502206][T18427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.502213][T18427] Call Trace: [ 348.502218][T18427] [ 348.502223][T18427] dump_stack_lvl+0x100/0x190 [ 348.502245][T18427] should_fail_ex.cold+0x5/0xa [ 348.502264][T18427] _copy_from_user+0x2e/0xd0 [ 348.502282][T18427] bpf_test_init.isra.0+0xaf/0x100 [ 348.502299][T18427] bpf_prog_test_run_xdp+0x587/0x1670 [ 348.502320][T18427] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 348.502340][T18427] ? fput+0x7c/0x100 [ 348.502354][T18427] ? __bpf_prog_get+0x97/0x290 [ 348.502368][T18427] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 348.502384][T18427] __sys_bpf+0x2265/0x4a30 [ 348.502405][T18427] ? __pfx___sys_bpf+0x10/0x10 [ 348.502422][T18427] ? find_held_lock+0x2b/0x80 [ 348.502437][T18427] ? get_pid_task+0xfc/0x250 [ 348.502452][T18427] ? get_pid_task+0xfc/0x250 [ 348.502471][T18427] ? find_held_lock+0x2b/0x80 [ 348.502489][T18427] ? rcu_read_lock_any_held+0x6a/0x90 [ 348.502505][T18427] ? find_held_lock+0x2b/0x80 [ 348.502519][T18427] ? ksys_write+0x190/0x250 [ 348.502529][T18427] ? ksys_write+0x190/0x250 [ 348.502539][T18427] ? lock_acquire+0x1d1/0x380 [ 348.502576][T18427] ? fput+0x7c/0x100 [ 348.502589][T18427] ? ksys_write+0x1ac/0x250 [ 348.502601][T18427] ? __x64_sys_bpf+0xce/0x140 [ 348.502610][T18427] __x64_sys_bpf+0xce/0x140 [ 348.502621][T18427] ? do_syscall_64+0xae/0x790 [ 348.502635][T18427] do_syscall_64+0x123/0x790 [ 348.502648][T18427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.502660][T18427] RIP: 0033:0x7fc907f9e159 [ 348.502670][T18427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.502680][T18427] RSP: 002b:00007fc908f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.502692][T18427] RAX: ffffffffffffffda RBX: 00007fc908225fa0 RCX: 00007fc907f9e159 [ 348.502699][T18427] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 348.502706][T18427] RBP: 00007fc908f29090 R08: 0000000000000000 R09: 0000000000000000 [ 348.502712][T18427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.502720][T18427] R13: 00007fc908226038 R14: 00007fc908225fa0 R15: 00007ffcdeb87818 [ 348.502734][T18427] [ 348.819094][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 348.819231][ T43] audit: type=1400 audit(1788120915.367:2387): avc: denied { write } for pid=18453 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.955785][ T43] audit: type=1400 audit(1788120915.497:2388): avc: denied { write } for pid=18456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.027134][ T43] audit: type=1400 audit(1788120915.577:2389): avc: denied { write } for pid=18459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.076075][ T5739] Bluetooth: hci2: command tx timeout [ 349.168499][ T43] audit: type=1400 audit(1788120915.717:2390): avc: denied { write } for pid=18462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.249848][ T43] audit: type=1400 audit(1788120915.797:2391): avc: denied { write } for pid=18466 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.312698][T18470] e1000e 0000:00:02.0 eth5: removed PHC [ 349.362041][T18475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 349.372251][ T43] audit: type=1400 audit(1788120915.917:2392): avc: denied { write } for pid=18473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.439980][ T43] audit: type=1400 audit(1788120915.987:2393): avc: denied { write } for pid=18477 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.561448][ T43] audit: type=1400 audit(1788120916.107:2394): avc: denied { write } for pid=18480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.619551][ T43] audit: type=1400 audit(1788120916.167:2395): avc: denied { write } for pid=18483 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.748701][ T43] audit: type=1400 audit(1788120916.297:2396): avc: denied { write } for pid=18486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.342280][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4483'. [ 350.343928][T18527] tmpfs: Unknown parameter 'mpsÌ‹—refef' [ 350.854681][T18382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.029900][T18560] tipc: Started in network mode [ 351.029955][T18560] tipc: Node identity ac14140f, cluster identity 4711 [ 351.030442][T18560] tipc: Enabling of bearer rejected, failed to enable media [ 351.030707][T18560] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4485'. [ 351.176243][ T850] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 351.336917][ T850] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 351.338837][ T850] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 351.338877][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.338899][ T850] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.338920][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.338942][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 351.342115][ T850] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 351.342149][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.342170][ T850] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.342190][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.342209][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 351.343160][ T850] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 351.343198][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.343220][ T850] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.343239][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.343260][ T850] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 351.354814][ T850] usb 12-1: string descriptor 0 read error: -22 [ 351.354875][ T850] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.364845][ T850] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 351.440032][T18593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4497'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 351.597878][ T5840] usb 12-1: USB disconnect, device number 9 [ 351.665791][T18615] overlayfs: failed to resolve '/…½RŸ¼ Ε’/æk„SO¸ðÉ AZCë°R·sÔ«±<': -2 [ 351.804907][T18630] cgroup2: Unknown parameter 'euid' [ 352.121711][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.139239][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.144113][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.150135][T18656] netlink: 'syz.8.4511': attribute type 1 has an invalid length. [ 352.150150][T18656] netlink: 'syz.8.4511': attribute type 4 has an invalid length. [ 352.150156][T18656] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4511'. [ 352.150333][T18657] netlink: 'syz.8.4511': attribute type 1 has an invalid length. [ 352.150341][T18657] netlink: 'syz.8.4511': attribute type 4 has an invalid length. [ 352.150346][T18657] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4511'. [ 352.159831][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.164927][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.432709][T18652] Failed to initialize the IGMP autojoin socket (err -2) [ 352.625366][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4518'. [ 352.627145][T18683] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #108: comm syz.8.4518: No space for directory leaf checksum. Please run e2fsck -D. [ 352.627164][T18683] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #108: comm syz.8.4518: checksumming directory block 0 [ 352.714301][T18652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.793920][T18689] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(14) [ 352.884772][T18652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.991155][T18652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 353.082799][T18652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 353.274495][T18713] FAULT_INJECTION: forcing a failure. [ 353.274495][T18713] name failslab, interval 1, probability 0, space 0, times 0 [ 353.274577][T18713] CPU: 1 UID: 0 PID: 18713 Comm: syz.8.4527 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.274605][T18713] Tainted: [L]=SOFTLOCKUP [ 353.274610][T18713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.274617][T18713] Call Trace: [ 353.274622][T18713] [ 353.274627][T18713] dump_stack_lvl+0x100/0x190 [ 353.274652][T18713] should_fail_ex.cold+0x5/0xa [ 353.274670][T18713] should_failslab+0xc2/0x120 [ 353.274685][T18713] __kmalloc_noprof+0xfc/0x840 [ 353.274697][T18713] ? hash_net6_add+0x17e8/0x3190 [ 353.274712][T18713] hash_net6_add+0x17e8/0x3190 [ 353.274729][T18713] ? __asan_memcpy+0x3c/0x60 [ 353.274748][T18713] ? __pfx_hash_net6_add+0x10/0x10 [ 353.274758][T18713] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 353.274773][T18713] ? __lock_acquire+0x4c5/0x1ec0 [ 353.274788][T18713] hash_net6_uadt+0x60e/0x8d0 [ 353.274866][T18713] ? __lock_acquire+0x4e0/0x1ec0 [ 353.274880][T18713] ? __pfx_hash_net6_add+0x10/0x10 [ 353.274893][T18713] ? __pfx_hash_net6_uadt+0x10/0x10 [ 353.274909][T18713] ? unwind_next_frame+0xbd/0x2090 [ 353.274929][T18713] ? lock_acquire+0x1d1/0x380 [ 353.274942][T18713] ? find_held_lock+0x2b/0x80 [ 353.274956][T18713] ? is_bpf_text_address+0x8a/0x1a0 [ 353.274971][T18713] ? is_bpf_text_address+0x8a/0x1a0 [ 353.274986][T18713] call_ad.isra.0+0x171/0x950 [ 353.275065][T18713] ? __pfx_call_ad.isra.0+0x10/0x10 [ 353.275093][T18713] ? __pfx___nla_validate_parse+0x10/0x10 [ 353.275115][T18713] ? __nla_parse+0x40/0x60 [ 353.275130][T18713] ip_set_ad.isra.0+0x3f1/0x8b0 [ 353.275147][T18713] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 353.275161][T18713] ? trace_contention_end+0x126/0x160 [ 353.275184][T18713] ? find_held_lock+0x2b/0x80 [ 353.275203][T18713] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 353.275221][T18713] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 353.275235][T18713] ? __lock_acquire+0x4c5/0x1ec0 [ 353.275257][T18713] ? avc_has_perm_noaudit+0x145/0x3b0 [ 353.275280][T18713] netlink_rcv_skb+0x159/0x420 [ 353.275297][T18713] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 353.275311][T18713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.275333][T18713] ? ns_capable+0xd2/0xf0 [ 353.275345][T18713] nfnetlink_rcv+0x1b3/0x440 [ 353.275358][T18713] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 353.275370][T18713] ? netlink_deliver_tap+0x1ae/0xcc0 [ 353.275389][T18713] netlink_unicast+0x585/0x850 [ 353.275407][T18713] ? __pfx_netlink_unicast+0x10/0x10 [ 353.275427][T18713] netlink_sendmsg+0x8b0/0xda0 [ 353.275445][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.275463][T18713] ? selinux_socket_sendmsg+0x198/0x2f0 [ 353.275496][T18713] ____sys_sendmsg+0xa4d/0xbe0 [ 353.275510][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.275528][T18713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.275544][T18713] ? lock_acquire+0x1d1/0x380 [ 353.275555][T18713] ? get_pid_task+0x2a/0x250 [ 353.275571][T18713] ___sys_sendmsg+0x190/0x1e0 [ 353.275591][T18713] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.275605][T18713] ? get_pid_task+0x106/0x250 [ 353.275625][T18713] ? find_held_lock+0x2b/0x80 [ 353.275649][T18713] __sys_sendmsg+0x160/0x210 [ 353.275660][T18713] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.275678][T18713] do_syscall_64+0x123/0x790 [ 353.275706][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.275725][T18713] RIP: 0033:0x7fc907f9e159 [ 353.275740][T18713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.275755][T18713] RSP: 002b:00007fc908f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.275772][T18713] RAX: ffffffffffffffda RBX: 00007fc908225fa0 RCX: 00007fc907f9e159 [ 353.275786][T18713] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 353.275797][T18713] RBP: 00007fc908f29090 R08: 0000000000000000 R09: 0000000000000000 [ 353.275808][T18713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.275818][T18713] R13: 00007fc908226038 R14: 00007fc908225fa0 R15: 00007ffcdeb87818 [ 353.275857][T18713] [ 353.474066][T18725] netlink: 'syz.8.4528': attribute type 2 has an invalid length. [ 353.474136][T18725] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4528'. [ 353.477343][ T7642] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.477457][ T7642] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.477551][ T7642] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.487175][ T5813] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.491763][T18652] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 353.508359][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.509383][T18652] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 353.518973][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.520622][T18652] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 353.533845][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.535290][T18652] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 353.551240][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.734851][T18751] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4532'. [ 353.899939][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 353.927576][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 353.931301][ T5739] Bluetooth: hci0: unexpected subevent 0x0c length: 30 > 5 [ 353.952911][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 353.953002][ T43] audit: type=1400 audit(1788120920.497:2442): avc: denied { setattr } for pid=18765 comm="syz.3.4537" name="/" dev="9p" ino=74743259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.970732][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4539'. [ 353.979589][ T43] audit: type=1400 audit(1788120920.527:2443): avc: denied { lock } for pid=18783 comm="syz.7.4539" path="socket:[73065]" dev="sockfs" ino=73065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 354.062004][T18652] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 354.063212][T18652] wireguard: wg0: Could not create IPv4 socket [ 354.064255][T18652] wireguard: wg1: Could not create IPv4 socket [ 354.065307][T18652] wireguard: wg2: Could not create IPv4 socket [ 354.170202][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 354.186422][ T1688] libceph: mon0 (1)[c::]:6789 connect error [ 354.676085][T18774] ceph: No mds server is up or the cluster is laggy [ 354.678044][T18769] ceph: No mds server is up or the cluster is laggy [ 354.696680][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 354.698452][ T43] audit: type=1400 audit(1788120921.247:2444): avc: denied { write } for pid=18824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.707451][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 354.744461][ T43] audit: type=1400 audit(1788120921.287:2445): avc: denied { write } for pid=18827 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.888441][ T43] audit: type=1400 audit(1788120921.437:2446): avc: denied { write } for pid=18830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.949013][ T43] audit: type=1400 audit(1788120921.497:2447): avc: denied { write } for pid=18833 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.091869][ T43] audit: type=1400 audit(1788120921.637:2448): avc: denied { write } for pid=18838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.142307][ T43] audit: type=1400 audit(1788120921.687:2449): avc: denied { write } for pid=18842 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.179108][T18837] FAULT_INJECTION: forcing a failure. [ 355.179108][T18837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.179178][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.3.4544 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.179205][T18837] Tainted: [L]=SOFTLOCKUP [ 355.179211][T18837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.179218][T18837] Call Trace: [ 355.179222][T18837] [ 355.179227][T18837] dump_stack_lvl+0x100/0x190 [ 355.179250][T18837] should_fail_ex.cold+0x5/0xa [ 355.179266][T18837] ? prepare_alloc_pages+0x16d/0x5b0 [ 355.179281][T18837] should_fail_alloc_page+0xeb/0x140 [ 355.179296][T18837] prepare_alloc_pages+0x1f0/0x5b0 [ 355.179309][T18837] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 355.179327][T18837] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 355.179346][T18837] ? stack_trace_save+0x8e/0xc0 [ 355.179363][T18837] ? __pfx_stack_trace_save+0x10/0x10 [ 355.179392][T18837] ? stack_depot_save_flags+0x27/0x9f0 [ 355.179414][T18837] ? __pfx___css_rstat_updated+0x10/0x10 [ 355.179436][T18837] ? kasan_save_stack+0x3f/0x50 [ 355.179456][T18837] ? kasan_save_stack+0x30/0x50 [ 355.179474][T18837] ? kasan_save_track+0x14/0x30 [ 355.179495][T18837] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.179594][T18837] ? mmu_topup_memory_caches+0xbc/0x170 [ 355.179615][T18837] ? vcpu_run+0x395d/0x5e80 [ 355.179630][T18837] ? kvm_vcpu_ioctl+0x730/0x1700 [ 355.179646][T18837] ? __x64_sys_ioctl+0x18e/0x210 [ 355.179663][T18837] ? do_syscall_64+0x123/0x790 [ 355.179676][T18837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.179701][T18837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.179716][T18837] ? policy_nodemask+0xed/0x4f0 [ 355.179731][T18837] alloc_pages_mpol+0x201/0x550 [ 355.179747][T18837] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.179761][T18837] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 355.179776][T18837] alloc_pages_noprof+0x1a/0x160 [ 355.179793][T18837] get_free_pages_noprof+0x10/0xb0 [ 355.179805][T18837] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 355.179826][T18837] mmu_topup_memory_caches+0xbc/0x170 [ 355.179839][T18837] kvm_mmu_load+0xe8/0x2580 [ 355.179853][T18837] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 355.179870][T18837] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 355.179892][T18837] ? __pfx_kvm_mmu_load+0x10/0x10 [ 355.179904][T18837] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 355.179923][T18837] ? kvm_check_and_inject_events+0x896/0x1050 [ 355.179938][T18837] vcpu_run+0x395d/0x5e80 [ 355.179950][T18837] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 355.179972][T18837] ? __pfx_vcpu_run+0x10/0x10 [ 355.179987][T18837] ? lock_acquire+0x1d1/0x380 [ 355.179999][T18837] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 355.180014][T18837] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 355.180030][T18837] ? __local_bh_enable_ip+0xa5/0x120 [ 355.180046][T18837] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 355.180059][T18837] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 355.180076][T18837] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 355.180090][T18837] ? lock_acquire+0x1d1/0x380 [ 355.180101][T18837] ? do_raw_write_lock+0x11e/0x260 [ 355.180114][T18837] ? find_held_lock+0x2b/0x80 [ 355.180129][T18837] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 355.180143][T18837] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 355.180161][T18837] kvm_vcpu_ioctl+0x730/0x1700 [ 355.180178][T18837] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.180193][T18837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.180206][T18837] ? do_vfs_ioctl+0x226/0x13e0 [ 355.180223][T18837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 355.180239][T18837] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 355.180260][T18837] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 355.180280][T18837] ? __fget_files+0x34/0x3d0 [ 355.180299][T18837] ? selinux_file_ioctl+0x13b/0x290 [ 355.180315][T18837] ? selinux_file_ioctl+0xb6/0x290 [ 355.180333][T18837] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.180349][T18837] __x64_sys_ioctl+0x18e/0x210 [ 355.180367][T18837] do_syscall_64+0x123/0x790 [ 355.180381][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.180393][T18837] RIP: 0033:0x7f7ff839e159 [ 355.180405][T18837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.180418][T18837] RSP: 002b:00007f7ff9182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.180430][T18837] RAX: ffffffffffffffda RBX: 00007f7ff8625fa0 RCX: 00007f7ff839e159 [ 355.180438][T18837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 00000000000000bf [ 355.180445][T18837] RBP: 00007f7ff9182090 R08: 0000000000000000 R09: 0000000000000000 [ 355.180452][T18837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.180458][T18837] R13: 00007f7ff8626038 R14: 00007f7ff8625fa0 R15: 00007ffd2e815cf8 [ 355.180475][T18837] [ 355.218326][T18846] futex_wake_op: syz.7.4545 tries to shift op by 144; fix this program [ 355.218667][T18846] futex_wake_op: syz.7.4545 tries to shift op by 144; fix this program [ 355.219903][ T43] audit: type=1400 audit(1788120921.767:2450): avc: denied { map } for pid=18845 comm="syz.7.4545" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 355.221157][T18846] FAULT_INJECTION: forcing a failure. [ 355.221157][T18846] name failslab, interval 1, probability 0, space 0, times 0 [ 355.221190][T18846] CPU: 2 UID: 0 PID: 18846 Comm: syz.7.4545 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.221218][T18846] Tainted: [L]=SOFTLOCKUP [ 355.221225][T18846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.221236][T18846] Call Trace: [ 355.221242][T18846] [ 355.221250][T18846] dump_stack_lvl+0x100/0x190 [ 355.221290][T18846] should_fail_ex.cold+0x5/0xa [ 355.221317][T18846] should_failslab+0xc2/0x120 [ 355.221342][T18846] __kmalloc_noprof+0xfc/0x840 [ 355.221365][T18846] ? virtqueue_add_split+0x25c/0x1d30 [ 355.221402][T18846] virtqueue_add_split+0x25c/0x1d30 [ 355.221432][T18846] ? __lock_acquire+0x4c5/0x1ec0 [ 355.221568][T18846] ? __pfx_virtqueue_add_split+0x10/0x10 [ 355.221608][T18846] ? __virt_addr_valid+0x161/0x430 [ 355.221630][T18846] ? find_held_lock+0x2b/0x80 [ 355.221657][T18846] ? __virt_addr_valid+0x22a/0x430 [ 355.221676][T18846] ? __virt_addr_valid+0x22a/0x430 [ 355.221710][T18846] virtqueue_add_sgs+0x207/0x2b0 [ 355.221756][T18846] p9_virtio_request+0x26d/0x6d0 [ 355.221794][T18846] ? __pfx_p9_virtio_request+0x10/0x10 [ 355.221819][T18846] ? p9_client_prepare_req+0x112/0x4d0 [ 355.221849][T18846] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 355.221883][T18846] ? __lock_acquire+0x4c5/0x1ec0 [ 355.221913][T18846] p9_client_rpc+0x359/0xd60 [ 355.221947][T18846] ? __pfx_p9_client_rpc+0x10/0x10 [ 355.221978][T18846] ? idr_alloc_u32+0x22b/0x320 [ 355.222010][T18846] ? find_held_lock+0x2b/0x80 [ 355.222039][T18846] ? find_held_lock+0x2b/0x80 [ 355.222067][T18846] ? p9_fid_create+0x26d/0x460 [ 355.222096][T18846] ? rcu_is_watching+0x13/0xc0 [ 355.222131][T18846] p9_client_attach+0x153/0x2b0 [ 355.222166][T18846] ? __pfx_p9_client_attach+0x10/0x10 [ 355.222195][T18846] ? v9fs_fid_lookup+0x500/0xf50 [ 355.222231][T18846] v9fs_fid_lookup+0x9a4/0xf50 [ 355.222258][T18846] ? __pfx_avc_has_perm+0x10/0x10 [ 355.222289][T18846] v9fs_vfs_lookup+0x1a1/0x5c0 [ 355.222322][T18846] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 355.222357][T18846] ? may_create+0x285/0x440 [ 355.222384][T18846] v9fs_vfs_atomic_open+0x41e/0x900 [ 355.222419][T18846] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 355.222453][T18846] ? security_inode_permission+0xbf/0x250 [ 355.222494][T18846] atomic_open+0x17e/0x560 [ 355.222536][T18846] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 355.222571][T18846] lookup_open+0x842/0x1990 [ 355.222614][T18846] path_openat+0xa2c/0x2440 [ 355.222643][T18846] ? __pfx_path_openat+0x10/0x10 [ 355.222675][T18846] do_file_open+0x20e/0x430 [ 355.222709][T18846] ? __pfx_do_file_open+0x10/0x10 [ 355.222756][T18846] ? alloc_fd+0x471/0x7a0 [ 355.222786][T18846] ? do_getname+0x191/0x390 [ 355.222818][T18846] do_sys_openat2+0x10f/0x1e0 [ 355.222847][T18846] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.222879][T18846] ? __fget_files+0x21f/0x3d0 [ 355.222909][T18846] __x64_sys_open+0xfe/0x1d0 [ 355.222935][T18846] ? __pfx___x64_sys_open+0x10/0x10 [ 355.222959][T18846] ? ksys_write+0x1ac/0x250 [ 355.223034][T18846] do_syscall_64+0x123/0x790 [ 355.223065][T18846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.223089][T18846] RIP: 0033:0x7fd20cf9e159 [ 355.223109][T18846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.223128][T18846] RSP: 002b:00007fd20de28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 355.223148][T18846] RAX: ffffffffffffffda RBX: 00007fd20d225fa0 RCX: 00007fd20cf9e159 [ 355.223162][T18846] RDX: 0000000000000010 RSI: 0000000000148447 RDI: 0000200000000080 [ 355.223177][T18846] RBP: 00007fd20de28090 R08: 0000000000000000 R09: 0000000000000000 [ 355.223191][T18846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.223204][T18846] R13: 00007fd20d226038 R14: 00007fd20d225fa0 R15: 00007ffcf1883ae8 [ 355.223236][T18846] [ 355.236710][ T43] audit: type=1400 audit(1788120921.777:2451): avc: denied { read append } for pid=18845 comm="syz.7.4545" name="bus" dev="9p" ino=74743313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.834337][T18885] fuse: Bad value for 'group_id' [ 355.834384][T18885] fuse: Bad value for 'group_id' [ 355.979119][T18894] cgroup: Unknown subsys name 'cpuset' [ 356.032858][T18902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18902 comm=syz.3.4558 [ 356.398469][T18930] FAULT_INJECTION: forcing a failure. [ 356.398469][T18930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.398543][T18930] CPU: 2 UID: 0 PID: 18930 Comm: syz.3.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.398559][T18930] Tainted: [L]=SOFTLOCKUP [ 356.398564][T18930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.398576][T18930] Call Trace: [ 356.398580][T18930] [ 356.398585][T18930] dump_stack_lvl+0x100/0x190 [ 356.398615][T18930] should_fail_ex.cold+0x5/0xa [ 356.398631][T18930] _copy_from_user+0x2e/0xd0 [ 356.398653][T18930] restore_altstack+0x98/0x170 [ 356.398669][T18930] ? __pfx_restore_altstack+0x10/0x10 [ 356.398685][T18930] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.398706][T18930] ? lockdep_hardirqs_on+0x7d/0x110 [ 356.398718][T18930] ? _raw_spin_unlock_irq+0x2e/0x50 [ 356.398736][T18930] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 356.398753][T18930] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 356.398774][T18930] do_syscall_64+0x123/0x790 [ 356.398788][T18930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.398800][T18930] RIP: 0033:0x7f7ff833f4d9 [ 356.398809][T18930] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 356.398820][T18930] RSP: 002b:00007f7ff9181300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 356.398831][T18930] RAX: ffffffffffffffda RBX: 00007f7ff91826c0 RCX: 00007f7ff833f4d9 [ 356.398838][T18930] RDX: 00007f7ff9181300 RSI: 00007f7ff9181430 RDI: 0000000000000021 [ 356.398845][T18930] RBP: 00007f7ff9182090 R08: 0000000000000000 R09: 0000000000000000 [ 356.398852][T18930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 356.398858][T18930] R13: 00007f7ff8626038 R14: 00007f7ff8625fa0 R15: 00007ffd2e815cf8 [ 356.398873][T18930] [ 356.517589][T18936] i2c i2c-1: Failed to register i2c client isp1301 at 0x02 (-16) [ 356.523032][T18939] netlink: 'syz.3.4566': attribute type 11 has an invalid length. [ 356.604785][T18944] FAULT_INJECTION: forcing a failure. [ 356.604785][T18944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.604843][T18944] CPU: 3 UID: 0 PID: 18944 Comm: syz.3.4568 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.604928][T18944] Tainted: [L]=SOFTLOCKUP [ 356.604937][T18944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.604945][T18944] Call Trace: [ 356.604950][T18944] [ 356.604956][T18944] dump_stack_lvl+0x100/0x190 [ 356.604978][T18944] should_fail_ex.cold+0x5/0xa [ 356.604996][T18944] _copy_from_user+0x2e/0xd0 [ 356.605014][T18944] kstrtouint_from_user+0xd6/0x1d0 [ 356.605032][T18944] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 356.605048][T18944] ? lock_acquire+0x1d1/0x380 [ 356.605064][T18944] proc_fail_nth_write+0x83/0x220 [ 356.605078][T18944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 356.605097][T18944] vfs_write+0x2aa/0x1050 [ 356.605166][T18944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 356.605181][T18944] ? lock_acquire+0x1d1/0x380 [ 356.605197][T18944] ? __fget_files+0x34/0x3d0 [ 356.605211][T18944] ? __pfx_vfs_write+0x10/0x10 [ 356.605227][T18944] ? find_held_lock+0x2b/0x80 [ 356.605243][T18944] ? __fget_files+0x215/0x3d0 [ 356.605258][T18944] ? __fget_files+0x21f/0x3d0 [ 356.605275][T18944] ksys_write+0x12a/0x250 [ 356.605286][T18944] ? __pfx_ksys_write+0x10/0x10 [ 356.605300][T18944] do_syscall_64+0x123/0x790 [ 356.605319][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.605331][T18944] RIP: 0033:0x7f7ff835e98e [ 356.605343][T18944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.605354][T18944] RSP: 002b:00007f7ff9181fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.605366][T18944] RAX: ffffffffffffffda RBX: 00007f7ff91826c0 RCX: 00007f7ff835e98e [ 356.605374][T18944] RDX: 0000000000000001 RSI: 00007f7ff91820a0 RDI: 0000000000000003 [ 356.605381][T18944] RBP: 00007f7ff9182090 R08: 0000000000000000 R09: 0000000000000000 [ 356.605388][T18944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.605394][T18944] R13: 00007f7ff8626038 R14: 00007f7ff8625fa0 R15: 00007ffd2e815cf8 [ 356.605409][T18944] [ 356.660656][T18949] cgroup: Name too long [ 356.660836][T18949] cgroup: Name too long [ 356.660955][T18949] cgroup: Name too long [ 356.661058][T18949] cgroup: Name too long [ 356.661165][T18949] cgroup: Name too long [ 356.661277][T18949] cgroup: Name too long [ 356.661378][T18949] cgroup: Name too long [ 356.661480][T18949] cgroup: Name too long [ 356.661633][T18949] cgroup: Name too long [ 356.661742][T18949] cgroup: Name too long [ 356.661846][T18949] cgroup: Name too long [ 356.661951][T18949] cgroup: Name too long [ 356.662055][T18949] cgroup: Name too long [ 356.662169][T18949] cgroup: Name too long [ 356.662273][T18949] cgroup: Name too long [ 356.662379][T18949] cgroup: Name too long [ 356.662493][T18949] cgroup: Name too long [ 356.662626][T18949] cgroup: Name too long [ 356.666010][T18949] cgroup: Name too long [ 356.666200][T18949] cgroup: Name too long [ 356.666319][T18949] cgroup: Name too long [ 356.666431][T18949] cgroup: Name too long [ 356.666544][T18949] cgroup: Name too long [ 356.666663][T18949] cgroup: Name too long [ 356.666776][T18949] cgroup: Name too long [ 356.666888][T18949] cgroup: Name too long [ 356.668185][T18949] cgroup: Name too long [ 356.668301][T18949] cgroup: Name too long [ 356.668607][T18949] cgroup: Name too long [ 356.668713][T18949] cgroup: Name too long [ 356.668815][T18949] cgroup: Name too long [ 356.668916][T18949] cgroup: Name too long [ 356.669029][T18949] cgroup: Name too long [ 356.669135][T18949] cgroup: Name too long [ 356.670390][T18949] cgroup: Name too long [ 356.670495][T18949] cgroup: Name too long [ 356.670666][T18949] cgroup: Name too long [ 356.670774][T18949] cgroup: Name too long [ 356.670943][T18949] cgroup: Name too long [ 356.671162][T18949] cgroup: Name too long [ 356.671336][T18949] cgroup: Name too long [ 356.671605][T18949] cgroup: Name too long [ 356.671784][T18949] cgroup: Name too long [ 356.671920][T18949] cgroup: Name too long [ 356.672022][T18949] cgroup: Name too long [ 356.672131][T18949] cgroup: Name too long [ 356.672232][T18949] cgroup: Name too long [ 356.672348][T18949] cgroup: Name too long [ 356.672451][T18949] cgroup: Name too long [ 356.672595][T18949] cgroup: Name too long [ 356.937496][T18899] syz.7.4557 (18899): drop_caches: 2 [ 356.987726][T18970] bridge_slave_0: left allmulticast mode [ 356.987786][T18970] bridge_slave_0: left promiscuous mode [ 356.987974][T18970] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.999679][T18970] bridge_slave_1: left allmulticast mode [ 356.999736][T18970] bridge_slave_1: left promiscuous mode [ 356.999871][T18970] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.011862][T18970] bond0: (slave bond_slave_0): Releasing backup interface [ 357.020636][T18970] bond0: (slave bond_slave_1): Releasing backup interface [ 357.038214][T18970] team0: Port device team_slave_0 removed [ 357.051860][T18970] team0: Port device team_slave_1 removed [ 357.054719][T18970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.054955][T18970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.060398][T18970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.060416][T18970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.064197][T18970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.070879][T18972] team0: Mode changed to "activebackup" [ 357.186010][T18982] loop5: detected capacity change from 0 to 7 [ 357.188501][T18982] loop5: [POWERTEC] p1 p2 [ 357.193334][T18982] loop5: p1 start 1815049829 is beyond EOD, truncated [ 357.206097][T18982] loop5: p2 size 5767168 extends beyond EOD, truncated [ 357.257913][T15593] udevd[15593]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 357.332165][T18991] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 357.357873][T18987] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.357952][T18987] overlayfs: failed to set xattr on upper [ 357.361334][T18987] overlayfs: ...falling back to redirect_dir=nofollow. [ 357.361344][T18987] overlayfs: ...falling back to index=off. [ 357.361349][T18987] overlayfs: ...falling back to uuid=null. [ 357.465627][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4579'. [ 357.866320][T11830] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 357.997623][T11830] usb 8-1: device descriptor read/64, error -71 [ 358.236417][T11830] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 358.313194][T19047] bond0: (slave syz_tun): Releasing backup interface [ 358.321390][T19047] batman_adv: batadv0: Interface deactivated: dummy0 [ 358.323684][T19047] batman_adv: batadv0: Removing interface: dummy0 [ 358.333280][T19047] bridge_slave_0: left allmulticast mode [ 358.333372][T19047] bridge_slave_0: left promiscuous mode [ 358.333648][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.341232][T19047] bridge_slave_1: left allmulticast mode [ 358.341287][T19047] bridge_slave_1: left promiscuous mode [ 358.341585][T19047] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.354129][T19047] bond3: (slave veth0_to_bond): Releasing backup interface [ 358.366038][T11830] usb 8-1: device descriptor read/64, error -71 [ 358.370419][T19047] bond0: (slave bond_slave_0): Releasing backup interface [ 358.377747][T19047] bond0: (slave bond_slave_1): Releasing backup interface [ 358.394219][T19047] team0: Port device team_slave_0 removed [ 358.401398][T19047] team0: Port device team_slave_1 removed [ 358.402205][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.402223][T19047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.405177][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.405193][T19047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.409279][T19047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.476353][T11830] usb usb8-port1: attempt power cycle [ 358.816061][T11830] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 358.837563][T11830] usb 8-1: device descriptor read/8, error -71 [ 358.961898][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 358.961982][ T43] audit: type=1400 audit(1788120925.507:2488): avc: denied { write } for pid=19065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.027661][ T43] audit: type=1400 audit(1788120925.577:2489): avc: denied { write } for pid=19068 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.076090][T11830] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 359.098956][T11830] usb 8-1: device descriptor read/8, error -71 [ 359.163605][ T43] audit: type=1400 audit(1788120925.707:2490): avc: denied { write } for pid=19072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.184899][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.188924][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.197175][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.197997][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.198424][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.206886][T11830] usb usb8-port1: unable to enumerate USB device [ 359.235752][ T43] audit: type=1400 audit(1788120925.777:2491): avc: denied { write } for pid=19077 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.390835][T19074] Failed to initialize the IGMP autojoin socket (err -2) [ 359.391824][ T43] audit: type=1400 audit(1788120925.937:2492): avc: denied { write } for pid=19086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.443455][ T43] audit: type=1400 audit(1788120925.987:2493): avc: denied { write } for pid=19091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.584537][ T43] audit: type=1400 audit(1788120926.127:2494): avc: denied { write } for pid=19097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.599908][T19074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.658996][ T43] audit: type=1400 audit(1788120926.207:2495): avc: denied { write } for pid=19100 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.730182][T19074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.799040][ T43] audit: type=1400 audit(1788120926.347:2496): avc: denied { write } for pid=19103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.838345][T19074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.869673][ T43] audit: type=1400 audit(1788120926.417:2497): avc: denied { write } for pid=19106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.919628][T19074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 360.116673][ T5584] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.126084][ T5584] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.126159][ T5584] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.126193][ T5584] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 361.151551][T19035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.155053][T19074] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 361.177852][T19074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.178691][T19074] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 361.200862][T19074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.201366][T19074] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 361.217131][T19074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.220557][T19074] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 361.227142][T19074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.242550][ T5739] Bluetooth: hci2: command tx timeout [ 361.257236][T19153] tipc: Enabled bearer , priority 0 [ 361.257633][T19153] syzkaller0: entered promiscuous mode [ 361.257644][T19153] syzkaller0: entered allmulticast mode [ 361.266077][T19153] tipc: Resetting bearer [ 361.269267][T19152] tipc: Resetting bearer [ 361.296280][T19152] tipc: Disabling bearer [ 361.319266][T19160] FAULT_INJECTION: forcing a failure. [ 361.319266][T19160] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.319332][T19160] CPU: 0 UID: 0 PID: 19160 Comm: syz.8.4594 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.319363][T19160] Tainted: [L]=SOFTLOCKUP [ 361.319370][T19160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.319378][T19160] Call Trace: [ 361.319382][T19160] [ 361.319388][T19160] dump_stack_lvl+0x100/0x190 [ 361.319410][T19160] should_fail_ex.cold+0x5/0xa [ 361.319426][T19160] ? prepare_alloc_pages+0x16d/0x5b0 [ 361.319443][T19160] should_fail_alloc_page+0xeb/0x140 [ 361.319459][T19160] prepare_alloc_pages+0x1f0/0x5b0 [ 361.319474][T19160] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 361.319494][T19160] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 361.319516][T19160] ? stack_trace_save+0x8e/0xc0 [ 361.319536][T19160] ? __pfx_stack_trace_save+0x10/0x10 [ 361.319555][T19160] ? stack_depot_save_flags+0x27/0x9f0 [ 361.319569][T19160] ? stack_depot_save_flags+0x27/0x9f0 [ 361.319584][T19160] ? kasan_save_stack+0x3f/0x50 [ 361.319597][T19160] ? kasan_save_stack+0x30/0x50 [ 361.319609][T19160] ? kasan_save_track+0x14/0x30 [ 361.319622][T19160] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.319641][T19160] ? mmu_topup_memory_caches+0xbc/0x170 [ 361.319654][T19160] ? vcpu_run+0x395d/0x5e80 [ 361.319674][T19160] ? kvm_vcpu_ioctl+0x730/0x1700 [ 361.319691][T19160] ? __x64_sys_ioctl+0x18e/0x210 [ 361.319710][T19160] ? do_syscall_64+0x123/0x790 [ 361.319723][T19160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.319750][T19160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.319766][T19160] ? policy_nodemask+0xed/0x4f0 [ 361.319783][T19160] alloc_pages_mpol+0x201/0x550 [ 361.319800][T19160] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.319816][T19160] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 361.319832][T19160] alloc_pages_noprof+0x1a/0x160 [ 361.319850][T19160] get_free_pages_noprof+0x10/0xb0 [ 361.319863][T19160] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 361.319898][T19160] mmu_topup_memory_caches+0xbc/0x170 [ 361.319916][T19160] kvm_mmu_load+0xe8/0x2580 [ 361.319931][T19160] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 361.319950][T19160] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 361.319970][T19160] ? __pfx_kvm_mmu_load+0x10/0x10 [ 361.319983][T19160] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 361.319996][T19160] ? kvm_check_and_inject_events+0x896/0x1050 [ 361.320017][T19160] vcpu_run+0x395d/0x5e80 [ 361.320031][T19160] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 361.320046][T19160] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 361.320070][T19160] ? __pfx_vcpu_run+0x10/0x10 [ 361.320087][T19160] ? lock_acquire+0x1d1/0x380 [ 361.320099][T19160] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 361.320116][T19160] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 361.320134][T19160] ? __local_bh_enable_ip+0xa5/0x120 [ 361.320150][T19160] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 361.320165][T19160] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 361.320187][T19160] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 361.320202][T19160] ? lock_acquire+0x1d1/0x380 [ 361.320215][T19160] ? do_raw_write_lock+0x11e/0x260 [ 361.320230][T19160] ? find_held_lock+0x2b/0x80 [ 361.320247][T19160] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 361.320263][T19160] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 361.320282][T19160] kvm_vcpu_ioctl+0x730/0x1700 [ 361.320301][T19160] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.320318][T19160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.320333][T19160] ? do_vfs_ioctl+0x226/0x13e0 [ 361.320352][T19160] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 361.320369][T19160] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 361.320392][T19160] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 361.320415][T19160] ? __fget_files+0x34/0x3d0 [ 361.320436][T19160] ? selinux_file_ioctl+0x13b/0x290 [ 361.320455][T19160] ? selinux_file_ioctl+0xb6/0x290 [ 361.320475][T19160] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.320492][T19160] __x64_sys_ioctl+0x18e/0x210 [ 361.320513][T19160] do_syscall_64+0x123/0x790 [ 361.320528][T19160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.320542][T19160] RIP: 0033:0x7fc907f9e159 [ 361.320553][T19160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.320565][T19160] RSP: 002b:00007fc908f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.320578][T19160] RAX: ffffffffffffffda RBX: 00007fc908225fa0 RCX: 00007fc907f9e159 [ 361.320586][T19160] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 361.320593][T19160] RBP: 00007fc908f29090 R08: 0000000000000000 R09: 0000000000000000 [ 361.320601][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.320608][T19160] R13: 00007fc908226038 R14: 00007fc908225fa0 R15: 00007ffcdeb87818 [ 361.320625][T19160] [ 361.438780][T19170] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 361.557881][T19184] gre1: entered promiscuous mode [ 361.557929][T19184] gre1: entered allmulticast mode [ 361.715330][T19197] FAULT_INJECTION: forcing a failure. [ 361.715330][T19197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.715425][T19197] CPU: 1 UID: 0 PID: 19197 Comm: syz.3.4602 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.715464][T19197] Tainted: [L]=SOFTLOCKUP [ 361.715472][T19197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.715484][T19197] Call Trace: [ 361.715491][T19197] [ 361.715498][T19197] dump_stack_lvl+0x100/0x190 [ 361.715530][T19197] should_fail_ex.cold+0x5/0xa [ 361.715553][T19197] ? prepare_alloc_pages+0x16d/0x5b0 [ 361.715578][T19197] should_fail_alloc_page+0xeb/0x140 [ 361.715600][T19197] prepare_alloc_pages+0x1f0/0x5b0 [ 361.715633][T19197] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 361.715669][T19197] ? __lock_acquire+0x4c5/0x1ec0 [ 361.715695][T19197] ? __lock_acquire+0x4c5/0x1ec0 [ 361.715715][T19197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.715745][T19197] ? unwind_next_frame+0xbd/0x2090 [ 361.715776][T19197] ? lock_acquire+0x1d1/0x380 [ 361.715794][T19197] ? is_bpf_text_address+0x25/0x1a0 [ 361.715818][T19197] ? find_held_lock+0x2b/0x80 [ 361.715857][T19197] ? is_bpf_text_address+0x8a/0x1a0 [ 361.715881][T19197] ? is_bpf_text_address+0x8a/0x1a0 [ 361.715906][T19197] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 361.715937][T19197] ? is_bpf_text_address+0x94/0x1a0 [ 361.715960][T19197] ? kernel_text_address+0x8d/0x100 [ 361.715986][T19197] ? is_bpf_text_address+0x8a/0x1a0 [ 361.716010][T19197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.716033][T19197] ? policy_nodemask+0xed/0x4f0 [ 361.716059][T19197] alloc_pages_mpol+0x201/0x550 [ 361.716084][T19197] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.716108][T19197] ? lock_acquire+0x1d1/0x380 [ 361.716125][T19197] ? copy_page_range+0x2f51/0x57c0 [ 361.716153][T19197] alloc_pages_noprof+0x1a/0x160 [ 361.716179][T19197] __pud_alloc+0x3b/0x690 [ 361.716203][T19197] copy_page_range+0x3d53/0x57c0 [ 361.716244][T19197] ? find_held_lock+0x2b/0x80 [ 361.716272][T19197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.716294][T19197] ? mas_wr_walk_descend+0x506/0xac0 [ 361.716326][T19197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.716347][T19197] ? __pfx_copy_page_range+0x10/0x10 [ 361.716371][T19197] ? mas_wr_store_entry+0xa4/0x1d50 [ 361.716403][T19197] ? mas_store+0x745/0xe20 [ 361.716436][T19197] ? __pfx___vma_start_write+0x10/0x10 [ 361.716468][T19197] dup_mmap+0x1230/0x2370 [ 361.716502][T19197] ? __pfx_dup_mmap+0x10/0x10 [ 361.716522][T19197] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 361.716554][T19197] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 361.716588][T19197] ? __lock_acquire+0x4c5/0x1ec0 [ 361.716623][T19197] ? lock_acquire+0x1d1/0x380 [ 361.716641][T19197] ? copy_process+0x4806/0x8370 [ 361.716674][T19197] copy_process+0x4811/0x8370 [ 361.716711][T19197] ? __pfx_copy_process+0x10/0x10 [ 361.716732][T19197] ? find_held_lock+0x2b/0x80 [ 361.716768][T19197] kernel_clone+0x176/0x9d0 [ 361.716788][T19197] ? find_held_lock+0x2b/0x80 [ 361.716813][T19197] ? __pfx_kernel_clone+0x10/0x10 [ 361.716840][T19197] ? ksys_write+0x190/0x250 [ 361.716858][T19197] ? lock_acquire+0x1d1/0x380 [ 361.716882][T19197] __do_sys_clone+0xd9/0x120 [ 361.716902][T19197] ? __pfx___do_sys_clone+0x10/0x10 [ 361.716921][T19197] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 361.716954][T19197] ? ksys_write+0x1ac/0x250 [ 361.716971][T19197] ? __pfx_ksys_write+0x10/0x10 [ 361.716997][T19197] do_syscall_64+0x123/0x790 [ 361.717021][T19197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.717040][T19197] RIP: 0033:0x7f7ff839e159 [ 361.717057][T19197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.717074][T19197] RSP: 002b:00007f7ff9181fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 361.717093][T19197] RAX: ffffffffffffffda RBX: 00007f7ff8625fa0 RCX: 00007f7ff839e159 [ 361.717105][T19197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 361.717116][T19197] RBP: 00007f7ff9182090 R08: 0000000000000000 R09: 0000000000000000 [ 361.717127][T19197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 361.717138][T19197] R13: 00007f7ff8626038 R14: 00007f7ff8625fa0 R15: 00007ffd2e815cf8 [ 361.717165][T19197] [ 361.844878][T19074] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 361.846720][T19074] wireguard: wg0: Could not create IPv4 socket [ 361.847971][T19074] wireguard: wg1: Could not create IPv4 socket [ 361.849057][T19074] wireguard: wg2: Could not create IPv4 socket [ 361.897403][ T5739] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 361.950526][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4605'. [ 361.950622][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4605'. [ 361.969610][T19210] bond2: option xmit_hash_policy: invalid value (6) [ 361.974881][T19210] bond2 (unregistering): Released all slaves [ 362.053068][ T850] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 362.141544][T19215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 362.221121][ T850] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.222090][ T850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 362.222121][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 362.222141][ T850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.222160][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 362.222178][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 362.223074][ T850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 362.223109][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 362.223130][ T850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.223152][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 362.223174][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 362.224142][ T850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 362.224176][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 362.224198][ T850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.224218][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 362.224238][ T850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 362.229470][ T850] usb 8-1: string descriptor 0 read error: -22 [ 362.229574][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.281135][ T850] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 362.473857][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4612'. [ 363.801047][ T5739] Bluetooth: hci0: unexpected subevent 0x0c length: 30 > 5 [ 364.173018][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 364.173109][ T43] audit: type=1400 audit(364.082:2525): avc: denied { write } for pid=19353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.238411][ T43] audit: type=1400 audit(364.152:2526): avc: denied { write } for pid=19360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.334416][T19366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19366 comm=syz.8.4630 [ 364.341676][ T43] audit: type=1400 audit(364.262:2527): avc: denied { mounton } for pid=19365 comm="syz.8.4630" path="/proc/612/task" dev="proc" ino=75968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 364.427354][ T43] audit: type=1400 audit(364.342:2528): avc: denied { write } for pid=19370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.486055][ T43] audit: type=1400 audit(364.392:2529): avc: denied { write } for pid=19373 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.639923][ T43] audit: type=1400 audit(364.552:2530): avc: denied { write } for pid=19385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.693921][ T43] audit: type=1400 audit(364.602:2531): avc: denied { write } for pid=19390 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.752804][T19398] lo: entered allmulticast mode [ 364.753564][T19398] bond0: entered allmulticast mode [ 364.753584][T19398] bond_slave_0: entered allmulticast mode [ 364.753601][T19398] bond_slave_1: entered allmulticast mode [ 364.754240][T19398] dummy0: entered allmulticast mode [ 364.754730][T19398] eql: entered allmulticast mode [ 364.755017][T19398] ifb0: entered allmulticast mode [ 364.755426][T19398] ifb1: entered allmulticast mode [ 364.763159][T19398] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 364.763907][T19398] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 364.764959][T19398] hwsim0: entered allmulticast mode [ 364.765120][T19398] ieee802154 phy0 wpan0: entered allmulticast mode [ 364.765374][T19398] ieee802154 phy1 wpan1: entered allmulticast mode [ 364.765629][T19398] teql0: entered allmulticast mode [ 364.765775][T19398] tunl0: entered allmulticast mode [ 364.768308][T19398] gre0: entered allmulticast mode [ 364.768845][T19398] gretap0: entered allmulticast mode [ 364.769406][T19398] erspan0: entered allmulticast mode [ 364.770045][T19398] ip_vti0: entered allmulticast mode [ 364.770515][T19398] ip6_vti0: entered allmulticast mode [ 364.770776][T19398] sit0: entered allmulticast mode [ 364.771050][T19398] ip6tnl0: entered allmulticast mode [ 364.771307][T19398] ip6gre0: entered allmulticast mode [ 364.771605][T19398] lapb0: entered allmulticast mode [ 364.772210][T19398] lapb1: entered allmulticast mode [ 364.773086][T19398] lapb2: entered allmulticast mode [ 364.773447][T19398] lapb3: entered allmulticast mode [ 364.773845][T19398] lapb5: entered allmulticast mode [ 364.774127][T19398] lapb6: entered allmulticast mode [ 364.774691][T19398] lowpan0: entered allmulticast mode [ 364.774854][T19398] netdevsim netdevsim0 eth1: entered allmulticast mode [ 364.775374][T19398] netdevsim netdevsim0 eth2: entered allmulticast mode [ 364.776932][T19398] netdevsim netdevsim0 eth3: entered allmulticast mode [ 364.777457][T19398] netdevsim netdevsim0 eth4: entered allmulticast mode [ 364.777858][T19398] lapb4: entered allmulticast mode [ 364.779867][T19398] ieee802154 phy1 wpan4: entered allmulticast mode [ 364.779954][T19398] netdevsim netdevsim10 eth9: entered allmulticast mode [ 364.787433][T19398] lapb7: entered allmulticast mode [ 364.787651][T19398] netdevsim netdevsim6 eth10: entered allmulticast mode [ 364.788073][T19398] netdevsim netdevsim6 eth11: entered allmulticast mode [ 364.788471][T19398] netdevsim netdevsim6 eth12: entered allmulticast mode [ 364.788812][T19398] netdevsim netdevsim6 eth13: entered allmulticast mode [ 364.789143][T19398] syzkaller0: entered allmulticast mode [ 364.789448][T19398] ip6gretap0: entered allmulticast mode [ 364.789680][T19398] bridge0: entered allmulticast mode [ 364.789893][T19398] vcan0: entered allmulticast mode [ 364.790193][T19398] team0: entered allmulticast mode [ 364.790202][T19398] team_slave_0: entered allmulticast mode [ 364.790211][T19398] team_slave_1: entered allmulticast mode [ 364.790484][T19398] nlmon0: entered allmulticast mode [ 364.790682][T19398] batadv0: entered allmulticast mode [ 364.790960][T19398] vxcan0: entered allmulticast mode [ 364.791180][T19398] vxcan1: entered allmulticast mode [ 364.791375][T19398] veth0: entered allmulticast mode [ 364.791582][T19398] veth1: entered allmulticast mode [ 364.791787][T19398] wg0: entered allmulticast mode [ 364.791855][T19398] wg1: entered allmulticast mode [ 364.791916][T19398] wg2: entered allmulticast mode [ 364.792034][T19398] veth0_to_bridge: entered allmulticast mode [ 364.792745][T19398] veth1_to_bridge: entered allmulticast mode [ 364.793231][T19398] veth0_to_bond: entered allmulticast mode [ 364.793634][T19398] veth1_to_bond: entered allmulticast mode [ 364.794033][T19398] lapb9: entered allmulticast mode [ 364.794087][T19398] lapb10: entered allmulticast mode [ 364.794134][T19398] veth0_to_team: entered allmulticast mode [ 364.794586][T19398] veth1_to_team: entered allmulticast mode [ 364.795075][T19398] lapb11: entered allmulticast mode [ 364.795120][T19398] lapb12: entered allmulticast mode [ 364.795164][T19398] veth0_to_batadv: entered allmulticast mode [ 364.795373][T19398] batadv_slave_0: entered allmulticast mode [ 364.795576][T19398] veth1_to_batadv: entered allmulticast mode [ 364.796486][T19398] batadv_slave_1: entered allmulticast mode [ 364.796723][T19398] xfrm0: entered allmulticast mode [ 364.796931][T19398] lapb13: entered allmulticast mode [ 364.796975][T19398] lapb14: entered allmulticast mode [ 364.797020][T19398] veth0_to_hsr: entered allmulticast mode [ 364.797307][T19398] hsr_slave_0: entered allmulticast mode [ 364.797520][T19398] veth1_to_hsr: entered allmulticast mode [ 364.797739][T19398] hsr_slave_1: entered allmulticast mode [ 364.797950][T19398] hsr0: entered allmulticast mode [ 364.798278][T19398] lapb15: entered allmulticast mode [ 364.798328][T19398] lapb16: entered allmulticast mode [ 364.798371][T19398] veth1_virt_wifi: entered allmulticast mode [ 364.798577][T19398] veth0_virt_wifi: entered allmulticast mode [ 364.798786][T19398] virt_wifi0: entered allmulticast mode [ 364.798849][T19398] veth1_vlan: entered allmulticast mode [ 364.799077][T19398] veth0_vlan: entered allmulticast mode [ 364.799346][T19398] vlan0: entered allmulticast mode [ 364.799566][T19398] vlan1: entered allmulticast mode [ 364.799797][T19398] macvlan1: entered allmulticast mode [ 364.800008][T19398] ipvlan0: entered allmulticast mode [ 364.800160][T19398] ipvlan1: entered allmulticast mode [ 364.800227][T19398] veth1_macvtap: entered allmulticast mode [ 364.800434][T19398] veth0_macvtap: entered allmulticast mode [ 364.800656][T19398] macvtap0: entered allmulticast mode [ 364.800878][T19398] macsec0: entered allmulticast mode [ 364.801061][T19398] geneve1: entered allmulticast mode [ 364.801126][T19398] lapb17: entered allmulticast mode [ 364.801172][T19398] lapb18: entered allmulticast mode [ 364.801215][T19398] lapb19: entered allmulticast mode [ 364.801259][T19398] lapb20: entered allmulticast mode [ 364.801302][T19398] lapb21: entered allmulticast mode [ 364.801348][T19398] lapb22: entered allmulticast mode [ 364.801391][T19398] lapb23: entered allmulticast mode [ 364.801433][T19398] lapb24: entered allmulticast mode [ 364.801477][T19398] lapb25: entered allmulticast mode [ 364.801521][T19398] lapb26: entered allmulticast mode [ 364.801564][T19398] lapb27: entered allmulticast mode [ 364.801609][T19398] lapb28: entered allmulticast mode [ 364.801657][T19398] lapb29: entered allmulticast mode [ 364.801701][T19398] lapb30: entered allmulticast mode [ 364.801744][T19398] lapb31: entered allmulticast mode [ 364.801791][T19398] lapb32: entered allmulticast mode [ 364.801834][T19398] lapb33: entered allmulticast mode [ 364.801878][T19398] lapb34: entered allmulticast mode [ 364.801921][T19398] lapb35: entered allmulticast mode [ 364.801965][T19398] lapb36: entered allmulticast mode [ 364.802008][T19398] lapb37: entered allmulticast mode [ 364.802053][T19398] lapb38: entered allmulticast mode [ 364.802097][T19398] lapb39: entered allmulticast mode [ 364.802141][T19398] lapb40: entered allmulticast mode [ 364.802185][T19398] lapb41: entered allmulticast mode [ 364.802229][T19398] lapb42: entered allmulticast mode [ 364.802311][T19398] lapb43: entered allmulticast mode [ 364.802357][T19398] lapb44: entered allmulticast mode [ 364.802401][T19398] lapb45: entered allmulticast mode [ 364.802446][T19398] lapb46: entered allmulticast mode [ 364.802507][T19398] lapb47: entered allmulticast mode [ 364.802551][T19398] lapb48: entered allmulticast mode [ 364.802597][T19398] mac80211_hwsim hwsim26 wlan2: entered allmulticast mode [ 364.804155][T19401] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4637'. [ 364.810877][T19398] lapb8: entered allmulticast mode [ 364.811018][T19398] veth2: entered allmulticast mode [ 364.811153][T19398] veth3: entered allmulticast mode [ 364.811285][T19398] mac80211_hwsim hwsim27 wlan3: entered allmulticast mode [ 364.811418][T19398] veth4: entered allmulticast mode [ 364.811561][T19398] veth5: entered allmulticast mode [ 364.811696][T19398] mac80211_hwsim hwsim28 wlan4: entered allmulticast mode [ 364.811830][T19398] veth6: entered allmulticast mode [ 364.812018][T19398] veth7: entered allmulticast mode [ 364.812184][T19398] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 364.812827][T19398] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 364.813272][T19398] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 364.813580][T19398] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 364.814062][T19398] mac80211_hwsim hwsim29 wlan5: entered allmulticast mode [ 364.832036][ T43] audit: type=1400 audit(364.742:2532): avc: denied { write } for pid=19399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.916718][ T43] audit: type=1400 audit(364.802:2533): avc: denied { write } for pid=19405 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.919976][ T43] audit: type=1400 audit(364.832:2534): avc: denied { read } for pid=19407 comm="syz.7.4639" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 364.982122][ T5739] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 365.749411][T19408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.749668][T19408] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.758278][T19408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.758391][T19408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 365.764254][T19408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 366.158550][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.164896][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.172606][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.179333][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.190254][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.247085][T19457] syz.7.4646 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 366.287614][T19463] FAULT_INJECTION: forcing a failure. [ 366.287614][T19463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.287664][T19463] CPU: 2 UID: 0 PID: 19463 Comm: syz.7.4649 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.287692][T19463] Tainted: [L]=SOFTLOCKUP [ 366.287698][T19463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.287705][T19463] Call Trace: [ 366.287709][T19463] [ 366.287714][T19463] dump_stack_lvl+0x100/0x190 [ 366.287734][T19463] should_fail_ex.cold+0x5/0xa [ 366.287751][T19463] _copy_from_user+0x2e/0xd0 [ 366.287769][T19463] kstrtouint_from_user+0xd6/0x1d0 [ 366.287782][T19463] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 366.287798][T19463] ? lock_acquire+0x1d1/0x380 [ 366.287813][T19463] proc_fail_nth_write+0x83/0x220 [ 366.287827][T19463] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.287844][T19463] vfs_write+0x2aa/0x1050 [ 366.287862][T19463] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.287875][T19463] ? lock_acquire+0x1d1/0x380 [ 366.287886][T19463] ? __fget_files+0x34/0x3d0 [ 366.287898][T19463] ? __pfx_vfs_write+0x10/0x10 [ 366.287914][T19463] ? find_held_lock+0x2b/0x80 [ 366.287929][T19463] ? __fget_files+0x215/0x3d0 [ 366.287945][T19463] ? __fget_files+0x21f/0x3d0 [ 366.287961][T19463] ksys_write+0x12a/0x250 [ 366.287971][T19463] ? __pfx_ksys_write+0x10/0x10 [ 366.287986][T19463] do_syscall_64+0x123/0x790 [ 366.288000][T19463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.288012][T19463] RIP: 0033:0x7fd20cf5e98e [ 366.288022][T19463] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.288034][T19463] RSP: 002b:00007fd20de27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.288045][T19463] RAX: ffffffffffffffda RBX: 00007fd20de286c0 RCX: 00007fd20cf5e98e [ 366.288052][T19463] RDX: 0000000000000001 RSI: 00007fd20de280a0 RDI: 0000000000000003 [ 366.288070][T19463] RBP: 00007fd20de28090 R08: 0000000000000000 R09: 0000000000000000 [ 366.288080][T19463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.288088][T19463] R13: 00007fd20d226038 R14: 00007fd20d225fa0 R15: 00007ffcf1883ae8 [ 366.288111][T19463] [ 366.404463][ T5739] Bluetooth: hci0: Malformed LE Event: 0x0b [ 366.502035][T19451] Failed to initialize the IGMP autojoin socket (err -2) [ 366.601755][ T42] usb 8-1: USB disconnect, device number 16 [ 366.738456][T19451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.852370][T19451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.933863][T19451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.015426][T19451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.076041][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 367.276514][ T5584] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.276601][ T5584] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.276675][ T5584] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.276701][ T5584] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.393963][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4659'. [ 367.394082][T19500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.398780][T19500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.614849][ T5739] Bluetooth: hci0: Malformed LE Event: 0x0b [ 367.796130][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.829478][T19515] jffs2: notice: (19515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 367.949882][T19514] pim6reg1: entered promiscuous mode [ 367.949940][T19514] pim6reg1: entered allmulticast mode [ 368.286174][ T5739] Bluetooth: hci2: command tx timeout [ 369.156083][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 369.348232][T19469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.365984][T19451] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 369.384492][T19451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.385799][T19451] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 369.414754][T19451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.424015][T19451] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 369.439736][T19451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.443910][T19451] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 369.459576][T19537] fuse: blksize only supported for fuseblk [ 369.459861][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 369.459870][ T43] audit: type=1400 audit(369.372:2552): avc: denied { mounton } for pid=19535 comm="syz.3.4669" path="/syzcgroup/cpu/syz3/test/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 369.476617][T19451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.518483][T19549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4672'. [ 369.614975][ T5739] Bluetooth: hci0: Malformed LE Event: 0x0b [ 369.859574][ T43] audit: type=1400 audit(369.772:2553): avc: denied { write } for pid=19600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.876418][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.892530][T19609] iommufd_mock iommufd_mock0: Adding to iommu group 2 [ 369.940180][ T43] audit: type=1400 audit(369.852:2554): avc: denied { write } for pid=19611 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.010811][T19621] kvm: user requested TSC rate below hardware speed [ 370.014362][T19621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 370.017246][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4679'. [ 370.017259][T19621] netlink: 46 bytes leftover after parsing attributes in process `syz.3.4679'. [ 370.027543][T19632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 370.032661][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4679'. [ 370.032679][T19631] netlink: 46 bytes leftover after parsing attributes in process `syz.3.4679'. [ 370.045804][ T43] audit: type=1400 audit(369.962:2555): avc: denied { getopt } for pid=19623 comm="syz.8.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 370.048515][T19627] FAULT_INJECTION: forcing a failure. [ 370.048515][T19627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.048536][T19627] CPU: 2 UID: 0 PID: 19627 Comm: syz.7.4682 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.048552][T19627] Tainted: [L]=SOFTLOCKUP [ 370.048556][T19627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.048563][T19627] Call Trace: [ 370.048567][T19627] [ 370.048572][T19627] dump_stack_lvl+0x100/0x190 [ 370.048592][T19627] should_fail_ex.cold+0x5/0xa [ 370.048606][T19627] ? prepare_alloc_pages+0x16d/0x5b0 [ 370.048621][T19627] should_fail_alloc_page+0xeb/0x140 [ 370.048636][T19627] prepare_alloc_pages+0x1f0/0x5b0 [ 370.048649][T19627] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 370.048667][T19627] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 370.048686][T19627] ? stack_trace_save+0x8e/0xc0 [ 370.048703][T19627] ? __pfx_stack_trace_save+0x10/0x10 [ 370.048721][T19627] ? stack_depot_save_flags+0x27/0x9f0 [ 370.048734][T19627] ? stack_depot_save_flags+0x27/0x9f0 [ 370.048747][T19627] ? kasan_save_stack+0x3f/0x50 [ 370.048758][T19627] ? kasan_save_stack+0x30/0x50 [ 370.048769][T19627] ? kasan_save_track+0x14/0x30 [ 370.048781][T19627] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.048797][T19627] ? mmu_topup_memory_caches+0xbc/0x170 [ 370.048810][T19627] ? vcpu_run+0x395d/0x5e80 [ 370.048822][T19627] ? kvm_vcpu_ioctl+0x730/0x1700 [ 370.048836][T19627] ? __x64_sys_ioctl+0x18e/0x210 [ 370.048853][T19627] ? do_syscall_64+0x123/0x790 [ 370.048865][T19627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.048889][T19627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.048902][T19627] ? policy_nodemask+0xed/0x4f0 [ 370.048918][T19627] alloc_pages_mpol+0x201/0x550 [ 370.048932][T19627] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.048946][T19627] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 370.048962][T19627] alloc_pages_noprof+0x1a/0x160 [ 370.048989][T19627] get_free_pages_noprof+0x10/0xb0 [ 370.049004][T19627] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 370.049024][T19627] mmu_topup_memory_caches+0xbc/0x170 [ 370.049037][T19627] kvm_mmu_load+0xe8/0x2580 [ 370.049050][T19627] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 370.049067][T19627] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 370.049085][T19627] ? __pfx_kvm_mmu_load+0x10/0x10 [ 370.049096][T19627] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 370.049108][T19627] ? kvm_check_and_inject_events+0x896/0x1050 [ 370.049123][T19627] vcpu_run+0x395d/0x5e80 [ 370.049135][T19627] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 370.049149][T19627] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 370.049169][T19627] ? __pfx_vcpu_run+0x10/0x10 [ 370.049184][T19627] ? lock_acquire+0x1d1/0x380 [ 370.049195][T19627] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 370.049210][T19627] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 370.049226][T19627] ? __local_bh_enable_ip+0xa5/0x120 [ 370.049240][T19627] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 370.049253][T19627] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 370.049270][T19627] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 370.049283][T19627] ? lock_acquire+0x1d1/0x380 [ 370.049294][T19627] ? do_raw_write_lock+0x11e/0x260 [ 370.049308][T19627] ? find_held_lock+0x2b/0x80 [ 370.049322][T19627] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 370.049336][T19627] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 370.049354][T19627] kvm_vcpu_ioctl+0x730/0x1700 [ 370.049371][T19627] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 370.049386][T19627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.049399][T19627] ? do_vfs_ioctl+0x226/0x13e0 [ 370.049416][T19627] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 370.049432][T19627] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 370.049452][T19627] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 370.049476][T19627] ? __fget_files+0x34/0x3d0 [ 370.049495][T19627] ? selinux_file_ioctl+0x13b/0x290 [ 370.049512][T19627] ? selinux_file_ioctl+0xb6/0x290 [ 370.049529][T19627] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 370.049545][T19627] __x64_sys_ioctl+0x18e/0x210 [ 370.049563][T19627] do_syscall_64+0x123/0x790 [ 370.049577][T19627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.049588][T19627] RIP: 0033:0x7fd20cf9e159 [ 370.049598][T19627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.049609][T19627] RSP: 002b:00007fd20de28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.049621][T19627] RAX: ffffffffffffffda RBX: 00007fd20d225fa0 RCX: 00007fd20cf9e159 [ 370.049628][T19627] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 370.049635][T19627] RBP: 00007fd20de28090 R08: 0000000000000000 R09: 0000000000000000 [ 370.049641][T19627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.049648][T19627] R13: 00007fd20d226038 R14: 00007fd20d225fa0 R15: 00007ffcf1883ae8 [ 370.049663][T19627] [ 370.051026][ T43] audit: type=1400 audit(369.962:2556): avc: denied { getopt } for pid=19623 comm="syz.8.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.157456][T19451] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 370.159649][T19451] wireguard: wg0: Could not create IPv4 socket [ 370.163215][T19451] wireguard: wg1: Could not create IPv4 socket [ 370.164703][T19451] wireguard: wg2: Could not create IPv4 socket [ 370.751144][ T43] audit: type=1400 audit(370.662:2557): avc: denied { write } for pid=19654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.831426][ T43] audit: type=1400 audit(370.742:2558): avc: denied { write } for pid=19657 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.944249][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4690'. [ 370.997881][ T43] audit: type=1400 audit(370.912:2559): avc: denied { write } for pid=19660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.072094][ T43] audit: type=1400 audit(370.982:2560): avc: denied { write } for pid=19667 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.234519][ T43] audit: type=1400 audit(371.142:2561): avc: denied { write } for pid=19670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.308951][T19689] input: syz0 as /devices/virtual/input/input15 [ 371.317795][T19689] jffs2: notice: (19689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 371.475369][T19699] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] SMP KASAN NOPTI [ 371.480260][T19699] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.483473][T19699] CPU: 2 UID: 0 PID: 19699 Comm: syz.7.4701 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.488005][T19699] Tainted: [L]=SOFTLOCKUP [ 371.489629][T19699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.493988][T19699] RIP: 0010:rebind_store+0x147/0x2d0 [ 371.495923][T19699] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 371.503129][T19699] RSP: 0018:ffffc9000340fc38 EFLAGS: 00010206 [ 371.505182][T19699] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 371.508470][T19699] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 371.511100][T19699] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 371.514862][T19699] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 371.517906][T19699] R13: ffff888061260bc0 R14: 0000000000000000 R15: ffff88802c36f000 [ 371.520915][T19699] FS: 00007fd20de286c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 371.524856][T19699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.526947][T19699] CR2: 0000200000005000 CR3: 0000000013c4b000 CR4: 0000000000352ef0 [ 371.530113][T19699] Call Trace: [ 371.531313][T19699] [ 371.532224][T19699] ? __pfx_rebind_store+0x10/0x10 [ 371.534064][T19699] drv_attr_store+0x74/0xb0 [ 371.535999][T19699] ? __pfx_drv_attr_store+0x10/0x10 [ 371.537906][T19699] sysfs_kf_write+0xf2/0x150 [ 371.539367][T19699] kernfs_fop_write_iter+0x3e0/0x5f0 [ 371.541474][T19699] ? __pfx_sysfs_kf_write+0x10/0x10 [ 371.543570][T19699] vfs_write+0x6af/0x1050 [ 371.544904][T19699] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 371.546924][T19699] ? __pfx_vfs_write+0x10/0x10 [ 371.548812][T19699] ? find_held_lock+0x2b/0x80 [ 371.550768][T19699] ksys_write+0x12a/0x250 [ 371.552259][T19699] ? __pfx_ksys_write+0x10/0x10 [ 371.554454][T19699] do_syscall_64+0x123/0x790 [ 371.556337][T19699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.558560][T19699] RIP: 0033:0x7fd20cf9e159 [ 371.559924][T19699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.566971][T19699] RSP: 002b:00007fd20de28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.570199][T19699] RAX: ffffffffffffffda RBX: 00007fd20d225fa0 RCX: 00007fd20cf9e159 [ 371.573053][T19699] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000004 [ 371.576320][T19699] RBP: 00007fd20d035024 R08: 0000000000000000 R09: 0000000000000000 [ 371.579027][T19699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.582262][T19699] R13: 00007fd20d226038 R14: 00007fd20d225fa0 R15: 00007ffcf1883ae8 [ 371.585034][T19699] [ 371.586013][T19699] Modules linked in: [ 371.588209][T19699] ---[ end trace 0000000000000000 ]--- [ 371. ** replaying previous printk message ** [ 371.596110][T19699] RIP: 0010:rebind_store+0x147/0x2d0 [ 371.596183][T19699] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 371.596606][T19699] RSP: 0018:ffffc9000340fc38 EFLAGS: 00010206 [ 371.596624][T19699] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 371.596635][T19699] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 371.596645][T19699] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 371.596656][T19699] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 371.596667][T19699] R13: ffff888061260bc0 R14: 0000000000000000 R15: ffff88802c36f000 [ 371.596693][T19699] FS: 00007fd20de286c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 371.596726][T19699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.596739][T19699] CR2: 00007fd20cfeb840 CR3: 0000000013c4b000 CR4: 0000000000352ef0 [ 371.596754][T19699] Kernel panic - not syncing: Fatal exception [ 371.639669][T19699] Kernel Offset: disabled [ 371.641426][T19699] Rebooting in 86400 seconds..